{"resultsPerPage":5778,"startIndex":0,"totalResults":5778,"format":"NVD_CVE","version":"2.0","timestamp":"2025-11-04T22:15:52.483","vulnerabilities":[{"cve":{"id":"CVE-1999-1593","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server.  NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable."},{"lang":"es","value":"Windows Internet Naming Service (WINS), permite atacantes remotos provocar una denegación de servicio (pérdida de conexión) o el robo de credenciales a través de una inscripción 1Ch que hace que WINS se cambie de controlador de dominio para apuntar a un servidor  malicioso. NOTA: este problema puede estar limitado cuando se usan clientes Windows 95/98, o si el primer controlador de dominio no está disponible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:-:*:*:*:*:*:*:*","matchCriteriaId":"31B44B93-D27B-4F6A-B3D4-9FF95AD8287E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*","matchCriteriaId":"40FC681A-7B85-4495-8DCC-C459FE7E2F13"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0264.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0269.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0271.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0274.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0276.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0289.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0298.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/2221","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www2.sans.org/reading_room/whitepapers/win2k/185.php","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0269.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0274.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0276.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0289.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Jan/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/2221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www2.sans.org/reading_room/whitepapers/win2k/185.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]}]}},{"cve":{"id":"CVE-2002-2427","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via \"an extra slash in a URL,\" a different vulnerability than CVE-2002-1603."},{"lang":"es","value":"The security handler en GoAhead WebServer anterior a v2.1.1 permite a atacantes remotos evitar la autenticación y obtener aaceso a contenido web protegido a través de \"un caracter extra en una URL\", una vulnerabilidad diferente a CVE-2002-1603."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"8D7D18D0-A8D4-4C2F-8B46-9952BCD8D1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#security-features-can-be-bypassed-by-adding-an-extra-slash-in-the-url-bug01518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/124059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#security-features-can-be-bypassed-by-adding-an-extra-slash-in-the-url-bug01518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/124059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2002-2428","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data."},{"lang":"es","value":"webs.c en GoAhead WebServer anterior a v2.1.4 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída del demonio) a través de una petición HTTP POST que contiene una cabecera Content-Length pero no datos del cuerpo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"04F9AC93-B27F-4153-AD04-E54F06AF5334"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"588A7477-B234-43C9-80AD-4AADC76F982C"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FC0AB3F-B4A7-4D6B-B4CF-4024EAA59DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E68CF71-3251-406E-BC0D-079510EDDFFC"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c","source":"cve@mitre.org"},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2429","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header."},{"lang":"es","value":"webs.c en GoAhead WebServer anterior a v2.1.4 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una petición HTTP POST que contiene un entero negativo en la cabecera Content-Length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"04F9AC93-B27F-4153-AD04-E54F06AF5334"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"588A7477-B234-43C9-80AD-4AADC76F982C"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FC0AB3F-B4A7-4D6B-B4CF-4024EAA59DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E68CF71-3251-406E-BC0D-079510EDDFFC"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c","source":"cve@mitre.org"},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2430","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server."},{"lang":"es","value":"GoAhead WebServer anterior a v2.1.1 permite a actacantes remotos provocar una denegación de servicio (consumo de CPU)implicando una desconexión de socket que finalizará una petición antes de que ésta haya sido totalmente procesada por el servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"8D7D18D0-A8D4-4C2F-8B46-9952BCD8D1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#cpu-utilization-hangs-at-100-on-a-socket-disconnect-bug01865","source":"cve@mitre.org"},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#cpu-utilization-hangs-at-100-on-a-socket-disconnect-bug01865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2431","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause \"incorrect behavior\" via unknown \"malicious code,\" related to incorrect use of the socketInputBuffered function by sockGen.c."},{"lang":"es","value":"Vulnerabilidad sin especificar en GoAhead WebServer anterior a v2.1.4 permite a atacantes remotos provocar \"funcionamiento incorrecto\" a través de \"código malicioso\" desconocido, relacionado con el uso incorrecto de la función \"socketInputBuffered\" en sockGen.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"04F9AC93-B27F-4153-AD04-E54F06AF5334"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"588A7477-B234-43C9-80AD-4AADC76F982C"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FC0AB3F-B4A7-4D6B-B4CF-4024EAA59DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E68CF71-3251-406E-BC0D-079510EDDFFC"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c","source":"cve@mitre.org"},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1566","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection."},{"lang":"es","value":"Microsoft Internet Information Services (IIS)  v5.0 no registra las peticiones que usan el método TRACK, lo que permite a atacantes remotos obtener información sensible sin ser detectados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.aqtronix.com/Advisories/AQ-2003-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4864","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9313","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14077","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.aqtronix.com/Advisories/AQ-2003-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1567","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE."},{"lang":"es","value":"El método no documentado TRACK en Microsoft Internet Information Services (IIS) v5.0 devuelve el contenido de la petición original en el cuerpo de la respuesta, lo que facilita a atacantes remotos el robo de cookies y credenciales de autenticación, o evitar el mecanismo de protección HttpOnly, usando TRAK para leer los contenidos de las cabeceras HTTP que se devuelven en la respuesta. Una técnica similar al rastreo de sitios cruzados (XST) usando HTTP TRACE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.aqtronix.com/Advisories/AQ-2003-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/288308","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5648","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.aqtronix.com/Advisories/AQ-2003-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/288308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2003-1568","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function."},{"lang":"es","value":"GoAhead WebServer anterior a v2.1.6 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo o caída de demonio) a través de una URL invalida, relacionada con la función websSafeUrl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"588A7477-B234-43C9-80AD-4AADC76F982C"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FC0AB3F-B4A7-4D6B-B4CF-4024EAA59DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E68CF71-3251-406E-BC0D-079510EDDFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.5","matchCriteriaId":"147A9799-1175-44BB-924E-0A3A966371BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B147EAF-E6A0-4D0C-8C27-BA27F844A816"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B729D721-2FD3-4522-8CB3-526B7454D124"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#null-pointer-crash-in-webssafeurl","source":"cve@mitre.org"},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#null-pointer-crash-in-webssafeurl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1569","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385."},{"lang":"es","value":"GoAhead WebServer anterior a v2.1.5 en Windows 95, 98, and ME permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una petición HTTP con un nombre de dispositivo en un componente de ruta\r\n1) con, (2) nul, (3) clock$, o (4) config$, vector diferente que CVE-2001-0385."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.4","matchCriteriaId":"F5C13905-73EB-4DA1-AE70-258D9B8876AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3111BC75-62C7-4710-99A6-258F6A07E8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"588A7477-B234-43C9-80AD-4AADC76F982C"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FC0AB3F-B4A7-4D6B-B4CF-4024EAA59DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7E68CF71-3251-406E-BC0D-079510EDDFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead:goahead_webserver:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CBCE3FBE-F422-42B7-9FBA-A82E208306FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_98:*:*:*:*:*:*:*:*","matchCriteriaId":"AD1B68C0-2676-4F21-8EF0-1749103CB8C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"}]}]}],"references":[{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#windows-95-98-me-aux-denial-of-service","source":"cve@mitre.org"},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#windows-95-98-me-aux-denial-of-service","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1570","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:44.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to \"session exposure.\""},{"lang":"es","value":"El servidor en IBM Tivoli Storage Manager (TSM) v5.1.x, v5.2.x anteriores a v5.2.1.2, y v6.x anteriores a v6.1, no requiere credenciales para ver la consola del servidor en algunas circunstancias, lo que permite a administradores autenticados en remoto monitorizar las operaciones del servidor estableciendo una sesión en modo consola, relativo a una \"exposición de sesión\". \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC7FD0D2-E106-4152-AF87-0E8BEE44DDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"41A50035-DA7C-4F8F-B36A-3C5194098F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FA6521E9-3106-49F6-84DF-66FFE47BDAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C0A6731C-74A9-4FA9-8F2B-66D5F623151B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E1464DB-B192-4459-9C6D-34E8213CDC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"0EDD381D-FEA0-476C-9389-D777D2E344E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"79B76B2B-D92E-4000-8779-87C01BE55E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"4E8452AD-9871-4BDC-8302-EB6CD86A0C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"256AFD08-1918-46D6-9A7A-AE50ACDE9347"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AAA451EA-3F6E-4063-99E2-0D1D6950CC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"AC4EA95B-C812-4A27-8FB2-46F644463BF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021947","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375360","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC37554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC37554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1571","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb.  NOTE: it was later reported that 8.21 is also affected."},{"lang":"es","value":"Web Wiz Guestbook v6.0 guarda información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener información sensible a través de una petición directa para database/WWGguestbook.mdb. NOTA: Se reportó mas tarde que la v8.21 también esta afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_guestbook:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A47E3ED9-2146-40A3-A728-3794F8377470"},{"vulnerable":true,"criteria":"cpe:2.3:a:webwizguide:web_wiz_guestbook:8.21:*:*:*:*:*:*:*","matchCriteriaId":"2E319FAC-3248-46F1-8862-A965E0E8FE66"}]}]}],"references":[{"url":"http://secunia.com/advisories/9639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2492","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/9639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1572","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields."},{"lang":"es","value":"Sun Java Media Framework (JMF) v2.1.1 a la 2.1.1c, permite a applets sin firmar provocar una denegación de servicio (caída de JVM) así como la lectura o lectura no autorizada de regiones de memoria a través de la clase ReadEnv, como se ha demostrado mediante la lectura de las variables de entorno empleando campos .data y .fields modificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jmf:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C07F8DF0-43D5-49B5-B861-6859E0C6EBF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jmf:2.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"E1EC62C8-4C42-4031-9163-BEC257D9D0E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jmf:2.1.1b:*:*:*:*:*:*:*","matchCriteriaId":"4A0F37CA-0B0D-42E8-97F5-4314A7E84DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jmf:2.1.1c:*:*:*:*:*:*:*","matchCriteriaId":"4D78D4E4-0230-4545-AC3E-445C26625998"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1006777","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760","source":"cve@mitre.org"},{"url":"http://www.illegalaccess.org/java/jmf.php","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1006777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.illegalaccess.org/java/jmf.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1573","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to \"inadequate security settings and library bugs in sun.* and org.apache.* packages.\""},{"lang":"es","value":"EL componente de base de datos PointBase 4.6 en la implementación de referencia J2EE (J2EE/RI) permite a atacantes remotos ejecutar programas de su elección, llevar a cabo denegaciones de servicio y obtener información sensible a través de una sentencia SQL manipulada, relacionado con \"unos parámetros de seguridad inadecuados y fallos en la biblioteca en los paquetes sun.* y org.apache.*\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:j2ee:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B428F011-EDD5-484D-AA45-C3798DFDA914"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0148.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0675.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/bugtraq/2003/Dec/0249.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008491","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14881","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14883","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0675.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/bugtraq/2003/Dec/0249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1574","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to the Internet Explorer \"Remember Me\" feature.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"TikiWiki v1.6.1 permite a usuarios remotos evitar la autenticación introduciendo un nombre de usuario válido con un password arbitrario. Vulnerabilidad posiblemente relacionada con la característica \"Remember Me\" de Internet Explorer. NOTA: algunos de los detalles han sido obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=748739&group_id=64258&atid=506846","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/14170","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40347","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=748739&group_id=64258&atid=506846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/14170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2761","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"There are four significant mitigating factors.\n\n1) Most enterprise-class certificates, such as VeriSign’s Extended Validation SSL Certificates use the still secure SHA-1 hash function. \n\n2) Certificates already issued with MD5 signatures are not at risk.  The exploit only affects new certificate acquisitions. \n\n3) CAs are quickly moving to replace MD5 with SHA-1.  For example, VeriSign was planning to phase out MD5 by the end of January 2009.  The date was pushed up due to the December proof of concept.  On December 31, 2008, RapidSSL certificates shipped with SHA-1 digital signatures. \n\n4)The researchers did not release the under-the-hood specifics of how the exploit was executed. \n\nSource - http://www.techrepublic.com/blog/it-security/the-new-md5-ssl-exploit-is-not-the-end-of-civilization-as-we-know-it/?tag=nl.e036","cveTags":[],"descriptions":[{"lang":"en","value":"The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate."},{"lang":"es","value":"El algoritmo MD5 Message-Digest no resistente a colisión, el cual hace más fácil para atacantes dependientes de contexto, llevar a cabo ataques de suplantación, como lo demuestran los ataques de utilización de MD5 en la firma del algoritmo de un certificado X.509."}],"vendorComments":[{"organization":"Red Hat","comment":"Please see http://kbase.redhat.com/faq/docs/DOC-15379","lastModified":"2009-01-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ietf:md5:-:*:*:*:*:*:*:*","matchCriteriaId":"5DFFBAC4-D50D-4CC4-A12C-9708D3C1199C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ietf:x.509_certificate:-:*:*:*:*:*:*:*","matchCriteriaId":"3009C5D9-9EF8-43B2-BF17-DEBC497994B5"}]}]}],"references":[{"url":"http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/","source":"cve@mitre.org"},{"url":"http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42181","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4866","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1024697","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.html","source":"cve@mitre.org"},{"url":"http://www.doxpara.com/research/md5/md5_someday.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/836068","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/961509.mspx","source":"cve@mitre.org","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.phreedom.org/research/rogue-ca/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499685/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33065","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-740-1","source":"cve@mitre.org"},{"url":"http://www.win.tue.nl/hashclash/SoftIntCodeSign/","source":"cve@mitre.org"},{"url":"http://www.win.tue.nl/hashclash/rogue-ca/","source":"cve@mitre.org"},{"url":"https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648886","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","source":"cve@mitre.org"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0837.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0838.html","source":"cve@mitre.org"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_us","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.html","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.doxpara.com/research/md5/md5_someday.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/836068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/961509.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.phreedom.org/research/rogue-ca/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499685/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-740-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.win.tue.nl/hashclash/SoftIntCodeSign/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.win.tue.nl/hashclash/rogue-ca/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0837.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0838.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2762","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1."},{"lang":"es","value":"El servidor en IBM Tivoli Storage Manager (TSM) 4.2.x en MVS, 5.1.9.x versiones anteriores a v5.1.9.1, 5.1.x versiones anteriores a v5.1.10, 5.2.2.x versiones anteriores a v5.2.2.3, 5.2.x versiones anteriores a v5.2.3, 5.3.x versiones anteriores a v5.3.0, y 6.x versiones anteriores a v6.1, cuando el método de comunicación HTTP está activo, permite a atacantes remotos provocar una denegación de servicio (caída del demonio o cuelgue) a través de tráfico HTTP sin especificar, como lo demostrador por el escáner de puertos de IBM v1.3.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"74E4A983-9053-405D-BA3D-BAE8B47A1EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AB1B6BE3-9554-41DF-A994-82CEAF88BA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6454A8C4-407C-455F-8922-D7D703C52245"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"40C35632-F7D5-494A-BE62-2DB121ED6234"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"62532061-2092-481A-B699-4EA1500F80D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:mvs:*:*:*:*:*:*:*:*","matchCriteriaId":"C0EE559C-A63D-49F1-BA38-912E2018EF3C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC7FD0D2-E106-4152-AF87-0E8BEE44DDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"41A50035-DA7C-4F8F-B36A-3C5194098F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FA6521E9-3106-49F6-84DF-66FFE47BDAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C0A6731C-74A9-4FA9-8F2B-66D5F623151B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E1464DB-B192-4459-9C6D-34E8213CDC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"0EDD381D-FEA0-476C-9389-D777D2E344E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"79B76B2B-D92E-4000-8779-87C01BE55E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"256AFD08-1918-46D6-9A7A-AE50ACDE9347"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AAA451EA-3F6E-4063-99E2-0D1D6950CC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"AF4E3EAE-A032-4A42-91C9-5D1E1CC048B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*","matchCriteriaId":"801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"AC4EA95B-C812-4A27-8FB2-46F644463BF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021946","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21246076","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375360","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC39395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21246076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC39395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2763","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting."},{"lang":"es","value":"La configuración por defecto de Sun ONE/iPlanet Web Server v4.1 SP! al SP2 y v6.0 SP1 al SP5 responde a las peticiones HTTP TRACE, lo que puede permitir a atacantes remotos el robo de información usando ataques de seguimiento de trazas en sitios cruzados (XST) en aplicaciones vulnerables a ataques de ejecución de secuencias de comandos en sitios cruzados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"15614FEE-BE44-493D-8F4B-B68F90BA1C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"EAFDD45B-9AA9-46A9-9452-6F7026DAB8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:*:*:*:*:*:*","matchCriteriaId":"881584F0-6E53-4E08-A394-911CCD7179B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:enterprise:*:*:*:*:*","matchCriteriaId":"74307012-2D6B-4D7E-BB6E-B6515E37149D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp11:*:*:*:*:*:*","matchCriteriaId":"1AA735E6-0E26-47E0-B779-8688B058847E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp11:enterprise:*:*:*:*:*","matchCriteriaId":"2CACFD40-A33F-4C4C-8CC1-3111E3399D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp12:*:*:*:*:*:*","matchCriteriaId":"17872BB7-BD29-4EB8-8270-97157B991336"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp12:enterprise:*:*:*:*:*","matchCriteriaId":"12A2A214-156B-4092-B72E-55875A068EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"5608C463-921D-4640-B9F5-1C7E2F99DFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:enterprise:*:*:*:*:*","matchCriteriaId":"CC15E6D1-5E34-4BA0-83AA-32843BBE34EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"1BB8A1FD-2B13-4D52-A685-822FC49D61D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"B199A631-70D8-4FA5-BFAA-46EA768223D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"DD3C8D8A-D9EC-4DB2-B2E2-3B3BFC6AF369"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:enterprise:*:*:*:*:*","matchCriteriaId":"14BE8733-6B79-406D-8AD4-1A034D93CA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"4EA69FCA-EAD5-4BA9-8AF5-2FDC617B77E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:enterprise:*:*:*:*:*","matchCriteriaId":"431E382F-3638-43FE-978E-6FB72C0406A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"D84C0F92-BA3D-47E3-A89C-F7BFE70F1A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:enterprise:*:*:*:*:*","matchCriteriaId":"E85940EC-E144-4B26-B2FB-A4985FE852C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:*:*:*:*:*:*","matchCriteriaId":"B05F9BD8-4A97-4E30-9D87-C54D2C688C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:enterprise:*:*:*:*:*","matchCriteriaId":"8BFAEFD1-D6E0-4401-A81E-9B73DF6C4600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:*:*:*:*:*:*","matchCriteriaId":"30EBB2AE-CC19-455C-8338-DC99649128E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:enterprise:*:*:*:*:*","matchCriteriaId":"271C69BC-E8B9-4E95-91F0-719FDC71E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:*:*:*:*:*:*","matchCriteriaId":"E97E6E0E-88BA-4EF3-83D3-F3A49076C6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:enterprise:*:*:*:*:*","matchCriteriaId":"38178E55-35F2-407E-906C-CDA706881684"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"7383260B-83F0-4915-BFF3-BAD5C3228B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"0F8A1D4E-B671-4ADA-B9EA-B01BF7C17F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"53779E82-8FB9-498D-9E1C-4B7671E722D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"C61702CF-2660-4CC0-9563-B0DCD363B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:6.0:sp5:*:*:*:*:*:*","matchCriteriaId":"A3AEFF59-9E04-497C-81B0-D664BA52AC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"33621D67-8191-42EE-8859-8B5FC30F935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0C6F8563-701E-4E54-A0C9-67E9DF74D60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*","matchCriteriaId":"4022E5C6-5651-45DD-AF73-89CF38E71D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*","matchCriteriaId":"EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp12:*:*:*:*:*:*","matchCriteriaId":"873034EA-B3C6-43E6-AE98-A04598D9A392"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"1CEA91AD-443D-4856-AC7A-3DDE0791134D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"07C1D4DC-252A-4602-A916-32E51CCA75B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"526D2FAD-4241-412C-8863-B273D3733153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"B8A796CB-D675-49FC-98BA-4D527211C70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*","matchCriteriaId":"8693959B-7D5D-414B-8660-2A693AF24541"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*","matchCriteriaId":"1BDC4A06-33A1-4619-B870-7F2AF1D332F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*","matchCriteriaId":"8A445032-AD7B-4971-B175-DF3183A4A12C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"38698A3B-9597-4BC9-B112-BB908C3DE86B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"78587B6D-2A95-4714-9632-4F75CD552E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp5:*:*:*:*:*:*","matchCriteriaId":"279FE555-E290-4B17-855D-781C9B58ED55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4493C646-DF4B-45C7-86F7-A71AC9B1CA97"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"689F0A9F-8F34-4958-B869-C4FB8BC02406"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html","source":"cve@mitre.org"},{"url":"http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/867593","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/867593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2004-2764","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T10:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka \"XML sniffing.\""},{"lang":"es","value":"Sun SDK y Java Runtime Environment (JRE) desde la v1.4.2 hasta la v1.4.2_04, desde la v1.4.1 hasta la v1.4.1_07, y la v1.4.0 hasta la v1.4.0_04 permite a applets sin confianza y servlets sin privilegios conseguir privilegios y leer datos de otros applets a través de vectores sin especificar relacionados con las clases en el procesador XSLT, también conocido como \"esnifado XML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"226D142B-934F-4988-8826-64590C90F296"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:*:*:*:*:*:*","matchCriteriaId":"3583521D-5F4F-4F99-BDA4-6C6DF80E5A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:linux:*:*:*:*:*","matchCriteriaId":"AA61A919-26A7-4170-A8DA-7626375D68FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:solaris:*:*:*:*:*","matchCriteriaId":"282FD7B0-6D3B-45A1-B717-15FB7A8128EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:windows:*:*:*:*:*","matchCriteriaId":"09F85CA0-99C0-489D-BFF7-45D97C9DFC09"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:*:*:*:*:*:*","matchCriteriaId":"ED1B607A-3C63-49B2-905D-4A394540C6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:linux:*:*:*:*:*","matchCriteriaId":"9E919686-B384-4C33-8264-18B5140BB526"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:solaris:*:*:*:*:*","matchCriteriaId":"A6980636-7B47-4AAF-B261-13E0704FABF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:windows:*:*:*:*:*","matchCriteriaId":"E14CBB9A-E9A4-4BAF-ADA9-DDCEEC93A0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:*:*:*:*:*:*","matchCriteriaId":"00762633-7A01-4AA1-943F-5277F4CBA4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:linux:*:*:*:*:*","matchCriteriaId":"4B652361-1C41-4C95-B92D-658BF7EA3C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:solaris:*:*:*:*:*","matchCriteriaId":"54B0B095-269E-4566-BC50-60AAE568F2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:windows:*:*:*:*:*","matchCriteriaId":"E25DC9C3-60E9-4DBE-BE90-D0B04B63791A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:*:*:*:*:*:*","matchCriteriaId":"2A59EFCF-4315-40B9-9C28-5A1A964C16A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:linux:*:*:*:*:*","matchCriteriaId":"99D8A546-E5A7-4958-846B-3822A64F1EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:solaris:*:*:*:*:*","matchCriteriaId":"888AE9B5-A998-4B59-99A3-F580A204D094"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:windows:*:*:*:*:*","matchCriteriaId":"BAC8313C-8808-407D-A8F5-38995260039D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:linux:*:*:*:*:*","matchCriteriaId":"B2F5A718-AB93-4C7F-80A8-9A90ECE2AC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C78AAFC5-05A6-47A2-A3B2-1B032C9169F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"8373EE84-FCAE-4CF7-BE9D-9588D05CA827"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update1:*:*:*:*:*:*","matchCriteriaId":"0F9A9879-295F-40DA-B827-72C0AE7B43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update2:*:*:*:*:*:*","matchCriteriaId":"1E1A84BB-6D97-45FA-839E-67E36AFFAC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:*:*:*:*:*:*","matchCriteriaId":"58FC43CA-1F08-4A4B-838B-840838BC67FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:linux:*:*:*:*:*","matchCriteriaId":"15EEE9A7-2472-47EF-B27B-5EBB8019853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:solaris:*:*:*:*:*","matchCriteriaId":"0E7A4D91-8AC7-4092-910D-7DB2A962CA7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:windows:*:*:*:*:*","matchCriteriaId":"1CEBCC8A-4E92-4C7D-A237-11B582B7D01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update4:*:*:*:*:*:*","matchCriteriaId":"14037C2F-DDB4-4F9B-8A53-045AED23905A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update7:*:*:*:*:*:*","matchCriteriaId":"07C150C2-18D6-45C1-AF21-527923C45CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:*:*:*:*:*:*","matchCriteriaId":"915EB240-0684-4D4D-9DE3-4B49433E3BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:linux:*:*:*:*:*","matchCriteriaId":"66004554-1B7E-4C6B-9BD8-344417DC6E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:solaris:*:*:*:*:*","matchCriteriaId":"1ADA6092-791D-4E94-954D-E3A7C944C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:windows:*:*:*:*:*","matchCriteriaId":"5A53C9BC-941F-4C33-853B-0847FED5555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:*:*:*:*:*:*","matchCriteriaId":"9D4E2684-80B0-4C06-82B0-72547C4F6B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:linux:*:*:*:*:*","matchCriteriaId":"81F98FE5-EC95-42AF-B8A0-D1DB6E7F2039"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:solaris:*:*:*:*:*","matchCriteriaId":"C888E7A0-9B40-4844-AE51-1A171E4C6A03"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:windows:*:*:*:*:*","matchCriteriaId":"6411CD53-1B04-4F13-82B6-F705FE74DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_03:*:*:*:*:*:*:*","matchCriteriaId":"39C353C7-3281-4CAF-BBA1-0E3B7E88420A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_03:*:linux:*:*:*:*:*","matchCriteriaId":"3EAC0297-B4EF-46DC-BB7D-8DCDC77FBC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_03:*:solaris:*:*:*:*:*","matchCriteriaId":"58214BF5-A47E-4DC7-9323-6FAFE6547055"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_03:*:windows:*:*:*:*:*","matchCriteriaId":"3E1411E5-2BB5-4D95-9882-DC0C1FC22ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_04:*:*:*:*:*:*:*","matchCriteriaId":"1536B10D-D58B-4739-B5FC-726639182A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_04:*:linux:*:*:*:*:*","matchCriteriaId":"B9110CD0-DBE0-4CEB-B7FD-3CF15D183F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_04:*:solaris:*:*:*:*:*","matchCriteriaId":"9DBA89F2-CEB2-4A6E-9767-9121F73A9632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_04:*:windows:*:*:*:*:*","matchCriteriaId":"2C4EF739-C52E-4850-B453-588C89DBF6EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_05:*:*:*:*:*:*:*","matchCriteriaId":"E6AAF774-5F45-4E72-A15C-2FBE7EF4752C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_05:*:linux:*:*:*:*:*","matchCriteriaId":"E02CB2F4-0F22-4B85-9590-9EE56760D707"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_05:*:solaris:*:*:*:*:*","matchCriteriaId":"431D02D0-2D24-4955-8DA3-53CB0B35348E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_05:*:windows:*:*:*:*:*","matchCriteriaId":"1EB15EB2-25C4-4296-A190-C484A9B6FA2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_06:*:*:*:*:*:*:*","matchCriteriaId":"7C810978-A5F3-495F-86E9-48FA843AE4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_06:*:linux:*:*:*:*:*","matchCriteriaId":"00C9B239-B7CD-49CB-8837-5C3588835F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_06:*:solaris:*:*:*:*:*","matchCriteriaId":"BD8553A4-5F64-4CF9-9895-FEAA9C764515"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_06:*:windows:*:*:*:*:*","matchCriteriaId":"57130381-3E0C-42FC-8566-95730549A87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_07:*:*:*:*:*:*:*","matchCriteriaId":"5091A466-6FD3-42D6-B496-820D4D23A6C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_07:*:linux:*:*:*:*:*","matchCriteriaId":"02818855-EADC-4F3D-90F3-52A6EAE53B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_07:*:solaris:*:*:*:*:*","matchCriteriaId":"3D730C2B-033D-4FFE-BE55-3FA50BB6F89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_07:*:windows:*:*:*:*:*","matchCriteriaId":"43DBA862-7CC3-4CCA-94C9-AC34F11DF962"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*","matchCriteriaId":"1D1C4B12-6949-4399-BC8D-3B018213FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:solaris:*:*:*:*:*","matchCriteriaId":"C2D0C960-CB1B-497A-AD00-23DAA9F1B091"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"905D148D-1D5E-4B43-AA1C-9B2CA11C03FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update1:linux:*:*:*:*:*","matchCriteriaId":"6A6BFFD2-ECBC-4018-BABB-CA5F37530C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update1:solaris:*:*:*:*:*","matchCriteriaId":"FA51551F-38C8-457C-81FC-5F98722049B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update1:windows:*:*:*:*:*","matchCriteriaId":"51021C43-C439-4D09-AE5F-88A5FAFDBDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update2:linux:*:*:*:*:*","matchCriteriaId":"CF77B446-426C-4480-9B9A-DD98F7ED82AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update2:solaris:*:*:*:*:*","matchCriteriaId":"0A82749B-D28A-4C59-B30F-63092B139C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update2:windows:*:*:*:*:*","matchCriteriaId":"9705C47F-ED59-42A0-8B75-C534C7C982CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update3:linux:*:*:*:*:*","matchCriteriaId":"3F89801B-0FDF-4520-BDEE-ED6ED1BF49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update3:solaris:*:*:*:*:*","matchCriteriaId":"886CC1D0-D7FB-4363-AC4E-AC8DFD37CBF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update3:windows:*:*:*:*:*","matchCriteriaId":"FC2844D6-9C67-4CAC-BCEB-0B15BEBC231F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update4:linux:*:*:*:*:*","matchCriteriaId":"82AD9323-B175-4A1B-A4E0-2EF8C60D39E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update4:solaris:*:*:*:*:*","matchCriteriaId":"A68926C4-4C4D-4BE9-8EF3-10C1E3479BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update4:windows:*:*:*:*:*","matchCriteriaId":"5F6BBD71-9910-457B-A884-7EABC3C34EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update5:linux:*:*:*:*:*","matchCriteriaId":"ED0E85FE-C504-451C-BD01-2F942D4F67C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update5:solaris:*:*:*:*:*","matchCriteriaId":"7258FCF5-CBC2-4392-BDA9-142FD6E40E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update5:windows:*:*:*:*:*","matchCriteriaId":"8A7FC1CD-A1CF-4E8C-97EE-97231B8F22AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"25336CDC-E592-4022-A87A-364B24D13485"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_01:*:*:*:*:*:*:*","matchCriteriaId":"DBDA2169-B799-4F71-AE26-0508B918E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_02:*:*:*:*:*:*:*","matchCriteriaId":"D8F7E8AA-6CDD-4412-8530-AF7CAB8CA863"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_03:*:*:*:*:*:*:*","matchCriteriaId":"57859E96-91C9-483F-8C4B-E7AD574818B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_04:*:*:*:*:*:*:*","matchCriteriaId":"069362D3-2C20-4685-AC2F-AA9E752D0C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1ED545E2-AE1C-45A1-8DF0-9674EF5295BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_01:*:*:*:*:*:*:*","matchCriteriaId":"8F1BCD7F-751C-405D-BD82-7ACE1A9ED5B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_02:*:*:*:*:*:*:*","matchCriteriaId":"9D5861D4-2E57-4FA0-A786-000BD67FA23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_03:*:*:*:*:*:*:*","matchCriteriaId":"AE6C0900-9F2F-47DF-9504-0FABBDF2069D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_04:*:*:*:*:*:*:*","matchCriteriaId":"1B234F24-9C83-4E02-9009-8EF3CAEF681D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_05:*:*:*:*:*:*:*","matchCriteriaId":"C6080B96-4A1F-47B2-8DD6-43D890136030"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_06:*:*:*:*:*:*:*","matchCriteriaId":"559E35CF-0A08-40B6-A8BB-E4F970E6C534"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F09AA185-F09D-4D57-9AA7-61C0F0CF9050"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011661","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8288","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/371208","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10844","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16864","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/371208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4878","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T20:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrary web script or HTML via the sig[1] parameter and possibly other parameters, a different vulnerability than CVE-2007-6156."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en (1) acid_qry_main.php en Analysis Console para Intrusion Databases (ACID) v0.9.6b20 y (2) base_qry_main.php en Basic Analysis y Security Engine (BASE) v1.2 y otros scripts de consola  no especificados en estos productos, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"sig[1]\" y posiblemente otros parámetros, una vulnerabilidad diferente a CVE-2007-6156."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acid:analysis_console_for_intrusion_databases:0.9.6b20:*:*:*:*:*:*:*","matchCriteriaId":"8D95BCF7-B845-4AF6-A400-6C169D12FF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:secureideas:basic_analysis_and_security_engine:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0826792-D304-40F1-A9E8-F120B70CF677"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-893","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/24306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48848","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/24306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4879","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) gmt_ofs and (2) language parameters.  NOTE: the page parameter is already covered by CVE-2006-1913.  NOTE: it was later reported that 3.50 is also affected."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en jax_guestbook.php en Jax Guestbook v3.1 y v3.31 permite a atacantes remotos inyectar web script o HTML a través de los parámetros (1) gmt_ofs y (2) language.\r\nNOTA: el parámetro \"page\" ya está cubierto por CVE-2006-1913.\r\nNOTA: después se informó que v3.50 está también afectado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*","matchCriteriaId":"34D46145-5BD9-4715-A751-19E7219B0A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:jax_scripts:jax_guestbook:3.31:*:*:*:*:*:*:*","matchCriteriaId":"0C9722E9-136B-4425-B089-BC06C7528E0B"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/16337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28523","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43562","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28523.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/16337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4880","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv."},{"lang":"es","value":"Jax Guestbook v3.1 y v3.31 almacena información sensible bajo la raíz web con controles de acceso insuficientes, lo cual permite a atacantes remotos obtener la dirección IP de usuarios a través de peticiones directas de (1) guestbook, (2) guestbook_ips2block, (3) ips2block, y (4) formmailer/logfile.csv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*","matchCriteriaId":"34D46145-5BD9-4715-A751-19E7219B0A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:jax_scripts:jax_guestbook:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF709F31-1E90-48C2-B97F-521CDFFD3C25"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/16337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/16337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-4881","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T20:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions."},{"lang":"es","value":"El subsistema netlink del kernel de Linux v2.4.x anteriores a la v2.4.37.6 y v2.6.x anteriores a la v2.6.13-rc1 no inicializa unos determinados campos de relleno de estructuras; lo que permite a usuarios locales obtener información confidencial de la memoria del kernel a través de vectores de ataque sin especificar, relacionados con las funciones (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, y (23) cbq_dump_ovl."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2005-4881\n\nThis issue has been rated as having moderate security impact. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, and Red Hat Enterprise MRG. It affects Red Hat Enterprise Linux 3, and 4.\n\nIt was addressed in Red Hat Enterprise Linux 4 via: https://rhn.redhat.com/errata/RHSA-2009-1522.html\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2009-10-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre1:*:*:*:*:*","matchCriteriaId":"ABF7B810-A31F-4CF4-B79A-94FEB32FFA22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre2:*:*:*:*:*","matchCriteriaId":"E570983E-3FEC-4088-B060-6095BFB7CD88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre3:*:*:*:*:*","matchCriteriaId":"365CADA0-6FC8-424C-8B1C-62ECCC0650E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre4:*:*:*:*:*","matchCriteriaId":"40EFDC05-BABC-491D-AC13-0ACA7A0CB5CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre5:*:*:*:*:*","matchCriteriaId":"79CFAD9A-FFE9-475E-98D0-9BFF1EC38AED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*","matchCriteriaId":"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*","matchCriteriaId":"637A08D0-E382-4DE8-AEEC-6A53A72849B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*","matchCriteriaId":"550DFE6E-DCE6-4649-8746-522996021DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*","matchCriteriaId":"E17BB496-749A-40C8-BAA9-6CFBBE308065"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"0C30F255-1297-46EA-9FBC-05564792FF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.1:*:*:*:*:*:*:*","matchCriteriaId":"A1757C19-B231-423F-95E9-F9DF1D76FC43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*","matchCriteriaId":"934CBC22-864C-468F-B267-3CDE4449DA9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*","matchCriteriaId":"2AC432E3-7214-4B61-A666-2DAF5CCAEC52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*","matchCriteriaId":"7682650A-8332-484D-874F-2B67246880B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*","matchCriteriaId":"6DFF499A-6602-4BD3-90B5-E6C4AC888812"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.7:*:*:*:*:*:*:*","matchCriteriaId":"843F73D0-2296-45E7-B5D7-BC8C63A8D99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*","matchCriteriaId":"0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:*","matchCriteriaId":"1C53EDB2-923D-4860-8251-9A07C9F8FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:*","matchCriteriaId":"2E2A5D6B-7011-40AE-8A94-02B062B19010"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.3:*:*:*:*:*:*:*","matchCriteriaId":"E283E518-3A3E-4D39-B11F-E4B71D6ADF90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.4:*:*:*:*:*:*:*","matchCriteriaId":"FB58C532-186F-4C1F-A107-1BF17C19AA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.5:*:*:*:*:*:*:*","matchCriteriaId":"4A31F446-FB7E-4D6C-8703-0A730E2C71AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.6:*:*:*:*:*:*:*","matchCriteriaId":"52BA2E08-09BC-4EE4-822E-0F6FEF92E721"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.1:*:*:*:*:*:*:*","matchCriteriaId":"97AA815F-E07C-4989-B190-D5E52451D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.3:*:*:*:*:*:*:*","matchCriteriaId":"5C171597-F06E-48BA-A897-E753ECBEE68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.4:*:*:*:*:*:*:*","matchCriteriaId":"99E0D1AD-E8B0-4125-BCA7-8487D9490EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.5:*:*:*:*:*:*:*","matchCriteriaId":"F99F78D3-A2FA-4033-8E21-FE3FFCE9D94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.7:*:*:*:*:*:*:*","matchCriteriaId":"086E5B7B-A31B-44A1-92CF-D88E118545D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.8:*:*:*:*:*:*:*","matchCriteriaId":"BAC24F28-2C48-43D7-B8FB-7DCF499C9627"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.9:*:*:*:*:*:*:*","matchCriteriaId":"76B549FD-5315-4DB1-8A3B-76B2E28DDDBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37:*:*:*:*:*:*:*","matchCriteriaId":"4E506CC5-BB82-423E-A99A-F77A4C8CA26B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.1:*:*:*:*:*:*:*","matchCriteriaId":"B075A26C-356F-41A5-A2AB-4AB130F4B503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.2:*:*:*:*:*:*:*","matchCriteriaId":"8BE7521F-BC6A-470A-AF3D-36E9243330E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.3:*:*:*:*:*:*:*","matchCriteriaId":"37E510D6-5ED5-4EF8-BEFB-B84FDCF44F5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.4:*:*:*:*:*:*:*","matchCriteriaId":"9E6FEE93-0FCB-4289-9F76-540A1E48950F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.5:*:*:*:*:*:*:*","matchCriteriaId":"08A8E327-3DFD-4109-93EB-23A5C12ED933"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=git-commits-head&m=112002138324380","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37084","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37909","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/05/2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/07/2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/9","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1522.html","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521601","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=git-commits-head&m=112002138324380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/05/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/07/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1522.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4882","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability than CVE-2002-2226."},{"lang":"es","value":"tftpd en Philippe Jounin Tftpd32 v2.74 y anteriores, tal y como se utiliza en Wyse simple Imager (WSI) y otros productos, permite a atacantes remotos causar una denegación de servicio (mediante caída de demonio) a través de un nombre de fichero  largo en una solicitud de lectura TFTP (alias RRQ o GET). Se trata de una vulnerabilidad diferente a CVE-2002-2226."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:*:*:*:*:*:*:*:*","versionEndIncluding":"2.74","matchCriteriaId":"61767087-CB3B-48E6-A878-585DA404AAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E5179AD-626E-49CE-A901-D11A0F91365B"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.5:beta:*:*:*:*:*:*","matchCriteriaId":"FCD76387-D5C6-4208-9A07-C8CACF364152"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.51:*:*:*:*:*:*:*","matchCriteriaId":"01577E14-494A-41E7-AAE3-CE056D5D47A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.52:*:*:*:*:*:*:*","matchCriteriaId":"E2643C36-668E-457F-BB34-154D39025BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.53:*:*:*:*:*:*:*","matchCriteriaId":"EA1FDE23-01D4-475D-AEB5-149C0C3E184B"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.54:*:*:*:*:*:*:*","matchCriteriaId":"037A8135-0860-4D78-9BD3-8159BF2A658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.60:*:*:*:*:*:*:*","matchCriteriaId":"D31EFFDF-1234-4472-A869-5949B2006F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.62:*:*:*:*:*:*:*","matchCriteriaId":"E048D128-8BCD-4E74-85CC-9ADA091C9C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.70:*:*:*:*:*:*:*","matchCriteriaId":"D59FAF65-D5D5-4A45-8A18-CA40C63807EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.72:*:*:*:*:*:*:*","matchCriteriaId":"E258100C-F46E-414C-8ACA-063C87823FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.73:*:*:*:*:*:*:*","matchCriteriaId":"460C391A-E8FB-4921-ADFF-5E5F6C8C36D8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0386.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1012856","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secway.org/advisory/ad20050108.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/12898","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0386.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1012856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secway.org/advisory/ad20050108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/12898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4883","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid \"connect frames.\""},{"lang":"es","value":"Una condición de carrera en Philippe Jounin Tftpd32 antes de v2.80 permite a atacantes remotos causar una denegación de servicio (mediante caída del demonio) a través de una petición \"connect frames\" inválida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:*:*:*:*:*:*:*:*","versionEndIncluding":"2.74","matchCriteriaId":"61767087-CB3B-48E6-A878-585DA404AAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E5179AD-626E-49CE-A901-D11A0F91365B"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.5:beta:*:*:*:*:*:*","matchCriteriaId":"FCD76387-D5C6-4208-9A07-C8CACF364152"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.51:*:*:*:*:*:*:*","matchCriteriaId":"01577E14-494A-41E7-AAE3-CE056D5D47A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.52:*:*:*:*:*:*:*","matchCriteriaId":"E2643C36-668E-457F-BB34-154D39025BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.53:*:*:*:*:*:*:*","matchCriteriaId":"EA1FDE23-01D4-475D-AEB5-149C0C3E184B"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.54:*:*:*:*:*:*:*","matchCriteriaId":"037A8135-0860-4D78-9BD3-8159BF2A658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.60:*:*:*:*:*:*:*","matchCriteriaId":"D31EFFDF-1234-4472-A869-5949B2006F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.62:*:*:*:*:*:*:*","matchCriteriaId":"E048D128-8BCD-4E74-85CC-9ADA091C9C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.70:*:*:*:*:*:*:*","matchCriteriaId":"D59FAF65-D5D5-4A45-8A18-CA40C63807EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.72:*:*:*:*:*:*:*","matchCriteriaId":"E258100C-F46E-414C-8ACA-063C87823FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_jounin:tftpd32:2.73:*:*:*:*:*:*:*","matchCriteriaId":"460C391A-E8FB-4921-ADFF-5E5F6C8C36D8"}]}]}],"references":[{"url":"http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2006-6404","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T20:00:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"INNOVATION Data Processing FDR/UPSTREAM 3.3.0 (GA Oct 2003) allows remote attackers to cause a denial of service (service outage) via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred."},{"lang":"es","value":"INNOVACIÓN Data Processing FDR/UPSTREAM versión 3.3.0 (GA Oct 2003), permite que los atacantes remotos causen una denegación de servicio (corte del servicio) por medio de una secuencia de paquetes TCP SYN a muchos puertos, como es demostrado usando nmap. NOTA: según las pruebas del proveedor, se encontró que no se produjo ninguna denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:innovationdp:fdr\\/upstrean:3:30:*:*:*:*:*:*","matchCriteriaId":"C3D3988C-1743-415D-B45C-1D04D8A51E61"}]}]}],"references":[{"url":"http://osvdb.org/ref/30/30782-fdr_portscan.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.attrition.org/pipermail/vim/2009-October/002278.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/30782","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/ref/30/30782-fdr_portscan.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.attrition.org/pipermail/vim/2009-October/002278.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/30782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2006-7236","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences."},{"lang":"es","value":"La configuración por defecto de sid en xterm para Debian GNU/Linux y posiblemente Ubuntu activa el recurso allowWindowOps, lo que permite a atacantes asistidos por el usuario, ejecutar código de su elección o tener otro impacto no determinado a través de secuencias de escape."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the xterm package, as shipped with Red Hat Enterprise Linux 3, 4, and 5, and the version of the XFree86 (providing xterm) and hanterm-xf packages, as shipped with Red Hat Enterprise Linux 2.1.","lastModified":"2009-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"BE291BE0-5A80-4D58-BF1F-1A7089D2471E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"84BB6CD8-43ED-4998-8D68-6934B93EA833"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384593","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33388","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/703-1/","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/703-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-7237","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php en Ixprim v2.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en un parámetro no especificado.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ixprim-cms:ixprim:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BF3298E9-9093-4098-BE71-1E1B7E16F200"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/19816.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/19816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42471","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/19816.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/19816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-7238","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MyShoutPro before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MyShoutPro anteriores a v1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_girling:myshoutpro:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"2EE1FA34-1713-4A35-96E0-3660520C7B17"}]}]}],"references":[{"url":"http://www.zeldaforums.net/scripts/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zeldaforums.net/scripts/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2007-2238","sourceIdentifier":"cret@cert.org","published":"2009-04-16T15:12:57.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el control ActiveX Whale Client Components, como es usado en Microsoft Intelligent Application Gateway (IAG), antes de v3.7 SP2, permite a atacantes remotos ejecutar código de su elección mediante argumentos grandes a los métodos (1) CheckForUpdates o (2) UpdateComponents."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:intelligent_application_gateway_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"EADE9F62-25C2-42D3-AD6B-F42D5532C708"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:intelligent_application_gateway_2007:*:sp1:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"F6E439F6-4014-4019-A5B1-567B6D9C51B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/34725","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/789121","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34532","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1061","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49888","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/34725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/789121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2280","sourceIdentifier":"cve@mitre.org","published":"2009-12-18T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844."},{"lang":"es","value":"Desbordamiento de pila basado en búfer en OmniInet.exe (demonio del servicio del cliente backup) en el componente de administración  de recuperación de aplicaciones en HP OpenView Storage Data Protector v5.50 y v6.0 permite a atacantes remotos ejecutar código arbitrario a través de un comando MSG_PROTOCOL con argumentos demasiado largos. Se trata de una vulnerabilidad diferente a CVE-2009-3844."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*","matchCriteriaId":"C114C6E6-0995-4449-BEBA-3247B88D8CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2924E972-C490-4359-8E85-C5A4BDE088C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023361","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37396","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3594","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-099/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-099/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2007-2281","sourceIdentifier":"cve@mitre.org","published":"2009-12-18T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."},{"lang":"es","value":"Desbordamiento de entero en la función _ncp32._NtrpTCPReceiveMsg en rds.exe en servicio de base de datos del gestor de celdas del componente de gestión de recuperación de aplicaciones en HP OpenView Storage Data Protector v5.50 y v6.0 permite a atacantes remotos ejecutar código arbitrario a través de un valor demasiado grande en el parámetro 'size'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*","matchCriteriaId":"C114C6E6-0995-4449-BEBA-3247B88D8CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2924E972-C490-4359-8E85-C5A4BDE088C4"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023361","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37386","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3594","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2795","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon."},{"lang":"es","value":"Múltiple desbordamiento de búfer en Ipswitch IMail en versiones anteriores a 2006.21, permite a los atacantes remotos o usuarios autenticados ejecutar arbitrariamente código a través de (1) la característica de autenticación en IMailsec.dll, el cual lanza una corrupción del montículo en IMail Server, o (2) a comando largo SUBSCRIBE IMAP, el cual laza un desbordamiento de búfer basado en pila en el Daemon IMAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:*:*:*:*:*:*:*:*","versionEndIncluding":"2006.2","matchCriteriaId":"B5963AD0-507D-4290-96B7-F63240958C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:2006.1:*:*:*:*:*:*:*","matchCriteriaId":"A64E19D5-12B3-4DE9-B282-9BA2F36294D3"}]}]}],"references":[{"url":"http://www.ipswitch.com/support/imail/releases/im200621.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-042/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-043/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ipswitch.com/support/imail/releases/im200621.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-042/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-043/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2007-4475","sourceIdentifier":"cret@cert.org","published":"2009-04-01T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX de EAI WebViewer3D (webviewer3d.dll) en SAP AG SAPgui versiones anteriores a v7.10 Patch Level 9 permite a atacantes remotos ejecutar código de su elección a través de un argumento largo del método SaveViewToSessionFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:*:*:*:*:*:*:*:*","matchCriteriaId":"2B5B9DE5-0BD7-48C8-B09C-1F1E1AB58F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:*:*:*:*:*:*:*:*","versionEndIncluding":"7.10","matchCriteriaId":"6B6AAD82-9A2F-41E1-87B3-69C501D5884C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6:*:*:*:*:*:*:*","matchCriteriaId":"E38F14B4-7A3D-4F54-9C8F-C1C43676AC2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6:*:windows:*:*:*:*:*","matchCriteriaId":"E63EC32D-4655-4B26-9E1A-8E33257050F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6a:*:*:*:*:*:*:*","matchCriteriaId":"852B75EA-0C2F-4549-A412-EA283EF18120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6a:*:windows:*:*:*:*:*","matchCriteriaId":"D26797AD-F444-4918-AE21-11E9546C9FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6b:*:*:*:*:*:*:*","matchCriteriaId":"E9A7356A-E8B4-4550-A30B-FE7C0B3BE65D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6b:*:windows:*:*:*:*:*","matchCriteriaId":"8E59FDE0-8BF8-4BF3-AE4F-E7F810216A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6c:*:*:*:*:*:*:*","matchCriteriaId":"EB4E3BF3-7460-46AA-AABF-CA46360EF83F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6c:*:windows:*:*:*:*:*","matchCriteriaId":"33C7A581-C3CF-468F-8B06-1C9F227D5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6d:*:*:*:*:*:*:*","matchCriteriaId":"CE53A838-0367-4D67-9CB2-DDAF275FE7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6d:*:windows:*:*:*:*:*","matchCriteriaId":"4FCC8060-E285-43BA-9626-D9CB960A964D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:6.40:*:*:*:*:*:*:*","matchCriteriaId":"DC699787-C1C8-4EF4-8587-617FC9CCED14"}]}]}],"references":[{"url":"http://secunia.com/advisories/34559","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/985449","source":"cret@cert.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34310","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/0892","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49543","source":"cret@cert.org"},{"url":"https://service.sap.com/sap/support/notes/1153794","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/985449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://service.sap.com/sap/support/notes/1153794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-4514","sourceIdentifier":"cve@mitre.org","published":"2009-04-15T10:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the ProCurve Manager server via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP ProCurve Manager and HP ProCurve Manager Plus v2.3 y anteriores permite a atacantes remotos obtener información sensible del servidor ProCurve Manager a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"1A12F250-83A1-4B91-8EA7-9F39EA9FCB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:*:-:plus:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"1E15E92C-3145-4289-87A6-787F5F1C1E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:1.6:*:*:*:*:*:*:*","matchCriteriaId":"E7F46709-2181-4523-86F7-17E2B49073B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:1.6:-:plus:*:*:*:*:*","matchCriteriaId":"A3B99A40-1B7E-45E2-A7F1-BDD9EC2AD418"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2DC8C60-794E-46A7-8F43-3C0E51E0B15D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.0:-:plus:*:*:*:*:*","matchCriteriaId":"8E1D098C-61BC-4D7C-9CB5-111CF6D47BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DD823142-2E0F-4A37-A00D-7BAC6E3D6635"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.1:-:plus:*:*:*:*:*","matchCriteriaId":"E19A7455-2C85-47DD-A496-EF6B4E130D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2DB3F5-222D-446B-A2C7-6D7DDF774816"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.2:-:plus:*:*:*:*:*","matchCriteriaId":"81F1EFC6-E6EF-4B31-B2AA-E54A9F355607"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"979DCD39-3A4B-4D03-9FDD-3607AEA8CCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_manager:2.2.1:-:plus:*:*:*:*:*","matchCriteriaId":"4684EC4E-85BC-4501-ABBA-74BE361DF3D8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123930135924665&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=123930135924665&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/53596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34451","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022022","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49781","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123930135924665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=123930135924665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/53596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5289","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement \"workflow\" and decisions about the \"capability\" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\\TD_80, and then setting the file's properties to read-only."},{"lang":"es","value":"HP Mercury Quality Center (QC) v9.2 y anteriores, y puede que también TestDirector; dependen de las secuencias de comandos cacheadas en el lado del cliente para implementar el \"flujo de trabajo\" y decisiones sobre la \"capacidad\" de un usuario; esto permite a atacantes remotos ejecutar código de su elección a través de un uso manipulado de la API de Open Test Arquitecture (OTA), tal y como se ha demostrado modificando (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds o (6) testplan.tds de %tmp%\\TD_80, y luego configurando las propiedades de los ficheros a solo-lectura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:mercury_quality_center:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2","matchCriteriaId":"E6F2EE92-2A3C-4025-8D62-BF8E1F6D1399"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:mercury_quality_center:8.0:*:*:*:*:*:*:*","matchCriteriaId":"ED5A54FD-8A3B-4163-8862-0089ED9D71F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:mercury_quality_center:8.2:*:*:*:*:*:*:*","matchCriteriaId":"9D510F40-6E82-4A04-92C2-BB1D31270384"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:mercury_quality_center:8.2:sp1:*:*:*:*:*:*","matchCriteriaId":"BA438217-B2C1-4391-9CFE-A902F01F1C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:mercury_quality_center:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C357686A-D5A5-439A-A14A-FF5B53F0CCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:testdirector:-:*:*:*:*:*:*:*","matchCriteriaId":"25C39FEB-0210-4E8C-8F9B-DA2D0CAD2699"}]}]}],"references":[{"url":"http://blogs.exposit.co.uk/2009/02/23/vulnerability-in-quality-center/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34046","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/898865","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/501177/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501219/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48860","source":"cve@mitre.org"},{"url":"http://blogs.exposit.co.uk/2009/02/23/vulnerability-in-quality-center/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/898865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/501177/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501219/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5475","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chipset, and other products, allow remote 802.11-authenticated users to cause a denial of service (wireless access point crash) and possibly execute arbitrary code via an association request with long (1) rates, (2) extended rates, and unspecified other information elements."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el driver inalámbrico Marvell, tal como se usa en el punto de acceso Wi-Fi Linksys WAP4400N con firmware 1.2.17 en el chipset Marvell 88W8361P-BEM1 y otros productos, permite a usuarios remotos 802.11-autenticados provocar una denegación de servicio (caída del punto de acceso inalámbrico) y posiblemente ejecutar código de su elección mediante una petición de asociación con ratios normales y extendidos demasiado largos y otros elementos de información no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:marvell:88w8361p-bem_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"8CF02028-370A-423B-AB74-ED7E0AA4BDBA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap4400n:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"D0DEB9EE-AF7E-453F-BFB1-26750B0E4293"}]}]}],"references":[{"url":"http://secunia.com/advisories/37345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507781/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507781/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5542","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T10:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet.  NOTE: this might overlap CVE-2007-5590."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Miranda IM v0.6.8, permite a atacantes remotos ejecutar código de su elección mediante un paquete Yahoo Messenger manipulado. NOTA: Esta vulnerabilidad puede solaparse con CVE-2007-5590."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miranda-im:miranda_im:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"971AFB8A-1238-4F42-B47A-4F6EC1CC64D5"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt","source":"cve@mitre.org"},{"url":"http://www.secureworks.com/research/threats/miranda/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26115","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secureworks.com/research/threats/miranda/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2007-5543","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T10:30:01.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet.  NOTE: this might overlap CVE-2007-5590."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Miranda IM v0.6.8 y v0.7.0 permite a atacantes remotos ejecutar código de su elección mediante un paquete Yahoo Messenger manipulado. NOTA: Esta vulnerabilidad puede solaparse con CVE-2007-5590."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miranda-im:miranda_im:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"971AFB8A-1238-4F42-B47A-4F6EC1CC64D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:miranda-im:miranda_im:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"67672AA2-18D8-46AB-AD1D-E8AB8A27E5BF"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt","source":"cve@mitre.org"},{"url":"http://www.secureworks.com/research/threats/miranda/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26115","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secureworks.com/research/threats/miranda/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2007-6720","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels."},{"lang":"es","value":"libmikmod v3.1.9 hasta v3.2.0, utilizado por MikMod, SDL-mixer, y posiblemente otros productos, se basa en los canales de la última canción cargada, en lugar de la canción que se está reproduciendo, para ciertos cálculos de la reproducción, lo que permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación)cargando multiples canciones (también conocido como ficheros MOD) con diferentes números de canales."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-6720\n\nThe Red Hat Security Response Team has rated this issue as having low security\nimpact, a future update may address this flaw. More information regarding\nissue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/","lastModified":"2009-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"436CE81E-616B-40E4-825A-961EC9672896"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-2:*:*:*:*:*:*:*","matchCriteriaId":"D1C4E395-10DE-42A4-830C-803CE1F79F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-3:*:*:*:*:*:*:*","matchCriteriaId":"4593CEA9-5661-4F3C-B38B-369FD2043D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-4:*:*:*:*:*:*:*","matchCriteriaId":"D05D8EDA-FE5E-483A-AC78-DAFE129705C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-5:*:*:*:*:*:*:*","matchCriteriaId":"8CA7EDD1-5C30-41E8-B93A-F2C5FA754F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-6:*:*:*:*:*:*:*","matchCriteriaId":"A0F92EE1-D5F8-47A3-B674-A593A7829DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"3F1448EB-FDFC-434A-ACE9-F6CC52B523E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-2:*:*:*:*:*:*:*","matchCriteriaId":"C6B9F0C8-15C0-47BF-AE69-2216A65D1D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-3:*:*:*:*:*:*:*","matchCriteriaId":"B0524F58-BC45-4A81-BB99-F09F03047665"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-4:*:*:*:*:*:*:*","matchCriteriaId":"CA48214A-CF42-4378-A422-803EDE5632CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-5:*:*:*:*:*:*:*","matchCriteriaId":"5F08B9B6-0CCD-4388-B33A-98F6A65FAEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-1:*:*:*:*:*:*:*","matchCriteriaId":"8A0D92BE-E4F7-42CF-AA61-71CD46319E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-2:*:*:*:*:*:*:*","matchCriteriaId":"563D3D39-DAFB-4F0C-BCBB-917C5082137F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-3:*:*:*:*:*:*:*","matchCriteriaId":"BA98B82C-B0BD-4546-8047-63ECDCA27B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-4:*:*:*:*:*:*:*","matchCriteriaId":"FE994EED-EA67-4A52-9AAD-30259DCD8C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-5:*:*:*:*:*:*:*","matchCriteriaId":"EB091C37-6020-4202-AC51-B597C2890E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-6:*:*:*:*:*:*:*","matchCriteriaId":"F88BF46A-B01D-4D8E-8BFF-6E864EBA5FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"31AA2232-8FB5-4BA3-BBB1-B54443C2D57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5B88DA6E-D815-4904-AE07-5C54E72057AA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/13/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33235","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479829","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=422021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6721","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.217","lastModified":"2025-05-12T17:37:16.527","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes.\""},{"lang":"es","value":"La Legión de la API de Bouncy Castle Java Cryptography anterior a versión 1.38, como es usada en Crypto Provider Package anterior a versión 1.36, presenta un impacto desconocido y vectores de ataque remoto relacionados con \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*","versionEndIncluding":"1.37","matchCriteriaId":"71630DBB-121C-4EF2-8BC8-69EF824536C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:*","matchCriteriaId":"074B7733-B554-4C60-8B6C-711082FBC981"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:*","matchCriteriaId":"6B065EFF-5CBE-4B4E-B5ED-C97ACC17F913"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:*","matchCriteriaId":"74053B79-26E8-4E5C-8BAA-623B6F8C2406"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:*","matchCriteriaId":"8A673F86-9038-4DDC-BC42-CDAA82E31D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:*","matchCriteriaId":"27BA92FF-CCD7-43A7-880B-63F749BE134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:*","matchCriteriaId":"A587B9F5-BA5F-4470-84A7-551C15143F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:*","matchCriteriaId":"CF1C6753-A077-4BC1-96D6-42408D576371"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:*","matchCriteriaId":"D9F1242D-E49C-49E8-B011-ACCD096BB62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:*","matchCriteriaId":"CB5B1AD3-F98A-4608-92E3-03D595DC24F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:*","matchCriteriaId":"A3B73EA3-7055-47F4-927B-DAE9CCC0790B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:*","matchCriteriaId":"754ACBCB-BF5C-49C2-8608-DF0B60F75C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:*","matchCriteriaId":"6654B10A-5D16-4D13-A329-512A1D8100D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:*","matchCriteriaId":"33A9B4AA-4EBF-49A9-8081-68AE10D3B36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:*","matchCriteriaId":"E57C145D-44AD-4D3D-AC95-A02F4343E9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:*","matchCriteriaId":"581016A0-9C71-4C69-BA07-DED9E58B9D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:*","matchCriteriaId":"D7E76D59-7A74-44A9-9E34-F2573C7BD023"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:*","matchCriteriaId":"F375FFAD-88A2-4DCE-A609-2965692483CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:*","matchCriteriaId":"5C001773-96B8-4CC9-9841-EBAFD4724FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:*","matchCriteriaId":"2EAAD240-17C9-4804-9BDE-F13B94EC6580"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:*","matchCriteriaId":"AF897C5D-1751-4FCE-8814-51FBECB7143B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:*","matchCriteriaId":"DBEF5C40-189C-4CA3-AC7E-7B06040AE984"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:*","matchCriteriaId":"C232FE64-92E6-4090-BA28-53A6EC1794EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:*","matchCriteriaId":"3BC9CEB4-0708-4BF2-B126-94ADC1F83870"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:*","matchCriteriaId":"4C7FB2D4-C9FA-4B4D-9DA5-EF7262F00E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:*","matchCriteriaId":"3B7DDC74-EAB2-4159-B234-6A282155D137"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:*","matchCriteriaId":"E9BA1059-992E-4C20-A7CE-7113BA768663"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:*","matchCriteriaId":"27E1FB43-1D6B-48B0-ADA1-CCE1BFF03E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:*","matchCriteriaId":"989146A9-B308-4097-9E01-E6DE1DD7FCCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:*","matchCriteriaId":"59B24C7F-ABC5-43EC-86A0-5E1985522FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:*","matchCriteriaId":"0C8010C1-C565-4743-9D15-40040FB43B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:*","matchCriteriaId":"232A9D64-5D09-4C97-A40C-AC7BCBFAC656"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:*","matchCriteriaId":"1DCFFFEC-C0FA-43F9-8D51-281D2687A112"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:*","matchCriteriaId":"19E0BE43-463C-4181-B391-BF4365B85B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:*","matchCriteriaId":"DAA2A9CD-697A-448B-BC5B-1B5C62EAC8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:*","matchCriteriaId":"557535DF-E017-4B5D-BF31-108842792600"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:*","matchCriteriaId":"AF066A80-84B8-40FF-9A48-D72D5475DEEA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:*:*:*:*:*:*:*:*","versionEndIncluding":"1.35","matchCriteriaId":"0A91B639-B1FE-4794-845C-31D614B6EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AEE7175F-DC6C-4555-B9E0-0FCA0B86B826"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.01:*:*:*:*:*:*:*","matchCriteriaId":"E6019D20-B7C5-45E9-80A9-EF6A484E2307"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.02:*:*:*:*:*:*:*","matchCriteriaId":"F74E7270-0289-4967-A291-5A03053CB68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.03:*:*:*:*:*:*:*","matchCriteriaId":"BA120555-B228-471C-B00A-01F2D5144FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3B4F44-B349-43A3-801F-38FCB53838E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.04:*:*:*:*:*:*:*","matchCriteriaId":"A06BA9F6-30E4-4141-A995-A0F63ABF9D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.05:*:*:*:*:*:*:*","matchCriteriaId":"DD5FEAE4-3792-4778-A199-CAEA59A66068"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.06:*:*:*:*:*:*:*","matchCriteriaId":"1FB8FAE6-C6DA-456C-839D-A241493F54D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.07:*:*:*:*:*:*:*","matchCriteriaId":"85BDABE2-E5A5-453C-B1EF-66EA5001191B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.08:*:*:*:*:*:*:*","matchCriteriaId":"083BB632-3482-4D99-9515-7D3969FA5577"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.09:*:*:*:*:*:*:*","matchCriteriaId":"79EB74F9-E4A0-4C3F-9CCC-2157A8DD7EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.11:*:*:*:*:*:*:*","matchCriteriaId":"80AE1A3C-4A65-4C49-9C92-B196AF6EBFD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.12:*:*:*:*:*:*:*","matchCriteriaId":"B43C3258-E651-4595-83D0-1E370DA2A969"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.13:*:*:*:*:*:*:*","matchCriteriaId":"15899226-AE31-49B3-9C66-78E85FC4B628"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.14:*:*:*:*:*:*:*","matchCriteriaId":"A0221377-D94B-4FAD-BAC9-C7179A4D355D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.15:*:*:*:*:*:*:*","matchCriteriaId":"B2EA98CD-0647-4C0C-B33B-55EEC218D69A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.16:*:*:*:*:*:*:*","matchCriteriaId":"8CC3C505-D136-4218-88E4-A89DE05E372D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.17:*:*:*:*:*:*:*","matchCriteriaId":"3D3DB77B-8E44-4A11-97C8-F4736C40EA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.18:*:*:*:*:*:*:*","matchCriteriaId":"35DB68BA-906A-4B58-B93B-59E237A2DFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.19:*:*:*:*:*:*:*","matchCriteriaId":"423494D6-B192-4182-8B6E-AD6BB8E0DED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.20:*:*:*:*:*:*:*","matchCriteriaId":"D05202FC-AC0B-4F66-BEBA-E8C1D650D9A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.21:*:*:*:*:*:*:*","matchCriteriaId":"E9BE90FD-346A-4E1C-A768-333000ACE323"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.22:*:*:*:*:*:*:*","matchCriteriaId":"393BCDA6-ED42-4173-8022-2CD1487EF004"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.23:*:*:*:*:*:*:*","matchCriteriaId":"5F8237FE-937B-41AD-AB1B-8331FF409550"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.24:*:*:*:*:*:*:*","matchCriteriaId":"9333C3E7-0050-4AB5-83FC-E683CCCAF614"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.25:*:*:*:*:*:*:*","matchCriteriaId":"45EACB03-5B75-49D4-A24D-4117045BBE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.26:*:*:*:*:*:*:*","matchCriteriaId":"7483646A-B9B4-4D14-BF02-900A1405F1FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:*","matchCriteriaId":"D7BE8753-AA5A-4B71-96C4-D0F30F0FDF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.28:*:*:*:*:*:*:*","matchCriteriaId":"A8967308-CB4F-47AB-8761-A8AC27247D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.29:*:*:*:*:*:*:*","matchCriteriaId":"46FD4731-2314-465F-B9D7-CC907EC8CE42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.30:*:*:*:*:*:*:*","matchCriteriaId":"5E50EB43-2389-4D6C-BAFA-2B024F521FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.32:*:*:*:*:*:*:*","matchCriteriaId":"D8FBEB87-300E-4245-867D-3CC79163B941"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.33:*:*:*:*:*:*:*","matchCriteriaId":"E48550BA-18A0-4682-9F83-71B8294FEC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.34:*:*:*:*:*:*:*","matchCriteriaId":"B462DAC1-4037-468F-897B-05CDFAFA4DB3"}]}]}],"references":[{"url":"http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580","source":"cve@mitre.org"},{"url":"http://www.bouncycastle.org/csharp/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bouncycastle.org/devmailarchive/msg08195.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bouncycastle.org/releasenotes.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50358","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50359","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50360","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bouncycastle.org/csharp/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bouncycastle.org/devmailarchive/msg08195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bouncycastle.org/releasenotes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6722","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration."},{"lang":"es","value":"Vidalia bundle versiones anteriores a v0.1.2.18, cuando se ejecuta en Windows y Mac OS X, instala Privoxy con un fichero de configuración (config.txt or config) que contiene un ajuste inseguro de (1) enable-remote-toggle y (2) enable-edit-actions, lo cual permite a atacantes remotos evitar restricciones de acceso intencionadas y modificar la configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vidalia-project:vidalia_bundle:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2.17","matchCriteriaId":"74F4F94C-9874-4D53-8912-4FE50D1645BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00291.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50066","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6723","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-remote-toggle and (2) enable-edit-actions settings, which allows remote attackers to bypass intended access restrictions and modify configuration."},{"lang":"es","value":"TorK anterior a v0.22, cuando se ejecuta en Windows y Mac OS X, instala Privoxy con un fichero de configuración (config.txt or config) que contiene parámetros inseguros (1)conmutación remota habilitada (2) acciones de edición habilitadas, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas y modificar la configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anonymityanywhere:tork:0.22:*:*:*:*:*:*:*","matchCriteriaId":"51B0A618-56EA-4B9E-92CD-A7ED09E34E79"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"CF0D73F4-3063-4B66-882E-39E50708E279"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00291.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00296.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=551544&group_id=159836","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48694","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26386","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42280","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=551544&group_id=159836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6724","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration."},{"lang":"es","value":"Vidalia bundle versiones anteriores a v0.1.2.18, cuando se ejecuta en Windows y Mac OS X, instala Privoxy con un fichero de configuración (config.txt o config) que contiene un ajuste inseguro enable-remote-http-toggle, lo cual permite a atacantes remotos evitar restricciones de acceso intencionadas y modificar la configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vidalia-project:vidalia_bundle:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2.17","matchCriteriaId":"74F4F94C-9874-4D53-8912-4FE50D1645BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00291.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50474","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/talk/Oct-2007/msg00291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6725","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function."},{"lang":"es","value":"El filtro de decodificar CCITTFax en Ghostscript v8.60, v8.61, y posiblemente otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecución de código arbitrario a través de un fichero PDF modificado que provoca un desbordamiento inferior de búfer en la función cf_decode_2d."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.60:*:*:*:*:*:*:*","matchCriteriaId":"7B283683-D924-4C69-87F3-355ECC0DBA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*","matchCriteriaId":"265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35559","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35569","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/fedora-package-announce%40redhat.com/msg11830.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/10","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0420.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34337","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=229174","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=493442","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9507","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/757-1/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/fedora-package-announce%40redhat.com/msg11830.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0420.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=229174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=493442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/757-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6726","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) \r\nDojo v0.4.1 y v0.4.2, como el utilizado en Apache Struts y otros productos, permite a atacantes remotos inyectar web script o HTML de su elección a través de vectores no especificados inplicando a (1) xip_client.html y (2) xip_server.html en src/io/. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E1BABB2-780E-47E0-87A9-A164906C8421"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"528A98A5-751F-40F1-9AF7-0CB84D0E154A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DA636E72-459D-44A8-8278-4E5091975D25"}]}]}],"references":[{"url":"http://www.dojotoolkit.org/0-4-3-and-updated-0-4-1-0-4-2-builds","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dojotoolkit.org/2007/05/26/0-4-3-released-0-4-2-and-0-4-1-users-should-upgrade-immediately","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dojotoolkit.org/releaseNotes/0.4.3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34660","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49884","source":"cve@mitre.org"},{"url":"https://issues.apache.org/struts/browse/WW-2134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dojotoolkit.org/0-4-3-and-updated-0-4-1-0-4-2-builds","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dojotoolkit.org/2007/05/26/0-4-3-released-0-4-2-and-0-4-1-users-should-upgrade-immediately","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dojotoolkit.org/releaseNotes/0.4.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/struts/browse/WW-2134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-6727","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en topic.php de KerviNet Forum v1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro forum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E247F110-1648-462A-AF0E-2BA9BE46888F"}]}]}],"references":[{"url":"http://forum.antichat.ru/showpost.php?p=340740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://forum.antichat.ru/showpost.php?p=340740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2007-6728","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en XMB v1.5, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del campo MSN durante el registro del usuario."}],"vendorComments":[{"organization":"XMB_Forum","comment":"As noted in https://docs.xmbforum2.com/index.php?title=Security_Issue_History XMB versions 1.9.1 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2021-04-19T12:47:41.210"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C24045D-7BF0-48DA-A85D-7444E995D1BB"}]}]}],"references":[{"url":"http://forum.antichat.ru/showpost.php?p=340740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"http://forum.antichat.ru/showpost.php?p=340740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6729","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la interfaz de gestión Web del router ZyXEL P-330W, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro pingstr y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-330w_router:*:*:*:*:*:*:*:*","matchCriteriaId":"4C1C6A04-D7A8-489E-8474-22F56E3FB294"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2007/Dec/0559.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27024","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0559.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6730","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote router management via goform/formRmtMgt or (2) modify the administrator password via goform/formPasswordSetup."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en el interfaz web de administración en el router ZyXEL P-330W permite a atacantes remotos secuestrar la autenticación de los administradores para las peticiones para (1) activar la administración remota del router o (2) modificar la contraseña del administrador a través de goform/formPasswordSetup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:p-330w_router:*:*:*:*:*:*:*:*","matchCriteriaId":"4C1C6A04-D7A8-489E-8474-22F56E3FB294"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2007/Dec/0559.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27024","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2007/Dec/0559.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6731","sourceIdentifier":"cve@mitre.org","published":"2009-09-13T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow."},{"lang":"es","value":"Extended Module Player (XMP) v2.5.1 y anteriores, permiten a atacantes remotos ejecutar código de su elección mediante un fichero OXM con un valor negativo, esto evita una comprobación en las funciones (1) test_oxm y (2) decrunch_oxm de misc/oxm.c, lo que provoca un desbordamiento del búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"75D57072-FB7D-492A-9598-CACE7ECBBF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A329FEF0-CCA9-463C-B1A8-742342193815"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB814723-8284-4D7B-AC1F-2BEBE3BBC47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D8AE9AF-2AFA-4CC1-A434-4AE238A5207B"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"13BE4EDE-5BE6-4C1F-9402-C9CDB5B5DB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0E8751F9-9012-45BC-8EEE-B1FD71A070F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5793923-D9A1-4A31-A5AD-C73CB8DB7F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"767BA633-F914-482F-A517-9ABC19F26529"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A10E8E57-C623-4F06-99D0-2802A5016EC0"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/xmpbof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27047","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://aluigi.altervista.org/adv/xmpbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-6732","sourceIdentifier":"cve@mitre.org","published":"2009-09-13T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays."},{"lang":"es","value":"Múltiples desbordamientos del búfer en la función dtt_load de loaders/dtt_load.c Extended Module Player (XMP) v2.5.1 y anteriores, permiten a atacantes remotos ejecutar código de su elección a través de vectores no especificados relacionados con un valor de tamaño no confiable y los arrays (1) pofs y (2) plen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"75D57072-FB7D-492A-9598-CACE7ECBBF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A329FEF0-CCA9-463C-B1A8-742342193815"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB814723-8284-4D7B-AC1F-2BEBE3BBC47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D8AE9AF-2AFA-4CC1-A434-4AE238A5207B"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"13BE4EDE-5BE6-4C1F-9402-C9CDB5B5DB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0E8751F9-9012-45BC-8EEE-B1FD71A070F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5793923-D9A1-4A31-A5AD-C73CB8DB7F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"767BA633-F914-482F-A517-9ABC19F26529"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_matsuoka:extended_module_player:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A10E8E57-C623-4F06-99D0-2802A5016EC0"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/xmpbof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27047","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://aluigi.altervista.org/adv/xmpbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-0004","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:08.780","lastModified":"2023-11-07T02:01:38.383","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-0015","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka \"Microsoft Video ActiveX Control Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en la pila MPEG2TuneRequest en la dll svidctl del control Microsoft Video ActiveX en Microsoft DirectShow para Windows 2000, XP, y Server 2003 permiten a atacantes remotos ejecutar código arbitrario a tra´ves de páginas web manipuladas, como se ha explotado libremente Julio de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"4D5F7729-A095-43DF-BF2F-B4B6938087FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=6733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36187","source":"cve@mitre.org"},{"url":"http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/threats/329.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/180513","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/972890.mspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35585","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022514","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-187A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-032","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6333","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6363","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7436","source":"cve@mitre.org"},{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=6733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/55651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/threats/329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/180513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/972890.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-187A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0020","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption, aka \"ATL Header Memcopy Vulnerability,\" a different vulnerability than CVE-2008-0015."},{"lang":"es","value":"Una vulnerabilidad no especificada en el método Load en la interfaz IPersistStreamInit de Active Template Library (ATL), tal y como es usado en el control ActiveX de Microsoft Video en la biblioteca msvidctl.dll en DirectShow, en Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista versión Gold, SP1, y SP2, y Server 2008 versión Gold y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos que desencadenan una corrupción de memoria, también se conoce como \"ATL Header Memcopy Vulnerability\", una vulnerabilidad diferente de CVE-2008-0015."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"4D5F7729-A095-43DF-BF2F-B4B6938087FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/329.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022712","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5850","source":"cve@mitre.org"},{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-0067","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-08T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en HP OpenView Network Node Manager (OV NNM) v7.51 permite a atacantes remotos ejecutar código de su elección a través de (1) parámetros de cadenas largas del programa CGI OpenView5.exe; (2) un parámetro de cadena larga del programa CGI OpenView5.exe, relacionado con ov.dll; o un parámetro de cadena larga de los programas CGI (3) getcvdata.exe, (4) ovlaunch.exe, o (5) Toolbar.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123247393715913&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://marc.info/?l=bugtraq&m=123247393715913&w=2","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/28074","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-13/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4885","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/8307","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securitytracker.com/id?1021521","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/499826/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33147","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://marc.info/?l=bugtraq&m=123247393715913&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123247393715913&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-13/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/8307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1107","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-17T00:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function."},{"lang":"es","value":"Múltiples desbordamientos del búfer basados en pila en el control Danske Bank e-Sec Control Module ActiveX (DanskeSikker.ocx) v3.1.0.48, y posiblemente versiones anteriores, permiten a atacantes remotos ejecutar código de su elección mediante mediante argumentos largos hacia métodos no especificados, los cuales no son manejados adecuadamente por la función logging."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:danskebank:danskesikker.ocx:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0.48","matchCriteriaId":"C06FFB3D-FBD1-42B7-9015-6B9102809091"}]}]}],"references":[{"url":"http://osvdb.org/53715","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/29635","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-17/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502725/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34549","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1047","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49903","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/53715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-17/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502725/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1378","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:09.343","lastModified":"2023-11-07T02:01:56.740","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2360, CVE-2008-2361, CVE-2008-2362.  Reason: This candidate has been withdrawn by its CNA.  It was SPLIT into separate candidates before publication.  Notes: All CVE users should reference CVE-2008-2360, CVE-2008-2361, and CVE-2008-2362 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-1517","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via unspecified vectors related to workqueues."},{"lang":"es","value":"El núcleo en Apple Mac OS X v10.5 antes de v10.5.7 no verifica los índices correctamente durante la tramitación de colas de trabajo (workqueues), lo cual permite a usuarios locales obtener privilegios o provocar una denegación de servicio (apagado del sistema) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=797","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022213","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50489","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1674","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:09.577","lastModified":"2023-11-07T02:02:02.443","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-2025","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"insufficient quoting of parameters.\""},{"lang":"es","value":"Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS)en Apache Struts anteriores a v1.2.9-162.31.1 en SUSE Linux Enterprise (SLE) v11, anteriores a v1.2.9-108.2 en SUSE openSUSE v10.3, anteriores a v1.2.9-198.2 en SUSE openSUSE v11.0, y anteriores a v1.2.9-162.163.2 en SUSE openSUSE v11.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no específicos, relativo a \"Citando la insuficiencia de parámetros.\" \r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"This is not a security flaw in Struts. Struts has never guaranteed to perform filtering of the untrusted user inputs used as html tag attributes names or values. If user inputs need to be used as part of the tag attributes, the JSP page needs to perform filtering explicitly. For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2025","lastModified":"2009-10-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EE1B8A83-43A4-4C4F-BB95-4D9CAD882D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A55DDFE1-A8AB-47BB-903E-957FCF3D023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EDDD509E-9EBF-483F-9546-A1A3A1A3380E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2FC81E1A-2779-4FAF-866C-970752CD1828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"CBD69FAE-C1A3-4213-824A-7DCCE357EB01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:novell:suse_linux:11:-:enterprise:*:*:*:*:*","matchCriteriaId":"BB545D91-1C4C-4692-B01A-B8DAE4A958BE"},{"vulnerable":false,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":false,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":false,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]}],"references":[{"url":"http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34567","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://support.novell.com/security/cve/CVE-2008-2025.html","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=385273","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2008-2025","source":"cve@mitre.org"},{"url":"http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/security/cve/CVE-2008-2025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=385273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2008-2025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2154","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T21:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls."},{"lang":"es","value":"IBM DB2 v8 anterior a FP17, v9.1 anterior a FP5 y v9.5 anterior a FP2, ofrece un procedimiento INSTALL_JAR (también conocido como sqlj.install_jar), lo que permite a usuarios autenticados remotamente crear o sobrescribir ficheros de su elección a través de llamadas sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*","matchCriteriaId":"E0252A93-49D5-4C5E-B774-8400526CA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/48147","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35409","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51105","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/48147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2367","sourceIdentifier":"secalert@redhat.com","published":"2009-01-20T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files."},{"lang":"es","value":"Red Hat Certificate System v7.2 utiliza permisos legibles por todo el mundo para password.conf y otros ficheros de configuración sin especificar, lo que permite a usuarios locales descubrir contraseñas leyendo estos ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*","matchCriteriaId":"27FE079E-FB15-443C-BE2E-1D4C940BB8C0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33540","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021608","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33288","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0145","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=451998","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48021","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0006.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0007.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=451998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2368","sourceIdentifier":"secalert@redhat.com","published":"2009-01-20T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files."},{"lang":"es","value":"Red Hat Certificate System 7.2 almacena contraseñas en texto claro en el log UserDirEnrollment, el log RA wizard installer, y otros ficheros de log de errores sin especificar, y utiliza la debilidad en los permisos para esos ficheros, lo que permite a usuarios locales descubrir contraseñas leyendo los ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*","matchCriteriaId":"27FE079E-FB15-443C-BE2E-1D4C940BB8C0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33540","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021608","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33288","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0145","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452000","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48022","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0006.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0007.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2373","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:09.797","lastModified":"2023-11-07T02:02:12.140","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2863.  Reason: This candidate is a reservation duplicate of CVE-2008-2863.  Notes: All CVE users should reference CVE-2008-2863 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-2381","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable."},{"lang":"es","value":"Vulerabilidad de inyección SQL en la función create de common/include/GroupJoinRequest.class en Gforge v4.5 y v4.6 permite a atacantes remotos ejecutar comandos SQL de su elección a través de la variable comments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*","matchCriteriaId":"542842B0-9FD5-48A8-915E-59F030FED57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.6:*:*:*:*:*:*:*","matchCriteriaId":"96E41168-4BBA-4837-A025-5B6C12CB039B"}]}]}],"references":[{"url":"http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&r1=4590&r2=6709","source":"cve@mitre.org"},{"url":"http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&view=log","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33499","source":"cve@mitre.org"},{"url":"http://security-tracker.debian.net/tracker/CVE-2008-2381","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021510","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47703","source":"cve@mitre.org"},{"url":"http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&r1=4590&r2=6709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-tracker.debian.net/tracker/CVE-2008-2381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2383","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en xterm, permite a atacantes asistidos por usuarios ejecutar comandos de su elección a través de caracteres LF (también conocido como \\n) que rodean el nombre del comando dentro de una secuencia de escape evice Control Request Status String (DECRQSS) en un fichero de texto, es una cuestión relacionada con CVE-2003-0063 y CVE-2003-0071."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"BE291BE0-5A80-4D58-BF1F-1A7089D2471E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33397","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33418","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33419","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33820","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1694","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0018.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0019.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33060","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021522","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/703-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/703-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2384","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Please note that this describes the software used in debian as mod-auth-mysql (binary name is libapache2-mod-auth-mysql). It is different from the Sourceforge project.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \\ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mod_auth_mysql.c en el módulo mod-auth-mysql (alias libapache2-mod-auth-mysql) para Apache HTTP Server 2.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través de codificaciones de caracteres multibyte para entradas no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joey_schulze:mod_auth_mysql:*:*:*:*:*:*:*:*","matchCriteriaId":"AA0279B9-09FB-47F7-BBDB-71695C08351E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"154566FB-0D1A-4DC2-AFE6-49DE93850951"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*","matchCriteriaId":"BBD08D4C-3C73-4AAE-8343-BBE487CF6040"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:beta:*:*:*:*:*:*","matchCriteriaId":"1C3E2656-8071-40DA-9480-AC13010A9D09"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*","matchCriteriaId":"F88372A5-FDF3-4B75-BB4C-8D9C9E8AD850"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.34:beta:*:*:*:*:*:*","matchCriteriaId":"7C649D2F-A633-456E-899C-6253FDE9A626"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*","matchCriteriaId":"432DA9CE-EB82-406B-AD23-FD565E6C91BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*","matchCriteriaId":"2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*","matchCriteriaId":"19F34D08-430E-4331-A27D-667149425176"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*","matchCriteriaId":"248BDF2C-3E78-49D1-BD9C-60C09A441724"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*","matchCriteriaId":"BB0FDE3D-1509-4375-8703-0D174D70B22E"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:win32:*:*:*:*:*","matchCriteriaId":"3C32C8EB-A762-46FB-81C0-06E51109610F"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*","matchCriteriaId":"449A5647-CEA6-4314-9DB8-D086F388E1C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*","matchCriteriaId":"B5A407B7-F432-48F0-916A-A49952F85CA6"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*","matchCriteriaId":"6B5AC769-D07D-43C7-B252-A5A812E7D58C"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*","matchCriteriaId":"ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*","matchCriteriaId":"F2F19D71-0A58-4B03-B351-596EB67ECF80"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*","matchCriteriaId":"5EBB3FF9-CF5A-4E7B-ACE3-A198343AD485"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*","matchCriteriaId":"D721FFB5-D6D3-4F60-8B09-B3AD07EE6D4D"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.56:*:*:*:*:*:*:*","matchCriteriaId":"97E8F32E-C2E5-44E3-A920-F09AF919D372"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.57:*:*:*:*:*:*:*","matchCriteriaId":"0CF37A82-49B6-45D4-B91D-FDA2D4463A0C"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.58:*:*:*:*:*:*:*","matchCriteriaId":"030D1767-2DF7-48E3-B462-4B49CA751B35"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.58:*:win32:*:*:*:*:*","matchCriteriaId":"F4E01B68-95EC-4CC7-8929-B3F4EF382ADB"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.59:*:*:*:*:*:*:*","matchCriteriaId":"5236DC61-5557-4C24-8F5B-F48548448588"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.60:*:*:*:*:*:*:*","matchCriteriaId":"8CB9F19A-5DC0-4C44-8BAF-B8FD047DAB56"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.0.61:*:*:*:*:*:*:*","matchCriteriaId":"3B468F9B-2514-425C-9279-0FCAF73BBD18"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"00BC31A3-B9AC-4776-83C1-668636B74104"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D72E88F0-AB0F-4B6F-AE86-71B0DE84BD75"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"840FF871-79EC-472C-91BD-9E9AFC36B408"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"191E8654-5338-4051-A1D5-EE491D594F13"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B26CC819-7315-456F-9F95-2A64FCE6AC26"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3774827-AB0B-4A95-844B-9BC904A9FE98"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D07925-542B-4369-AA21-5587703E12E0"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ACC83EB5-4E9A-4EA9-8D9F-BDBF5F60C54A"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"80632488-5C7E-4C70-BB60-BC4756187670"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACBC75F8-C1AF-45AE-91BA-5670EF2D0DCD"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"67AD11FB-529C-404E-A13B-284F145322B8"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"733D62FE-180A-4AE8-9DBF-DA1DC18C1932"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"9708E73F-33D8-45DD-BC88-19A590F05103"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:windows:*:*:*:*:*","matchCriteriaId":"D0F5026B-E97E-48EB-871D-A77E44AE2C38"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"34A847D1-5AD5-4EFD-B165-7602AFC1E656"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C338A4DA-B714-414D-94B3-15EAE8147D4B"}]}]}],"references":[{"url":"http://klecker.debian.org/~white/mod-auth-mysql/CVE-2008-2384_mod-auth-mysql.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053899.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053903.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/21/10","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33627","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43302","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0259.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-1002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33392","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0226","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0367","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480238","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48163","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10172","source":"cve@mitre.org"},{"url":"http://klecker.debian.org/~white/mod-auth-mysql/CVE-2008-2384_mod-auth-mysql.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053899.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053903.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/21/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-1002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2438","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-28T16:30:03.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow."},{"lang":"es","value":"El desbordamiento de enteros en el archivo ovalarmsrv.exe en OpenView Network Node Manager (OV NNM) de HP versiones 7.01, 7.51 y 7.53, permite a los atacantes remotos ejecutar código arbitrario por medio de un comando diseñado al puerto TCP 2954, conllevando a un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://osvdb.org/54107","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-38/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503024","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/503024","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/503039/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34738","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1187","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-38/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503039/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-2475","sourceIdentifier":"cret@cert.org","published":"2009-06-09T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.kb.cert.org/vuls/id/983731\r\n\r\nThis update is addressed in version 1.0.27 of the Ebay Enhanced Picture Control software.","cveTags":[],"descriptions":[{"lang":"en","value":"eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property."},{"lang":"es","value":"Control eBay Enhanced Picture Uploader ActiveX \r\n(EPUWALcontrol.dll) anterior a v1.0.27, permite a atacantes remotos ejecutar comandos de su elección a través de la propiedad \"PictureUrls\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ebay:enhanced_picture_uploader_activex_control:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.26","matchCriteriaId":"8A0A4EB1-2417-4BC5-BAA3-EE7E0AAB84A6"}]}]}],"references":[{"url":"http://osvdb.org/54968","source":"cret@cert.org"},{"url":"http://pages.ebay.com/securitycenter/activex/index.html","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35412","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/983731","source":"cret@cert.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35248","source":"cret@cert.org"},{"url":"http://osvdb.org/54968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pages.ebay.com/securitycenter/activex/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/983731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2623","sourceIdentifier":"cve@mitre.org","published":"2009-01-14T02:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Note 2 in Oracle Application Server Risk Matrix states \"The versions in the matrix refer to standalone versions of JDeveloper.\"  Therefore, Oracle Application Server was not included in the CPE configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle JDeveloper en Oracle Application Server 10.1.2.3 permite a usuarios locales afectar la confidencialidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdeveloper:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1EAEAAF4-3DF9-40B0-BCCE-455932F885A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33177","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021572","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-2804","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:10.017","lastModified":"2023-11-07T02:02:19.077","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2800.  Reason: This candidate is a reservation duplicate of CVE-2008-2800.  Notes: All CVE users should reference CVE-2008-2800 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-3074","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the \"!\" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075.  NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier."},{"lang":"es","value":"La funcion shellescape en Vim desde v7.0 hasta v7.2, incluida la v7.2a.10, lo que permite a atacantes asistidos por el usuario ejecutar codigo a su eleccion a traves del metacaracter de linea de secuencia de comandos \"!\" (exclamacion) en (1) El nombre del fichero de un archi tar y posiblemente (2)el nombre del primer fichero de un archivo tar, el cual no es adecuadamente manejado por el plugin VIM TAR (tar.vim) v.10 hasta v.22, como quedo demostrado en los casos de prueba tarplugin.v2, tarplugin, y tarplugin.updated. NOTA: Estos datos tiene las mismas causas que CVE-2008-3075. NOTA: Debido a la complejidad de la revelaciones asociadad y la informacion incompleta relacionada con este hecho, es posible que existan inexactitudes en la descripcion de esta vulnerabilidad"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.10:*:*:*:*:*:*:*","matchCriteriaId":"2B487E3B-B247-4D72-B3AF-52D0ABEF0686"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.11:*:*:*:*:*:*:*","matchCriteriaId":"CE35C07E-621A-4106-A4E6-F60CD3AFFA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.12:*:*:*:*:*:*:*","matchCriteriaId":"F279ECB9-6CC8-4D0D-95B0-22754302873C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.13:*:*:*:*:*:*:*","matchCriteriaId":"72A0A3B1-789F-44B9-A96A-E7A89C1CF98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.14:*:*:*:*:*:*:*","matchCriteriaId":"7C9F9C9C-4476-4A39-A08A-E6BC341876DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.15:*:*:*:*:*:*:*","matchCriteriaId":"E1514FE8-72B2-4766-963B-D5E1002F67E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.16:*:*:*:*:*:*:*","matchCriteriaId":"AB78E2BB-A45A-4379-A8FE-41ABC775EC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.17:*:*:*:*:*:*:*","matchCriteriaId":"24BD87B3-A388-4898-B433-E3553B9A3AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.18:*:*:*:*:*:*:*","matchCriteriaId":"FF1FAF13-267E-4669-A379-AB31562452C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.19:*:*:*:*:*:*:*","matchCriteriaId":"F9B36F1A-C11D-4824-AB8E-261A07A18993"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.20:*:*:*:*:*:*:*","matchCriteriaId":"EFBD8B15-F906-47FA-87B3-19DABD821B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.21:*:*:*:*:*:*:*","matchCriteriaId":"3A699C78-DF9C-4DC4-8DE4-0C03392D9690"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:tar.vim:v.22:*:*:*:*:*:*:*","matchCriteriaId":"25B01224-1A26-41C7-9191-CC14EDB2EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97CCAA40-55CE-4AB9-9268-AADA06E29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1.266:*:*:*:*:*:*:*","matchCriteriaId":"99E9ABC5-442C-4693-8F86-A969AD89A0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1.314:*:*:*:*:*:*:*","matchCriteriaId":"12BE4D12-2B98-4617-ADE2-6E71552306A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3613F5F4-9B8C-4020-8550-23310A41C85C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/4","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/12","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim-shellescape.html","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32462","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467428","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10754","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim-shellescape.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3075","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the \"!\" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive, which is not properly handled by zip.vim in the VIM ZIP plugin (zipPlugin.vim) v.11 through v.21, as demonstrated by the zipplugin and zipplugin.v2 test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712.  NOTE: this issue has the same root cause as CVE-2008-3074.  NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier."},{"lang":"es","value":"La funcion shellescape en Vim v7.0 hasta v7.2, incluida la v7.2a.10, permite atacantes asistidos por el usuario ejecutar codigo a su eleccion a traves del metacaracter \"!\" (exclamacion) en la linea de comandos en (1)El nombre de fichero de un archivo ZIP y posiblemente (2)el nombre del primer fichero de un archivo ZIP, el cual no es manejado adecuadamente por zip.vim en el plugin ZIP VIM (zipPlugin.vim) v.11 hasta v.21, como se ha demostrado en los casos de prueba zipplugin y zipplugin.v2. NOTA: Esta informacion es debido al arreglo incompleto de CVE-2008-3074. NOTA: Debido a la complejidad de los hechos relacionados y la incompleta informacion sobre este, probablemente existen inexactitudes en la descripcion de esta vulnerabilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97CCAA40-55CE-4AB9-9268-AADA06E29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1.266:*:*:*:*:*:*:*","matchCriteriaId":"99E9ABC5-442C-4693-8F86-A969AD89A0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1.314:*:*:*:*:*:*:*","matchCriteriaId":"12BE4D12-2B98-4617-ADE2-6E71552306A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.2:*:*:*:*:*:*:*","matchCriteriaId":"3613F5F4-9B8C-4020-8550-23310A41C85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.2a.10:*:*:*:*:*:*:*","matchCriteriaId":"82E3ADB1-C84F-49D9-81B5-7BCA9B96A3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.11:*:*:*:*:*:*:*","matchCriteriaId":"A65BA734-30C8-400C-AF02-EED915462E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.12:*:*:*:*:*:*:*","matchCriteriaId":"17E163F7-65E4-4FA1-A8FF-8B78FB50C502"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.13:*:*:*:*:*:*:*","matchCriteriaId":"5BE5C486-1D0D-4B43-8999-B08C817CC269"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.14:*:*:*:*:*:*:*","matchCriteriaId":"1C077F94-D041-4871-A0C9-44E33BA01CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.15:*:*:*:*:*:*:*","matchCriteriaId":"0DC62FFD-E770-45A5-9CED-EC97B4C2C897"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.16:*:*:*:*:*:*:*","matchCriteriaId":"0F20FFF3-B384-4B94-BDEF-938796D326F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.17:*:*:*:*:*:*:*","matchCriteriaId":"EAFE185D-B714-4A46-A93F-D1E3AC28645E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.18:*:*:*:*:*:*:*","matchCriteriaId":"D747F46B-8F8D-465A-984C-AD4FCBEA5354"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.19:*:*:*:*:*:*:*","matchCriteriaId":"30B87583-F00F-489D-9BBD-1D64A0595C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.20:*:*:*:*:*:*:*","matchCriteriaId":"3A7C5390-527E-470B-9F64-7BF16F1C09F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:zipplugin.vim:v.21:*:*:*:*:*:*:*","matchCriteriaId":"287EF92F-5067-41BA-88BE-20A57E9A1AE5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/12","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32463","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467432","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10246","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/10/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/15/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/08/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3076","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T22:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the (1) mz and (2) mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712."},{"lang":"es","value":"El plugin Netrw 125 en netrw.vim en Vim 7.2a.10 permite a atacantes asistidos por el usuario ejecutar comandos de su elección a través de metacaracteres de línea de comandos en utilizados para ejecutar funciones de sistema dentro de los comandos (1) mz y (2) mc, como se demostro en los casos de prueba netrw.v2 y netrw.v3. NOTA: Esta informacion existe por el arreglo incompleto de CVE-2008-2712."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Vim packages, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nNote: This CVE is mentioned in the text of RHSA-2008:0580 (https://rhn.redhat.com/errata/RHSA-2008-0580.html), as it was originally used to track multiple issues.  Issues that affected Vim packages in Red Hat Enterprise Linux 5 were later assigned separate CVE identifier - CVE-2008-6235.  Neither of issues currently covered by CVE-2008-3076 (insufficient shell escaping in mz and mc commands) affected Vim packages shipped with Red Hat Enterprise Linux 5.","lastModified":"2009-02-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.2a.10:*:*:*:*:*:*:*","matchCriteriaId":"82E3ADB1-C84F-49D9-81B5-7BCA9B96A3F0"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=122416184431388&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/4","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/12","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim-netrw.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim-netrw.v2.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43624","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=121494431426308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=122416184431388&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/07/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2008/07/08/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim-netrw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim-netrw.v2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3284","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:10.233","lastModified":"2023-11-07T02:02:26.743","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3283.  Reason: This candidate is a reservation duplicate of CVE-2008-3283.  Notes: All CVE users should reference CVE-2008-3283 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-3358","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T18:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URI, which causes the XSS payload to be reflected in a text/plain document."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el Web Dynpro (WD) en el portal SAP NetWeaver, cuando se usa con Internet Explorer v7.0.5730, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una URI manipulada, lo que provoca que la carga XSS sea reflejada en un documento de texto plano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*","matchCriteriaId":"5007E3B7-3C36-4256-9E01-51C6F52FD0FF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730:*:*:*:*:*:*:*","matchCriteriaId":"E3B85C32-02F5-43F5-8BBB-5A240F99BAA9"}]}]}],"references":[{"url":"http://osvdb.org/51627","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://service.sap.com/sap/support/notes/1235253","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2008-3358.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500415/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33465","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021638","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48237","source":"cve@mitre.org"},{"url":"http://osvdb.org/51627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://service.sap.com/sap/support/notes/1235253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2008-3358.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500415/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3517","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:10.453","lastModified":"2023-11-07T02:02:31.170","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3522.  Reason: This candidate is a reservation duplicate of CVE-2008-3522.  Notes: All CVE users should reference CVE-2008-3522 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-3518","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:10.670","lastModified":"2023-11-07T02:02:31.410","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3283.  Reason: This candidate is a reservation duplicate of CVE-2008-3283.  Notes: All CVE users should reference CVE-2008-3283 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-3547","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T21:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors involving many long names for \"companies and clients.\""},{"lang":"es","value":"Desbordamiento de búfer en el servidor en OpenTTD v0.6.1 y anteriores permite a usuarios remotos autentificados producir una denegación de servicio (continua interrupción del juego) o posiblemente ejecutar código arbitrario a través de vectores incluyendo muchos nombres largos para \"compañías y clientes\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.1","matchCriteriaId":"87CC4084-9BF2-405A-8D27-3C282BB44E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"499EFCAE-9309-4C26-A846-10396CBC628D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6908E44D-3553-430D-B870-266971DC0D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DEBDEF33-48E4-42F4-A725-838DA9191334"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"422B0D3E-503C-4CA6-83B9-4FC58BA898C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"46557BD6-66A0-4892-9468-687A4B63F5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6A186C5E-ACAA-47C8-9FA0-133E9D7F2900"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"24094775-BAF9-4C2E-8C38-86916E22B5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B7CF73FA-09F6-4CE5-932E-BA6B43D66F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"77E87583-5769-4114-94F7-043897DA0FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"718E8C39-A59C-4576-B00D-31A8F0C1762C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"83B1A7D7-D920-41F3-8DE9-D39007DDDEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"327B826F-0F4E-420D-8C93-4551A4B9F190"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FE12C455-5CA0-4581-A3F3-CC8867CCEEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"5DC5E23E-3A14-49B4-A676-AAA96F25D01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"8520357A-27AF-4F48-9095-773F75AAC408"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F65EA852-3C46-47D6-8D6B-DC3546165CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4441B6D-1A48-4DD4-AAAB-FC3B5F00DE4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"985D96E7-0BAE-46DF-A1E2-BD4585C6CABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"73062670-5CB9-4AB8-B45D-21E0D557FD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"876A0BCB-F792-4A21-85AB-5D7D63C3E987"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"97BFB677-F29E-451E-855A-452F8AE0A9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*","matchCriteriaId":"99308463-E1A6-4018-819E-29043BFE8886"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:rc2:*:*:*:*:*:*","matchCriteriaId":"C9E8C9AB-C303-4FB0-AD1D-C7EE4E93E347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DF5AEFDA-322E-49CD-AE94-82020B9B7AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6AF50B50-ED50-4BCD-8BAE-9161911A0FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3485EF5-F3DF-4622-92D9-B092F46D5AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"12EB77E6-94D0-4980-B392-59ACABEDB8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"3051AB9F-5C64-4D95-805F-8575B5BD39D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*","matchCriteriaId":"494DD878-5854-49DC-A0E1-2904D70582EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BFD07BE5-47E4-47E6-B6A2-CEC2BCC3E383"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1A5AA729-0198-4644-9810-E501C3C47EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1D5EC680-4686-4C04-957E-B597A1563F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*","matchCriteriaId":"F2C02877-6FE8-4C98-9AB6-5E4D1AC49FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"89325227-4E0A-49FA-83C1-D0D5E2CEF45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*","matchCriteriaId":"21763CB0-1FFA-4FF4-AA6F-47614E8BEEB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A151DBA9-3A94-431F-BC22-C86E4268263B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*","matchCriteriaId":"7246859E-A6CF-4617-A37A-BF17849D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*","matchCriteriaId":"85FA63BC-2292-49F8-A0E1-34C8497236C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*","matchCriteriaId":"78365F07-CF44-48FD-B048-2F510D147D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CBAD231-4365-4A5F-9FD8-1EE13F7FC8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B052159B-4CFF-47DE-A1B7-35C467AD73BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"BDF5228B-B99A-4E4E-A66F-59275A36B28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5E5F1FE7-ADCB-42AD-AB99-0F17AD8E2FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CD6E4B8D-6C12-4053-A8D2-F64F92AF733A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"9B9BDCD3-85B9-4C17-B625-FC7F62450FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8648A48E-BCF9-4B34-B1FF-16B780C2797D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"72070978-F3B9-46D6-A3FD-0932D751AD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"5D6483EA-FC98-4367-A34B-795F858815E6"}]}]}],"references":[{"url":"http://bugs.debian.org/493714","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=233929","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121787604812284&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121790659421159&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121797672406282&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=121814230706576&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-09.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=617243","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49221","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/493714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=233929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121787604812284&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121790659421159&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121797672406282&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=121814230706576&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=617243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3684","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servicio Admin Agent en el servidor en EMC Documentum ApplicationXtender Workflow, posiblemente v5.40 SP1 y anteriores,  permite a atacantes remotos ejecutar código arbitrario a través de paquete de datos manipulado al puerto 2606."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_applicationxtender:*:sp1:*:*:*:*:*:*","versionEndIncluding":"5.40","matchCriteriaId":"C3C437FA-D6B5-48B5-BA46-D318FC8B8A7A"}]}]}],"references":[{"url":"http://secunia.com/advisories/37070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-096/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-096/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3685","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:00:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to TCP port 2606."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en aws_tmxn.exe en el servicio Admin Agent en el servidor en EMC Documentum ApplicationXtender Workflow, posiblemente v5.40 SP1 y anteriores, permite a atacantes remotos subir ficheros arbitrarios y ejecutar código de forma arbitraria a través de secuencias de salto de directorio en peticiones al puerto TCP 2606."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:documentum_applicationxtender_workflow_manager:*:sp1:*:*:*:*:*:*","versionEndIncluding":"5.40","matchCriteriaId":"5303D4A1-B701-4B63-AB78-F5B79AD81668"}]}]}],"references":[{"url":"http://secunia.com/advisories/37070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-095/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-095/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3818","sourceIdentifier":"psirt@cisco.com","published":"2009-01-16T21:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."},{"lang":"es","value":"Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, y 15600 con software v7.0.2 hasta v7.0.6, v7.2.2, v8.0.x, v8.5.1, y v8.5.2 permite a atacantes remotos causar una denegación de servicio (reinicio de tarjeta de control) mediante una sesión TCP manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1A4A568B-304B-4523-9441-1179D372BA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DCC483E-B58E-403C-8080-FB0B0DCB777F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"37416556-05E2-48F8-ABED-038459B0FBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D2E8DD7-5086-4073-990B-5F5D92FAEF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1449B3C0-A485-4E8A-8337-64C1E85596E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:8.0:*:*:*:*:*:*:*","matchCriteriaId":"682C2AF5-EB85-437B-A147-5CB92610A8C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"49A99E5A-6190-458F-9191-5CEA774F121C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE6182B-2A77-47B1-AB8A-8E12C2CD905E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ons:8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"62992D9B-8D46-436A-B115-F7B687A24776"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ons_15310-cl:*:*:*:*:*:*:*:*","matchCriteriaId":"67D1F3C9-85A5-44F9-8198-28FFDF87A3C0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ons_15310-ma:*:*:*:*:*:*:*:*","matchCriteriaId":"3769407E-D311-45DF-86D7-46098F5B6C36"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ons_15327:*:*:*:*:*:*:*:*","matchCriteriaId":"6F98E52B-161E-41B7-BCFD-EA6E53FA23B4"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*","matchCriteriaId":"054BA906-B607-4A65-A6E3-D3D7F8096235"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ons_15454sdh:*:*:*:*:*:*:*:*","matchCriteriaId":"8FE53BD6-BE23-40A5-BE4E-62B3088EC8B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ons_15600:*:*:*:*:*:*:*:*","matchCriteriaId":"811149AD-89DC-4D93-A598-F6318C9EA64B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021592","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33261","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0139","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47940","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1021592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3819","sourceIdentifier":"psirt@cisco.com","published":"2009-01-08T19:30:09.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dnsserver in Cisco Application Control Engine Global Site Selector (GSS) before 3.0(1) allows remote attackers to cause a denial of service (daemon crash) via a series of crafted DNS requests, aka Bug ID CSCsj70093."},{"lang":"es","value":"dnsserver en Cisco Application Control Engine Global Site Selector (GSS) versiones anteriores a v3.0(1) permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una serie de peticiones DNS manipuladas, también conocido como Bug ID CSCsj70093."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4491_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"601921DF-FE32-4F82-9298-A230E923C3FC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4492r_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"00D012EB-CD61-49A5-AFC6-D5F0F5B362C8"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021530","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a57481.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33152","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47787","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1021530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a57481.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3820","sourceIdentifier":"psirt@cisco.com","published":"2009-01-22T18:30:03.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain \"root access\" to IEV via unspecified use of TCP sessions to these ports."},{"lang":"es","value":"Cisco Security Manager v3.1 y v3.2 antes de v3.2.2, cuando se usa Cisco IPS Event Viewer (IEV), expone los puertos TCP utilizados por el demonio de MySQL y el servidor IEV, lo que permite a atacantes remotos obtener \"acceso de root\" a IEV, mediante el uso de sesiones TCP sin especificar a estos puertos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7AC03BFB-10FA-4276-930F-DB450E89DCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"921F93B3-84A8-471B-9A3A-780C76BA3685"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADDFAFD3-DEC0-4C6E-BE75-921286A3B2FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1.1:sp3:*:*:*:*:*:*","matchCriteriaId":"B2F46134-691C-4B96-87EE-6977E49905CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4686AD6B-CAB3-4CE5-9B13-D30613C614CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2:sp2:*:*:*:*:*:*","matchCriteriaId":"684784EB-A61E-4FBE-AC5F-AE7E69BD60A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7061A26C-4BC0-4466-99FE-60620BA45629"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"E3EAAD49-6786-4E0A-B9E1-C3D0BD061132"}]}]}],"references":[{"url":"http://secunia.com/advisories/33633","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33381","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021619","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0214","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3821","sourceIdentifier":"psirt@cisco.com","published":"2009-01-16T21:30:03.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el servidor HTTP en Cisco IOS v11.0 hasta v12.4, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) la cadena query al programa ping o (2) otros aspectos no especificados  de una URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sr:*:*:*:*:*:*:*","matchCriteriaId":"BDE7C923-7CBB-4990-905B-9DD9D7D5946A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*","matchCriteriaId":"3870C62F-D086-419C-A0E6-815E9ED5DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN28344798/index.html","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/51393","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://osvdb.org/51394","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33461","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4916","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021598","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.html","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-19","source":"psirt@cisco.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500063/100/0/threaded","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/33260","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0138","source":"psirt@cisco.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47947","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvn.jp/en/jp/JVN28344798/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/51393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/51394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/4916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500063/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-3864","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-21T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field."},{"lang":"es","value":"La función ApiThread en el servicio de cortafuegos (también conocido como TmPfw.exe) en los módulos Trend Micro Network Security Component (NSC), del modo que se usan en Trend Micro OfficeScan 8.0 SP1 Patch 1 e Internet Security 2007 y 2008 17.0.1224, permite a atacantes remotos provocar una denegación de sevicio (caída de aplicación) mediante un paquete con un valor grande en un campo de tamaño no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:internet_security_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"C374395B-80B1-4FBA-88F6-1C155900E4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:*:*:*:*:*:*:*","matchCriteriaId":"F794E937-C7EC-423B-AF79-F7C214114BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"}]}]}],"references":[{"url":"http://secunia.com/advisories/31160","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33609","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-42/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securityreason.com/securityalert/4937","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/500195/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33358","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021614","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021615","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0191","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48106","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-42/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500195/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3865","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-21T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en la función ApiThread en el servicio de cortafuegos (también conocido como TmPfw.exe) en los módulos Trend Micro Network Security Component (NSC), del modo que se usan en Trend Micro OfficeScan 8.0 SP1 Patch 1 e Internet Security 2007 y 2008 17.0.1224, permite a atacantes remotos ejecutar código de su elección mediante un paquete con un valor pequeño en un campo de tamaño no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:internet_security_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"C374395B-80B1-4FBA-88F6-1C155900E4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:*:*:*:*:*:*:*","matchCriteriaId":"F794E937-C7EC-423B-AF79-F7C214114BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"}]}]}],"references":[{"url":"http://secunia.com/advisories/31160","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33609","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-42/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4937","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/500195/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33358","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021614","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021615","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0191","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48107","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-42/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500195/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3866","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-21T20:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets."},{"lang":"es","value":"El servicio Trend Micro Personal Firewall (también conocido como TmPfw.exe) en los módulos Trend Micro Network Security Component (NSC, utilizado en Trend Micro OfficeScan 8.0 SP1 parche 1 e Internet Security 2007 y 2008 v17.0.1224, se basa en la protección de la contraseña del lado del cliente implementada en la configuración GUI, lo que permite a usuarios locales evitar las restricciones de  de acceso previstas y cambiar las configuraciones del cortafuegos utilizando un cliente modificado que envía paquetes manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:internet_security_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"C374395B-80B1-4FBA-88F6-1C155900E4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:*:*:*:*:*:*:*","matchCriteriaId":"F794E937-C7EC-423B-AF79-F7C214114BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9A220318-78FB-4D3B-968D-7B0BF3BB1969"}]}]}],"references":[{"url":"http://secunia.com/advisories/31160","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33609","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-43/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33358","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021616","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021617","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0191","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48108","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/31160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-43/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3869","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-05-26T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters."},{"lang":"es","value":"Desbordamiento de búfer basado en entero en sadmind en Sun Solaris v8 y v9 permite a atacantes remotos ejecutar código de forma arbitraria a través de unas peticiones RPC manipuladas, relacionado con la decodificación inadecuada de parámetros \"request\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/32473","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35191","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-45/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116455-02-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259468-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-195.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.osvdb.org/54663","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/503771/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35083","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022275","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1409","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5347","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116455-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259468-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-195.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503771/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3870","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-05-26T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation."},{"lang":"es","value":"Desbordamiento de entero en sadmind en Sun Solaris v8 y v9 permite a atacantes remotos ejecutar código de forma arbitraria a través de una petición RPC manipulada que inicia un desbordamiento de búfer basado en montículo, relacionado con una localización de memoria no adecuada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/32473","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35191","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-47/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116455-02-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259468-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-195.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.osvdb.org/54668","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/503772/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35083","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022275","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1409","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50706","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6092","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-47/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116455-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259468-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-195.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503772/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3871","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-01T18:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en UltraISO v9.3.1.2633, y posiblemente otras versiones anteriores a v9.3.3.2685, permite a atacantes asistidos por usuario ejecutar código de su elección a través de formatos de cadena específicos en el nombre de fichero de un fichero (1) DAA o (2) ISZ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.3.1.2633:*:*:*:*:*:*:*","matchCriteriaId":"234765BD-26F3-44A6-A18B-BE724E619CB1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32415","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-48/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.ezbsystems.com/ultraiso/history.htm","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/502324/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34325","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021965","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0903","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-48/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ezbsystems.com/ultraiso/history.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/502324/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3973","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente SQL*Plus Windows GUI en Oracle Database, permite a usuarios locales comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5EA4C2F5-D4B8-4597-8840-566A737B78E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F2114C0F-6C86-4B37-B32C-60305D4F7920"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"62D38CEF-DC3A-4467-BB9E-1B3DF0DEEFCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:*:*:*:*:*:*:*:*","matchCriteriaId":"D56AEBE3-4B4C-4F8A-B263-4B311EE29B2E"}]}]}],"references":[{"url":"http://osvdb.org/51351","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3974","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle OLAP en Oracle Database 9.0.2.8 y 9.2.0.8DV, que permite a los usuario autenticados remotamente afectar a la disponibilidad, en relación a SYS.OLAPIMPL_T."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0937B8BD-F24F-41FC-B487-FF86EC5F2E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"5949CA3A-7B77-44D1-9232-361B82E1400B"}]}]}],"references":[{"url":"http://osvdb.org/51347","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3978","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Spatial en Oracle Database 10.1.0.5, permite a usuarios autenticados remotamente comprometer la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"}]}]}],"references":[{"url":"http://osvdb.org/51353","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3979","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database versiones 10.1.0.5 y 10.2.0.2, permite a los usuarios autenticados remotos afectar a la confidencialidad e integridad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de enero de 2009. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que este problema es una vulnerabilidad de inyección SQL que permite a los usuarios autenticados remotos alcanzar privilegios MDSYS por medio de la activación de MDSYS.SDO_TOPO_DROP_FTBL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"62D38CEF-DC3A-4467-BB9E-1B3DF0DEEFCC"}]}]}],"references":[{"url":"http://osvdb.org/51354","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/500061/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8074","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500061/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3981","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.1.0.1 permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"717F9009-7DE1-4561-9632-EEEE46E4F56D"}]}]}],"references":[{"url":"http://osvdb.org/51341","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3997","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect availability, related to SYS.DBMS_XSOQ_ODBO."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle OLAP en Oracle Database 10.1.0.5 y 10.2.0.3, permite a usuarios autenticados remotamente comprometer la disponibilidad. Relacionado con SYS.DBMS_XSOQ_ODBO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3999","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle OLAP en Oracle Database v9.2.0.8, v9.2.0.8DV, y v10.1.0.5 permite a usuarios autenticados remotamente afectar a la disponibilidad, relacionado con SYS.OLAPIMPL_T."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"5949CA3A-7B77-44D1-9232-361B82E1400B"}]}]}],"references":[{"url":"http://osvdb.org/51349","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4006","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Secure Backup en Oracle Secure Backup 10.1.0.3, permite a atacantes remotos comprometer la integridad, confidencialidad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DF279557-1EDB-4CFF-95D7-34B8E9372F7D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4007","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise Components en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9.18 permite a los usuarios autenticados remotamente afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"F2332EAE-75EE-415D-84A6-FE0A19D2C71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"A69941F1-0EB4-4260-BE39-1106120A9699"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021570","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4014","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle BPEL Process Manager en Oracle Application Server None permite a usuarios remotamente autentificados afectar la confidencialidad e integridad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"296BCDEA-69B8-4184-928B-3E04F4F09C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"86DD9A13-E533-48B2-B5EB-9B7A0124D594"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3E13AEBC-7718-4206-98EC-95E9228469C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:r1:*:*:*:*:*:*","matchCriteriaId":"117EF4D2-3EA8-410E-8721-31C3C41A7B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:r2:*:*:*:*:*:*","matchCriteriaId":"F7969E06-9E5E-4264-B235-B0C4C1DB56D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C0160E00-D722-40CE-976C-77CB91C1B94D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"982CB6A8-015D-468C-AE03-68A06AA6CB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6C0725F-D926-473E-8E74-EA3A38D47EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"99FCD0D0-5DFC-40DA-AECC-BB9ED58070C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0C0B5D7D-0F8C-4AA4-B0C4-895F17F124E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:6.0.8.26_ps17:*:*:*:*:*:*:*","matchCriteriaId":"3BE3F656-8A85-4A2B-92E4-3DBA70D172C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:7.0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"29601BB1-9F56-4822-9CEA-A7B507C96CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"8619C62A-36D2-4AE7-A0F7-6ADAFDE02483"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C09C4B72-2680-4AFB-9E0B-9B24EFF7066E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:r2:*:*:*:*:*:*","matchCriteriaId":"0C57D5C2-EEFC-432B-BAF6-57984578186C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D809B0B7-70EF-47C5-B91F-923E999CA7FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB37CB05-942B-460C-8F1E-2098A4B5F6AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A6834D6B-859F-4F69-ADF8-4A2BA6672869"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C1B82E1-D1AD-46F2-8B95-117F38563FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DDECF110-F375-4A3C-8BA9-1CF69B6EF027"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"77F36775-7D44-405E-8DE3-EBD71C9EE421"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D94B7D50-4527-4C14-8A50-D4C0566F36BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EAC53C94-1C7B-4B5E-8114-EFB5ED61B045"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2328BA88-C390-46EA-8C30-9F0A001C10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.0:r2:*:*:*:*:*:*","matchCriteriaId":"FE7CAAFD-C15A-4124-933F-C6CCFF35BB06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.1:r2:*:*:*:*:*:*","matchCriteriaId":"58B58DAF-FDF2-4A07-97E1-3CDE2A84670E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0B4BAA9-D045-4D2B-8220-47F47ED936DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.0.2:r2:*:*:*:*:*:*","matchCriteriaId":"A4C5E780-C03A-46DB-85A2-2471AF377206"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F3FFDBFF-C219-49E7-AD16-0657D6D4E8BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6C4D36-D9D1-4143-94AA-D8E08F23D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F01A3ABC-2033-47E0-A84C-62CCA67C578F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0A0D1B29-05BB-415E-ADA3-574F49D96AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"155F0A5E-7DF2-4DA6-9ABB-97AFFE090618"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3575AD-C253-4FBA-A2D8-509DABED8431"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DB877D9-C8BB-4A08-A953-043F7DB5BA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B4FEFEB0-0EC5-4285-870E-3E0682673E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B77FF3B-B84E-4918-8688-0B25CFC61141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D9D2A52-5131-4A24-A355-2DACAFFA22D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A79FF0E1-4EEF-49E2-890C-1C8937CF2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE059C8C-BA43-4757-8CA6-8E1B67DF8903"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"70D887D7-B7FB-44DF-98DA-7FBC4EF1D910"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"561EF25D-96FA-41EB-ADBE-82F22766CA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E9A3EA86-0C95-4260-8E11-ECCE161BDF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24080465-B313-44B6-910A-DC7F6F670899"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F53D7685-95E0-4653-8D48-290E557793E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:11i:*:*:*:*:*:*:*","matchCriteriaId":"B2C984F4-C649-44E1-99D5-DD565CFD7ACC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021572","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4015","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Streams en Oracle Database 10.1.0.5 permite a los usuario autenticados remotamente afectar la confidencialidad e integridad, en relación a SYS.DBMS_STREAMS_AUTH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"}]}]}],"references":[{"url":"http://osvdb.org/51345","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4016","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Collaborative Workspaces component in Oracle Collaboration Suite 10.1.2 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Collaborative Workspaces en Oracle Collaboration Suite v10.1.2 permite a usuarios autenticados remotamente comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF7ABE6-0AFB-4A74-A533-2D390991A6CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4017","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the OC4J component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente OC4J en Oracle Application Server 10.1.2.3 permite a los atacantes remotos afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021572","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4283","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en el componente WebContainer en IBM WebSphere Application Server (WAS) v5.1.1.19 y versiones anteriores a v5.1.x, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de separación de respuestas HTTP de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.1.19","matchCriteriaId":"A285423E-58C7-4ABB-BE87-F76C981FE821"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0:*:z_os:*:*:*:*:*","matchCriteriaId":"72F933CA-57D7-41BF-AF99-DA95D47FC46D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"84200300-1985-4770-81E0-31CB2CB99DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8873A6A6-D840-48E2-AED2-BB8584E3817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D25A56-D654-46B2-9437-2AAEE74655B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4DA58B6E-9EA3-43F2-BC98-8178020F687C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"95BB9B87-8DBB-4FF9-8773-73281C3D52A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"37813D54-57C8-4C41-A42D-3C7BBAFA86B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1444794B-F893-44B2-824F-24211B872C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D3B019F0-A728-4803-B036-14E10A5B0389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2E4A501-A198-4462-8813-3D355B5BC212"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AFC0955F-486F-41FF-ACA6-0DF4D966E800"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8451E82-F170-4182-A312-70DA75F96983"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E6008404-9114-4BC1-A413-4A18B381E359"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"5FFF4792-5BFA-414B-BF84-A2308073E750"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"59E555D3-1A29-4D0B-B9C7-11A7A1C6119E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"0C347C1F-4B87-4F7C-8E9B-A99D37E9959F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"E6A195CF-B731-4EB6-8899-A7E6AAB14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"9B91BF74-963C-48D9-BAA4-9869F181CD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"58B17701-C450-463F-8C60-6293EBA448FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6453897-CA51-4143-B58D-689E0B69CE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"72DB3E62-C18C-440D-B2C8-E14122D2EEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31419896-89F7-43A2-8B7C-3B92744BBC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"559355CF-7FA8-4D90-8393-90C912F571C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"355967D9-475A-49AF-A3FF-E0AC3668B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBE79CF3-16A3-40FB-BD7D-5D70DEB0EE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC04CE9C-82B4-4406-823A-69A5E13ECA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1F6A5B3A-E57D-4574-A481-7EDA93664076"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"425890C2-FC96-4191-B512-6A3DB7BCE2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7BABB4A4-182D-4FB1-88AD-B6D6EDAE10C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"0CF8ED4D-D2B6-49EC-930A-16A78E729F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"2F215B48-7ED5-45EB-BD26-3D3EAD01506F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C47D1C56-238B-414B-B2D2-D7069E42D001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"625B5901-B0AF-4D00-BC56-525A6F72943D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"BA32E836-172D-45BF-B911-9EA2B026E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"79307DAB-2195-4324-AA40-A4AE98D01513"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SE35864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK69929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47199","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SE35864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK69929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4284","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en ibm_security_logout servlet en IBM WebSphere Application Server (WAS) v5.1.1.19 y anteriores a las versiones v5.x, v6.0.x anterior a v6.0.2.33, y v6.1.x anterior a v6.1.0.23. permite atacantes remotos redirigir a los usuarios a paginas web de su elección y producir atacantes de phising a través de la característica logoutExitPage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F4DC6FE-BBB4-45AA-8A5F-F204E798DF07"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0:*:z_os:*:*:*:*:*","matchCriteriaId":"72F933CA-57D7-41BF-AF99-DA95D47FC46D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"84200300-1985-4770-81E0-31CB2CB99DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8873A6A6-D840-48E2-AED2-BB8584E3817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AB3F05B9-6EE1-4838-AD41-7DD329E71E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D25A56-D654-46B2-9437-2AAEE74655B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4DA58B6E-9EA3-43F2-BC98-8178020F687C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"95BB9B87-8DBB-4FF9-8773-73281C3D52A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"37813D54-57C8-4C41-A42D-3C7BBAFA86B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1444794B-F893-44B2-824F-24211B872C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D3B019F0-A728-4803-B036-14E10A5B0389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2E4A501-A198-4462-8813-3D355B5BC212"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AFC0955F-486F-41FF-ACA6-0DF4D966E800"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8451E82-F170-4182-A312-70DA75F96983"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E6008404-9114-4BC1-A413-4A18B381E359"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"5FFF4792-5BFA-414B-BF84-A2308073E750"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"59E555D3-1A29-4D0B-B9C7-11A7A1C6119E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"0C347C1F-4B87-4F7C-8E9B-A99D37E9959F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"E6A195CF-B731-4EB6-8899-A7E6AAB14C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"9B91BF74-963C-48D9-BAA4-9869F181CD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"58B17701-C450-463F-8C60-6293EBA448FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6453897-CA51-4143-B58D-689E0B69CE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"72DB3E62-C18C-440D-B2C8-E14122D2EEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31419896-89F7-43A2-8B7C-3B92744BBC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"2F215B48-7ED5-45EB-BD26-3D3EAD01506F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C47D1C56-238B-414B-B2D2-D7069E42D001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"625B5901-B0AF-4D00-BC56-525A6F72943D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"BA32E836-172D-45BF-B911-9EA2B026E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"79307DAB-2195-4324-AA40-A4AE98D01513"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"A580AA9B-CE1A-4F21-9FAB-5DFC4FCB34E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01F45BA3-6504-47AF-B757-7B6D3526FBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F5EE7744-4584-4AE4-9F27-11EFAA002E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE0C501-4062-49D0-8983-5E92765C7181"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D40DEF90-CE7F-46BB-A6FF-50C1797866B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C43D3515-D9F5-4DC8-A030-9F97593495F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1968803-FF03-477C-81FE-87528FC6DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"62C1CA3B-E575-4531-A336-8BFC9F5DEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6C130982-8C6E-413E-8296-C9C277FCBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5E1790E4-073A-4666-80CB-4D967928A0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"6239EEAE-5852-4DF7-8627-87139BBB03B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFCD0A1-64B4-4AE7-8161-D8A71F9D6904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C086B402-55AC-4913-A929-380EBC438988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D4FC14C3-5BFF-4F56-BBD2-3219E7151BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"40D5CB7D-BD01-4EF3-AF8B-100C200A4C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"736A02C8-784F-4CEE-BACF-C5C37E8930C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"200B6A88-EFBD-4935-9596-D8EF3BC24D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"20131F92-09B2-41D8-B5D9-38EFE6883EC0"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21320242","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24021527","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47200","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21320242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg24021527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4285","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service (daemon crash) via vectors related to \"a gradual degradation in performance.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en la característica Performance Monitoring Infrastructure (PMI) en el componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v6.1.x anterior a v6.1.0.19, cunado un componente estático está habilitado, permite a atacantes provocar una denegación de servicio (caída del demonio) a través de vectores relacionados con \"una degradación progresiva en el rendimiento.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"200B6A88-EFBD-4935-9596-D8EF3BC24D32"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24019260","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48698","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24019260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4307","sourceIdentifier":"secalert@redhat.com","published":"2009-01-13T17:00:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case."},{"lang":"es","value":"Condición de carrera en la función do_setlk en fs/nfs/file.c del kernel de Linux versiones anteriores a v2.6.26 permite a usuarios locales provocar una denegación de servicio (caída) mediante vectores resultantes de una petición RPC interrumpida que conduce a una perdida de cierre de FL_POSIX, relacionado con un inapropiado manejo de una carrera entre \"fcntl\" y \"close\" en la gestión de la interrupción de sistema \"EINTR\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.25.9","matchCriteriaId":"E4D2C9CB-67BB-429B-A743-5C602391C1F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2009/01/13/1","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34917","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34962","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35015","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456282","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7728","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9233","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4308","sourceIdentifier":"secalert@redhat.com","published":"2009-02-26T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The doRead method in Apache Tomcat 4.1.32 through 4.1.34 and 5.5.10 through 5.5.20 does not return a -1 to indicate when a certain error condition has occurred, which can cause Tomcat to send POST content from one request to a different request."},{"lang":"es","value":"El método doRead en Apache Tomcat v4.1.32 hasta v4.1.34 y v5.5.10 hasta v5.5.20 no devuelve un -1 para indicar que una cierta condición de error ha ocurrido, lo que puede causar Tomcat enviar un contenido POST desde una petición a diferentes peticiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN66905322/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000010.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34057","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501250","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33913","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0541","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=40771","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN66905322/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=40771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4312","sourceIdentifier":"secalert@redhat.com","published":"2009-03-29T15:30:00.203","lastModified":"2023-11-07T02:02:46.053","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4316","sourceIdentifier":"secalert@redhat.com","published":"2009-03-14T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation."},{"lang":"es","value":"Múltiples desbordamientos en glib/gbase64.c en GLib antes de la versión 2.20 permiten ejecutar, a atacantes dependientes del contexto, código arbitrario a través de una cadena demasiado larga que es convertida o bien (1) en o bien (2) desde una representación base64."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16.4","matchCriteriaId":"B3EFA5CC-71E9-43CC-8C63-9F8288119631"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:glib:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D74CF1B8-EBF2-43A5-A963-70D8A39D6547"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:glib:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"72B0EB43-FD63-442A-A851-2985467AAA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:glib:2.14.6:*:*:*:*:*:*:*","matchCriteriaId":"B29EF90F-50F8-4333-88C4-812A5C3BD2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:glib:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"2A36251E-1D68-4859-B304-92E384E4CC5D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34267","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34317","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34404","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34560","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34854","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34890","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38833","source":"secalert@redhat.com"},{"url":"http://svn.gnome.org/viewvc/glib?view=revision&revision=7973","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0045","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1747","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:080","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/16/2","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0336.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/501766/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34100","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021884","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-738-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49272","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11401","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8360","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gnome.org/viewvc/glib?view=revision&revision=7973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/16/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501766/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-738-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4317","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:10.920","lastModified":"2023-11-07T02:02:46.343","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-5019.  Reason: This candidate is a reservation duplicate of CVE-2008-5019.  Notes: All CVE users should reference CVE-2008-5019 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4388","sourceIdentifier":"cret@cert.org","published":"2009-01-20T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods."},{"lang":"es","value":"El control LaunchObj ActiveX anterior a v5.2.2.865 en launcher.dll en Symantec AppStream Client v5.2.x anteriores a v5.2.2 SP3 MP1 no valida adecuadamente los ficheros descargados, lo que permite a atacantes remotos ejecutar código de su elección a través del método \"installAppMgr\" y otros métodos sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:appstream_client:5.2:*:*:*:*:*:*:*","matchCriteriaId":"1BF0C85D-399C-4EDE-B722-18D53A08C77E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021609","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/194505","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33247","source":"cret@cert.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2009.01.15.html","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/194505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2009.01.15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4392","sourceIdentifier":"cret@cert.org","published":"2009-02-19T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query."},{"lang":"es","value":"dnscache en Daniel J. Bernstein djbdns v1.05 no previene peticiones DNS de salida idénticas simultáneas, lo cual hace más sencillo a atacantes remotos envenenar respuestas DNS, como lo demostrado por un registro A envenenado en la sección \"Additional\" de una respuesta a un petición \"Start of Authority\" (SOA)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:d.j.bernstein:djbdns:1.05:*:*:*:*:*:*:*","matchCriteriaId":"DC196644-7220-46EF-92CF-87F9BD45AEF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33855","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33818","source":"cret@cert.org"},{"url":"http://www.your.org/dnscache/","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.your.org/dnscache/djbdns.pdf","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48807","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.your.org/dnscache/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.your.org/dnscache/djbdns.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4419","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la interfaz de administración Web HP JetDirect en el servidor web empotrado HP-ChaiSOE v1.0 en las LaserJet 9040mfp, LaserJet 9050mfp y Color LaserJet 9500mfp anteriores al software empotrado 08.110.9; LaserJet 4345mfp y 9200C Digital Sender anteriores al software empotrado 09.120.9; Color LaserJet 4730mfp anterior al software empotrado 46.200.9; LaserJet 2410, LaserJet 2420 y LaserJet 2430 anterior al software empotrado 20080819 SPCL112A; LaserJet 4250 y LaserJet 4350 anterior al software empotrado 20080819 SPCL015A; y LaserJet 9040 y LaserJet 9050 anterior al software empotrado 20080819 SPCL110A; permite a atacantes remotos leer ficheros arbitrario a través de secuencias de salto de directorio en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9200c_digital_sender:*:*:*:*:*:*:*:*","versionEndIncluding":"20081211_09.131.1","matchCriteriaId":"A2594CCB-56FF-48C0-BF61-889FDD6C68CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4370mfp:*:*:*:*:*:*:*:*","versionEndIncluding":"20081211_46.211.2","matchCriteriaId":"996C40A5-CD3F-4ACD-976E-8CFCD1DCCCB2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500mfp:*:*:*:*:*:*:*:*","versionEndIncluding":"20070719_05.011.2","matchCriteriaId":"A6447E7F-F306-4816-B819-53D62D95DD55"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2410:*:*:*:*:*:*:*:*","versionEndIncluding":"20070410_08.112.3","matchCriteriaId":"72129DA7-5E88-4EC5-A9FB-DE6EBA3B9A84"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2420:*:*:*:*:*:*:*:*","versionEndIncluding":"20070410_08.112.3","matchCriteriaId":"54D703D0-E487-4E4C-BFA1-FCD4373DC9FC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*","versionEndIncluding":"20070410_08.112.3","matchCriteriaId":"7135DAB9-491F-4BD1-9E6A-EA488F2BA4F0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*","versionEndIncluding":"20080319_08.015.0","matchCriteriaId":"AA9F39FD-7909-49D0-8723-B5FD3291680E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4345mfp:*:*:*:*:*:*:*:*","versionEndIncluding":"20081211_09.131.1","matchCriteriaId":"F08C1653-F7B8-4092-9149-1EE8EDBB79C4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*","versionEndIncluding":"20080319_08.015.0","matchCriteriaId":"543D9E70-DAC8-4A5F-8E51-8A3176C82A33"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*","versionEndIncluding":"20080204_08.110.0","matchCriteriaId":"96E54FBF-5BC1-4159-8B5A-4DDD6B54B173"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*","versionEndIncluding":"20080204_08.110.0","matchCriteriaId":"A1E305FE-BCA6-4F4A-B7E7-51DB5A428B3F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*","versionEndIncluding":"20080204_08.110.0","matchCriteriaId":"BCCD098A-6089-4E21-A791-832F0D65798A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*","versionEndIncluding":"20080204_08.110.0","matchCriteriaId":"8FC52430-4FAC-458C-8391-FE0997C6C596"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33779","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500657/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33611","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021687","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0341","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500657/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4420","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en DZIP32.DLL en versiones anteriores a v5.0.0.8 en DynaZip Max y DZIPS32.DLL en versiones anteriores a v6.0.0.5 e DynaZip Max Secure, cuando son usados en HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 y C.04.72, TurboZIP 6.0 y otros productos, permiten a atacantes con la intervención del usuario ejecutar código de su elección a través un nombre largo de fichero ZIP durante una acción de (1) \"Fix\" (reparar), (2) añadir, (3) actualizar o (4) refrescar. Este asunto está relacionado con el CVE-2006-3985."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_performance_agent:c.04.60:*:*:*:*:*:*:*","matchCriteriaId":"9374AB08-64F6-4376-BF01-652E88A7E050"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_performance_agent:c.04.70:*:*:*:*:*:*:*","matchCriteriaId":"3C139A64-A700-404C-97B7-BD209330E1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_performance_agent:c.04.72:*:*:*:*:*:*:*","matchCriteriaId":"FBABDAE7-CE5A-40A3-967C-C7E69E43C981"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:innermedia:dynazip_max:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.7","matchCriteriaId":"9A66321F-E234-4F65-A365-0FA4C8B2CF28"},{"vulnerable":true,"criteria":"cpe:2.3:a:innermedia:dynazip_max_secure:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0.4","matchCriteriaId":"D400AB64-1D9B-4EB9-8834-89A44C0FABDD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filestream:turbozip:6.0:*:*:*:*:*:*:*","matchCriteriaId":"372BDE07-E17C-49D0-8707-740AD5B870A2"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://innermedia.com/upgrades.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53478","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/dynazip5007-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://vuln.sg/turbozip6-en.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/441083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/441084","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19143","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022021","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/2957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://innermedia.com/upgrades.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/dynazip5007-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://vuln.sg/turbozip6-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/441083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/441084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/2957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4444","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers."},{"lang":"es","value":"Cisco Unified IP Phone (también conocido como SIP phone) 7960G y 7940G con firmware P0S3-08-9-00 y posiblemente otras versiones anteriores a v8.10 permite a atacantes remotos causar denegación de servicio (reinicio del dispositivo) o posiblemente ejecutar código de su elección mediante un paquete de Protocolo de Transporte en Tiempo Real (RTP) con cabeceras mal formadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unified_ip_phone_7940g:*:*:*:*:*:*:*:*","matchCriteriaId":"02BC94CB-AD9E-4B68-9437-D65EF9DBADD2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unified_ip_phone_7960g:*:*:*:*:*:*:*:*","matchCriteriaId":"293CAB61-D0AD-4704-9FB4-B2C08700B913"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4917","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500059/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47948","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500059/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4559","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program.  NOTE: this issue may be partially covered by CVE-2009-0205."},{"lang":"es","value":"HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y  v7.53, permite a atacantes remotos ejecutar código de su elección a través de caracteres de consola en los campos de argumentos a los programas CGI (1) webappmon.exe o (2) OpenView5.exe NOTA: esta cuestión se encuentra parcialmente tratado en el CVE-2009-0205."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-4560","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:04.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via (1) a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or (2) a crafted parameter in a request to the ovlaunch.exe CGI program, which reveals configuration details. NOTE: this issue may be partially covered by CVE-2009-0205."},{"lang":"es","value":"HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y  v7.53, permite a atacantes remotos obtener información sensible a través de de (1)un petición manipulada al programa CGI nnmRptConfig.exe, que revela la ruta de los directorios de log; o (2) un parámetro manipulado en una petición al programa CGI ovlaunch.exe, que muestra detalles de la configuración. NOTA: esta cuestión se encuentra parcialmente tratado en el CVE-2009-0205."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=771","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4562","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:09.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205."},{"lang":"es","value":"Desbordamiento de búfer en el programa CGI en  HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y  v7.53 sobre Windows, permite a atacantes remotos ejecutar código de su elección a través del parámetro \"Host\" manipulado. NOTA: esta cuestión se encuentra parcialmente tratado en el CVE-2009-0205."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4563","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value."},{"lang":"es","value":"Un desbordamiento del búfer en la región heap de la memoria en la biblioteca adsmdll.dll versión 5.3.7.7296, como es usada por el demonio (dsmsvc.exe) en el servidor de respaldo en Tivoli Storage Manager (TSM) Express de IBM versión 5.3.7.3 y anteriores y TSM versión 5.2, versiones 5.3 anteriores a 5.3.6.0 , y versiones 5.4.0.0 hasta 5.4.4.0, permite a los atacantes remotos ejecutar código arbitrario por medio de un valor de longitud diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"EA28A2C9-21A0-48E2-88DD-C2336D990523"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*","matchCriteriaId":"801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A263333E-DB86-41BE-A508-731079429E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93FCB242-C35B-4CDB-AE62-3CA5D312586B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"70016926-5776-4A04-8D55-5CA12D1DA9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"930B5AE2-CA47-47D7-96DE-F2B9F70337C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3FAA5227-C1F5-48C1-A207-096F228E305E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"11E968D1-8198-4686-BFDD-8499CB435B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"40A8E0C4-8509-4372-99C7-CFBA2100AEBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F956AF3F-0BDF-4F4B-AB29-418C39BEC8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0642EDE5-7EBF-4FA3-9432-F82FE76EF9EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F4C19266-CDED-4DC0-8B50-560BA3B5DAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3BD18D39-DA8A-4C58-A18B-14EB6BEFBFDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*","matchCriteriaId":"F5E6A344-E062-4179-9CFA-CF912B4AED16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9A140293-8F4A-4AB4-9EE8-36D0EB398C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AABAD076-C9D6-481E-B9DC-CEB95C224979"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"77114204-172B-4E6A-AFFE-E6123458F0C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775","source":"cve@mitre.org"},{"url":"http://osvdb.org/52617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34245","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021837","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21377388","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34077","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0669","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49188","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21377388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4564","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en wp6sr.dll en el Autonomy KeyView SDK 10.4 y anteriores, como es usado en IBM Lotus Notes,  productos Symantec Mail Security (SMS), productos Symantec BrightMail Appliance y productos Symantec Data Loss Prevention (DLP) permite a atacantes remotos ejecutar código de su elección mediante un fichero Word Perfect Document (WPD) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_export_sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"10.4","matchCriteriaId":"6B16D7CE-3770-46A6-BECA-76989E9639BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_export_sdk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6DB3799E-43FC-40AA-85EC-72D87962C95D"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_export_sdk:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B92810D7-A5C2-4118-8B67-9E1A49C6C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_export_sdk:10:*:*:*:*:*:*:*","matchCriteriaId":"893D0CC9-971E-4C78-AD80-D004D8BB5F37"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_export_sdk:10.3:*:*:*:*:*:*:*","matchCriteriaId":"15B8E1D9-ADF9-40B2-A652-53CDEF60FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_filter_sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"10.4","matchCriteriaId":"177E8A5C-0812-47BC-9CFC-F8E25A0F42AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_filter_sdk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8E3B7CC-48D2-4EB0-A0D9-44AA6947CF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_filter_sdk:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B90F221E-6C5A-4844-A098-53BE40E78A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_filter_sdk:10:*:*:*:*:*:*:*","matchCriteriaId":"E4F4A68C-EF5D-41BB-A518-D277927D80D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_filter_sdk:10.3:*:*:*:*:*:*:*","matchCriteriaId":"EC6E0041-6647-4B04-B4C1-019E1F12E606"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_viewer_sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"10.4","matchCriteriaId":"BD370EEA-A33C-45B2-8FC6-C419AD6468E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_viewer_sdk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FE65E34-052C-4614-BA69-71D96EBC65E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_viewer_sdk:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8D56C0E-3403-4B91-A064-69E46770FBBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_viewer_sdk:10:*:*:*:*:*:*:*","matchCriteriaId":"CBB6C6D0-0848-45D0-ACA7-03B46F42AE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview_viewer_sdk:10.3:*:*:*:*:*:*:*","matchCriteriaId":"3E50CAF0-1F3A-4F57-A8DA-91B7840BBE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D4B2601-B62F-4235-BFFD-281235737450"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"273DF27B-9441-4925-BD7E-5709D7D059EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55D037CC-1207-48E2-882E-8B236EE7138F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5059BEF2-84EB-4B5F-84F5-9E3200B068F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB71B7AA-957B-46A6-9BC9-CE23EC721189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"46CF28C0-51AD-4783-B1F0-205DF64D133A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9C0015A2-A70E-4B0C-B59A-44F5F611293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D94927A9-61FD-459F-9A6D-E581A4AF505C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D3B32BA2-9EB7-4294-A857-226A5B1CC401"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EF64CA16-6C20-42E1-BA68-BD63A873BFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"12D7DD7B-CA90-44A5-9B7B-4A4985150689"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C63D40DF-C6F3-4502-9816-939265F10532"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp2:*:*:*:*:*","matchCriteriaId":"F8B5BF9A-F8A7-4C2B-B093-8226D0ED1425"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp3:*:*:*:*:*","matchCriteriaId":"04CB50C2-2B01-4A68-BE96-1127B9954F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"4598C4A8-B19D-4562-A5B5-D3B090F0C8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.6:*:fp2:*:*:*:*:*","matchCriteriaId":"66D334E1-9326-4D0A-8D87-572F3E6B44BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"94646433-DE15-4214-9C78-7D1DAB5A12D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:fp1:*:*:*:*:*","matchCriteriaId":"5614CD60-7690-47E6-AEB3-FB0151EB264C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"692E295E-E650-42D5-AF7A-D6276C3D76E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*","matchCriteriaId":"3D6701EB-AF87-4B63-A8B5-AA27C28DFFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:brightmail:5.0:*:appliance:*:*:*:*:*","matchCriteriaId":"E1BE16AC-118D-4BA0-AE37-3DB2E4E417DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1F945149-43CC-4EAC-9A78-C6A3BA6FAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1D42BEF4-9BB4-4CCF-9395-C306C3CEBB0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1:*:linux:*:*:*:*:*","matchCriteriaId":"DC2C0DBF-382C-4F96-8497-2FABD7CB67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1:*:windows:*:*:*:*:*","matchCriteriaId":"42A91935-15AC-4F64-AD3D-EFAD08955562"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.0:*:*:*:*:*:*:*","matchCriteriaId":"37076C05-12CE-484C-AB10-711BABFF6992"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.1:*:*:*:*:*:*:*","matchCriteriaId":"2A5F3BAC-B470-4FB7-88AF-47A33D46EF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enforce:7.0:*:*:*:*:*:*:*","matchCriteriaId":"CFD0A99F-6B8A-4BB9-B8A7-40BB5D7B7CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enforce:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B8960720-5DF0-4F4C-9603-09A85FAF843D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enforce:8.1:*:linux:*:*:*:*:*","matchCriteriaId":"3E9D9CE3-109C-4035-9934-2B457268985D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enforce:8.1:*:windows:*:*:*:*:*","matchCriteriaId":"E258E769-38CC-4E62-8158-3D549263ED1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0:*:appliance:*:*:*:*:*","matchCriteriaId":"0648861C-A58E-4103-8720-4480C2F098FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C890707A-D2DF-403A-87CB-2AB01E85D8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*","matchCriteriaId":"5E7788BD-652E-4306-AED0-6AE7F9A07836"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0.24:*:appliance:*:*:*:*:*","matchCriteriaId":"977786AB-A76C-4A1C-8999-BF4A5E08F8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*","matchCriteriaId":"A8430D5E-A8A7-4724-8A6B-B5E2CA437729"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.181:*:smtp:*:*:*:*:*","matchCriteriaId":"D602A441-863D-4E90-A01D-57C41725D008"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.182:*:smtp:*:*:*:*:*","matchCriteriaId":"A792A9C1-95EF-4CE2-B14F-3DEE09BFAF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.189:*:smtp:*:*:*:*:*","matchCriteriaId":"5D9C7B86-7F9A-4DF8-A4DF-9A7CA5991D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.200:*:smtp:*:*:*:*:*","matchCriteriaId":"0117D61C-DEE6-4803-9CF8-27EEBAA493CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.10:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"5BF163AF-E470-492A-940C-B2FB37AA2322"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.11:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"95D5B1CF-6C20-4D66-9D30-631441FA953B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:6.0.6:microsoft_exchange:*:*:*:*:*:*","matchCriteriaId":"5BBAE476-DB98-4464-81DF-8EC386E808B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:6.0.7:microsoft_exchange:*:*:*:*:*:*","matchCriteriaId":"225BA7A2-8C45-42F1-921B-105CF8F0F22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5..4.29:*:domino:*:*:*:*:*","matchCriteriaId":"B1E6B709-B44B-47AC-A7FF-0C248D777D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5.3.25:*:domino:*:*:*:*:*","matchCriteriaId":"07FADB30-A418-43C5-A798-4769C5350E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5.5.32:*:domino:*:*:*:*:*","matchCriteriaId":"70F1A708-9914-4875-B594-D8A9D65182D8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774","source":"cve@mitre.org"},{"url":"http://osvdb.org/52713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34303","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34318","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34355","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021856","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021857","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/276563","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021859","source":"cve@mitre.org"},{"url":"http://www.symantec.com/avcenter/security/Content/2009.03.17a.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0756","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0757","source":"cve@mitre.org"},{"url":"https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49284","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/276563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/avcenter/security/Content/2009.03.17a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4770","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""},{"lang":"es","value":"La función CMsgReader::readRect en el componente VNC Viewer en RealVNC VNC Free Edition v4.0 hasta v4.1.2, Enterprise Edition vE4.0 hasta vE4.4.2, y Personal Edition vP4.0 hasta vP4.4.2 permite a servidores remotos VNC ejecutar código de su elección mediante el protocolo de datos RFB manipulado, relacionado con \"tipo codificado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*","matchCriteriaId":"D33C48F6-27C1-4AA4-A027-71E06E31B53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*","matchCriteriaId":"1D102EDC-3B06-4880-8A93-155562A2B209"},{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"80F206D4-09C2-478C-A429-C672B635EF10"},{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"48BE82EC-F0F2-425C-A7DB-63EFF4A7702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*","matchCriteriaId":"2785BEA3-4A77-4204-92D1-F66140302B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*","matchCriteriaId":"5140685C-E1CF-4B07-82DE-EAD311994E7B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33689","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34184","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml","source":"cve@mitre.org"},{"url":"http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html","source":"cve@mitre.org"},{"url":"http://www.realvnc.com/products/free/4.1/release-notes.html","source":"cve@mitre.org"},{"url":"http://www.realvnc.com/products/upgrade.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0261.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33263","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2868","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45969","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47937","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.realvnc.com/products/free/4.1/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.realvnc.com/products/upgrade.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4825","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-01T18:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted (1) CIF, (2) C2D, or (3) GI file."},{"lang":"es","value":"Múltiples desbordamientos de búfer en UltraISO v9.3.1.2633, y posiblemente otras versiones anteriores a v9.3.3.2685, permite a atacantes asistidos por usuario ejecutar código de su elección a través de ficheros (1) CIF, (2) C2D, o(3) GI manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.3.1.2633:*:*:*:*:*:*:*","matchCriteriaId":"234765BD-26F3-44A6-A18B-BE724E619CB1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32415","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-49/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ezbsystems.com/ultraiso/history.htm","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/502323/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34325","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021964","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0903","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-49/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ezbsystems.com/ultraiso/history.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502323/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4826","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-11-16T19:30:00.577","lastModified":"2023-11-07T02:02:52.310","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3853.  Reason: This candidate is a duplicate of CVE-2009-3853.  Notes: All CVE users should reference CVE-2009-3853 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-4827","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-08T19:30:11.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en el método AddTab en los controles ActiveX (1) Tab y (2) CTab en c1sizer.ocx y control ActiveX (3) TabOne en sizerone.ocx en ComponentOne SizerOne v8.0.20081.140, como el utilizado en ComponentOne Studio para ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 y v7.10, y posiblemente otros productos, permiten a atacantes remotos ejecutar código de su elección añadiendo muchas pestañas, o añadiendo pestañas con un título largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:componentone:sizerone:8.0.20081.140:*:*:*:*:*:*:*","matchCriteriaId":"ED7DA0C0-8757-468F-A2C0-5E32D20F1525"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_gui:6.40:*:*:*:*:*:*:*","matchCriteriaId":"5BF9DC88-FD31-4536-94E9-47A9198826B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_gui:7.10:*:*:*:*:*:*:*","matchCriteriaId":"62CFD60C-5DB5-4EFD-AFBB-773F6304FC5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:tabone:7.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"640CE1EE-F4F6-4625-AC34-171181DDAE12"},{"vulnerable":true,"criteria":"cpe:2.3:a:servantix:tsc2_help_desk:4.18:*:*:*:*:*:*:*","matchCriteriaId":"107B41F9-8501-4D87-9184-613EAA7FDC8B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32609","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32648","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32672","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-52/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-53/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-54/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4879","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securitytracker.com/id?1021529","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/499830/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33148","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0036","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0037","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47769","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47770","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47771","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-52/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-53/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-54/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499830/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4828","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-05-05T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified \"generic string handling function\" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en dsmagent.exe en el agente de servicio remoto en el cliente IBM Tivoli Storage Manager (TSM) desde v5.1.0.0 hasta v5.1.8.2, desde v5.2.0.0 hasta 5.2.5.3, desde v5.3.0.0 hasta v5.3.6.4, y desde v5.4.0.0 hasta v5.4.1.96, y el cliente TSM Express desde v5.3.3.0 hasta v5.3.6.4, permite atacantes remotos ejecutar código de forma arbitraria a través de (1) una petición de paquete que no esta adecuadamente parseada mediante una \"función genérica de manejo de cadena\" inespecífica o (2) un \"NodeName\" manipulado en una petición de paquete \"dicuGetIdentifyRequest\", relacionado con (a) Interfaz gráfico de usuario y (b) interfaz gráfico de usuario Java."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5249F29D-A30C-47DE-A2E7-1643506833B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"BF8BBC00-2EE5-4679-9A55-C160C3FE0502"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"AEE65DEA-32C5-4AF3-BD3F-B6650BC7C3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2:*:*:*:*:*:*:*","matchCriteriaId":"0775DC8E-AFEF-4EC8-A42F-ACB266087F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5CF5583-AD0F-41A9-A963-077D4592EE95"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"91C00917-D04A-480F-AE51-7F666A092A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"FD374314-ACC9-4F14-A65F-14761B04B483"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3:*:*:*:*:*:*:*","matchCriteriaId":"F1E0A6F7-EB54-49AC-BA68-FFAFEEBF82B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"488891DD-FDF9-45B6-8E27-9488016617E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"FC9FD3F9-CADE-4B7F-B44D-87910F093842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E985452D-8819-493B-A505-98E393224AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7FADD1A6-5E07-4701-9846-389DBB980040"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DCA554F-03B3-44E1-A175-E3163445626E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"29442ECF-F9F0-42CE-92BD-0C04A8E2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"02303411-3A86-49B4-BF41-E7103E424F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.96:*:*:*:*:*:*:*","matchCriteriaId":"0AD6AF10-1F26-46AD-8137-E9246D09EC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*","matchCriteriaId":"F5E6A344-E062-4179-9CFA-CF912B4AED16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9A140293-8F4A-4AB4-9EE8-36D0EB398C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AABAD076-C9D6-481E-B9DC-CEB95C224979"}]}]}],"references":[{"url":"http://osvdb.org/54231","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/54232","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/32604","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-55/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59513","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503182/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50327","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/54231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-55/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4830","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-16T15:12:57.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX KWEdit en SAP GUI v6.40 Patch 29 (KWEDIT.DLL v6400.1.1.41) y v7.10 Patch 5 (KWEDIT.DLL v7100.1.1.43) permite a atacantes remotos (1) sobreescribir ficheros de su elección mediante el método SaveDocumentAs o (2) leer y ejecutar ficheros de su elección mediante el método OpenDocument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_gui:6.40:*:*:*:*:*:*:*","matchCriteriaId":"5BF9DC88-FD31-4536-94E9-47A9198826B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_gui:7.10:*:*:*:*:*:*:*","matchCriteriaId":"62CFD60C-5DB5-4EFD-AFBB-773F6304FC5D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32869","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-56/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502698/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34524","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022062","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1043","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-56/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502698/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-4834","sourceIdentifier":"secure@microsoft.com","published":"2009-01-14T22:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified \"fields inside the SMB packets\" in an NT Trans request, aka \"SMB Buffer Overflow Remote Code Execution Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer de SMB en el servicio Server  en  Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP1 y SP2, permite a atacantes remotos ejecutar código de su elección a través de valores mal formados \"dentro de los campos de los paquetes SMB\" sin especificar en una petición NT Trans, también conocido como \"Vulnerabilidad de ejecución de código remoto con desbordamiento de búfer SMB\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*","matchCriteriaId":"E0BBA081-24D5-4990-882F-69CB05CC28CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500012/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/33121","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021560","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-013A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0116","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-001/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5863","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/500012/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-013A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4835","sourceIdentifier":"secure@microsoft.com","published":"2009-01-14T22:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified \"fields inside the SMB packets\" in an NT Trans2 request, related to \"insufficiently validating the buffer size,\" aka \"SMB Validation Remote Code Execution Vulnerability.\""},{"lang":"es","value":"SMB en el servicio Server en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008, permite a atacantes remotos ejecutar código de su elección a través de valores sinb especificar \"dentro de los campos de los paquetes SMB\" en una petición NT Trans2, relacionado con una \"validación insuficiente del tamaño del búfer\", también conocido como \"vulnerabilidad de ejecución de código remota para validación de SMB\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500013/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/33122","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021560","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-013A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0116","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-002/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5248","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/500013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-013A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4914","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host crash) via a snapshot with a malformed VMDK delta disk."},{"lang":"es","value":"Vulnerabilidad no especificada en VMware ESXi 3.5 anteriores a ESXe350-200901401-I-SG y ESX 3.5 anteriores a ESX350-200901401-SG que permite a los administradores locales causar una denegación de servicios (caída del host) a través de una captura con un malformado disco delta VMDK."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33549","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021654","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4916","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en un controlado de dispositivo virtual invitado en VMware Workstation versiones anteriores a v5.5.9 build 126128, y v6.5.1 y versiones anteriores 6.x ; VMware Player versiones anteriores a v1.0.9 build 126128, y v2.5.1 y versiones anteriores 2.x; VMware ACE versiones anteriores a v1.0.8 build 125922, y v2.5.1 y versiones anteriores 2.x; VMware Server 1.x versiones anteriores a v1.0.8 build 126538 y 2.0.x versiones anteriores a v2.0.1 build 156745; VMware Fusion versiones anteriore a v2.0.1; VMware ESXi v3.5; y VMware ESX 3.0.2, v3.0.3, y v3.5 permite a usuarios del sistema operativo visitantes provocar una denegación de servicio (caída del sistema operativo host) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:vmware_player:*:*:*:*:*:*:*:*","matchCriteriaId":"2A58FD7E-C4FB-4326-B402-F997B853ABEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"65133BF3-A7CC-4D9E-BBB4-F1984386F73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"45CEAD2D-6722-44AF-B92E-3306DF5468A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"54494FC2-5513-48FE-AE9C-B08AEB6DDE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CB43AB45-95B2-4230-8010-F0F387ACDD9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D4EA026A-6FD5-48D7-BC2F-B1004B6E0A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FE8C6CFB-7195-46B9-B4E6-1A0FC2A566E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"C8388715-45C8-442D-96EB-2DB6898E5D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C16C7643-5C41-4829-AFB2-32AF62088FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2E626EC-D398-4A76-A8E4-DB456460BA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1954B8A5-48EB-4D0C-A4D7-0F57FA4D7001"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1B23960F-EDD5-4705-8F1A-CE59DD90631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3DDC66A2-8CB9-4C16-978A-B275C037E223"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF2B5092-3047-48FD-90CB-080388B7E659"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FE233FBC-F389-49CA-99D9-CDE26154BE42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"564269E8-9536-4E69-9760-C819F04D32AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"93F8BE4D-EF33-4CC8-B66B-16ADE1CCBB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C25C336B-B4BC-4FDF-8FD2-F90783841EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3771AFCF-E247-427A-8076-9E36EA457658"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17C124AC-C421-459E-8251-E7B3BD33874B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"65DD6966-72EA-4C4D-BC90-B0D534834BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBFC9B7A-8A40-467B-9102-EE5259EC4D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E684965-43F7-4A51-850F-4C88F42940E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB9565E5-042E-4C62-A7C7-54808B15F0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"357B60EC-C5F1-4FA4-B4AF-F81298479D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"933562E3-B6D5-4250-A07B-AB8437ED4D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F23F68-6853-4862-99CB-4F214816358F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AAFBF6B0-5E0A-4F62-82C7-D9861D0F5F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A6706C47-91C1-4902-96FC-0431B01D508C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.05:*:*:*:*:*:*:*","matchCriteriaId":"43282BF6-665C-4F77-8E95-487523863965"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B4FFF490-8AA9-4296-99F0-DC57E5D4F56C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC850AB-7728-4EE3-9EB5-E1E4D7338202"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4B1CA212-4114-4D45-B746-9C2AAF60CFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5085E31D-7472-408B-A85D-90337407A24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1D57F024-3484-4EEA-8F9E-08A1AE5E3D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"13D82E91-181E-4E7D-943D-6FC74D40CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"21C496BC-404A-4C23-A0CB-DEE8BB8550A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC8AA52-F2A6-4FB1-85D8-EDD136031DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"025EC5A6-E4DF-421F-911B-BD15FBF2A3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8230EFE6-8AB6-41DF-9A46-CAE4E5BB7F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B2C792F-48DA-46B5-B42E-9A045B393531"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6968BBA4-3A55-4495-ACB2-6F7535EBEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CA04700-CF35-43CA-AD4E-BB93E206FDD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F6FFF35E-DCFC-4C13-8C5A-7CE80A161370"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6E6F9A4A-41B0-48D9-B60C-EBF4EF899953"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"11AEF399-7640-45CB-9393-11F06D0E13C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"80A84D8B-318B-4FEB-B1BD-A1515CA48506"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:1.05:*:*:*:*:*:*:*","matchCriteriaId":"81AC6F29-6B96-4BF5-9E89-6AF58F5A483D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D562CD32-FECB-431C-AD26-01F2E38F94A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0790DFEB-3ADE-4057-BA9D-025BD5F5B477"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"433C05BD-1CAC-4F40-9F69-D0333C5F0E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"270D5FAD-A226-4F6F-BF0B-2C6D91C525D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6811B662-07E0-4B95-BFC6-C87C02110C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"504CD24F-2EC6-45C0-8E46-69BAE8483521"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B0EAB3D2-79EE-43A3-8A08-3E8140C1B1A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BE15637B-FAE4-4FC7-8F45-B3B1554F8F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"6B32C157-020F-400B-970C-B93CF573EB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D2E1F0A2-8791-4627-8583-55B2A67D2F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3767CDDC-DF72-4AAE-B544-D2DFE02A199D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"640130AA-C905-4DD6-97BD-ABA90705F0B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.0.45731:*:*:*:*:*:*:*","matchCriteriaId":"9F01ABD8-5C77-422E-849C-E7460072DB0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02EBBFDD-AC46-481A-8DA7-64619B447637"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CC0B1FF0-80DC-433B-9298-346225060808"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.4:build_93057:*:*:*:*:*:*","matchCriteriaId":"5C2F6830-0BEA-4B83-A90A-65DA9434553A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0ECA0396-CBCA-4D21-BD9A-EFCE24D616D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.03:*:*:*:*:*:*:*","matchCriteriaId":"652DCCCA-2C0F-482F-AD1C-F3913BD3430D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"94533C3D-8767-44DB-ABF7-B991C3E47858"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DD775800-CA7B-4433-A921-4F84C57F45EB"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021973","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4990","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file."},{"lang":"es","value":"Enomaly Elastic Computing Platform (ECP), anteriormente Enomalism, en versiones anteriores a la 2.1.1 permite a usuarios locales sobreescribir ficheros arbitrarios a través de un ataque de seguimiento de enlaces simbólicos en el fichero temporal /tmp/enomalism2.pid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enomaly:elastic_computing_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"43350655-1196-4654-B78E-56C571571F26"}]}]}],"references":[{"url":"http://groups.google.com/group/enomalism/msg/11c2f51b3734b0ab?dmode=source","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500573/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33544","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/enomalism/msg/11c2f51b3734b0ab?dmode=source","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500573/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5020","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:11.140","lastModified":"2023-11-07T02:03:00.323","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0017.  Reason: This candidate is a reservation duplicate of CVE-2008-0017.  Notes: All CVE users should reference CVE-2008-0017 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-5077","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys."},{"lang":"es","value":"OpenSSL 0.9.8i y versiones anteriores no comprueba correctamente el valor de retorno de la función EVP_VerifyFinal, lo que permite a atacantes remotos evitar la validación de la cadena del certificado a través de una firma SSL/TLS mal formada para las claves DSA y ECDSA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8h","matchCriteriaId":"E2EF373D-B1DE-492D-8F2B-3B9E7F4E161A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123859864430555&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123859864430555&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33338","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33394","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33436","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33557","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33673","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33765","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34211","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35108","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39005","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200902-02.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm","source":"secalert@redhat.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20090107.txt","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33150","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021523","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0289","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0362","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0558","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0913","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1338","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/704-1/","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123859864430555&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123859864430555&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200902-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20090107.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/704-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5082","sourceIdentifier":"secalert@redhat.com","published":"2009-01-30T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key."},{"lang":"es","value":"La función verifyProof en el componente Token Processing System (TPS) en Red Hat Certificate System (RHCS) v7.1 hasta v7.3 y Dogtag Certificate System v1.0 devuelve con éxito incluso cuando el token implicado no utiliza la clave hardware, lo cual permite a usuarios remotos autenticados con privilegios implicados evitar políticas de autenticación intencionadas implicándose con una clave software.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:_dogtag_certificate_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4A527642-BFD2-4F3F-8ED9-A16D4280777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:certificate_system:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A94B7103-11B7-4B1E-AE02-86210F9CCCAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*","matchCriteriaId":"27FE079E-FB15-443C-BE2E-1D4C940BB8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*","matchCriteriaId":"E2654E6A-190C-4D5C-ABC0-89011DD8E293"}]}]}],"references":[{"url":"http://secunia.com/advisories/33693","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33508","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0145","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475998","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48331","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0007.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5259","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-16T15:12:57.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Error de presencia de signo entero en DivX Web Player v1.4.2.7, y posiblemente versiones anteriores, permite a atacantes remotos ejecutar código de su elección mediante un fichero DivX que contenga una porción Stream Format (STRF) manipulada, lo que dispara un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.7","matchCriteriaId":"DEDD5616-40BE-476A-894B-3A5EDAB6DCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A1DE7B39-B12F-4790-97D5-EEF148DF04BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0E16BFD0-AE79-48F7-B1BB-49414DE275B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3CFFED5-BB17-48D9-B05B-5DFF49BD55C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8EA47712-6BE0-4122-84BA-EBD19B646669"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3EF850E2-24E3-49D1-BB12-19DA5500FF7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F87B501B-BB68-4514-AEEE-019BE6C7F6EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4A8650D8-341F-4E2F-A432-3554F4D8A1D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF6EF2D-C77F-4A27-A7AA-6124DC21EB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5E826218-C2EC-47DB-9515-80FFBB5404C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4762B43B-1D3F-43B3-BADE-BA85FC0F1AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"0928846E-A627-4A17-A0C7-3B267EA3F7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.4.1:beta1:*:*:*:*:*:*","matchCriteriaId":"573D1599-BE5C-426C-90D9-8B3CA697E1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:divx:divx_web_player:1.4.2:beta2:*:*:*:*:*:*","matchCriteriaId":"86B25EFF-734F-4992-B37A-28E4391CA191"}]}]}],"references":[{"url":"http://secunia.com/advisories/33196","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-57/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502701/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34523","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022061","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1044","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49908","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-57/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502701/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5260","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-26T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long image_pan_tilt property value."},{"lang":"es","value":"Un desbordamiento de búfer basado en montículo en el control ActiveX CamImage.CamImage.1 en AxisCamControl.ocx en AXIS Camera Control 2.40.0.0 permite a atacantes remotos ejecutar código arbitrario a través de un valor demasiado de la propiedad image_pan_tilt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axis:axis_camera_control:2.40.0.0:*:*:*:*:*:*:*","matchCriteriaId":"80259E63-2C80-4988-83FE-9AD7663AC781"}]}]}],"references":[{"url":"http://osvdb.org/51532","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33444","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-58/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.axis.com/techsup/software/acc/files/acc_security_update_090119.pdf","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/500334/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33408","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0228","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48176","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/51532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-58/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.axis.com/techsup/software/acc/files/acc_security_update_090119.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500334/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5262","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-01-13T17:00:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en la función iGetHdrHeader en src-IL/src/il_hdr.c en DevIL 1.7.4 permiten a atacantes, dependiendo del contexto, ejecutar código arbitrario a través de un archivo Radiance RGBE debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devil:developers_image_library:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"C861473C-4169-4D7F-A6D8-F25F1C8872CE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33470","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33637","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33801","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2008-59/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2009/dsa-1717","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33231","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00845.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-59/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00845.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5263","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-02-26T16:17:11.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image (aka .hdr file)."},{"lang":"es","value":"Múltiple desbordamiento de búfer basado en pila en la función mt_codec::getHdrHead en el archivo kernel/kls_hdr/fmt_codec_hdr.cpp en ksquirrel-libs v0.8.0 que permite a los atacantes dependientes de contexto ejecutar arbitrariamente código a través de una imagen manipulada Radiance RGBE (alias archivo .hdr)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmitry_baryshev:ksquirrel-libs:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"E227A4BE-8559-4771-BB56-D5E72339000C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33469","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-63/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501228/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33902","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0528","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48901","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-63/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501228/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5436","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle OLAP en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5 y 10.2.0.4, permite a usuarios autenticados comprometer la integridad y disponibilidad a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"5949CA3A-7B77-44D1-9232-361B82E1400B"}]}]}],"references":[{"url":"http://osvdb.org/51346","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5437","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_IJOB."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Job Queue de Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.6, permite a usuarios autenticados en remoto comprometer la confidencialidad e integridad; relacionada con DBMS_IJOB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9A56D3F-26C0-465B-9347-70D6EC53F74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:dv:*:*:*:*:*:*","matchCriteriaId":"5949CA3A-7B77-44D1-9232-361B82E1400B"}]}]}],"references":[{"url":"http://osvdb.org/51352","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5438","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2, permite a atacantes remotos comprometer la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"415018EB-2D62-49B5-BBBE-E8276400A1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C64FECA-B451-4648-AFDE-194F36527A59"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021572","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5439","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente  SQL*Plus Windows GUI en Oracle Database 10.2.0.4, permite a usuarios autenticados remotamente comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"}]}]}],"references":[{"url":"http://osvdb.org/51350","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/51350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5440","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente TimesTen Data Server de Oracle Database versión 7.0.5.0.0.0, permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de enero de 2009. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que se trata de una vulnerabilidad de cadena de formato por medio del parámetro msg en el módulo CGI de evtdump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:timesten_in-memory_database:7.0.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4E14CAC2-894A-4D70-94ED-EB3C3EAE5572"}]}]}],"references":[{"url":"http://joxeankoret.com/blog/?p=41","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/500078/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/500080/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-004","source":"secalert_us@oracle.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-004/","source":"secalert_us@oracle.com"},{"url":"http://joxeankoret.com/blog/?p=41","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500078/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-004/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5441","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.2 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-5442 y CVE-2008-5443."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-5442","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.2 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-5441 y CVE-2008-5443."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-5443","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5442."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.2 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-5441 y CVE-2008-5442."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-5444","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.2 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-5448 y CVE-2008-5449."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-5445","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a denial of service in observiced.exe via malformed private Protocol data that triggers a NULL pointer dereference."},{"lang":"es","value":"Una vulnerabilidad no especificada del componente Oracle Secure Backup en Oracle Secure Backup versión 10.2.0.2, permite a los atacantes remotos afectar a la disponibilidad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de enero de 2009. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que este problema es una denegación de servicio en el archivo observiced.exe mediante datos de protocolo privado malformados que desencadena una desreferencia de un puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-02.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/500113/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500113/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5446","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the \"About Us Page\" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente Oracle Applications Framework de Oracle E-Business Suite versiones 11.5.10 CU2 y 12.0.6,  permite a los usuarios autenticados remotos afectar la confidencialidad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de enero de 2009. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que este problema está relacionado con el acceso ilimitado de los invitados a la \"About Us Page\" en el Oracle Applications Framework (OAF), que permite a los atacantes obtener información confidencial sobre el sistema y el entorno de las aplicaciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:cu2:*:*:*:*:*:*","matchCriteriaId":"0D6C55C4-93D2-4CF6-89DA-E74C8B09BD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_12:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"522B4A4F-5702-4B4E-9215-1DB761E17228"}]}]}],"references":[{"url":"http://secniche.org/papers/orabs.pdf","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/500171/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021568","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://secniche.org/papers/orabs.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500171/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5447","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Enterprise Manager en Oracle Enterprise Manager 10.2.0.4, permite a usuarios autenticados remotamente comprometer la confidencialidad y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C104802F-75A1-4F2C-98FF-FFEBB1B3CBB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021569","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5448","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.2 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-5444 y CVE-2008-5449."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-5449","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T01:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.2 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-5444 y CVE-2008-5448."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"792DD25B-0416-485C-8B97-86888EA70CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2008-5450","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Platform Engineering en Oracle E-Business Suite 11.5.10, CU2, y 12.0.6 permite a usuarios locales afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:cu2:*:*:*:*:*:*","matchCriteriaId":"0D6C55C4-93D2-4CF6-89DA-E74C8B09BD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_12:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"522B4A4F-5702-4B4E-9215-1DB761E17228"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021568","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5451","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente JD Edwards Tools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.97.2.5, permite a usuarios autenticados en remoto comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.97.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9D432195-0B2D-4710-B181-EF103C459DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.97.2.5:*:*:*:*:*:*:*","matchCriteriaId":"3041381B-18D9-49C7-9100-847EC5CBD207"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5452","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabildiad no especificada en el componente PeopleSoft Enterprise HRMS en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9.18 permite a usuarios remotamente autentificados afectar la confidencialidad y la integridad, mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"0F3F224F-F895-4C3A-8AA5-18B30C7EA1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"A69941F1-0EB4-4260-BE39-1106120A9699"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021570","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5454","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the iProcurement component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente iProcurement de Oracle E-Business Suite 11.5.10, CU2 y 12.0.6, permite a usuarios autenticados en remoto comprometer la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_11i:11.5.10:cu2:*:*:*:*:*:*","matchCriteriaId":"BF38AADA-0281-41EC-BEB2-B79645660A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_12:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"522B4A4F-5702-4B4E-9215-1DB761E17228"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021568","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5455","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS - ePerformance en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9.18 permite a usuarios remotamente autentificados afectar la confidencialidad e integridad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"0F3F224F-F895-4C3A-8AA5-18B30C7EA1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"A69941F1-0EB4-4260-BE39-1106120A9699"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021570","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5456","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9.18 y 9.0.8 permite a usuarios autenticados remotamente que afecta a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"F2332EAE-75EE-415D-84A6-FE0A19D2C71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DF6738B3-ED75-474D-847E-4A4AD1B56959"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"A69941F1-0EB4-4260-BE39-1106120A9699"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1065C086-410A-4ED4-AD06-56715AC5780C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021570","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5457","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle BEA WebLogic Server Plugins para Apache, Sun y IIS web servers en BEA Product Suite 10.3, 10.0, MP1, 9.2, MP3, 9.1, 9.0, 8.1, SP6, 7.0 y SP7 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33526","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021571","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5458","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library de Oracle E-Business Suite 11.5.10 y CU2, permite a usuarios autenticados en remoto atentar contra la confidencialidad y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:cu2:*:*:*:*:*:*","matchCriteriaId":"0D6C55C4-93D2-4CF6-89DA-E74C8B09BD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_12:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"522B4A4F-5702-4B4E-9215-1DB761E17228"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021568","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5459","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"See following link for additional information: https://support.bea.com/application_content/product_portlets/securityadvisories/2807.html","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite 10.3 que permite ataques remotos y afecta a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33526","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021571","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5460","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"See following link for additional information: https://support.bea.com/application_content/product_portlets/securityadvisories/2810.html","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite 10.3, 10.0, MP1, 9.2, MP3, 9.1 y 9.0 permite a atacantes remotos afectar a la confidencialidad mediante vectores desconocidos"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33526","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021571","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5461","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2009.html\r\n\r\n\"Follow the link for each of the CVE numbers to obtain download, installation and other information pertaining to the corresponding vulnerability fix:\r\nhttps://support.bea.com/application_content/product_portlets/securityadvisories/2811.html","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, related to WLS.  NOTE: the previous information was obtained from the January 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is cross-site scripting."},{"lang":"es","value":"Una vulnerabilidad no especificada en el componente WebLogic Server de Product Suite de BEA versiones 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 y SP7,  permite a los atacantes remotos afectar la confidencialidad, integridad y disponibilidad relacionada a WLS. NOTA: la información anterior fue obtenida de la CPU de enero de 2009. Oracle no ha comentado sobre las afirmaciones de investigadores confiables de que se trata de un problema de tipo cross-site scripting"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN93431860/index.html","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33526","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021571","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN93431860/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5462","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"See following link for more information: https://support.bea.com/application_content/product_portlets/securityadvisories/2808.html","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente\r\nWebLogic Portal component en BEA Product Suite 10.3, 10.2, 10.0, MP1, 9.2, MP3, 8.1, y SP6 que permite atacantes remotos y afecta a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.2:*:*:*:*:*:*:*","matchCriteriaId":"47D631E9-C2EE-4A63-AA5F-DEDBA5649BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021571","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5463","sourceIdentifier":"secalert_us@oracle.com","published":"2009-01-14T02:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise Campus Solutions en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.9.18 y 9.0.8 que permite a los usuarios remotos atenticados y afecta a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"F2332EAE-75EE-415D-84A6-FE0A19D2C71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DF6738B3-ED75-474D-847E-4A4AD1B56959"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"A69941F1-0EB4-4260-BE39-1106120A9699"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1065C086-410A-4ED4-AD06-56715AC5780C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33525","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/33177","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1021570","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/33525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5515","sourceIdentifier":"secalert@redhat.com","published":"2009-06-16T21:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request."},{"lang":"es","value":"Apache Tomcat desde v4.1.0 hasta v4.1.39,  desde v5.5.0 hasta v5.5.27, desde v6.0.0 hasta v6.0.18, y posiblemente versiones anteriores que normalizan la ruta del directorio objetivo antes de filtrar la cadena de petición cuando se utiliza el método RequestDispatcher, lo que permitiría atacantes remotos evitar las restricciones de acceso previstas y que llevaría a un salto de directorio a través de secuencias ..(punto punto) y el directorio WEB-INF en una petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*","matchCriteriaId":"6EF54C08-5FF1-4D02-AA16-B13096BD566C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*","matchCriteriaId":"D8F3B31D-8974-4016-ACAF-E7A917C99F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D11D6FB7-CBDB-48C1-98CB-1B3CAA36C5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*","matchCriteriaId":"C6B93A3A-D487-4CA1-8257-26F8FE287B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*","matchCriteriaId":"BD8802B2-57E0-4AA6-BC8E-00DE60468569"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN63832775/index.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35393","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35788","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39317","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42368","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/44183","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"secalert@redhat.com"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504170/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504202/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35263","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1520","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1535","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN63832775/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/44183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504170/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504202/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5516","sourceIdentifier":"secalert@redhat.com","published":"2009-01-20T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search."},{"lang":"es","value":"La interfaz web en git (gitweb) versiones 1.5.x anteriores a 1.5.5, permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaracteres de shell relacionados con git_search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:0.99.9j:*:*:*:*:*:*:*","matchCriteriaId":"93DA4D8D-3386-4A22-8951-96DDF8B2AB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:0.99.9k:*:*:*:*:*:*:*","matchCriteriaId":"88AE94F1-4C8D-4CB2-80CA-70BDDAA15E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:0.99.9l:*:*:*:*:*:*:*","matchCriteriaId":"D886507B-0192-4D0F-80EE-0E1FD4F2CB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:0.99.9m:*:*:*:*:*:*:*","matchCriteriaId":"E3E13512-B8F7-4AA4-9551-71FBA7B746D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:0.99.9n:*:*:*:*:*:*:*","matchCriteriaId":"E9154DE6-070E-4E6A-A2E4-B25B243FCE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"86156029-EE44-45B6-AF73-641502AC8007"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"C7C119CD-4432-4EF8-95BA-BED4C93E609F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E9BD14EC-D963-4D3A-998F-4041E0F20547"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F24CC42-E1E2-4B03-B5D5-7A3050BAE01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A0BD6A9F-4AA2-4672-94FA-002B10478166"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"05F3F409-D4F5-4B89-9D9B-63E8041E3700"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"228B069E-80BB-4A95-8BBD-66D9C78F2B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"38EA9447-A92C-43C9-ADD0-F8DCAD57A6C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"09E4D3DC-7541-4E37-911C-8EC4258D678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"84137274-7537-4F23-A193-06B7D85820D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E6003B70-C2BD-4402-A3DA-9F52FC1EF292"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D6501938-1E45-4C86-98E8-64D6449674B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3E5C886-FE1B-4702-96C3-625FAC27C0B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E9761C27-43EF-4ABF-9B99-FF132147651E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"98711B3F-75E7-4116-BC94-ACF9186C7B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2F432595-E793-4321-8CDE-0308982403DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"506F265F-4EC0-4DA8-8245-F214BE688BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"36077120-17DD-4C0C-8AB9-398361CA98FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"26FB1987-92E9-4379-AF7A-A29AA1BE348C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"330A8383-6B47-421C-9655-7F7416164CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3EE094E0-CE52-46BC-A012-945530B87572"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8DBC29B5-50FE-4BDA-9CEF-14CFF31581AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"058F8DA2-1490-4847-BB87-EF76E0F8A9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EAA3E46B-D1CD-4F8B-BF76-9161E70832B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DE5EA7B0-6D78-46B7-BEE1-1A0576D56CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0243E80A-5F9A-4742-A83A-076CD822E254"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2D8BB818-7D5A-4F56-A8A7-11AB861409F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0613B062-A0D6-4403-ADA0-F848F21A3BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F13D209A-44DD-406B-86CB-3BE1B2C95789"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6D3BC2F-9E38-4F5F-A559-328323F133FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B8F3E29-9B94-4F46-8A59-FC02EBD9CD6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"44017E26-4AA6-4E76-B047-24D738D505A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5D883B55-8F7A-48AD-8536-3B7901AE95E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B2F644BD-2A37-40C8-8C02-67B671474BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"02EC9660-8197-4992-B8BF-ACA81A1362D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"52E67537-51C1-4D9A-AF11-1E6FE3290AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3735BAE3-C767-44A3-BDD3-07DDEF9AE5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"25112BF9-B5C3-470D-8FD8-045707FA83FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46E0026C-93EF-4B4F-AEF2-E84F5EA1DCAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"562BD162-990B-4BAF-9074-11FCA1DFC4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"51B7B233-CCD6-4A58-B76D-990D1DCF1BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7AB103FA-9580-4A2C-AF16-12909B5E47A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8CF296EC-FECD-4F70-BBA8-D57C891E35A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"24B2BC27-CA73-4C45-9726-5178DB43DB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC291EB-F083-4E66-B61B-50723E0E8A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0756E43B-F13B-4EB4-89B3-9A7A6CA6DDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23E68B79-8E0C-4001-AECD-ED0AF81825B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6FAC3AF5-D66D-4972-B2C7-9D1CD784884A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE75459-E53B-4E3A-B94A-3A7DA916A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0A51E31C-06CD-463F-BF7D-F14979AB492B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D198227B-3B53-4C29-985E-2596C0909A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6347CFA-DC5A-4C0F-A516-02E6BBEDA3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B4474571-24EB-4D53-8A61-D77E560B0ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8B6544F7-D835-45C5-9645-AFEA9F264DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"43E47006-A44B-4BE1-AD6B-CF869C79A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"569F2502-3023-44F6-8767-4DA465B3C754"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4CDF10E4-F882-4BD6-AA56-B56CEC28D1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"909E71D3-A5E4-47AF-B9F4-2A05A4129EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"73FFB1CD-1C79-4DD8-BCAB-1FCA8D99C89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4124F148-9281-4465-9E16-67DE47E1F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"22F07209-3FC5-4AA4-B9BF-18F32D7F402F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DDEF615E-48FB-4F1E-BC8E-B3A70457D474"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C43D08FF-7871-481D-A648-015F4DCF68E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A4869796-F69A-49CC-9203-CE80F38E1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03769CFD-3A5F-4C5E-B548-6B8F7EFFDE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4F2433A7-3333-407D-8147-9AC736049590"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"585B9665-B422-418D-9AEC-65E65D24621B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7DA2677B-1237-4D22-A51E-3A67B6AA9F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6642BE-13B4-40F8-BFD4-AD1E55B1A3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc4:*:*:*:*:*:*","matchCriteriaId":"18962E5D-185E-4AF8-B0B3-11026B61053D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:*","matchCriteriaId":"2EBCE67F-34AC-4635-A2DF-E0C304FAB8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:*","matchCriteriaId":"197F9E88-DE20-44B5-B159-8E7BC3986E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3BF65B33-FD2F-4F2B-9F67-360F8957FABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3C668BD7-C4E3-4A12-9987-E565250E2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3F93314-4F2D-4036-94F7-986B16BEC851"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"92A161E8-6CB8-40FF-9D90-00664185F69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B9533C06-96BF-4D5D-A29C-F2AD2EE5108C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B20EFCED-EC50-4A9B-970B-E29CDBDAABDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CCC5F7F8-EFC2-4FD0-A293-59F76EBFAE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"361F32F0-8009-40D2-BC14-74AE90CDB36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6B6E65D8-0D8E-4D11-82D7-DD3FB3EB1095"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:*","matchCriteriaId":"67535E99-5DD8-4F90-9DB1-5415201E94E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:*","matchCriteriaId":"F3163CEC-C0D5-401E-93C3-6A5316630FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:*","matchCriteriaId":"8DA19E8C-34DE-4721-88E2-B97774E855E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"ED57760D-0C08-43FE-A837-B00D271EDBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:*","matchCriteriaId":"BA11029F-E4F7-4D4A-817C-A7CC5AD4E872"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:*","matchCriteriaId":"8A42B9B9-7B29-429D-9ABC-736CCC038813"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc5:*:*:*:*:*:*","matchCriteriaId":"456AD412-970D-495E-8F7F-0CF670C364B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"63530521-E600-4326-B057-162E6635554B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0715BCFB-5EAA-4812-BB59-7210CB6670FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E9BBAA74-B0DE-4388-8C1B-8C3FF258EDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A8CEFC6C-0066-4331-A7A8-02047A19206A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1337EA7C-3E52-47EC-8A32-C61A3B5046A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"D9D484DA-BCEA-4873-9F8C-883D702644F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BF45A2CE-0E19-477F-9393-B8AAD158D285"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3095075A-5A99-4718-9E5E-56D442A14EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc1:*:*:*:*:*:*","matchCriteriaId":"49D8DA6B-C306-455E-BAF1-0C5C2E1F33B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6881163A-4097-4BAE-A84A-82D819BBF304"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc3:*:*:*:*:*:*","matchCriteriaId":"BF31FA87-A8B8-46A1-8945-CB2613FE3B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"32E6B6B9-BD9A-4DF2-8DDC-B2A55431B3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0FA7D904-012D-448D-B1F6-885A472B8BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9C0605BA-481D-4E71-8D57-A99F8CDB7492"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"668F528C-50BC-4944-9DC3-95D0413D2359"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E3D715F7-34D2-4D1D-B49B-74AF4D7D7C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"6DF925DE-031A-451F-83A6-1B355D364358"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AECFAEA8-3B87-4BFE-98A3-58F5129D9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D6228681-1150-4B80-AFB0-451BAEB393A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E807BBE3-A2EC-4EA2-8222-7A02D03848D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C7122491-D55D-451B-A2BC-D87D283A504E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git-scm:git:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFB286E1-525B-43B1-8940-0986854BE595"},{"vulnerable":true,"criteria":"cpe:2.3:a:git-scm:git:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"398057EC-27A8-4A84-A01D-E14EEB496A7F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:rpath:linux:2:*:*:*:*:*:*:*","matchCriteriaId":"48D2FD6E-C9C1-4DF0-9F01-E869FA97B153"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html","source":"secalert@redhat.com"},{"url":"http://repo.or.cz/w/git.git?a=commitdiff%3Bh=c582abae","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33964","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34194","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4919","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0005","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1708","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/20/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/21/7","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/23/2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/500008/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479715","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2936","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://repo.or.cz/w/git.git?a=commitdiff%3Bh=c582abae","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/21/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500008/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5517","sourceIdentifier":"secalert@redhat.com","published":"2009-01-13T17:00:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object."},{"lang":"es","value":"La interfaz web en git (gitweb) versiones 1.5.x anteriores a 1.5.6, permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaracteres de shell relacionados a (1) git_snapshot y (2) git_object."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC291EB-F083-4E66-B61B-50723E0E8A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0756E43B-F13B-4EB4-89B3-9A7A6CA6DDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23E68B79-8E0C-4001-AECD-ED0AF81825B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6FAC3AF5-D66D-4972-B2C7-9D1CD784884A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE75459-E53B-4E3A-B94A-3A7DA916A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0A51E31C-06CD-463F-BF7D-F14979AB492B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D198227B-3B53-4C29-985E-2596C0909A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6347CFA-DC5A-4C0F-A516-02E6BBEDA3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B4474571-24EB-4D53-8A61-D77E560B0ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8B6544F7-D835-45C5-9645-AFEA9F264DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"43E47006-A44B-4BE1-AD6B-CF869C79A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"569F2502-3023-44F6-8767-4DA465B3C754"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4CDF10E4-F882-4BD6-AA56-B56CEC28D1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"909E71D3-A5E4-47AF-B9F4-2A05A4129EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"73FFB1CD-1C79-4DD8-BCAB-1FCA8D99C89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4124F148-9281-4465-9E16-67DE47E1F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"22F07209-3FC5-4AA4-B9BF-18F32D7F402F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DDEF615E-48FB-4F1E-BC8E-B3A70457D474"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C43D08FF-7871-481D-A648-015F4DCF68E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A4869796-F69A-49CC-9203-CE80F38E1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03769CFD-3A5F-4C5E-B548-6B8F7EFFDE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4F2433A7-3333-407D-8147-9AC736049590"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"585B9665-B422-418D-9AEC-65E65D24621B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7DA2677B-1237-4D22-A51E-3A67B6AA9F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6642BE-13B4-40F8-BFD4-AD1E55B1A3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc4:*:*:*:*:*:*","matchCriteriaId":"18962E5D-185E-4AF8-B0B3-11026B61053D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:*","matchCriteriaId":"2EBCE67F-34AC-4635-A2DF-E0C304FAB8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:*","matchCriteriaId":"197F9E88-DE20-44B5-B159-8E7BC3986E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3BF65B33-FD2F-4F2B-9F67-360F8957FABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3C668BD7-C4E3-4A12-9987-E565250E2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3F93314-4F2D-4036-94F7-986B16BEC851"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"92A161E8-6CB8-40FF-9D90-00664185F69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B9533C06-96BF-4D5D-A29C-F2AD2EE5108C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B20EFCED-EC50-4A9B-970B-E29CDBDAABDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CCC5F7F8-EFC2-4FD0-A293-59F76EBFAE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"361F32F0-8009-40D2-BC14-74AE90CDB36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6B6E65D8-0D8E-4D11-82D7-DD3FB3EB1095"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:*","matchCriteriaId":"67535E99-5DD8-4F90-9DB1-5415201E94E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:*","matchCriteriaId":"F3163CEC-C0D5-401E-93C3-6A5316630FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:*","matchCriteriaId":"8DA19E8C-34DE-4721-88E2-B97774E855E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"ED57760D-0C08-43FE-A837-B00D271EDBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:*","matchCriteriaId":"BA11029F-E4F7-4D4A-817C-A7CC5AD4E872"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:*","matchCriteriaId":"8A42B9B9-7B29-429D-9ABC-736CCC038813"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc5:*:*:*:*:*:*","matchCriteriaId":"456AD412-970D-495E-8F7F-0CF670C364B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"63530521-E600-4326-B057-162E6635554B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0715BCFB-5EAA-4812-BB59-7210CB6670FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E9BBAA74-B0DE-4388-8C1B-8C3FF258EDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A8CEFC6C-0066-4331-A7A8-02047A19206A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1337EA7C-3E52-47EC-8A32-C61A3B5046A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"D9D484DA-BCEA-4873-9F8C-883D702644F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BF45A2CE-0E19-477F-9393-B8AAD158D285"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html","source":"secalert@redhat.com"},{"url":"http://repo.or.cz/w/git.git?a=commitdiff%3Bh=516381d5","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33964","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34194","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0005","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1708","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/20/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/21/7","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/23/2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/500008/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33215","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479715","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2936","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://repo.or.cz/w/git.git?a=commitdiff%3Bh=516381d5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/21/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500008/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5518","sourceIdentifier":"secalert@redhat.com","published":"2009-04-17T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en la consola de administración web en Apache Geronimo Application Server 2.1 a 2.1.3 en Windows permiten a atacantes remotos subir ficheros a directorios de su elección a través de secuencias de salto de directorio en los parámetros 1) group, (2) artifact, (3) version, o (4) fileType para console/portal//Services/Repository (también conocido como el portlet Services/Repository); (5) el parámetro createDB para console/portal/Embedded DB/DB Manager (también conocido como el portlet Embedded DB/DB Manager); o el parámetro filename para el script createKeystore en el portlet Security/Keystores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:*","matchCriteriaId":"ECF8E5A6-BCAA-428E-A703-6D1508AE2DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7353F7C5-18E8-4310-B31E-9B13963E3F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"73F4CBB7-FF16-4B01-85B2-5B3FE7C8BE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"366DB1DC-39E2-43A1-9A23-37B7A75F7D07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=118","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34715","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502733/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34562","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49898","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49899","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49900","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/8458","source":"secalert@redhat.com"},{"url":"http://dsecrg.com/pages/vul/show.php?id=118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502733/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5519","sourceIdentifier":"secalert@redhat.com","published":"2009-04-09T15:08:35.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers."},{"lang":"es","value":"El conector JK (tambien conocido como mod_jk) v1.2.0 hasta la v1.2.26 en Apache Tomcat permite a atacantes remotos obtener información sensible a través de una petición arbitraria desde un cliente HTTP, en circunstancias oportunas implicando (1) una petición desde distintos clientes que incluyan una cabecera con el campo longitud de contenido, pero sin datos en POST, o (2) una serie de peticiones rápidas, relativo a la no conformidad con los requerimientos del protocolo AJP para peticiones que contengan cabeceras con el campo longitud del contenido.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CF778BDD-CBEF-4A0F-9B46-165BCEDEBBA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B3418B73-021F-4958-B884-F92DC5F0FF93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8E6D83A7-12A2-4BA5-A259-EC5DCF589E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E1D16F5E-9F54-4F5B-A089-CFECC3FAB2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"8922BAB0-7FB2-4A79-8558-36462AA4F528"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"21B04E76-C7A4-4133-BA84-5C59A0F45E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3526BA8B-04E4-47DC-ADCC-02E950030D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"315CB756-45C2-43DE-BACE-4BE4CA78E107"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"499B5633-D083-4388-85F3-9E7E7712A3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"0BAE09A0-888B-45E6-9C5E-F55207A27392"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"3AC04E2E-7DC7-4D3D-A12F-470658A57826"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"A8D9EF49-7321-4D08-BDA9-B0634B1E77DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"45D306EB-B2CC-4023-8E8A-5CC00F1CBE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"1A2D18B9-BA70-4C55-ABD8-BD9366360BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"34047F15-3212-427B-AFF9-B5C25D5BEA9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"450F6698-9F8F-408A-B677-C831A486F8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"8C4876EE-E0EC-4EE6-9A40-C510AF5F0E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"007F4406-DCB9-4B16-8DCC-DCDD2423EA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"C138C7C9-6A56-4D76-A6E4-B5574D80B0FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4F7F6CFB-3640-4FDF-B94E-A6454BC4DC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"C83A551D-1918-4DD8-B69E-BEDD7F698858"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"8E753585-53DD-438C-AD3F-E144C7CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"166C1F7C-9F96-44CD-830C-D39966770957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_jk:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"2EFB1EBC-8835-4259-A116-403C71ED0829"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"914E1404-01A2-4F94-AA40-D5EA20F55AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"401A213A-FED3-49C0-B823-2E02EA528905"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7641278D-3B8B-4CD2-B284-2047B65514A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BB7B9911-E836-4A96-A0E8-D13C957EC0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D2341C51-A239-4A4A-B0DC-30F18175442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"13D9B12F-F36A-424E-99BB-E00EF0FCA277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A8FEEF0-8E57-43B1-8316-228B76E458D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D82F3FAE-91AD-4F0B-A1F7-11C1A97C5ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A3B2802B-E56C-462A-9601-361A9166B5F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"190FB4FD-22A5-4771-8F99-1E260A36A474"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4BD3785E-3A09-4BE4-96C7-619B8A7D5062"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"285F7969-09F6-48CC-89CE-928225A53CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3B9EDACC-0300-4DA7-B1CD-5F7A6029AF38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6B387EF0-94AD-4C8E-8CD4-4F5F706481BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DA486065-18D5-4425-ADA5-284101919564"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A0141E20-2E3D-4CD0-A757-D7CA98499CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"9E62493D-FEAE-49E8-A293-CE18451D0264"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"FA01AB58-CAB2-420A-9899-EAB153DD898A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D731AFDD-9C33-4DC8-9BC6-06BB51048752"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"01706205-1369-4E5D-8936-723DA980CA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0DC4A52C-6FBC-420A-885A-F72BC1DBAEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A1C882D-949B-40B9-BC9F-E7FCE4FE7C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"9A1451D2-B905-4AD7-9BD7-10CF2A12BA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C505696B-10E4-4B99-A598-40FA0DA39F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"9EB2F3D8-25A1-408E-80D0-59D52A901284"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C3904E9A-585A-4005-B2E9-13538535383D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"AA1934BF-83E3-4B0B-A1DF-391A5332CE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F06B9809-5BFA-4DB9-8753-1D8319713879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"DF6631B0-9F2E-4C5F-AB21-F085A8C1559B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"15625451-E56D-405F-BE9B-B3CB1A35E929"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"97ADBDC4-B669-467D-9A07-9A2DD8B68374"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"8DA876C8-4417-4C35-9FEC-278D45CE6E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"03C08A88-9377-4B32-8173-EE2D121B06D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"F7225A43-8EAE-4DA6-BBDC-4418D5444767"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"A46C0933-3B19-40EA-8DED-2BF25AB85C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://mail-archives.apache.org/mod_mbox/www-announce/200904.mbox/%3C49DBBAC0.2080400%40apache.org%3E","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=tomcat-dev&m=123913700700879","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/29283","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34621","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35537","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022001","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262468-1","source":"secalert@redhat.com"},{"url":"http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/native/common/jk_ajp_common.c?r1=702387&r2=702540&pathrev=702540&diff_format=h","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/xdocs/miscellaneous/changelog.xml?view=markup&pathrev=702540","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"http://svn.eu.apache.org/viewvc?view=rev&revision=702540","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-jk.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1810","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/08/10","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0446.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502530/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34412","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0973","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490201","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/www-announce/200904.mbox/%3C49DBBAC0.2080400%40apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tomcat-dev&m=123913700700879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262468-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/native/common/jk_ajp_common.c?r1=702387&r2=702540&pathrev=702540&diff_format=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.eu.apache.org/viewvc/tomcat/connectors/trunk/jk/xdocs/miscellaneous/changelog.xml?view=markup&pathrev=702540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://svn.eu.apache.org/viewvc?view=rev&revision=702540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-jk.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/08/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0446.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502530/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/277d42b48b6e9aef50949c0dcc79ce21693091d73da246b3c1981925%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5b7a23e245c93235c503900da854a143596d901bf1a1f67e851a5de4%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d2a579bbd977c225c70cb23b0ec54865fb0dab5da3eff1e060c9935%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5c616dfc49156e4b06ffab842800c80f4425924d0f20c452c127a53c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5808","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to \"application management.\""},{"lang":"es","value":"Vulnerabilidad de Secuencias de comandos en Sitios Cruzados (XSS) en Six Apart Movable Type Enterprise (MTE) v1.x anteriores a v1.56; Movable Type (MT) v3.x anteriores a v3.38; y Movable Type, Movable Type Open Source (MTOS), y Movable Type Enterprise v4.x anteriores a v4.23, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados, posiblemente esté relacionado con \"gestión de la aplicación\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:*:*:*:*:*:*","matchCriteriaId":"D62FC8B9-3B6A-46C6-94CD-E35941BB64C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"00239DBB-03C7-4E5C-860E-D0437702748B"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:unknown:open_source:*:*:*:*:*","matchCriteriaId":"FB619291-69AA-4F90-8A3F-B9814906E890"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*","matchCriteriaId":"C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:unknown:enterprise:*:*:*:*:*","matchCriteriaId":"0B1D9C09-2BA0-484A-A0C3-6683B773F247"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:unknown:open_source:*:*:*:*:*","matchCriteriaId":"FCDC2602-7A4F-460A-B440-A0B6AC96C8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*","matchCriteriaId":"B1A33E50-6BFD-418F-9F3E-B42C013AA0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"DC0F1B54-554E-45C7-8943-A73086C88385"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"A56CDA00-DC8E-4042-A882-FB6D7D2F43B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*","matchCriteriaId":"1C8F4F3A-9942-4263-BC42-CDCDACDFF2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*","matchCriteriaId":"38626110-81A0-4C99-AB8F-D77FDF662887"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*","matchCriteriaId":"5212ADBE-9F50-4EAB-AC28-91314AA24595"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*","matchCriteriaId":"3542C36E-E457-46DD-A5F7-BD22E16F1C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*","matchCriteriaId":"461319CC-BCDC-4E24-B384-1EEC8B7C4596"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*","matchCriteriaId":"967DAF27-D561-4FDB-A65C-788551871E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*","matchCriteriaId":"DD460D1D-5971-491E-863A-D230A0B28ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"3CEA1C54-4636-44B1-B620-85F0D870797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*","matchCriteriaId":"1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*","matchCriteriaId":"C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*","matchCriteriaId":"AE92182C-5BBE-4FCD-959B-E95630D16E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*","matchCriteriaId":"99E9BE91-D42E-4523-A48E-E7B4FBE7A924"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"2C5935CA-FDE2-4300-8091-DBD0DC4D2081"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"DF080128-CC7C-4F71-9268-B7691D54F358"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"50782308-93FA-4F8F-93FB-4A4E55D95360"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*","matchCriteriaId":"D5C968A9-F07A-4C99-B4A5-434E96DDB928"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*","matchCriteriaId":"A9CD9174-EE47-40B8-8F49-81EAD89267D5"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN02216739/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000067.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.movabletype.jp/blog/_movable_type_423.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32604","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47019","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN02216739/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.movabletype.jp/blog/_movable_type_423.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5809","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id."},{"lang":"es","value":"futomi CGI Cafe Access Analyzer CGI Standard v4.0.1 y anteriores y Analyzer CGI Professional v4.11.3 y anteriores usan una \"id\" predecible, lo que hace sencillo a atacantes remotos, secuestrar sesiones, y obtener información sensible acerca de los resultados de los análisis, mediante una \"id\" modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:*:*:std:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"433A48C4-668C-4180-9F15-AF4EE2C177FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:_nil_:beta1:pro:*:*:*:*:*","matchCriteriaId":"96C6AB92-C9B1-427C-BF22-C6732756A915"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:_nil_:beta2:pro:*:*:*:*:*","matchCriteriaId":"CDA70C01-8CEE-40E7-9878-D74E34CE8E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.0:*:pro:*:*:*:*:*","matchCriteriaId":"4DACE21F-6BD1-4B6A-B981-962EDEF18960"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.1:*:pro:*:*:*:*:*","matchCriteriaId":"BC69DFE1-8470-49F9-A9A2-5DAA078D6FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.1:*:std:*:*:*:*:*","matchCriteriaId":"20ABFF4F-26C3-461D-9F38-6B8DE57B2782"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.2:*:pro:*:*:*:*:*","matchCriteriaId":"00C4AF36-6CC0-4ED4-ADE2-DF512D08BF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.2:*:std:*:*:*:*:*","matchCriteriaId":"FA7F7688-CD90-46B7-9AB2-D52A57C5BA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.3:*:pro:*:*:*:*:*","matchCriteriaId":"B5327842-F28A-498B-BF64-79834317A10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.3:*:std:*:*:*:*:*","matchCriteriaId":"0490EFA6-AEAB-4F11-B679-B9DC1245EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.4:*:pro:*:*:*:*:*","matchCriteriaId":"867F9024-F6CB-403D-85E4-6971E80BF39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.4:*:std:*:*:*:*:*","matchCriteriaId":"6974958E-E0C9-4AB5-AE67-B8A2483772A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.5:*:pro:*:*:*:*:*","matchCriteriaId":"DC4D1007-5F20-4FA2-ACF1-CA042EAA2381"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.6:*:pro:*:*:*:*:*","matchCriteriaId":"A476143A-F9D9-4859-84D2-09A55C8950F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.7:*:pro:*:*:*:*:*","matchCriteriaId":"8F33DA4C-C29B-4754-9109-87EBF0385AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"A7118E38-478B-4372-B99C-54F970C01417"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.0:*:std:*:*:*:*:*","matchCriteriaId":"B2375FDF-B383-44BC-A2DF-F71416790EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.1:*:pro:*:*:*:*:*","matchCriteriaId":"A949929A-048A-43C2-9C97-F25DD8EEA20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.1:*:std:*:*:*:*:*","matchCriteriaId":"629AAD4C-BB24-4F13-8EAD-6081964470F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.2:*:pro:*:*:*:*:*","matchCriteriaId":"B3401E94-03C9-448D-8035-A23B7FFC2B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.2:*:std:*:*:*:*:*","matchCriteriaId":"A70FB601-1673-447E-8FF0-4B6EAB44C602"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.3:*:pro:*:*:*:*:*","matchCriteriaId":"3B7662E9-9A3D-4665-A521-1840413626F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.3:*:std:*:*:*:*:*","matchCriteriaId":"74956E00-B195-488B-8CDF-7497D238629A"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.4:*:pro:*:*:*:*:*","matchCriteriaId":"ECCED7DD-36CA-4E34-9A4C-52588BC1A159"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.4:*:std:*:*:*:*:*","matchCriteriaId":"5DAB8541-7F13-4D7F-9313-B2242BA8EEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"6AC99C14-1D90-454F-AC0E-4AED96655C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.0:*:std:*:*:*:*:*","matchCriteriaId":"9108EF94-DDBB-4F07-B83C-9CAFD7821BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"AFC88E31-EEC2-40A7-88CB-76E6F492A0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.1:*:std:*:*:*:*:*","matchCriteriaId":"F566B688-0734-4C28-9BF1-CAD72C910568"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.2:*:pro:*:*:*:*:*","matchCriteriaId":"AA918131-934C-4817-8287-EF81BECAF53B"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.2:*:std:*:*:*:*:*","matchCriteriaId":"8AD08FFB-D51A-4A93-A0FC-14F2F8AE80B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.3:*:pro:*:*:*:*:*","matchCriteriaId":"FA031486-A7F2-4A3F-A798-E391C069AB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.3:*:std:*:*:*:*:*","matchCriteriaId":"D4BF8DD9-C511-46B2-AA71-83E0D214591C"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.4:*:pro:*:*:*:*:*","matchCriteriaId":"E85F427A-F93F-434F-A558-92081C074450"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.4:*:std:*:*:*:*:*","matchCriteriaId":"845055EE-C586-4238-A6D9-9A72F4F302B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.5:*:pro:*:*:*:*:*","matchCriteriaId":"9193D6DC-58C2-4EE0-97D9-00C6313084A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.5:*:std:*:*:*:*:*","matchCriteriaId":"E522C8B4-EF1C-44BF-B7F3-27E36AE975A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.6:*:std:*:*:*:*:*","matchCriteriaId":"567641E9-8618-48B8-83CD-25AF4C7A27D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.7:*:std:*:*:*:*:*","matchCriteriaId":"04260F18-1816-4347-83E0-6CE9C736841F"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.8:*:std:*:*:*:*:*","matchCriteriaId":"002162F2-C5AD-48AE-96D9-1A4D95E2F763"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.8.1:*:std:*:*:*:*:*","matchCriteriaId":"56952B57-9376-4016-BC01-23DA0383172E"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.0:*:pro:*:*:*:*:*","matchCriteriaId":"CF1C66B0-1254-42AF-91FC-8AC9AC4ADD6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.0.0:*:std:*:*:*:*:*","matchCriteriaId":"F403BCDE-3C50-4871-BF0E-AD5F78531D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.1:*:pro:*:*:*:*:*","matchCriteriaId":"4281B455-28D4-4D49-A17C-2534E82A0B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.2:*:pro:*:*:*:*:*","matchCriteriaId":"26E142EF-81D2-4477-AE06-0375BCF7CD8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.3:*:pro:*:*:*:*:*","matchCriteriaId":"0C767C19-1453-4945-AB7C-436C742D4422"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.4:*:pro:*:*:*:*:*","matchCriteriaId":"E4D39FCF-B280-49A3-9E5F-F149958A5092"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.5:*:pro:*:*:*:*:*","matchCriteriaId":"86227B63-A790-42B4-9152-F26D67961BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.6:*:pro:*:*:*:*:*","matchCriteriaId":"65679525-6A75-467A-A099-74E125B09616"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.7:*:pro:*:*:*:*:*","matchCriteriaId":"122E6C60-AACA-4BD9-A1C1-B054456518FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.8:*:pro:*:*:*:*:*","matchCriteriaId":"D4C86C16-1221-4C23-B2AE-C8E0301E840E"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.9:*:pro:*:*:*:*:*","matchCriteriaId":"407F0D69-34B2-458F-9B81-85D39B354E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.10:*:pro:*:*:*:*:*","matchCriteriaId":"EBDEC8D6-7B21-42CF-BFF1-C9771445C470"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.10.1:*:pro:*:*:*:*:*","matchCriteriaId":"4C379B11-5340-4C44-8250-7C2193FA65B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.10.2:*:pro:*:*:*:*:*","matchCriteriaId":"66856EBA-7090-44C7-8BD5-DBF3B49400E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.10.3:*:pro:*:*:*:*:*","matchCriteriaId":"4953F16E-98B2-4E77-B342-34A12DEDC6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.10.4:*:pro:*:*:*:*:*","matchCriteriaId":"0C3B196D-ACD1-49BB-B619-9EB010FB692F"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.10.5:*:pro:*:*:*:*:*","matchCriteriaId":"35C6DB72-D288-4183-917D-B9A65342C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.11.0:*:pro:*:*:*:*:*","matchCriteriaId":"9A6C11FD-0501-47AB-82B5-D2D81312C91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.11.1:*:pro:*:*:*:*:*","matchCriteriaId":"D6A9827B-A26E-42D9-AEF3-7A0D30DBA1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.11.2:*:pro:*:*:*:*:*","matchCriteriaId":"5F8F4CDA-9ECB-461D-AED1-E425B96ECD67"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:4.11.3:*:pro:*:*:*:*:*","matchCriteriaId":"F9BD338F-F5A6-4F23-9BD1-5CB44A59B8B2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN07468800/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html","source":"cve@mitre.org"},{"url":"http://www.futomi.com/library/info/2008/20081212.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32794","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN07468800/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.futomi.com/library/info/2008/20081212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5810","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"A patch and vendor advisory for this vulnerability is available at:\r\n\r\nhttp://bs2www.fujitsu-siemens.de/update/securitypatch.htm\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs."},{"lang":"es","value":"WBpublish (también conocido como WBpublish.exe) en Fujitsu-Siemens WebTransactions v7.0 y v7.1, y posiblemente otras versiones, permite a atacantes remotos ejecutar comandos de su elección mediante metacaracteres de entrada, que son enviados a través de HTTP y usados de forma inapropiada durante la limpieza de datos de la sesión temporal, posiblemente esta relacionado con (1) nombres de directorio, (2) nombres de plantillas y (3) \"IDs\" de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A90885-F8E8-4628-8E6B-F5285D61C4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C51DF200-6C78-4DEC-8D33-CFEA8FD42CAF"}]}]}],"references":[{"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33168","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4856","source":"cve@mitre.org"},{"url":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499417/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32927","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021475","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3462","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495","source":"cve@mitre.org"},{"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499417/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5811","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter in a table action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente PaxGallery (com_paxgallery) v0.1 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gid\" en una acción table a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_paxgallery:0.1:*:*:*:*:*:*:*","matchCriteriaId":"191F3F82-84E9-4690-8C1B-2576F7FD7B89"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/51009","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4857","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33035","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7587","source":"cve@mitre.org"},{"url":"http://osvdb.org/51009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5812","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en SPIP v1.8 anteriores a v1.8.3b, 1.9 anteriores a v1.9.2g y v2.0 anteriores a v2.0.2 tienen un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8:*:*:*:*:*:*:*","matchCriteriaId":"B513AF43-AFCA-494C-A3D0-A35F3214CE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"8C4AC748-27C3-4FEC-A3C0-CF68B7D5DA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"91DEC874-206B-4C45-92F5-C6C650F92782"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.2b:*:*:*:*:*:*:*","matchCriteriaId":"0A738F49-1968-4748-A48D-7D493BD09313"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"2258E6D1-B11D-4902-98D2-FC8330BE175D"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b1:*:*:*:*:*:*:*","matchCriteriaId":"233CD17B-7CA9-4169-85CC-D44C2783A274"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b2:*:*:*:*:*:*:*","matchCriteriaId":"C1F0B947-DA3E-4394-A2B4-240B9792BA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"D4FBAA9E-2DD6-4FCC-AD97-CF666DB1B6EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b4:*:*:*:*:*:*:*","matchCriteriaId":"D11D5EC5-EB3F-4517-90E4-FE4B0B6526A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b5:*:*:*:*:*:*:*","matchCriteriaId":"537F4814-914D-4493-98FB-F5F21B385F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b6:*:*:*:*:*:*:*","matchCriteriaId":"8E128150-5AF1-45EF-8A6F-6709671F22D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"87EF9B63-0BB2-425A-8A81-1264BD28DB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.1:rev7385:*:*:*:*:*:*","matchCriteriaId":"FDBAD023-85A7-4B75-90EA-7C174F746050"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.1:rev7502:*:*:*:*:*:*","matchCriteriaId":"82D6BD57-507A-4131-9D50-7F76BB9C5DC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"1BCB6E24-EA9D-46C4-B128-310DFEB22D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2f:*:*:*:*:*:*:*","matchCriteriaId":"D95CA7C1-F894-4530-B3D4-44002F387453"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF1BEB1-2CCB-47F6-8EFB-E4F9AA6A4ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5698E04-FD77-45A1-8FBE-200897595CB1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33061","source":"cve@mitre.org"},{"url":"http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5813","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/rubriques.php en SPIP v1.8 anteriores a v1.8.3b, v1.9 anteriores a v1.9.2g, y v2.0 anteriores a v2.0.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"ID\". NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8:*:*:*:*:*:*:*","matchCriteriaId":"B513AF43-AFCA-494C-A3D0-A35F3214CE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"8C4AC748-27C3-4FEC-A3C0-CF68B7D5DA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"91DEC874-206B-4C45-92F5-C6C650F92782"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.2b:*:*:*:*:*:*:*","matchCriteriaId":"0A738F49-1968-4748-A48D-7D493BD09313"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"2258E6D1-B11D-4902-98D2-FC8330BE175D"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b1:*:*:*:*:*:*:*","matchCriteriaId":"233CD17B-7CA9-4169-85CC-D44C2783A274"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b2:*:*:*:*:*:*:*","matchCriteriaId":"C1F0B947-DA3E-4394-A2B4-240B9792BA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"D4FBAA9E-2DD6-4FCC-AD97-CF666DB1B6EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b4:*:*:*:*:*:*:*","matchCriteriaId":"D11D5EC5-EB3F-4517-90E4-FE4B0B6526A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b5:*:*:*:*:*:*:*","matchCriteriaId":"537F4814-914D-4493-98FB-F5F21B385F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.8b6:*:*:*:*:*:*:*","matchCriteriaId":"8E128150-5AF1-45EF-8A6F-6709671F22D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"87EF9B63-0BB2-425A-8A81-1264BD28DB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.1:rev7385:*:*:*:*:*:*","matchCriteriaId":"FDBAD023-85A7-4B75-90EA-7C174F746050"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.1:rev7502:*:*:*:*:*:*","matchCriteriaId":"82D6BD57-507A-4131-9D50-7F76BB9C5DC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"1BCB6E24-EA9D-46C4-B128-310DFEB22D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2f:*:*:*:*:*:*:*","matchCriteriaId":"D95CA7C1-F894-4530-B3D4-44002F387453"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF1BEB1-2CCB-47F6-8EFB-E4F9AA6A4ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5698E04-FD77-45A1-8FBE-200897595CB1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33061","source":"cve@mitre.org"},{"url":"http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47626","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5814","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208."},{"lang":"es","value":"Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en PHP, posiblemente v5.2.7 y anteriores, cuando display_error está activada, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados. NOTA: debido a la falta de detalles, no está claro si esto está relacionado con CVE-2006-0208."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.7","matchCriteriaId":"175D59A3-92C9-47BB-BB1D-95784636CFA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN50327700/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000084.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34933","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35108","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-761-2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1338","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47496","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10501","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/761-1/","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN50327700/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-761-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/761-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5815","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Acomment.php en phpAlumni permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpalumni:phpalumni:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"81418A86-1C45-49B5-A88B-98D60B4A483E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33055","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7621","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5816","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ref_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en repository.php en ILIAS v3.7.4 y anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través del un parámetro \"ref_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.4","matchCriteriaId":"8CFC5B28-895E-4971-A86F-ED85C699EED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilias:ilias:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"10EED163-BE06-47A2-8CA0-CFC7E49122A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilias:ilias:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"547EFE80-4B92-45D0-BCCB-2AC8DD50706D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilias:ilias:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E7FE83C2-8A4C-437D-AF9B-89B4F35CFF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilias:ilias:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"423BD17F-D648-424A-A494-C5B158E12F9A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33006","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47615","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7570","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5817","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) password fields in a sign_in action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en Web Scribble Solutions webClassifieds v2005 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) user y (2) password en una acción asign_in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_scribble_solutions:webclassifieds:2005:*:*:*:*:*:*:*","matchCriteriaId":"0F63A8DE-44A6-4A1A-A5FA-A4813CF48C95"}]}]}],"references":[{"url":"http://secunia.com/advisories/33337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47629","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5818","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de eDreamers eDContainer v2.22, cuando magic_cquotes_gpc está desactivado, permite a atacantes remotos incluir y excluir ficheros locales de su elección a través de .. (punto punto) en el parámetro \"lg\". NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edreamers:edcontainer:2.22:*:*:*:*:*:*:*","matchCriteriaId":"5414563F-01AB-47A9-8119-C043467A8F20"}]}]}],"references":[{"url":"http://secunia.com/advisories/33335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4861","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33026","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47609","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5819","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en eDNews_archive.php de eDreamers eDNews v2, cuando está desactivada la opción magic_quotes_gpc, permite a atacantes remotos incluir y excluir ficheros locales de su elección a través de .. (punto punto) en el parámetro \"lg\". NOTA: algunos de los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edreamers:ednews:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5485478-C42E-4C99-8AB7-6523C7FE2A87"}]}]}],"references":[{"url":"http://secunia.com/advisories/33336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4864","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33027","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5820","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T18:11:09.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en eDNews_view.php en eDreamers eDNews v2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"newsid\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edreamers:ednews:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5485478-C42E-4C99-8AB7-6523C7FE2A87"}]}]}],"references":[{"url":"http://secunia.com/advisories/33336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33054","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7619","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5821","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and browser crash) via a long ALINK attribute in a BODY element in an HTML document."},{"lang":"es","value":"Fuga de memoria en WebKit.dll en Webkit, como el utilizado en Safari v3.2 en Windows Vista SP1, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y cuelgue del navegador) a través de un atributo ALINK largo en un elemento BODY en un documento HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/safari_webkit_ml.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33080","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47724","source":"cve@mitre.org"},{"url":"http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0812-exploits/safari_webkit_ml.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5822","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory consumption and browser hang) via a long CLASS attribute in an HR element in an HTML document."},{"lang":"es","value":"Fugas de memoria en Libxul, como las utilizadas en Mozilla Firefox v3.0.5 y otros productos, permiten a atacantes remotos provocar una denegación de servicio (consumo de memoria y cuelgue del navegador) a través del un atributo CLASS largo en un elemento HR de un documento HTML."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider a crash of a client application such as Firefox to be a security issue.","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:libxul:*:*:*:*:*:*:*:*","matchCriteriaId":"931E15EE-DAD4-4C9E-AD57-C4E324DC3672"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0812-exploits/mzff_libxul_ml.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47758","source":"cve@mitre.org"},{"url":"http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0812-exploits/mzff_libxul_ml.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5823","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property."},{"lang":"es","value":"Un control ActiveX en prtstb06.dll de Microsoft Money 2006, cuando se usa con Wscript en Windows Script Host (WSH) de Windows Vista, permite a atacantes remotos provocar una denegación de servicio (violación de acceso y caída de aplicación) a través de un valor 0 en la propiedad Startup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:money:2006:*:*:*:*:*:*:*","matchCriteriaId":"F94894C5-3C01-44B7-BF4A-FD3ED82A7885"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47756","source":"cve@mitre.org"},{"url":"http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5824","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en msadpcm.c de libaudiofile del software audiofile 0.2.6, permite a atacantes, dependiendo del contexto, provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código arbitrario a través de un fichero .WAV modificado."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=479966\n\nThe Red Hat Security Response Team has rated this issue as having low\nsecurity impact, a future update may address this flaw. More\ninformation regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/","lastModified":"2009-02-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:68k:audiofile:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A0D079F6-8921-41AF-BCAF-EF7125874758"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://musicpd.org/mantis/view.php?id=1915","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/30/1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33273","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33066","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-912-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0005","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://musicpd.org/mantis/view.php?id=1915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2008/12/30/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-912-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5825","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \\r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone."},{"lang":"es","value":"La implementación del teléfono Nokia 6131 Near Field Communication (NFC) con firmware v05.12 no muestra de forma adecuada el registro URI cuando el registro Title contiene una combinación precisa de los caracteres: espacios, CR (también conocidos como \\r), y . (punto), lo que permite a atacantes remotos engañar al usuario a cargar una URI de su elección a través de una etiqueta NDEF manipulada, como se demostró en (1) http: URI para sitio web malicioso, (2) un teléfono: URI para un número de teléfono de tasa premium y (3) un SMS: URI que produce una compra de un tono para el móvil."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:6131_nfc:05.12:*:*:*:*:*:*:*","matchCriteriaId":"EDFC8440-A930-409A-9235-D1DF479E8C1E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-08/0186.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0344.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf","source":"cve@mitre.org"},{"url":"http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_and_dos_advisory.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30716","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44527","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-08/0186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_and_dos_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5826","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers to cause a denial of service (device crash) via (1) a large value in the payload length field in an NDEF record, or a certain length for a (2) tel: or (3) sms: NDEF URI."},{"lang":"es","value":"El teléfono Nokia 6131 Near Field Communication (NFC) con firmware v05.12 permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de (1) un valor grande en el campo longitud de un registro NDEF, or por una cierta longitud en la URI del registro NDEF en el campo (2) teléfono o (3) SMS.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:6131_nfc:05.12:*:*:*:*:*:*:*","matchCriteriaId":"EDFC8440-A930-409A-9235-D1DF479E8C1E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-08/0186.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0344.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_and_dos_advisory.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30716","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44529","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-08/0186.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_and_dos_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5827","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag."},{"lang":"es","value":"El teléfono Nokia 6131 Near Field Communication (NFC) con firmware v05.12 instala software una vez termina de descargar un fichero con extensión .JAR, lo que produce una forma sencilla para que los atacantes remotos ejecuten código arbitrario a través de un registro URI manipulado en la una etiqueta NDEF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:6131_nfc:05.12:*:*:*:*:*:*:*","matchCriteriaId":"EDFC8440-A930-409A-9235-D1DF479E8C1E"}]}]}],"references":[{"url":"http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf","source":"cve@mitre.org"},{"url":"http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf","source":"cve@mitre.org"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44528","source":"cve@mitre.org"},{"url":"http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5828","sourceIdentifier":"cve@mitre.org","published":"2009-01-02T19:30:01.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields."},{"lang":"es","value":"Cliente Microsoft Windows Live Messenger v8.5.1 y anteriores, cuando se usa el protocolo MSN v15(MSNP15) en una sesión NAT, permite a atacantes remotos conocer la dirección IP de la intranet y el númerro de los puertos, leyendo los campos de la cabecera (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, y (3) IPv4Internal-Port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:*:*:*:*:*:*:*:*","versionEndIncluding":"8.5.1","matchCriteriaId":"69E22F10-4F8C-4BC4-A9B8-5C41B92FE584"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FC575B10-0BFB-4BA8-B42D-007DC85194B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:8.1:*:*:*:*:*:*:*","matchCriteriaId":"2748131C-69BF-41B6-B98D-006BA6CFB0D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:8.5:*:*:*:*:*:*:*","matchCriteriaId":"CE8EBB88-EC30-4FE0-BD0A-683C3963202C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499624/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499624/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5838","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo search_results.php en E-Shop de E-Php Scripts (también se conoce como Shopping Cart de E-Php). El Shopping Cart Script permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ephpscripts:e-shop_shopping_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"BC8ABA04-3A97-401E-9AA6-8286098A292C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31506","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30692","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31319","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44472","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6398","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5839","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T16:30:04.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element."},{"lang":"es","value":"Desbordamiento de buffer en Foxmail v6.5 permite a atacantes remotos ejecutar código de su elección mediante un URI mailto largo en el atributo HREF de un elemento A."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxmail:foxmail:6.5:*:*:*:*:*:*:*","matchCriteriaId":"F3C53964-3176-4203-BC7B-B20C13F9F932"}]}]}],"references":[{"url":"http://www.sebug.net/exploit/4681/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31294","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45343","source":"cve@mitre.org"},{"url":"http://www.sebug.net/exploit/4681/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5840","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T16:30:04.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1."},{"lang":"es","value":"PHP iCalendar v2.24 y anteriores permite a atacantes remotos evitar la autenticación estableciendo las cookies phpicalendar y phpicalendar_login a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:*:*:*:*:*:*:*:*","versionEndIncluding":"2.24","matchCriteriaId":"91B3E466-B39F-40FC-8D4C-19A3E6C8A5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D76E93A8-0EF2-4A84-A3FE-17A57BDF1EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.8:*:*:*:*:*:*:*","matchCriteriaId":"306B2B11-1E73-4E64-B716-71D1CE64C6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.9:*:*:*:*:*:*:*","matchCriteriaId":"959D9A75-85AE-4873-AD8C-F3377F8280FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"CD1D51DD-FEFD-4939-A681-5BF471109CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17E5A766-5E62-4001-BAD3-A77547855F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F22EE8BE-F51A-4139-B45B-74C100FC3370"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"FEF861BA-987A-452F-B6E1-3B6A78C80565"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"207B8342-E3D0-419B-88B3-72F6394DA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"46645062-B97C-4B34-B0E3-6C2182C12573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.1:*:*:*:*:*:*:*","matchCriteriaId":"80CF2891-5AF4-47FC-8AAE-4A90B45236DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C24EC36-26ED-4217-BF6E-E00CF0E2A05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.21:*:*:*:*:*:*:*","matchCriteriaId":"E292DC2D-1936-43AB-B34B-A6362BC755B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.22:*:*:*:*:*:*:*","matchCriteriaId":"A7E54DE8-938E-44B0-B6A4-99B54B62EAB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.23:*:*:*:*:*:*:*","matchCriteriaId":"974A0766-EFA9-4A0C-B668-0C1C92A851DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.23:rc1:*:*:*:*:*:*","matchCriteriaId":"6023B70C-BC45-4338-AA40-9C2782EC3C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar2.0:alpha_test:*:*:*:*:*:*:*","matchCriteriaId":"5A8C89D2-F0CD-4867-80CC-FCD824014B7C"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4865","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31320","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45338","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6526","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5841","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T16:30:04.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en iGaming v1.5 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro browse en (1) previews.php y (2) reviews.php, y el parámetro id en index.php en una acción viewarticle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igamingcms:igaming_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"B3DB55EC-1718-4ACE-A278-951A5EA6D48D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igamingcms:igaming_cms:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5E08D0C7-1C1C-4437-9184-4A96DCDB7111"},{"vulnerable":true,"criteria":"cpe:2.3:a:igamingcms:igaming_cms:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A4B664E9-B0C7-4B26-A1F7-3AEE7A7FEB56"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4867","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31340","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45366","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6540","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5842","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via vectors associated with (1) a demo application shipped with WebTransactions and possibly (2) an unspecified \"dynamic application.\""},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Fujitsu-Siemens WebTransactions v7.0, v7.1, y posiblemente otras versiones permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores asociados con (1) una demostración de una aplicación incluida con WebTransactions y posiblemente (2) una aplicación dinámica no especificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F8DE9CD0-3915-4E36-8327-8F7A46A064E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A90885-F8E8-4628-8E6B-F5285D61C4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu-siemens:webtransactions:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C51DF200-6C78-4DEC-8D33-CFEA8FD42CAF"}]}]}],"references":[{"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-5843","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in (1) the current working directory or (2) /var/tmp, related to the (a) pdf90, (b) pdfjoin, and (c) pdfnup scripts."},{"lang":"es","value":"Múltiples vulnerabilidades de búsqueda en ruta no confiable en pdfjam que permite a usuarios locales ganar privilegios a través de un Troyano en (1) el directorio actual de trabajo o (2) /var/tmp, relacionado con los scripts(a) pdf90, (b) pdfjoin, y (c) pdfnup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdfjam:pdfjam:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C6692CD0-700F-4E2B-82EF-C94155B95D08"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2008/12/28/3","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34312","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=252734","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00484.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00488.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2008/12/28/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=252734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00488.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5844","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks."},{"lang":"es","value":"PHP v5.2.7 contiene un cambio incorrecto de la funcionalidad FILTER_UNSAFE_RAW, y de forma no intencionada desactiva la opción magic_quotes_gpc, sin importar la actual configuración de magic_quotes_gpc, lo cual facilita a los atacantes, dependiendo del contexto, provocar ataques de inyección SQL y otros ataques no especificados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue did not affect the versions of the php package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, and with\nRed Hat Application Stack v1 and v2.  Only PHP version 5.2.7 was affected by this flaw.","lastModified":"2009-01-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=42718","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.php.net/bug.php?id=46759","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.8","source":"cve@mitre.org"},{"url":"http://www.php.net/archive/2008.php#id2008-12-07-1","source":"cve@mitre.org"},{"url":"http://www.php.net/archive/2008.php#id2008-12-08-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32673","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021393","source":"cve@mitre.org"},{"url":"http://bugs.php.net/bug.php?id=42718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.php.net/bug.php?id=46759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2008.php#id2008-12-07-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2008.php#id2008-12-08-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5845","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers to inject arbitrary web script or HTML via a (1) MTEntryAuthorUsername, (2) MTAuthorDisplayName, (3) MTEntryAuthorDisplayName, or (4) MTCommenterName field in a Profile View template; a (5) listing screen or (6) edit screen in the CMS app; (7) a TrackBack title, related to the HTML sanitization library; or (8) a user archive name (aka archive title) on a published Community Blog template."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Six Apart Movable Type (MT) anterior a v4.23 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) MTEntryAuthorUsername, (2) MTAuthorDisplayName, (3) MTEntryAuthorDisplayName, o (4) el campo MTCommenterName en una plantilla Profile View; un (5) listado de pantalla o (6) pantalla de edición en el CMS app; (7) un título TrackBack, relacionado con la librería HTML sanitization; o (8) un archivo de nombre de usuario (también llamado archive title) en una plantilla publicada Community Blog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*","versionEndIncluding":"4.21","matchCriteriaId":"FBD43712-58DD-4A34-848B-13EC14159785"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*","matchCriteriaId":"461319CC-BCDC-4E24-B384-1EEC8B7C4596"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*","matchCriteriaId":"967DAF27-D561-4FDB-A65C-788551871E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*","matchCriteriaId":"DD460D1D-5971-491E-863A-D230A0B28ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"3CEA1C54-4636-44B1-B620-85F0D870797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*","matchCriteriaId":"1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*","matchCriteriaId":"C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*","matchCriteriaId":"AE92182C-5BBE-4FCD-959B-E95630D16E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*","matchCriteriaId":"99E9BE91-D42E-4523-A48E-E7B4FBE7A924"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"2C5935CA-FDE2-4300-8091-DBD0DC4D2081"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"DF080128-CC7C-4F71-9268-B7691D54F358"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"50782308-93FA-4F8F-93FB-4A4E55D95360"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*","matchCriteriaId":"D5C968A9-F07A-4C99-B4A5-434E96DDB928"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*","matchCriteriaId":"A9CD9174-EE47-40B8-8F49-81EAD89267D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*","matchCriteriaId":"56195FCE-D933-40C6-A6A3-6AC8CFECA5DB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN45658190/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html","source":"cve@mitre.org"},{"url":"http://www.movabletype.org/mt_423_change_log.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN45658190/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.movabletype.org/mt_423_change_log.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5846","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a \"system-wide entry listing screen.\""},{"lang":"es","value":"Six Apart Movable Type (MT) anterior a v4.23 permite a usuarios remotos autenticados con permiso para crear entradas destinadas a evitar las restricciones de acceso y publicación de entradas a través de un \"system-wide entry listing screen\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*","versionEndIncluding":"4.21","matchCriteriaId":"FBD43712-58DD-4A34-848B-13EC14159785"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*","matchCriteriaId":"461319CC-BCDC-4E24-B384-1EEC8B7C4596"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*","matchCriteriaId":"967DAF27-D561-4FDB-A65C-788551871E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*","matchCriteriaId":"DD460D1D-5971-491E-863A-D230A0B28ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"3CEA1C54-4636-44B1-B620-85F0D870797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*","matchCriteriaId":"1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*","matchCriteriaId":"C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*","matchCriteriaId":"AE92182C-5BBE-4FCD-959B-E95630D16E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*","matchCriteriaId":"99E9BE91-D42E-4523-A48E-E7B4FBE7A924"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"2C5935CA-FDE2-4300-8091-DBD0DC4D2081"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"DF080128-CC7C-4F71-9268-B7691D54F358"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"50782308-93FA-4F8F-93FB-4A4E55D95360"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*","matchCriteriaId":"D5C968A9-F07A-4C99-B4A5-434E96DDB928"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*","matchCriteriaId":"A9CD9174-EE47-40B8-8F49-81EAD89267D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*","matchCriteriaId":"56195FCE-D933-40C6-A6A3-6AC8CFECA5DB"}]}]}],"references":[{"url":"http://www.movabletype.org/mt_423_change_log.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47759","source":"cve@mitre.org"},{"url":"http://www.movabletype.org/mt_423_change_log.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5847","sourceIdentifier":"cve@mitre.org","published":"2009-01-05T20:30:02.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column."},{"lang":"es","value":"Constructr CMS v3.02.5 y anteriores, almacena las contraseñas como texto sin cifrar en una base de datos MySQL, lo que permite a atacantes, dependiendo del contexto, obtener información sensible al leer la columna resumen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02.5","matchCriteriaId":"C2C54FD3-F2B4-4CF8-898B-2842F835D85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.0:alpha:*:*:*:*:*:*","matchCriteriaId":"1F0EC8A6-0487-4DFB-81AF-1EEA412FFCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.1:alpha:*:*:*:*:*:*","matchCriteriaId":"37056EFA-2603-4D92-8739-147D029036C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.2:alpha:*:*:*:*:*:*","matchCriteriaId":"5E04D2B0-4ACF-483A-8976-33972B2A4185"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.0:beta:*:*:*:*:*:*","matchCriteriaId":"52CA7C4F-59C5-4B95-9824-C0268248CF4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.1:beta:*:*:*:*:*:*","matchCriteriaId":"68B8B4AC-AF06-4BB7-B96D-F77E7161CE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.2:beta:*:*:*:*:*:*","matchCriteriaId":"9A2B90E5-8634-4D57-A140-125A529A7FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.3:beta:*:*:*:*:*:*","matchCriteriaId":"290D1E78-8940-4256-9003-1FC04708521A"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.4:beta:*:*:*:*:*:*","matchCriteriaId":"AE01A0E6-246E-48E5-9B17-CB7E2AE5636C"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.5:beta:*:*:*:*:*:*","matchCriteriaId":"A0A4BC9B-0B57-40C2-8A73-2DDE52395347"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.6:beta:*:*:*:*:*:*","matchCriteriaId":"AB35F6DF-BCFB-4829-A8E2-0B0D8E7E71C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.7:beta:*:*:*:*:*:*","matchCriteriaId":"87AA8CC5-B419-4280-84C5-DED823A9A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.8:beta:*:*:*:*:*:*","matchCriteriaId":"9045683D-C074-4271-B482-C7412E61D512"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.9:beta:*:*:*:*:*:*","matchCriteriaId":"0F2FCA30-B101-4FE9-ADBC-3A12D3C665F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.0:*:*:*:*:*:*:*","matchCriteriaId":"ECE2BD73-09A9-49EA-8C49-5364C5843EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.1:*:*:*:*:*:*:*","matchCriteriaId":"71855527-18D0-41C1-B14D-5E5DE554B2C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.2:*:*:*:*:*:*:*","matchCriteriaId":"80BED065-8EBF-4272-B10D-D95A8B36162D"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.3:*:*:*:*:*:*:*","matchCriteriaId":"C6266966-8355-4565-A0C1-EA4E25EE37E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.4:*:*:*:*:*:*:*","matchCriteriaId":"2B41D022-CBC0-4F1E-8ADA-BDAB192F77FD"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4868","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7529","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5848","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity."},{"lang":"es","value":"El módulo Advantech ADAM-6000 tiene 00000000 como su contraseña por defecto, lo que hace más fácil a atacantes remotos obtener acceso a través de una sesión HTTP, y (1) monitorizar o (2) controlar la actividad I/O del módulo Modbus/TCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6015:*:*:*:*:*:*:*:*","matchCriteriaId":"FA03C4FC-451D-4D80-91A9-94B62F11CF3E"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6017:*:*:*:*:*:*:*:*","matchCriteriaId":"23F14125-2C82-46B6-AA42-D17DAA9389F9"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6018:*:*:*:*:*:*:*:*","matchCriteriaId":"DCA43127-85F4-46F4-A67F-54B66BFB0D51"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6022:*:*:*:*:*:*:*:*","matchCriteriaId":"35514F6C-F34A-420B-B08B-58388E4E772F"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6024:*:*:*:*:*:*:*:*","matchCriteriaId":"A84898FB-2906-4798-BF9D-EE4DADD6B7D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6050:*:*:*:*:*:*:*:*","matchCriteriaId":"51F66CE0-053B-4502-BE47-046F38D2E1EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6050w:*:*:*:*:*:*:*:*","matchCriteriaId":"066BDEE7-CD3B-482F-82A6-063F48EAEC02"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6051:*:*:*:*:*:*:*:*","matchCriteriaId":"44CC898E-8BA4-401E-B95E-B22B4BD28658"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6051w:*:*:*:*:*:*:*:*","matchCriteriaId":"E89BA4B7-C9A2-46F4-8B12-B72CF8767890"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6052:*:*:*:*:*:*:*:*","matchCriteriaId":"0F7CABA8-747E-454C-8100-39682281BD1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6060:*:*:*:*:*:*:*:*","matchCriteriaId":"5C011882-D383-46CA-8E20-D008D039AB81"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6060w:*:*:*:*:*:*:*:*","matchCriteriaId":"7C886F75-1B65-4695-9493-E3B1A647222A"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6066:*:*:*:*:*:*:*:*","matchCriteriaId":"DDE2AE5D-58E7-43D7-8E70-86ACDAD9A3E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:advantech:adam-6501:*:*:*:*:*:*:*:*","matchCriteriaId":"590DF4B1-9F0F-42A7-9579-602A27CB0B0F"}]}]}],"references":[{"url":"http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW","source":"cve@mitre.org"},{"url":"http://www.ruxcon.org.au/presentations.shtml#13","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruxcon.org.au/presentations.shtml#13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2008-5849","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMP_TIMXCEED_INTRANS (aka ICMP time exceeded in-transit) response containing an encapsulated IP packet with an intranet address, as demonstrated by a TCP packet to the firewall management server on port 18264."},{"lang":"es","value":"Check Point VPN-1 R55, R65, y otras versiones, cuando la traducción de direcciones de puerto (PAT) es utilizada, permite a atacantes remotos conocer las direcciones IP de la intranet a través de un paquete con un pequeño TTL, que lanza una respuesta ICMP_TIMXCEED_INTRANS (también conocido como ICMP time exceeded in-transit)que contiene un paquete IP encapsulado con una dirección de intranet, como lo demuestra un paquete TCP al servidor de gestión del cortafuegos en el puerto 18264.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:r55:*:*:*:*:*:*:*","matchCriteriaId":"10EDB997-5401-44E0-9444-CCE4FBC9FA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:r65:*:*:*:*:*:*:*","matchCriteriaId":"83F158E2-CF06-4F35-B162-C686A318F3BB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32728","source":"cve@mitre.org"},{"url":"http://www.portcullis-security.com/293.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32306","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46645","source":"cve@mitre.org"},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk36321","source":"cve@mitre.org"},{"url":"https://svn.wald.intevation.org/svn/openvas/trunk/openvas-plugins/scripts/checkpoint-vpn1-pat-information-disclosure.nasl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.portcullis-security.com/293.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk36321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://svn.wald.intevation.org/svn/openvas/trunk/openvas-plugins/scripts/checkpoint-vpn1-pat-information-disclosure.nasl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5850","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.313","lastModified":"2023-11-07T02:03:17.220","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate was originally recorded for a \"SPLAT Remote Root Exploit\" that was claimed to exist for Check Point SmartCenter.  The claim has no actionable details and was disclosed by a person of unknown reliability who did not coordinate with the vendor.  No people of known reliability have confirmed the original claim.  The vendor has not indicated that they are aware of any vulnerability.  Since the claim has no actionable details or independent verification, it is outside the scope of CVE according to current inclusion criteria"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-5851","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary SQL commands via the seasonID parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php en My PHP Baseball Stats (MyPBS) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"seasonID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mypbs:mypbs:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"38D204B5-9963-41FE-9D5B-1EBF51A1968A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4869","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32930","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47498","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7522","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5852","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for guestbook.mdb."},{"lang":"es","value":"Emefa Guestbook v3.0 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo que permite a atacantes remotos descargar el archivo de base de datos a través de una petición directa de guestbook.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emefa:emefa_guestbook:3.0:*:*:*:*:*:*:*","matchCriteriaId":"26D457C5-73AE-4ABE-BDB4-A62142497393"}]}]}],"references":[{"url":"http://secunia.com/advisories/33245","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47534","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7534","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5853","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database credentials via a direct request for config.inc or (2) read database backups via a request for a backup/ URI."},{"lang":"es","value":"Chilek Content Management System (también conocido como ChiCoMaS) v2.0.4 y anteriores almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos (1)obtener credenciales de la base de datos a través de una petición directa a config.inc o (2)leer copias de seguridad de la base de datos a través de una petición a backup/ URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chicomas:chicomas:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"57CCDE16-65C6-476F-B125-06B95FC8C2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:chicomas:chicomas:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"019EE246-C489-42D6-AFC4-CE54270A321B"}]}]}],"references":[{"url":"http://secunia.com/advisories/30080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4872","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_59.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499458/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_59.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5854","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ls_user and (2) ls_email parameters (aka the User form) in an ls_register action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en login.php en myPHPscripts Login Session v2.0, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) ls_user y (2) ls_email (alias formulario User) en una acción ls_register. NOTA: Algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpscripts:login_session:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F45FD5D9-4813-4ADC-BA61-771C11993553"}]}]}],"references":[{"url":"http://secunia.com/advisories/33253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4873","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32941","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47501","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7526","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5855","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt."},{"lang":"es","value":"myPHPscripts Login Session v2.0 almacena información sensible bajo el raíz web con insuficiente control de acceso, lo que permite a atacantes remotos descubrir los nombres de usuarios, direcciones de correo electrónico y los hashes de las contraseñas, a través de una petición directa para users.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpscripts:login_session:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F45FD5D9-4813-4ADC-BA61-771C11993553"}]}]}],"references":[{"url":"http://secunia.com/advisories/33253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47502","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7526","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5856","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo scripts/export.php en ClaSS en versiones anteriores a 0.8.61, permite a atacantes remotos leer archivos arbitrarios por medio de secuencias de saltos de directorio en el parámetro ftype."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.60","matchCriteriaId":"DD8B715E-81D5-43B5-A700-76FDCB1A870F"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.4:beta:*:*:*:*:*:*","matchCriteriaId":"D9C5BB72-0004-4D98-8866-6E7BBB6DAF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"8B888BE7-707B-4046-BD76-A87ECBC6F515"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"CA5BCF82-6773-4FCB-8665-0CC7A35239A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A3CA80E8-66C1-41D2-8283-42EE59CB8721"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B6E042AB-AB85-4956-BDA4-17C104FA5D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"45AC2C2A-C716-4C3F-9EBC-8884953528D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B2559798-F041-4011-97E6-02EBADB0E109"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"14312A02-E8D0-4F2A-9D25-E9BAC21D9696"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3FB5EF4B-696C-48F6-AE1B-5355FA49AEB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8:rc2:*:*:*:*:*:*","matchCriteriaId":"97A097A7-1502-4A4C-B97D-1F06AFF234CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"97C82A30-50F0-4CB6-A67D-AB8BDFEBD3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EB655523-5F80-4F74-A99A-2692BCA93869"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC42BCD-50F0-4535-A6C1-6818EEE41F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"E31F91D2-E08F-44B2-8E04-9E62D1AD04E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.10:*:*:*:*:*:*:*","matchCriteriaId":"CD3A1376-8B22-4224-9224-68761A202828"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"E3AA3302-F980-4276-85E3-51B92918B29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.20:*:*:*:*:*:*:*","matchCriteriaId":"042D78DC-A93A-4FDB-A178-751DEEB10D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.26:*:*:*:*:*:*:*","matchCriteriaId":"868FD90C-8F2F-48C1-9882-D22358257440"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.29:*:*:*:*:*:*:*","matchCriteriaId":"F748B589-485B-429A-8CF0-80D893194DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.32:*:*:*:*:*:*:*","matchCriteriaId":"08023129-886D-4C37-A3C9-4726E39F59CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.40:*:*:*:*:*:*:*","matchCriteriaId":"931EF294-922C-47AB-B109-A13E4DEF25AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.47:*:*:*:*:*:*:*","matchCriteriaId":"E3BBEA4A-3950-45C1-83AC-F46E15F00E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.51:*:*:*:*:*:*:*","matchCriteriaId":"0AAE82F7-FF36-4D60-8306-21A8100951A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.56:*:*:*:*:*:*:*","matchCriteriaId":"C36FF15E-FA87-480B-94EC-3655B124371E"},{"vulnerable":true,"criteria":"cpe:2.3:a:class:class:0.8.59:*:*:*:*:*:*:*","matchCriteriaId":"57745199-6F99-4FD4-B845-0A6F58636E0A"}]}]}],"references":[{"url":"http://osvdb.org/50807","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=648307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32929","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47493","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7579","source":"cve@mitre.org"},{"url":"http://osvdb.org/50807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=648307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5857","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of \"browse documents\" and dashboard requests."},{"lang":"es","value":"El plugin DropDocuments en KnowledgeTree en versiones anteriores a la 3.5.4a permite a usuarios remotos autenticados obtener privilegios de administrador mediante una determinada secuencia de \"navegar por los documentos\" y peticiones al panel de Gestión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"5B1FD484-68F5-4C6E-B57E-CF5DAA5AEF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC8BD629-218D-4183-8AF4-918976C7C1D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"40D89524-23F3-4F32-B2D1-CBBBE6539828"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"275E87B3-1BD1-4138-9D63-695F054E3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"42627F66-9690-4B68-8C4C-1ECCD4840FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"267A9D21-DEBA-4456-9212-682CAFAD1E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"3FF19501-4D18-4A9E-ADE6-61DC8C712B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.1:*:*:*:*:*:*:*","matchCriteriaId":"44E586A6-7DB5-471E-88C6-3112AA374653"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"D8BEC8DA-3414-4479-B15B-5D9A30F32BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.1b:*:*:*:*:*:*:*","matchCriteriaId":"BA33E751-8690-4002-BDE9-7936E21CC18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3:*:*:*:*:*:*:*","matchCriteriaId":"857A2185-4E21-40DE-A9A7-73D944E16DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"354257DF-21AD-4E83-9A71-DA8E935F582B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C332D351-09EC-4825-90B2-AD54D1DF95D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4EFCB854-7EDE-4D1C-B5F5-8C6EE6DAFE89"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D0FA6FE0-3C2C-4662-BA3D-C8A938A00392"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FC41267C-A584-43BB-885A-8B24D6EC6F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9F3C4EFF-E31C-4B6E-9DBB-021EEBD939FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9CA24C37-8612-4786-9E4D-05C906F81D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4:*:*:*:*:*:*:*","matchCriteriaId":"7BFF17D1-DCC8-4482-9958-E915ADA6CBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AB924E15-7B44-45DA-9D29-C7A3EA42D8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5576089C-6809-422E-B1A6-C0B07E19430D"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FFEE7981-071C-4588-8ABF-E043A1E81EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"8FCC6E6D-B505-4071-8737-552A758F3A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"104FC9D1-EBBB-4672-A2D9-2F1627478663"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"31930BB6-7DE0-4183-91D1-FE3C4C242E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"58A6515B-76FF-4B3A-BC7A-5E0FD7DAC790"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FA574B0B-BFC1-46C7-B754-32F4C649A273"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2a:*:*:*:*:*:*:*","matchCriteriaId":"5CA027A3-B059-4532-A64C-9DC78246DB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2b:*:*:*:*:*:*:*","matchCriteriaId":"18D37449-749C-4BCA-998F-4B6348ACD941"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2c:*:*:*:*:*:*:*","matchCriteriaId":"CB700F4B-F673-4286-9615-BF1FAA6C0D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"95B6CF50-2CCD-4B57-919D-099538F6DD1A"}]}]}],"references":[{"url":"http://issues.knowledgetree.com/browse/KTS-3921","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33277","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.knowledgetree.com/Version_3.5.4a#Security","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32920","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47530","source":"cve@mitre.org"},{"url":"http://issues.knowledgetree.com/browse/KTS-3921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.knowledgetree.com/Version_3.5.4a#Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5858","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en KnowledgeTree, en versiones anteriores a la 3.5.4a, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados, es una cuestión diferente a CVE-2007-4281."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"5B1FD484-68F5-4C6E-B57E-CF5DAA5AEF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC8BD629-218D-4183-8AF4-918976C7C1D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"40D89524-23F3-4F32-B2D1-CBBBE6539828"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"275E87B3-1BD1-4138-9D63-695F054E3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"42627F66-9690-4B68-8C4C-1ECCD4840FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"267A9D21-DEBA-4456-9212-682CAFAD1E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"3FF19501-4D18-4A9E-ADE6-61DC8C712B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.1:*:*:*:*:*:*:*","matchCriteriaId":"44E586A6-7DB5-471E-88C6-3112AA374653"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"D8BEC8DA-3414-4479-B15B-5D9A30F32BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.1b:*:*:*:*:*:*:*","matchCriteriaId":"BA33E751-8690-4002-BDE9-7936E21CC18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3:*:*:*:*:*:*:*","matchCriteriaId":"857A2185-4E21-40DE-A9A7-73D944E16DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"354257DF-21AD-4E83-9A71-DA8E935F582B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C332D351-09EC-4825-90B2-AD54D1DF95D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4EFCB854-7EDE-4D1C-B5F5-8C6EE6DAFE89"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D0FA6FE0-3C2C-4662-BA3D-C8A938A00392"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FC41267C-A584-43BB-885A-8B24D6EC6F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9F3C4EFF-E31C-4B6E-9DBB-021EEBD939FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9CA24C37-8612-4786-9E4D-05C906F81D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4:*:*:*:*:*:*:*","matchCriteriaId":"7BFF17D1-DCC8-4482-9958-E915ADA6CBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AB924E15-7B44-45DA-9D29-C7A3EA42D8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5576089C-6809-422E-B1A6-C0B07E19430D"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FFEE7981-071C-4588-8ABF-E043A1E81EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"8FCC6E6D-B505-4071-8737-552A758F3A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"104FC9D1-EBBB-4672-A2D9-2F1627478663"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"31930BB6-7DE0-4183-91D1-FE3C4C242E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"58A6515B-76FF-4B3A-BC7A-5E0FD7DAC790"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FA574B0B-BFC1-46C7-B754-32F4C649A273"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2a:*:*:*:*:*:*:*","matchCriteriaId":"5CA027A3-B059-4532-A64C-9DC78246DB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2b:*:*:*:*:*:*:*","matchCriteriaId":"18D37449-749C-4BCA-998F-4B6348ACD941"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.2c:*:*:*:*:*:*:*","matchCriteriaId":"CB700F4B-F673-4286-9615-BF1FAA6C0D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"95B6CF50-2CCD-4B57-919D-099538F6DD1A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.knowledgetree.com/Version_3.5.4a#Security","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32920","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.knowledgetree.com/Version_3.5.4a#Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5859","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the show_page parameter."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en index.php en Constructr CMS v3.02.5 y anteriores, cuando register_globals está habilitado y magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro show_page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02.5","matchCriteriaId":"C2C54FD3-F2B4-4CF8-898B-2842F835D85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.0:alpha:*:*:*:*:*:*","matchCriteriaId":"1F0EC8A6-0487-4DFB-81AF-1EEA412FFCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.1:alpha:*:*:*:*:*:*","matchCriteriaId":"37056EFA-2603-4D92-8739-147D029036C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.2:alpha:*:*:*:*:*:*","matchCriteriaId":"5E04D2B0-4ACF-483A-8976-33972B2A4185"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.0:beta:*:*:*:*:*:*","matchCriteriaId":"52CA7C4F-59C5-4B95-9824-C0268248CF4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.1:beta:*:*:*:*:*:*","matchCriteriaId":"68B8B4AC-AF06-4BB7-B96D-F77E7161CE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.2:beta:*:*:*:*:*:*","matchCriteriaId":"9A2B90E5-8634-4D57-A140-125A529A7FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.3:beta:*:*:*:*:*:*","matchCriteriaId":"290D1E78-8940-4256-9003-1FC04708521A"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.4:beta:*:*:*:*:*:*","matchCriteriaId":"AE01A0E6-246E-48E5-9B17-CB7E2AE5636C"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.5:beta:*:*:*:*:*:*","matchCriteriaId":"A0A4BC9B-0B57-40C2-8A73-2DDE52395347"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.6:beta:*:*:*:*:*:*","matchCriteriaId":"AB35F6DF-BCFB-4829-A8E2-0B0D8E7E71C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.7:beta:*:*:*:*:*:*","matchCriteriaId":"87AA8CC5-B419-4280-84C5-DED823A9A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.8:beta:*:*:*:*:*:*","matchCriteriaId":"9045683D-C074-4271-B482-C7412E61D512"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.9:beta:*:*:*:*:*:*","matchCriteriaId":"0F2FCA30-B101-4FE9-ADBC-3A12D3C665F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.0:*:*:*:*:*:*:*","matchCriteriaId":"ECE2BD73-09A9-49EA-8C49-5364C5843EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.1:*:*:*:*:*:*:*","matchCriteriaId":"71855527-18D0-41C1-B14D-5E5DE554B2C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.2:*:*:*:*:*:*:*","matchCriteriaId":"80BED065-8EBF-4272-B10D-D95A8B36162D"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.3:*:*:*:*:*:*:*","matchCriteriaId":"C6266966-8355-4565-A0C1-EA4E25EE37E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.4:*:*:*:*:*:*:*","matchCriteriaId":"2B41D022-CBC0-4F1E-8ADA-BDAB192F77FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33250","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5860","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the edit_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en backend/template.php en Constructr CMS v3.02.5 y anteriores, cuando está habilitada la opción register_globals y la opción magic_quotes_gpc está deshabilitada, permite a atacantes remotos crear o leer ficheros de su elección a través de secuencias de salto de directorio en el parámetro edit_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02.5","matchCriteriaId":"C2C54FD3-F2B4-4CF8-898B-2842F835D85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.0:alpha:*:*:*:*:*:*","matchCriteriaId":"1F0EC8A6-0487-4DFB-81AF-1EEA412FFCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.1:alpha:*:*:*:*:*:*","matchCriteriaId":"37056EFA-2603-4D92-8739-147D029036C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.00.2:alpha:*:*:*:*:*:*","matchCriteriaId":"5E04D2B0-4ACF-483A-8976-33972B2A4185"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.0:beta:*:*:*:*:*:*","matchCriteriaId":"52CA7C4F-59C5-4B95-9824-C0268248CF4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.1:beta:*:*:*:*:*:*","matchCriteriaId":"68B8B4AC-AF06-4BB7-B96D-F77E7161CE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.2:beta:*:*:*:*:*:*","matchCriteriaId":"9A2B90E5-8634-4D57-A140-125A529A7FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.3:beta:*:*:*:*:*:*","matchCriteriaId":"290D1E78-8940-4256-9003-1FC04708521A"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.4:beta:*:*:*:*:*:*","matchCriteriaId":"AE01A0E6-246E-48E5-9B17-CB7E2AE5636C"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.5:beta:*:*:*:*:*:*","matchCriteriaId":"A0A4BC9B-0B57-40C2-8A73-2DDE52395347"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.6:beta:*:*:*:*:*:*","matchCriteriaId":"AB35F6DF-BCFB-4829-A8E2-0B0D8E7E71C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.7:beta:*:*:*:*:*:*","matchCriteriaId":"87AA8CC5-B419-4280-84C5-DED823A9A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.8:beta:*:*:*:*:*:*","matchCriteriaId":"9045683D-C074-4271-B482-C7412E61D512"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.01.9:beta:*:*:*:*:*:*","matchCriteriaId":"0F2FCA30-B101-4FE9-ADBC-3A12D3C665F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.0:*:*:*:*:*:*:*","matchCriteriaId":"ECE2BD73-09A9-49EA-8C49-5364C5843EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.1:*:*:*:*:*:*:*","matchCriteriaId":"71855527-18D0-41C1-B14D-5E5DE554B2C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.2:*:*:*:*:*:*:*","matchCriteriaId":"80BED065-8EBF-4272-B10D-D95A8B36162D"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.3:*:*:*:*:*:*:*","matchCriteriaId":"C6266966-8355-4565-A0C1-EA4E25EE37E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:constructr:constructr-cms:3.02.4:*:*:*:*:*:*:*","matchCriteriaId":"2B41D022-CBC0-4F1E-8ADA-BDAB192F77FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33250","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4868","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5861","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via directory traversal sequences in the p parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en source.php en FreeLyrics v1.0 permite a atacantes remotos leer ficheros de su elección a través de secuencias de escalado de directorios en el parámetro \"p\". NOTA: algunos de estos detalles se han obtenido a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freelyrics:freelyrics:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF46A005-6A9C-488A-B233-C9E700968ED0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33252","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32946","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5862","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en webcamXP v5.3.2.375 y v5.3.2.410 build 2132 permite a atacantes remotos leer ficheros de su elección a través de ..%2F (punto punto barra codificada) en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcamxp:webcamxp:5.3.2.375:*:*:*:*:*:*:*","matchCriteriaId":"DECB20CA-E70A-41A2-81D7-B799DE63E4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcamxp:webcamxp:5.3.2.410:*:*:*:*:*:*:*","matchCriteriaId":"E3705EE4-667D-481D-A65A-3D80F1316A8A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33257","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32928","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021484","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47492","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5863","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the y parameter in a get_user action."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en locator.php en el módulo Userlocator v3.0 para Woltlab Burning Board (wBB) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"y\" en una acción get_user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*","matchCriteriaId":"EC273A0A-B0E7-4C9D-9AE5-85542E9A205B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v-gn:userlocator:3.0:*:*:*:*:*:*:*","matchCriteriaId":"51E4D866-DE12-4334-BF7B-DDFCEFE92DC7"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4874","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32960","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47887","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7530","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5864","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el componente Top Hotel (com_tophotelmodule) v1.0 en el Hotel Booking Reservation System (también conocido como HBS) v1.0.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través de el parámetro \"id\" en una acción showhoteldetails a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:com_tophotelmodule:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C8BB7270-205E-4B32-8768-833EDA6ED38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"59536444-751B-4DFB-9C79-D04160024CBA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47540","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7539","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5865","sourceIdentifier":"cve@mitre.org","published":"2009-01-06T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en el componente com_hbssearch v1.0 en Hotel Booking Reservation System (alias HBS) v1.0.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro r_type en la acción showhoteldetails para index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"59536444-751B-4DFB-9C79-D04160024CBA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4870","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32951","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47539","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7538","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5866","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T20:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables."},{"lang":"es","value":"Proxim Wireless Tsunami MP.11 2411 con el software empotrado 3.0.3 tienen su comunidad de leer/escribir SNMP pública, lo que facilita a atacantes remotos la obtención de información sensible o la modificación de variables SNMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:proxim:tsunami_mp.11_2411:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11EA2AD4-00A0-4367-9192-B3781C831C1B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4884","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497182/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5867","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via directory traversal sequences in the mod field contained in the base64-encoded SID parameter to an unspecified component.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Yerba SACphp 6.3 permite a atacantes remotos leer archivos de su elección y posiblemente tener otro impacto, mediante secuencias de salto de directorio en el campo mod contenido en el parámetro SID codificado en base 64 a un componente no especificado. NOTA: el origen de esta información se ha obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yerba:yerba:6.3:*:*:*:*:*:*:*","matchCriteriaId":"44F312BA-FAFD-4226-8956-D00A913F3070"}]}]}],"references":[{"url":"http://secunia.com/advisories/32093","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31619","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45733","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5868","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin value in a configuration (.cfg) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en IntelliTamper v2.07 y v2.08 permite a atacantes con usuario asistido ejecutar código de su elección a través de un valor largo ProxyLogin en un fichero de configuración (.cfg)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.07:*:*:*:*:*:*:*","matchCriteriaId":"5DB8599A-66C1-4F5A-BCBD-7F87F4A70F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:intellitamper:intellitamper:2.08:*:*:*:*:*:*:*","matchCriteriaId":"B4E5A0A1-3DCC-4F45-8943-5379F4B10CC3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4882","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7608","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5869","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T18:30:04.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID."},{"lang":"es","value":"Vulnerablidad de secuencias de comandos en sitios cruzados (XSS) en el software empotrado (firmware) Proxim Wireless Tsunami MP.11 2411 v3.0.3 permite a usuarios remotos autenticados inyectar web script o HTML a través de system.sysName.0 SNMP OID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:proxim:tsunami_mp.11_2411:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11EA2AD4-00A0-4367-9192-B3781C831C1B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4884","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497182/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31666","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45797","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5870","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T18:30:04.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942."},{"lang":"es","value":"FastStone Image Viewer v3.6 permite a atacantes con usuario asistido provocar una denegación de servicio (caída de aplicación) a través de una imagen BMP mal formada con valores largos de anchura y altura, posiblemente relacionado con la cuestión CVE-2007-1942."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:faststone:image_viewer:3.6:*:*:*:*:*:*:*","matchCriteriaId":"E061D1B5-F141-46C5-95D6-66DCDEF9E57A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497061/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6673","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497061/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5871","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T18:30:04.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command."},{"lang":"es","value":"Nortel Multimedia Communication Server (MSC) 5100 v3.0.13 no verifica credenciales durante la llamada de reemplazo, lo cual permite a atacantes remotos envenenar y redireccionar llamadas VoIP, posiblemente relacionado con el comando \"snoop\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:multimedia_communication_server_5100:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2FBC652F-C465-48FE-9969-DCC8B5990499"}]}]}],"references":[{"url":"http://secunia.com/advisories/32203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223","source":"cve@mitre.org"},{"url":"http://voipshield.com/research-details.php?id=119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31640","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2779","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45752","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voipshield.com/research-details.php?id=119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5872","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T18:30:04.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via a UFTP message that has a negative block size or other crafted Connection Details values."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el Protocolo de Transferencia de Ficheros UNIStim (UFTP) procesando en IP Client Manager (IPCM) en Nortel Multimedia Communication Server (MSC) 5100 v3.0.13 permite a atacantes remotos provocar una denegación de servicio (agotamiento de dispositivo) a través de un mensaje UFTP que tiene un tamaño bloqueado negativo u otros valores Connection Details manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:multimedia_communication_server_5100:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2FBC652F-C465-48FE-9969-DCC8B5990499"}]}]}],"references":[{"url":"http://secunia.com/advisories/32203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://voipshield.com/research-details.php?id=120","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31633","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2779","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45751","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://voipshield.com/research-details.php?id=120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5873","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T18:30:04.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username."},{"lang":"es","value":"Yerba SACphp v6.3 y versiones anteriores permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo a través de un cookie galleta[sesion] que tiene un valor que comienza con 1:1: seguido por un nombre de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yerba:yerba:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3","matchCriteriaId":"E15FD304-CF2C-4622-9CC2-A9BC3BF28F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:yerba:yerba:6.28:*:*:*:*:*:*:*","matchCriteriaId":"A79871AF-F1A6-440E-A2EC-127FFA457111"}]}]}],"references":[{"url":"http://secunia.com/advisories/32093","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31619","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45734","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6691","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5874","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Hotel Booking Reservation System (también conocido como HBS) para Joomla! permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción showhoteldetails de index.php en los módulos (1) com_allhotels o (2) com_5starhotels.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:com_5starhotels:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C9B2D0CC-423B-4389-9E06-8FCB6B93FEF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:com_allhotels:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"FBEE69C1-3EEC-4934-A7BC-D4172430BC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"5D91DD07-0E3B-4961-BDD6-D1F01F512E58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/32952.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7568","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7575","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/32952.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5875","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente com_lowcosthotels en Hotel Booking Reservation System (también conocido como HBS) para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción showhoteldetails de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:com_lowcosthotels:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"D3E723D5-43A7-4A5C-AFC6-B336F06E61A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"5D91DD07-0E3B-4961-BDD6-D1F01F512E58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4880","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499580/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32952","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7567","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499580/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5876","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors in the B3D loader."},{"lang":"es","value":"Desbordamiento de búfer en Irrlicht versiones anteriores a v1.5 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de vectores no especificados en el cargador B3D."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2","matchCriteriaId":"6AEF29AA-3B95-4282-8287-9CC97B571D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A4EA5622-85E4-47E9-A401-1369BE4B4A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A669E523-E328-4059-9D08-5251F08004AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D4FC0374-64E3-432D-9AC7-E590C6E0383B"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C287F747-D43F-4131-8FD7-1ABBD6F9EB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0873F45D-93BB-42F9-9888-88D5EBD256E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.4:*:*:*:*:*:*:*","matchCriteriaId":"9EA349BE-FDF4-465A-A8B4-9F19669AE1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:irrlicht:irrlicht:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9DE3C044-80C0-4CC3-B3F6-F2933A83B8F4"}]}]}],"references":[{"url":"http://irrlicht.sourceforge.net/changes.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/50793","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32907","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47453","source":"cve@mitre.org"},{"url":"http://irrlicht.sourceforge.net/changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5877","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id parameter to pcw/processforms.php, (3) pcwlogin and (4) pcw_pass parameters to pcw/setlogin.php, (5) searchvalue parameter to pcw/downloads.php, and the (6) searchvalue and (7) whichfield parameter to pcw/downloads.php, a different vector than CVE-2006-0444."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Phpclanwebsite (también conocido como PCW) v1.23.3 Fix Pack 5 y versiones anteriores, cuando magic_quotes_gpc no está activo, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) page de index.php, parámetro (2) form_id de pcw/processforms.php, parámetros (3) pcwlogin y (4) pcw_pass de pcw/setlogin.php, parámetro (5) searchvalue de pcw/downloads.php, y los parámetros (6) searchvalue y (7) whichfield de pcw/downloads.php, un vector diferente que CVE-2006-0444."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23.3","matchCriteriaId":"6A6ECD70-4B60-4909-BC08-BBBB35862B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.20:*:*:*:*:*:*:*","matchCriteriaId":"4D54B323-8B6A-4887-9AE1-F41F3C759097"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.21:*:*:*:*:*:*:*","matchCriteriaId":"39FB03FF-F7E2-40CA-9CA6-C9C843544C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.22:*:*:*:*:*:*:*","matchCriteriaId":"C33D45DB-62D9-4670-8886-A41377DFE6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23:*:*:*:*:*:*:*","matchCriteriaId":"C0F5C73A-23EE-4126-B5DA-7A22E3843690"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"0F83CDE4-12C0-42AF-8F4E-E383791BA81A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"AF21339E-C9C6-453B-8EEE-CB3325FFA5DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32915","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7515","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5878","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the (1) boxname parameter to theme/superchrome/box.php and the (2) theme parameter to phpclanwebsite/footer.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Phpclanwebsite (también conocido como PCW) v1.23.3 Fix Pack 5 y versiones anteriores, cuando magic_quotes_gpc no está activo y register_globals está activo, permiten a atacantes remotos incluir y ejecutar ficheros de su elección a través de .. (punto punto) en el parámetro (1) boxname de theme/superchrome/box.php y el parámetro (2) theme de phpclanwebsite/footer.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23.3","matchCriteriaId":"6A6ECD70-4B60-4909-BC08-BBBB35862B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.20:*:*:*:*:*:*:*","matchCriteriaId":"4D54B323-8B6A-4887-9AE1-F41F3C759097"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.21:*:*:*:*:*:*:*","matchCriteriaId":"39FB03FF-F7E2-40CA-9CA6-C9C843544C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.22:*:*:*:*:*:*:*","matchCriteriaId":"C33D45DB-62D9-4670-8886-A41377DFE6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23:*:*:*:*:*:*:*","matchCriteriaId":"C0F5C73A-23EE-4126-B5DA-7A22E3843690"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"0F83CDE4-12C0-42AF-8F4E-E383791BA81A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"AF21339E-C9C6-453B-8EEE-CB3325FFA5DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32915","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7515","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5879","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en index.php en Phpclanwebsite (también conocido como PCW) v1.23.3 Fix Pack 5 y versiones anteriores, permite a atacantes remotos inyectar web script o HTML a través del parámetro \"page\" y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.23.3","matchCriteriaId":"6A6ECD70-4B60-4909-BC08-BBBB35862B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.20:*:*:*:*:*:*:*","matchCriteriaId":"4D54B323-8B6A-4887-9AE1-F41F3C759097"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.21:*:*:*:*:*:*:*","matchCriteriaId":"39FB03FF-F7E2-40CA-9CA6-C9C843544C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.22:*:*:*:*:*:*:*","matchCriteriaId":"C33D45DB-62D9-4670-8886-A41377DFE6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23:*:*:*:*:*:*:*","matchCriteriaId":"C0F5C73A-23EE-4126-B5DA-7A22E3843690"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.1:*:*:*:*:*:*:*","matchCriteriaId":"0F83CDE4-12C0-42AF-8F4E-E383791BA81A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpclanwebsite:phpclanwebsite:1.23.2:*:*:*:*:*:*:*","matchCriteriaId":"AF21339E-C9C6-453B-8EEE-CB3325FFA5DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32915","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7515","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5880","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to \"ok\"."},{"lang":"es","value":"admin/auth.php en Gobbl CMS v1.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo estableciendo la cookie \"auth\" a \"ok\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gobbl:gobbl_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB9A9614-63D9-4B17-9BD9-7ABCACAA412B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33190","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4886","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32918","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7518","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5881","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) gateway_module parameter to plugin/gateway/gnokii/init.php and the (2) themes_module parameter to plugin/themes/default/init.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en playSMS v0.9.3 permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro (1) gateway_module de plugin/gateway/gnokii/init.php y el parámetro (2) themes_module de plugin/themes/default/init.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:playsms:playsms:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"27627EBF-A5E7-4E93-9267-10A01792485C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33138","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5882","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp en Citrix Application Gateway - Broadcast Server (BCS) versiones anteriores a v6.1, como el utilizado por Avaya AG250 - Broadcast Server versiones anteriores a v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"txtUID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:broadcast_server:*:*:cisco:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"E61CB574-114D-4DAE-862E-89C620D9ADA7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:citrix:application_gateway_for_avaya:-:*:*:*:*:*:*:*","matchCriteriaId":"753276FF-50EE-419C-A12A-1F02C327355D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:broadcast_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"418F0764-BF4F-4CD5-AEEE-71470C5F823E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:avaya:ag250:2.0:*:*:*:*:*:*:*","matchCriteriaId":"559A80D6-6F47-430C-B869-F2EA0032A4C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33127","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4889","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX119315","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/499559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32832","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX119315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/499559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5883","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter."},{"lang":"es","value":"Vulnerabilidad de salto de ruta absoluta en front-end/dir.php de mini-pub v0.3 y anteriores permite a atacantes remotos listar directorios de su elección a través de un path completo en el parámetro sDir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"3E43AD4B-79E8-4078-8809-52A0F1D83798"},{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.1:*:*:*:*:*:*:*","matchCriteriaId":"31775CA3-B7DF-4B55-A444-BD1AD209F6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BB9C5B2-0FFE-4FF7-BD67-699E8CC1B0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A9062FC0-2A48-46AC-9D68-5AC1D0A4F13F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4897","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45829","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6734","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5884","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malformed header."},{"lang":"es","value":"AyeView v2.20 permite a atacantes con usuario asistido provocar denegación de servicio (caída de aplicación) mediante un fichero GIF con una  cabecera mal formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zkesoft:ayeview:2.20:*:*:*:*:*:*:*","matchCriteriaId":"798E412D-457B-472C-917B-61502B507532"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4900","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45678","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6668","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5885","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/quote.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"The Net Guys ASPired2Quote almacena información sensible por debajo del directorio raíz web, con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de la base de datos que contiene nombres de usuarios y claves, a través de una petición directa a   admin/quote.mdb. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thenetguys:aspired2quote:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"7DA232D1-4D13-4F9B-AE3F-C46F28182EA6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4898","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47325","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7446","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5886","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for _private/discussion.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"TAKempis Discussion Web v4.0 almacena información sensible por debajo del directorio raíz web, con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de la base de datos que contiene una clave, a través de una petición directa a   _private/discussion.mdb. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:takempis:discussion_web:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EC4C62FC-4687-4AD5-B725-8720B799B3F8"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4899","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47348","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7445","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5887","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a \"local file include vulnerability.\""},{"lang":"es","value":"phplist anterior a v2.10.8 permite a atacantes remotos incluir ficheros a través de vectores desconocidos, relacionada a una \"vulnerabilidad de inclusión de un fichero local.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.7","matchCriteriaId":"C968EC0D-B90C-49A3-9D41-90E76C6FB7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5FC454AF-1B16-4448-9F5A-80D656F9551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2F08591B-A066-40F4-97A4-F7EF1FE40FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.2b:*:*:*:*:*:*:*","matchCriteriaId":"994CBD86-E713-458E-AD7B-5357BD747319"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.3b:*:*:*:*:*:*:*","matchCriteriaId":"0394F819-8734-4418-A5D9-081B0ABED9AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.4b:*:*:*:*:*:*:*","matchCriteriaId":"42F1E692-B80F-4F45-A694-F620B928F2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"53EF60DE-FA1D-4F0E-80D8-EE87041741C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.5b:*:*:*:*:*:*:*","matchCriteriaId":"DC9F1619-4300-4674-AB7F-3B6C182C1A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0B923032-FB9C-42EB-AAF3-0AFC40690121"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F5CEA44B-B45D-46E6-9740-7AFCAD676C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"F0B52E71-CB78-438F-913B-3B49BA135F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"46BE05C7-CFB0-48E8-999B-5B4B39D0E16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"648BE81A-7987-491C-8ED6-E737D83D3D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DE9D9D96-AB9E-4938-80AD-4F012894067F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DE7F2489-59E1-4676-A46B-FC94DBA011D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"09EDB2B3-985E-4B26-95E8-5B179810AB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AFCDC95D-E5CC-4A62-B0CA-85252F880005"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"B80875CA-261C-4B66-8A8B-5007CD645230"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"93584A2D-F093-4691-9A56-0B7CF9B82D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"1AF7994C-A3BF-4846-A598-69E5FAA410E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D20C18F5-0D20-488E-A685-95537825F631"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"2DAFAD62-46AE-4C2B-8338-9F01468C4D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"571DA919-BEA6-4033-B1A6-5B0305281135"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7825E3FF-BD5C-466B-9D68-ABC269229DC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"84DF3E96-8035-4290-9B29-5C3795A04852"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"CBE1716C-536C-426C-BF26-55CBEC445485"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A661DEE-0AF7-4CA1-9BDD-A8E3C34D293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B2D6C9F-9700-4C81-B3D5-0FCAC1E6CA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"22D86B15-1F3A-4EFA-8D7F-7ECD8F26C2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DE1CA9D6-E9C5-4C61-AB58-850A785C58EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B5358C-53BA-4A63-8EB4-72F86B67F023"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"154AECE5-DC59-49B9-A756-36B0049A0C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0755ABE4-C9A4-477F-AC0C-03655F4A2505"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3FC17BA8-6FEA-40B2-8734-9DD873E6FC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F8D1B20B-7120-4F12-AA3F-775952F9F315"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8434A23C-F4EB-4F3B-BE55-BBC599E3FC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A63F9ADB-90D7-49E3-ABDF-C75B218486C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"42CDBD10-EE7A-4185-BCCB-85AB0D9BDD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"4F52B116-6306-4620-B3DE-C77129DEBC75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA9A72F-C975-4CAC-B63B-BD74CCF97640"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2B355BF6-DDAB-4643-8480-9B850418121D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"EA8F9F34-7F4B-4B08-80A0-7495AE30F8F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"23D04A86-5992-469E-BECB-341BB659EB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"55656478-6680-4FD2-B322-0C73DD2380BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"34F3DD54-BCEC-433B-9434-2129A967B234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"3ABABD5C-624A-4ABC-9265-C2BBC6435BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2381905B-8532-4E67-ADAB-78321D153AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"CD67705B-7589-4E4E-85BF-1C1EC7001052"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6:*:*:*:*:*:*:*","matchCriteriaId":"CBE10CFB-A604-4C6E-ACE6-FD441C47D296"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F1EC7F51-B790-4333-9A2F-44693B3A7E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"784C97D4-740E-4C65-98ED-FA03EC3EFAA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F94101A7-419E-4ACF-AB75-F0B0DA6E7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D6F52B3C-7925-4970-AA84-732B34DD2FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5140DBAC-6AF0-41D0-972C-4F97BA06F488"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"CC2A6FB5-0CE1-4952-9763-7AA0E605A7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"665AC8D2-D3E6-470C-800B-0FD5AACE77BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"FA2FFBB2-E4C0-4F16-90D6-9D3FB2105C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"15C06CBF-3F4B-4D10-9FF4-21985354ED3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"018BA2DC-D1F7-4995-9D72-C38A2B087F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*","matchCriteriaId":"516EB08E-F724-4638-8174-1FB527CE8E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"C4B0EA29-302E-4FFB-88E2-5A4CDF195BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"048787BE-1E97-40B1-94F3-ADA674207396"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"2DB56F18-A63B-4557-AB5E-E83BFEDED0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5BAFF48D-67A7-40DA-9762-DB416E1442C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"86D12DE2-9CCA-4670-B119-8BF02A48453D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"A56C8952-210A-4B93-8EC9-E0FDA9D606C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"37308B67-FA64-4858-AC66-EBC339180E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C8B089E7-A9E4-4184-8AE3-3FE7D0E1A92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.6:*:*:*:*:*:*:*","matchCriteriaId":"8685E03D-8377-4B30-9D41-DB6B926DC14D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4901","source":"cve@mitre.org"},{"url":"http://www.phplist.com/?lid=273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499218/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32841","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47395","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phplist.com/?lid=273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499218/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5888","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hitcounter.asp, (2) user_delete.asp, and (3) user_update.asp; (4) the userid parameter to admin_login.asp (aka the USERNAME field in admin.asp); and (5) the PassWord parameter to admin_login.asp (aka the PASSWORD field in admin.asp).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Click&Rank permiten a atacantes remotos ejecutar comandos SQL a través del parámetro  ID de (1) hitcounter.asp, (2) user_delete.asp, y (3) user_update.asp; (4) el parámetro userid en admin_login.asp (alias el campo nombre de usuario en admin.asp), y (5), el parámetro PassWord para admin_login.asp (alias el campo Contraseña en admin.asp). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icash:click\\&rank:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"FC2F4B8F-1AE0-4AD7-B1F6-A7A25E597679"}]}]}],"references":[{"url":"http://secunia.com/advisories/33154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4902","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32854","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5889","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web script or HTML via the action parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el fichero user.asp en Click&Rank permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de la acción parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icash:click\\&rank:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"FC2F4B8F-1AE0-4AD7-B1F6-A7A25E597679"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32855","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5890","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo feeds.php en Injader en versiones anteriores a 2.1.2,  permite a atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"4512FA9D-70B9-4693-BE15-3329A8F4F6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5CF4F549-1F1A-4CC8-8210-32B8A6360AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D2012E3D-836E-476C-88D2-75227798096D"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"03177968-FCCB-42BC-98DD-74C9EDB9BCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"633576C6-D24C-433B-A0F8-7A2FB452FFE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=646897","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32843","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/7517","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=646897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/7517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5891","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad de edición de perfiles en versiones de Injader anteriores a la 2.1.2 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores no especificados. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"4512FA9D-70B9-4693-BE15-3329A8F4F6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5CF4F549-1F1A-4CC8-8210-32B8A6360AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D2012E3D-836E-476C-88D2-75227798096D"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"03177968-FCCB-42BC-98DD-74C9EDB9BCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:injader:injader:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"633576C6-D24C-433B-A0F8-7A2FB452FFE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=646897","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32843","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/33161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=646897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2008-5892","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter to admin_dblayers.asp in an update action, (2) the adminid parameter to admin_loginCheck.asp (aka the USERNAME field in admin_main.asp), and (3) the PassWord parameter to admin_loginCheck.asp (aka the PASSWORD field in admin_main.asp).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ClickAndEmail, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"ID\" a admin_dblayers.asp en una acción update, (2) \"adminid\" a admin_loginCheck.asp (también conocido como campo USERNAME en admin_main.asp), y (3) \"PassWord\" a admin_loginCheck.asp (también conocido como campo PASSWORD en admin_main.asp).  NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icash:click\\&email:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"85D58230-025C-4FC0-818D-20EC24030E70"}]}]}],"references":[{"url":"http://secunia.com/advisories/33155","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4903","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32857","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5893","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en admin_dblayers.asp en ClickAndEmail permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través del parámetro tablename en una acción de actualización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icash:click\\&email:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"85D58230-025C-4FC0-818D-20EC24030E70"}]}]}],"references":[{"url":"http://secunia.com/advisories/33155","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4903","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32857","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5894","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Mediatheka v4.2 permite a atacantes remotos añadir y ejecutar ficheros locales de su elección utilizando los caracteres .. (punto punto) en el parámetro \"lang\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediatheka:mediatheka:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DACDB553-7D3A-447E-900E-AD21C8B28309"}]}]}],"references":[{"url":"http://secunia.com/advisories/33176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4904","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32815","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47349","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7458","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5895","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en connection.php de Mediatheka v4.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"user\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediatheka:mediatheka:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DACDB553-7D3A-447E-900E-AD21C8B28309"}]}]}],"references":[{"url":"http://secunia.com/advisories/33176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32836","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7476","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5896","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CARateMySite.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"CodeAvalanche RateMySite almacena información sensible en el directorio raíz de la web sin el suficiente control de acceso, permitiendo a atacantes remotos descargar el fichero de base de datos que contiene la contraseña de administrador, mediante una petición directa por el fichero _private/CARateMySite.mdb. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeavalanche:ratemysite:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"BE63FFE0-8870-43DF-B5EA-1EDBBCB40477"}]}]}],"references":[{"url":"http://secunia.com/advisories/33100","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4906","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47350","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7472","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5897","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAFreeWallpaper.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"CodeAvalanche FreeWallpaper almacena información sensible en el directorio raíz de la web sin el suficiente control de acceso, permitiendo a atacantes remotos descargar el fichero de base de datos que contiene la contraseña de administrador, mediante una petición directa por el fichero _private/CAFreeWallpaper.mdb. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeavalanche:freewallpaper:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"42396FA8-453E-44A2-98E3-DE99C9EA01F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47352","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5898","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CADirectory.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"CodeAvalanche Directory almacena información sensible en el directorio raíz de la web sin el suficiente control de acceso, permitiendo a atacantes remotos descargar el fichero de base de datos que contiene la contraseña de administrador, mediante una petición directa por el fichero _private/CADirectory.mdb. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeavalanche:directory:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"65934E0A-751E-43E1-892A-08615DC2883E"}]}]}],"references":[{"url":"http://secunia.com/advisories/33100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4907","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47353","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7468","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5899","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAFFAPage.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"CodeAvalanche FreeForAll almacena información sensible por debajo del directorio raíz web, con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de la base de datos que contiene la clave del administrador, a través de una petición directa a   _private/CAFFAPage.mdb. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeavalanche:freeforall:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"407ED1EB-CF6C-402B-A2A5-0CFE83182D36"}]}]}],"references":[{"url":"http://secunia.com/advisories/33100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47354","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7469","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5900","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAArticles.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"CodeAvalanche Articles almacena información sensible bajo el directorio web raíz, con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de la base de datos que contiene la clave del administrador, a través de una petición directa a  _private/CAArticles.mdb. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeavalanche:articles:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"CCF4A272-44C8-4C7E-B3D6-F81EE7AC0FB8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4909","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47351","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7471","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5901","sourceIdentifier":"cve@mitre.org","published":"2009-01-12T20:00:02.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"iyzi Forum v1.0 beta 3 almacena información bajo el directorio principal web con control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de la base de datos que contienen una clave a través de diferentes peticiones de db/iyziforum.mdb. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iyziforum:iyzi_forum:1.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"452DD51C-9591-43F5-8E47-1BEC248DC56E"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4908","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47330","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7449","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5902","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request."},{"lang":"es","value":"Desbordamiento de bufer en la función xrdp_bitmap_invalidate en xrdp/xrdp_bitmap.c en xrdp v0.4.1 y anteriores permite a atacantes remotos ejecutar código a su elección a través de un petición manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.1","matchCriteriaId":"65F2032C-D667-4158-B623-BFDE02CFD4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3:*:*:*:*:*:*:*","matchCriteriaId":"6DCC7A9C-81B3-46BD-989B-4B0F7EDD4330"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9E1EFB9E-D279-4E63-8246-A9D27E79FEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3A3BE6F0-DDF9-439F-8CDE-5BCEE2C7813D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3F828-04C5-4288-9649-DB8FDA5DBAC4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/3","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5903","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the edit_pos structure member."},{"lang":"es","value":"Error de índice de array en la funcion xrdp_bitmap_def_proc en xrdp/funcs.c en xrdp v0.4.1 y anteriores permitiria a atacantes remotos ejecutar codigo a su eleccion a traves de vectores que manipularian el valor de la estructura del miembro edit_pos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.1","matchCriteriaId":"65F2032C-D667-4158-B623-BFDE02CFD4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3:*:*:*:*:*:*:*","matchCriteriaId":"6DCC7A9C-81B3-46BD-989B-4B0F7EDD4330"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9E1EFB9E-D279-4E63-8246-A9D27E79FEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3A3BE6F0-DDF9-439F-8CDE-5BCEE2C7813D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3F828-04C5-4288-9649-DB8FDA5DBAC4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/3","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33371","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48093","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5904","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow."},{"lang":"es","value":"La función rdp_rdp_process_color_pointer_pdu en rdp/rdp_rdp.c en xrdp v0.4.1 y anteriores, permite a servidores remotos RDP obtener un impacto desconocido a través de una entrada de datos que fija valores manipulados de variables de cierta longitud, produciendo un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.1","matchCriteriaId":"65F2032C-D667-4158-B623-BFDE02CFD4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3:*:*:*:*:*:*:*","matchCriteriaId":"6DCC7A9C-81B3-46BD-989B-4B0F7EDD4330"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9E1EFB9E-D279-4E63-8246-A9D27E79FEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3A3BE6F0-DDF9-439F-8CDE-5BCEE2C7813D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xrdp:xrdp:0.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3F828-04C5-4288-9649-DB8FDA5DBAC4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/3","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48094","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5905","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request."},{"lang":"es","value":"El plugin del interfaz web en KTorrent anteriores a v3.1.4 permitiría a atacantes remotos evitar las restricciones de acceso previstas y subir ficheros torrent, e iniciar la descarga y sembrado a través de una petición HTTP POST manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.3","matchCriteriaId":"E8025283-BC2B-4B33-8870-4339B8E72885"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C135250-74F9-407F-BF3F-74AC0B6283BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DBF924C-9DC8-49A3-809D-C9C2D166FCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B98B1318-4EDB-49F5-B39F-536B7D4F9D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B3FEFCAD-9F02-4DD7-BEB2-CCF76BE4CD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"5ABF1AF9-F645-4E38-AD21-43F363CDC774"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"F76C3120-59ED-4B34-9138-C5E12C3A43C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CE350CBD-5B58-4C3E-80C4-CF2689B590B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3D2C64FA-B341-42F7-AD05-663B2D1C89E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1F74623A-DB49-42F1-A82A-851C36F3F2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A1A49AEA-0406-4B77-A613-0872A129E020"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5BBC44F4-D3F3-4140-A7B6-58DCF0CB95DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"009FC942-5A24-4C09-BB0F-990EF13C3BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1:*:*:*:*:*:*:*","matchCriteriaId":"80D1BCF4-1215-4284-9167-409C9F2D3686"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1:beta1:*:*:*:*:*:*","matchCriteriaId":"01FC83B5-1A34-4E54-BC05-27903C8D76C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52FAF04B-8043-495A-B68D-BEC80707D7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D124FEE2-D7D8-4F22-89A0-0DEB23C118F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65074E3F-BD29-4D38-9A82-44AE5CCBA1B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"332E5BA7-E581-4256-BE23-9DE0A93ECC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D6760D0F-EBDC-4357-8A1F-330AED46C27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2:*:*:*:*:*:*:*","matchCriteriaId":"89958A00-844E-4AC6-B9F9-128F4ED2BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"B2EE31B1-612F-47AF-A003-434B73D09CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"7323A1A4-6AD8-45D1-92C9-A485A2404453"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A1984EEE-7555-417C-A068-A95D9E87DB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A00B1A7-2C05-49A0-AD87-E0016E9AD8E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"44495B44-7EBD-4443-98D4-203EADFBD96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D10469C7-FDAF-45B9-91AD-E083385D940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8F37F5-B52A-4302-AE36-BD3677E57B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F9B5D785-ADF8-4929-BC0B-3DB7BC5A9A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7093A493-B85B-461C-A1A3-21117418B9F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2ADAB09F-3A65-43F2-9772-811D26E3AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"87174F64-B01F-4D76-BEC0-630512C437B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E9A0A18F-1FA6-4D99-AD43-D7D61B8C844F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6CC400A2-4ED0-4361-BF3E-7029182B9D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D4295F0-17C9-4975-9AD5-97D283CB5C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A01004DB-5098-43C0-9EFA-BD5E56411632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6EF76451-B112-4836-B8BF-7E74B1252192"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"484C3B3E-0971-4C11-9815-A90B450159D3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178","source":"cve@mitre.org"},{"url":"http://ktorrent.org/?q=node/23","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/08/1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32447","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34003","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200902-05.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31927","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-711-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2911","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=244741","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46117","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ktorrent.org/?q=node/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/08/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200902-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-711-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=244741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5906","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts."},{"lang":"es","value":"Vulnerabilidad de inyección Eval (evaluación directa de código dinámico) en el plugin del interfaz web en KTorrent anteriores a v3.1.4 permite a atacantes remotos ejecutar código PHP a su elección a través de parámetros inespecificos a las secuencias de comandos PHP del interfaz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.3","matchCriteriaId":"E8025283-BC2B-4B33-8870-4339B8E72885"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C135250-74F9-407F-BF3F-74AC0B6283BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DBF924C-9DC8-49A3-809D-C9C2D166FCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B98B1318-4EDB-49F5-B39F-536B7D4F9D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B3FEFCAD-9F02-4DD7-BEB2-CCF76BE4CD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"5ABF1AF9-F645-4E38-AD21-43F363CDC774"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"F76C3120-59ED-4B34-9138-C5E12C3A43C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CE350CBD-5B58-4C3E-80C4-CF2689B590B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3D2C64FA-B341-42F7-AD05-663B2D1C89E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1F74623A-DB49-42F1-A82A-851C36F3F2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A1A49AEA-0406-4B77-A613-0872A129E020"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5BBC44F4-D3F3-4140-A7B6-58DCF0CB95DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"009FC942-5A24-4C09-BB0F-990EF13C3BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1:*:*:*:*:*:*:*","matchCriteriaId":"80D1BCF4-1215-4284-9167-409C9F2D3686"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1:beta1:*:*:*:*:*:*","matchCriteriaId":"01FC83B5-1A34-4E54-BC05-27903C8D76C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52FAF04B-8043-495A-B68D-BEC80707D7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D124FEE2-D7D8-4F22-89A0-0DEB23C118F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"65074E3F-BD29-4D38-9A82-44AE5CCBA1B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"332E5BA7-E581-4256-BE23-9DE0A93ECC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D6760D0F-EBDC-4357-8A1F-330AED46C27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2:*:*:*:*:*:*:*","matchCriteriaId":"89958A00-844E-4AC6-B9F9-128F4ED2BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"B2EE31B1-612F-47AF-A003-434B73D09CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"7323A1A4-6AD8-45D1-92C9-A485A2404453"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A1984EEE-7555-417C-A068-A95D9E87DB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A00B1A7-2C05-49A0-AD87-E0016E9AD8E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"44495B44-7EBD-4443-98D4-203EADFBD96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D10469C7-FDAF-45B9-91AD-E083385D940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8F37F5-B52A-4302-AE36-BD3677E57B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F9B5D785-ADF8-4929-BC0B-3DB7BC5A9A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7093A493-B85B-461C-A1A3-21117418B9F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2ADAB09F-3A65-43F2-9772-811D26E3AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"87174F64-B01F-4D76-BEC0-630512C437B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E9A0A18F-1FA6-4D99-AD43-D7D61B8C844F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6CC400A2-4ED0-4361-BF3E-7029182B9D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D4295F0-17C9-4975-9AD5-97D283CB5C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A01004DB-5098-43C0-9EFA-BD5E56411632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6EF76451-B112-4836-B8BF-7E74B1252192"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktorrent:ktorrent:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"484C3B3E-0971-4C11-9815-A90B450159D3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178","source":"cve@mitre.org"},{"url":"http://ktorrent.org/?q=node/23","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/08/1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32447","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34003","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200902-05.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31927","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-711-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2911","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=244741","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46118","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ktorrent.org/?q=node/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/08/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200902-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-711-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=244741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5907","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\\0' character constant to a NULL pointer.  NOTE: some sources incorrectly report this as a double free vulnerability."},{"lang":"es","value":"La funcion png_check_keyword en pngwutil.c en libpng anteriores a v1.0.42,  v1.2.x anterior a v1.2.34, permitiría atacantes dependientes de contexto poner a cero el valor de una localización de memoria de su elección a través de vectores relacionados con la creación de ficheros PNG con palabras clave, relacionado con la asignación del valor '\\0' a un puntero NULL. NOTA: Algunas fuentes informan incorrectamente que se trata de una vulnerabilidad de doble liberación."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this bug to be a security issue. For a more detailed explanation, please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-5907","lastModified":"2009-02-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.42","matchCriteriaId":"43E68AFA-10FF-49C5-B2AE-6C3B91B5EE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.34","matchCriteriaId":"63448D4F-B6B7-4CBD-AC5F-FB8C4FE12FB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://libpng.sourceforge.net/index.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/09/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34320","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34388","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implement","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:051","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48128","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://libpng.sourceforge.net/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/09/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implement","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-5908","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a \"Temporary file vulnerability,\" aka Bug ID 6653455."},{"lang":"es","value":"Vulnerabilidad no especificada en el archivo root/boot en Sun OpenSolaris tiene un impacto y vectores de ataque locales desconocidos, relacionado con una \"Vulnerabilidad de ficheros temporales\", también conocido como Bug ID 6653455."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","matchCriteriaId":"19FE69F8-3726-4B21-9B78-E9920B046564"}]}]}],"references":[{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48146","source":"cve@mitre.org"},{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5909","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641."},{"lang":"es","value":"Vulnerabilidad no especificada en conv_lpd en Sun OpenSolaris tiene un impacto y vectores de ataque locales desconocidos, relacionado con un inapropiado manejo de ficheros temporales, también conocido como Bug ID 6655641."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","matchCriteriaId":"19FE69F8-3726-4B21-9B78-E9920B046564"}]}]}],"references":[{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33396","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48148","source":"cve@mitre.org"},{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5910","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a \"Temporary file vulnerability,\" aka Bug ID 6653462."},{"lang":"es","value":"Vulnerabilidad no especificada en txzonemgr en Sun OpenSolaris tiene un impacto y vectores de ataque locales desconocidos, relacionado con una \"Vulnerabilidad de fichero temporal\", también llamado Bug ID 6653462."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","matchCriteriaId":"19FE69F8-3726-4B21-9B78-E9920B046564"}]}]}],"references":[{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33395","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48150","source":"cve@mitre.org"},{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5911","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://docs.real.com/docs/security/SecurityUpdate121508HS.pdf\r\n\r\nThe Fix:\r\nVersion 11.1.8 and Version 12.0.1 of the Helix Server and the Helix Mobile Server have been updated to ensure that the above\r\nvulnerabilities have been resolved.\r\n\r\nSOLUTION:\r\nThe vulnerability is resolved on the following platforms by installing Version 11.1.8 or Version 12.0.1 of the Helix Server and the Helix\r\nMobile Server. This only pertains to supported versions of the platforms listed below. The updated version will be available on your\r\nRealNetworks PAM site after 11:59 p.m. PST, on December 15, 2008.","evaluatorImpact":"Per: http://docs.real.com/docs/security/SecurityUpdate121508HS.pdf\r\n\r\nImpacted Products and Versions:\r\nHelix Server Version 11.x\r\nHelix Server Version 12.x\r\nHelix Mobile Server Version 11.x\r\nHelix Mobile Server Version 12.x","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request."},{"lang":"es","value":"Múltiples desbordamientos de búfer en RealNetworks Helix Server y Helix Mobile Server v11.x anteriores a v11.1.8 y v12.x anteriores a v12.0.1 permite a atacantes remotos (1) provocar una denegación de servicio a través de tres comandos manipulados RTSP SETUP, o ejecutar código de su elección a través de (2) una petición de autenticación NTLM con datos malformados codificados en base64, (3) un comando RTSP DESCRIBE, o (4) una petición DataConvertBuffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*","matchCriteriaId":"A30A2490-21FC-4C0D-80A3-B89E6F58E93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0890EDD4-63FF-43EC-9EC4-852B34E00F51"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*","matchCriteriaId":"74F01F2C-036C-4B6E-B66D-F0870801D397"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server_mobile:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4CB773CC-C81C-424A-9493-4CAD2E0E8262"}]}]}],"references":[{"url":"http://docs.real.com/docs/security/SecurityUpdate121508HS.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33360","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021498","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021499","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021500","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021501","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3521","source":"cve@mitre.org"},{"url":"http://docs.real.com/docs/security/SecurityUpdate121508HS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5912","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a \"temporary footprint\" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an \"in-session phishing attack.\" NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Una función desconocida en la implementación JavaScript en Microsoft Internet Explorer crea y expone una \"huella temporal\" cuando hay un inicio de sesión actualmente a un sitio web, lo que facilita a atacantes remotos engañar a un usuario para que haga lo que le dice un mensaje pop-up envenenado, también conocido como un \" ataque de phishing en una sesión activa.\" NOTA: a fecha de 16012009, lo único que ha salido a la luz es un pre-aviso impreciso con información no utilizable. sin embargo, ya que el investigador es conocido, se le ha asignado un identificador CVE con propósitos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"cve@mitre.org"},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"cve@mitre.org"},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33276","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48173","source":"cve@mitre.org"},{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5913","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a \"temporary footprint\" and an \"in-session phishing attack.\""},{"lang":"es","value":"La función Math.random en la implementación de JavaScript en Mozilla Firefox versiones  3.5.x anteriores a 3.5.10 y versiones 3.6.x anteriores a 3.6.4, y SeaMonkey anterior a versión 2.0.5, usa un generador de números aleatorios que es insertado sólo una vez por sesión de navegador, lo que facilita a los atacantes remotos rastrear a un usuario, o engañar a un usuario para que actúe en base a un mensaje emergente falsificado, calculando el valor seed, en relación a una \"temporary footprint\" y un  \"in-session phishing attack.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"BC6B977F-292F-4981-95A0-6065A3C487D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"342226B9-2C0C-416C-81FE-19C49F03AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"2A6A28E0-F67A-4275-B0D9-A02822E9EF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"ECAB4696-76F3-458C-B33B-D7F8690C60A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F3782354-7EB7-49D2-B240-1871F6CB84C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"30D47263-03AD-4060-91E3-90F997B3D174"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"AFD775DF-277E-4D5B-B980-B8E6E782467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C8587BFD-417D-42BE-A5F8-22FDC68FA9E6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"7C673D85-E0A9-4CA7-A5E6-28EA7F0DA6CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"84B2AA0A-0220-49DD-82CD-37FDC563F146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D754AF10-1E43-46C8-A444-E7DB3401509D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34182167-F1DF-455B-BFDB-0A8491590479"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8ECA6CE-20D0-4A4F-B376-888A9328B044"}]}]}],"references":[{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40401","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40481","source":"cve@mitre.org"},{"url":"http://support.avaya.com/css/P8/documents/100091069","source":"cve@mitre.org"},{"url":"http://ubuntu.com/usn/usn-930-1","source":"cve@mitre.org"},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"cve@mitre.org"},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:125","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-33.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0500.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0501.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33276","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-930-2","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1551","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1557","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1592","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1640","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1773","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475585","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11139","source":"cve@mitre.org"},{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100091069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-930-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-33.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-930-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5914","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a \"temporary footprint\" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an \"in-session phishing attack.\" NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Una función desconocida en la implementación JavaScript en Apple Safari crea y expone una \"huella temporal\" cuando hay un inicio de sesión actualmente a un sitio web, lo que facilita a atacantes remotos engañar a un usuario para que haga lo que le dice un mensaje pop-up envenenado, también conocido como un \" ataque de phishing en una sesión activa.\" NOTA: a fecha de 16012009, lo único que ha salido a la luz es un pre-aviso impreciso con información no utilizable. sin embargo, ya que el investigador es conocido, se le ha asignado un identificador CVE con propósitos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"cve@mitre.org"},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"cve@mitre.org"},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33276","source":"cve@mitre.org"},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"cve@mitre.org"},{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5915","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a \"temporary footprint\" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an \"in-session phishing attack.\" NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Una función desconocida en la implementación JavaScript en Google Chrome crea y expone una \"huella temporal\" cuando hay un inicio de sesión actualmente a un sitio web, lo que facilita a atacantes remotos engañar a un usuario para que haga lo que le dice un mensaje pop-up envenenado, también conocido como un \" ataque de phishing en una sesión activa.\" NOTA: a fecha de 16012009, lo único que ha salido a la luz es un pre-aviso impreciso con información no utilizable. sin embargo, ya que el investigador es conocido, se le ha asignado un identificador CVE con propósitos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"}]}]}],"references":[{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33276","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5916","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T02:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query."},{"lang":"es","value":"gitweb/gitweb.perl en gitweb en Git 1.6.x anteriores a v1.6.0.6, 1.5.6.x anteriores a v1.5.6.6, 1.5.5.x anteriores a v1.5.5.6, 1.5.4.x anteriores a v1.5.4.7, y otras versiones posteriores a v1.4.3 permite a los propietarios del repositorio ejecutar comandos de su elección por modificación de la configuración de la variable diff.external y ejecutando una consulta manipulada gitweb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"02EC9660-8197-4992-B8BF-ACA81A1362D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"52E67537-51C1-4D9A-AF11-1E6FE3290AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3735BAE3-C767-44A3-BDD3-07DDEF9AE5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"25112BF9-B5C3-470D-8FD8-045707FA83FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46E0026C-93EF-4B4F-AEF2-E84F5EA1DCAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"562BD162-990B-4BAF-9074-11FCA1DFC4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"51B7B233-CCD6-4A58-B76D-990D1DCF1BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7AB103FA-9580-4A2C-AF16-12909B5E47A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8CF296EC-FECD-4F70-BBA8-D57C891E35A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"24B2BC27-CA73-4C45-9726-5178DB43DB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC291EB-F083-4E66-B61B-50723E0E8A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0756E43B-F13B-4EB4-89B3-9A7A6CA6DDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23E68B79-8E0C-4001-AECD-ED0AF81825B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6FAC3AF5-D66D-4972-B2C7-9D1CD784884A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE75459-E53B-4E3A-B94A-3A7DA916A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0A51E31C-06CD-463F-BF7D-F14979AB492B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D198227B-3B53-4C29-985E-2596C0909A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6347CFA-DC5A-4C0F-A516-02E6BBEDA3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B4474571-24EB-4D53-8A61-D77E560B0ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8B6544F7-D835-45C5-9645-AFEA9F264DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"43E47006-A44B-4BE1-AD6B-CF869C79A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"569F2502-3023-44F6-8767-4DA465B3C754"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4CDF10E4-F882-4BD6-AA56-B56CEC28D1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"909E71D3-A5E4-47AF-B9F4-2A05A4129EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"73FFB1CD-1C79-4DD8-BCAB-1FCA8D99C89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4124F148-9281-4465-9E16-67DE47E1F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"22F07209-3FC5-4AA4-B9BF-18F32D7F402F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DDEF615E-48FB-4F1E-BC8E-B3A70457D474"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C43D08FF-7871-481D-A648-015F4DCF68E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A4869796-F69A-49CC-9203-CE80F38E1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03769CFD-3A5F-4C5E-B548-6B8F7EFFDE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4F2433A7-3333-407D-8147-9AC736049590"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"585B9665-B422-418D-9AEC-65E65D24621B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7DA2677B-1237-4D22-A51E-3A67B6AA9F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6642BE-13B4-40F8-BFD4-AD1E55B1A3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc4:*:*:*:*:*:*","matchCriteriaId":"18962E5D-185E-4AF8-B0B3-11026B61053D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:*","matchCriteriaId":"2EBCE67F-34AC-4635-A2DF-E0C304FAB8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:*","matchCriteriaId":"197F9E88-DE20-44B5-B159-8E7BC3986E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3BF65B33-FD2F-4F2B-9F67-360F8957FABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3C668BD7-C4E3-4A12-9987-E565250E2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3F93314-4F2D-4036-94F7-986B16BEC851"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"92A161E8-6CB8-40FF-9D90-00664185F69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B9533C06-96BF-4D5D-A29C-F2AD2EE5108C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B20EFCED-EC50-4A9B-970B-E29CDBDAABDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CCC5F7F8-EFC2-4FD0-A293-59F76EBFAE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"361F32F0-8009-40D2-BC14-74AE90CDB36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6B6E65D8-0D8E-4D11-82D7-DD3FB3EB1095"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:*","matchCriteriaId":"67535E99-5DD8-4F90-9DB1-5415201E94E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:*","matchCriteriaId":"F3163CEC-C0D5-401E-93C3-6A5316630FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:*","matchCriteriaId":"8DA19E8C-34DE-4721-88E2-B97774E855E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"ED57760D-0C08-43FE-A837-B00D271EDBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:*","matchCriteriaId":"BA11029F-E4F7-4D4A-817C-A7CC5AD4E872"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:*","matchCriteriaId":"8A42B9B9-7B29-429D-9ABC-736CCC038813"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc5:*:*:*:*:*:*","matchCriteriaId":"456AD412-970D-495E-8F7F-0CF670C364B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"63530521-E600-4326-B057-162E6635554B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0715BCFB-5EAA-4812-BB59-7210CB6670FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E9BBAA74-B0DE-4388-8C1B-8C3FF258EDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A8CEFC6C-0066-4331-A7A8-02047A19206A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1337EA7C-3E52-47EC-8A32-C61A3B5046A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"D9D484DA-BCEA-4873-9F8C-883D702644F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3095075A-5A99-4718-9E5E-56D442A14EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc1:*:*:*:*:*:*","matchCriteriaId":"49D8DA6B-C306-455E-BAF1-0C5C2E1F33B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6881163A-4097-4BAE-A84A-82D819BBF304"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc3:*:*:*:*:*:*","matchCriteriaId":"BF31FA87-A8B8-46A1-8945-CB2613FE3B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"32E6B6B9-BD9A-4DF2-8DDC-B2A55431B3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0FA7D904-012D-448D-B1F6-885A472B8BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9C0605BA-481D-4E71-8D57-A99F8CDB7492"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:*","matchCriteriaId":"FF740C26-5EB6-4184-93C3-DAC38F01CE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"668F528C-50BC-4944-9DC3-95D0413D2359"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E3D715F7-34D2-4D1D-B49B-74AF4D7D7C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"31BE5F63-902F-4326-B38B-96D692F86B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AECFAEA8-3B87-4BFE-98A3-58F5129D9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D6228681-1150-4B80-AFB0-451BAEB393A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E807BBE3-A2EC-4EA2-8222-7A02D03848D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C7122491-D55D-451B-A2BC-D87D283A504E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"D6C7B6C0-BE57-44E3-AFEE-C4EF2A721ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8B8F4980-EC18-4DBA-8950-82F1B81FC008"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12C5DE96-2748-4A9F-A321-D6AD3091C3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B3E7D230-166E-434D-B425-01D6EC159A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"3BDC47F7-47D6-4780-B637-BF646D522ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A600049E-2E7D-4A05-926B-C6A4F26496AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"52406E96-C133-4EE9-BF80-D2327DFEFC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B08816A4-C2D8-40BE-BD46-D9A3A6BBED0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BAEBEDEF-54BD-4974-AE96-ABCF85508379"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"11EE6977-784D-49C9-A1EF-740F5225CF80"}]}]}],"references":[{"url":"http://marc.info/?l=git&m=122975564100860&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=122975564100863&w=2:","source":"cve@mitre.org"},{"url":"http://osvdb.org/50918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33282","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34194","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4922","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/15/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/20/2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47528","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01169.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01170.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=git&m=122975564100860&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=122975564100863&w=2:","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/15/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-723-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01169.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5917","sourceIdentifier":"secalert@redhat.com","published":"2009-01-21T02:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el filtro XSS(framework/Text_Filter/Filter/xss.php) en Horde Application Framework v3.2.2 y v3.3, cunado Internet Explorer está siendo utilizado, permite a atacantes remotos inyectar secuencias de comando web o HTML a través de vectores desconocidos relacionados con atributos \"style\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89477FCC-C925-418A-A3FF-F5B02736600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*","matchCriteriaId":"BDE2B06C-EDBD-4FA1-90AA-148E39EF5AE4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://cvs.horde.org/diff.php/framework/Text_Filter/Filter/xss.php?r1=1.17&r2=1.18","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.horde.org/archives/announce/2008/000462.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2008/000464.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34418","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34609","source":"secalert@redhat.com"},{"url":"http://cvs.horde.org/diff.php/framework/Text_Filter/Filter/xss.php?r1=1.17&r2=1.18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.horde.org/archives/announce/2008/000462.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2008/000464.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5918","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T02:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función getParameterisedSelfUrl en index.php en WebSVN v2.0 y anteriores permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"C5C51792-F7E8-4847-ADDA-50065DD8ADCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.00:*:*:*:*:*:*:*","matchCriteriaId":"5184AC02-1F9D-4986-A08A-837A9CCA79D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.01:*:*:*:*:*:*:*","matchCriteriaId":"AE26E8A6-A516-4D1D-894D-E23AABA51A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.02:*:*:*:*:*:*:*","matchCriteriaId":"BFDC8A10-08EB-4444-8771-4493E491DD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.03:*:*:*:*:*:*:*","matchCriteriaId":"93B1AFDE-3DF3-4F9D-B6C9-54AD7F1F056C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.04:*:*:*:*:*:*:*","matchCriteriaId":"9F420EE5-22E2-42B7-A906-EA9FEC4053DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.10:*:*:*:*:*:*:*","matchCriteriaId":"31688948-CC90-46AA-AB3A-B66B88E465FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.20:*:*:*:*:*:*:*","matchCriteriaId":"EDBFBAEE-7B71-4D40-ACA1-BCFC889C0D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.31a:*:*:*:*:*:*:*","matchCriteriaId":"E889518B-485B-4CD3-996B-7198DFBAD805"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.32:*:*:*:*:*:*:*","matchCriteriaId":"648D1220-2387-497E-BBAE-82D43903754A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.33:*:*:*:*:*:*:*","matchCriteriaId":"0AAF04A7-4D3C-4A56-99BA-3075D59DA136"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.34:*:*:*:*:*:*:*","matchCriteriaId":"3FF1A838-B8B8-4395-9317-8A6A2552C2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.37:*:*:*:*:*:*:*","matchCriteriaId":"E28A169D-4C20-42A5-9947-D996710D5705"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.38:*:*:*:*:*:*:*","matchCriteriaId":"A8BE03BE-1122-4A78-9E7C-9ADA01DCD8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.39:*:*:*:*:*:*:*","matchCriteriaId":"4AEFAEA8-7A6E-430A-87DD-C6C9C55D5ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.40:*:*:*:*:*:*:*","matchCriteriaId":"07CF6D7C-8F68-47F3-BD5B-0720B33EB89D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.51:*:*:*:*:*:*:*","matchCriteriaId":"0BC5AAC1-6110-4282-824C-6A660BEC5517"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.60:*:*:*:*:*:*:*","matchCriteriaId":"8C26622F-C77F-42AB-AA6A-F13B3A12DB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.61:*:*:*:*:*:*:*","matchCriteriaId":"4D0152F8-71BA-4C7D-A8A1-72340B6924C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.62:*:*:*:*:*:*:*","matchCriteriaId":"58024D23-C2D7-42E9-B0A2-7F774939241A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34191","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4928","source":"cve@mitre.org"},{"url":"http://websvn.tigris.org/issues/show_bug.cgi?id=179","source":"cve@mitre.org"},{"url":"http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00132-10202008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31891","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46048","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.tigris.org/issues/show_bug.cgi?id=179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00132-10202008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5919","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T02:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwrite arbitrary files via directory traversal sequences in the rev parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en rss.php en WebSVN v2.0 y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos sobrescribir ficheros de su elección a través de secuencias de salto de directorio en el parámetro \"rev\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"C5C51792-F7E8-4847-ADDA-50065DD8ADCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.00:*:*:*:*:*:*:*","matchCriteriaId":"5184AC02-1F9D-4986-A08A-837A9CCA79D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.01:*:*:*:*:*:*:*","matchCriteriaId":"AE26E8A6-A516-4D1D-894D-E23AABA51A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.02:*:*:*:*:*:*:*","matchCriteriaId":"BFDC8A10-08EB-4444-8771-4493E491DD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.03:*:*:*:*:*:*:*","matchCriteriaId":"93B1AFDE-3DF3-4F9D-B6C9-54AD7F1F056C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.04:*:*:*:*:*:*:*","matchCriteriaId":"9F420EE5-22E2-42B7-A906-EA9FEC4053DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.10:*:*:*:*:*:*:*","matchCriteriaId":"31688948-CC90-46AA-AB3A-B66B88E465FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.20:*:*:*:*:*:*:*","matchCriteriaId":"EDBFBAEE-7B71-4D40-ACA1-BCFC889C0D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.31a:*:*:*:*:*:*:*","matchCriteriaId":"E889518B-485B-4CD3-996B-7198DFBAD805"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.32:*:*:*:*:*:*:*","matchCriteriaId":"648D1220-2387-497E-BBAE-82D43903754A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.33:*:*:*:*:*:*:*","matchCriteriaId":"0AAF04A7-4D3C-4A56-99BA-3075D59DA136"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.34:*:*:*:*:*:*:*","matchCriteriaId":"3FF1A838-B8B8-4395-9317-8A6A2552C2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.37:*:*:*:*:*:*:*","matchCriteriaId":"E28A169D-4C20-42A5-9947-D996710D5705"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.38:*:*:*:*:*:*:*","matchCriteriaId":"A8BE03BE-1122-4A78-9E7C-9ADA01DCD8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.39:*:*:*:*:*:*:*","matchCriteriaId":"4AEFAEA8-7A6E-430A-87DD-C6C9C55D5ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.40:*:*:*:*:*:*:*","matchCriteriaId":"07CF6D7C-8F68-47F3-BD5B-0720B33EB89D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.51:*:*:*:*:*:*:*","matchCriteriaId":"0BC5AAC1-6110-4282-824C-6A660BEC5517"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.60:*:*:*:*:*:*:*","matchCriteriaId":"8C26622F-C77F-42AB-AA6A-F13B3A12DB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.61:*:*:*:*:*:*:*","matchCriteriaId":"4D0152F8-71BA-4C7D-A8A1-72340B6924C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.62:*:*:*:*:*:*:*","matchCriteriaId":"58024D23-C2D7-42E9-B0A2-7F774939241A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34191","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4928","source":"cve@mitre.org"},{"url":"http://websvn.tigris.org/issues/show_bug.cgi?id=179","source":"cve@mitre.org"},{"url":"http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00132-10202008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31891","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46050","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.tigris.org/issues/show_bug.cgi?id=179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00132-10202008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5920","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T02:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch information - http://websvn.tigris.org/","cveTags":[],"descriptions":[{"lang":"en","value":"The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the preg_replace function with the eval switch."},{"lang":"es","value":"La función create_anchors en utils.inc en WebSVN v1.x permite a atacantes remotos ejecutar código PHP de su elección a través de nombres de usuario manipulados que es procesado por la función preg_replace con el switch \"eval\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.00:*:*:*:*:*:*:*","matchCriteriaId":"5184AC02-1F9D-4986-A08A-837A9CCA79D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.01:*:*:*:*:*:*:*","matchCriteriaId":"AE26E8A6-A516-4D1D-894D-E23AABA51A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.02:*:*:*:*:*:*:*","matchCriteriaId":"BFDC8A10-08EB-4444-8771-4493E491DD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.03:*:*:*:*:*:*:*","matchCriteriaId":"93B1AFDE-3DF3-4F9D-B6C9-54AD7F1F056C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.04:*:*:*:*:*:*:*","matchCriteriaId":"9F420EE5-22E2-42B7-A906-EA9FEC4053DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.10:*:*:*:*:*:*:*","matchCriteriaId":"31688948-CC90-46AA-AB3A-B66B88E465FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.20:*:*:*:*:*:*:*","matchCriteriaId":"EDBFBAEE-7B71-4D40-ACA1-BCFC889C0D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.31a:*:*:*:*:*:*:*","matchCriteriaId":"E889518B-485B-4CD3-996B-7198DFBAD805"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.32:*:*:*:*:*:*:*","matchCriteriaId":"648D1220-2387-497E-BBAE-82D43903754A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.33:*:*:*:*:*:*:*","matchCriteriaId":"0AAF04A7-4D3C-4A56-99BA-3075D59DA136"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.34:*:*:*:*:*:*:*","matchCriteriaId":"3FF1A838-B8B8-4395-9317-8A6A2552C2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.37:*:*:*:*:*:*:*","matchCriteriaId":"E28A169D-4C20-42A5-9947-D996710D5705"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.38:*:*:*:*:*:*:*","matchCriteriaId":"A8BE03BE-1122-4A78-9E7C-9ADA01DCD8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.39:*:*:*:*:*:*:*","matchCriteriaId":"4AEFAEA8-7A6E-430A-87DD-C6C9C55D5ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.40:*:*:*:*:*:*:*","matchCriteriaId":"07CF6D7C-8F68-47F3-BD5B-0720B33EB89D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.51:*:*:*:*:*:*:*","matchCriteriaId":"0BC5AAC1-6110-4282-824C-6A660BEC5517"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.60:*:*:*:*:*:*:*","matchCriteriaId":"8C26622F-C77F-42AB-AA6A-F13B3A12DB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.61:*:*:*:*:*:*:*","matchCriteriaId":"4D0152F8-71BA-4C7D-A8A1-72340B6924C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:1.62:*:*:*:*:*:*:*","matchCriteriaId":"58024D23-C2D7-42E9-B0A2-7F774939241A"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4928","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00132-10202008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31891","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48168","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6822","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00132-10202008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5921","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en albums.php en Umer Inc Songs Portal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:umerinc:songs_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"81DA7565-9C74-45DF-9C4A-FE2244B8F9C3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4924","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47300","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7439","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5922","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) main and (2) right parameters."},{"lang":"es","value":"Múltiples inclusiones de archivos remotos en PHP en themes/default/index.php en Cant Find A Gaming CMS (CFAGCMS) 1 permiten a atacantes remotos ejecutar código PHP de su elección mediante un URL en los parámetros (1) main y (2) right"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfagcms:cfagcms:1.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"D6F22A84-D99B-49B8-B5F8-90B6F31D5080"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4926","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_58.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499213/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32817","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7459","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_58.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499213/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5923","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp en ASP-DEv XM Events Diary permite a aatacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-dev:xm_events_diary:*:*:*:*:*:*:*:*","matchCriteriaId":"ABD8DC19-FDF2-4654-9967-1EFDA9538D83"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/aspdevxmdiary-sqldisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33152","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32809","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0812-exploits/aspdevxmdiary-sqldisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5924","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en diary_viewC.asp in ASP-DEv XM Events Diary permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-dev:xm_events_diary:*:*:*:*:*:*:*:*","matchCriteriaId":"ABD8DC19-FDF2-4654-9967-1EFDA9538D83"}]}]}],"references":[{"url":"http://secunia.com/advisories/33152","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5925","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb."},{"lang":"es","value":"ASP-DEv XM Events Diary almacena información sensible en la raíz web con un control de acceso insuficiente, loq ue permite a atacantes remotos  descargar el archivo base de datos mediante una petición directa a diary.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-dev:xm_events_diary:*:*:*:*:*:*:*:*","matchCriteriaId":"ABD8DC19-FDF2-4654-9967-1EFDA9538D83"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/aspdevxmdiary-sqldisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0812-exploits/aspdevxmdiary-sqldisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-5926","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the (1) login parameter (aka user field) or the (2) password parameter (aka pass field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en login.asp en ASP-DEv Internal E-Mail System permite a atacantes remotos ejecutar comandos SQL de su elección a través del (1) parámetro \"login\" (también conocido como campo \"user\")(2) parámetro \"password\" (también conocido como campo \"pass\"). NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-dev:internal_e-mail_system:*:*:*:*:*:*:*:*","matchCriteriaId":"0221AE37-C87E-43C4-BF92-3F12F5F8EA99"}]}]}],"references":[{"url":"http://secunia.com/advisories/33103","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4925","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5927","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL commands via the (1) checkuser parameter (aka username field) or (2) checkpass parameter (aka password field) to admin/index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/usercheck.php en FlexPHPNews 0.0.6 permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) checkuser (también conocidos como campo username) o (2) checkpass (también conocido como campo password) a admin/index.php. NOTA: alguno de estos detalles se ha obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpnews:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E08A4EAB-D047-47E0-9CFA-E3C197FCF8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpnews:0.0.6:*:pro:*:*:*:*:*","matchCriteriaId":"33F3DB5F-4A4A-40B1-8863-DC937D794B0C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4927","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32810","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7443","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5928","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en redir.php en Free Links Directory Script (FLDS) v1.2a permite a atacantes remotos ejecutar comandos SQl de su elección a través de el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flds-script:flds:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"BC685E30-B977-4B6B-9D63-7084578492CD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32813","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48185","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7453","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5929","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database/shopping650.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"VP-ASP Shopping Cart 6.50 almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar la base de datos que contiene la contraseña mediante una petición directa de database/shopping650.mdb. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vpasp:vp-asp_shopping_cart:6.50:*:*:*:*:*:*:*","matchCriteriaId":"1AD51381-679D-4BA3-B2BF-0D3873CC37F2"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4930","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47298","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7438","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5930","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL commands via the BlogID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/blog_comments.asp en The Net Guys ASPired2Blog permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro BlogID ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_net_guys:aspired2blog:*:*:*:*:*:*:*:*","matchCriteriaId":"267E0FF1-3B27-430C-969F-14B13B2D19D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4931","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47295","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5931","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/blog.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"The Net Guys ASPired2Blog almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el archivo de la base de datos conteniendo nombre de usuarios y contraseñas mediante una petición directa de admin/blog.mdb.  NOTA: alguno de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_net_guys:aspired2blog:*:*:*:*:*:*:*:*","matchCriteriaId":"267E0FF1-3B27-430C-969F-14B13B2D19D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4931","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47294","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5932","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for _private/CAForum.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"CodeAvalanche FreeForum almacena información sensible en la raíz web con control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de base de datos que contiene las contraseñas a través de una petición directa a _private/CAForum.mdb. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeavalanche:freeforum:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"81252772-0A40-43C8-8FBA-1B76C1D30C3F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4932","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7450","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5933","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the strcerca parameter (aka the input field for the cerca action) or (2) the id_oggetto parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en CMS ISWEB 3.0  permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante (1) el parámetro strcerca (también conocido como el campo de entrada para la acción cerca) o (2) el parámetro id_oggetto. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsisweb:cms_isweb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"316EE31B-CE8A-4434-ADCF-FEDB4875A2A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4933","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32823","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5934","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the id_sezione parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en CMS ISWEB 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id_sezione."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsisweb:cms_isweb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"316EE31B-CE8A-4434-ADCF-FEDB4875A2A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4933","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32823","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5935","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for database/facto.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Facto almacena información sensible en la raíz web con control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero de base de datos que contiene las contraseñas a través de una petición directa a database/facto.mdb. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:factosystem:factosystem_weblog:*:*:*:*:*:*:*:*","matchCriteriaId":"FA79AAB5-D6A7-4F89-B7AD-590CA9E0E5AB"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4934","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499125/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47278","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499125/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5936","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T02:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter."},{"lang":"es","value":"front-end/edit.php en mini-pub 0.3 y anteriores permite a atacantes remotos leer archivos y obtener código fuente PHP mediante un nombre de archivo en el parámetro sFileName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"3E43AD4B-79E8-4078-8809-52A0F1D83798"},{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.1:*:*:*:*:*:*:*","matchCriteriaId":"31775CA3-B7DF-4B55-A444-BD1AD209F6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BB9C5B2-0FFE-4FF7-BD67-699E8CC1B0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mini-pub:mini-pub:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A9062FC0-2A48-46AC-9D68-5AC1D0A4F13F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45831","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6734","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5937","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T02:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp) file with large height and width values."},{"lang":"es","value":"AyeView 2.20 permite a atacantes ayudados por el usuario provocar una denegación de servicio (agotamiento de memoria o caída de la aplicación) mediante un archivo bitmap (también conocido como .bmp) con valores de altura y anchura grandes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zkesoft:ayeview:2.20:*:*:*:*:*:*:*","matchCriteriaId":"798E412D-457B-472C-917B-61502B507532"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4939","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48183","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6672","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5938","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the reflect_base parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en assets/snippets/reflect/snippet.reflect.php en MODx CMS v0.9.6.2 y versiones anteriores, cuando magic_quotes_gpc no está activo, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"reflect_base\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.6.2","matchCriteriaId":"05CDF2C9-7796-4646-85D3-7D92F0C8A369"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAEAB43-9356-4B48-B252-8F26874302F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E02443C7-BCFC-44B8-B7F0-490B01DD4220"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7AC57D5A-222E-49AE-B75B-A02AC6CA0A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5A0BF512-B7EA-419D-966E-94F847DF52CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"88C92A22-4E59-4D31-B476-AC80DAFC3BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4940","source":"cve@mitre.org"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32436","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46797","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5939","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php.  NOTE: some sources list the id parameter as being affected, but this is probably incorrect based on the original disclosure."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en MODx CMS 0.9.6.2 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un evento JavaScript en el parámetro id, posiblemente relacionado con snippet.ditto.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.6.2","matchCriteriaId":"05CDF2C9-7796-4646-85D3-7D92F0C8A369"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAEAB43-9356-4B48-B252-8F26874302F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E02443C7-BCFC-44B8-B7F0-490B01DD4220"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7AC57D5A-222E-49AE-B75B-A02AC6CA0A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5A0BF512-B7EA-419D-966E-94F847DF52CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"88C92A22-4E59-4D31-B476-AC80DAFC3BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4940","source":"cve@mitre.org"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32436","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46796","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7204","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5940","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the searchid parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MODx v0.9.6.2 y versiones anteriores, cuando magic_quotes_gpc no está activo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"searchid\".\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.6.2","matchCriteriaId":"05CDF2C9-7796-4646-85D3-7D92F0C8A369"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAEAB43-9356-4B48-B252-8F26874302F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E02443C7-BCFC-44B8-B7F0-490B01DD4220"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7AC57D5A-222E-49AE-B75B-A02AC6CA0A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5A0BF512-B7EA-419D-966E-94F847DF52CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"88C92A22-4E59-4D31-B476-AC80DAFC3BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN72630020/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33182","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47840","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN72630020/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5941","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en MODx 0.9.6.1p2 y anteriores permite a atacantes remotos realizar acciones no autorizadas como otros usuarios mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.6.1","matchCriteriaId":"A3D814A6-66CA-4276-BB95-A26CEEE111C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAEAB43-9356-4B48-B252-8F26874302F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E02443C7-BCFC-44B8-B7F0-490B01DD4220"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7AC57D5A-222E-49AE-B75B-A02AC6CA0A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5A0BF512-B7EA-419D-966E-94F847DF52CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"88C92A22-4E59-4D31-B476-AC80DAFC3BC5"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN66828183/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000004.html","source":"cve@mitre.org"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN66828183/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5942","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) \"username input.\" NOTE: vector 2 may be related to CVE-2008-5939."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MODx anterior a v0.9.6.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores relacionados con (1) la función preserveUrls y (2) \"entrada de nombre de usuario.\" NOTA: el vector 2 puede estar relacionado con CVE-2008-5939."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.6.2","matchCriteriaId":"05CDF2C9-7796-4646-85D3-7D92F0C8A369"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAEAB43-9356-4B48-B252-8F26874302F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E02443C7-BCFC-44B8-B7F0-490B01DD4220"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7AC57D5A-222E-49AE-B75B-A02AC6CA0A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5A0BF512-B7EA-419D-966E-94F847DF52CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"88C92A22-4E59-4D31-B476-AC80DAFC3BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN10170564/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000003.html","source":"cve@mitre.org"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48184","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN10170564/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5943","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to (1) admin_modules.php and (2) modules.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en NavBoard 16 (v2.6.0) permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro \"module\" de (1) admin_modules.php y (2) modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:navboard:navboard:16:*:*:*:*:*:*:*","matchCriteriaId":"F88A4670-CAED-4D0A-AFCC-3D734B685520"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44450","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5944","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitrary web script or HTML via the module parameter."},{"lang":"es","value":"Vulnerablidad de secuencias de comandos en sitios cruzados (XSS) en modules.php en NavBoard 16 (v2.6.0) permite a atacantes remotos inyectar web script o HTML a través del parámetro \"module\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:navboard:navboard:16:*:*:*:*:*:*:*","matchCriteriaId":"F88A4670-CAED-4D0A-AFCC-3D734B685520"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44451","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5945","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf cookie to 1.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Nukeviet 2.0 Beta permite a atacantes remotos evitar la autentificación prevista y obtener acceso administrativo estableciendo la cookie admf a 1. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nukevietcms:nukeviet:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"AAA4850C-8F14-4681-8A62-DADC21CBD5DC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30681","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5946","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en readmore.php en PHP-Fusion 4.01 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro news_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:4.01:*:*:*:*:*:*:*","matchCriteriaId":"7638D9CC-209F-4510-9874-6673902B657A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30680","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30680/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44456","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30680/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5947","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T11:30:05.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de fichero remoto en PHP en include/class_yapbbcooker.php en YapBB 1.2.Beta 2 permite a atacantes remotos ejecutar código PHP de su elección mediante un URL en el parámetro cfgIncludeDirectory"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yapbb:yapbb:1.2:beta2:*:*:*:*:*:*","matchCriteriaId":"4FE0E924-AB6D-4CAC-BE45-3D72843288A3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0808-exploits/yapbb-rfi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30686","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44473","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0808-exploits/yapbb-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5948","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlanguage parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en BNCwi v1.04, permite a atacantes remotos añadir y ejecutar ficheros locales de su elección utilizando los caracteres .. (punto punto) en el parámetro \"newlanguage\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bncwi:bncwi:*:*:*:*:*:*:*:*","versionEndIncluding":"1.04","matchCriteriaId":"FFDAB8C5-2481-493B-A735-F98BF299782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bncwi:bncwi:1.03:*:*:*:*:*:*:*","matchCriteriaId":"1AD9A875-08DD-4DC0-8426-EBA98E50A8AE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32644","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7345","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5949","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:04.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cct_base parameter to (1) index.php; (2) handle/proxy.php; (3) header.php, (4) include.php, and (5) workspace.php in includes/; and (6) plugins/RSS/files/rss.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en ccTiddly v1.7.4 y v1.7.6 permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro cct_base a (1) index.php; (2) handle/proxy.php; (3) header.php, (4) include.php, y (5) workspace.php en includes/; y (6) plugins/RSS/files/rss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiddlywiki:cctiddly:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"8B2BB27A-E8D9-4F6C-83B0-1C16730AE377"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiddlywiki:cctiddly:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B7C07F0A-2A00-45BD-84B5-E79C576E024A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32995","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32631","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47072","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5950","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:04.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en media/media_level.asp in ASP Template Creature permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"mcatid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:template_creature:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"D1882A03-64DE-41A8-9D08-984E827CF962"}]}]}],"references":[{"url":"http://secunia.com/advisories/32992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32641","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47084","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7339","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5951","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:04.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb."},{"lang":"es","value":"ASP Template Creature almacena información sensible bajo el raíz web con insuficiente control de acceso, lo que permite a atacantes remotos descargar el archivo de base de datos a través de una petición directa de workDB/templatemonster.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapps:template_creature:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"D1882A03-64DE-41A8-9D08-984E827CF962"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47085","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5952","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:04.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en KTP Computer Customer Database (KTPCCD) CMS, cuando magic_quotes_gpc está deshabilitado, permite a los usuarios remotos autentificados ejecutar comandos SQL de su elección a través del parámetro \"tid\" en una acción \"vtech\" a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktp_computer_customer_database:ktp_computer_customer_database:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"03ABF571-0C70-4A32-AD57-2DAF33513F51"}]}]}],"references":[{"url":"http://secunia.com/advisories/32888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32539","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3292","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46897","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7305","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5953","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:04.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en KTP Computer Customer Database (KTPCCD) CMS, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro \"p\" a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktp_computer_customer_database:ktp_computer_customer_database:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"03ABF571-0C70-4A32-AD57-2DAF33513F51"}]}]}],"references":[{"url":"http://secunia.com/advisories/32888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33518","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3292","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7304","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5954","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en KTP Computer Customer Database (KTPCCD) CMS, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"lname\" en una acción \"login\" a un componente no especificado. NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktp_computer_customer_database:ktp_computer_customer_database:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"03ABF571-0C70-4A32-AD57-2DAF33513F51"}]}]}],"references":[{"url":"http://secunia.com/advisories/32888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33520","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46898","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5955","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show.php en Wbstreet (alias PHPSTREET Webboard) v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstreet:webboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF4E4A7B-5D61-4C08-8B55-AC7B7CBF49DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32994","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32635","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47073","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7337","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5956","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc."},{"lang":"es","value":"Wbstreet (alias PHPSTREET Webboard) v1.0  almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos obtener credenciales de la base de datos a través de una petición directa a connect.inc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstreet:webboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF4E4A7B-5D61-4C08-8B55-AC7B7CBF49DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32994","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47074","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7337","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5957","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the directory parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Mydyngallery (com_mydyngallery) 1.4.2 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"directory\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mydyngallery:mydyngallery:*:*:*:*:*:*:*:*","matchCriteriaId":"8385A364-FF1A-45A0-8AF5-7CB462A62A6C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498916/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32639","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47087","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7343","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498916/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5958","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Active Test v2.1, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro QuizID a (1) questions.asp, (2) importquestions.asp, y (3) quiztakers.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_test:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D5CF3ACD-A93B-4F5C-AD9F-628B49C2DD59"}]}]}],"references":[{"url":"http://osvdb.org/50405","source":"cve@mitre.org"},{"url":"http://osvdb.org/50406","source":"cve@mitre.org"},{"url":"http://osvdb.org/50407","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32547","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3299","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46919","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7295","source":"cve@mitre.org"},{"url":"http://osvdb.org/50405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5959","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en start.asp en Active Test v2.1, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) usermail (también conocidos como campo usermail) o (2) password (también conocido como campo password). NOTA: alguno de estos detalles se ha obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:active_web_softwares:active_test:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C410DA22-01B7-4F7F-96FF-76955D820283"}]}]}],"references":[{"url":"http://osvdb.org/50408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46921","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7276","source":"cve@mitre.org"},{"url":"http://osvdb.org/50408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5960","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Tribiq CMS Community v5.0.10B y v5.0.11E, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cID en una acción \"document\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos únicamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.10b:-:community:*:*:*:*:*","matchCriteriaId":"A383B1FE-A32B-4D68-8A03-399CA10E06DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.11e:-:community:*:*:*:*:*","matchCriteriaId":"ED623195-6818-4C66-8FAE-BC35AEB7CAA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/33021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32649","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5961","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Tribiq CMS Community v5.0.10B y v5.0.11E, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro cID en una acción document. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos únicamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.10b:-:community:*:*:*:*:*","matchCriteriaId":"A383B1FE-A32B-4D68-8A03-399CA10E06DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.11e:-:community:*:*:*:*:*","matchCriteriaId":"ED623195-6818-4C66-8FAE-BC35AEB7CAA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/33021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32650","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5962","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the objectname parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en library/setup/rpc.php en Gravity Getting Things Done (GTD) v0.4.5 y anteriores, permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro ObjectName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.5","matchCriteriaId":"487AC2C3-9D58-4C72-AD89-C6D7F3E42010"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:0.2:beta:*:*:*:*:*:*","matchCriteriaId":"2FFFCBC9-C450-490F-B001-B8F5A3B1703A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:0.3:*:*:*:*:*:*:*","matchCriteriaId":"122B8EB0-030E-4F83-B5E0-775A6C1B47CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5842A804-FA0E-4495-AC8C-0B587DF0F7DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32982","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32646","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47090","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5963","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter."},{"lang":"es","value":"Vulnerabilidad de inyección \"Eval\" en library/setup/rpc.php en Gravity Getting Things Done (GTD) v0.4.5 y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro objectname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.5","matchCriteriaId":"487AC2C3-9D58-4C72-AD89-C6D7F3E42010"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:0.2:beta:*:*:*:*:*:*","matchCriteriaId":"2FFFCBC9-C450-490F-B001-B8F5A3B1703A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:0.3:*:*:*:*:*:*:*","matchCriteriaId":"122B8EB0-030E-4F83-B5E0-775A6C1B47CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity-gtd:gravity-gtd:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5842A804-FA0E-4495-AC8C-0B587DF0F7DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32982","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32646","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47091","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5964","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en Social ImpressCMS antes de v1.1.1 RC1, permite a atacantes remotos secuestrar sesiones web estableciendo el parámetro \"PHSESSID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"2E2A50E5-4F03-43FE-900C-04231947235C"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B9C1E64F-28A0-4663-AED3-A7D9334EEB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A686D2E0-1830-4A50-8EC4-3FF2CE48ABF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C99E5263-B930-49F4-A5EB-922DCA1F4D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0A2FB03-CCE4-47C7-A9A2-E17EF6CFDD91"}]}]}],"references":[{"url":"http://osvdb.org/50413","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=893767","source":"cve@mitre.org"},{"url":"http://wiki.impresscms.org/index.php?title=Change_Log#2008-12-2_:_1.1.1_RC","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498734/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498885/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46989","source":"cve@mitre.org"},{"url":"http://osvdb.org/50413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=893767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.impresscms.org/index.php?title=Change_Log#2008-12-2_:_1.1.1_RC","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498734/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498885/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5965","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en index.php en versiones de LokiCMS 0.3.4 y anteriores, con magic_quotes_gpc desactivado, permite a atacantes remotos comprobar la existencia de archivos arbitrarios a través de un .. (punto punto) en el parámetro page (página)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.4","matchCriteriaId":"372FDEE4-6899-45E9-A973-013A0AE54118"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"524DB171-D7DE-4B7D-BCCB-C0C9AE508CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.1.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"CE0504E9-7090-4D4A-A9B8-A9B79A489840"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"483D2A1D-6C0D-41B3-A0AB-BC831103D3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F3FFAD14-7710-4D6C-BC50-E12C2DA8AE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.1b1:*:*:*:*:*:*:*","matchCriteriaId":"995173AA-DAA3-4D0C-8727-E6079AEC6146"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.1b2:*:*:*:*:*:*:*","matchCriteriaId":"1EC01CBD-2414-4AC6-81C5-C91124EAA176"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.2b1:*:*:*:*:*:*:*","matchCriteriaId":"99744F88-CF80-4635-A23D-B9EFED94F126"},{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"CAC7E2E9-B14C-4A9F-8AD8-93412792B69E"}]}]}],"references":[{"url":"http://secunia.com/advisories/30472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31730","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45822","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5966","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file parameter and file contents in the data parameter."},{"lang":"es","value":"globsy_edit.php en versiones de Globsy 1.0 y anteriores permite a atacantes remotos crear o sobreescribir archivos arbitrarios poniendo un nombre de archivo en el parámetro file (archivo) y sus contenidos en el parámetro data (datos)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globsy:globsy:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"41317BFF-7172-4B3F-B187-F703D73ABF7E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31727","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48324","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6735","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5967","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web root."},{"lang":"es","value":"El acceso a admin/index.php en PHP icalendar 2.3.4, 2.24 y anteriores no requiere autenticación de administración apara las acciones addupdate, lo que permite a atacantes remotos subir un calendario (un fichero .ics) con contenidos arbitrarios al directorio calendars/ fuera de la raíz del árbol de directorios de la interfaz web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.4","matchCriteriaId":"C84A452E-4EE3-4ACB-A13C-AE058426633F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D76E93A8-0EF2-4A84-A3FE-17A57BDF1EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.8:*:*:*:*:*:*:*","matchCriteriaId":"306B2B11-1E73-4E64-B716-71D1CE64C6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.9:*:*:*:*:*:*:*","matchCriteriaId":"959D9A75-85AE-4873-AD8C-F3377F8280FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"CD1D51DD-FEFD-4939-A681-5BF471109CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17E5A766-5E62-4001-BAD3-A77547855F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F22EE8BE-F51A-4139-B45B-74C100FC3370"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"FEF861BA-987A-452F-B6E1-3B6A78C80565"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"207B8342-E3D0-419B-88B3-72F6394DA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"46645062-B97C-4B34-B0E3-6C2182C12573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.1:*:*:*:*:*:*:*","matchCriteriaId":"80CF2891-5AF4-47FC-8AAE-4A90B45236DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C24EC36-26ED-4217-BF6E-E00CF0E2A05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.21:*:*:*:*:*:*:*","matchCriteriaId":"E292DC2D-1936-43AB-B34B-A6362BC755B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.22:*:*:*:*:*:*:*","matchCriteriaId":"A7E54DE8-938E-44B0-B6A4-99B54B62EAB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.23:*:*:*:*:*:*:*","matchCriteriaId":"974A0766-EFA9-4A0C-B668-0C1C92A851DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.23:rc1:*:*:*:*:*:*","matchCriteriaId":"6023B70C-BC45-4338-AA40-9C2782EC3C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.24:*:*:*:*:*:*:*","matchCriteriaId":"B07C3CE2-9328-43C0-BB81-463767400DA5"}]}]}],"references":[{"url":"http://secunia.com/advisories/31944","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48323","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6519","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5968","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1292."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en print.php en versiones de PHP icalendar 2.24 y anteriores permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios a través de un .. (punto punto) en el parámetro cookie_language en una cookie phpicalendar_*. Se trata de un vector diferente al de CVE-2006-1292."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:*:*:*:*:*:*:*:*","versionEndIncluding":"2.24","matchCriteriaId":"91B3E466-B39F-40FC-8D4C-19A3E6C8A5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D76E93A8-0EF2-4A84-A3FE-17A57BDF1EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.8:*:*:*:*:*:*:*","matchCriteriaId":"306B2B11-1E73-4E64-B716-71D1CE64C6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.9:*:*:*:*:*:*:*","matchCriteriaId":"959D9A75-85AE-4873-AD8C-F3377F8280FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"CD1D51DD-FEFD-4939-A681-5BF471109CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17E5A766-5E62-4001-BAD3-A77547855F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F22EE8BE-F51A-4139-B45B-74C100FC3370"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"FEF861BA-987A-452F-B6E1-3B6A78C80565"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"207B8342-E3D0-419B-88B3-72F6394DA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"46645062-B97C-4B34-B0E3-6C2182C12573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.1:*:*:*:*:*:*:*","matchCriteriaId":"80CF2891-5AF4-47FC-8AAE-4A90B45236DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C24EC36-26ED-4217-BF6E-E00CF0E2A05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.21:*:*:*:*:*:*:*","matchCriteriaId":"E292DC2D-1936-43AB-B34B-A6362BC755B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.22:*:*:*:*:*:*:*","matchCriteriaId":"A7E54DE8-938E-44B0-B6A4-99B54B62EAB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.23:*:*:*:*:*:*:*","matchCriteriaId":"974A0766-EFA9-4A0C-B668-0C1C92A851DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpicalendar:phpicalendar:2.23:rc1:*:*:*:*:*:*","matchCriteriaId":"6023B70C-BC45-4338-AA40-9C2782EC3C0E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48322","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6519","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5969","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en popupproduct.php en Sunbyte e-Flower permite a atacantes remotos ejecutar comandos SQL a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sunbyte:e-flower:_nil:*:*:*:*:*:*:*","matchCriteriaId":"9FBFEDD3-1A29-4ED6-9FDC-D04CC0B711C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32589","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5970","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en profile_social.php de i-Net Solution Orkut Clone permite a usuarios remotos autenticados ejecutar comandos SQL a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-netsolution:orkut_clone:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"938094A3-0FDA-45D7-BC99-DDE4A67723A5"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32600","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47013","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5971","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en profile_social.php de i-Net Solution Orkut Clone permite a usuarios remotos autenticados inyectar HTML o scripts web arbitrarios a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-netsolution:orkut_clone:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"938094A3-0FDA-45D7-BC99-DDE4A67723A5"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32600","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47014","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5972","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en default.asp de Active Business Directory 2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_business_directory:2:*:*:*:*:*:*:*","matchCriteriaId":"88D62237-69E1-49F7-89EA-4B80D07EB0DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32551","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3294","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5973","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en login.aspx de Active Web Mail 4.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro password (contraseña)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_web_mail:4.0:*:*:*:*:*:*:*","matchCriteriaId":"07E425D9-4294-4A58-9CF9-49BFF9DA4D09"}]}]}],"references":[{"url":"http://secunia.com/advisories/32921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46915","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5974","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en login.aspx en Active Price Comparison 4.0 permiten a atacantes remotos ejecutar comandos SQL a través de los campos (1) contraseña y (2) nombre de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_price_comparison:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5BB3C7E1-A26E-4E6E-98F4-3AE16D45D144"}]}]}],"references":[{"url":"http://secunia.com/advisories/32921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46909","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7283","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5975","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en links.asp en Active Price Comparison 4.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro linkid. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_price_comparison:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5BB3C7E1-A26E-4E6E-98F4-3AE16D45D144"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32550","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5976","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the UserName field."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en siteadmin/forgot.php en PHP JOBWEBSITE PRO permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro adname en una acción Submit (Envíar) o (2) el campo UserName (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:php_jobwebsite_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"7E54F204-0CB9-4D12-9975-76216D95039D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32570","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46997","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46999","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5977","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en siteadmin/forgot.php en PHP JOBWEBSITE PRO permite a atacantes remotos ejecutar comandos SQL a través del parámetro adname una acción Submit (Enviar)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:php_jobwebsite_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"7E54F204-0CB9-4D12-9975-76216D95039D"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32570","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46998","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5978","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Ocean12 Mailing List Manager Gold permite a atacantes remotos ejecutar comandos SQL a través del parámetro Email en (1) default.asp y (2) s_edit.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:mailing_list_manager:_nil_:gold:*:*:*:*:*:*","matchCriteriaId":"3B0AF1A4-DA30-4A6D-81A5-6F8D772CCBE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32587","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47021","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5979","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en default.asp en Ocean12 Maling List Manager Gold permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro Email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:mailing_list_manager:_nil_:gold:*:*:*:*:*:*","matchCriteriaId":"3B0AF1A4-DA30-4A6D-81A5-6F8D772CCBE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32587","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47022","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5980","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb."},{"lang":"es","value":"El gestor de listas de correo Ocean12 Mailing List Manager Gold almacena datos sensibles bajo el directorio raíz del arbol de directorios de la interfaz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar una base de datos a través de una petición directa de o12mail.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12_technologies:mailing_list_manager:_nil_:gold:*:*:*:*:*:*","matchCriteriaId":"3B0AF1A4-DA30-4A6D-81A5-6F8D772CCBE0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47023","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5981","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T01:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) poll.mdb or (2) poll97.mdb."},{"lang":"es","value":"PacPoll 4.0 almacena información sensible bajo el directorio raíz del arbol de directorios de la interfaz web con un control de acceso insuficiente,lo que permite a atacantes remotos descargarse una base de datos a través de una petición directa a (1) poll.mdb o (2) poll97.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pacosdrivers:pacpoll:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AB4B8182-547A-4414-B4D3-3FE6C5F72029"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46976","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5982","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message."},{"lang":"es","value":"Vulnerabilidad en el formato de la cadena de caracteres en BMC PATROL Agent en versiones anteriores a 3.7.30 que permite a los atacantes remotos, ejecutar arbitrariamente código a través especificadores en el formato de la cadena caracteres en un número inválido de versión para TCP puerto 3181, el cual no es propiamente manejado cuando se escribe un mensaje de log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"269E1CCE-F305-4BAD-818E-D19C41EB8531"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD670201-A070-4E0D-BE58-2329116681AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6C07DD3D-C806-4218-BBC8-B859940D9330"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7B1CDFC2-10EC-4955-B254-5A22F910EFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4C31B63C-A243-4F13-8FAA-0F937AF6C089"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.3.00:*:*:*:*:*:*:*","matchCriteriaId":"7F63DC2B-19FB-457A-AA91-BA33C1257E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.3.00:*:nt:*:*:*:*:*","matchCriteriaId":"77D49047-7F6B-4035-96FB-536FEBD02A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.3.00:*:unix:*:*:*:*:*","matchCriteriaId":"E9D2C38B-539B-442C-B3E2-AEF5354C9B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.4.00:*:*:*:*:*:*:*","matchCriteriaId":"3BC4D347-EABE-43C6-AC16-9C04AA00DB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.4.00:*:nt:*:*:*:*:*","matchCriteriaId":"0B0B38C9-20F4-4707-A84C-E2F6982B0690"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.4.00:*:unix:*:*:*:*:*","matchCriteriaId":"7E72F490-B8A0-4631-9D0E-9A27128BBCA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"748C13B8-9FAC-492C-B497-625DF220F799"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.4.11:*:nt:*:*:*:*:*","matchCriteriaId":"FAC22C4F-978D-427F-93BC-5BE79C7D1484"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.4.11:*:unix:*:*:*:*:*","matchCriteriaId":"4F9EB203-28C2-4130-A336-8681CDF47F77"}]}]}],"references":[{"url":"http://secunia.com/advisories/33049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32692","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3379","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-082/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47175","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-08-082/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5983","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T02:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no confiable en la función API PySys_SetArgv en Python versión 2.6 y anteriores, y posiblemente versiones posteriores, antepone una cadena vacía al archivo sys.path cuando el argumento argv [0] no contiene un separador de ruta, lo que podría permitir a los usuarios locales ejecutar código arbitrario por medio de un archivo Python de tipo caballo de Troya en el directorio de trabajo actual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.6","matchCriteriaId":"772EB861-7A7A-4593-9D0D-B343AD1BEEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.3","matchCriteriaId":"6B1FC450-BBF4-45E2-873E-3EB2CCA23845"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*","matchCriteriaId":"A2D59BD0-43DE-4E58-A057-640AB98359A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34522","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/40194","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42888","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/50858","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51024","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51040","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51087","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-41.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-06.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg586010.html","source":"cve@mitre.org"},{"url":"http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/28/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/30/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0027.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1596-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1613-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1613-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1616-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1448","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0122","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=482814","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/40194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/50858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/51087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-41.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg586010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/28/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/30/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1596-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1613-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1613-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1616-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=482814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-5984","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en la extensión Python en Dia v0.96.1 y posiblemente otras versiones, permite a usuarios locales la ejecución de código de su elección a través de un archivo Python con un caballo de Troya en el directorio actual de trabajo, relacionado con la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dia:dia:0.96.1:*:*:*:*:*:*:*","matchCriteriaId":"AD3662FF-8A42-412F-9F13-5ADC7AA1AA91"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504251","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33703","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:040","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:046","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33448","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48262","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01065.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01065.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5985","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en el interfaz Python en Epiphany v2.22.3 y posiblemente otras versiones, permite a usuarios locales la ejecución de código de su elección a través de un archivo Python con un caballo de Troya en el directorio actual de trabajo, relacionado con la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:epiphany:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"67483ED8-8C4B-4E12-BF2A-4A8D7E0ED4EE"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504363","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34187","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-16.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:048","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33441","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481548","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5986","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the (1) \"VST plugin with Python scripting\" and (2) \"VST plugin for writing score generators in Python\" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en (1) \"Extensión VST con secuencias de comandos Python\" y (2) \"Extensión VST para escribir generadores de puntuaciones en Python\" en Csound v5.08.2 y puede que otras versiones; permite a usuarios locales ejecutar código de su elección a través de un fichero Python con un caballo de troya en el directorio de trabajo actual. Está relacionado con la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:csound:csound:5.08.2:*:*:*:*:*:*:*","matchCriteriaId":"CD401A94-40BB-45A8-A702-DE8710FD0A71"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504359","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33446","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481550","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48276","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5987","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de búsqueda de ruta no confiable en el interfaz Python en eog v2.22.3 y posiblemente otras versiones, permite a usuarios locales la ejecución de código de su elección a través de un archivo Python con un caballo de Troya en el directorio actual de trabajo, relacionado con la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:eog:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"FC5C3412-4C39-46EC-8657-50A214C7DFC8"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-06.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33443","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481553","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5988","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en scripts/recruit_details.php de Jadu CMS para Government; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jadu:jadu_cms_for_government:*:*:*:*:*:*:*:*","matchCriteriaId":"A93655A3-894D-4AE9-A095-99098F63BCA7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31376","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45404","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5989","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en defs.php de PHPcounter v1.3.2 y anteriores, cuando está deshabilitado magic_quotes_gpc; permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro l."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"9C240815-F205-4A58-A3A3-769B96F7B022"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"99DEE8B3-97EF-4ED2-B659-296B097314F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"35B01FA5-9AAC-4D05-A522-CCAFE0CF1C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"69F921D4-DCFD-4599-BBD4-07C832B7FF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FA81D42E-90AF-49BD-AD6D-79AC4233B675"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"760B7941-500B-461B-B9E3-19ABA3485AD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA76DBFB-1DBF-4B4F-98BC-29E01443ECDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"ADF2CABA-A445-4E82-9D37-234D08D0D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"08A62F1D-2B8E-4A72-AD5D-60ED6FE9EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F93A1B0-3048-4F0B-97D9-43B6F69D4CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcounter:phpcounter:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"172EF53D-312C-44FE-ADA0-375C90462BEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/31993","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45378","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6553","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5990","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sitecode parameter to connect/index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en connect/init.inc de emergecolab v1.0; permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro sitecode de connect/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eduforge:emergecolab:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EA0CDA58-C2B7-4C63-AA21-A5E344F8FF09"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45369","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6551","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5991","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the doc parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en docs.php en MailWatch para MailScanner v1.0.4 y anteriores, permite a atacantes remotos incluir y ejecutar ficheros de su elección a través de ..(punto punto) en el parámetro \"doc\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mailscanner:mailscanner:*:*:*:*:*:*:*:*","matchCriteriaId":"776D8F2D-5AA1-4E3A-8D15-8055E79378C2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"8F483ABF-1A03-4BF9-BAFF-A7FE952D4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:0.3:beta:*:*:*:*:*:*","matchCriteriaId":"EEA8B1F1-A8D4-4EFF-9992-E52792A62636"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:0.4:*:*:*:*:*:*:*","matchCriteriaId":"60DD9D3A-0C5B-4289-8A8D-347EBAD753AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:0.5:*:*:*:*:*:*:*","matchCriteriaId":"BF886C52-55FB-40E1-91BD-58390305B2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"68CF2B5E-1ED6-49BF-81A2-9D8708BF18A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:1.0:*:*:*:*:*:*:*","matchCriteriaId":"21DCEC14-8920-4DE5-8535-27976821432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"504623E8-9B3C-4BB1-9652-2724D06047FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailwatch:mailwatch:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A50AD90-0F42-401C-B268-75550621C85D"}]}]}],"references":[{"url":"http://secunia.com/advisories/31994","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31378","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45393","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6552","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5992","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to (1) diger.php and (2) sayfalar.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Jetik Emlak Sistem A (ESA) v2.0, permite a atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro KayitNo a (1) diger.php y (2) sayfalar.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetik:jetik_emlak_sistem_a:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EEB6BD41-3F76-475D-9FA4-C9062F274744"}]}]}],"references":[{"url":"http://secunia.com/advisories/32008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31352","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45391","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5993","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the code parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en image.php en Barcode Generator 1D (barcodegen) v2.0.0 y anteriores, permite a atacantes remotos la inclusión y ejecución de archivos locales de su elección a través de ..(punto punto) en el parámetro \"code\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:barcodephp:barcodegen_1d:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"4F52DC9D-7D4A-4413-AFC3-4AFB69CDB87E"},{"vulnerable":true,"criteria":"cpe:2.3:a:barcodephp:barcodegen_1d:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BAD66F23-8D60-4624-842A-32B775179622"},{"vulnerable":true,"criteria":"cpe:2.3:a:barcodephp:barcodegen_1d:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF1CB81B-87FC-4B7C-8644-1CCBD7A98217"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45406","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6558","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5994","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Check Point Connectra NGX R62 HFA_01 allows remote attackers to inject arbitrary web script or HTML via the dir parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Check Point Connectra NGX R62 HFA_01, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro dir. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:connectra_ngx:r62:*:*:*:*:*:*:*","matchCriteriaId":"21624644-F47D-4801-B49E-5ACFDE743949"}]}]}],"references":[{"url":"http://secunia.com/advisories/31553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31369","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45385","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5995","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Solution: An updated version 1.0.4 is available from the TYPO3 extension manager and at typo3.org/extensions/repository/view/sr_freecap/1.0.4/. Users of the extension are advised to update the extension as soon as possible.","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la extensión freeCap CAPTCHA (sr_freecap) anterior a  v1.0.4 para TYPO3, permite a atacantes remotos la inyección de secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:freecap_captcha_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"A3190C5C-82B9-4054-ADFB-345C6F67F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:freecap_captcha_extension:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ED291B90-F9FA-4844-BCC5-8C4B8E0E896C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:freecap_captcha_extension:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CA0E086-DACA-4A3F-A6BA-430833434407"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:freecap_captcha_extension:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0768976F-DB50-4AA4-8CB2-1FC601DCCCC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/31946","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/sr_freecap/1.0.4/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080924-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31370","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45379","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/sr_freecap/1.0.4/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080924-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5996","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with \"administer taxonomy\" permissions, to inject arbitrary web script or HTML via a Newsletter category field."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Simplenews v5.x anterior a v5.x-1.5 y v6.x previo a v6.x-1.0-beta4, para Drupal, permite a usuarios autenticados remotamente con \"administrar taxonomy (administer taxonomy)\" inyectar secuencias de comandos web o HTML de su elección a través de un campo de la categoría Newsletter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.4","matchCriteriaId":"C1FCE644-458F-44DF-8ED3-6E43B5BCABF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:*:beta3:*:*:*:*:*:*","versionEndIncluding":"6.x-1.0","matchCriteriaId":"B5F92839-FAE7-4E6C-BB90-3FDE4A2069B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:4.6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"6900A327-F89A-4265-9AF4-6F9D4A473591"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:4.7.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA6B5388-E9CF-4C6F-B53F-FDCA393359BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:4.7.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"2638AB1A-3ABE-4F3F-A8F8-F0DE4F2C8E0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:4.7.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"1F8AE487-762C-45EA-A31A-C60B7EA08953"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"57048EDA-F42A-4B61-AE79-DE21C7EE471E"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"44FAA0DC-762A-4369-8ACB-F30ECCBA126F"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"64B9BF62-1ACC-482A-BE14-061755462940"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"467582B5-94EB-4EF4-8BA3-B90CCC4B4524"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"B7A5BBAA-E065-40D2-B0B0-EF4FFE9D2487"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:6.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"DC9A538F-A1C9-41C1-BA54-D8785048D0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:6.x-1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"525120D7-08A8-47A0-94AE-1B961D9BD7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:link3:simplenews:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A46446C2-E96A-494E-AD8B-A576D229B0BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/312944","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32022","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31377","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45407","source":"cve@mitre.org"},{"url":"http://drupal.org/node/312944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5997","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en admin/fileKontrola/browser.asp en Omnicom Content Platform (OCP) v2.0, permite a atacantes remotos listar directorios de su elección a través de un nombre de ruta completo en el parámetro \"root\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocp2:omnicom_content_platform:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D0111874-5A30-43D6-A763-3BD7E20B2D45"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/omnicom-traverse.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31338","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45394","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/omnicom-traverse.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5998","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with \"update ajax checklists\" permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la función ajax_checklist_save en el módulo Ajax Checklist v5.x anterior a v5.x-1.1 para Drupal, permite a usuarios autenticados remotamente, con permisos \"update ajax checklists (actualizar las listas de control ajax)\", ejecutar comandos SQL de su elección a través de una operación de guardado, relacionado con los parámetros (1) \"nid\", (2) \"qid\" y (3) \"state\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:ajax_checklist:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"58C25FBE-6634-4709-A7D0-C228BC7F33CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/312968","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496727/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31384","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45410","source":"cve@mitre.org"},{"url":"http://drupal.org/node/312968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496727/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5999","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Ajax Checklist v5.x amterior a v5.x-1.1 para Drupal, permite a usuarios autenticados remotamente, con permisos de creación y edición de los post(hilos de foros, opiniones, etc), la inyección de secuencias de comandos web o HTML de su elección a través de vectores no especificados que involucran al filtro ajax_checklist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:ajax_checklist:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"58C25FBE-6634-4709-A7D0-C228BC7F33CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/312968","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45412","source":"cve@mitre.org"},{"url":"http://drupal.org/node/312968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6000","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://trapkit.de/advisories/TKADV2008-008.txt  \r\n\r\nUpgrade to G DATA AntiVirus/InternetSecurity/TotalCare 2009.\r\n  \r\n  http://www.gdata.de/","cveTags":[],"descriptions":[{"lang":"en","value":"The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents."},{"lang":"es","value":"El driver GDTdiIcpt.sys en G DATA AntiVirus 2008, InternetSecurity 2008, y TotalCare 2008 con los registros del kernel con valores de entrada IOCTL 0x8317001c, permite a usuarios locales provocar una denegación de servicio (caída del sistema) u obtener privilegios a través de una petición IOCTL manipulada, como se ha demostrado mediante la ejecución de la función KeSetEvent con contenidos de registros modificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gdata:antivirus_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"8185811E-B12E-42A4-8022-A3727A9B071C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gdata:internetsecurity_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"4CEBD5D4-6E46-4A8C-9D6E-A9A747F0002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gdata:totalcare_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"A76D18BF-6303-4B84-8B83-F59CF10D0B85"}]}]}],"references":[{"url":"http://secunia.com/advisories/31941","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trapkit.de/advisories/TKADV2008-008.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31246","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2636","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45249","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trapkit.de/advisories/TKADV2008-008.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6001","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string."},{"lang":"es","value":"index.php en ADN Forum v1.0b y anteriores, permite a atacantes remotos evitar la autenticación y obtener acceso de operados del sistema (sysop) a través de una cookie \"fpusuario\" compuesta por una cadena inicial sysop:, un campo de contraseña aleatorio y una cadena :sysop:0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adnforum:adnforum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0b","matchCriteriaId":"8FC4BAF2-5EF8-4827-88AA-E0705E725773"}]}]}],"references":[{"url":"http://secunia.com/advisories/18300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31383","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45400","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6557","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6002","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en sendfile.php en web-cp v0.5.7, cuando \"register_globals\" está habilitado, permite a atacantes remotos leer ficheros de su elección a través de un nombre de ruta completo en el parámetro \"filelocation\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web-cp:web-cp:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"61A0B4A3-217D-443D-8ED6-70FEA07BA3FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/31979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31371","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.web-cp.net/mantis/changelog_page.php","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45408","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.web-cp.net/mantis/changelog_page.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6003","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the seller_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sellers_othersitem.php en AJ Auction Pro Platinum 2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"seller_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:2.0:*:pro_platinum:*:*:*:*:*","matchCriteriaId":"5FD0B4ED-1029-4C70-B91D-D52418EA9133"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45430","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6561","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6004","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en AJ Auction Pro Platinum 2, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"product\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:2.0:*:pro_platinum:*:*:*:*:*","matchCriteriaId":"5FD0B4ED-1029-4C70-B91D-D52418EA9133"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45431","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6561","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6005","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via \"duplicated\" attribute value inputs."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la función CheckUniqueName en W3C Amaya Web Browser v10.0.1, y posiblemente otras versiones incluyendo la 11.0.1, podría permitir a atacantes remotos la ejecución de código de su elección a través de valores de entrada con atributos \"duplicados\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:amaya_web_browser:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E1CE9DE5-7228-427A-8E6F-37DE9C000F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:amaya_web_browser:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CC75B09-804C-4E9B-A6A4-6AF3CB3F4440"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507587#15","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33736","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507587#15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6006","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers to execute arbitrary PHP code via a URL in the minsoft_path parameter to (1) utdb_access.php and (2) utgn_message.php in utility/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Micronation Banking System (minba) v1.5.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro minsoft_path en (1) utdb_access.php y (2) utgn_message.php de utility/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minbank:micronation_banking_system:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D440DBFD-12FC-46FC-88CD-CAEE1D4A8005"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31492","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45529","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6007","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_group.php de view_group.php de BookMarks Favourites Script (APB) de QuidaScript permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quidascript:bookmarks_favourites_script:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"B1223024-2938-43F6-A370-0BD16A0F9C3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31506","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45547","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6008","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb."},{"lang":"es","value":"hyBook Guestbook Script almacena información sensible bajo la raiz de la web con insuficiente control de acceso, lo que permite a atacantes remotos descargarse una base de datos que contenga una contraseña a través de una petición directa a hyBook.mdb.\r\n\t\t"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:herongyang:hybook:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"E13481AF-8874-43E1-A18F-394914AE87E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32079","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496790/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45513","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496790/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6009","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1."},{"lang":"es","value":"SG Real Estate Portal v2.0 permite a atacantes remotos evitar la autenticación y obtener acceso de administrador configurando la cookie Auth a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sg_real_estate_portal:sg_real_estate_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"617ABA58-517C-460C-BCEA-52EC31B0C304"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31500","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45577","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6010","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) mod, (2) page, or (3) lang parameter to index.php; or the (4) action or (5) folder parameter in a security request to admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en SG Real Estate Portal 2.0 que permite a los atacantes remotos leer arbitrariamente archivos a través de .. (punto punto) en parámetros (1) mod, (2) page, o (3) lang para index.php; o los parámetros (4) action o (5) folder en una petición de seguridad a admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sg_real_estate_portal:sg_real_estate_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"617ABA58-517C-460C-BCEA-52EC31B0C304"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45569","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6011","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de SG Real Estate Portal v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro page_id (identificador de página)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sg_real_estate_portal:sg_real_estate_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"617ABA58-517C-460C-BCEA-52EC31B0C304"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45568","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6631","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6634","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6012","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a viewEntry action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Pritlog v0.4 y anteriores, cuando se ha deshabilitado magic_quotes_gpc, permite a atacantes remotos leer ficheros de su elección usando los caracteres .. (punto punto) en el parámetro \"filename\" en una acción \"viewEntry\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hardkap:pritlog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"14593D32-4394-4EA1-9EFC-FBC7EF37F39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hardkap:pritlog:0.2:*:*:*:*:*:*:*","matchCriteriaId":"6967F9CB-681E-4DA0-90AF-96008666E4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hardkap:pritlog:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5510750B-8281-4369-AD4F-E3DF67290E72"}]}]}],"references":[{"url":"http://secunia.com/advisories/31915","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31503","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45551","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6013","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en versiones de Freeway anteriores a la 1.4.3.210 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados que involucran (1) los resultados de la búsqueda avanzada y (2) las páginas de recursos del servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.197","matchCriteriaId":"D874DF27-1D7B-4C21-9BFF-26016381B90E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C4F4745B-C28B-46A1-BE7B-A49E9BB7B774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.25:public_beta:*:*:*:*:*:*","matchCriteriaId":"17965A1F-4CBD-4206-B65F-FDC91FF0E361"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.59:*:*:*:*:*:*:*","matchCriteriaId":"161E864D-0036-4D35-BE17-01915B6D44EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.0.060:*:*:*:*:*:*:*","matchCriteriaId":"83EE7EB8-F131-4997-A885-572A7D157699"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.1.1.76:*:*:*:*:*:*:*","matchCriteriaId":"67B25AC3-F11E-47DE-9D67-C539954BE09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.1.1.80:*:*:*:*:*:*:*","matchCriteriaId":"62BFA63A-33E7-4407-B356-85D3A444DD59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.1.1.81:*:*:*:*:*:*:*","matchCriteriaId":"57922480-AA78-4EC3-95A9-42C03E3FCBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.2.0.113:*:*:*:*:*:*:*","matchCriteriaId":"A908306D-D797-4F03-BE1F-F3589ADC4A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0333462E-0920-4EA7-ABEF-ED61183DBD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.0.142:*:*:*:*:*:*:*","matchCriteriaId":"C2506D84-CA57-473C-9607-B7682EC7C60B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.1.142:*:*:*:*:*:*:*","matchCriteriaId":"A7EF9069-4B41-42B6-B0BF-B97743D06153"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.1.147:*:*:*:*:*:*:*","matchCriteriaId":"9D715EFE-2E15-46BC-8CB8-F69304A64509"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.2.154:*:*:*:*:*:*:*","matchCriteriaId":"A3512E21-A237-4B17-A4FC-E915B9E858BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.2.160:*:*:*:*:*:*:*","matchCriteriaId":"D31BAE6B-A9E7-4B9C-8665-D64BD6A2817C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.3.2.160:joomla_beta:*:*:*:*:*:*","matchCriteriaId":"219D55DC-19CA-43AE-A578-5C803CC2A3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4:*:*:*:*:*:*:*","matchCriteriaId":"61873769-7768-4CFC-B539-B5E7A4F1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.0.171:*:*:*:*:*:*:*","matchCriteriaId":"5A18B733-8855-4EA6-864F-3A3099FC12CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9B03F703-ACF9-4A61-95D0-AF5253FF3085"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1.171:*:*:*:*:*:*:*","matchCriteriaId":"C74596B7-B092-4FC9-B6C0-0A2877E81420"},{"vulnerable":true,"criteria":"cpe:2.3:a:openfreeway:freeway:1.4.1.197:*:*:*:*:*:*:*","matchCriteriaId":"ACB43C45-757B-446F-9133-5C1031791312"}]}]}],"references":[{"url":"http://secunia.com/advisories/32003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openfreeway.org/download/change-log.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openfreeway.org/download/change-log.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6014","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo scripts/links.php in Rianxosencabos CMS 0.9 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rianxosencabos_cms:rianxosencabos_cms:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9F468393-BC50-4183-82A4-67995C4C661E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31502","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45552","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6015","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) keywords and (2) cat parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyeccion SQL en search.php de EsFaq v2.0 permiten a usuarios remotos la ejecución de comandos SQL su elección a través de los parámetros \"keywords\" y \"cat\". NOTA: La procedencia de esta información es desconocida, lo detalles fueron obtenidos unicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts:esfaq:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C7BAC612-8FF1-46C5-AC38-C39C7246DD82"}]}]}],"references":[{"url":"http://secunia.com/advisories/31721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6016","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T18:30:05.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo questions.php in EsFaq 2.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro cid, a vector de ataque diferente a CVE-2008-3952. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts:esfaq:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C7BAC612-8FF1-46C5-AC38-C39C7246DD82"}]}]}],"references":[{"url":"http://secunia.com/advisories/31721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48535","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6017","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en messages.php en I-Rater Basic permite a atacantes remotos ejecutar consultas SQL arbitrarias a través del parametro IDP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-rater:i-rater_basic:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C2A752B1-5C6B-46A3-8094-14789CB07ABD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32912","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7514","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6018","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in MyPHPSite, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en MyPHPSite, cuando magic_quotes_gpc no está activa, permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"mod\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpsite:myphpsite:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"09407CE4-4D97-482A-8B2D-F74967BC4D4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32919","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7519","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6019","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  iindex.php en el gestor de contenidos DO-CMS de EACOMM v3.0. Permite a los usuarios remotos ejecutar comandos arbitrarios SQL a trvés del parametro \"p\".  NOTA: se desconoce la procedencia de la informacion; los detalles fueron obtenidos exclusivamente de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:do-cms:do-cms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"13AA2465-AC75-4BDD-A816-B4AAD71D5D34"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32906","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47467","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6020","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to \"an exposed filter on CCK text fields.\""},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Views del gestor de contenidos Drupal en las versiones v6.x anteriores a la v6.x-2.2. Permite a los usuarios remotos ejecutar código arbitrario SQL a través de vectores de ataque desconocidos relacionados con un filtro vulnerable en los campos de texto CCK."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-2.1","matchCriteriaId":"FC2CE6D7-BD72-4864-9F9B-5ACE8DA2D50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB48B703-BFDC-4BC2-AADB-1D5877BD6F79"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/347831","source":"cve@mitre.org"},{"url":"http://drupal.org/node/348321","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50795","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33289","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32895","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47454","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01024.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/347831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/348321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01024.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6021","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and Server before 7.0 SP1 have unknown impact and attack vectors, aka \"security vulnerabilities found by 3rd party analysis.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Attachmate Reflection for Secure IT UNIX (cliente y servidor) en versiones anteriores a v7.0 SP1. Se desconoce el impacto y los vectores de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:attachmate:reflection_for_secure_it:7.0:*:unix_client:*:*:*:*:*","matchCriteriaId":"2184017C-36CC-4917-BC9D-796C6507358D"},{"vulnerable":true,"criteria":"cpe:2.3:a:attachmate:reflection_for_secure_it:7.0:*:unix_server:*:*:*:*:*","matchCriteriaId":"130853DB-23FD-48E5-8B82-2BBB11EBC495"}]}]}],"references":[{"url":"http://support.attachmate.com/techdocs/2374.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30723","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48536","source":"cve@mitre.org"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6022","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamela_root_path parameter."},{"lang":"es","value":"vulnerabilidad de inclusión remota de archivos PHP en includes/todofleetcontrol.php en versiones antiguas de Xnova, posiblemente la v0.8 sp1; permite a atacantes remotos la ejecución de código arbitrario PHP a través de una URL en el parámetro \"ugamela_root_path\" ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xnova:xnova:0.8:sp1:*:*:*:*:*:*","matchCriteriaId":"5A828612-53D1-4EAF-AEDB-1ABF9709B181"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44513","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6023","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the xnova_root_path parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión de archivo PHP remoto en includes/todofleetcontrol.php en una versión más reciente de Xnova, posiblemente la 0.8 SP1, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro xnova_root_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xnova:xnova:*:sp1:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"434DA4C3-A1E8-48D8-B2B1-AB3D25C36B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xnova:xnova:0.8:*:*:*:*:*:*:*","matchCriteriaId":"9980BD3A-E9E1-42D6-AEE1-AD8ED788D351"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48533","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6024","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows user-assisted remote attackers to cause a denial of service (unresponsive NFS filesystems) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo del kernel del cliente NFSv4  de Sun Solaris v10 y OpenSolaris en versiones anteriores a snv_37. Cuando se utiliza automountd, permite a atacantes remotos, con la intervención del usuario, causar un ataque de denegación de servicio sobre los sistemas de archivos de tipo NFS mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_36","matchCriteriaId":"C48B6DFB-476E-4818-B2A4-3E64097372C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_36","matchCriteriaId":"736EDE85-BBDD-48C7-A5FA-C94FE0AB53B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/31517","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020716","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240546-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30753","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2415","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-240546-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6025","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en scr/form.php en openElec 3.01 y anteriores permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro obj."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openelec:openelec:*:*:*:*:*:*:*:*","versionEndIncluding":"3.01","matchCriteriaId":"9223A516-2BD5-4768-82DF-B651DFF3DD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openelec:openelec:2.02:*:*:*:*:*:*:*","matchCriteriaId":"CADA23A5-1C7A-4D53-94AE-DB6032F50914"},{"vulnerable":true,"criteria":"cpe:2.3:a:openelec:openelec:3.00:*:*:*:*:*:*:*","matchCriteriaId":"28F35AB0-EEB0-43CF-B6AB-C519C5E76F01"}]}]}],"references":[{"url":"http://secunia.com/advisories/31953","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31307","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2655","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45299","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6530","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6026","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ienda.php en BlueCUBE CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluecube:bluecube_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"8959AEC2-5AA6-4F5D-85EF-C72FF779FDD6"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31323","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45322","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6027","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS)en index.php en BLUEPAGE CMS v2.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) parámetro \"whl\", (2) parámetro \"var_1\" y (3) parámetro \"search\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluepage:bluepage_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"8449F9A2-6F10-4421-A1B2-65820351FA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluepage:bluepage_cms:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EAB61E29-64C6-4E2D-9077-7837168DBD0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31968","source":"cve@mitre.org"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls53","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31312","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45321","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6028","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en list.php en University of Queensland Library Fez 1.3 y 2.0 RC1 permite a atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro \"parent_id\" en una acción \"subject\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_queensland:fez:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C9D66C81-2B88-42B9-BC15-7BC4D12D102B"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_queensland:fez:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2B13EB32-419F-41D0-9A0B-D7E2DF9D3D35"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31324","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2652","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45332","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6535","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6029","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo search.php en BuzzyWall 1.3.1 y anteriores, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:buzzywall:buzzywall:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1","matchCriteriaId":"EC831898-1780-46A1-BEE5-1FB7F7D06C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:buzzywall:buzzywall:1:*:*:*:*:*:*:*","matchCriteriaId":"E4E0BADA-246E-4CDB-BB78-542834611879"},{"vulnerable":true,"criteria":"cpe:2.3:a:buzzywall:buzzywall:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B70CCCEE-08FD-4EB8-8677-7E4624CE7B17"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31308","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6030","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL commands via (1) the job parameter to index.php in the search module or (2) the news_id parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en NetArtMedia Jobs Portal 1.3 permite a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro job de index.php en el módulo de búsqueda o (2) el parámetro  news_id de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netartmedia:jobs_portal:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2994DDEC-023D-4834-87C5-8E48807DB40C"}]}]}],"references":[{"url":"http://secunia.com/advisories/31937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31281","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45272","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6517","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6031","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: it was later reported that 2.34 is also vulnerable."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo vote.php en WSN Links versiones 2.22 y 2.23, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro id. NOTA: más tarde se reportó que la versión 2.34 también es vulnerable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wsn_links:wsn_links:2.22:*:*:*:*:*:*:*","matchCriteriaId":"DF254D12-46DD-4BA9-8D0A-79EE0DEE1EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wsn_links:wsn_links:2.23:*:*:*:*:*:*:*","matchCriteriaId":"409B15F3-FE7C-463E-A3E7-B1C3D9737ECD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31305","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6032","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el comments.php en WSN Links Free v4.0.34P permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wsn:links:4.0.34p:*:*:*:*:*:*:*","matchCriteriaId":"E5DCA037-BC63-43A6-BA6D-7E5E170408D6"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48534","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6529","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6033","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo comments.php en WSN Links 2.20 que permite a los atacantes remoto, ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wsn_links:wsn_links:2.20:*:*:*:*:*:*:*","matchCriteriaId":"1632C109-B5D5-4703-91C4-4BE7450FA51A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31302","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6525","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6034","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the atkaction parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en dispatch.php en Achievo v1.3.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"atkaction\". NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D901628D-D446-45EE-B131-EAA04D48A352"}]}]}],"references":[{"url":"http://secunia.com/advisories/31973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31325","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45331","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6035","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en dispatch.php en Achievo v1.3.2-STABLE, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"arknodetype\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D901628D-D446-45EE-B131-EAA04D48A352"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/achievo-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31326","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45344","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/achievo-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6036","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mj_config[src_path] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos PHP en main.inc.php en BaseBuilder v2.0.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una direccion URL en el parámetro \"mj_config[src_path]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"51CDA702-D235-4802-8638-D8A366302B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B2C18FC7-5183-437D-A160-84265D57A564"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8B5CEA2B-B603-42F8-B983-C5B827C86DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C3FB618B-462B-43E5-9271-871E78210A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DFD08F66-D9AB-427E-9CE0-C01CAC9838F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C43BEC12-136F-4074-B9EF-E0E1146D3516"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:2.0:alpha:*:*:*:*:*:*","matchCriteriaId":"41CFA8C7-B840-4112-BD57-81C6C3DC0153"},{"vulnerable":true,"criteria":"cpe:2.3:a:basebuilder:basebuilder:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"42B97562-3B81-4867-8EA1-3CA1A68111D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31947","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31330","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2653","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45337","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6037","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php en AvailScript Article Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"v\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_article_script:*:*:*:*:*:*:*:*","matchCriteriaId":"352D7827-379E-4A41-ABBD-27558E7C784E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31816","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45294","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6038","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dsp_editevent.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MapCal 0.1 permite a atacantes remotos ejecutar comandos SQL a través de la parámetros 'id' al realizar una acción editevent. Posiblemente esta relacionada con dsp_editevent.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mapcal:mapcal:0.1:*:*:*:*:*:*:*","matchCriteriaId":"95FAEB89-6D63-4C72-B228-2AFFB6F9CE1F"}]}]}],"references":[{"url":"http://0x90.com.ar/Advisory/20080920-2.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496576/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31304","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2647","source":"cve@mitre.org"},{"url":"http://0x90.com.ar/Advisory/20080920-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496576/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6039","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en BLUEPAGE CMS v2.5 y anteriores, permite a atacantes remotos secuestrar sesiones web a través del parámetro \"PHPSESSID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluepage:bluepage_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"8449F9A2-6F10-4421-A1B2-65820351FA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluepage:bluepage_cms:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EAB61E29-64C6-4E2D-9077-7837168DBD0F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31968","source":"cve@mitre.org"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls53","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31315","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45323","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6040","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Arcadem Pro v2.700 a la v2.802, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"articlecat\", probablemente relacionado con includes/articleblock.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:arcadem_pro:2.700:*:*:*:*:*:*:*","matchCriteriaId":"0651F8D8-9F63-4168-B906-A9B8FF44A404"},{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:arcadem_pro:2.707:*:*:*:*:*:*:*","matchCriteriaId":"5D2E962B-D595-4F81-AFC8-53920152D6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:agares_media:arcadem_pro:2.802:*:*:*:*:*:*:*","matchCriteriaId":"3A3D1B46-4C2A-4D4A-B15D-732EC9911BB7"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31322","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2700","source":"cve@mitre.org"},{"url":"https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6041","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ViewName, (2) TableName, (3) OrderBy, and (4) FilterField parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Index.asp de Dataspade v1.0 , permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetro (1) ViewName, (2) TableName, (3) OrderBy y (4) FilterField."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dataspade:dataspade:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D536F64B-74FB-49D8-AB95-87CBF84319F3"}]}]}],"references":[{"url":"http://pridels-team.blogspot.com/2008/09/dataspade-xss-vuln.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31317","source":"cve@mitre.org"},{"url":"http://pridels-team.blogspot.com/2008/09/dataspade-xss-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6042","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo re_search en NetArtMedia Real Estate Portal 2.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro ad del archivo index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netartmedia:real_estate_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D806699-AFB4-46C8-B77D-04267FBDE4D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/31940","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31280","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45271","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6518","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6043","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL commands via the (1) order_field and (2) order_type parameters to categories.php and unspecified other components.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad múltiple de desbordamiento de búfer en PHP Pro Bid v6.04, permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) parámentro \"order_field\" y (2) parámetro \"order_type\" en categories.php y otros componentes no específicos. NOTA: algunos de estos detalles han sido obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpprobid:php_pro_bid:6.04:*:*:*:*:*:*:*","matchCriteriaId":"A5A53935-EA59-4F76-9712-EF7D2E9FB71B"}]}]}],"references":[{"url":"http://osvdb.org/48484","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496533/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31263","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/48484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496533/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6044","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en advanced_search_result.php de xt:Commerce v3.0.4 y anteriores; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro keyword -palabras clave-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xt-commerce:xt-commerce:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.4","matchCriteriaId":"28A16B3B-26E0-4959-BE95-86D635DB4B90"}]}]}],"references":[{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls54","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496583/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31313","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45340","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls54","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6045","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter."},{"lang":"es","value":"Una vulnerabilidad de fijación de sesión en el archivo shopping_cart.php en xt:Commerce versión 3.0.4 y anteriores, permite a los atacantes remotos secuestrar sesiones web mediante la configuración del parámetro XTCsid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xt-commerce:xt-commerce:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.4","matchCriteriaId":"28A16B3B-26E0-4959-BE95-86D635DB4B90"}]}]}],"references":[{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls54","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/496583/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/496588/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31313","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45341","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls54","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/496583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/496588/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6046","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) opt_in_out.php.inc, (2) confirmation.php.inc, and (3) renewal.php.inc in mailinglist/."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ADbNewsSender antes de v1.5.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados en (1) opt_in_out.php.inc, (2) confirmation.php.inc y (3) renewal.php.inc en mailinglist/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender_project:adbnewssender:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"618139FC-70AD-4458-A434-0E17302A8EBD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33224","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=647876","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32903","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=647876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-6047","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:01.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) subscribing and (2) unsubscribing."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en ADbNewsSender anterior a v1.5.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados relacionados con la (1)suscripción y (2) des-suscripción.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"2300697C-FD42-40D8-80F7-5F58B412CD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0:*:*:de:*:*:*:*","matchCriteriaId":"421A24BC-3D70-4EEF-9D4A-7E79B9826BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0:*:*:en:*:*:*:*","matchCriteriaId":"9DBE2CAD-AA3C-41DD-836E-8837E7F8E7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0.1:*:*:de:*:*:*:*","matchCriteriaId":"83555DD5-4281-4B66-BC8F-299F037E870B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0.1:*:*:en:*:*:*:*","matchCriteriaId":"A207C686-0775-4130-896E-2100B9A94A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0.2:*:*:de:*:*:*:*","matchCriteriaId":"CD04AEEC-6A16-4306-8AE3-B9CF087F880E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0.2:*:*:en:*:*:*:*","matchCriteriaId":"7DACFE2D-A0FB-453C-A3AE-B780E5BEB7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2A53D1A3-6A37-417B-8CF4-F5897635E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"815153B5-F97A-4C56-8C20-4F6E7C0D638A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F051AB9-C299-4E9B-B4C2-EF77A0AE18E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C15AFACD-D8AD-415E-B050-7DAFC99506F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0CEF5136-210C-446B-9E32-6299B10CB69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2D524626-B977-4356-A93F-88B435CFCA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"328B133E-7482-4946-BAB1-5D89C60041B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"91A71223-CD88-446F-AF93-0626B39BE3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"80953021-E692-449B-A961-A369E8BB4A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"683CA1FD-A4E4-41E4-97A1-01A77B520991"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1831F536-F07D-49E8-A863-FDAD8E383104"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD13616B-33A3-4E43-BB91-19E192FA67F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A250D35-B8DF-4999-997C-EC69AD725E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E4A87D52-68B5-488E-BA5E-FDF61C798195"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D8DDB844-AC56-443A-9099-DA0D54F070E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7A8E8417-9BFE-4CB2-A218-458CD718F41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"01092A5C-0F07-488B-9F02-ACCA96618BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF12021-D316-4A18-B3E1-ED6AB9736EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"1758BFA0-47BA-49DB-8477-2996D6D03A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DD0EEF2A-61CC-472C-BE91-7199318DA51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C5CAD3C9-3D51-4DAA-930E-B9ECCDBAB6C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"04F1B990-05DE-43FD-8923-CD2E675DE9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"0ECEF6BB-AF11-4427-B740-DC66AEA94DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F5B3BA36-997A-4CAF-9103-966881BDFC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6E6AD1EB-77AD-4F2F-A604-C290274C9AB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33224","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=647876","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32903","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=647876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-6048","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:01.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en TangoCMS versiones anteriores a v2.2.0 permite a atacantes remotos llevar a cabo acciones no autorizadas como administradores a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2","matchCriteriaId":"891EBD00-73CC-4D3E-B01D-4C0D6A56023F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DA8000C3-6E19-4CEE-88E1-35F67C807316"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"66D1177D-BD00-4FB4-A43F-385D83942EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:1.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"DD79A8BA-2341-4BCF-AF3B-F100CD137E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"35A0FF1D-220C-4346-8DD6-A32A4EA00F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"45A5005C-03A3-42E9-A00C-6A0620832C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D6B95017-5076-419F-ABB4-33387034F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DA3B5DB5-65F2-46A3-B5CD-087FB214539C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"76E1AECF-7617-412E-A4C2-DFEBB444F0E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"56C0A809-5394-44C4-B58F-61E591A8C542"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6C815DF4-341A-426E-A0B4-AC83DC7B446B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C92559DE-504C-43CD-AC15-E7D94DB553B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"15FA7FEA-2B72-403B-A7AD-3C741318F5DE"}]}]}],"references":[{"url":"http://osvdb.org/50777","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tangocms.org/article/view/2.2.0-eagle-released%21","source":"cve@mitre.org"},{"url":"http://osvdb.org/50777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tangocms.org/article/view/2.2.0-eagle-released%21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6049","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:01.983","lastModified":"2023-11-07T02:03:19.027","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: SQL injection vulnerability in index.php in TinyMCE 2.0.1 allows remote attackers to execute arbitrary SQL commands via the menuID parameter.  NOTE: CVE and multiple reliable third parties dispute this issue, since TinyMCE does not contain index.php or any PHP code.  This may be an issue in a product that has integrated TinyMCE"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6050","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Tech Articles (com_tech_article) v1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"item\" en el index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ircmaxell:tech_article:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C0BD01A1-7362-4C5C-9539-F262880A3BDE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32897","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7504","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6051","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords via a direct request."},{"lang":"es","value":"MetaCart Free almacena metacart.mdb bajo la raíz web con insuficiente control de acceso, lo que permite a atacantes remotos obtener nombres de usuarios y contraseñas a través de una solicitud directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metalinks:metacart:*:*:free:*:*:*:*:*","matchCriteriaId":"15BE4B83-FBE2-40BF-9B74-5273D28CDFDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499123/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499123/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6052","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request."},{"lang":"es","value":"PreProjects Pre Courier y Cargo Business almacena db_elearning.mdb bajo el directorio raíz sin el suficiente control de acceso, lo que permite a atacantes remotos obtener contraseñas mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_e-learning_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"29337B0E-0E84-4C64-B254-7EB5275EB194"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/prelearn-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47437","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/prelearn-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6053","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request."},{"lang":"es","value":"PreProjects Pre Resume Submitter almacena onlineresume.mdb bajo la raíz web con insuficiente control de acceso, lo que permite a atacantes remotos obtener las contraseñas a través de una solicitud directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_resume_submitter:*:*:*:*:*:*:*:*","matchCriteriaId":"0F8ACFE2-8CDD-4B2F-8897-EF5C839B8DBF"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/preresume-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47438","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/preresume-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6054","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request."},{"lang":"es","value":"PreProjects Pre Courier y Cargo Business almacenan dbcourior.mdb bajo el directorio raíz sin el suficiente control de acceso, lo que permite a atacantes remotos obtener contraseñas mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects.com:pre_courier_and_cargo_business:*:*:*:*:*:*:*:*","matchCriteriaId":"2542BF6C-EFE7-461A-B089-54AF59B826C0"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/precourier-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47436","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/precourier-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6055","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request."},{"lang":"es","value":"PreProjects Pre Classified Listings almacena pclasp.mdb bajo la raíz de la web con control de acceso insuficiente, lo que permite a atacantes remotos obtener contraseña a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_classified_listings:*:*:*:*:*:*:*:*","matchCriteriaId":"56899FF7-8537-4288-ABDF-B835D82487C0"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6056","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzado  (XSS) en World Recipe v2.11, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"n\" al emailrecipe.aspx, (2) \"id\" al recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ex-designs:world_recipe:2.11:*:*:*:*:*:*:*","matchCriteriaId":"6B4EB64D-5F64-4967-878F-C907C15354AB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499217/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499217/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6057","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T15:30:02.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request."},{"lang":"es","value":"Doug Luxem Liberum Help Desk v0.97.3 almacena db/helpdesk2000.mdb bajo la raíz de la web con control de acceso insuficiente, lo que permite a atacantes remotos obtener contraseñas a través de un petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liberum:liberum_help_desk:0.97.3:*:*:*:*:*:*:*","matchCriteriaId":"0A530CEA-C94D-430E-9081-900BF0B36C88"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47421","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6058","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Syslserve 1.058 and earlier, and probably 1.059, allows remote attackers to cause a denial of service (hang) via a crafted UDP Syslog packet."},{"lang":"es","value":"Syslserve v1.058 y anteriores y puede que v1.059, permite a atacantes remotos provocar una denegación de servicio (cuelgue) a través de un paquete UDP Syslog manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:*:*:*:*:*:*:*:*","versionEndIncluding":"1.059","matchCriteriaId":"13BB892B-277F-4635-A2C4-E35E5DCDE926"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.01:*:*:*:*:*:*:*","matchCriteriaId":"B9E06351-4E52-465F-9519-87B8AF31D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.02:*:*:*:*:*:*:*","matchCriteriaId":"434F4664-3D66-4B0D-B585-75FBA54C7F90"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.03:*:*:*:*:*:*:*","matchCriteriaId":"2772A8FC-47BC-4B26-B46C-154DF1027CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.04:*:*:*:*:*:*:*","matchCriteriaId":"37BADCB5-CD16-4367-A380-A43889E9D010"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.05:*:*:*:*:*:*:*","matchCriteriaId":"BF48034A-2961-41B8-A708-5C12375811BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.051:*:*:*:*:*:*:*","matchCriteriaId":"F0ACCB28-431D-4E14-8F20-447D5D886E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.052:*:*:*:*:*:*:*","matchCriteriaId":"6AD3BAF1-3AF0-4BD4-8E29-390F71456BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.053:*:*:*:*:*:*:*","matchCriteriaId":"0ED6B798-F85F-4C48-BEC1-133E61D46122"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.054:*:*:*:*:*:*:*","matchCriteriaId":"663DEBD1-DA8B-4C06-8383-D6BCDC9576E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.055:*:*:*:*:*:*:*","matchCriteriaId":"4A260540-4CEA-470A-9B63-F6B59BF65C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.056:*:*:*:*:*:*:*","matchCriteriaId":"D29A9E2F-61BD-4AD0-B76F-272688982141"},{"vulnerable":true,"criteria":"cpe:2.3:a:syslserve:syslserve:1.058:*:*:*:*:*:*:*","matchCriteriaId":"ABFED792-2CA6-4488-ADC5-485A354EA045"}]}]}],"references":[{"url":"http://secunia.com/advisories/33566","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/01/15/syslserve-1-058-denial-of-service-vulner","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33311","source":"cve@mitre.org"},{"url":"http://www.syslserve.com/changelog.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/01/15/syslserve-1-058-denial-of-service-vulner","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syslserve.com/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6059","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism."},{"lang":"es","value":"xml/XMLHttpRequest.cpp en WebCore de WebKit anterior a r38566, no restringe el acceso adecuadamente de las páginas Web de las cabeceras de respuesta HTTP (1) Set-Cookie y (2) Set-Cookie2; esto permite a atacantes remotos obtener información sensible de las cookies a través de unas llamadas XMLHttpRequest, relacionadas con el mecanismo de protección HTTPOnly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webkit:webkit:*:*:*:*:*:*:*:*","matchCriteriaId":"AB1AB1C4-1E35-44A3-A720-8A7D03FDC203"}]}]}],"references":[{"url":"http://trac.webkit.org/changeset/38566/trunk/WebCore/xml/XMLHttpRequest.cpp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33804","source":"cve@mitre.org"},{"url":"https://bugs.webkit.org/show_bug.cgi?id=10957","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48575","source":"cve@mitre.org"},{"url":"http://trac.webkit.org/changeset/38566/trunk/WebCore/xml/XMLHttpRequest.cpp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.webkit.org/show_bug.cgi?id=10957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6060","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T01:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ActionScript en ficheros arbitrarios Shockwave Flash (SWF) creados por InfoSoft FusionCharts permite a atacantes remotos inyectar contenidos de su elección SWF adicionales a través de una URL en el atributo SRC de un elemento IMG en el parámetro dataURL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infosoftglobal:fusion_charts:*:*:*:*:*:*:*:*","matchCriteriaId":"CB0082BB-829F-4E34-B80A-7DC6729681CC"}]}]}],"references":[{"url":"http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/249337","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/485722/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27109","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0067","source":"cve@mitre.org"},{"url":"http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/249337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/485722/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6061","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T01:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ActionScript en controlador de ficheros de su elección  Shockwave Flash (SWF) creado por Techsmith Camtasia Studio versiones anteriores a v5 permite a atacantes remotos inyectar contenidos SWF adicionales de su elección a través de una URL en el parámetro csPreloader."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"C11D412A-0201-4176-91A8-93444E94195B"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E86D271-5B53-4C7D-BA1C-46516E1F1A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C8B18921-92CF-487D-B102-41F836A3119D"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5DB95AA6-3FCB-4E86-8E33-2AD50C457CD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4865C6-744C-4A57-947E-8117AC87FFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0768ED2A-933E-4543-9307-97FE687A32E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1052762B-CCF2-4EC1-A741-32514A53F0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"ED138D91-590C-4266-A0F0-4CA43921CB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A3A2B0E4-D3A7-4CD5-83EA-7807142FCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"89324473-49C8-4583-A6A7-31787301E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C3C1DBA5-187F-46EC-A30A-4B2763EF4864"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"38C81F88-2E48-495F-8031-19652FC74FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"78992310-54A2-4C98-9DFF-35975C3D2169"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D33350D9-137C-4D27-ACE2-76B8963C33C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A01BE71F-BB0B-4B11-A71E-1C4854F90E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5E5EF497-056A-4018-9330-290DFAFF3835"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EE90A4-A306-4BA1-92FD-A63C0B14836D"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0AB3FF22-32D0-42FA-A7E0-15D67509041F"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CAFD2913-2104-42F3-8EC0-E3C389203483"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E6F80614-B77C-4C72-92B1-F1C3857F17DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"463C9BEA-3706-4985-8F14-71D9A741073A"},{"vulnerable":true,"criteria":"cpe:2.3:a:techsmith:camtasia_studio:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"952ED6B9-B3B9-4788-9A43-AC87C32002B6"}]}]}],"references":[{"url":"http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249337","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/485722/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27107","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0066","source":"cve@mitre.org"},{"url":"http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/485722/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6062","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T01:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter.  NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en ActionScript en ficheros arbitrarios Shockwave Flash (SWF) creados por Adobe Dreamweaver, cuando se usa la característica Insert Flash Video, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través una función as: URI en el parámetro skinName. NOTA: debería sobreescribir las vulnerabilidades CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*","matchCriteriaId":"4612B738-830D-417F-BD8B-7AA15010F193"}]}]}],"references":[{"url":"http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb07-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249337","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/485722/100/100/threaded","source":"cve@mitre.org"},{"url":"http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb07-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/485722/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6063","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T01:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Word 2007, when the \"Save as PDF\" add-on is enabled, places an absolute pathname in the Subject field during an \"Email as PDF\" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name."},{"lang":"es","value":"Microsoft Word 2007, cuando el complemento \"guardar como PDF\" está habilitado, coloca un nombre de ruta absoluta en el campo Subject durante una operación \"Email como PDF\", lo que permite a atacantes remotos obtener información sensible tal como nombre de cuenta de remitentes y un nombre de subdirectorio de Archivos Temporales de Internet"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2007:*:*:*:*:*:*:*","matchCriteriaId":"A9B12493-4287-4AAD-9A18-D3FC3FCBE172"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/486088/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486088/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6064","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T01:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en DomPHP v0.81, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\" a agenda/index.php y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:domphp:domphp:0.81:*:*:*:*:*:*:*","matchCriteriaId":"5476BDB5-EE7E-48C3-A11F-6240C4DF21B0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27233","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6065","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T02:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the password directory, and then overwriting the password file through UTL_FILE operations, a related issue to CVE-2006-7141."},{"lang":"es","value":"Oracle Database Server v10.1, v10.2, y 11g concede permisos WRITE al directorio para rutas arbitrarias que están relacionadas con un estado CREATE OR REPLACE DIRECTORY, lo cual permite a usuarios autenticados con privilegios CREATE ANY DIRECTORY conseguir privilegios SYSDBA enlazando la ruta del directorio contraseña, y entonces sobre escribir el fichero contraseña a través de operaciones UTL_FILE, una cuestión relacionada con CVE-2006-7141."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"C5331B51-3E41-435D-B1F7-537D58D169E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"D38D9C32-FD97-422E-AAE8-55790D4A1AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11:*:*:*:*:*:*:*","matchCriteriaId":"8992F179-EC97-4380-B8BC-29111E03823D"}]}]}],"references":[{"url":"http://www.oracleforensics.com/wordpress/index.php/2008/10/10/create-any-directory-to-sysdba/","source":"cve@mitre.org"},{"url":"http://www.oracleforensics.com/wordpress/wp-content/uploads/2008/10/create-any-directory-to-sysdba.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497286/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31738","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48814","source":"cve@mitre.org"},{"url":"http://www.oracleforensics.com/wordpress/index.php/2008/10/10/create-any-directory-to-sysdba/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracleforensics.com/wordpress/wp-content/uploads/2008/10/create-any-directory-to-sysdba.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497286/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6066","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T02:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules.php, (2) ManagerResource.class.php, (3) ManagerRightsResource.class.php, (4) RegForm.class.php, (5) RegResource.class.php, and (6) RegRightsResource.class.php in classes/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en Meet#Web v0.8 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro root_path para (1) modules.php, (2) ManagerResource.class.php, (3) ManagerRightsResource.class.php, (4) RegForm.class.php, (5) RegResource.class.php y (6) RegRightsResource.class.php en classes/. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:meet\\#web:meet\\#web:0.8:*:*:*:*:*:*:*","matchCriteriaId":"27A1B77A-1EF6-4B2F-8512-3CF77AF0CAF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30673","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30673/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44454","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30673/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6067","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T02:30:05.063","lastModified":"2023-11-07T02:03:19.180","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-5838.  Reason: This candidate is a duplicate of CVE-2008-5838.  Notes: All CVE users should reference CVE-2008-5838 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6068","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T06:59:34.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a viewProfile action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JoomlaDate (com_joomladate) v1.2 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámentro \"user\" en una acción viewProfile en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_design_hero:joomladate:1.2:*:*:*:*:*:*:*","matchCriteriaId":"038D37B9-2979-4604-9B2E-3676D0E308BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/30441","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42873","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5748","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6069","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T06:59:34.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  e107chat.php en el componente  eChat v4.2 para e107, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"nick\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:123flashchat:echat_plugin:4.2:*:*:*:*:*:*:*","matchCriteriaId":"72481E3E-5490-4897-AA74-BB6FDABCF87C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]}]}],"references":[{"url":"http://secunia.com/advisories/30561","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493126/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42883","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493126/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6070","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T06:59:34.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos inferiores de búfer basados en montículo en la función ReadPALMImage en coders/palm.c de GraphicsMagick before v1.2.3, permite a atacantes remotos provocar una denegación de servicio (caída) o posibilidad de ejecutar código de su elección a través de una imagen PALM manipulada, es un vulnerabilidad diferente a CVE-2007-0770. NOTA: Algunos de estos detalles se han obtenido de terceras personas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"2A26CBEB-F0B3-41C6-A09E-0F69720FFB8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E3834A3-8A7E-4914-A20C-EE694150D044"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E54C88D-035D-43F7-8D26-F07C9DC24D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEDB13AA-2AD3-4FFE-9851-53BB0531BC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"071499F5-8FB0-4EE9-B816-6514AF6C17AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F96A991C-67A7-4C36-99C4-846BD2175F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8AC0F79E-4DD6-4EF9-82E1-68DC8EB7EF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BD7E2792-B4BC-4C71-990D-0B7462919568"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10F2FD22-4058-45D6-8352-0AA6382746C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4F41DBD-6F06-40DC-A722-EC51B9ACC07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"96CA70E0-2533-417A-B8C4-F687BF256691"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF103AE-6F15-4F2D-A375-F2AF91171EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65929D5C-31B1-4A70-8E9C-AC6749332480"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC45DB14-ABB2-4116-930D-349A81CDB982"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0573F148-0204-4F6B-A7B7-12DDF61C7383"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"7D259740-FE5A-4D28-B554-FD176F9BD1FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"489040F9-1992-4030-9AFC-9855CFB8C1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A9942F4B-6608-4828-988C-2F76EB73CC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"12D4C9D5-2A4F-4263-943C-1F46E0BB802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FAA39999-2648-4EBB-A9CD-15FBE9900E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"4AD2742D-41F6-43F4-B90B-B75D54E08326"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2755909D-D83F-4810-824D-7514EE501AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"5763F6B5-C4FB-4792-B5D8-058B314D177E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"01E41E1B-BE16-4581-A503-CEC993D11A71"}]}]}],"references":[{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/palm.c","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29583","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42904","source":"cve@mitre.org"},{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/palm.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6071","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T06:59:34.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función DecodeImage de coders/pict.c de GraphicsMagick anterior a v1.1.14 y v1.2.x anterior a v1.2.3; permite a atacantes remotos provocar una denegación de servicio (caída) o puede que ejecutar código de su elección a través de una imagen PICT manipulada. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"9CEE9315-7511-417E-B2AE-29D126833594"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E3834A3-8A7E-4914-A20C-EE694150D044"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F96A991C-67A7-4C36-99C4-846BD2175F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BD7E2792-B4BC-4C71-990D-0B7462919568"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10F2FD22-4058-45D6-8352-0AA6382746C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4F41DBD-6F06-40DC-A722-EC51B9ACC07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"96CA70E0-2533-417A-B8C4-F687BF256691"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF103AE-6F15-4F2D-A375-F2AF91171EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65929D5C-31B1-4A70-8E9C-AC6749332480"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC45DB14-ABB2-4116-930D-349A81CDB982"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0573F148-0204-4F6B-A7B7-12DDF61C7383"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"7D259740-FE5A-4D28-B554-FD176F9BD1FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"489040F9-1992-4030-9AFC-9855CFB8C1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A9942F4B-6608-4828-988C-2F76EB73CC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"12D4C9D5-2A4F-4263-943C-1F46E0BB802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FAA39999-2648-4EBB-A9CD-15FBE9900E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"4AD2742D-41F6-43F4-B90B-B75D54E08326"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2:*:*:*:*:*:*:*","matchCriteriaId":"634E509D-7E46-43EE-BE38-7C3A7690761D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"01E41E1B-BE16-4581-A503-CEC993D11A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1B3C34D3-56B0-4539-8361-4EEBBD878777"}]}]}],"references":[{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/pict.c","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604785","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29583","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42906","source":"cve@mitre.org"},{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/pict.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6072","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T06:59:34.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service (crash) via unspecified vectors in (1) XCF and (2) CINEON images."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en GraphicsMagick anterior a v1.1.14, y v1.2.x anterior a 1v.2.3, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados en (1) XCF y (2) imágenes CINEON."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"9CEE9315-7511-417E-B2AE-29D126833594"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E3834A3-8A7E-4914-A20C-EE694150D044"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F96A991C-67A7-4C36-99C4-846BD2175F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BD7E2792-B4BC-4C71-990D-0B7462919568"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10F2FD22-4058-45D6-8352-0AA6382746C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4F41DBD-6F06-40DC-A722-EC51B9ACC07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"96CA70E0-2533-417A-B8C4-F687BF256691"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF103AE-6F15-4F2D-A375-F2AF91171EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65929D5C-31B1-4A70-8E9C-AC6749332480"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC45DB14-ABB2-4116-930D-349A81CDB982"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0573F148-0204-4F6B-A7B7-12DDF61C7383"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"7D259740-FE5A-4D28-B554-FD176F9BD1FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"489040F9-1992-4030-9AFC-9855CFB8C1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A9942F4B-6608-4828-988C-2F76EB73CC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"12D4C9D5-2A4F-4263-943C-1F46E0BB802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FAA39999-2648-4EBB-A9CD-15FBE9900E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"4AD2742D-41F6-43F4-B90B-B75D54E08326"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2:*:*:*:*:*:*:*","matchCriteriaId":"634E509D-7E46-43EE-BE38-7C3A7690761D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"01E41E1B-BE16-4581-A503-CEC993D11A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1B3C34D3-56B0-4539-8361-4EEBBD878777"}]}]}],"references":[{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/cineon.c","source":"cve@mitre.org"},{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/xcf.c","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604785","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29583","source":"cve@mitre.org"},{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/cineon.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/xcf.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6073","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T06:59:34.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"StorageCrypt 2.0.1 does not properly encrypt disks, which allows local users to obtain sensitive information via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"StorageCrypt v2.0.1 no cifra apropiadamente discos, el cual permite a los usuario locales obtener información sensible a través de vectores no especificados. NOTA: la procedencia de esta información es desconocida, los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magic2003:storagecrypt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E0D62128-229B-425F-BDB5-B816DB9FC477"}]}]}],"references":[{"url":"http://secunia.com/advisories/30471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42905","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6074","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the importFunction parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en frame.php en phpcrs v2.06 y anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos incluir y ejecutar ficheros locales a través de un ..(punto punto) en el parámetro \"importFunction\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:*:*:*:*:*:*:*:*","versionEndIncluding":"2.06","matchCriteriaId":"999D00E6-21D9-420B-95EA-1BF36FD60E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:1.01:*:*:*:*:*:*:*","matchCriteriaId":"B0994EF7-BA80-41F9-84FA-A0650D2119F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:2.00:*:*:*:*:*:*:*","matchCriteriaId":"3C2D46D1-A07E-43BD-BCC9-818E5272BEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:2.01:*:*:*:*:*:*:*","matchCriteriaId":"696469A2-C176-4EB9-AB55-F792B095C5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:2.02:*:*:*:*:*:*:*","matchCriteriaId":"4357D021-1AF8-4F83-AE16-B5B005F749BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:2.03:*:*:*:*:*:*:*","matchCriteriaId":"98BABC5E-3280-47E5-B492-1840CF2B2292"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:2.04:*:*:*:*:*:*:*","matchCriteriaId":"B5750153-CF0A-440D-91BB-8EBDA2272473"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpcrs:phpcrs:2.05:*:*:*:*:*:*:*","matchCriteriaId":"AD8FEC8D-A333-4ADF-B05F-6322419BA96F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497742/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31876","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46043","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497742/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6075","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL commands via the kid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en aspkat.asp en Bahar Download Script v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"kid\". NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rasihbahar:bahar_download_script:2.0:*:*:*:*:*:*:*","matchCriteriaId":"46C432A2-6313-4ED8-86F2-A637A395621C"}]}]}],"references":[{"url":"http://www.rasihbahar.com/download/down.asp?id=479","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/31852","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46032","source":"cve@mitre.org"},{"url":"http://www.rasihbahar.com/download/down.asp?id=479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/31852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6076","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Daily Message (com_dailymessage) v1.0.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jlleblanc:com_dailymessage:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A410F9A1-B4CD-41F7-9251-C6836DD0DAC3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31870","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46033","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6802","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6077","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to execute arbitrary SQL commands via the colpick parameter in a singleread action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en loudblog/ajax.php en LoudBlog v0.8.0a y anteriores permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro \"colpick\" en una acción \"singleread\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:loudblog:loudblog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.0a","matchCriteriaId":"1964CD1B-8E90-463F-98E0-0E2790DD474E"},{"vulnerable":true,"criteria":"cpe:2.3:a:loudblog:loudblog:0.5:*:*:*:*:*:*:*","matchCriteriaId":"4CDE9AA3-9F44-4620-8C24-A14C65219451"},{"vulnerable":true,"criteria":"cpe:2.3:a:loudblog:loudblog:0.6:*:*:*:*:*:*:*","matchCriteriaId":"D89666A1-8207-4124-A8BC-73FBEFCDCCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:loudblog:loudblog:0.7:*:*:*:*:*:*:*","matchCriteriaId":"A6584099-75B0-401F-A1EF-DA87EE961FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:loudblog:loudblog:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5CE8B803-7784-469D-967F-C61E50DCDAB3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31878","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46045","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6808","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6078","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en open.php en el componente Private Messaging (com_privmsg) para Limbo CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"pms\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:limbo_cms:com_privmsg:*:*:*:*:*:*:*:*","matchCriteriaId":"9CFD17F8-1D0D-4D8A-A56E-90A2E2F62AEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:limbo_cms:limbo_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"9C04C9AD-8C6E-44FD-9904-66C7E18B2E1B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31837","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2887","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45990","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6079","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en mlib2 anterior a v1.4.2 tienen un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"0A6997D8-C9BF-4E5F-BD99-CEEDD8CEBAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E1CF072-E421-4BAA-9B29-421B101171B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"630D2700-3AF2-4F6C-B045-41571B602B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1750F261-8A88-4C9C-A86B-ED1D6F41C408"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7606397B-A6F0-41AA-8DA2-B3ECBC7374EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E5CC4-422F-4E4C-8E4C-8EA3479D759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3B6EC79E-A937-4781-AF55-35BCB2247C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3DCF542-ABD1-448A-BD6F-F3FB4DB957C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A7F9B2-116C-4AB8-98B0-729D0AB8545E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"77B82E04-D219-4F39-BADD-CFAC50B29831"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D5226AA6-9816-46EF-A6A3-3F96889947B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F57C34FD-CBD9-4FD7-98AB-8D9070BDAEB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9339D529-EC82-4DC9-B5A3-FBB33D5244B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1967608B-F636-43C2-9C10-56A36484FF09"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576469","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39340","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=634778","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31880","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2898","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0803","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46037","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=634778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6080","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en el componente ionFiles (com_ionfiles) v4.4.2 para Joomla! perminite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"file\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"005BEE00-A27F-4F10-8465-F9C923FA6492"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/32377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31877","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46039","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6081","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en contact.php en Simple Customer v1.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplecustomer:simple_customer:1.2:*:*:*:*:*:*:*","matchCriteriaId":"73E8E518-D3E0-4526-B263-40908D3D5802"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28852","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41938","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5468","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6082","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command."},{"lang":"es","value":"Titan FTP Server v6.26 build 630 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través del comando \"SITE WHO\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:southrivertech:titan_ftp_server:6.26:*:*:*:*:*:*:*","matchCriteriaId":"FEB48367-14F1-48F5-A0A8-6AFBCEBF80BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49177","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31757","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45871","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6083","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en header.php en TXTshop beta v1.0 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de un .. (punto punto) en el parámetro \"lenguaje\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:txtshop:txtshop:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"EE6B7E6E-E481-4380-89D2-A23A3AB6937B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/497752/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31885","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46063","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6816","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497752/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6084","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en pages/download.php en Iamma Simple Gallery v1.0 y v2.0 permite a atacantes remotos ejecutar código PHP de su elección subiendo un fichero con una extensión ejecutable, entonces accediendo a él través de una petición directa al fichero del directorio de subida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:.matteoiammarrone:iamma_simple_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"18D9E13E-1F14-47A9-9746-E0D76B207EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:.matteoiammarrone:iamma_simple_gallery:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4DAFED5B-04B5-4DDE-B306-341FF81BFD2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46041","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6803","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6085","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T11:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en múltiples productos antivirus de F-Secure, incluyendo Internet Security 2006 hasta 2008, Anti-Virus 2006 hasta 2008, y otros, cuando ha sido configurado para escanear ficheros comprimidos internamente, permite a atacantes remotos ejecutar código de su elección a través de un fichero comprimido RPM  manipulado, lo que provocará un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:7.02:*:*:*:*:*:*:*","matchCriteriaId":"B028C22E-399E-4A90-9673-64E4D510273E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2006:*:*:*:*:*:*:*","matchCriteriaId":"9A6B8424-EED8-4A09-9A9C-FC5F76A9FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:*:*:*:*:*:*","matchCriteriaId":"1106DE08-DE9A-488B-8C5D-28E353CDEEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2007:*:second:*:*:*:*:*","matchCriteriaId":"62204373-31FA-4F28-AA22-D4D6F3B80F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"B47EC4EB-268A-4BB9-820D-AA3DB8D1A655"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2009:*:*:*:*:*:*:*","matchCriteriaId":"4B68C319-313F-4CA5-9B37-D9860071E763"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_citrix_servers:*:*:*:*:*:*:*:*","versionEndIncluding":"7.00","matchCriteriaId":"7C3858F1-B23F-4E45-BD23-C8262AD37F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:*:*:*:*:*:*:*:*","versionEndIncluding":"7.10","matchCriteriaId":"F4D0AD44-C784-4019-B92C-A368092C815C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:6.62:*:*:*:*:*:*:*","matchCriteriaId":"D622E750-A9AB-4EF3-BC2F-D7C3FFE8C961"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_microsoft_exchange:7.00:*:*:*:*:*:*:*","matchCriteriaId":"85EEA770-211A-4568-BB9F-9FE76D7BFCB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_mimesweeper:*:*:*:*:*:*:*:*","versionEndIncluding":"5.61","matchCriteriaId":"6B6FA161-27C8-40A5-BAF7-4907D67E3C82"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_windows_servers:*:*:*:*:*:*:*:*","versionEndIncluding":"8.00","matchCriteriaId":"FDF7866B-1F6D-49C8-8013-2A6974D42D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.10:*:*:*:*:*:*:*","matchCriteriaId":"7D9F9488-8DA8-48A9-9A11-B5E0D7AA9A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_for_workstations:7.11:*:*:*:*:*:*:*","matchCriteriaId":"8C775FD8-A757-41A6-BBC3-29BC9D2D12A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"5.54","matchCriteriaId":"1D3E6352-6BF9-4FE6-A572-07A31972A28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.30:*:*:*:*:*:*:*","matchCriteriaId":"9523BF6D-AF64-4CFE-B017-695B6BB175C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.52:*:*:*:*:*:*:*","matchCriteriaId":"E77AB622-B899-46FD-9DFA-1964B57A9458"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_client_security:5.53:*:*:*:*:*:*:*","matchCriteriaId":"F8DB2DD7-86DC-440A-B8D9-0A84034E808F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:*:*:*:*:*:*:*:*","versionEndIncluding":"5.54","matchCriteriaId":"5BD6D628-460F-4AF7-971E-401D58E48AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:5.30:*:*:*:*:*:*:*","matchCriteriaId":"66AB396E-475C-404F-BEE1-66DE9C3A7555"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus_linux_server_security:5.52:*:*:*:*:*:*:*","matchCriteriaId":"D0E6FC4F-F768-43FF-9627-DF41CD7D799C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"7.12","matchCriteriaId":"7A5AE9AF-11E3-4CC5-BEE7-6ED5CF6FCEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_client_security:7.11:*:*:*:*:*:*:*","matchCriteriaId":"5A8FC353-E7D7-4097-B206-C0ACB654E0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_home_server_security:2009:*:*:*:*:*:*:*","matchCriteriaId":"13A9FDBE-1AAD-435A-BECF-2871864EAFA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_gatekeeper_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"4664D4A0-EB01-4274-9E1D-8EA5313F935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_gatekeeper_for_windows:*:*:*:*:*:*:*:*","versionEndIncluding":"6.61","matchCriteriaId":"C73ADB10-61D7-46E9-B293-1C798E297A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:7.02:*:*:*:*:*:*:*","matchCriteriaId":"89DC5D86-0C4A-4F94-83A2-DB21B868ACCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C788A5AB-C847-476C-9767-C6711F2D4EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"3972C7F1-8B78-4A5D-8A75-C6CA01E997DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2007:*:second:*:*:*:*:*","matchCriteriaId":"94858828-3626-4654-AB6A-597A49C79284"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"08ED9945-DC9F-4F4F-B2EB-B63986BCC7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2009:*:*:*:*:*:*:*","matchCriteriaId":"D77467E5-A143-4720-93EE-29B399417065"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_linux_security:*:*:*:*:*:*:*:*","versionEndIncluding":"7.01","matchCriteriaId":"3F6ED823-E3F3-4444-86B5-BBD6D711B5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.4","matchCriteriaId":"7A5B1FA4-33A1-4EAD-A20F-C9A4AD64939C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_messaging_security_gateway:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"25DB325A-39E6-4938-9761-D8DCD5A57C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:*:*:*:*:*:*:*:*","versionEndIncluding":"3.10","matchCriteriaId":"5A2E6D2C-5520-41DE-AF1D-7E47F9A99CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_business:3.00:*:*:*:*:*:*:*","matchCriteriaId":"6123A21D-BBB4-48D8-9701-7BFB637628C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:*:*:*:*:*:*:*:*","versionEndIncluding":"8.00","matchCriteriaId":"C339068C-F74F-4B4B-AD15-09457CC85458"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:5.00:*:*:*:*:*:*:*","matchCriteriaId":"F11E5127-4DC8-48A4-9AF5-1C148B71C7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:6.00:*:*:*:*:*:*:*","matchCriteriaId":"6FB0D1BB-B119-4996-859A-39348AEF36B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_protection_service_for_consumers:7.00:*:*:*:*:*:*:*","matchCriteriaId":"721447B1-F577-48AB-A312-34306C485866"}]}]}],"references":[{"url":"http://secunia.com/advisories/32352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2008-3.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31846","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021073","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2874","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2008-3.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6086","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en album.php en Camera Life v2.6.2b4 permite a atacantes remotos ejecutar comandos SQL de su elección a através del parámetro \"id\", un vector diferente que CVE-2008-3355."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:camera_life:camera_life:2.6.2b4:*:*:*:*:*:*:*","matchCriteriaId":"8A6AC95D-6758-4AD6-8399-785E33D9EEDB"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=70910&release_id=643552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31689","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45803","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6710","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=70910&release_id=643552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6087","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en topic.php en Camera Life v2.6.2b4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parametro \"name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:camera_life:camera_life:2.6.2b4:*:*:*:*:*:*:*","matchCriteriaId":"8A6AC95D-6758-4AD6-8399-785E33D9EEDB"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=70910&release_id=643552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31689","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45805","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6710","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=70910&release_id=643552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6088","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tordetails action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Joomtracker (com_joomtracker) v1.01 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción tordetails en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomtracker:com_joomtracker:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F666F97E-0730-4642-A50C-6C1657BEC36E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31676","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45798","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6089","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a download action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en main.php en ScriptsEz Easy Image Downloader permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"id\" en una acción download."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:easy_image_downloader:-:*:*:*:*:*:*:*","matchCriteriaId":"E79A30DA-1F67-49F4-82C5-606853200D66"}]}]}],"references":[{"url":"http://secunia.com/advisories/32210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31695","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45795","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6715","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6090","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. (dot dot) in the dir parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en members.php en ScriptsEz Mini Hosting Panel permite a atacantes remotos leer ficheros locales de su elección a través de .. (punto punto) en el parámetro \"dir\" en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:mini_hosting_panel:-:*:*:*:*:*:*:*","matchCriteriaId":"661298E2-EAE5-4E93-AC6C-AE5F357AA312"}]}]}],"references":[{"url":"http://secunia.com/advisories/32212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31701","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45800","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6091","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en plugins.php en BMForum v5.6, cuando \"magic_quotes_gpc\" están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"tagname\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmforum:bmforum:5.6:*:*:*:*:*:*:*","matchCriteriaId":"3FAEE45F-59D5-467D-A5B6-08A693970995"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31522","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45611","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6642","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6092","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an admin=ja cookie."},{"lang":"es","value":"Phpscripts Ranking Script permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo enviando una cookie administrativa admin=ja."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscripts:ranking-script:-:*:*:*:*:*:*:*","matchCriteriaId":"94779DB2-6286-4CCC-A357-05CB1501BAD8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31527","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45604","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6649","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6093","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) file_id parameter in a detailansicht action and the (2) kategorie parameter in a kategorien action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Noname CMS v1.0, cuando \"magic_quotes_gpc\" está deshabilitada, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetro (1) \"file_id\" en una acción detailansicht y el (2) \"kategorie\" en una acción  kategorien."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noname-cms:noname_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"42D4E5DD-DA20-4A43-9F42-036AF22276CB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45612","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6644","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6094","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en user.do de Celoxis Technologies Celoxis; permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro ni.smessage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:celoxis:celoxis:-:*:*:*:*:*:*:*","matchCriteriaId":"9F74F0A4-516C-48D9-92AB-9AA289B4164E"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064814.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32081","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31514","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45595","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064814.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6095","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo surveillanceView.htm en OpenNMS v1.5.94 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro viewName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opennms:opennms:1.5.94:*:*:*:*:*:*:*","matchCriteriaId":"A2FB87DC-F1A5-416E-A4BD-961A3AB7A26B"}]}]}],"references":[{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2760","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32101","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opennms.org/documentation/ReleaseNotesUnStable.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45616","source":"cve@mitre.org"},{"url":"http://bugzilla.opennms.org/show_bug.cgi?id=2760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opennms.org/documentation/ReleaseNotesUnStable.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6096","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the (1) web interface login page or the (2) telnet login page."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Juniper NetScreen ScreenOS anteriores a v5.4r10, v6.0r6, y v6.1r2, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro nombre de usuario en (1) página de autenticación del interfase web o (2) la página de autenticación telnet.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:netscreen_screenos:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"21C730C8-D55E-4DEF-9130-1B3167AFEE7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.0r9.0","matchCriteriaId":"22455E6B-6FA9-47F6-89FD-797701570AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E580BC35-89F2-4083-A6D9-F90FAB3C7685"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F88A8C0-68F8-42E5-9BCE-DEE19D24A654"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F3159CA4-0944-4419-9B60-E93269710377"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2F43896A-2EF6-4069-8B81-815E4C232C0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*","matchCriteriaId":"6A7DFAB9-4D4D-4179-9DC4-F654D6E2DAB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*","matchCriteriaId":"26EC0CE2-5A5C-44ED-A423-CC20B7FFE22F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*","matchCriteriaId":"E2BD48EE-C23B-412C-895D-F58CD81FC673"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*","matchCriteriaId":"D7A6CA51-F121-44F7-80D1-CF38261D299C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*","matchCriteriaId":"B5064E9A-677E-418E-91A7-2DB686B662DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r6:*:*:*:*:*:*:*","matchCriteriaId":"DB00325B-29C6-41DA-9274-C9B4C54BC53E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r7:*:*:*:*:*:*:*","matchCriteriaId":"8DF67517-638C-4D57-8402-F336A74C4BB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r8:*:*:*:*:*:*:*","matchCriteriaId":"07AC301B-0487-4FDB-B1F8-B225099B96FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r9:*:*:*:*:*:*:*","matchCriteriaId":"A7CE0BC3-6B59-4EAB-A2BD-CF73B3BD415F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r10:*:*:*:*:*:*:*","matchCriteriaId":"B9B65997-2AB7-42D1-A1D9-E999A33366CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r11:*:*:*:*:*:*:*","matchCriteriaId":"BB3F1262-141B-48E0-8EAC-97B043EBD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r12:*:*:*:*:*:*:*","matchCriteriaId":"214DA9E7-E8E5-4579-86E8-A5A8BC887860"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8758A9CA-2F2D-4557-A088-36930CF3B850"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1CE7F646-B716-47D7-84E8-CA875A85C983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*","matchCriteriaId":"AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*","matchCriteriaId":"2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*","matchCriteriaId":"B1648D07-823B-4BF9-87EC-DB34797B5B5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"28EB52A7-E8EC-46AA-A3F5-81BFA01666D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*","matchCriteriaId":"A25881AB-69D0-46E5-A502-C65933A457B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*","matchCriteriaId":"B14314AE-812D-4654-B6CE-43917A1F0542"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*","matchCriteriaId":"20F7E636-40E0-45CC-A39E-C8BDF9CFBE6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*","matchCriteriaId":"463EC9BA-B241-45D6-AB89-53EB8156E40F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"179C18B1-3731-4DBC-A942-D810671401BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*","matchCriteriaId":"8AA52D22-A0D6-413A-9F49-0452356D2BE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r3:*:*:*:*:*:*:*","matchCriteriaId":"02BF2DCD-4F61-4FA2-B82B-FB9DEB33054F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r4:*:*:*:*:*:*:*","matchCriteriaId":"1C844B2C-26BB-460D-A36E-B74F45169F46"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r5:*:*:*:*:*:*:*","matchCriteriaId":"93F618F5-E695-41BA-BFDB-E63A9A422F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r6:*:*:*:*:*:*:*","matchCriteriaId":"31811D82-B28F-49CD-8C86-A4DE7CD95F31"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r7:*:*:*:*:*:*:*","matchCriteriaId":"56D1957D-9F30-4D66-BA14-8015E260C076"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9FCB548-2488-4EBC-AA21-4A57F5F87E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A4C0FC0-AB52-498B-84AE-DF2C380B079D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r1:*:*:*:*:*:*:*","matchCriteriaId":"6D71F4A5-7380-4E0E-9B81-7CCBECA3EFF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r1.1:*:*:*:*:*:*:*","matchCriteriaId":"0D99A8DF-C4E2-4415-84F9-27F0E510F53B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r2:*:*:*:*:*:*:*","matchCriteriaId":"981D2274-9686-4F6F-83B1-F4D0DA909983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r3:*:*:*:*:*:*:*","matchCriteriaId":"A5CD9C77-891A-4E0D-9D5D-214466699044"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r4:*:*:*:*:*:*:*","matchCriteriaId":"F27C7E28-915C-4ECC-A9BC-779F70905614"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r5:*:*:*:*:*:*:*","matchCriteriaId":"47206DFC-7840-4CB8-8ED4-2212C287B4DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r6:*:*:*:*:*:*:*","matchCriteriaId":"A46904E1-F2E5-45BA-8945-4FB3EF34D299"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r7:*:*:*:*:*:*:*","matchCriteriaId":"45551432-C02B-426D-89DC-16573A7C8CD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r8:*:*:*:*:*:*:*","matchCriteriaId":"CBCFE4A9-9018-4F21-8BB4-D12AD0C33690"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5BFC9DEB-00D5-4FC9-A608-1F7364FF21F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r1:*:*:*:*:*:*:*","matchCriteriaId":"EDBA6417-9C4C-41D9-91C7-96C255EB2298"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r2:*:*:*:*:*:*:*","matchCriteriaId":"F7C65E89-186B-4D14-8A40-58B780731DF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r3:*:*:*:*:*:*:*","matchCriteriaId":"26637853-7036-434E-A9AC-AAC88D84D826"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r4:*:*:*:*:*:*:*","matchCriteriaId":"5A890FC9-CF8B-413A-A580-2F59A42D1744"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r5:*:*:*:*:*:*:*","matchCriteriaId":"F555CCA2-95D0-4D11-A182-5A00A03403D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r6:*:*:*:*:*:*:*","matchCriteriaId":"A4B50AC2-39DE-4446-A9ED-0627C4A9DC21"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r7:*:*:*:*:*:*:*","matchCriteriaId":"F01ED64F-5617-412D-807D-7FAF0E45172F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r8:*:*:*:*:*:*:*","matchCriteriaId":"50B215E3-FDB1-43C6-9A7E-A98F381CB311"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r9:*:*:*:*:*:*:*","matchCriteriaId":"058331CE-8DCF-4B8D-83F5-F23D935D9931"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r10:*:*:*:*:*:*:*","matchCriteriaId":"98D3D6B3-7BB7-40AC-8FB3-F8362DA36047"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r11:*:*:*:*:*:*:*","matchCriteriaId":"7C2E0233-3161-4B45-9EB2-D46BE76E1520"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r12:*:*:*:*:*:*:*","matchCriteriaId":"12B61290-20EC-4D3C-A7BF-85545F5BA5BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"26958BB3-1484-42EC-AC3A-33A748B377F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:dial:*:*:*:*:*","matchCriteriaId":"6AB0B6EE-BEDE-46AD-859E-9601297B0217"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:dial2:*:*:*:*:*","matchCriteriaId":"6824A137-79B1-4473-A333-90BA7AF25EC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r1:*:*:*:*:*:*:*","matchCriteriaId":"E9E29D5B-872A-4CD5-9A44-EBFA5A7C7554"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r2:*:*:*:*:*:*:*","matchCriteriaId":"BE3851B7-72BC-4DDF-A718-69068128CA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r3:*:*:*:*:*:*:*","matchCriteriaId":"19A6D877-DF7D-4E9B-8855-2ACF97C5FC29"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r4:*:*:*:*:*:*:*","matchCriteriaId":"54FBDD05-CAA6-4034-8C2D-94E965BE2132"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r5:*:*:*:*:*:*:*","matchCriteriaId":"7BD1CFF3-3211-43E2-858C-37142EE54490"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r6:*:*:*:*:*:*:*","matchCriteriaId":"9BC0306C-FDDD-4B5F-B371-17CA2231C63A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r7:*:*:*:*:*:*:*","matchCriteriaId":"63E607F4-E348-4385-9C2C-558BB0402585"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r8:*:*:*:*:*:*:*","matchCriteriaId":"35CA445F-428A-4EDB-A18A-5E626D0E04BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r9:*:*:*:*:*:*:*","matchCriteriaId":"9E8885D9-20A0-443D-9650-912F360C9B14"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r10:*:*:*:*:*:*:*","matchCriteriaId":"4FD70CC4-334A-4734-97DE-C31A6C2014AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r11:*:*:*:*:*:*:*","matchCriteriaId":"AC456F90-05EB-4C88-9650-ED71A35A80C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r12:*:*:*:*:*:*:*","matchCriteriaId":"FAEA92AE-A047-4A20-A209-B9CAC646BFC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78FF0914-F907-41F4-9F2D-6ECD601C73C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"48518416-3F00-4174-A0EF-57E5A614F8A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r2:*:*:*:*:*:*:*","matchCriteriaId":"ACCD6F2D-642E-407E-A16D-73B97F709431"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r3:*:*:*:*:*:*:*","matchCriteriaId":"438438F8-C7C3-427A-B7AA-1E7F8DA5C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r4:*:*:*:*:*:*:*","matchCriteriaId":"ED08E19A-67ED-47F9-B40F-B8CFF496AF7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r5:*:*:*:*:*:*:*","matchCriteriaId":"FB9021FD-198B-4D7D-BAF3-D83EC3D64EFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r6:*:*:*:*:*:*:*","matchCriteriaId":"01E861C0-AF82-4F7C-A515-005083D7D699"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r7:*:*:*:*:*:*:*","matchCriteriaId":"38B7AEE2-BAA4-4FDA-A627-F5A7370D2C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r8:*:*:*:*:*:*:*","matchCriteriaId":"3BCB5149-8C43-42A2-A9B2-541802FBE5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r9:*:*:*:*:*:*:*","matchCriteriaId":"2C3A3552-2D77-494E-902E-9529AA2074D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r10:*:*:*:*:*:*:*","matchCriteriaId":"BD90D085-60F7-4B3F-8C82-B9F362EFFB89"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"627A41F5-BE3C-41AD-B455-0D73BE5CA010"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7D41144E-9F64-4919-87DA-09092AA2030A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r1:*:*:*:*:*:*:*","matchCriteriaId":"F85BBA70-D185-4A84-8D66-2D3ACE336C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r2:*:*:*:*:*:*:*","matchCriteriaId":"D0F6E761-1941-4B9F-98DC-1EED40B851A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r3:*:*:*:*:*:*:*","matchCriteriaId":"3A3720A8-B042-4366-A4F2-2262CDD0CAF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r4:*:*:*:*:*:*:*","matchCriteriaId":"66AEC6EE-F483-4156-91DB-E939B45D09E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r5:*:*:*:*:*:*:*","matchCriteriaId":"EA33B84C-73DD-4074-985E-CF95A3F0468D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r6:*:*:*:*:*:*:*","matchCriteriaId":"4D29B7C5-643E-4339-B13A-9134DDE1AE6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r7:*:*:*:*:*:*:*","matchCriteriaId":"FEF33673-F050-4D3F-8078-584D3B740529"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r8:*:*:*:*:*:*:*","matchCriteriaId":"0F7D82C7-866C-4279-8675-1F9138A4AB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r9:*:*:*:*:*:*:*","matchCriteriaId":"02F22245-4C40-4500-9C17-778C1856BBD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4F4B1021-40CB-4A11-9650-F1BDBD6943D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r1:*:*:*:*:*:*:*","matchCriteriaId":"11E6EF4D-86A1-4288-926E-8CF4FE02BDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r2:*:*:*:*:*:*:*","matchCriteriaId":"4B522236-0FBC-4B03-8DA3-95130FD3B6E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r3:*:*:*:*:*:*:*","matchCriteriaId":"9F2E3C90-1F2F-4CCF-98CB-F8F568BAA65A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r4:*:*:*:*:*:*:*","matchCriteriaId":"ECDA2644-4771-450E-8798-120C565EE803"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r5:*:*:*:*:*:*:*","matchCriteriaId":"495D80E7-AA96-4DBC-A6D9-47004D3D9D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r6:*:*:*:*:*:*:*","matchCriteriaId":"F1729899-3CDC-4A04-BE91-863B5751B55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r7:*:*:*:*:*:*:*","matchCriteriaId":"4AFF3E46-FAAF-4E06-B19F-12D0C9F17A3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r8:*:*:*:*:*:*:*","matchCriteriaId":"F0EC1E3B-89A5-4210-86F0-B2C9C3FEF934"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r9:*:*:*:*:*:*:*","matchCriteriaId":"A389EA30-D4BC-407B-9961-4ABEDF6733BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r10:*:*:*:*:*:*:*","matchCriteriaId":"D16A0E5A-8CA3-42CC-AE45-E349FA4EC3C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0r11:*:*:*:*:*:*:*","matchCriteriaId":"F22AE889-F918-45C7-B809-FDB314D54270"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19172BCC-BFF0-4031-8AFE-B63422731B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.1.0r1:*:*:*:*:*:*:*","matchCriteriaId":"A6D61988-689E-44D3-8652-B434359068D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.1.0r2:*:*:*:*:*:*:*","matchCriteriaId":"F7B87BFF-30AE-4E44-AAB8-319418580D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.1.0r3:*:*:*:*:*:*:*","matchCriteriaId":"1B4F94EF-318A-41B6-A576-F97107A6419C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.1.0r4:*:*:*:*:*:*:*","matchCriteriaId":"11C66AB2-DE61-4B80-B438-53805EF62BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"98471F46-A271-4B0A-89A9-12D544474393"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.2.0r1:*:*:*:*:*:*:*","matchCriteriaId":"1A5724A7-933D-47D8-B8F8-0CB62EECB7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.2.0r2:*:*:*:*:*:*:*","matchCriteriaId":"33060767-0F2D-40A4-AA94-81006A57BBFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.2.0r3:*:*:*:*:*:*:*","matchCriteriaId":"AEFDF650-89C8-44DC-80E1-6D8F5CF5568F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"29D5A3D5-15AF-4530-AF5D-1D310DCEC711"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r1:*:*:*:*:*:*:*","matchCriteriaId":"226355D7-D2C5-4A76-B48C-EC125224BD6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r2:*:*:*:*:*:*:*","matchCriteriaId":"CA229FDB-B699-489E-9BE0-834BDEBD60D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r3:*:*:*:*:*:*:*","matchCriteriaId":"38C10C31-58EF-424A-8D19-2514C9B0BE8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r4:*:*:*:*:*:*:*","matchCriteriaId":"28AF5FAA-6A71-479F-9B43-4697C9F9D6B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r5:*:*:*:*:*:*:*","matchCriteriaId":"1D9D8881-13BD-4996-ABA7-9D2B5039536F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r6:*:*:*:*:*:*:*","matchCriteriaId":"26CC22C6-0529-4751-AA96-019D08EB4E96"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r7:*:*:*:*:*:*:*","matchCriteriaId":"85C53FA0-1908-4184-B96A-C90E78ADAE8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r8:*:*:*:*:*:*:*","matchCriteriaId":"5CA85126-F442-4453-B1FA-67FA44310562"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r9:*:*:*:*:*:*:*","matchCriteriaId":"95BC2FAA-960E-4338-A603-DD4E40346EDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.3.0r10:*:*:*:*:*:*:*","matchCriteriaId":"9182E415-88C5-4E03-B909-C0F6474E377B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"12496D16-A004-4CFB-AF81-B70AB0EE9053"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r1:*:*:*:*:*:*:*","matchCriteriaId":"78D7F1E6-D876-4A12-A776-C4B35F0DCEB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r2:*:*:*:*:*:*:*","matchCriteriaId":"6D24D89F-A056-4246-854D-09AD8F68EF0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r3:*:*:*:*:*:*:*","matchCriteriaId":"3FAFB4F0-DDF6-4B1A-B3E9-A8D279A2208E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r4:*:*:*:*:*:*:*","matchCriteriaId":"E0F0B37B-EFB4-4E28-8506-8E5174A756F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r5:*:*:*:*:*:*:*","matchCriteriaId":"EA7AAD75-2BA1-4FEA-BC3D-C722BF5B0BEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r6:*:*:*:*:*:*:*","matchCriteriaId":"E7C21816-A179-4B02-A9C4-C2DDF4CC80C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r7:*:*:*:*:*:*:*","matchCriteriaId":"A948870F-8F42-4DDB-A5BA-2D8107C11E78"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r8:*:*:*:*:*:*:*","matchCriteriaId":"88440D31-ECF0-490D-94E3-197DBDF482DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.4.0r8a:*:*:*:*:*:*:*","matchCriteriaId":"91539711-3E94-43D9-8ACE-9F201E68FA85"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:6.0.0r6:*:*:*:*:*:*:*","matchCriteriaId":"8EB4EFAC-52A9-4083-91AE-93CB2197C090"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:6.1.0r2:*:*:*:*:*:*:*","matchCriteriaId":"9DDEBDFC-169C-416E-8FFB-F0E142F1760B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32078","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.layereddefense.com/netscreen01oct.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31528","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.layereddefense.com/netscreen01oct.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6097","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSearch, (2) revNum parameter to index.php/Edit/Main/Home, (3) to parameter to index.php/Special/Main/WhatLinksHere, (4) user parameter to index.php/Special/Main/UserEdits, and (5) the PATH_INFO to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Ejecución de secuencias de comandos en sitios cruzados (XSS) en versiones de WikyBlog anteriores a la 1.7.1 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de  (1) el parámetro key en index.php/Special/Main/keywordSearch, (2) el parámetro revNum en index.php/Edit/Main/Home, (3) el parámetro \"to\" en index.php/Special/Main/ Whatlinkshere, (4) el parámetro user en index.php/Special/Main/UserEdits, y (5) el PATH_INFO a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"D04F48C9-4B9E-4B80-899F-A2D44E5FDC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C3ECE01A-BE5A-4F61-BC3C-1158962CE17F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55323DFD-C2C9-4DDB-A3F4-BE8AD7701943"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E3C9BCB-A3EA-471B-8F3B-21BA20E79472"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7E4529E2-3488-47B9-8338-985E4FCF0285"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B05EB70D-BA77-437B-889D-CA888F68D0B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"02D8B140-9B3D-4F5B-9269-4E95E8A661D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A5C771A7-CFE9-4217-B2C9-D36F404D9A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"752B0B24-B3F1-4FB1-A2BA-1A02259CFEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6527EBA1-3512-466C-8F7F-2007042CFB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"2BE184FE-3953-4678-A333-AB2C2F2663E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2630268C-90E8-4D4E-B239-662278E32F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"676B6476-E346-4FE3-AAB9-35BA6C244199"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6F78D56B-271E-4FFF-899E-3291FC1B8AB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"37B5CFD7-41A0-4992-9469-48BAB87C83A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"EFA9DC06-3802-4FA6-84A8-C83CAA620C82"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"B429CFF9-2704-4702-8434-745BB7445811"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C8E22EBC-4644-4E00-BAE3-B6F9E8477B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"9BFFF2DD-2494-483B-BAC6-4D696FE37ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"12DB80E7-F1B3-41DE-AE1D-931F6AEAED7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"E7F71EFC-47BF-4A4C-8419-DB44C7499D0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7D1A45A0-5D0D-4E69-ADEC-BA2AC9CC7B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8DA3010A-78B6-484D-BBBB-89332E54568B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7EC3068E-CCC6-46D0-A0FA-679A47D592D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C1F1DDF8-36DE-43DA-9DE7-CFFB1B4C5551"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3B35C594-F4C5-47D3-9CAC-C4DBCD9A245F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B3C21541-E9D1-4B10-AA31-A8BA4908489A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3E7689FF-3EFB-44B6-AD58-973C21B267D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"492D26A7-55CB-4B6E-9107-E0279F654B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"20EE99B5-1F5C-4047-BCF3-7D55C0F5C88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3CC730AE-B860-4418-97DF-B3351BA64CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"44036958-527D-4467-8B3B-28CC8CB1A10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"47D3DC31-998D-4629-B9DC-1BD37048D6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F6D0756-EB04-439D-86D8-911E3F27427F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0DFEA657-B626-42C5-ACBD-6922C03DBD7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"CF52AF54-2473-4FC7-A3C1-E1E67126FAEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A25D2E6E-E303-404D-A2B1-6889DE80D502"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A112CE0D-384C-4506-8A8B-08445750104F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"93A1A93B-2BA9-467C-9E5A-2949317CD38F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDA17E9-67C3-4371-AE81-FCCD4E8682E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4B5B5A43-40D1-44C3-B57C-B3295EAB3898"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"86E72DEB-9F14-41E1-8801-160E28502C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6121782B-E7C8-4168-853A-9E49BB8B9979"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6b1:*:*:*:*:*:*:*","matchCriteriaId":"61410C5D-D11B-4621-BAB8-DE355ACE6013"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6b2:*:*:*:*:*:*:*","matchCriteriaId":"4D10EE34-EFCC-4528-B5C1-D52702811C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.6b3:*:*:*:*:*:*:*","matchCriteriaId":"328D3E15-DB75-4DAE-A6AB-7AA6C6B1596B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"5324085B-B7C7-4BA3-938A-55DD46325D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"E9EC4D65-64F9-4D4A-B91A-1B515187D6D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"2EC805C2-DC0C-4D94-934D-669F6DE5DCD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F55EB18-8C17-4574-84A8-38B805215815"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1FB41BAF-538D-44F2-A559-45DF30C4CCE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7.1:rc2:*:*:*:*:*:*","matchCriteriaId":"373446A9-396D-47F7-96F3-7C863D34A60B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F3B20CEF-DD7E-423B-B235-BFA55D9C495E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7.1b1:*:*:*:*:*:*:*","matchCriteriaId":"ABEF0F19-3916-42C5-A0B4-CEE00B7E79C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7.1b2:*:*:*:*:*:*:*","matchCriteriaId":"AE7B9500-395D-4319-8ADD-91269F9D7BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7b1:*:*:*:*:*:*:*","matchCriteriaId":"D6A9B957-68BD-4E9E-A872-8B4B436F8E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7b2:*:*:*:*:*:*:*","matchCriteriaId":"C5E5F23C-FB66-400D-94E5-944281FA6993"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikyblog:wikyblog:1.7b3:*:*:*:*:*:*:*","matchCriteriaId":"BE947FA0-BDB6-46C6-8226-CD8D47D117E6"}]}]}],"references":[{"url":"http://osvdb.org/48790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=148518&release_id=647444","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-wikyblog.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31525","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45603","source":"cve@mitre.org"},{"url":"http://osvdb.org/48790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=148518&release_id=647444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-wikyblog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6098","sourceIdentifier":"secalert@redhat.com","published":"2009-02-09T18:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to \"approve.\""},{"lang":"es","value":"Bugzilla v3.2 anterior a v3.2 RC2, v3.0 anterior a v3.0.6, v2.22 anterior a v2.22.6, v2.20 anterior a v2.20.7, y otras versiones posteriores a  v2.17.4, permite a usuarios autenticados remotamente evitar la moderación para aprobar o denegar los \"quips\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*","matchCriteriaId":"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*","matchCriteriaId":"E9130B6B-764B-4B83-A2BD-E16013682875"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*","matchCriteriaId":"7C7A5111-8729-48DF-B308-7A489BEFA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*","matchCriteriaId":"15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*","matchCriteriaId":"725BD7BE-1769-4032-ADA8-9ED15528C770"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A749C7AB-6F60-469C-BD95-759205DDA345"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*","matchCriteriaId":"2053CFB4-602E-4141-BB3D-A440E2A31D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9EC243-3E25-4234-A88A-FDD5B594BFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*","matchCriteriaId":"D569A750-C649-4D40-89AB-D29773E66F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*","matchCriteriaId":"95B69FA8-1182-46F1-952F-4610288ED409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*","matchCriteriaId":"02846865-D124-4C72-85C8-59A7C6F43E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*","matchCriteriaId":"99B59422-ED6E-4F82-8D0C-091058D1C438"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*","matchCriteriaId":"F658844A-6253-4A18-8A5D-1E818BE7A367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.3:*:*:*:*:*:*:*","matchCriteriaId":"4753AB35-B95C-4544-A874-5E6D83929AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C4880D54-CA42-4CCA-B01E-2C125002BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"45C36666-518F-4956-816A-940930425955"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"5E608E27-D43C-4F34-952D-2F49A71B1E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"154EA18F-534C-4095-837D-BB9865D25F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"585F05F2-B294-4218-9209-C487B4D2994B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3246890-8D66-474F-AC9C-BC556426467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7090332F-4CC2-4ADD-AEEC-75238BCA55CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F960BE59-05B1-4438-A854-279612E13A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"14B5A433-526F-436E-9FCD-B71E661180FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF288A74-070E-4EB4-BB92-7D4D41635DD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32501","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34361","source":"secalert@redhat.com"},{"url":"http://www.bugzilla.org/security/2.20.6/","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/32178","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=449931","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46424","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.20.6/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=449931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6099","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_op parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de fichero PHP en index.php en RPortal v1.1 y anteriores permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro \"file_op\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rportal:rportal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"A7A05CDC-9AAD-4CC1-B77D-E6BCC68E6227"}]}]}],"references":[{"url":"http://secunia.com/advisories/32075","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496891/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31523","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45618","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496891/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6100","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to (a) RSS1.php and (b) RSS2.php in misc/; and the (2) SubID parameter to (c) misc/RSS5.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Discussion Forums 2k v3.3, cuando \"Magic_quotes_gpc están desactivadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) CatID a (a) RSS1.php y (b) RSS2.php en misc/; y el (2) SubID a (c) misc/RSS5.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:discussion_forum_2k:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D79DA093-F05B-4753-934F-A6B6C830F4B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31518","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45610","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6643","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6101","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary SQL commands via the targetid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en click.php en Adult Banner Exchange Website, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"targetid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonescripts:adult_banner_exchange_website:-:*:*:*:*:*:*:*","matchCriteriaId":"F9F911A0-96D2-46A9-B085-AF378A2E8162"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/abe-sql.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31510","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45573","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52328","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6909","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9387","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/abe-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6102","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ratelink.php in Link Trader Script permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"lnkid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonescripts:link_trader_script:*:*:*:*:*:*:*:*","matchCriteriaId":"B309142A-1327-46F9-B815-462393557ED8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31526","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45605","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6650","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6103","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de fichero PHP en index.php en A4Desk Event Calendar, cuando magic_quotes_gpc esta desactivado, permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro \"v\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a4desk:a4desk_flash_event_calendar:*:*:*:*:*:*:*:*","matchCriteriaId":"1D905B2C-F303-4258-9A3C-BDCF1B796518"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/a4deskphp-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32083","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31507","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45553","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/a4deskphp-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6104","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en A4Desk PHP Event Calendar permite a atacates remotos ejecutar comandos SQL de su elección a través del parámetro \"eventid\" para admin/index.php.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a4desk:a4desk_flash_event_calendar:*:*:*:*:*:*:*:*","matchCriteriaId":"1D905B2C-F303-4258-9A3C-BDCF1B796518"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/a4desk-sqldisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32083","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33835","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/a4desk-sqldisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6105","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:00:02.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en IBM Workplace for Business Controls and Reporting v2.x y IBM Workplace Web Content Management v6.x que permite a atacantes remotos inyectar secuencias de comandos web o código HTML de su elección a través de vectores de ataque desconocidos. NOTA: alguno de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:workplace_for_business_controls_and_reporting:2.0:*:*:*:*:*:*:*","matchCriteriaId":"88B251EC-E934-433B-98B1-DAB25DBACC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:workplace_web_content_management:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A570A362-8254-42DF-8589-DD12248F1848"}]}]}],"references":[{"url":"http://secunia.com/advisories/30433","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29625","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020236","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6106","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:00:07.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en IBM Workplace for Business Controls and Reporting v2.x e IBM Workplace Web Content Management v6.x; tiene un impacto desconocido y vectores de ataque remotos. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:workplace_for_business_controls_and_reporting:2.0:*:*:*:*:*:*:*","matchCriteriaId":"88B251EC-E934-433B-98B1-DAB25DBACC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:workplace_web_content_management:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A570A362-8254-42DF-8589-DD12248F1848"}]}]}],"references":[{"url":"http://secunia.com/advisories/30433","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020236","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6107","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:00:07.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c, and the (3) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.4, omit some virtual-address range (aka span) checks when the mremap MREMAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mremap calls, a related issue to CVE-2008-2137."},{"lang":"es","value":"Las funciones (1) sys32_mremap en arch/sparc64/kernel/sys_sparc32.c, (2) sparc_mmap_check en arch/sparc/kernel/sys_sparc.c, y (3) sparc64_mmap_check en arch/sparc64/kernel/sys_sparc.c, en el kernel de Linux anteriores a v2.6.25.4, omite algunas comprobaciones de rangos de direcciones virtuales (también conocido como span) cuando el bit mremap MREMAP_FIXED no esta fijado, lo que permite a usuarios locales producir una denegación de servicio (panic) a través de llamadas inespecíficas mremap, relacionado con CVE-2008-2137."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. Red Hat Enterprise Linux 2.1, 3, 4, and 5 do not ship for the SPARC architecture.","lastModified":"2009-02-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.24.4","matchCriteriaId":"3A81E219-34D1-4F28-AD7E-DC35E4AF8050"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=121071103304610&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30258","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020120","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33836","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1655/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48710","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=121071103304610&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1655/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6108","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:00:07.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en result.php en Galatolo WebManager (GWM) v1.0 lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"key\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gwm:galatolo_webmanager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54A005B3-744A-4BAE-9B3A-68A0696AC2E3"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5758","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6109","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the \"double click selector bug\"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to \"change permissions\" and the \"new UI.\""},{"lang":"es","value":"Robin Rawson-Tetley Animal Shelter Manager (ASM) anteriores a v2.2.2 no respeta los privilegios de las cuentas de usuario, lo que permite a usuarios locales evitar las restricciones de acceso previstas mediante (1)la apertura de ventanas inespecíficas, relacionado con el error \"selector doble click\"; o mediante la modificación de un (2) animal, (3) propietario, (4) perdido/encontrado, (5)notas diarias, (6) donación de propietario, o (7) registro de lista de espera, relacionado con los \"cambios de permisos\" y la \"nueva interfaz de usuario\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"E5A0E53D-7AD6-40F4-962C-7D0B765D529D"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B3C772C-E108-4336-8377-F12E96097F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0187FA02-69E5-49C6-95DB-85A827E1B517"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.11:*:*:*:*:*:*:*","matchCriteriaId":"1A5F4AB0-24CD-4AF6-A967-765918E835AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.12:*:*:*:*:*:*:*","matchCriteriaId":"58C72FBB-A860-4EE5-A3D9-68E0A1C7F789"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.20:*:*:*:*:*:*:*","matchCriteriaId":"B154ECE6-0CB4-42B8-8B4D-AC0E63490B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.22:*:*:*:*:*:*:*","matchCriteriaId":"67E1A926-8C16-489A-9D3D-B53B3BD00DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30:*:*:*:*:*:*:*","matchCriteriaId":"F1D03D82-12A9-404A-B905-5075F2A64E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.1:*:*:*:*:*:*:*","matchCriteriaId":"5A374254-A812-4EDB-A40F-5A2F2B13A0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30.2:*:*:*:*:*:*:*","matchCriteriaId":"04B39BD3-3C21-48D5-8D76-CC8E4413F219"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.30_beta:*:*:*:*:*:*:*","matchCriteriaId":"2709633D-7249-434A-B399-2A885EF5AC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.31:*:*:*:*:*:*:*","matchCriteriaId":"FB478882-0319-448E-BBCC-B05CD26138A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.32:*:*:*:*:*:*:*","matchCriteriaId":"AE3447F5-228E-46F2-BDAF-73617E649809"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.33:*:*:*:*:*:*:*","matchCriteriaId":"FD21A6AF-7DE1-450E-96A9-16BD6DD390AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.34:*:*:*:*:*:*:*","matchCriteriaId":"0E074718-259F-4A74-AEEE-4F515299D4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.35:*:*:*:*:*:*:*","matchCriteriaId":"F1C3A310-8CA2-4CAA-BF3C-0F270CD7B3F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.36:*:*:*:*:*:*:*","matchCriteriaId":"9E7AAFA3-29E1-4C80-95F1-7C837D1C6ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.37:*:*:*:*:*:*:*","matchCriteriaId":"B5F67A73-30C4-4D05-B078-3DC3DCD6B989"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.38:*:*:*:*:*:*:*","matchCriteriaId":"DCF9D5B3-542A-4A3F-822F-C5B0B137F814"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.39:*:*:*:*:*:*:*","matchCriteriaId":"B42CF675-826D-4108-A6C5-9858B69B1E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:1.40:*:*:*:*:*:*:*","matchCriteriaId":"A6B65828-3876-4173-94FA-52E3129759AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EE12865-F9F4-4232-A0AA-1FE272D475F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C2443110-53F3-4BD3-B54E-9593B8C972FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"479C9000-2206-4F23-A570-D26D01D664A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F31F320A-FF20-48C2-9DE1-C09B0DC1FCF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A14D6C86-5912-4B68-9FDB-D4B448F2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"27EA78FF-DB1C-430B-B453-20105FD3C2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D5442F6C-741C-4C31-8033-2C26867CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"2C74338C-EF04-4F9E-AB91-1650D16B8BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"6ED71A13-6477-4A08-9DE5-B135BA3E2A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F58E05A2-C443-4415-98B3-821AF04B7E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"3E1298C5-5B3B-43A0-863E-215B52716227"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BD9F86A2-A440-4762-B26F-385A5A9EEF48"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"11046732-02B9-4ABB-8CF0-8B2DEA697E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:shelter_manager:animal_shelter_manager:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CDEF7261-C6D8-429D-80D0-99D7BDF704E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/30041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42139","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6110","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T01:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php."},{"lang":"es","value":"Vulnerabilidad inespecífica en SemanticScuttle anterior a la v0.90 tiene un impacto desconocido y vectores relacionados con la validación errónea de los parámetros en profile.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:*:*:*:*:*:*:*:*","versionEndIncluding":"0.89","matchCriteriaId":"010F6A10-3E2D-4EE0-9E89-46AC1E599E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.85:*:*:*:*:*:*:*","matchCriteriaId":"81115CF0-0DDB-47DE-8B9B-34CBFB7863B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.86:*:*:*:*:*:*:*","matchCriteriaId":"62BF88B6-892F-4144-8EF3-3D1AC7B0A6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.87:*:*:*:*:*:*:*","matchCriteriaId":"999D88B3-1EF0-492A-8A80-93EC031E3766"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.88:*:*:*:*:*:*:*","matchCriteriaId":"FE3B588E-95F5-4018-B6C0-91FA16EF2FFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=640424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=640424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6111","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL commands via the note parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en blog.php en NetArt Media Vlog System v1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"note\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netart_media:vlog_system:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6D4CA4F-7EB6-474B-A6BE-9A6512EA8AFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32425","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3247","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46783","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7186","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6112","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a detail action to (1) main.php and (2) template.php in ringtones/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Ez Ringtone Manager, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"id\" en una acción \"detail\" a (1) main.php y (2) template.php en ringtones/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_ringtone_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"396DD504-3C06-4142-B018-6C90ADF18B93"}]}]}],"references":[{"url":"http://secunia.com/advisories/32767","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32431","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46791","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6113","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the (1) username and (2) profile page."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en SemanticScuttle v0.90, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de vectores no especificados, relacionado con las páginas (1) username y (2) profile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:*:*:*:*:*:*:*:*","versionEndIncluding":"0.89","matchCriteriaId":"010F6A10-3E2D-4EE0-9E89-46AC1E599E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.85:*:*:*:*:*:*:*","matchCriteriaId":"81115CF0-0DDB-47DE-8B9B-34CBFB7863B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.86:*:*:*:*:*:*:*","matchCriteriaId":"62BF88B6-892F-4144-8EF3-3D1AC7B0A6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.87:*:*:*:*:*:*:*","matchCriteriaId":"999D88B3-1EF0-492A-8A80-93EC031E3766"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.88:*:*:*:*:*:*:*","matchCriteriaId":"FE3B588E-95F5-4018-B6C0-91FA16EF2FFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=640424","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32409","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46754","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=640424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6114","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attackers to execute arbitrary SQL commands via the product parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product_details.php en el complemento Mytipper Zogo-shop  para e107, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"product\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mytipper:zogo_shop:1.15.4:*:*:*:*:*:*:*","matchCriteriaId":"348C7F00-D7B5-4D31-B2A4-C1EBA26162EF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]}]}],"references":[{"url":"http://secunia.com/advisories/32795","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32423","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46784","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7184","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6115","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action, a different vector than CVE-2008-2083."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Prozilla Hosting Index, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"deadlink\". Un vector distinto del CVE-2008-2083."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prozilla:hosting_index:-:*:*:*:*:*:*:*","matchCriteriaId":"AD234D59-FB47-475D-8A1B-CAD23D60DE0E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32427","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3242","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46795","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7195","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6116","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente EXtrovert Software Thyme (com_thyme)v1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"event\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extrosoft:com_thyme:1.0:*:*:*:*:*:*:*","matchCriteriaId":"935E0230-59EB-45E6-9A9E-3DA4E12B171C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32417","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46777","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7182","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6117","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the poll_view_id parameter in a results action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en homepage.php en PG Job Site Pro, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"poll_view_id\" en una acción results."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilotgroup:pg_job_site_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"C38DF08A-DF5B-4234-B526-658FA4F5DAE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32837","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32434","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46789","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6118","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1."},{"lang":"es","value":"win/content/upload.php en Goople CMS v1.7, permite a atacantes remotos evitar la autenticación y obtener acceso como administrados estableciendo la cookie \"loggedin\" a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goople_cms:goople_cms:1.7:*:*:*:*:*:*:*","matchCriteriaId":"BEFC5D21-3691-4D6C-A3DE-C6E68FA27388"}]}]}],"references":[{"url":"http://secunia.com/advisories/32819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32437","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46799","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6119","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote attackers to inject arbitrary PHP code into admin/userandpass.php via the (1) username and (2) password parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en gooplecms/admin/account/action/editpass.php en Goople CMS v1.7, permite a atacantes remotos inyectar código PHP de su elección en admin/userandpass.php a través de los parámetros (1)\"username\" y (2) \"password\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goople_cms:goople_cms:1.7:*:*:*:*:*:*:*","matchCriteriaId":"BEFC5D21-3691-4D6C-A3DE-C6E68FA27388"}]}]}],"references":[{"url":"http://secunia.com/advisories/32819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33848","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46800","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6120","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the comment_secure parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en profile_comments.php en SocialEngine (SE) v2.7 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"comment_secure\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"CC5320F9-263A-4024-A727-E306D684E2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BD56A40D-13BB-4241-9964-5175BE2E576F"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E23A1147-BC44-459D-A69D-6DD6DDEFB7E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:1.4:*:*:*:*:*:*:*","matchCriteriaId":"48916655-CC40-4538-B062-416DC88506D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:1.6:*:*:*:*:*:*:*","matchCriteriaId":"19F8896D-AC27-4C0D-B22C-DBB3C0D18DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:1.7:*:*:*:*:*:*:*","matchCriteriaId":"3A81D8CB-0FB8-46E9-A199-78A1FDE21D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:1.8:*:*:*:*:*:*:*","matchCriteriaId":"2520FAB0-7DA5-4BE9-AF72-BBFD2636C6FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C830CF2B-253A-49C7-B107-81503516A3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:2.0:bta_online:*:*:*:*:*:*","matchCriteriaId":"B5F3AFA5-452F-4480-A538-56DFFF9DB987"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:2.1:*:*:*:*:*:*:*","matchCriteriaId":"51F75C06-691C-4EB6-8A23-DF46FDCC7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:2.4:se:*:*:*:*:*:*","matchCriteriaId":"F1DD724C-FE53-48FD-8661-A09518E4EADF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122720734728665&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46770","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122720734728665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6121","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en SocialEngine (SE) v2.7 y anteriores, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de separación de respuesta HTTP a través de la cookie PHPSESSID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"CC5320F9-263A-4024-A727-E306D684E2DE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122720734728665&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46771","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122720734728665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6122","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a request that contains a question mark (\"?\")."},{"lang":"es","value":"El interfaz de gestión web en Netgear WGR614v9, permite a atacantes remotos provocar una denegación de servicio (Caída) a través de una petición que contiene un símbolo de cierre de interrogación (\"?\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wgr614:v8:*:*:*:*:*:*:*","matchCriteriaId":"14436BCE-55C0-445B-B86F-64ECB8A4A2C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wgr614:v9:*:*:*:*:*:*:*","matchCriteriaId":"D4A39563-6421-40A6-924B-D63C0444057D"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065619.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32290","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3174","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46602","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6123","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to \"source/destination IP address confusion.\""},{"lang":"es","value":"La función netsnmp_udp_fmtaddr (snmplib/snmpUDPDomain.c) en net-snmp v5.0.9 hasta v5.4.2, cuando usando TCP wrappers para autorización de clientes, no analiza apropiadamente reglas hosts.allow, lo que permite a los atacantes remotos evitar restricciones de accesos intencionados y ejecuta consultas SNMP, relativas a \"direcciones IP fuente/destino confusas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.9","versionEndIncluding":"5.4.2.1","matchCriteriaId":"92CC90A4-8D48-44D2-9F32-A4CAC212E16A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3-11.1:*:*:*:*:*:*:*","matchCriteriaId":"F7018930-D354-4B31-870E-D0E3CE19C8B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:9-11:*:*:*:*:*:*:*","matchCriteriaId":"170FDFDE-DADB-4CBF-9AB8-3A01C7BA94AB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=250429","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367","source":"cve@mitre.org","tags":["Product"]},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367","source":"cve@mitre.org","tags":["Product"]},{"url":"http://secunia.com/advisories/34499","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/7","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0295.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.securitytracker.com/id?1021921","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=485211","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=250429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://secunia.com/advisories/34499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securitytracker.com/id?1021921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=485211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-6124","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T01:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before 1.7.5, 1.8 before 1.8.6, and 1.9 before 1.9.2 allows remote attackers to execute arbitrary SQL commands via a crafted selected attempt."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función hotpot_delete_selected_attempts en report.php en el módulo the HotPot en Moodle v1.6 anteriores a 1.6.7, v1.7 anteriores a v1.7.5, v1.8 anteriores v1.8.6, y v1.9 anteriores a v1.9.2 permite a los atacantes ejecutar arbitrariamente comandos SQL a través de un intento seleccionado manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6","versionEndExcluding":"1.6.7","matchCriteriaId":"B069A088-482B-424F-995B-844F0B1B5102"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.7","versionEndExcluding":"1.7.5","matchCriteriaId":"1667DFC8-BB76-4DB0-A188-BB5E283CB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8","versionEndExcluding":"1.8.6","matchCriteriaId":"FDA0C31E-23A6-49BA-8E42-E1E091CE253F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.9","versionEndExcluding":"1.9.2","matchCriteriaId":"8FE959BE-2238-4651-B154-41CB8857DE89"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://cvs.moodle.org/moodle/mod/hotpot/report.php?r1=1.8.6.1&r2=1.8.6.2","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=101402","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://cvs.moodle.org/moodle/mod/hotpot/report.php?r1=1.8.6.1&r2=1.8.6.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=101402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-6125","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T01:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el interface de edición de usuario en Moodel v1.5.x, v1.6 anteriores a v1.6.6, y v1.7 anteriores a v1.7.3 que permite a los usuarios remotos autenticados  obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5","versionEndIncluding":"1.5.4","matchCriteriaId":"B02DE53F-CFAF-4968-9711-B5D9DF6E3248"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6","versionEndExcluding":"1.6.6","matchCriteriaId":"49BD31AE-8985-41C9-A9B1-B4E3AEB6726C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*","versionStartIncluding":"1.7","versionEndExcluding":"1.7.3","matchCriteriaId":"742316D8-EC38-47E8-9627-419DAE003B49"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://moodle.org/mod/forum/discuss.php?d=87971","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=87971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-6126","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to download.php and the (2) page parameter to index.php, a different vector than CVE-2008-3589."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en moziloCMS v1.10.2 y versiones anteriores permite a atacantes remotos leer ficheros de su elección al utilizar los caracteres .. (punto punto) en el parámetro (1) \"file\" en download.php y el parámetro (2) \"page\" en index.php, siendo un vector diferente que CVE-2008-3589."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.2","matchCriteriaId":"1D5DDCB8-620E-44DC-B825-EF85976E2CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D5A28C98-5441-445B-A7CB-0C8F7138740D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"61F5FDDC-518A-453E-B1AC-95ECC3989BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"94E2EBB2-FE02-484B-BEE5-8CE9BAD93887"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9495618C-29B8-4F10-B77B-C8D919AC4CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"42A75118-9B2B-45B4-B57C-6819B840B827"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"61D1F62A-FC84-45DB-886A-1FFB1848EE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D1EFC37-2184-4A84-81E0-3597294B54C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A2A82F17-9C66-4F40-96E8-B9576A365F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6:*:*:*:*:*:*:*","matchCriteriaId":"07652C42-504F-4569-8A8A-0FAB9B4E5554"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"637F8421-B65C-493B-95E4-4E0E9CF7598F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"42695686-EC6D-4973-98F1-66426FBB3BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.7:*:*:*:*:*:*:*","matchCriteriaId":"6E9FF4E4-6411-436E-B2C2-B9D1DA264519"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.8:*:*:*:*:*:*:*","matchCriteriaId":"770D73A4-E544-4CC0-9601-B7B6ACB2C287"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9:*:*:*:*:*:*:*","matchCriteriaId":"66047271-B38F-469B-8B91-4A0C16529C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3BA5E5D6-279A-408C-BCAE-F2EF73D46905"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FD6C096C-9388-4A46-8280-58B3F6C4495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1B5AD3FB-BC81-4DFE-9AF3-00263C558051"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9A6B5902-B199-4203-A385-16CDBBA63A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"362E7D45-EA25-47D8-A42C-E8CBA78C0D1B"}]}]}],"references":[{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls55","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31495","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45524","source":"cve@mitre.org"},{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6127","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en moziloCMS v1.10.2 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"page\" y (2) \"query\" en (a) index.php, los parámetros (3) \"cat\" y (4) \"file\" en download.php, el parámetro (5) \"gal\" en gallery.php, y el parámetro (6) \"URL\" en admin/login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.2","matchCriteriaId":"1D5DDCB8-620E-44DC-B825-EF85976E2CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D5A28C98-5441-445B-A7CB-0C8F7138740D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"61F5FDDC-518A-453E-B1AC-95ECC3989BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"94E2EBB2-FE02-484B-BEE5-8CE9BAD93887"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9495618C-29B8-4F10-B77B-C8D919AC4CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"42A75118-9B2B-45B4-B57C-6819B840B827"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"61D1F62A-FC84-45DB-886A-1FFB1848EE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D1EFC37-2184-4A84-81E0-3597294B54C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A2A82F17-9C66-4F40-96E8-B9576A365F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6:*:*:*:*:*:*:*","matchCriteriaId":"07652C42-504F-4569-8A8A-0FAB9B4E5554"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"637F8421-B65C-493B-95E4-4E0E9CF7598F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"42695686-EC6D-4973-98F1-66426FBB3BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.7:*:*:*:*:*:*:*","matchCriteriaId":"6E9FF4E4-6411-436E-B2C2-B9D1DA264519"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.8:*:*:*:*:*:*:*","matchCriteriaId":"770D73A4-E544-4CC0-9601-B7B6ACB2C287"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9:*:*:*:*:*:*:*","matchCriteriaId":"66047271-B38F-469B-8B91-4A0C16529C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3BA5E5D6-279A-408C-BCAE-F2EF73D46905"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FD6C096C-9388-4A46-8280-58B3F6C4495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1B5AD3FB-BC81-4DFE-9AF3-00263C558051"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9A6B5902-B199-4203-A385-16CDBBA63A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"362E7D45-EA25-47D8-A42C-E8CBA78C0D1B"}]}]}],"references":[{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls55","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31495","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45525","source":"cve@mitre.org"},{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6128","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de identificador de sesión moziloCMS v1.10.2 y versiones anteriores permite a atacantes remotos robar las sesiones web al prefijar el parámetro \"PHPSESSID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.2","matchCriteriaId":"1D5DDCB8-620E-44DC-B825-EF85976E2CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D5A28C98-5441-445B-A7CB-0C8F7138740D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"61F5FDDC-518A-453E-B1AC-95ECC3989BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"94E2EBB2-FE02-484B-BEE5-8CE9BAD93887"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9495618C-29B8-4F10-B77B-C8D919AC4CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"42A75118-9B2B-45B4-B57C-6819B840B827"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"61D1F62A-FC84-45DB-886A-1FFB1848EE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D1EFC37-2184-4A84-81E0-3597294B54C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A2A82F17-9C66-4F40-96E8-B9576A365F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6:*:*:*:*:*:*:*","matchCriteriaId":"07652C42-504F-4569-8A8A-0FAB9B4E5554"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"637F8421-B65C-493B-95E4-4E0E9CF7598F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"42695686-EC6D-4973-98F1-66426FBB3BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.7:*:*:*:*:*:*:*","matchCriteriaId":"6E9FF4E4-6411-436E-B2C2-B9D1DA264519"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.8:*:*:*:*:*:*:*","matchCriteriaId":"770D73A4-E544-4CC0-9601-B7B6ACB2C287"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9:*:*:*:*:*:*:*","matchCriteriaId":"66047271-B38F-469B-8B91-4A0C16529C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3BA5E5D6-279A-408C-BCAE-F2EF73D46905"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FD6C096C-9388-4A46-8280-58B3F6C4495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1B5AD3FB-BC81-4DFE-9AF3-00263C558051"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9A6B5902-B199-4203-A385-16CDBBA63A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"362E7D45-EA25-47D8-A42C-E8CBA78C0D1B"}]}]}],"references":[{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls55","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45526","source":"cve@mitre.org"},{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6129","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en print.php en moziloWiki v1.0.1 y versiones anteriores permite a atacantes remotos leer ficheros de su elección utilizando los caracteres .. (punto punto) en el parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"8AC5BD93-E47A-4F88-853C-24D171404F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.7:*:*:*:*:*:*:*","matchCriteriaId":"A602EEA0-013E-4E3D-A904-97632DDD2DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.8:*:*:*:*:*:*:*","matchCriteriaId":"54A8E85E-3A1C-4035-8DAE-290E3510AE9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.9:*:*:*:*:*:*:*","matchCriteriaId":"089CA3DE-0AA3-4F07-B262-84FF0724F49F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.10:*:*:*:*:*:*:*","matchCriteriaId":"43CDFD22-4C42-4AE4-BFF4-CCD2E63B2E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5296C472-7DF6-4C1C-A695-451A5DA98F42"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122278832621348&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.mozilo.de/index.php?page=Changelog","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls56","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45523","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122278832621348&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.mozilo.de/index.php?page=Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6130","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) action and (2) page parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en moziloWiki v1.0.1 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"action\" y (2) \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"8AC5BD93-E47A-4F88-853C-24D171404F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.7:*:*:*:*:*:*:*","matchCriteriaId":"A602EEA0-013E-4E3D-A904-97632DDD2DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.8:*:*:*:*:*:*:*","matchCriteriaId":"54A8E85E-3A1C-4035-8DAE-290E3510AE9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.9:*:*:*:*:*:*:*","matchCriteriaId":"089CA3DE-0AA3-4F07-B262-84FF0724F49F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.10:*:*:*:*:*:*:*","matchCriteriaId":"43CDFD22-4C42-4AE4-BFF4-CCD2E63B2E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5296C472-7DF6-4C1C-A695-451A5DA98F42"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122278832621348&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.mozilo.de/index.php?page=Changelog","source":"cve@mitre.org"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls56","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45527","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122278832621348&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.mozilo.de/index.php?page=Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6131","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."},{"lang":"es","value":"Vulnerabilidad de fijación de identificador de sesión en moziloWiki v1.0.1 y versiones anteriores permite a atacantes remotos robar sesiones web al prefijar el parámetro \"PHPSESSID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"8AC5BD93-E47A-4F88-853C-24D171404F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.7:*:*:*:*:*:*:*","matchCriteriaId":"A602EEA0-013E-4E3D-A904-97632DDD2DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.8:*:*:*:*:*:*:*","matchCriteriaId":"54A8E85E-3A1C-4035-8DAE-290E3510AE9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.9:*:*:*:*:*:*:*","matchCriteriaId":"089CA3DE-0AA3-4F07-B262-84FF0724F49F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:0.10:*:*:*:*:*:*:*","matchCriteriaId":"43CDFD22-4C42-4AE4-BFF4-CCD2E63B2E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilowiki:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5296C472-7DF6-4C1C-A695-451A5DA98F42"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122278832621348&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.mozilo.de/index.php?page=Changelog","source":"cve@mitre.org"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls56","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45528","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122278832621348&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.mozilo.de/index.php?page=Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.majorsecurity.de/index_2.php?major_rls=major_rls56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6132","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter."},{"lang":"es","value":"Vulnerabilidad de inyección en la evaluación de parámetros en reserve.php en phpScheduleIt v1.2.10 y versiones anteriores, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro \"start_date\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.10","matchCriteriaId":"3B75C18C-AE27-4EA1-8D67-999C1647DBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D449C2F-B0DC-4356-99D2-AC3F1D69B98E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"340B6312-4AB4-41AA-BA62-2BFD69B767C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"72A3FEB2-6FF3-43E7-8C80-44F3E366DF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7663D802-7547-4FE0-B5A3-D20B18ADB6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"D69ADD45-37E8-480F-8C06-3295A9BB5B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC0D9466-E7BD-4D1C-9AFA-596198A5B65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB149A8-0B97-438B-8351-91446232D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FCC62CE-E455-449C-A03E-23C97D834143"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3019FB4F-E2E1-4E4B-B537-F6E12262950B"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5D209B2F-11D9-4C66-AA9D-ABF706B436A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"82A187A7-6985-464C-B9E5-81FFB815261D"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F79B653B-9D13-4B72-83EB-E3DB806B815B"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8B218350-9512-4C0A-9BDD-3DF7CE26921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"3961BA66-151D-44CA-9E6F-7AABF3EA15CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"0CDB5CB2-19E6-4CF9-90A5-44FC4E1CC683"}]}]}],"references":[{"url":"http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=662749","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/18037","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/6646","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48797","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31520","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45617","source":"cve@mitre.org"},{"url":"http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=662749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/18037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/6646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6133","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T18:30:04.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3942."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en arsaprint.php en Full PHP Emlak Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\", siendo un vector diferente a CVE-2008-3942."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ozsari:full_php_emlak_script:*:*:*:*:*:*:*:*","matchCriteriaId":"4CBB02E2-D30F-4C10-BA0F-81B796EE0D42"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45643","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6659","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6134","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en EveryBlog v5.x y v6.x, un modulo para Drupal, permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:5.0:*:*:*:*:*:*:*","matchCriteriaId":"082CA308-3388-4BCC-8C76-320D123C0EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9642D127-679D-4BC3-B4BD-865C7BC0BAD5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/318746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45756","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6135","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en EveryBlog v5.x y v6.x, un modulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:5.0:*:*:*:*:*:*:*","matchCriteriaId":"082CA308-3388-4BCC-8C76-320D123C0EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9642D127-679D-4BC3-B4BD-865C7BC0BAD5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/318746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45757","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6136","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en EveryBlog v5.x y v6.x, un modulo para Drupal, permite a atacantes remotos obtener privilegios de otro usuario o de administrador mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:5.0:*:*:*:*:*:*:*","matchCriteriaId":"082CA308-3388-4BCC-8C76-320D123C0EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9642D127-679D-4BC3-B4BD-865C7BC0BAD5"}]}]}],"references":[{"url":"http://drupal.org/node/318746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45760","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6137","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors."},{"lang":"es","value":"EveryBlog v5.x y v6.x, un modulo para Drupal, permite a atacantes remotos saltarse las restricciones de acceso mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:5.0:*:*:*:*:*:*:*","matchCriteriaId":"082CA308-3388-4BCC-8C76-320D123C0EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:everyblog:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9642D127-679D-4BC3-B4BD-865C7BC0BAD5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/318746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45759","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6138","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en adminhead.php en WebBiscuits Modules Controller v1.1 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro \"path[docroot]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbiscuits:modules_controller:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"ABB66EDC-42D7-4C82-8591-67D4CABB21AC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45771","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6139","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en faqsupport/wce.download.php en WebBiscuits Modules Controller v1.1 permite a atacantes remotos leer ficheros de su elección utilizando los caracteres .. (punto punto) en el parámetro \"download\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbiscuits:modules_controller:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C9027ED6-8B3F-4BF4-B8F3-CBFCF9252822"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45772","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6140","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X Desktop Edition 2.1.0.78 allows remote attackers to cause a denial of service (crash) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el protocolo de inicio de sesión (SIP) implementado en Avaya one-X Desktop Edition v2.1.0.78 permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:one-x:2.1.0.78:-:desktop:*:*:*:*:*","matchCriteriaId":"4AEEA3C1-6AAE-4182-90D5-9B7B3E12D303"}]}]}],"references":[{"url":"http://secunia.com/advisories/32205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-370.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31636","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=124","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45748","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-370.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6141","sourceIdentifier":"cve@mitre.org","published":"2009-02-14T02:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large amount of H.323 data."},{"lang":"es","value":"Vulnerabilidad no especificada en Avaya IP Softphone v6.0 SP4 y v6.01.85 permite a atacantes remotos provocar una denegación de servicio (caída) al utilizar una gran cantidad de datos H.323."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip_soft_phone:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"B06EE4F1-3E4D-424B-AA97-C50ED58CCB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip_soft_phone:6.01.85:*:*:*:*:*:*:*","matchCriteriaId":"37FC366B-C21C-4A39-955C-4A9749B66FC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-363.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31635","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2775","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45745","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-363.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6142","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.x versions, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/usercheck.php en FlexPHPic 0.0.4 y FlexPHPic Pro 0.0.3 y otras versiones 0.0.x, permite a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro CheckUser (alias campo nombre de usuario), o (2) el parámetro checkpass (alias campo de contraseña), a admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpic:0.0.3:-:pro:*:*:*:*:*","matchCriteriaId":"315437A0-A984-482C-839D-D3F51659AD66"},{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpic:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"411DB147-4584-4F12-B35C-26BCC12EEF12"}]}]}],"references":[{"url":"http://secunia.com/advisories/33376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47653","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7624","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6143","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access via a modified account name in the username cookie."},{"lang":"es","value":"OwenPoll 1.0 permite a atacantes remotos eludir la autenticación y obtener acceso administrativo a través de la modificación del nombre de cuenta en la cookie de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:owentechkenya:owenpoll:1.0:*:*:*:*:*:*:*","matchCriteriaId":"502E2D77-4F2A-4228-8A38-8DC2192AAB45"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33032","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7597","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6144","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en WEC Discussion Forum (wec_discussion) extensión 1.7.0 y anteriores para TYPO3 permite a atacantes remotos inyectar HTML o  scripts web arbitrarios a través de vectores no especificados. Se trata de una vulnerabilidad diferente a la CVE-2008-3029."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.0","matchCriteriaId":"B4F97572-8AEB-4305-8E8C-20BD06DF194A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A4A7F726-590B-4712-9D54-734C1947C83F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B49C4FCF-8B78-40A2-A602-B02B295CB9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"30AA59A8-CC5F-445F-8BEC-E2BD9876DB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"745ACFB9-3386-4BE4-8CB5-4EABC90C3E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"270CBE3E-B87C-4047-B850-8A7F91514222"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/wec_discussion/1.7.1","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/wec_discussion/1.7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6145","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en WEC Discussion Forum (wec_discussion)  extensión 1.7.0 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.0","matchCriteriaId":"B4F97572-8AEB-4305-8E8C-20BD06DF194A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A4A7F726-590B-4712-9D54-734C1947C83F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B49C4FCF-8B78-40A2-A602-B02B295CB9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"30AA59A8-CC5F-445F-8BEC-E2BD9876DB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"745ACFB9-3386-4BE4-8CB5-4EABC90C3E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wec_discussion_forum:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"270CBE3E-B87C-4047-B850-8A7F91514222"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/wec_discussion/1.7.1","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/wec_discussion/1.7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6146","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a delete##### parameter in a Delete action, a different vector than CVE-2005-2989."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en pm.php en DeluxeBB 1.2 y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro en delete##### en una acción Delete. Se trata de un vector diferente al de CVE-2005-2989."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"CF5128A2-8DE9-4E00-BA8D-CF162B92ADE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B3543354-4CC9-4C62-ACCE-6B646F797245"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27346DF8-248F-426C-A435-7FDBCB34A977"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*","matchCriteriaId":"9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*","matchCriteriaId":"37F38906-2E8F-40E4-A03B-8121FDEF903C"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*","matchCriteriaId":"DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*","matchCriteriaId":"EEB0CB89-67EF-46F3-8370-ABFBDD54E959"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.09:*:*:*:*:*:*:*","matchCriteriaId":"6B137A4A-B7E3-45BF-988D-D599A780E8E7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33351","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7593","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6147","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/8690.mdb or (2) data/8690BAK.mdb."},{"lang":"es","value":"ForumApp 3.3 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar una base de datos a través de una petición directa a (1) data/8690.mdb o (2) data/8690BAK.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspapp:forumapp:3.3:*:*:*:*:*:*:*","matchCriteriaId":"908132BF-6796-4B73-A2F1-4B5B7D1977E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7599","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6148","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Live Ticker (com_liveticker) module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a viewticker action to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en el componente Live Ticker (com_liveticker) 1.0 de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro tid en una acción viewticker en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raven-worx:liveticker:1.0:*:*:*:*:*:*:*","matchCriteriaId":"78B60C6C-2B0D-4FB4-BC2D-D9CA868A9704"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47605","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7573","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6149","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cagtegory parameter in a story_lists action to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en el componente mDigg (com_mdigg) 2.2.8 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro cagtegory en una acción story_lists en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlaapps:com_mdigg:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"60476FE8-B885-4C5E-9CD6-C0530BA64759"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499618/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33009","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47612","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499618/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6150","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en classdis.asp en SepCity Classified Ads permite a atacantes remotos ejecutar comandos SQL a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sepcity:classified_ads:-:*:*:*:*:*:*:*","matchCriteriaId":"DD3B0C8A-8AA1-4CCB-8EBB-9453A63588DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33050","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47642","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7613","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6151","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en shpdetails.asp en SepCity Shopping permite a atacantes remotos ejecutar comandos SQL a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sepcity:shopping_mall:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DD376C-B0C6-4FDA-B930-252CD3FC3236"}]}]}],"references":[{"url":"http://secunia.com/advisories/33358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33039","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47622","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6152","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: this was originally reported for Lawyer Portal, which does not have a deptdisplay.asp file."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en deptdisplay.asp en SepCity Faculty Portal permite a atacantes remotos ejecutar comandos SQL a través del parámetro ID. NOTA: esto fue originalmente informado para Lawyer Portal, que no tiene un archivo deptdisplay.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sepcity:faculty_portal:-:*:*:*:*:*:*:*","matchCriteriaId":"879012FF-72AC-4D26-9876-288AE66CDDD6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33357","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33040","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47621","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7610","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6153","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en Photo.asp en Jay Patel Pixel8 Web Photo Album 3.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro AlbumID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jayeshp:pixel8_web_photo_album:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D7FF300A-3594-46DC-9B86-1F5A277A2E51"}]}]}],"references":[{"url":"http://secunia.com/advisories/33373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33069","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47662","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7627","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6154","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Hispah Text Links Ads v1.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"idcat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hispah:text_links_ads:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCF9FAD-CE85-49A0-8282-BDFE99CAF7DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31649","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45767","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6701","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6155","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T18:30:04.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en Hispah Text Links Ads 1.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro idtl en una acción \"comprar\". NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hispah:text_links_ads:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCF9FAD-CE85-49A0-8282-BDFE99CAF7DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48808","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6156","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T18:30:04.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbitrary SQL commands via the campaignId parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en editCampaign.php en Adman 1.1.20070907 permite a usuarios remotos autenticados ejecutar comandos SQL a través del parámetro campaignId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:formfields:adman:1.1.20070907:*:*:*:*:*:*:*","matchCriteriaId":"830F7A41-24AA-4DAB-A061-F9DFBD0B0288"}]}]}],"references":[{"url":"http://secunia.com/advisories/32160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31646","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45768","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6157","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"SepCity Classified Ads almacena contraseñas de administrador en texto claro en data/classifieds.mdb, lo que permite a atacantes, dependiendo del contexto, obtener información sensible."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sepcity:classified_ads:-:*:*:*:*:*:*:*","matchCriteriaId":"DD3B0C8A-8AA1-4CCB-8EBB-9453A63588DD"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2009-February/002146.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48822","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7613","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.attrition.org/pipermail/vim/2009-February/002146.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6158","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the admin backend in w3b>cms (aka w3blabor CMS) before 3.2.0 have unknown impact and remote attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el administrador del interfaz interno en w3b>cms (también conocido como w3blabor CMS) anterior a v3.2.0 tienen impacto y vectores de ataque remotos desconocidos"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3bcms:w3b\\>cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"3E698272-C67E-468F-A781-E50031285A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3bcms:w3b\\>cms:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"25CC260A-8962-4B2C-A75B-625E654FAAF3"}]}]}],"references":[{"url":"http://forum.w3bcms.de/viewtopic.php?f=5&t=235","source":"cve@mitre.org"},{"url":"http://osvdb.org/52023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48823","source":"cve@mitre.org"},{"url":"http://forum.w3bcms.de/viewtopic.php?f=5&t=235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6159","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function."},{"lang":"es","value":"Content Management Made Easy (CMME) 1.19 permite a atacantes remotos obtener información del sistema mediante una petición directa a info.php, lo que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.19:*:*:*:*:*:*:*","matchCriteriaId":"F67A768C-F508-4DFA-8F19-DD81F45A6CAA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_55.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497029/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45703","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_55.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497029/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6160","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors."},{"lang":"es","value":"Semantically-Interconnected Online Communities (SIOC) 5.x antes de 5.x-1.2 y 6.x antes de 6.x-1.1, un módulo de Drupal, no implementa de manera apropiada las APIs menu y database, lo que permite a atacantes remotos obtener nombres de usuarios y leer el resumen digital (hashed) de correos electrónicos y comentarios mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:semantically_interconnected_online_communities:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x_1.0","matchCriteriaId":"CD355641-05C1-4107-9829-4C3A81C43DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:semantically_interconnected_online_communities:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x_1.0","matchCriteriaId":"A62A5B42-1704-45A2-BD96-E5A72F2BCF08"}]}]}],"references":[{"url":"http://drupal.org/node/318749","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31658","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45762","source":"cve@mitre.org"},{"url":"http://drupal.org/node/318749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6161","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WOW Raid Manager (WRM) antes de v3.5.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:wow_raid_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0","matchCriteriaId":"E2DB49D7-3C6B-4436-972C-A48540D84D56"}]}]}],"references":[{"url":"http://secunia.com/advisories/32172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=631789","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2044.post","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=631789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2044.post","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6162","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:46:53.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1 and the usNick cookie to admin."},{"lang":"es","value":"Una secuencia de comandos de Bux.to Clone permite a atacantes remotos evitar la autenticación y conseguir acceso de administrador mediante modificando la configuración loggedin de la cookie a 1 y la cookie usNick a admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bux:bux.to_clone_script:-:*:*:*:*:*:*:*","matchCriteriaId":"A66C47DB-9E3D-46AF-9C2F-7676BD9BF9EC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31542","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6163","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:46:54.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en www/delivery/ac.php en OpenX v2.6.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"bannerid\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F7D866D9-F3CB-4A5D-8946-62A425173845"}]}]}],"references":[{"url":"http://forum.openx.org/index.php?s=8d4c74dab4fd4597a7facda7c7414703&showtopic=503422735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31549","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45631","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6655","source":"cve@mitre.org"},{"url":"http://forum.openx.org/index.php?s=8d4c74dab4fd4597a7facda7c7414703&showtopic=503422735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6164","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:46:54.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en index.php en DreamCost HostAdmin v3.1.1 permitiría atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dreamcost:hostadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1D5AECB1-EC2E-4D51-9AC9-7CEB66BBCC43"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/496935/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31538","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45646","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6165","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T00:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) pseudo and (2) passe parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gestion.php en CSPartner 0.1, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) pseudo y (2) passe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-script:cspartner:0.1:*:*:*:*:*:*:*","matchCriteriaId":"68216563-BF32-49E8-A3DC-38056389725C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31886","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46067","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6814","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6166","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T00:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente KBase (com_kbase) v1.2 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"article\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jmds:com_kbase:1.2:*:*:*:*:*:*:*","matchCriteriaId":"06E1B4A9-7171-437B-9477-2B671EA596A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32365","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31902","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46076","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6167","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lng parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en search.php en miniPortail v2.2 y anteriores, permite a atacantes remotos incluír y ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"lng\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"42CC72E4-1FB1-47A7-ABB0-19A40A2CF40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2E2F1E7-7B15-4F89-AC20-A8AC09A72CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:2.1:*:*:*:*:*:*:*","matchCriteriaId":"19BB8CBB-C703-4B5F-BB29-FCFAEF14C363"},{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5A9C654-4638-41AC-821A-43805F472233"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31895","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46079","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6168","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified argument, probably the search string."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en search.php en miniPortail v2.2 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un argumentos inespecífico, probablemente en la cadena de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"42CC72E4-1FB1-47A7-ABB0-19A40A2CF40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2E2F1E7-7B15-4F89-AC20-A8AC09A72CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:2.1:*:*:*:*:*:*:*","matchCriteriaId":"19BB8CBB-C703-4B5F-BB29-FCFAEF14C363"},{"vulnerable":true,"criteria":"cpe:2.3:a:miniportail:miniportail:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5A9C654-4638-41AC-821A-43805F472233"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31895","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46080","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6169","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the \"local translation submission interface.\""},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en los modulos para Drupal Localization Client 5.x antes de 5.x-1.1 y 6.x antes de 6.x-1.6 y Localization Server 5.x antes de 5.x-1.0-alpha5 y 6. x antes de 6.x-alfa2, permite a atacantes remotos realizar acciones no autorizadas como administradores a través de vectores no especificados relacionados con el \"interfaz de envío local de traducciones\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0","matchCriteriaId":"B628D63F-035D-4618-AA2D-40E88A642917"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.5","matchCriteriaId":"D9554C9A-9F79-42FF-808E-2A6265839B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:5.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"1426782B-F79F-409E-A855-413C9C780FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"E6A4EE4E-EA90-4E6C-92F9-3A54405593A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F6DDC58-2B86-426A-8581-BED2D853A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A17AEEF-A5F9-48A6-B95F-FA3396BAD2BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"B4060FDC-1BAE-4A9F-9123-BF37365F1258"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"1B36A0D0-1A87-487A-80CD-87E21F57C056"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"057E6EE9-EEAC-4DB2-BC61-17D66590AC9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0alpha4","matchCriteriaId":"3AFF959F-05F9-46B2-BCF3-10B784594DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.0alpha1","matchCriteriaId":"51872E93-6578-4EFA-8900-20096033DFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:5.x-1.0alpha1:*:*:*:*:*:*:*","matchCriteriaId":"85B9EAC0-0FC5-4586-B0B2-C8EA5D4DBA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:5.x-1.0alpha2:*:*:*:*:*:*:*","matchCriteriaId":"47A480FB-AFEF-4948-9770-92D584F90642"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:5.x-1.0alpha3:*:*:*:*:*:*:*","matchCriteriaId":"001F51B7-E9DF-48F5-8E4D-18F527CF2C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:5.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"BE961C81-4E51-444C-8B82-C3AE444D19B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_server:6.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"77E374F6-FAF7-460D-9010-BC87F7896922"}]}]}],"references":[{"url":"http://drupal.org/node/324862","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32388","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46044","source":"cve@mitre.org"},{"url":"http://drupal.org/node/324862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6170","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en Drupal v5.x anterior a v5.12 v6.x anterior a v6.6, lo que permite a usuarios remotos autenticados con permisos para crear contenidos de libros o editar la jerarquía de nodos de los libros inyectar secuencias de comandos web o HTML a través de la pagina de titulo del libro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"}]}]}],"references":[{"url":"http://drupal.org/node/324824","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32441","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31882","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2913","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46052","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00783.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00826.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/324824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00783.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00826.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6171","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for \"IP-based virtual hosts,\" allows remote attackers to include and execute arbitrary files via the HTTP Host header."},{"lang":"es","value":"El archivo includes/bootstrap.inc en Drupal versiones 5.x anterior a 5.12 y versiones 6.x anterior a 6.6, cuando el servidor está configurado para \"IP-based virtual hosts,\" permite a los atacantes remotos incluir y ejecutar archivos arbitrarios por medio del encabezado Host de HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"}]}]}],"references":[{"url":"http://drupal.org/files/sa-2008-067/SA-2008-067-5.11.patch","source":"cve@mitre.org"},{"url":"http://drupal.org/node/324824","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32389","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32441","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31900","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2913","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46049","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00783.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00826.html","source":"cve@mitre.org"},{"url":"http://drupal.org/files/sa-2008-067/SA-2008-067-5.11.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/324824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00783.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00826.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6172","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el captcha/captcha_image.php en el componente para Joomla! RWCards (com_rwcards) v3.0.11 cuando magic_quotes_gpc esta desactivado, lo que permite atacantes remotos incluir y ejecutar localmente ficheros a su elección a través de secuencias de salto de directorio en el parámetro \"img\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"9A1B622B-13C5-49A1-9DAB-3CA0354F62C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/32367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31892","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46081","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6817","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6173","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en fullscreen.php en ClipShare Pro v4.0 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"title\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clip-share:clipshare:4.0:-:pro:*:*:*:*:*","matchCriteriaId":"D0AE6B08-94BB-41F0-8979-C2CC5D8AE1F8"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31898.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46072","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31898.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6174","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the liste parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en admin/postlister/index.php en Jetbox CMS v2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a su elección a través del parámetro \"liste\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0916DF3D-71ED-423F-A2F4-842EE706ADDC"}]}]}],"references":[{"url":"http://www.digitrustgroup.com/advisories/web-application-security-jetbox2.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31890","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46082","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-jetbox2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6175","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to the opendir SFTP command."},{"lang":"es","value":"SilverSHielD v1.0.2.34 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un argumento manipulado al  comando de SFTP \"opendir\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:k2sxs:silvershield:1.0.2.34:*:*:*:*:*:*:*","matchCriteriaId":"D2B0B0A5-7059-4E1B-B84D-8FFC2EA4C4B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31884","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46064","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6176","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.500","lastModified":"2023-11-07T02:03:20.057","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-6171.  Reason: This candidate is a duplicate of CVE-2008-6171.  Notes: All CVE users should reference CVE-2008-6171 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6177","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in LightBlog 9.8, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) username parameter to view_member.php, (2) username_post parameter to login.php, and the (3) Lightblog_username cookie parameter to check_user.php."},{"lang":"es","value":"Múltiple vulnerabilidad de salto de directorio en LightBlog 9.8, cuando magic_quotes_gpc está deshabilitado, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de .. (punto punto) en los parámetros (1) username para view_member.php, (2) username_post para login.php, y el parámetro de la cookie (3)Lightblog_username para check_user.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:publicwarehouse:lightblog:9.8:*:*:*:*:*:*:*","matchCriteriaId":"6CC9BD4D-3351-4F80-BAF1-F3E7C0FF708A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32345","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31851","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46030","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6797","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6178","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by creating a file with PHP sequences preceded by a ZIP header, uploading this file via a FileUpload action with the application/zip content type, and then accessing this file via a direct request to the file in UserFiles/File/, probably a related issue to CVE-2005-4094.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en editor/filemanager/browser/default/connectors/php/connector.php en FCKeditor v2.2 en Falt4 CMS, Nuke ET, y otros productos, lo que permite a atacantes remotos ejecutar codigo a su eleccion mediante la creacion de un fichero con secuencias PHP precedidas de un encabezado ZIP, subiendo este fichero a traves la accion FileUpload, y despues accediendo al fichero a traves de una peticion directa del fichero en  UserFiles/File/, probablemente relacionado con CVE-2005-4094.  NOTA: Algunos detalles fueron obtenidos de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"B6F9F4D2-0A3E-49D6-9A58-D9BCDF492E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"CF47BD2F-7AC9-490E-9289-9C259FE4F231"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D2823302-CCF1-438B-B962-6EE49D371A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3beta:*:*:*:*:*:*:*","matchCriteriaId":"5F841DE0-94A3-45E5-9DF6-516BDBE13CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"68C583B7-5A09-4849-A1E1-600C87854A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:phplist:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"FD0770F6-4C09-4D77-A25A-2D9C59B73795"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:phplist:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"1AB6728E-74D6-4939-AA0F-6560678201CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:phplist:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"7212A91B-F75D-43CB-90E3-7420C0EA861A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:phplist:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BFECF781-0084-4FBD-BD88-E55C85D9480C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:phplist:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C5492C3F-8833-4F66-B98F-C2B33AD1F14B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:phplist:2.10.6:*:*:*:*:*:*:*","matchCriteriaId":"CB4693DD-6CAE-437E-9D36-C1182F495984"}]}]}],"references":[{"url":"http://secunia.com/advisories/33973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0447","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48769","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8060","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6179","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter, a different vector than CVE-2007-4069."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sug_cat.php en IndexScript v3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"parent_id\", un vector diferente a CVE-2007-4069."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:indexscript:indexscript:3.0:*:*:*:*:*:*:*","matchCriteriaId":"895F5176-6038-4DC8-85BE-72C40C79B912"}]}]}],"references":[{"url":"http://secunia.com/advisories/32173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31744","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6180","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en system/nlb_user.class.php en NewLife Blogger v3.0 y anteriores, y posiblemente v3.3.1, permite a atacantes remotos ejecutar comandos SQL a su elección  a través de la cookie nlb3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newlife_blogger:newlife_blogger:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"A6079335-40B7-408C-9993-C7376953E608"},{"vulnerable":true,"criteria":"cpe:2.3:a:newlife_blogger:newlife_blogger:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1297BB43-6CC4-4516-A545-86310625648D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pepelux.org/exploits/newlife-es.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497283/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45820","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45821","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6739","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pepelux.org/exploits/newlife-es.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497283/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6181","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Mad4Joomla Mailforms (com_mad4joomla), antes de v1.1.8.2, para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"jid\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8.1","matchCriteriaId":"F37D9C05-9405-4A97-9983-325142D217D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C94FF107-72C2-4A94-BD41-E073A4634EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"537606DB-52A7-4166-83ED-003364F5CD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"03C773AE-816F-47AE-B30F-A9FDE24D6344"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"39D6DEBA-AA1A-4CBA-B34B-5F7419CE8AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"496EDFAB-B6F9-4F01-AF39-254CA16D6B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7506440C-1FFB-41CE-8C0A-8900FB243033"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E24C9FC5-F224-4CCB-8812-340AF4FB74E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"65F9065D-0A55-4FF6-A42F-86942FB8E81B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mad4media:com_mad4joomla:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2C3D8B28-C6A7-49BF-8543-48B3E856272E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32239","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mad4media.de/mad4joomla-mailforms-faq.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mad4media.de/mad4joomla-mailforms.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31712","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45815","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mad4media.de/mad4joomla-mailforms-faq.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mad4media.de/mad4joomla-mailforms.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6182","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Ignite Gallery (com_ignitegallery) v0.8.0 hasta v0.8.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gallery\" en una acción \"view\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:ignitegallery:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"86B24889-E461-4A59-A83C-FCD586F10F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:ignitegallery:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"B0B001B0-0FE4-4CC0-B86A-06BB63805B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:ignitegallery:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"65DD8786-62EE-41E8-8A28-8945161C3768"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:ignitegallery:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7F9483D0-B9FD-4DC3-A17C-DE7486B655B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://secunia.com/advisories/32240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31714","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45816","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6723","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6183","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) d and (2) f parameters."},{"lang":"es","value":"Multiples vulnerabilidades de salto de directorio en index.php en My PHP Indexer v1.0 permitiria a atacantes remotos leer ficheros a su eleccion a traves de .. (punto punto) en los parametros (1) \"d\" y (2) \"f\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpindexer:my_php_indexer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F318E7F2-EED6-4C50-BC1E-4893CAD4BA16"}]}]}],"references":[{"url":"http://secunia.com/advisories/32215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31726","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2796","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45830","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6184","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente  OwnBiblio (com_ownbiblio) v1.5.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catid\" en una acción \"catalogue\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:medialab-karlsruhe:ownbiblio:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"03529C19-7D36-4C62-B267-82175D9B9D68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/32235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45814","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6185","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service (crash) via multiple POP3 requests with a long PASS command."},{"lang":"es","value":"NoticeWare Email Server NG v5.1.2.2 permite a atacantes remotos producir una denegación de servicio (caída) a través de múltiples peticiones POP3 con un comando largo PASS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noticeware:noticeware_email_server_ng:5.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2394DB64-D08B-40EF-ADD5-B016F5512E8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32202","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31697","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45812","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6186","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via long (1) CWD and (2) MLST commands."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en RaidenFTPD v2.4 build 3620 permite a usuarios remotos autenticados provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante un comando (1) CWD o un comando (2) MLST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raidenftpd:raidenftpd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FBB00F0-BA19-4E8E-9107-C632251EBA8D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31741","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2804","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6742","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6187","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the release_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en frs/shownotes.php en Gforge v4.5.19 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"release_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.19","matchCriteriaId":"3D12BB16-021E-434A-9391-66AEA76C4521"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.0:*:*:*:*:*:*:*","matchCriteriaId":"308956E3-6EF6-4EFD-BCDF-9AE07BDE79F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.1:*:*:*:*:*:*:*","matchCriteriaId":"5DF5AB4B-9002-49FD-A02E-9537C73D97ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DDE3B595-4902-4A29-83CC-B05932605B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3C5E4D8-0B12-4026-9818-173ADA040C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.21:*:*:*:*:*:*:*","matchCriteriaId":"E11701B3-7DF7-4E2A-8D6C-8C97970B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*","matchCriteriaId":"542842B0-9FD5-48A8-915E-59F030FED57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.11:*:*:*:*:*:*:*","matchCriteriaId":"8C25B797-E971-4AE9-9BDC-49D69C590D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.16:*:*:*:*:*:*:*","matchCriteriaId":"8EDC6925-3E72-4F87-897E-7D8556C6E5F8"}]}]}],"references":[{"url":"http://gforge.org/tracker/index.php?func=detail&aid=5553&group_id=1&atid=105","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45811","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6707","source":"cve@mitre.org"},{"url":"http://gforge.org/tracker/index.php?func=detail&aid=5553&group_id=1&atid=105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6188","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_edit[] parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en people/editprofile.php en Gforge 4.6 rc1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"skill_edit[]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6rc1","matchCriteriaId":"5079CD15-7319-4562-BB50-B72762FAD729"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.0:*:*:*:*:*:*:*","matchCriteriaId":"308956E3-6EF6-4EFD-BCDF-9AE07BDE79F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.1:*:*:*:*:*:*:*","matchCriteriaId":"5DF5AB4B-9002-49FD-A02E-9537C73D97ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DDE3B595-4902-4A29-83CC-B05932605B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3C5E4D8-0B12-4026-9818-173ADA040C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:3.21:*:*:*:*:*:*:*","matchCriteriaId":"E11701B3-7DF7-4E2A-8D6C-8C97970B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*","matchCriteriaId":"542842B0-9FD5-48A8-915E-59F030FED57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.11:*:*:*:*:*:*:*","matchCriteriaId":"8C25B797-E971-4AE9-9BDC-49D69C590D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.16:*:*:*:*:*:*:*","matchCriteriaId":"8EDC6925-3E72-4F87-897E-7D8556C6E5F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.19:*:*:*:*:*:*:*","matchCriteriaId":"AC89AC0A-3CC5-489C-ADA2-028CD9001F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.6:*:*:*:*:*:*:*","matchCriteriaId":"96E41168-4BBA-4837-A025-5B6C12CB039B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.6_b2:*:*:*:*:*:*:*","matchCriteriaId":"691B3232-1FC6-429D-BD86-9CDE38C2D771"}]}]}],"references":[{"url":"http://gforge.org/tracker/index.php?func=detail&aid=5554&group_id=1&atid=105","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48851","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6708","source":"cve@mitre.org"},{"url":"http://gforge.org/tracker/index.php?func=detail&aid=5554&group_id=1&atid=105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6189","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) top/topusers.php, which is not properly handled in database-pgsql.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en GForge versión 4.5.19, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro offset en archivos (1) new/index.php, (2) news/index.php y (3) top/topusers.php, que no son manejados apropiadamente en el archivo database-pgsql.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.19:*:*:*:*:*:*:*","matchCriteriaId":"AC89AC0A-3CC5-489C-ADA2-028CD9001F99"}]}]}],"references":[{"url":"http://gforge.org/tracker/index.php?func=detail&aid=5552&group_id=1&atid=105","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45802","source":"cve@mitre.org"},{"url":"http://gforge.org/tracker/index.php?func=detail&aid=5552&group_id=1&atid=105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6190","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in EEBCMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en EEBCMS 0.95 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeb-welt:eebcms:0.95:*:*:*:*:*:*:*","matchCriteriaId":"81E53FE8-A95F-4FF5-98B3-CFA0CB7F1B24"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/eebcms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45828","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/eebcms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6191","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files.  NOTE: it is not clear whether this issue crosses privilege boundaries."},{"lang":"es","value":"Conductor.exe en Intrinsic Swimage Encore anteriores a v5.0.1.21 contiene una contraseña incluida en el código fuente, lo que permite a usuarios locales descifrar ciertos ficheros .bin. NOTA:  No queda claro si este hecho se refiere también a una situación de traspaso de frontera de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intrinsic:swimage_encore:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x","matchCriteriaId":"9908AD29-4C8E-4D79-A019-3709501C71F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/31540","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/778427","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30736","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44538","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/778427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/30736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6192","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Portlets no especificados en Sun Java System Portal Server 7.0 y 7.1 que permite a los atacantes remotos inyectar arbitrariamente secuencias de comandos web o HTML a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"74805C3F-DC63-4A66-B631-643424889704"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A29331A7-9D72-489D-A8DF-5B4C18A19692"}]}]}],"references":[{"url":"http://secunia.com/advisories/31538","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239308-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30738","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020706","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2404","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44531","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239308-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6193","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"Sam Crew MyBlog almacena contraseñas en texto claro en una base de datos MySQL, lo cual permite a atacantes dependientes de contexto obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*","matchCriteriaId":"5707DF3F-954A-44ED-A876-99E8B75DE6C3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48843","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5913","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6194","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets.  NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898."},{"lang":"es","value":"Fuga de memoria en el servidor DNS en Microsoft Windows permite a atacantes remotos provocar una denegación de servicio (agotamiento de memoria) a través de paquetes DNS. NOTA: la información sobre esta vulnerabilidad es posible por una incorrecta corrección de la CVE-2007-3898."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491815/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491831/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491815/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491831/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6195","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://community.landesk.com/support/docs/DOC-2659\r\n\r\n\r\n\r\n      For LDMS 8.7 SP5 download OSD-848987.5.zip which is attached to this document.  (NOTE: You must have 8.7 SP5 installed)\r\n   \r\n\r\n      For LDMS 8.8 download OSD-848988.0.zip which is attached to this document.\r\n\r\n \r\n\r\nNOTE:  These patches include the code for the previous OSD-7374XX patches that addresses bullet point 1 in the Description section as well as code to address bullet point 2.  In any case where OSD-7374XX has already been applied to the core, the above patches should be applied to include the new fix.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by \"..\" sequences, a different vulnerability than CVE-2008-1643."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servicio PXE TFTP PXEMTFTP.exe) en LANDesk Management Suite (LDMS) v8.80.1.1 y versiones anteriores permite a atacantes remotos leer ficheros de su elección a través del nombre del subdirectorio seguido por secuencias \"..\", una vulnerabilidad diferente a CVE-2008-1643."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_management_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"8.80.1.1","matchCriteriaId":"2A15CD35-B400-4CD6-BE55-F34AFA2FAC6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_management_suite:8.7:*:*:*:*:*:*:*","matchCriteriaId":"76A064EF-94BD-44FC-BA24-1D09FCBA950E"},{"vulnerable":true,"criteria":"cpe:2.3:a:landesk:landesk_management_suite:8.7:sp5:*:*:*:*:*:*","matchCriteriaId":"28A2F1A9-5E92-45B6-889C-5AA120AC5B7D"}]}]}],"references":[{"url":"http://community.landesk.com/support/docs/DOC-2659","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490390/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28577","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48852","source":"cve@mitre.org"},{"url":"http://community.landesk.com/support/docs/DOC-2659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490390/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6196","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITE_BASE parameter to (1) browser.php, (2) image_editor.php and (3) skin_chooser.php in configuration/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en Philippe CROCHAT EasySite v2.0, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro EASYSITE_BASE a (1) browser.php, (2) image_editor.php y (3) skin_chooser.php en configuration/. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:philippe_crochat:easysite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"08D7E684-C5D1-4C1D-B356-341A11F6A9CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28563/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28563/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6197","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T00:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal parameter in a gal action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo \"galerie\" para KwsPHP v1.3.456 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id_gal\" en una acción \"gal\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:kwsphp:kwsphp:1.3.456:*:*:*:*:*:*:*","matchCriteriaId":"270C9328-D034-4CD3-AAF3-8B1015AE824A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwsphp:galerie_module:*:*:*:*:*:*:*:*","matchCriteriaId":"074C6807-F506-4B28-AA0D-AF566479CC7B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28590","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41621","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6198","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T00:30:00.313","lastModified":"2025-09-26T19:39:38.973","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pages.php en el complemento Custom Pages v1.0 para MyBulletinBoard (MyBB), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","matchCriteriaId":"535910EE-CF4E-4249-B8BB-1972656D56CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybboard:custom_pages_plugin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BA6490-5524-4738-8102-235A6D0B8182"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28652","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41685","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5379","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6199","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T00:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Reference links indicate attacker must be authenticated for attack to be successful.","cveTags":[],"descriptions":[{"lang":"en","value":"2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via a direct request to backup.php, which creates backup.sql under the web root with insufficient access control."},{"lang":"es","value":"2532designs 2532|Gigs 1.2.2 y versiones anteriores que permites a los atacantes remotos lanzar una copia de seguridad y obtener información sensible a través de una petición directa al archivo backup.php, lo que crea backup.sql en el directorio raíz con insuficiente control de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2532gigs:2532gigs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"A27ABC89-1A52-440D-8F97-5F8B9821BB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:2532gigs:2532gigs:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F598C951-104B-457D-AFFA-488C0C68B276"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41912","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5465","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6200","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the query string and (2) a new wiki entry."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Swiki v1.5 permiten a atacantes remotos inyectar web script o HTML de su elección a través de (1) una cadena de petición y (2) una nueva entrada en la wiki."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wiki:swiki:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1D84F6D9-D848-4693-B44F-2CB6E37BBF06"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490561/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28680","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48838","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490561/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6201","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Hyperlink Record 1058675 indicates:\r\n\"Successful exploitation of the vulnerability for executing arbitrary uploaded PHP code requires valid user credentials.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en help.php en el módulo  eskuel en KwsPHP 1.3.456, disponible antes del 16/04/2008, permite a atacantes remotos ejecutar comandos de su elección a través del parámetro \"action\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwsphp:kwsphp:1.3.456:*:*:*:*:*:*:*","matchCriteriaId":"270C9328-D034-4CD3-AAF3-8B1015AE824A"}]}]}],"references":[{"url":"http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490861","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28788","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1241/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41950","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5449","source":"cve@mitre.org"},{"url":"http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1241/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6202","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) urun.asp, (2) admin/bayi_listele.asp, (3) admin/urun_grup_listele.asp, and (4) admin/urun_listele.asp."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CoBaLT v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" de  (1) urun.asp, (2) admin/bayi_listele.asp, (3) admin/urun_grup_listele.asp, y (4) admin/urun_listele.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jakob-persson:cobalt:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C649280-F981-4971-B81B-CDFAEE2EC8F5"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48835","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6203","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en adminler.asp en CoBaLT v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jakob-persson:cobalt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C39AA152-8218-43E5-8468-97BBAC89CDC5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28831","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28831/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28831/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6204","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to secure/admin/guncelle.asp, (2) kulad and sifre parameters to secure/admin/giris.asp, and (3) username and password to secure/admin/default.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SuperNET Shop v1.0 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a tavés del parámetro (1) id de secure/admin/guncelle.asp, los parámetros (2) kulad y sifre de secure/admin/giris.asp, y (3) username y password de secure/admin/default.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:supernet:supernet_shop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"F1FBC9A5-C093-4981-85A0-A780AE0DFAFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28709","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1161/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41727","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1161/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6205","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) language, (2) order, and (3) filter parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en seeurl.php en Xavier Flahaut URLStreet v1.0 permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros 1) language, (2) order, y (3) filter.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xaaaaav38:urlstreet:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C66DB6F-6016-4E7D-8845-75743D11500B"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28650.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28650","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41731","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6206","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) graph.php and (2) robotstats.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidades de inclusión múltiple de ficheros PHP en RobotStats v0.1 permite atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro \"DOCUMENT_ROOT\" a (1) graph.php y (2) robostats.inc.php. NOTA: La procedencia de esta información es desconocida; los detalles se han obtenido únicamente de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robotstats:robotstats:0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEC2FEE-21B8-4655-BC43-530491B32256"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28615","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28615/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41690","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28615/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6207","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in form_upload.php in PHPG Upload 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en form_upload.php en PHPG Upload v1.0, permite a usuarios autenticados remotamente ejecutar código de su elección subiendo un archivo con una extensión ejecutable y después accediendo al archivo a través de una petición directa sobre él. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpg_upload:phpg_upload:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9161830-84EB-4282-A804-E57123F485DB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28955","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6208","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the (1) author_name, (2) itemtitle, and (3) item parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en submitnews.php en e107 CMS v0.7.11 permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) author_name, (2) itemtitle, y (3) item.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"}]}]}],"references":[{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28982.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28982","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42248","source":"cve@mitre.org"},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28982.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6209","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_product.php en Vastal I-Tech Software Zone permite a atacantes remotos ejecutar comandos SQL de su elección a través del parametro cat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:software_zone:-:*:*:*:*:*:*:*","matchCriteriaId":"83564B82-825A-478F-AC40-E78183AF9511"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28620","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41666","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5359","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6377","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6210","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the img_id parameter in the gallerypic page."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en dream4 Koobi v4.4 y v5.4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"img_id\" en la página gallerypic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dream4:koobi:4.4:*:*:*:*:*:*:*","matchCriteriaId":"7B0DA75B-6F04-48AA-89DC-95DA6C0145AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dream4:koobi:5.4:*:*:*:*:*:*:*","matchCriteriaId":"5875AC30-2756-45D0-8A0D-AD30504DF14C"}]}]}],"references":[{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28711.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28711","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41740","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5415","source":"cve@mitre.org"},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28711.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6211","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to (1) admin.php, (2) index.php, (3) sess.php, (4) stats.php, (5) detail.php, (6) resize.php, and (7) show.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PhpForums.net mcGallery v1.1 permiten a atacantes remotos inyectar web script o HTML de su elección a través un parámetro largo de (1) admin.php, (2) index.php, (3) sess.php, (4) stats.php, (5) detail.php, (6) resize.php, y (7) show.php. \r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcgallerypro:mcgallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CA4B37DF-A29B-4D79-A270-D23C6B2A2FD7"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28587.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28587.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28587","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41637","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28587.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6212","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T01:30:05.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the (1) sel_mese and (2) sel_anno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en admin.php en Php-Stats v0.1.9.1, permite a atacantes remotos inyectar secuencias de comandos web de su elección a través de los parámetros (1) \"sel_mese\" y (2) \"sel_anno\" en una acción a systems. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-stats:php-stats:0.1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7D49182A-48AE-4AE4-9BD9-D6891C025B21"}]}]}],"references":[{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28824.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28824","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28824/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42729","source":"cve@mitre.org"},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28824.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28824/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6213","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the trg parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en mypage.php en Harlandscripts Pro Traffic One permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"trg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:harlandscripts:pro_traffic_one:-:*:*:*:*:*:*:*","matchCriteriaId":"2B42B918-0FF9-4E80-A0C5-95FB8CE9D524"}]}]}],"references":[{"url":"http://secunia.com/advisories/32467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497946","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31986","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2964","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46207","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6874","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6214","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:03.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en poll_results.php en Harlandscripts Pro Traffic One permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:harlandscripts:pro_traffic_one:-:*:*:*:*:*:*:*","matchCriteriaId":"2B42B918-0FF9-4E80-A0C5-95FB8CE9D524"}]}]}],"references":[{"url":"http://secunia.com/advisories/32467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31994","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2962","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46209","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6877","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6215","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:03.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo cadena_ofertas_ext.php en Venalsur Booking center Booking System for Hotels Group, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro OfertaID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookingcentre:booking_system_for_hotels_group:-:*:*:*:*:*:*:*","matchCriteriaId":"FBB89642-09E3-4FAF-9988-67AE7BCCEF8E"}]}]}],"references":[{"url":"http://osvdb.org/49447","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32430","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31990","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46225","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6876","source":"cve@mitre.org"},{"url":"http://osvdb.org/49447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6216","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:03.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo cadena_ofertas_ext.php en Venalsur Booking center Booking System for Hotels Group, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro OfertaID"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookingcentre:booking_system_for_hotels_group:-:*:*:*:*:*:*:*","matchCriteriaId":"FBB89642-09E3-4FAF-9988-67AE7BCCEF8E"}]}]}],"references":[{"url":"http://osvdb.org/49446","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31990","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46226","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6876","source":"cve@mitre.org"},{"url":"http://osvdb.org/49446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6217","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:03.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote attackers to inject arbitrary web script or HTML via the plugins[file][id] parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en index.php en Extrakt Framework v0.7 lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML a su eleccion a traves de los parametros \"plugins[file]\" \"[id]\".NOTA: La procedencia de esta informacion es desconocida; los detalles fueron exclusivamente obtenidos de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extrakt:extrakt_framework:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0CE326CC-E428-4EAE-AEAD-CC86FDE36C41"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31971/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31971/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6218","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:03.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file."},{"lang":"es","value":"Fuga de memoria en la función png_handle_tEXt en pngrutil.c en libpng anterior a v1.2.33 rc02 y v1.4.0 beta36 que permite a atacantes dependientes de contexto producir una denegacion de servicio (agotamiento de memoria) a traves de un fichero PNG manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this bug a security flaw. For more details please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=468990","lastModified":"2009-06-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C036011A-9AE1-423C-8B73-188B9BA20FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F008946C-43E9-4ECD-AE9F-486A4686AE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6A4D6BB0-8E1A-49A4-BBC9-CBFA252C92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CFE1DB59-0A60-432B-9D88-906C4FE6D6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"C111BDD4-2A52-4FB7-8D21-6049A10BCDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"6B33807C-8E7B-4A04-BE92-59C1B845AD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B1614466-8EAC-4404-A674-EFFE0FFFBDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"663C6EE5-5B5E-4C0F-9E7F-D0E1DA9AF9EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta1:*:*:*:*:*:*","matchCriteriaId":"FF2D5068-5BF3-425C-8B1A-E12E3D3CD8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta2:*:*:*:*:*:*","matchCriteriaId":"BF4F7833-4F88-4C54-AEC7-3C4FB797AE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta3:*:*:*:*:*:*","matchCriteriaId":"F2A973ED-CA5B-4A18-ACAB-1542E3866896"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta4:*:*:*:*:*:*","matchCriteriaId":"FA737702-6335-42F9-99B9-856D531B70F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8EAD9719-2736-40AE-BBEB-8BA627E8DF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"62693E5F-2EF6-49B5-9946-42CE61F4ACFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8051459E-94D3-4D4A-9D40-CC9475DDB00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"65ACA253-BDE7-4CAE-8F74-71EBA4728358"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"9C776F58-A76E-4ED3-825B-52ADFB38D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta3:*:*:*:*:*:*","matchCriteriaId":"FF62B46E-37C4-426A-8854-E961BEB543E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta4:*:*:*:*:*:*","matchCriteriaId":"C5EDDB54-70C6-41D0-AC5C-C10F8D107964"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta5:*:*:*:*:*:*","matchCriteriaId":"CAEAB037-F146-444F-A867-D08BD48DA6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta6:*:*:*:*:*:*","matchCriteriaId":"4962A86F-C9F5-4F03-AFCD-D2E6FD08BD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"47CF2A43-2D15-4D70-A424-C12053D1A6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"42056C63-69A7-43CF-828C-0C3E365702D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"6AF8999B-86FF-4EC2-8EF3-C7461A6EBF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"F79E13B4-A826-47E9-BE30-E5D9864E8681"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"C6577A0A-B689-424E-BAAE-BD5DF2615311"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc4:*:*:*:*:*:*","matchCriteriaId":"6FA7418E-2F52-4F24-8722-8CA9781943F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc5:*:*:*:*:*:*","matchCriteriaId":"BABFD5AE-95DD-478E-8E55-1541C4EF3D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc6:*:*:*:*:*:*","matchCriteriaId":"511E1319-C882-4761-ACD5-84617B78578E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5B6A39A3-7F86-4DC3-B248-859630AFB9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:beta1:*:*:*:*:*:*","matchCriteriaId":"27A6EDED-CB33-4C80-B9C0-9774CC1455B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:beta2:*:*:*:*:*:*","matchCriteriaId":"0CB4A1D0-2360-4191-AE7C-0B1B4E0FB34B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:beta3:*:*:*:*:*:*","matchCriteriaId":"2D252442-7A38-4AD7-9CEA-DD5B090726DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"203E0B7E-7ED5-4F89-8E12-BDA590DC7DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"58377AE3-1C13-4C3F-BC55-8336DAEEF97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:beta1:*:*:*:*:*:*","matchCriteriaId":"64DCD92E-792F-4A6F-AF83-1B04E3B9F62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:beta2:*:*:*:*:*:*","matchCriteriaId":"225CEEB5-1CE9-4818-A299-77516A26F30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:beta3:*:*:*:*:*:*","matchCriteriaId":"EC2F9039-5B77-484E-A764-6CEF41F2729E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"1A4DD7CF-90BD-4DD3-9E1A-7D2F527CAC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6BA5FE79-5C4C-47E5-9DF2-CEF37F139389"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:rc3:*:*:*:*:*:*","matchCriteriaId":"A434DDF7-A9D4-42AE-8A92-41E45C42B683"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"005C2DA4-D00E-4206-851E-9226D66B5F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta1:*:*:*:*:*:*","matchCriteriaId":"1608ABE4-8EE7-4280-B8E0-D4518BA1D706"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta2:*:*:*:*:*:*","matchCriteriaId":"0AECC80A-1D17-4BFD-92D6-6CFBAF88BEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta3:*:*:*:*:*:*","matchCriteriaId":"F29E6D8C-3691-4451-AB5F-48574C98A551"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:beta4:*:*:*:*:*:*","matchCriteriaId":"D8C90D1A-B862-4B43-B5BB-67DE455DFC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"5C56374A-0D57-4545-B538-20964F392996"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc2:*:*:*:*:*:*","matchCriteriaId":"08722144-6645-4321-8340-6E68DF1AFE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc3:*:*:*:*:*:*","matchCriteriaId":"2C30D261-CBE2-4E3A-9ED0-9D2DFB04D465"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc4:*:*:*:*:*:*","matchCriteriaId":"665B34A9-4331-4FC4-BB78-D6EE89827D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.6:rc5:*:*:*:*:*:*","matchCriteriaId":"4B9D5E28-E8E0-47F6-8728-18F2DDE0DCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"97B17602-0D97-469B-A9B1-30AAC8F758F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.7:beta1:*:*:*:*:*:*","matchCriteriaId":"093976B1-BC7C-4671-B4B1-0FB94D0F699A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.7:beta2:*:*:*:*:*:*","matchCriteriaId":"C248EEB8-1510-40A4-B37B-E8F9AAE8687C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"857B664A-C6F9-45E3-93EA-C0F53CEF5C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta1:*:*:*:*:*:*","matchCriteriaId":"51C96068-1E81-430D-9C5F-A4273CA0BBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta2:*:*:*:*:*:*","matchCriteriaId":"243E4DB3-2553-48E9-9DA2-8AF955389EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta3:*:*:*:*:*:*","matchCriteriaId":"E85CE44F-46D0-46F4-B4AB-271A9BC271EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta4:*:*:*:*:*:*","matchCriteriaId":"2716FBF4-5BDB-4D76-AC79-AB9158DA1241"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:beta5:*:*:*:*:*:*","matchCriteriaId":"CFD6B80F-7574-4A9F-AC40-7E357EE3F50F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc1:*:*:*:*:*:*","matchCriteriaId":"244D10AC-1C34-4D18-AB06-F9C2C9F564BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc2:*:*:*:*:*:*","matchCriteriaId":"8DBEEA4A-8175-4E06-8346-93541868A6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc3:*:*:*:*:*:*","matchCriteriaId":"C3CC9D97-1C0F-4A48-9F2A-A74960A84D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc4:*:*:*:*:*:*","matchCriteriaId":"A692466A-6258-4D90-B362-9797B03CDB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.8:rc5:*:*:*:*:*:*","matchCriteriaId":"9BE92591-5AD8-47D0-BDDE-350C2BFB5736"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"6DFDA458-74E8-4DEF-B524-A4A8672CB66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta1:*:*:*:*:*:*","matchCriteriaId":"B5E6F6A5-0844-4625-8AA4-E1CA8E15C1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta10:*:*:*:*:*:*","matchCriteriaId":"786B4160-C9E9-4EDD-83D9-741576FDDF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta2:*:*:*:*:*:*","matchCriteriaId":"039D87A3-49FA-4C02-B137-42D4407DD4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta3:*:*:*:*:*:*","matchCriteriaId":"FEEA0BB0-24E2-4D13-ACD6-BC4DD7878AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta4:*:*:*:*:*:*","matchCriteriaId":"D7981F07-C65C-4AA8-8653-786FD6A50BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta5:*:*:*:*:*:*","matchCriteriaId":"EE280017-8064-416B-AFA2-3DC8D2B1331B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta6:*:*:*:*:*:*","matchCriteriaId":"CA584B09-52A3-4D87-8B72-B704069766E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta7:*:*:*:*:*:*","matchCriteriaId":"A10C7AE8-85C0-4CD1-910B-320FE52AD542"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta8:*:*:*:*:*:*","matchCriteriaId":"6763A6C3-53E3-41AF-B5DF-4ACDC5371AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:beta9:*:*:*:*:*:*","matchCriteriaId":"1693150F-E485-47D9-A957-C0A8FEFC8844"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"7F08FBEB-3FA9-4C57-9CD7-717C41F352C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9A3E3BF3-4376-4692-A515-A7B6593F28F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"9E83B68F-B0E2-4C37-A711-1714652AB961"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"4F17A4B7-99C2-407A-9536-4B54EDC02899"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"F854F244-78C9-46C6-8862-1DA58912FCE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta4:*:*:*:*:*:*","matchCriteriaId":"9A4C883A-A2A3-4D5F-8114-CE9220FFF7B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta5:*:*:*:*:*:*","matchCriteriaId":"3544F0FF-3EEE-4902-B412-EB57D6AE7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta6:*:*:*:*:*:*","matchCriteriaId":"5F428FF4-21A8-4605-AFCD-E78F43E46AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta7:*:*:*:*:*:*","matchCriteriaId":"7132AA21-DC2F-4493-9BCC-27E3D8F075AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"B65F8362-934F-452D-8E86-0DB2E3C7B43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc2:*:*:*:*:*:*","matchCriteriaId":"934D0AB5-62FB-4EC1-971A-A1BA8EEAD008"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc3:*:*:*:*:*:*","matchCriteriaId":"5891F237-D1DB-4CCE-8A8B-D10E7EDCB926"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"AB6AF9D5-CE60-4FC9-91AB-E243F0D429E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta1:*:*:*:*:*:*","matchCriteriaId":"E114E18D-2882-4843-9356-279C69ABCBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta2:*:*:*:*:*:*","matchCriteriaId":"5E271694-B8C8-4BCF-8B4A-0425BA50EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta3:*:*:*:*:*:*","matchCriteriaId":"E36CC085-34FF-4B84-8628-74BEEC686C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta4:*:*:*:*:*:*","matchCriteriaId":"06793BE6-3370-4FCB-A400-C6AF95D1E66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc1:*:*:*:*:*:*","matchCriteriaId":"DE742D36-3A33-4316-8326-FA2F1B228E83"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc2:*:*:*:*:*:*","matchCriteriaId":"25D0C5E1-4D8D-42EE-8C94-12D442181DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc3:*:*:*:*:*:*","matchCriteriaId":"3326F984-8312-4E7F-A269-0A06FAC8BE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc5:*:*:*:*:*:*","matchCriteriaId":"290CF6FC-3BD6-4974-9DEC-188B79DC816A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"7F848FA5-9682-454F-A9DE-671C4401F15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:beta1:*:*:*:*:*:*","matchCriteriaId":"782ABB64-C2F2-4326-A69F-75E514055C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:rc1:*:*:*:*:*:*","matchCriteriaId":"0EF9CEE2-8DB6-480F-970C-E19FEF31D0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:rc2:*:*:*:*:*:*","matchCriteriaId":"28C13A65-C0D6-4904-8C92-E5233D7E5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"C4B83678-98A1-440E-950C-4A27995C7294"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:beta1:*:*:*:*:*:*","matchCriteriaId":"38993FC7-12DD-4D75-8EC6-719C0AD66191"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:beta2:*:*:*:*:*:*","matchCriteriaId":"0CAF82B9-020B-48FD-BE3D-70B8A7A8CDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"C43481DF-59C5-4E9B-8CB9-49E4873B7263"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"FB9EEE31-479A-4370-BF00-C26C1AF502B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta1:*:*:*:*:*:*","matchCriteriaId":"BFFC71CB-0B01-4A34-85B8-8A27C1E7D451"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta2:*:*:*:*:*:*","matchCriteriaId":"EC53C1C7-ED9C-44C2-B446-0426E4C92D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta3:*:*:*:*:*:*","matchCriteriaId":"B996835E-97DB-47B1-80B9-BE757680CAFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta4:*:*:*:*:*:*","matchCriteriaId":"AC7256E6-502A-47A5-A692-90162AA40AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta5:*:*:*:*:*:*","matchCriteriaId":"53E7BDBC-5BF8-4BA3-959D-1D16ACD558D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta6:*:*:*:*:*:*","matchCriteriaId":"79B6B4A0-9B7E-4835-9F82-2B1D1AF955AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc1:*:*:*:*:*:*","matchCriteriaId":"27BBC74C-51A3-48BB-B867-3A5F58AD8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc2:*:*:*:*:*:*","matchCriteriaId":"3DEDAB32-9D5C-4F12-B9E4-ABEA615DC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc3:*:*:*:*:*:*","matchCriteriaId":"C3DA5585-140C-4F27-8654-BCFCB12659B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc4:*:*:*:*:*:*","matchCriteriaId":"AA8F6085-9769-44DE-8E43-FAB7C7791A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc5:*:*:*:*:*:*","matchCriteriaId":"5A4D700F-AA36-4A5B-8BD3-3BD9A452D743"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"95EABD7D-1F18-4FA5-BAA9-F8D69129E531"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:beta1:*:*:*:*:*:*","matchCriteriaId":"D6045135-54AF-4B83-9279-47BB1DB67172"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:beta2:*:*:*:*:*:*","matchCriteriaId":"DBB7D1F1-7959-4459-827C-90B193F58269"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"62A6F2F0-E088-458F-813F-5B45EA01B77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"65B836CA-3740-48B0-966B-21E65EF3D636"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:beta1:*:*:*:*:*:*","matchCriteriaId":"96308F2E-E2DE-4C0F-B0A6-7FDFFF67A0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:beta2:*:*:*:*:*:*","matchCriteriaId":"7A21785C-989F-4E72-932B-E77892EF492A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc1:*:*:*:*:*:*","matchCriteriaId":"0D832C4A-0793-4B64-944D-086CF614CAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc2:*:*:*:*:*:*","matchCriteriaId":"7C8E2232-7077-4CE4-9141-80F2F744F0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc3:*:*:*:*:*:*","matchCriteriaId":"38CDA418-F580-4625-9D84-F01EA5D0FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc4:*:*:*:*:*:*","matchCriteriaId":"D0FB8DC5-ABD5-41BE-99EC-E610504D6F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"3988FA1B-18D9-46AA-87BA-A6B01D4F4B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"51A46409-7AC6-45DB-B92D-29988C445BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta1:*:*:*:*:*:*","matchCriteriaId":"53B41406-956A-48C9-9CDA-D7257D19E6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta10:*:*:*:*:*:*","matchCriteriaId":"B100CFD4-788C-44BF-A55D-225F72314A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta11:*:*:*:*:*:*","matchCriteriaId":"7B6BFCBC-F3E9-4CDD-833F-01D51594B0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta12:*:*:*:*:*:*","matchCriteriaId":"589DC20E-E642-4BC7-83CD-01323D7F6236"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta13:*:*:*:*:*:*","matchCriteriaId":"6A9B81C1-EAF8-44B6-A4FD-2568FFBB6FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta14:*:*:*:*:*:*","matchCriteriaId":"22EBF19B-7E53-4627-AE87-6B7C4ACD88F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta15:*:*:*:*:*:*","matchCriteriaId":"43744C82-D271-4BF3-9AD8-A48C1B5BA33F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta16:*:*:*:*:*:*","matchCriteriaId":"FD68995C-816C-4E25-B8B3-0BC808490D73"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta17:*:*:*:*:*:*","matchCriteriaId":"6EDC3AE7-569F-4016-B35E-E8B8B3456959"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta18:*:*:*:*:*:*","matchCriteriaId":"17068432-BFE0-4BE1-A86B-7D6562D18103"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta19:*:*:*:*:*:*","matchCriteriaId":"A0F0F2AF-748A-411A-8B95-45A04800FF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta2:*:*:*:*:*:*","matchCriteriaId":"945C0B80-E562-4495-849E-23EE406D2EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta20:*:*:*:*:*:*","matchCriteriaId":"5E91B287-CDFC-4791-95D5-54AC847877D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta21:*:*:*:*:*:*","matchCriteriaId":"1F09C15E-E20C-473D-AF13-5509669DA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta22:*:*:*:*:*:*","matchCriteriaId":"36FD7096-C215-4CCA-B0BE-244E9708E947"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta23:*:*:*:*:*:*","matchCriteriaId":"4AC8DAFE-64A5-47C6-BE99-093E744181B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta24:*:*:*:*:*:*","matchCriteriaId":"C075C36D-D191-4165-A2A8-A8BA6AD93862"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta25:*:*:*:*:*:*","matchCriteriaId":"F7E9A4DE-C0B7-4951-97D2-26EFFE065A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta26:*:*:*:*:*:*","matchCriteriaId":"6B9FC583-AA79-4ED1-924B-DE58FBB88385"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta27:*:*:*:*:*:*","matchCriteriaId":"727FA534-FB49-4784-A56E-D709071FFEE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta28:*:*:*:*:*:*","matchCriteriaId":"17628553-688B-4574-9B2A-035937225DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta29:*:*:*:*:*:*","matchCriteriaId":"E96F2F5A-A881-4EDC-965F-43984EA06151"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta3:*:*:*:*:*:*","matchCriteriaId":"26E9442B-FCA7-42A3-9E73-343D9FF11985"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta30:*:*:*:*:*:*","matchCriteriaId":"1EB24053-49FC-488C-8DC4-12F5A485EC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta31:*:*:*:*:*:*","matchCriteriaId":"653700ED-B2E3-4DD1-99A1-ED0B4504E628"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta32:*:*:*:*:*:*","matchCriteriaId":"2C9B4D07-8B90-4932-8A37-D204995E85E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta33:*:*:*:*:*:*","matchCriteriaId":"D9F43544-D08D-4733-AE0D-A6C5742275D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta4:*:*:*:*:*:*","matchCriteriaId":"101240B5-FAC7-4D47-9C4A-840D06E082EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta5:*:*:*:*:*:*","matchCriteriaId":"608088FF-8EED-4F05-96EA-0E23F669C078"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta6:*:*:*:*:*:*","matchCriteriaId":"82401AB8-5432-4D75-ADC2-A310132EB9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta7:*:*:*:*:*:*","matchCriteriaId":"CECEDABC-F229-43F7-9795-9E87198424D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta8:*:*:*:*:*:*","matchCriteriaId":"712E5798-A0FC-44E7-972A-D2EF66F5C793"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta9:*:*:*:*:*:*","matchCriteriaId":"82690AE3-BFFA-4616-AE30-35A6D21DFC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4D0082F7-DDD3-4266-B604-D1E2958ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc2:*:*:*:*:*:*","matchCriteriaId":"00A32AD4-38C7-41BE-8042-9BCED336AA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc3:*:*:*:*:*:*","matchCriteriaId":"BC96DBDE-15A7-4C63-8C71-AA5CD158E306"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc4:*:*:*:*:*:*","matchCriteriaId":"834A6D33-2334-4361-92CE-8AECAF3614CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc5:*:*:*:*:*:*","matchCriteriaId":"AFC3A80A-4C35-419F-B576-40A3FAD37723"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc6:*:*:*:*:*:*","matchCriteriaId":"D0FCC174-9216-433D-A5CB-A7C275DD9D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"09E2B608-6C70-446F-A3A7-369048D99855"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta01:*:*:*:*:*:*","matchCriteriaId":"01EF52B3-BAD3-4E0C-B19C-3465A036B025"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta02:*:*:*:*:*:*","matchCriteriaId":"1685F3BF-635D-43DD-855D-7666D807AE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta03:*:*:*:*:*:*","matchCriteriaId":"BAA8FF97-98D2-425F-935C-36951DFEE029"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta04:*:*:*:*:*:*","matchCriteriaId":"1CEE9078-6B9F-4BA1-A6BE-25743B02FE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"BE1A8933-9958-458B-A511-D018B7CA7D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"100BF4B6-2A63-416A-B19F-722A9B44F126"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc3:*:*:*:*:*:*","matchCriteriaId":"4DD8FB59-2260-4343-B4D6-279ED7D7D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc4:*:*:*:*:*:*","matchCriteriaId":"FDDCE2DE-94B7-460D-8BBB-26ACA4847807"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc5:*:*:*:*:*:*","matchCriteriaId":"A812C450-8E1F-4667-99EC-7237E1E319E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc6:*:*:*:*:*:*","matchCriteriaId":"AD94AB7F-B7CF-42B0-AB71-23F42F3F1067"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"5AA00AE0-F447-4361-AA37-0C98BDE491E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:beta1:*:*:*:*:*:*","matchCriteriaId":"28F79E9F-4AA1-451A-8819-CAF21DB2C990"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:beta2:*:*:*:*:*:*","matchCriteriaId":"7E1C14E8-5644-4B5F-8894-092187B1EE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc1:*:*:*:*:*:*","matchCriteriaId":"77C9B755-140B-4DBF-8BF1-80431C0F9A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc2:*:*:*:*:*:*","matchCriteriaId":"599CE5F2-5D31-4A9D-86A0-9CFD3A34B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc3:*:*:*:*:*:*","matchCriteriaId":"5460DA6B-6F81-4B8C-9D8F-DB946E3F33EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"21DACE94-FBDC-4A3D-8DD6-E62D18F5EE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta1:*:*:*:*:*:*","matchCriteriaId":"45E92521-FE62-4940-B194-A8482538401B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta2:*:*:*:*:*:*","matchCriteriaId":"6DF7D5B4-A8BD-4F3B-8DB3-D5AB94086A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta2-1.2.21:*:*:*:*:*:*","matchCriteriaId":"B0A244FC-545E-4041-B922-B1B640E7E371"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta3:*:*:*:*:*:*","matchCriteriaId":"40F8973E-8150-4834-8D9B-370F3664E894"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta3-1.2.21:*:*:*:*:*:*","matchCriteriaId":"B9C93F2F-533D-4563-95F2-E94A2CCE9C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta4:*:*:*:*:*:*","matchCriteriaId":"73045C50-73FE-4162-8E8B-7721131E4396"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta4-1.2.21:*:*:*:*:*:*","matchCriteriaId":"C89DFAAD-279A-462D-BF72-D75CC24E72E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1879D7C8-ABF1-4ECE-BBC7-71978695D4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:rc1-1.2.21:*:*:*:*:*:*","matchCriteriaId":"1B27B3A2-04E1-4261-AA70-30EE2AA934F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"220A02AF-6ADA-4B75-BC81-40B2D847029A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta01:*:*:*:*:*:*","matchCriteriaId":"CA60D3F3-149B-4A76-9F35-4A0A127ADF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta01-1.2.22:*:*:*:*:*:*","matchCriteriaId":"EAC54968-17ED-422E-9C78-65E4E167C76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta02:*:*:*:*:*:*","matchCriteriaId":"3D625A71-5F2D-446A-BD69-1470B4127DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta02-1.2.22:*:*:*:*:*:*","matchCriteriaId":"896E65A3-D814-4C58-8BD8-B10A2C812FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta03:*:*:*:*:*:*","matchCriteriaId":"00C85EF8-8D8A-4ED8-B55B-2182421626CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta03-1.2.22:*:*:*:*:*:*","matchCriteriaId":"E07CE422-8047-4248-A36C-11E22A889D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta04:*:*:*:*:*:*","matchCriteriaId":"6D65DCF8-D9A6-4A9E-8171-C52E12EB1476"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta04-1.2.22:*:*:*:*:*:*","matchCriteriaId":"65BEA559-944B-4E32-9F74-323CE7EA4FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta05:*:*:*:*:*:*","matchCriteriaId":"C5114A9B-263F-4BBF-9A6A-F6E0900CDD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta05-1.2.22:*:*:*:*:*:*","matchCriteriaId":"61EEC899-A9DC-44E4-8984-88DCBF733B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:rc01:*:*:*:*:*:*","matchCriteriaId":"4CD12B3A-27B6-4BD4-90B5-874B677689FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:rc01-1.2.22:*:*:*:*:*:*","matchCriteriaId":"F22010B9-E18B-45DB-9316-8F56A535D1BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"ECEB8F61-195E-41DE-90CE-22854055E9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta01:*:*:*:*:*:*","matchCriteriaId":"27988956-B3F4-428A-B369-C5E01A2F9102"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta01-1.2.23:*:*:*:*:*:*","matchCriteriaId":"84979A32-27E2-4A77-8245-47C6E61CE439"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta02:*:*:*:*:*:*","matchCriteriaId":"B4D45B16-C278-4ABF-8B91-CFA0AB384290"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta02-1.2.23:*:*:*:*:*:*","matchCriteriaId":"118582C6-A677-4FFB-9782-17BD35EE1973"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta03:*:*:*:*:*:*","matchCriteriaId":"247153A0-CF83-4D6E-A657-5D8D217D8EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta03-1.2.23:*:*:*:*:*:*","matchCriteriaId":"6F43AC37-27DE-4A6D-A8FE-138B4DA8E4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:rc01:*:*:*:*:*:*","matchCriteriaId":"53D03C1D-684A-4BA5-841B-C414AD244DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:rc01-1.2.23:*:*:*:*:*:*","matchCriteriaId":"D0DBDAB9-0F52-4A84-B262-F23E869D30CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"D0F72B91-1F7F-41EB-ABC8-1B50AFEC70EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta01:*:*:*:*:*:*","matchCriteriaId":"9F89EDB5-A195-479B-BEFB-E0A186A4A9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta02:*:*:*:*:*:*","matchCriteriaId":"02BAC6A6-FBE9-48CD-9B4E-FC570684922B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta03:*:*:*:*:*:*","matchCriteriaId":"E695F515-AE7E-48AB-999C-75B62BEA0BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta04:*:*:*:*:*:*","matchCriteriaId":"D448D4A5-D827-4FF8-BAC1-E25FD8F01C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta05:*:*:*:*:*:*","matchCriteriaId":"935F2297-6CB4-4ABB-9F4D-F11708CDC069"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta06:*:*:*:*:*:*","matchCriteriaId":"25ED23F7-DF30-46B2-99EF-3924E22C1870"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:rc01:*:*:*:*:*:*","matchCriteriaId":"6FB56358-46E4-4999-A311-5E1819A6D5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:rc02:*:*:*:*:*:*","matchCriteriaId":"F508CFA5-5602-445C-9E18-71B6A625F9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"111091B9-CBAE-4FC7-8B97-7D2345BFCB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta01:*:*:*:*:*:*","matchCriteriaId":"897D42F6-202B-425A-BF0D-76D1A74D8E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta02:*:*:*:*:*:*","matchCriteriaId":"50300181-3691-4EA2-B779-1C9CF59E08FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta03:*:*:*:*:*:*","matchCriteriaId":"CABA31D9-9EC0-4447-9C5E-8BC5DF5F431D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta04:*:*:*:*:*:*","matchCriteriaId":"D4568552-91F6-4E05-ADA5-4127CBD4D3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta05:*:*:*:*:*:*","matchCriteriaId":"D72D51C0-1044-4A74-823F-7123340FB9BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta06:*:*:*:*:*:*","matchCriteriaId":"BF7EE024-3E34-4452-A832-751BBC109086"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:rc01:*:*:*:*:*:*","matchCriteriaId":"947395DE-A911-47B3-983D-B5D23672068D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"54C6D9D3-50B2-4A63-B3D1-C76C70F4443E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4110AA74-C69D-45BC-A630-9EE3A2036BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"F2DEFD05-10EE-4242-B885-FD1B0DF6CAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"1CAA1090-C1C7-43A2-BD44-065572D226B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"2FD92305-91BF-4984-A029-8FA83CBF1A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:*","matchCriteriaId":"F9F9A6DB-19BF-4798-879E-9BD4AD5EFF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:*","matchCriteriaId":"31EE280F-D76D-478B-ADD6-D5F2C7574A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.4.0:beta36:*:*:*:*:*:*","matchCriteriaId":"345A3C6A-322F-4B01-ABE9-16B403F48DEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34265","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34388","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-28.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=635463&group_id=5624","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=635837","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0046","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:133","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501767/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31920","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021104","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2917","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=635463&group_id=5624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=635837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501767/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6219","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T17:30:03.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests."},{"lang":"es","value":"nsrexecd.exe en multiples productos de EMC Networker incluidos EMC NetWorker Server, Storage Node, y Client v7.3.x y v7.4, v7.4.1, v7.4.2, Client y Storage Node para Open VMS v7.3.2 ECO6 y anteriores, Module for Microsoft Exchange v5.1 y anteriores, Module for Microsoft Applications v2.0 y anteriores, Module for Meditech v2.0 y anteriores, y PowerSnap v2.4 SP1 y anteriores no manejan correctamente la localizacion de memoria, lo que permite a atacantes remotos producir una denegacion de servicio (agotamiento de memoria) a traves de multiples peticiones RPC manipuladas"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_client:*:sp3:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"518449F8-CA1E-415D-8552-293D624D033F"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_client:*:eco6:open_vms:*:*:*:*:*","versionEndIncluding":"7.3.2","matchCriteriaId":"0930C345-86C8-4665-B2A2-2F9E0595C43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_client:7.4:*:*:*:*:*:*:*","matchCriteriaId":"7A4BC0C3-5AA5-4D23-A628-EFE4BC2ADA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_client:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"116DD16E-0691-4D26-967C-CDF193BEE875"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_client:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D775A35D-CA14-4961-81B0-864CE6016CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_module:*:-:meditech:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"524F2801-C162-44F6-9D00-E3771636C631"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_module:*:-:microsoft_applications:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"C64C53C8-A5A0-477B-BBAB-39F220A17A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_module:*:-:microsoft_exchange:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"E8F5C21D-CF34-4C27-95A5-61C6C9608879"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_powersnap:*:sp1:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"28FC12F2-B22E-4A14-B85C-EB7C85234424"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_server:*:sp3:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"7542466A-A255-41D4-BC60-15FAF2C850F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_server:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D79E4890-47C3-475F-8008-8C78871EF306"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_server:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3D842DAB-610B-4AED-9605-2E1456BE5EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"83AE5E4B-E8E0-4F55-8924-21F529EC2057"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_storage_node:*:sp3:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"8B5399B8-CD20-421D-B49E-BF3EAC5A5914"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_storage_node:*:eco6:open_vms:*:*:*:*:*","versionEndIncluding":"7.3.2","matchCriteriaId":"40421894-395E-43C6-BEA2-51A25666470A"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_storage_node:7.4:*:*:*:*:*:*:*","matchCriteriaId":"6D11F7AC-E6F8-42F5-933E-1DCDA1CE5CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_storage_node:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"657928E4-E6A0-4127-96FA-FC9116AF3FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker_storage_node:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A0BA0545-C69B-40A4-9FD7-51705EBC9C0B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-23.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497645/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497666/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31866","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021095","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2894","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2008-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497645/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497666/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6220","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T21:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en login.php en Simple Document Management System (SDMS) v1.1.5 and v1.1.4, y posiblemente anteriores, lo que permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"pass\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"15D97881-809C-4BAB-B0A1-98C748696DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"324EE37A-6BC9-4143-B0D4-EE91CAA3E58D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6221","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T21:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusion remota de ficheros PHP en config.dadamail.php en el componente the Dada Mail Manager (com_dadamail)v2.6 para Joomla! lo que permitiria atacantes remotos ejecutar codigo PHP a su eleccion a traves de una URL en el parametro \"GLOBALS[mosConfig_absolute_path]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dadamailproject:dada_mail_manager:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B32E03A1-2A89-44AA-B59C-EFB5B5741EEB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/32551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32135","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46378","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7002","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6222","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T21:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Pro Desk Support Center (com_pro_desk) v1.0 y v1.2 de Joomla! permite a atacantes remotos leer ficheros a su eleccion a traves de ..(punto punto) en el parametro \"include_file\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*","matchCriteriaId":"85C9BDC3-1D68-421D-BAD6-49796FC90754"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.2:*:*:*:*:*:*:*","matchCriteriaId":"80F72F60-9952-44C6-B16F-0A2105562581"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/32523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32113","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46356","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6980","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6223","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plancia parameter to crea.php."},{"lang":"es","value":"Vulnerabilidad de inclusion remota de ficheros PHP en visualizza.php in Way Of The Warrior (WOTW) v5.0 y anteriores, permite a atacantes remotos ejecutar codigo PHP a su eleccion a traves de una URL en el parametro \"plancia\" a crea.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wotw:way_of_the_warrior:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F44B8BC7-87C4-46FD-83D0-B98860F26D49"}]}]}],"references":[{"url":"http://secunia.com/advisories/32515","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32115","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46341","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6992","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6224","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the plancia parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en visualizza.php en Way Of The Warrior (WOTW) v5.0 y anteriores permite a atacantes remotos leer ficheros a su eleccion a trves de .. (punto punto) en el parametro \"plancia\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samelinux:way_of_the_warrior:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"590357E5-AB7E-4359-A70C-294E75C81488"}]}]}],"references":[{"url":"http://secunia.com/advisories/32515","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46340","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6992","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6225","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter.  NOTE: the vendor has disputed this issue, stating \"crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist."},{"lang":"es","value":"*** DISCUTIDA *** Vulnerabilidad de inyeccion SQL en info.php en la secuencia de comandos Mole Group Airline Ticket Sale permite a atacantes remotos ejecutar comandos SQL a su eleccion, a traves del parametro \"flight\". NOTA: El vendedor ha recurrido esta vulnerabilidad, afirmando \"piratas informaticos locos y autonombradas compañias de seguridad distribuyen esas falsas informaciones respecto a las secuencias de comandos o versiones que no existen\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole-group:airline_ticket_sale_script:-:*:*:*:*:*:*:*","matchCriteriaId":"6CDD01A3-11F2-472A-AB25-77E4ADF9C571"}]}]}],"references":[{"url":"http://osvdb.org/49694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mole-group.com/content/view/57/72","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32138","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46383","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7009","source":"cve@mitre.org"},{"url":"http://osvdb.org/49694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mole-group.com/content/view/57/72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6226","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en moreinfo.php en la secuencia de comandos Pre Projects PHP Auto Listings, cuando magic_quotes_gpc esta desactivado, permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"itemno\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:php_auto_listings_script:_nil:-:*:*:*:*:*:*","matchCriteriaId":"CF59A15D-DF9D-473E-9C0D-DD5C20033910"}]}]}],"references":[{"url":"http://secunia.com/advisories/32547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32131","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46381","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6227","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en buyer_detail.php en Pre Multi-Vendor Shopping Malls  permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves de los parametros (1)\"sid\" y (2)\"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:pre_multi-vendor_shopping_malls:-:*:*:*:*:*:*:*","matchCriteriaId":"E6678F8F-5AB1-449A-A0F7-11EA3E7865B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46387","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6228","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to \"admin\"."},{"lang":"es","value":"Pre Multi-Vendor Shopping Malls permite a atacantes remotos evitar la autenticacion y conseguir acceso con privlegios administrativos mediante la manipulacion de los parametros de las cookies (1)\"adminname\" y (2)\"adminid\" a \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:pre_multi-vendor_shopping_malls:-:*:*:*:*:*:*:*","matchCriteriaId":"E6678F8F-5AB1-449A-A0F7-11EA3E7865B4"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/3018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46388","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6999","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6229","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with \"administer content\" permissions to inject arbitrary web script or HTML via (1) field labels and (2) content-type names."},{"lang":"es","value":"Una vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en la interfaz administrativa de Content Construction Kit (CCK) v5.x anterior a v5.x-1.10 y v6.x anterior a v6.x-2.0, un modulo de Drupal, que permite a usuarios remotos autentificados con permisos de \"administrador de contenido\" para inyectar secuencias de comando web o HTML a traves de (2) el campo \"etiquetas\" y (2) nombres de contenido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"A2D632D3-8707-40BD-A740-3AAAA0C53EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.0:beta:*:*:*:*:*:*","matchCriteriaId":"44466627-C95C-489F-92EA-BDA63C0EAFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"0233097D-E718-4FD4-8002-E79EB5B39988"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"4ECE1A46-1146-472D-9EEA-8756ED9F5029"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"CC3FC32E-B848-4137-9D8D-39D441EA5662"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"504DB2C5-3851-4835-BA5A-99C2FC750D11"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5E2DC36-DAB0-4A4F-9723-C1BF3FAB9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"0225D4C0-845F-40E1-8BD4-86FDD6C6093F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"AF4E97F2-9C42-44B1-B1F1-F287559E1411"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"59EF5F40-38CF-4C24-A5D8-9170FE67B10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"F232DC06-66E8-4F4B-9EA8-C394325E7A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"EBC14F31-2486-40A6-8554-2E7399E20715"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"C311CE79-DE50-498A-95B6-0B9F3992A2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"E2884977-8DFE-4488-BD6E-E17FC1781DAD"}]}]}],"references":[{"url":"http://drupal.org/node/330546","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32615","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32136","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46377","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00178.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/330546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00178.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6230","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en Tour.php en Pre Projects Pre Podcast Portal permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_podcast_portal:-:*:*:*:*:*:*:*","matchCriteriaId":"39DFA7A2-6B9E-4346-8363-8C257794717C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32563","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32124","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46386","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6997","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6231","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to \"admin\"."},{"lang":"es","value":"Pre Classified Listing PHP permite a atacantes remotos evitar la autenticacion y conseguir acceso con privilegios de administrador mediante la manipulacion de los parametros de las cookies (1) \"adminname\" y (2)\"adminid\" a \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_classified_listings:-:*:*:*:*:*:*:*","matchCriteriaId":"BCEC5E80-CC13-43A5-B2BB-CB4BB88AF7E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32126","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46390","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7000","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6232","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to \"admin\"."},{"lang":"es","value":"Pre Shopping Mall permite a atacantes remotos evitar la autenticacion y conseguir acceso con privilegios administrativos mediante la manipulacion de las cookies en los parametros (1) \"adminname\" y (2) \"adminid\" a \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_shopping_mall:-:*:*:*:*:*:*:*","matchCriteriaId":"F2B4F234-82B1-49FE-A3B3-89FA0FB14132"}]}]}],"references":[{"url":"http://secunia.com/advisories/32557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48984","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6233","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T23:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en index.php en las secuencias de comandos Five Dollar y Drinks permite a atacantes remotos ejecutar comandos SQL a traves del parametro \"recid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fivedollarscripts:drinks:-:*:*:*:*:*:*:*","matchCriteriaId":"9ABCBD49-5019-49E7-9A96-72797DA88105"}]}]}],"references":[{"url":"http://secunia.com/advisories/32579","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46379","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6234","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T01:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en modulo de Joomla! com_musica y Mambo lo que permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"id\" en index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_musica:-:*:*:*:*:*:*:*","matchCriteriaId":"B36EA486-C210-4A22-9AFD-BC5036F07F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:com_musica:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BFA9DC-8A03-4EEF-B247-F48868E9A2D5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488996/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28061","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5207","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488996/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6235","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) \"D\" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases."},{"lang":"es","value":"El plugin Netrw (netrw.vim) en Vim v7.0 y v7.1 permite a atacantes asistidos por el usuario ejecutar comandos de su elección a través de metacaracteres de línea de comandos en un fichero utilizado por (1) comando \"D\" (borrar) o (2) variable b:netrw_curdir, como ha sido demostrado utilizando los casos de prueba netrw.v4 y netrw.v5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97CCAA40-55CE-4AB9-9268-AADA06E29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"cve@mitre.org"},{"url":"http://www.rdancer.org/vulnerablevim-netrw.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim-netrw.v2.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.rdancer.org/vulnerablevim-netrw.v5.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11247","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2008/10/16/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rdancer.org/vulnerablevim-netrw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.rdancer.org/vulnerablevim-netrw.v2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.rdancer.org/vulnerablevim-netrw.v5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0580.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6236","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en login.php de Simple Document Management System (SDMS) v1.1.5 y v1.1.4, y posiblemente anteriores, lo que permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"login\". NOTA; La procedencia de esta informacion es desconocido; los detalles fueron obtenidos unicamente por una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"15D97881-809C-4BAB-B0A1-98C748696DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"324EE37A-6BC9-4143-B0D4-EE91CAA3E58D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6237","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en software-description.php en Scripts For Sites (SFS), Hotscripts-like Site permite a atacantes remotos ejecutar comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:hotscripts-like_site:-:*:*:*:*:*:*:*","matchCriteriaId":"118E6ABD-104E-4A07-BC06-A82AD828EA49"}]}]}],"references":[{"url":"http://secunia.com/advisories/32536","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46277","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6238","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en archive/savedqueries/savequeryfinish.html en versiones de OpenEdit Digital Asset Management (DAM) anteriores a la 5.2014 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro Name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openedit:openedit_digital_asset_management:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"F24D6E6D-25AC-44A8-88DD-95CC900245F3"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/96/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51026","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33064","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47690","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/96/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6239","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en versiones de OpenEdit Digital Asset Management (DAM) anteriores a 5.2014 permite a atacantes remotos ejecutar acciones sin especificar como usuarios arbitrarios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openedit:openedit_digital_asset_management:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"F24D6E6D-25AC-44A8-88DD-95CC900245F3"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/96/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47691","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/96/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6240","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en data/views/index.html en versiones de OpenEdit Digital Asset Management (DAM) anteriores a la 5.2014 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro catalogid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openedit:openedit_digital_asset_management:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"F24D6E6D-25AC-44A8-88DD-95CC900245F3"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/95/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51028","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33063","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47692","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/95/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6241","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/usercheck.php de FlexPHPSite v0.0.1 y v0.0.7, cuando está desactivado magic_quotes_gpc, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"checkuser\" (también conocido como campo \"username\"), o (2) \"checkpass\" (también conocido como campo \"password\") al fichero admin/index.php.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpsite:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BD5CC881-34E2-4889-B623-D4BC5D455AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpsite:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"48E5D22E-E943-4B58-929B-85B3E57ABC38"}]}]}],"references":[{"url":"http://secunia.com/advisories/33347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47643","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6242","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SearchResults.php in Scripts For Sites (SFS) EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en SearchResults.php de Scripts For Sites (SFS) EZ e-store permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"where\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_e-store:-:*:*:*:*:*:*:*","matchCriteriaId":"9E464CF0-4150-49B5-9C99-E53AADF5C8D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32039","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46273","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6243","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showcategory.php de Scripts For Sites (SFS) Hotscripts-like Site permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts_for_sites:ez_hotscripts-likesite:-:*:*:*:*:*:*:*","matchCriteriaId":"B1EE10D9-8EFE-4409-9259-71099120AC49"}]}]}],"references":[{"url":"http://osvdb.org/49546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32536","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46277","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48945","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6903","source":"cve@mitre.org"},{"url":"http://osvdb.org/49546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6244","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_reviews.php in Scripts for Sites (SFS) EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_reviews.php de Scripts for Sites (SFS) EZ Gaming Cheats permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_gaming_cheats:-:*:*:*:*:*:*:*","matchCriteriaId":"7E866E5A-6C0F-40E1-A228-059000C96FDB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46288","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6924","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6245","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en track.php en Scripts For Sites (SFS) EZ BIZ PRO permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_biz_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"0D286D04-3DDE-467F-8EBC-36F2E70B5051"}]}]}],"references":[{"url":"http://secunia.com/advisories/32552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46280","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6910","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6246","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en Scripts For Sites (SFS) EZ Webring permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_webring:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC17D9-E3BA-4928-AA6E-EEEBD97E829A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32032","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46279","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6913","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6247","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter."},{"lang":"es","value":"vulnerabilidad de inyección SQL en topsite.php en Scripts For Sites (SFS) EZ Top Sites, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ts\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_top_sites:-:*:*:*:*:*:*:*","matchCriteriaId":"9FCB5F9B-367C-4681-BF9E-13105ABD208D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46274","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6248","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in all.php in Galatolo WebManager 1.3a and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en all.php de Galatolo WebManager v1.3a, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"tag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galatolo:galatolo_webmanager:1.3a:*:*:*:*:*:*:*","matchCriteriaId":"825E44BA-96BB-417D-81CC-F3B8B83E884A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30232","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43781","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6249","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en plugings/users/index.php en Galatolo WebManager v1.3a y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gwm:galatolo_webmanager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3a","matchCriteriaId":"FA79032C-7D36-411E-8035-2E1C9F34B49E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30232","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46677","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6250","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Comdev Web Blogger v4.1.3 y anteriores permiten a atacantes remotos ejecutar código SQL de su elección a través del parámetro \"arcmonth\" a una página del blog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comdev:comdev_web_blogger:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.3","matchCriteriaId":"B9107419-5D7A-4144-8472-4E4591F2723C"},{"vulnerable":true,"criteria":"cpe:2.3:a:comdev:comdev_web_blogger:4.1:*:*:*:*:*:*:*","matchCriteriaId":"231947F8-A905-4E32-9B24-CF6D9B933992"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=102","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494412/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43776","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6079","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/494412/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6251","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en  includes/init.php en phpFan v3.3.4, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"includepath\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts:phpfan:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4D798DF9-373B-4D0A-9761-19C70A6F3B8F"}]}]}],"references":[{"url":"http://scripts.ishallnotcare.org/2008/11/18/phpfan-335-security-release-important/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46665","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7143","source":"cve@mitre.org"},{"url":"http://scripts.ishallnotcare.org/2008/11/18/phpfan-335-security-release-important/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6252","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and gain privileges via a long -k option."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el programa smc de smcFanControl v2.1.2, permite a usuarios locales ejecutar código de su elección y obtener privilegios a través de una opción -k larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smcfancontrol:smcfancontrol:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"46478C74-AD39-4A56-82FB-8A69643DC7F9"}]}]}],"references":[{"url":"http://blog.xwings.net/?p=127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/49796","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.macupdate.com/info.php/id/23049","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32252","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3126","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46551","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7088","source":"cve@mitre.org"},{"url":"http://blog.xwings.net/?p=127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/49796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.macupdate.com/info.php/id/23049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6253","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the g_pcltar_lib_dir parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en data/inc/lib/pcltar.lib.php in Pluck v4.5.3, cuando register_globals está activado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro \"g_pcltar_lib_dir\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pluck-cms:pluck:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"01B6FD49-5952-4CC9-B161-B4AC52BB6282"}]}]}],"references":[{"url":"http://secunia.com/advisories/32736","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pluck-cms.org/index.php?file=kop11.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498438","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46676","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7153","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pluck-cms.org/index.php?file=kop11.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6254","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL commands via the categoryID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en scripts/documents.php en Jadu Galaxies, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"categoryID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jadu:jadu_galaxies:-:*:*:*:*:*:*:*","matchCriteriaId":"97CADB58-2F47-4D24-80A6-03C7380436E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32337","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46652","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6255","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en vBulletin v3.7.4, permite a administradores autenticados en remoto ejecutar comandos SQL de su elección a través de (1) el párametro answer -respuesta- de admincp/verify.php, (2) el parámetro extension de una acción edit de admincp/attachmentpermission.php y (3) el parámetro iperm de admincp/image.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"8D5E8B8B-BCC8-4CF1-9F97-3897FE3EE73D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498390/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-69.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46682","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498390/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-69.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6256","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinfo[recurring] parameter, a different vector than CVE-2005-3022."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admincp/admincalendar.php en vBulletin v3.7.3.pl1, permite a administradores autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro \"holidayinfo[recurring]\". Un vector distinto del CVE-2005-3022."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbulletin:vbulletin:3.7.3:pl1:*:*:*:*:*:*","matchCriteriaId":"7DD5329E-6702-49B7-A9A0-FE99E29B3545"}]}]}],"references":[{"url":"http://secunia.com/advisories/32735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498369/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-68.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498369/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-68.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6257","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.asp de Openasp v3.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro idpage en el módulo pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openasp:openasp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0825EB15-E32B-48B9-B419-53FDAFC13A31"}]}]}],"references":[{"url":"http://secunia.com/advisories/32750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32322","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46648","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6258","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the (1) UserID and (2) Pwd parameters.  NOTE: this might be related to CVE-2004-2108."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en users.asp en QuadComm Q-Shop v3.0 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de los parámetros (1) UserID y (2) Pwd. NOTA: podría estar relacionado con el CVE-2004-2108."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D6CDF70-A50F-45AD-BF2D-E937F7C6F393"}]}]}],"references":[{"url":"http://secunia.com/advisories/32742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46649","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6259","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en search.asp en QuadComm Q-Shop v3.0 y posiblemente versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"srkeys\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"84AD9A91-C347-49C5-A72E-7FA34497F33A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46650","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6260","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary SQL commands via the serverid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Ultrastats v0.2.144 y v0.3.11, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro serverid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrastats:ultrastats:0.2.144:*:*:*:*:*:*:*","matchCriteriaId":"16BEBA14-4E74-4D50-8C24-6D09953EAEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultrastats:ultrastats:0.3.11:*:*:*:*:*:*:*","matchCriteriaId":"35DC77A1-0E96-44F8-BC86-A16CE7FE1D36"}]}]}],"references":[{"url":"http://secunia.com/advisories/32724","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32340","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46661","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6261","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php en E-topbiz AdManager v4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"group\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:admanager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"76D308F0-7865-4C8D-B199-111A0857C68F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32747","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32328","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46643","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6262","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the URL to the translate function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lib/url/meta_url.php de SaturnCMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la URL de la función transalate. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infireal:saturncms:-:*:*:*:*:*:*:*","matchCriteriaId":"C413F2B5-94A6-4DE3-86EB-C9E5DF237C97"}]}]}],"references":[{"url":"http://secunia.com/advisories/32726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6263","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the _userLoggedIn function.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lib/user/t_user.php en SaturnCMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\" a la función _userLoggedIn. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infireal:saturncms:-:*:*:*:*:*:*:*","matchCriteriaId":"C413F2B5-94A6-4DE3-86EB-C9E5DF237C97"}]}]}],"references":[{"url":"http://secunia.com/advisories/32726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32336","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48952","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7147","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6264","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/admin.php en E-topbiz Slide Popups v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:slide_popups:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4061A7A1-C707-42EA-BCF2-63C548AF1FD9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0811-exploits/slidepopups-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32171","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46434","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7036","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0811-exploits/slidepopups-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6265","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en portfolio/css.php de Cyberfolio v7.12.2 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro theme."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:*:*:*:*:*:*:*:*","versionEndIncluding":"7.12.2","matchCriteriaId":"5C7F6C78-7084-489D-A4A3-FB6B07E75CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:1.0:*:*:*:*:*:*:*","matchCriteriaId":"02EB7C79-CA67-4461-A000-545F821DFB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"8C908B9B-075D-4FB0-8725-AE2851423AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9084E735-DB98-4257-888A-62B8835DE487"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AACD235E-2852-4BAC-989C-608B94CAEEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"53E35815-270B-44E5-820D-E972AF3E57F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"6208BD02-AE03-4859-BEFF-8B055EA3AF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9F3A728A-FFFD-4CF1-8F1C-8DCA8F14458F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5CE6D42A-0EA8-4057-BDD6-E26D8C26C407"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:6.0:*:*:*:*:*:*:*","matchCriteriaId":"48A3E319-D2AE-491E-B42C-9F0FC559B355"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:7.10:*:*:*:*:*:*:*","matchCriteriaId":"BCC7D981-5F44-45A5-A1C4-3E8DD852EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyberfolio:cyberfolio:7.12:*:*:*:*:*:*:*","matchCriteriaId":"8ACFF9DB-D928-4891-BFAB-EF69591089E0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46490","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7065","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6266","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T11:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en links.php en Appalachian State University phpWebSite, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\" en una acción viewlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"8F3FCA8B-B551-4277-A5BA-B30AEAB8CFDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"38E0D277-229A-44E3-BF86-5F642CD59573"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D41752E1-5D0D-4B29-8A62-A4AD5A954C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5DE0D21B-C9AF-43EF-B1AA-395CB5F90593"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.9.3-1:*:*:*:*:*:*:*","matchCriteriaId":"B2461B7B-555A-4560-99AB-7EB8636F6C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.9.3-2:*:*:*:*:*:*:*","matchCriteriaId":"59F9101B-7A1B-42FE-B0D7-B9D0228E0CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.9.3-3:*:*:*:*:*:*:*","matchCriteriaId":"6615FCEB-690A-463B-90A2-B4BB0C68C734"},{"vulnerable":true,"criteria":"cpe:2.3:a:appstate:phpwebsite:0.9.3-4:*:*:*:*:*:*:*","matchCriteriaId":"1DF60F47-00BE-4AE2-9637-DE3745B88FFB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/497960/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32011","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497960/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6267","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T11:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en detail.php en Multi Languages WebShop Online 1.02, permite a atacantes remoto inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sadi_samami:multi_languages_webshop_online:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C4E1C9D2-E285-4D18-9EB0-1220225CC9ED"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46370","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6974","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6268","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en detail.php en Multi Languages WebShop Online v1.02, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sadi_samami:multi_languages_webshop_online:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C4E1C9D2-E285-4D18-9EB0-1220225CC9ED"}]}]}],"references":[{"url":"http://osvdb.org/49718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32499","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46369","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6974","source":"cve@mitre.org"},{"url":"http://osvdb.org/49718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6269","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T11:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id, session_logged_in, and session_username cookies for user privileges; (2) session_admin_id, session_admin_username, and session_admin cookies for admin privileges; and (3) session_staff_id, session_staff_username, and session_staff cookies for staff users."},{"lang":"es","value":"Joovili v3.1.4 permite a atacantes remotos evitar la autenticación y obtener privilegios como otros usuarios, incluyendo el usuario aedministrador, modificando las cookies (1) session_id, session_logged_in, y session_username con privilegios de usuario; las cookies (2) session_admin_id, session_admin_username, and session_admin con privilegios de administración (3) y las cookies session_staff_id, session_staff_username, and session_staff  como usuarios del staff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joovili:joovili:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7F52999D-DBD9-41F5-9B49-3BAFF6FBE90E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32491","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32058","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46272","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6270","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T11:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en Dragan Mitic Apoll v0.7 beta y 0.7.5, permite a atacantes remototos ejecutar comandos SQL de su elección a través del parámetro \"user\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miticdjd:apoll:0.7:beta:*:*:*:*:*:*","matchCriteriaId":"79E13F00-4C71-42CB-AB41-A7D4585F2AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:miticdjd:apoll:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"F6D9DA32-B929-44FC-BD1A-362D8E8127E1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32079","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46286","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48982","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6271","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the content parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en TBmnetCMS v1.0, cuando magic_quotes_gpc están desactivadas, permite a atacantes remotos leer ficheros de su elección a través de ..(punto punto) en el parámetro \"content\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tbmnet:tbmnetcms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1C13B18B-7B8A-4CD8-84E0-2CBE34FB7A69"}]}]}],"references":[{"url":"http://secunia.com/advisories/32462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32087","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6973","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6272","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en Dragan Mitic Apoll v0.7 beta y v0.7.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pass\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miticdjd:apoll:0.7:beta:*:*:*:*:*:*","matchCriteriaId":"79E13F00-4C71-42CB-AB41-A7D4585F2AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:miticdjd:apoll:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"F6D9DA32-B929-44FC-BD1A-362D8E8127E1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46286","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6969","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6273","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the langage parameter, a different vulnerability than CVE-2008-4781.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en configuration_script.php en MyKtools v3.0, permite a administradores autenticados remotamente incluir y ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"language\", vulnerabilidad distinta de CVE-2008-4781. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myktools:myktools:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CEA06077-90E8-4E04-84C0-FD403FB3D737"}]}]}],"references":[{"url":"http://secunia.com/advisories/32432","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48957","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6274","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the logmbr parameter (aka login field) or (2) the mdpmbr parameter (aka pass or \"Mot de passe\" field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades en index.php en FamilyProject v2.0, permite  a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"logmbr\" (campo login) o (2) \"mdpmbr\" (campo pass o \"Mot de passe\"). NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mjcreation:familyproject:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E53E6648-E8E1-4221-90FD-BB87DF40BD16"}]}]}],"references":[{"url":"http://osvdb.org/50314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46929","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7248","source":"cve@mitre.org"},{"url":"http://osvdb.org/50314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6275","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo User Karma  v5.x anterior a  v5.x-1.13 y v6.x anterior a  v6.x-1.0-beta1 para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de mensajes no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.12","matchCriteriaId":"94763249-DFD4-4F50-B5F0-9057812FDF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.xdev","matchCriteriaId":"5B6901C5-4EBB-4289-84E2-BCCE6882DABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A027EB43-4572-4F8C-BC81-EE904D6EA909"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE981EE3-6C07-4C32-94FF-5C4842501EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"20538DEE-2DD8-4053-9E95-80B1B078D0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"6AE26B83-1AE2-4C7D-9BAE-B44FD56BA33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9F6D2A9C-851A-4D07-AE32-55021852A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"0003511F-C372-41E6-92E5-EC102CC46DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"06779A54-8214-48AA-8170-1DB228E291C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"8A8CAC00-C852-44FF-A358-511442CD413D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"343B5E71-B38F-4C55-987E-46AB0BC18E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"91243936-B9DE-4EFD-A99E-2A415A5874EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"8E6FE5E5-CCF1-42C4-87C1-067767455C0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://drupal.org/node/339553","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50208","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32904","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32491","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46947","source":"cve@mitre.org"},{"url":"http://drupal.org/node/339553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6276","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via (1) a content type or (2) a voting API value."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el módulo User Karma  v5.x anterior a  v5.x-1.13 y v6.x anterior a  v6.x-1.0-beta1 para Drupal, permite a administradores autenticados remotamente ejecutar comandos SQL de su elección a través de (1) un tipo de contenido o (2) un valor \"voting API\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A027EB43-4572-4F8C-BC81-EE904D6EA909"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE981EE3-6C07-4C32-94FF-5C4842501EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"20538DEE-2DD8-4053-9E95-80B1B078D0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"6AE26B83-1AE2-4C7D-9BAE-B44FD56BA33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9F6D2A9C-851A-4D07-AE32-55021852A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"0003511F-C372-41E6-92E5-EC102CC46DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"06779A54-8214-48AA-8170-1DB228E291C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"8A8CAC00-C852-44FF-A358-511442CD413D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"343B5E71-B38F-4C55-987E-46AB0BC18E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"91243936-B9DE-4EFD-A99E-2A415A5874EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"B0606A92-2655-49D5-AF93-5048862E682D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:5.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"8E6FE5E5-CCF1-42C4-87C1-067767455C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:user_karma_module:6.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"88E743C6-A79E-4837-A448-A464DC23094F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://drupal.org/node/339553","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50207","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32904","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32491","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46946","source":"cve@mitre.org"},{"url":"http://drupal.org/node/339553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6277","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to execute arbitrary SQL commands via the subcategory_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product.php en RakhiSoftware Price Comparison Script (también conocido como Shopping Cart), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"subcategory_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rakhisoftware:rakhisoftware_shopping_cart:-:*:*:*:*:*:*:*","matchCriteriaId":"9CC1BE53-6C89-45C4-8737-90F153657D8A"}]}]}],"references":[{"url":"http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50313","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46920","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7250","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6278","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allow remote attackers to inject arbitrary web script or HTML via the (1) category_id and (2) subcategory_id parameters."},{"lang":"es","value":"Múltiple vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo product.php en RakhiSoftware Price Comparison Script (alias Shopping Cart) que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de los parámetros (1) category_id and (2) subcategory_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rakhisoftware:rakhisoftware_shopping_cart:-:*:*:*:*:*:*:*","matchCriteriaId":"9CC1BE53-6C89-45C4-8737-90F153657D8A"}]}]}],"references":[{"url":"http://osvdb.org/50326","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/50326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6279","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message."},{"lang":"es","value":"RakhiSoftware Price Comparison Script (alias Shopping Cart) permite a los atacantes remotos obtener información sensible a través de una cookie inválida PHPSESSID, lo que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rakhisoftware:rakhisoftware_shopping_cart:-:*:*:*:*:*:*:*","matchCriteriaId":"9CC1BE53-6C89-45C4-8737-90F153657D8A"}]}]}],"references":[{"url":"http://osvdb.org/50325","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/50325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6280","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCP_Static operation."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en apply.cgi sobre el Linksys WRT160N, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"action\" en una operación DHCP_Static."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wrt160n:-:*:*:*:*:*:*:*","matchCriteriaId":"3CA7C3A3-C5DF-4C8B-8A75-7D8C32B09AF2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0811-exploits/linksys-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32496","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46980","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0811-exploits/linksys-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6281","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Bluo CMS v1.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluocms:bluo_cms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3A970EF2-B49D-46B0-AFC7-EE2CB1BA0CAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/32932","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32522","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6282","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in engine/users/users_edit_pub.inc in CMS Ortus 1.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the city parameter in a users_edit_pub action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección sQL en engine/users/users_edit_pub.inc de CMS Ortus v1.13 y anteriores, permite a usuarios autenticados en remoto ejecutar comandos SQL de su elección a través del parámetro city -ciudad- en una acción users_edit_pub de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ortus.nirn:cms_ortus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.13","matchCriteriaId":"4100A2F3-DFA5-46C0-86BE-062ECAA4AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortus.nirn:cms_ortus:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5033EB33-233B-46C3-BA73-C788BD6A42D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortus.nirn:cms_ortus:1.11:*:*:*:*:*:*:*","matchCriteriaId":"3D4F7CBB-437C-4C65-BA17-798D6BC7D938"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortus.nirn:cms_ortus:1.12:*:*:*:*:*:*:*","matchCriteriaId":"970D9ABC-4DE0-47D5-AB6A-F89962A72BC6"}]}]}],"references":[{"url":"http://ortus.nirn.ru/index.php?ortupg=16","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32899","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32486","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46886","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7237","source":"cve@mitre.org"},{"url":"http://ortus.nirn.ru/index.php?ortupg=16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6283","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to \"the feature which converts URLs to anchor tags.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Subtext v2.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de un comentario. Relacionado con \"la característica que convierte URLs a etiquetas anchor -enlace-\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:subtextproject:subtext:2.0:*:*:*:*:*:*:*","matchCriteriaId":"83CBA01B-D97A-4DA6-BF88-8AC876542A67"}]}]}],"references":[{"url":"http://haacked.com/archive/2008/11/27/subtext-2.1-security-update.aspx","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/50235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32914","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=643458&group_id=137896","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32513","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46937","source":"cve@mitre.org"},{"url":"http://haacked.com/archive/2008/11/27/subtext-2.1-security-update.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/50235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=643458&group_id=137896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6284","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en edit.php de Z1Exchange v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro site -sitio-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1scripts:z1exchange:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00CEFB62-0227-45F1-9A8D-67D6591E0659"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32556","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46938","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6285","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the mid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de PHP TV Portal v2.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro mid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessvein:php_tv_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"5038DCB7-6049-4BF9-AA16-065B8B8DCEA5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32925","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32532","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46926","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6286","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SubscriberStart.asp en Active Newsletter v4.3, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"email\" (también conocido como campo  \"username\" o \"E-mail\"), o (2) \"password\"  (también conocido como campo \"password\"), a (a) Subscriber.asp o (b) start.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_newsletter:4.3:*:*:*:*:*:*:*","matchCriteriaId":"9AE4C542-DFA4-413C-9817-F8502E36784D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46916","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7280","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6287","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php, and (5) ViewController.php in controllers/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en Broadcast Machine v0.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"baseDir\" a (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php y (5) ViewController.php en controllers/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getmiro:broadcast_machine:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5CE2006F-470A-420B-9340-EC23837F40B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32554","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46939","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6288","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T23:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en Interface Medien ibase v2.03 y anteriores, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interface-medien:ibase:*:*:*:*:*:*:*:*","versionEndIncluding":"2.03","matchCriteriaId":"1FE7F3A6-096D-4075-A091-E8E5DFDDD2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:interface-medien:ibase:2.0:*:*:*:*:*:*:*","matchCriteriaId":"34007228-C295-460E-8546-7900B5948E9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6289","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cityview.php en Tours Manager v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través de el parámetro \"cityid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toursmanager:tours_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F893DDCA-05C8-40D6-A9E4-A188BFF8308D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32110","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46337","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6290","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the page_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en nicLOR Sito, cuando register_globals está activo, o magic_quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro page_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niclor:include_sito:-:*:*:*:*:*:*:*","matchCriteriaId":"8E043C7D-7601-40FF-B8B3-99AFB238DF0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32111","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46338","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6990","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6291","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLETTERLOGIN cookie to \"admin\"."},{"lang":"es","value":"Acc PHP eMail v1.1, permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo fijando la cookie NEWSLETTERLOGIN al valor \"admin.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accscripts:acc_php_email:1.1:*:*:*:*:*:*:*","matchCriteriaId":"18193AB3-EA37-40FF-BB1D-A750A709DAC4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32074","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46289","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6966","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6292","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) username_cookie to \"admin,\" (2) right_cookie to \"1,\" and (3) id_cookie to \"1.\""},{"lang":"es","value":"Acc Autos v4.0 permite a los atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo (1) username_cookie a \"admin,\" (2) right_cookie to \"1,\" y (3) id_cookie a \"1.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accscripts:acc_autos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"856447D4-A8B0-4BAD-B7EE-9B93474551EA"}]}]}],"references":[{"url":"http://secunia.com/advisories/32517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46287","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6968","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6293","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie to \"admin.\""},{"lang":"es","value":"Archivo admin/Index.php en Acc Real Estate 4.0 que permite a los atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo username_cookie a \"admin.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accscripts:acc_real_estate:4.0:*:*:*:*:*:*:*","matchCriteriaId":"056E600C-C5E9-40B6-B67D-443EAC5381FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32078","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46290","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6294","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie cookie to \"admin.\""},{"lang":"es","value":"admin/Index.php en Acc Statistics v1.1 permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo fijando la cookie username_cookie al valor \"admin.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accscripts:acc_statistics:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A85961EB-C848-46B4-A825-BE4DD4FBF771"}]}]}],"references":[{"url":"http://secunia.com/advisories/32517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32078","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46292","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6965","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6295","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.php and (2) rss.php; the query string after the image name in (3) photos/photo; the path parameter to (4) folder.php; page parameter and REQUEST_URI to (5) login.php; ver parameter to (6) media.php; theme parameter to (7) modules/iconset/iconset-debug.php; and the REQUEST_URI to (8) index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Camera Life 2.6.2b8 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro \"q\" a (1) search.php y (2) rss.php; la cadena de la consulta que va después del nombre de la imagen en (3) photos/photo; el parámetro de path a (4) folder.php; el parámetro page y REQUEST_URI a (5) login.php; el parámetro ver a (6) media.php; el parámetro theme a (7) modules/iconset/iconset-debug.php y la REQUEST_URI a (8) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:camera_life:camera_life:2.6.2b8:*:*:*:*:*:*:*","matchCriteriaId":"A2CEA559-7C4D-440A-A77A-99EFAAEF66DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/31234","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-camera-life2.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46285","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-camera-life2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6296","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting the user cookie to \"demo.\""},{"lang":"es","value":"admin.php en Maran PHP Shop permite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de la cookie de usuario \"demo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maran:php_shop:*:*:*:*:*:*:*:*","matchCriteriaId":"5BD606FC-23AF-4D1C-9CBA-D8796C32A55D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46306","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6954","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6297","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the (1) domain and (2) d1 parameters."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados -Xss- en order.php en DHCart, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) \"domanin\" y (2) \"d1\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dhcart:dhcart:3.84:*:*:*:*:*:*:*","matchCriteriaId":"C99B65D2-08F1-4C52-B3BF-4064A1F93E19"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/11/dhcart-multiple-variable-xss-and-stored.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46339","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/11/dhcart-multiple-variable-xss-and-stored.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6298","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the \"HTTP header rewrite function.\""},{"lang":"es","value":"Vulnerabilidad no especificada en sISAPILocation anteriores a v1.0.2.2 que permite a los atacantes remotos evitar intencionadamente las restricciones de acceso para el codificado de caracteres y la cookie segura flag a través de vectores desconocidos en relación a la \"función de reescribir la cabecera de HTTP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rocketeer.dip:sisapilocation:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2.0","matchCriteriaId":"5A760AC3-7A95-45E1-8A7F-21C2CFC32152"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocketeer.dip:sisapilocation:1.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C212DB21-91C1-472C-9615-14162317B2B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocketeer.dip:sisapilocation:1.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"79CA7010-827F-42DE-95AB-975AF8F80B3E"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN67060882/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000076.html","source":"cve@mitre.org"},{"url":"http://rocketeer.dip.jp/sanaki/free/free100.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32247","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46516","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN67060882/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rocketeer.dip.jp/sanaki/free/free100.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6299","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors in the com_content module related to \"article submission.\""},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en Joomla! v1.5.7 y anteriores, permite a usuarios autentificados remotos inyectar una secuencia de comandos web o HTML a través de (1) los parámetros \"title\" y \"descripción\" en el módulo com_weblinks y (2) vectores no especificados cen el modulo com_content relativo a \"article submission.\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.7","matchCriteriaId":"82062F02-1F62-4D9B-B1A9-DC4B95C37791"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B2D9FB89-D522-410F-8E68-763E9931E955"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D548B3C9-483F-492C-A6BB-694B7217FEE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9813E813-2983-4471-9E56-6F254810A66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A4F4F9E7-BA44-4235-A246-DB6C432C3873"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"495BD724-45BE-4214-B120-3A83BD9AD11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"16F243A8-5513-4BB7-AB55-5A715D5AE546"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"F95550B4-3620-42D8-99AC-369126CDDFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BC0429EF-3848-4E72-999E-719DB54A7429"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F12537ED-A4EB-40F9-AC00-B796169E114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc3:*:*:*:*:*:*:*","matchCriteriaId":"E2EF8067-2707-40AA-A95B-3C86625A7A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*","matchCriteriaId":"FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/283-20081101-core-comcontent-xss-vulnerability.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.joomla.org/security/news/284-20081102-core-comweblinks-xss-vulnerability.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32622","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5219-joomla-158-released.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32263","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3104","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46523","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/283-20081101-core-comcontent-xss-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.joomla.org/security/news/284-20081102-core-comweblinks-xss-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5219-joomla-158-released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6300","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the (1) gwm_user and (2) gwm_pass cookies to admin.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Galatolo WebManager v1.3a que permite a los atacantes remotos evitar la atenticación y obtener acceso administrativo estableciendo las cookies (1) gwm_user y (2) gwm_pass a admin. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente por información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gwm:galatolo_webmanager:1.3a:*:*:*:*:*:*:*","matchCriteriaId":"8961B652-5D5B-464F-91EA-B01CFD666913"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30247","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30247/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30247/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6301","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo shoutbox_view.php en el módulo Small ShoutBox v1.4 para phpBB que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id en la acción de borrado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prezmo:small_shoutbox:1.4:*:*:*:*:*:*:*","matchCriteriaId":"A2671785-6BFA-49B0-8C28-CB51A1DEABC1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","matchCriteriaId":"8370A82D-83E8-4A70-8D04-1FCC6D24CAFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32123","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46389","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6995","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6302","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php."},{"lang":"es","value":"TurnkeyForms Local Classifieds permite a atacantes remotos evitar la autenticación y obtener acceso de administrador a través de una solicitud directa a Site_Admin/admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:local_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"1D371771-8478-4510-B9EE-8A6F30A91CF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46589","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7106","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6303","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tourview.php de ToursManager, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro tourid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toursmanager:tours_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"214DD96A-0326-43E2-A6A6-A890D27E75DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32397","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46765","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6304","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magic_quotes_gpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en xt:Commerce anteriores a v3.0.4 Sp2.1, cuando magic_quotes_gpc está habilitado y las SEO URLs son activadas, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xt-commerce:xt-commerce:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.4","matchCriteriaId":"B7019CED-C2D2-4353-8F71-EF81BCF9E6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xt-commerce:xt-commerce:3.0.4:-:*:*:*:*:*:*","matchCriteriaId":"C4CD0B5E-2C86-4340-8D93-E5D014B63E9A"}]}]}],"references":[{"url":"http://secunia.com/advisories/32830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32398","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.xt-commerce.com/blog/xtcommerce-news/sicherheitspatch-fuer-version-304-sp21.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46757","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://secunia.com/advisories/32830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.xt-commerce.com/blog/xtcommerce-news/sicherheitspatch-fuer-version-304-sp21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6305","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the API_HOME_DIR parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en init.php de Free Directory Script v1.1.1, cuando está activado \"register_globals\", permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"API_HOME_DIR\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedirectoryscript:free_directory_script:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E5DCBEE1-3ADA-43A7-A21F-EEA72BE58049"}]}]}],"references":[{"url":"http://osvdb.org/49923","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46699","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7155","source":"cve@mitre.org"},{"url":"http://osvdb.org/49923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6306","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en el archivo signinform.php en Softbiz Classifieds Script que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro msg. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbizscripts:classifieds_script:-:*:*:*:*:*:*:*","matchCriteriaId":"84C163B7-F124-4830-A816-C6CAE56BE286"}]}]}],"references":[{"url":"http://secunia.com/advisories/32828","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32375","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46743","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6307","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to \"admin.\""},{"lang":"es","value":"E-topbiz Link Back Checker 1 permite a atacantes remotos evitar la autenticación y obtener acceso de administrador manipulando la cookie auth a \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-topbiz:link_back_checker:1:*:*:*:*:*:*:*","matchCriteriaId":"5F530F66-4B24-41A4-A7E4-82F77BBCC0E1"}]}]}],"references":[{"url":"http://osvdb.org/49924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32354","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46697","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7156","source":"cve@mitre.org"},{"url":"http://osvdb.org/49924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6308","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the pun_user[language] parameter to (1) functions_navlinks.php, (2) header_new_messages.php, (3) profile_send.php, and (4) viewtopic_PM-link.php in include/pms/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Private Messaging System (PMS) v1.2.3 y anteriores para PunBB que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivo a través de ..(punto punto) en el parámetro pun_user[language] para (1) functions_navlinks.php, (2) header_new_messages.php, (3) profile_send.php, y (4) viewtopic_PM-link.php en include/pms/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:private_messaging_system:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.3","matchCriteriaId":"6B455E2B-E7CB-44D8-9494-54B3798C6206"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:private_messaging_system:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDFB063-B99A-4628-8420-1E0875976703"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:private_messaging_system:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DF4F509E-7F4A-4169-8660-2754D29A5922"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:private_messaging_system:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ADB151A3-1868-4EFA-A83F-1797696F6B83"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/13201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32360","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46718","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7159","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6309","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands via the f[password] parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en W3matter AskPert, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro f[password]. NOTA: algunos de estos detalle se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3matter:askpert:-:*:*:*:*:*:*:*","matchCriteriaId":"83D1DF35-2926-4955-B63F-04B91AC25367"}]}]}],"references":[{"url":"http://secunia.com/advisories/32783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32368","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46732","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6310","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL commands via the f[password] parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de W3matter RevSense v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro f[password]. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3matter:revsense:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6EDF436D-1249-4B4F-B864-3412E2A80842"}]}]}],"references":[{"url":"http://secunia.com/advisories/32783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32365","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46733","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6311","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter.  NOTE: the id vector is covered by another CVE name."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php de Butterfly Organizer v2.0.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mytable\". NOTA: el vector \"id\" está cubierto por otro nombre de CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:butterflymedia:butterfly_organizer:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5368BF56-E372-47CA-9979-CB6106C3F01B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33086","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49012","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6312","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo Login.asp en index.php de ProQuiz v1.0 y anteriores que permiten a los atacantes remotos ejecutar  comandos SQL de su elección a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manzovi:proquiz:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BD37-95C8-424C-90C1-CC6CD18D5938"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32724","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47196","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7397","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6313","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter.  NOTE: PHP remote file inclusion attacks are also likely."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en addedit-render.php de phpAddEdit v1.3, cuando la opción magic-quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de una dirección web en el parámetro \"editform\". NOTA: Un ataque de inclusión remota de archivo PHP también es posible.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpaddedit:phpaddedit:1.3:*:*:*:*:*:*:*","matchCriteriaId":"F9396513-CFC2-4460-8CE8-CBD01CAB9CB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33027","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32774","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47262","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6314","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en tag_board.php del módulo Tag Board v4.0 y anteriores para phpBB, permite a los atacantes remotos ejecutar  comandos SQL de su elección a través del parámetro \"id\" en una acción \"delete\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:tag_board:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"AE310B42-D048-48BF-9E23-F49629D08B15"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","matchCriteriaId":"8370A82D-83E8-4A70-8D04-1FCC6D24CAFC"}]}]}],"references":[{"url":"http://osvdb.org/50600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33031","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47163","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7386","source":"cve@mitre.org"},{"url":"http://osvdb.org/50600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6315","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter, a different issue than CVE-2008-6316."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en _conf/core/common-tpl-vars.php en PHPmyGallery 1.0 beta2, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"confdir\", es una cuestión diferente a CVE-2008-6316."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmygallery:phpmygallery:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"170AFD6A-46AF-4401-9021-F8728E4B87B5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32705","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7392","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6316","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter, a different issue than CVE-2008-6316 and a different vector than CVE-2008-6318."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en _conf/core/common-tpl-vars.php en PHPmyGallery 1.0 beta2, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro \"lang\", es una cuestión distinta a CVE-2008-6316 y un vector diferente a CVE-2008-6318."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmygallery:phpmygallery:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"170AFD6A-46AF-4401-9021-F8728E4B87B5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32705","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47171","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7392","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6317","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf[lang] parameter, a different issue than CVE-2008-6318.  NOTE: this might be the same issue as CVE-2008-6316."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en _conf/_php-core/common-tpl-vars.php en PHPmyGallery v1.5 beta, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro \"conf[lang]\", es distinta a CVE-2008-6318. NOTA: Puede ser la misma cuestión que CVE-2008-6316."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmygallery:phpmygallery:1.5:beta:*:*:*:*:*:*","matchCriteriaId":"3B3DDC0E-1DA9-4325-81E6-6E75A4B94128"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32723","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47171","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7399","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6318","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter, a different vector than CVE-2008-6317."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en _conf/_php-core/common-tpl-vars.php en PHPmyGallery v1.5 beta, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"admindir\", un vector diferente a CVE-2008-6317."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmygallery:phpmygallery:1.5:beta:*:*:*:*:*:*","matchCriteriaId":"3B3DDC0E-1DA9-4325-81E6-6E75A4B94128"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32723","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7399","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6319","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL commands via the calid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en calendarevent.cfm en CF_Calendar, permite a los atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"calid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfmsource:cf_calendar:-:*:*:*:*:*:*:*","matchCriteriaId":"84FF84F0-D1B5-4563-87A9-B95E75517CCA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32766","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7413","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6320","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.cfm en CF Shopkart v5.2.2, permite a los atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Category\" en una acción \"ViewCategory\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfshopkart:cf_shopkart:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D5C3B77-7974-4717-9221-379E007C1562"}]}]}],"references":[{"url":"http://secunia.com/advisories/33080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32765","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6321","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request."},{"lang":"es","value":"CF Shopkart v5.2.2 almacena cfshopkart52.mdb bajo el directorio ráiz con un control de acceso no suficiente, lo que permite a atacantes remotos obtener información importante, tal como nombres de usuario y contraseñas, a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfshopkart:cf_shopkart:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D5C3B77-7974-4717-9221-379E007C1562"}]}]}],"references":[{"url":"http://secunia.com/advisories/33080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6322","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.cfm en CFMSource CFMBlog, permite a los atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"categorynbr\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfmsource:cfmblog:-:*:*:*:*:*:*:*","matchCriteriaId":"6BECB1E5-7387-4B33-8A39-1F56304AF9E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32768","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7415","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6323","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forummessages.cfm en CFMSource CF_Auction, permite a los atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"categorynbr\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfmsource:cf_auction:-:*:*:*:*:*:*:*","matchCriteriaId":"1620F6DB-F28B-4C1E-A158-3A40FD1D58F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32767","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6324","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forummessages.cfm en CF_Forum, permite a los atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"categorynbr\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfmsource:cf_forum:-:*:*:*:*:*:*:*","matchCriteriaId":"CBF35A2C-5BA7-472B-BFE8-5B195544AF91"}]}]}],"references":[{"url":"http://secunia.com/advisories/33064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32767","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6325","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) radio parameter to showcategory.php, (2) msg parameter to advertisers/signinform.php, (3) radio parameter to gallery.php, (4) msg parameter to lostpassword.php, (5) radio parameter to showcategory.php, (6) msg parameter to admin/adminhome.php, and (7) msg parameter to admin/index.php.  NOTE: a different signinform.php file is already covered by CVE-2008-6306."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en Softbiz Classifieds Script, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de los parámetros (1) \"radio\" en showcategory.php (2) \"msg\" en advertisers/signinform.php, (3) \"radio\" en gallery.php, (4) \"msg\" en lostpassword.php, (5) \"radio\" en showcategory.php, (6) \"msg\" en admin/adminhome.php, y (7) \"msg\" en admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbizscripts:classifieds_script:-:*:*:*:*:*:*:*","matchCriteriaId":"84C163B7-F124-4830-A816-C6CAE56BE286"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/classifieds-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32828","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32569","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47008","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/classifieds-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6326","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Simple Customer como el descargado en 20081118, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"email\". NOTA: el origen de esta información es desconocido, los detalles se han obtenido de información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplecustomer:simple_customer:-:*:*:*:*:*:*:*","matchCriteriaId":"D45E7DF8-519C-4B1D-9344-53ACC423E378"}]}]}],"references":[{"url":"http://secunia.com/advisories/32727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6327","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en ProQuiz v1.0 permite a los atacantes remotos ejecutar comandos SQL a través del parámetro \"password\", es un vector de ataque distinto que en CVE-2008-6312."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manzovi:proquiz:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BD37-95C8-424C-90C1-CC6CD18D5938"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47196","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49020","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6328","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T11:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo view.php en Butterfly Organizer v2.0.0 y v2.0.1 permiten a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:butterflymedia:butterfly_organizer:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E6822-2B75-4570-936C-EADE1F61AE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:butterflymedia:butterfly_organizer:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5368BF56-E372-47CA-9979-CB6106C3F01B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33086","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29700","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5797","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6329","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters, as reachable from Employee/emp_login.asp.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Employee/login.asp en Pre ASP Job Board, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"username\" y (2) \"password\" como accesible desde Employee/emp_login.asp. NOTE: alguno de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:pre_asp_job_board:-:*:*:*:*:*:*:*","matchCriteriaId":"E623DDB2-405B-432C-BD3F-5AB60B1325A6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32366","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46736","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6330","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T16:30:08.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en MyTopix v1.3.0 y anteriores que permiten a los atacantes autenticados ejecutar comandos SQL a través del parámetro \"send\" en una acción \"notes\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaia_interactive:mytopix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.0","matchCriteriaId":"DA6BEA94-803D-4FB8-B75C-BB3F6028394D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jaia_interactive:mytopix:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"BC9A6354-C13A-41D3-844E-390EF48765A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32788","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3215","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46741","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7160","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6331","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T16:30:08.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en Streber anterior a versión 0.08093, permiten a los atacantes remotos secuestrar la autenticación de víctimas no especificadas por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0803","matchCriteriaId":"324309D4-D96E-4AC6-A149-5275C770E467"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.08:*:*:*:*:*:*:*","matchCriteriaId":"D6ADC874-08A8-435E-9744-3C21312076A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.054:*:*:*:*:*:*:*","matchCriteriaId":"42C5425A-697C-4ED8-8D14-62FEEA04EFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.055:*:*:*:*:*:*:*","matchCriteriaId":"95B6232D-9003-4120-B234-9CC728EB7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.056:*:*:*:*:*:*:*","matchCriteriaId":"DDA99D40-A3E7-4287-9D8D-AD790D217491"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.078:*:*:*:*:*:*:*","matchCriteriaId":"D81DF49B-20DC-4B6A-ADF1-2B1BEF55A453"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.079:*:*:*:*:*:*:*","matchCriteriaId":"04072311-5E45-44A0-BA63-ECDA3532365E"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.0791:*:*:*:*:*:*:*","matchCriteriaId":"175313B5-52CD-4FCF-A790-3CF4C6CCDB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.0792:*:*:*:*:*:*:*","matchCriteriaId":"CD44EEB0-5B4B-4731-BC0D-F9457F6D641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.0794:*:*:*:*:*:*:*","matchCriteriaId":"EF3691FE-B99D-4FB9-B85A-751C5E373E20"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.0795:*:*:*:*:*:*:*","matchCriteriaId":"4794DDC3-D80B-4C16-A631-57B48AB34DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.0796:*:*:*:*:*:*:*","matchCriteriaId":"DAC101DF-728C-4923-AD58-59A68245E61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.0801:*:*:*:*:*:*:*","matchCriteriaId":"F7BE3022-CAD7-4B68-AD9D-1C135C3A2358"},{"vulnerable":true,"criteria":"cpe:2.3:a:streber-pm:streber:0.07991:*:*:*:*:*:*:*","matchCriteriaId":"9D2F66FE-85B5-434D-856C-5E799CCC1702"}]}]}],"references":[{"url":"http://osvdb.org/49893","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=145255&release_id=640914","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46674","source":"cve@mitre.org"},{"url":"http://osvdb.org/49893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=145255&release_id=640914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6332","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T16:30:08.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Simple Customer v1.2, permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplecustomer:simple_customer:1.2:*:*:*:*:*:*:*","matchCriteriaId":"73E8E518-D3E0-4526-B263-40908D3D5802"}]}]}],"references":[{"url":"http://osvdb.org/49916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32339","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46675","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7146","source":"cve@mitre.org"},{"url":"http://osvdb.org/49916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6333","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in RSS Simple News (RSSSN), when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php en RSS Simple News (RSSSN), cuando la opción magic_quotes_gpc está desactivada, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro \"pid\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_general:rss_simple_news:-:*:*:*:*:*:*:*","matchCriteriaId":"0BBA3329-5716-4723-AEF0-9A33A23CB47B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32962","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6334","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en eMetrix Extract Website, permite a los atacantes remotos leer arbitrariamente archivos a través del valor .. (punto punto) en el parámetro \"filename\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emetrix:extract_website:-:*:*:*:*:*:*:*","matchCriteriaId":"7B545CFC-7EAE-46EA-95DD-188EF05F6BD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/33255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32936","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47517","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6335","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en eMetrix Online Keyword Research Tool, permite a los atacantes remotos leer archivos de su elección a través del valor .. (punto punto) en el parámetro \"filename\".\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emetrix:online_keyword_research_tool:-:*:*:*:*:*:*:*","matchCriteriaId":"C43B3159-B858-4033-AE57-EFD21C6F1EE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32932","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47516","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7524","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6336","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register_globals is enabled, allows remote attackers to read arbitrary local files via directory traversal sequences in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en Text Lines Rearrange Script 1.0, cuando la opción register_globals está activada, permite a atacantes remotos leer ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro \"filename\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rightscripts:text_lines_rearrange_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1880AC84-0C7C-420F-93A7-D77CABBB9422"}]}]}],"references":[{"url":"http://secunia.com/advisories/33276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32968","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7542","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6337","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the job_id parameter in a jobshow action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Volunteer Management System (com_volunteer) v2.0 para Joomla!,  permite a atacantes remotos ejecutar comandos SQL a través del parámetro job_id en una acción jobshow sobre el fichero index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlaapps:com_volunteer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"209ACEEA-2CB0-49D0-A009-E60E28178571"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33271","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32973","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6338","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the WEBERkommunal Facilities (wes_facilities) extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la extensión WEBERkommunal Facilities (wes_facilities) v2.0 de TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:weber-ebusiness:wes_facilities:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A07AD3E4-05C8-4DA7-BD79-D5FB5444AD70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33302","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/wes_facilities/2.0.1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32982","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/wes_facilities/2.0.1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-6340","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Vox populi (mv_vox_populi) extension 0.3.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la extensión vox populi (mv_vox_populi) v0.3.0 y anteriores de TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mathieu_vidal:mv_vox_populi:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.0","matchCriteriaId":"95AF5A96-16CD-48B3-AC63-C1304B6AB3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mathieu_vidal:mv_vox_populi:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AE27FEE7-B925-43DE-A3C2-2F2CD4AB81D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mathieu_vidal:mv_vox_populi:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"266B7381-D0A5-47ED-8AEC-EA933BBEE99A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/mv_vox_populi/0.3.1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32980","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/mv_vox_populi/0.3.1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-6341","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the SB Universal Plugin (SBuniplug) extension 2.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la extensión SB Universal Plugin (SBuniplug) v2.0.1 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:sb_universal_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"6A42B3ED-815F-4FDF-933A-D4E1AF6D53AF"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6342","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TYPO3 Simple File Browser (simplefilebrowser) extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors."},{"lang":"es","value":"vulnerabilidad no específica en la extensión Simple File Browser (simplefilebrowser)   v1.0.2 y anteriores para TYPO3 permite a atacantes remotos obtener información importante a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lobacher_patrick:simplefilebrowser:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"D4E4ED78-54AB-4AFD-8656-4582B60FCF0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lobacher_patrick:simplefilebrowser:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A39E1B5D-2A07-4E5A-9308-E88F611B1183"},{"vulnerable":true,"criteria":"cpe:2.3:a:lobacher_patrick:simplefilebrowser:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBBCC62-E40C-4342-965E-68C295B1B017"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/simplefilebrowser/1.0.3/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/simplefilebrowser/1.0.3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6343","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the TU-Clausthal ODIN (tuc_odin) extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la extensión TU-Clausthal ODIN (tuc_odin) v0.0.1, v0.1.0, v0.1.1 y v0.2.0 para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_odin:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DD70215D-9DD3-4E0D-B011-9C1F5533CAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_odin:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"786E58DA-13B8-41C8-9A52-A7033499314D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_odin:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5A1552D0-BE89-4D9D-A53E-F973EFA0934C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_odin:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0A9322D1-4B47-41BB-8560-D89086873BEE"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6344","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the TU-Clausthal Staff (tuc_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en TU-Clausthal Personal (tuc_staff) v0.3.0 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_staff:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.0","matchCriteriaId":"F6783231-3D83-4BE8-8D68-42097D9BA3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_staff:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F50F57ED-1222-44A6-A779-BE28F2017379"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_staff:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E0B875BF-EBFF-4C6D-8AF6-01C76CE16A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_staff:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1DAAF40F-8D32-47D3-8DEA-9B4775E7BF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tu-clausthal_staff:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4E0B3F88-C5B3-4191-93F7-1A1E61E6AA9B"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32981","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6345","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en Forum.php de SolarCMS v0.53.8 y v1.0 permite a atacantes remotos ejecutar comandos SQL de su eleccióna a través de parámetro \"cat\" en indes.php. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.maury91:solarcms:0.53.8:*:*:*:*:*:*:*","matchCriteriaId":"F3340601-32C5-46E6-9B92-EDEC3D240D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cms.maury91:solarcms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3A908A4C-E97C-47CC-84E6-2B7B22AC3E53"}]}]}],"references":[{"url":"http://secunia.com/advisories/33269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32974","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7548","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6346","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the DR Wiki (dr_wiki) extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la extensión Dr Wiki (dr_wiki) v1.7.1 y anteriores para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no determinados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.1","matchCriteriaId":"87CCD79B-CD50-49AA-9F30-D2F6831FCC38"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.4:*:*:*:*:*:*:*","matchCriteriaId":"816996E9-858D-4AEB-B7EF-B816969AB31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1DCB930E-7BFA-4034-9CD3-81DFE247B8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1F438694-740A-4FF0-9231-59982004281C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"106B30CE-3C1C-4493-B163-4533F74E907A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.6:*:*:*:*:*:*:*","matchCriteriaId":"BA1CA68C-E2EB-46BF-9565-B36DF3B28363"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0B103A95-4D6B-4D71-B5D6-135C142762E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"665B4C21-91C0-4677-948D-B92B91D2DE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0A2003A-F871-4214-9C19-0D143760D091"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"69FDAC26-474E-4B84-9383-183135E54F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"D1F82C0D-B861-41E2-9005-67BD426D7D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.8:*:*:*:*:*:*:*","matchCriteriaId":"3E069B70-871F-4B2D-A6B5-0B08E5D8E68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"200181EB-FD48-4D52-ADF7-B04FC1F4E44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9CF4BA7B-0B35-4FA9-AAF6-8F2AE1A69ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"ADDA8FD3-897B-4602-903F-781785FCC4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6AA9F0A8-2348-4748-A70F-2B41884BCB8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8E6126F8-29F8-498F-87C4-120F10A3FFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BD85315B-A801-47CB-AF83-F05E613CCBA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.1:*:*:*:*:*:*:*","matchCriteriaId":"00AF053F-A640-4C7D-A3E8-37FC768747A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FC88BE76-DAF0-48BB-A742-27D7AEC44580"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.3:*:*:*:*:*:*:*","matchCriteriaId":"64FF49D8-D2E3-44CB-B34B-BCF13B31AA58"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C02315A0-E9C4-48E1-8AE5-F77CAAAF71F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50A94F95-E788-4730-A500-3B5B7A4239B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"79362D9A-25A2-45C9-A4FB-B51D15F46F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F8035711-650E-4E4D-8BDB-2708424CEF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1FA48595-A128-4FB8-BBB3-84DD1EC700DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"2374C955-5765-46CB-A47B-715832273BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A11DD69D-3C4F-4147-8317-C1852555A96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8094B4C9-B953-4524-B7D8-CF455E681521"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"10150F64-C83D-436E-ADB8-0FD27A6AB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"43722B4F-90F7-4BDB-A637-4B4B399653B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DACAECDE-1C76-45A6-9B4C-2B5591E6E270"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5AEC0D3F-8A3D-4AA3-8B97-0DE50133A587"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"7D0BA60E-79F8-4904-8A9F-397438BB73BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4CDD04B2-A3AC-4B1A-9877-FE82EDC9322E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dennis_royer:dr_wiki:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7C8F572B-2350-4E9A-B2ED-057C547FBB1D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33256","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-3/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20081222-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6347","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión de archivo PHP remoto en lib/onguma.class.php en el componente de Joomla! Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro mosConfig_absolute_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luigi_massa:onguma_time_sheet:2.04:beta:*:*:*:*:*:*","matchCriteriaId":"27B27BFF-B4AF-41B7-B016-D80126014CC9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32095","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6976","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6348","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to gallery_category.php, (2) photo_id parameter to gallery_photo.php, and the (3) user_name and (4) user_pass parameters to admin/index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en DevelopItEasy Photo Gallery v1.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"cat_id2 en gallery_category.php, los parámetros (2) \"photo_id\" y (4) \"user_pass\" en admin/index.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:developiteasy:photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE7F7493-0D8C-4BFF-A390-E3A88EFDA5A8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46400","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6349","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en survey_results_text.php en TurnkeyForms Business Survey Pro v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:business_survey_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A0BEFCAD-7A1E-485B-BDD1-010CB07CE0C0"}]}]}],"references":[{"url":"http://secunia.com/advisories/32561","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32169","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46420","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7029","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6350","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listtest.php de TurnkeyForms Local Classifieds, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:local_classifieds:-:*:*:*:*:*:*:*","matchCriteriaId":"62969392-325A-44B1-878B-7F73271854EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32176","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46417","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6351","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en listtest.php de TurnkeyForms Local Classifieds permite a atacantes remotos inyectar HTML o scripts webs arbitrarios a través del parámetro 'r'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:local_classifieds:-:*:*:*:*:*:*:*","matchCriteriaId":"62969392-325A-44B1-878B-7F73271854EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/32591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32176","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46419","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6352","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en home.html de Xpoze.Pro 4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro menu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpoze:xpoze_pro:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9741CA70-76D1-4DB2-B289-5ACCE60306E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/33126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32789","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6353","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.asp en ASP-CMS 1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro cha."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-cms:asp-cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E856E5-4D97-4772-B12A-92F115B45CA7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32786","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6354","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb."},{"lang":"es","value":"Net Guys ASPired2poll almacena información confidencial en el directorio web raiz con insuficiente control de acceso, lo que permite a atacantes remotos descargar una base de datos que contiene los nombres de usuario y contraseñas realizando una petición directa a ASPired2poll.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thenetguys:aspired2poll:-:*:*:*:*:*:*:*","matchCriteriaId":"3BD67DA9-EBAF-42B2-9724-B96B6843767B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6355","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2Protect.mdb."},{"lang":"es","value":"Net Guys ASPired2Protect almacena información sensible dentro de la raíz web con control de acceso insuficiente, esto permite a atacantes remotos descarga una base de datos de contenga nombre de usuario y contraseña, a través de una petición directa a ASPired2Protect.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thenetguys:aspired2protect:-:*:*:*:*:*:*:*","matchCriteriaId":"EA3058B7-FA78-480E-BB70-695DB427282B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7428","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6356","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to (1) evcal.mdb and (2) evcal97.mdb."},{"lang":"es","value":"evCal Events Calendar almacena información sensible en el directorio web raíz con insuficientes mecanismos de control de acceso, permitiendo a atacantes remotos descargar una base de datos que contiene el usuario y la contraseña utilizando una petición directa a (1) evcal.mdb y (2) evcal97.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:donnafontenot:evcal_events_calendar:-:*:*:*:*:*:*:*","matchCriteriaId":"F9072CF3-E627-464E-8701-3B6A8F5C44B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/34258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47265","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7419","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6357","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb."},{"lang":"es","value":"MyCal Personal Events Calendar almacena información sensible dentro de la raíz web con control de acceso insuficiente, esto permite a atacantes remotos descargar una base de datos que contenga el nombre de usuario y contraseña a través de una solicitud directa a mycal.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:donnafontenot:mycal_personal_events_calendar:-:*:*:*:*:*:*:*","matchCriteriaId":"55A11BB0-8A1E-4D01-911F-7ED63E180593"}]}]}],"references":[{"url":"http://secunia.com/advisories/34261","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6358","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en group_index.php en Social Groupie permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialgroupie:social_groupie:-:*:*:*:*:*:*:*","matchCriteriaId":"7BACEFBA-C0F9-43AE-9315-8CDD83DF188F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32787","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6359","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Max's Guestbook, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetro (1) name -nombre-, (2) email -correo electrónico- y (3) message -mensaje-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpf1:max\\'s_guestbook:-:*:*:*:*:*:*:*","matchCriteriaId":"801831F1-E47B-4BA3-ABBD-AF7CDCC1F91B"}]}]}],"references":[{"url":"http://osvdb.org/50654","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/18595","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499099/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32763","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/52471","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47250","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74011","source":"cve@mitre.org"},{"url":"http://osvdb.org/50654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/18595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499099/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6360","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la caracteristica userranks (valoración de usuarios) en modules/system/admin.php de ImpressCMS 1.0.2 final, permite a atacantes remotos inyectar HTML o scripts webs arbitrarios a través del parámetro rank_title. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C99E5263-B930-49F4-A5EB-922DCA1F4D76"}]}]}],"references":[{"url":"http://secunia.com/advisories/33023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=634159","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32640","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47089","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=634159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6361","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en archivo index.php en InSun Feed CMS versión 1.7.3 19Beta, permite a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de secuencias de salto de directorio en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insun_podcast:feedcms:1.7.3_19beta:*:*:*:*:*:*:*","matchCriteriaId":"DC6D379F-48FA-43A2-AFCC-D1AA63784B55"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32783","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32783/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47276","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7422","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32783/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6362","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sitepage.php de Multiple Membership Script 2.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonelink:multiple_membership_script:2.5:*:*:*:*:*:*:*","matchCriteriaId":"1448BCDC-F9E9-4F54-9A59-CE30D0DD83A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47094","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7346","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6363","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary code via a crafted .cct file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en DesignWorks Professional v4.3.1 y v5.0.7 que permite a atacantes remotos ejecutar código de su elección a través de ficheros modificados .cct. NOTA: algunos de estos detalles se han obtenido a través de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:capilano:designworks:4.3.1:-:pro:*:*:*:*:*","matchCriteriaId":"58C44C73-DE13-4F6C-A2CF-791CA92AD4DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:capilano:designworks:5.0.7:-:pro:*:*:*:*:*","matchCriteriaId":"2DE90E36-8F58-4A40-AF7F-FD246C763082"}]}]}],"references":[{"url":"http://secunia.com/advisories/33043","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32667","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3369","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6364","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the (1) username (uname parameter) and (2) password (pass parameter).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en logon_process.jsp en Ad Server Solutions Banner Exchange Solution Java permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de (1) el nombre de usuario (parámetro uname) y (2) la contraseña (parámetro pass). NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adserversolutions:banner_exchange_software:-:java:*:*:*:*:*:*","matchCriteriaId":"2ABC606E-6AEE-4AC8-A488-DB42516838B7"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/bej-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33072","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32781","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47281","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7425","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/bej-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6365","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, related to the uname or pass parameters to logon.jsp or logon_processing.jsp.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en logon.jsp en Ad Server Solutions Ad Management Software Java permite a atacantes remotos ejecutar comandos SQL de su elección mediante el (1) usuario y (2) la contraseña, relacionados con los parámetros \"uname\" o \"pass\" de logon.jsp o logon_processing.jsp. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adserversolutions:ad_management_software:-:java:*:*:*:*:*:*","matchCriteriaId":"EFFCBDBC-38D0-404E-BF95-68568C074935"}]}]}],"references":[{"url":"http://secunia.com/advisories/33072","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32790","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47282","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6366","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T16:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, possibly related to the uname and pass parameters to logon_process.jsp.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL de logon.jsp de Ad Server Solutions Affiliate Software Java 4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) username -nombre de usuario- y (2) password -contraseña-; puede que esté relacionado con los parámetros uname y pass de logon_process.jsp. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adserversolutions:affiliate_software_java:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B449F6B0-E083-4AA8-981A-F35D137184D5"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/affiliatesj-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33072","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32791","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47280","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7423","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/affiliatesj-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6367","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in Member_images/."},{"lang":"es","value":"Vulnerabilidad de subida de archivo sin restricciones en el archivo Photos/create_album.php en Social Groupie que permite a los usuarios remotos autenticados ejecutar arbitrariamente código por la subida de un archivo con extensión ejecutable, entonces accediendo a través de una petición directa a el archivo en Member_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialgroupie:social_groupie:-:*:*:*:*:*:*:*","matchCriteriaId":"7BACEFBA-C0F9-43AE-9315-8CDD83DF188F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7435","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6368","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Chipmunk Guestbook 1.4m, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro start."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk_scripts:chipmunk_guestbook:1.4m:*:*:*:*:*:*:*","matchCriteriaId":"4DF8AA26-65FD-47BD-8763-45D9DC8EF6DE"}]}]}],"references":[{"url":"http://osvdb.org/50343","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/18195","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46941","source":"cve@mitre.org"},{"url":"http://osvdb.org/50343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/18195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6369","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo default.asp en Ocean12 Contact Manager Pro 1.02 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro Sort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12tech:contact_manager_pro:1.02:*:*:*:*:*:*:*","matchCriteriaId":"7BD3BDF8-8858-4B4B-835F-92AB5E102ECA"}]}]}],"references":[{"url":"http://osvdb.org/50316","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32903","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32502","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46961","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7244","source":"cve@mitre.org"},{"url":"http://osvdb.org/50316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6370","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en default.asp en Ocean12 Contact Manager Pro v1.02 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"DisplayFormat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12tech:contact_manager_pro:1.02:*:*:*:*:*:*:*","matchCriteriaId":"7BD3BDF8-8858-4B4B-835F-92AB5E102ECA"}]}]}],"references":[{"url":"http://osvdb.org/50317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32903","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46962","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7244","source":"cve@mitre.org"},{"url":"http://osvdb.org/50317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6371","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp de Ocean12 Membership Manager Pro que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Username\" (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12tech:membership_manager_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"6B228D99-A91F-4894-821D-66C56934E2CB"}]}]}],"references":[{"url":"http://osvdb.org/50318","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32508","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46959","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7254","source":"cve@mitre.org"},{"url":"http://osvdb.org/50318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6372","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.aps de Ocean12 FAQ Manager Pro 1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID en una acción Cat. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12tech:faq_manager_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"905ED80B-640B-4083-9216-303A6AC89B5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46945","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7271","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6373","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, \"adaptive external commands,\" and \"writing newlines and submitting service comments.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Nagios versiones anteriores a v3.0.6 tiene un impacto no especificado y vectores de ataque remoto relacionados con los programas CGI, \"comandos de adaptación externa\", e \"introducción de nuevas líneas y envío de comentarios de servicio\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"1E3568E9-9239-4AD8-A5AC-0457918DD2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA91B05-9578-46D8-A21C-4E3C4AB4936A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"C178226A-CBE8-4ECB-BDA7-1E86C61D2A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b2:*:*:*:*:*:*:*","matchCriteriaId":"5B75383C-C37C-485F-B6D2-B4A7F2F7B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b3:*:*:*:*:*:*:*","matchCriteriaId":"67AF4805-B2EE-40F5-8D92-D2953866AD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"52432776-C9C6-4CA7-B3D9-87513CBA5716"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"601958D5-B393-4EFA-9A6F-A5A04A95F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b3:*:*:*:*:*:*:*","matchCriteriaId":"99B2E88A-A611-43C5-8037-411D6B78EC03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*","matchCriteriaId":"2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b5:*:*:*:*:*:*:*","matchCriteriaId":"E61ACC55-1002-4FA3-8E5A-52041CE5DCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b6:*:*:*:*:*:*:*","matchCriteriaId":"6C773265-0BE7-463A-8E24-84D804F14AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A847327-D74E-460C-9F6F-E04C9B77E0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F7425E3-F152-439B-B95F-5160E4593DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.3:*:*:*:*:*:*:*","matchCriteriaId":"E5911624-5BD8-4A40-B417-FCD926D352BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF45013F-A844-4726-8B2A-EF602A3BC4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A91E463-D239-4853-8A63-E01EE7DB319F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"239CAF7F-E9BF-4D0F-BB99-EF51E1366516"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"738DF14D-A716-46F0-87AC-2DB2F1E44594"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"4E8E1234-9F0D-4E6F-BF58-5DAE8E41DB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"0073F69B-C5FA-470A-BA95-9C4E8033F5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b5:*:*:*:*:*:*:*","matchCriteriaId":"AAA7C5B6-C13D-4814-AA7B-444CF12E4DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b6:*:*:*:*:*:*:*","matchCriteriaId":"E1209D1C-DD27-41FC-8DAF-BFC0B4B1D602"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"39551FFC-E1F0-4D45-ADA6-AB3E74BB576D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"7BED52AA-BE20-447C-8896-4B591C42F66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.1:*:*:*:*:*:*:*","matchCriteriaId":"82DE68E3-7003-4675-96A9-6F7308E1E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E3F8DC3-2F34-4E11-A796-4EA7CB17FDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3:*:*:*:*:*:*:*","matchCriteriaId":"7ADCBA8C-06DB-4D85-AEED-807E64A29DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D3EE2D7-BD17-4C37-ABA3-79FCE8328EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.4:*:*:*:*:*:*:*","matchCriteriaId":"927B8496-720D-4B15-A12E-52169AFB38D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F9E80B2-E349-488F-A870-9BD50D47A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4C3374C3-9F57-4014-8712-DDDAB52998FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E5D4F00F-C732-477B-988A-25F8E8D32D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.11:*:*:*:*:*:*:*","matchCriteriaId":"725F9938-0A5C-4A59-BFA4-C58044DE26DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DDCA77EF-1020-4068-9CDC-5CF3B0CD66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"751C46D5-877F-454B-8488-BBCA10CA4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"F4754494-17BE-496E-A7B8-453B3028CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"CD15E8FA-04D3-4625-BEA5-9F5CC0337699"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"713C5F3E-AA57-4F52-AC0A-9B1F25C25580"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0AFABA9F-4A45-4150-AED1-897267076A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"830BB564-82FD-4519-A8EA-DCDF74F2BC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9A975310-9591-4EBF-B987-CA43433B4C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8653D6A2-4B5B-4F1D-A898-8F81F29C6FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"D18649FF-8838-432E-93B8-3F8B82B0DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9375EA90-0763-4817-8C7D-2D7E116E043F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta7:*:*:*:*:*:*","matchCriteriaId":"C02C2F95-2AC2-4E0C-B5D0-785CDF1EDB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12E7BC34-65F0-4DD6-8809-F05320955479"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"390CFA92-68AE-4DE9-A199-1B7290A82168"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1E56F249-3E6A-4764-8CAE-D3E5B6A86AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"953745B7-1381-47F5-8012-E699EFA065CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"87A8A3DA-61AF-4369-ACB0-7D54EEB1DAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"40B7525F-EEE1-4537-BCE6-15DF3E348FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6B831C72-C932-4B8C-8B16-C3BC2672AF98"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32909","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35002","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"cve@mitre.org"},{"url":"http://www.nagios.org/development/history/nagios-3x.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nagios.org/news/#88","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32611","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022165","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1256","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47081","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124156641928637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nagios.org/development/history/nagios-3x.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nagios.org/news/#88","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6374","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to db/MailingList.mdb."},{"lang":"es","value":"CodefixerSoftware MailingListPro Free Edition guarda información sensible bajo el directorio raíz web con insuficiente control de acceso, lo que permite a atacantes remotos obtener información sensibles a través de una petición directa a db/MailingList.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codefixer:mailinglistpro:-:free:*:*:*:*:*:*","matchCriteriaId":"7954E8E3-ED17-4659-A9DB-11568A955D0D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33000","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47018","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7325","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6375","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb."},{"lang":"es","value":"JBook almacena información sensible dentro de la raíz web con control de acceso insuficiente, esto permite a atacantes remotos descargar el fichero de la base de datos a través de una solicitud directa a userids.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nexusjnr:jbook:-:*:*:*:*:*:*:*","matchCriteriaId":"4B57E567-282F-48FB-BF02-3CECA4C9FAAD"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47034","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6376","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main.asp en JBook permite atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"password\" (parámetro \"pass\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nexusjnr:jbook:-:*:*:*:*:*:*:*","matchCriteriaId":"4B57E567-282F-48FB-BF02-3CECA4C9FAAD"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32599","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47033","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6377","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en include/global.php en Multi SEO phpBB v1.1.0 permite a atacantes remotos ejecutar código PHP de su elección utilizando una URL en el parámetro \"pfad\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb-seo:multi_seo_phpbb:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"270FE448-B464-4C63-9E1E-92F22D60B185"}]}]}],"references":[{"url":"http://secunia.com/advisories/32986","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32619","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47069","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7335","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6378","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en calendar_Eventupdate.asp de Calendar Mx Professional 2.0.0; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mxmania:calendar_mx_professional:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0496AE0D-E74D-4664-9FB3-1D5B9EC847B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/32973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32609","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47040","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7327","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6379","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en pics_pre.asp en Gallery MX v2.0.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mxmania:gallery_mx:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7756885A-6A03-48F7-B8D9-AE008D3D907E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32607","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47039","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6380","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en default.aspx en Active Web Helpdesk v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"CategoryID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_web_helpdesk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5FFF4E37-9408-439D-A93C-9301431CD113"}]}]}],"references":[{"url":"http://secunia.com/advisories/32911","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32548","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46905","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6381","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo modules/adresses/viewcat.php en bcoos 1.0.13, y posiblemente anteriores, que permite a los usuarios remotos autenticados con permisos del modulo Addresses para ejecutar arbitrariamente comandos SQL a través del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.13","matchCriteriaId":"429F7C0E-E2DB-43ED-B166-0B54714FDDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"804AE6B2-78AC-4F30-B32E-750DC34E65CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3149225-061C-4DD4-A8E2-AFC1EA346403"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"22C78428-E995-46A4-9AFA-7B91963B744F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2C0D78D1-7BAB-4B08-A761-73A91F557B48"}]}]}],"references":[{"url":"http://osvdb.org/50373","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32561","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46973","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7317","source":"cve@mitre.org"},{"url":"http://osvdb.org/50373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6382","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb."},{"lang":"es","value":"ASP Portal v3.2.5 almacena información sensible bajo la raíz del directorio web con insuficientes controles de acceso lo que permite a atacantes remotos descargar el fichero de la base de datos a través de una petición directa a ASPPortal.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspportal:aspportal:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"33DE59F9-BFA7-469A-9820-56A8960483E6"}]}]}],"references":[{"url":"http://osvdb.org/50372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32889","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7316","source":"cve@mitre.org"},{"url":"http://osvdb.org/50372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6383","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per vendor advisory at: http://drupal.org/node/342246\r\n\r\n\"Versions Affected\r\n\r\n    * Versions of Storm for Drupal 5.x prior to 5.x-1.14\r\n    * Versions of Storm for Drupal 6.x prior to 6.x-1.18\r\n\r\nDrupal core is not affected. If you do not use the Storm module, there is nothing you need to do.","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en SpeedTech Organization y Resource Manager (Storm) 5.x anterior a 5.x-1.14 y 6.x anterior a 6.x-1.18, un módulo para Drupal; permite a usuarios autenticados en remoto con acceso al proyecto storm ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"71A3B20A-5AE1-4F4B-8B0C-E8E3DAC224B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"DC9BE748-42FA-4132-8DD3-29715F50416E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"F77B420E-3E4F-4452-842B-3F4671E28CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"32171F15-23BE-4B3B-BD2B-92F010F1F294"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"B6869167-DAD6-4A7E-A6A4-3EE7C258F1AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"31F0317B-B96C-4009-913C-24503F453C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"A5BB0AD2-314F-4C70-BA03-CC1678FCD28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"E9383F45-C3AE-4E1B-AA75-C9343269E523"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"D001EFB2-B5B4-4D12-A6A4-8C7AE11C8F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"93EFD851-73AB-46BD-8A09-11B42AF0C23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"F8DA3A16-6F29-46FC-AFAB-9FC2647C192F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"B61A63A6-4B8C-47A9-8183-4DBEC0ADAF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"0789CEBD-06EC-4215-B995-E7CB59C0413D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"E101F498-54E8-442C-935A-7D8BDD8FE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"9F836DDC-7E2C-427D-863A-82B67BCDE879"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"F00CEC98-33FA-4F27-A08E-C1BF8674CC43"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"95F63172-0F66-43BD-8913-CEBE382118DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"4B58B91D-1C46-468A-A0EB-B702B531926A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"611E1209-75F1-41DC-A613-32D0AECCC9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"13D3472B-DD68-4174-BFBA-D950A6EF02D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"52E2C389-B661-42DE-B82B-143293350D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"66B50D2C-926A-4255-A42B-92EC050468B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"F99F0DC8-1910-41B7-BE2D-79AF5AE82086"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"70CAD4AC-96BF-40C4-9D99-50603EE2F9CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"01EB80E4-E061-401D-991F-156434001FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"4DA404C1-CB8B-46CC-8D7E-F52834A6F2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"4583B2A3-84E3-4C9B-9B1A-FFCC190536A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"FF65FF10-4EC2-48F5-8805-A7932F3BE318"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.14:*:*:*:*:*:*:*","matchCriteriaId":"9FDCD420-2582-47FE-9BE3-BA2B0D1BB99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.15:*:*:*:*:*:*:*","matchCriteriaId":"8DC3E6BB-79D0-4FB6-B41B-3B417DB63864"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.16:*:*:*:*:*:*:*","matchCriteriaId":"3F148B5B-D8F7-45C2-B2A3-F614A737B188"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.17:*:*:*:*:*:*:*","matchCriteriaId":"1F55CD54-62FB-47B0-9C42-DCF450B48D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:storm:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"E7008B99-39EF-4561-B446-6B596A48CDED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/342246","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32626","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47077","source":"cve@mitre.org"},{"url":"http://drupal.org/node/342246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6384","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en Comment Mail versiones 5.x anterior a 5.x-1.1, un módulo para Drupal, permite a los atacantes remotos secuestrar la autenticación de los administradores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:comment_mail:5.x-0.1:*:*:*:*:*:*:*","matchCriteriaId":"0FC0F912-F83E-48DE-94C1-21BDBBCE0A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:comment_mail:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"0967147F-1753-401C-BD98-E690AF86C068"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:comment_mail:5.x-1.0:beta:*:*:*:*:*:*","matchCriteriaId":"2935B5BF-886F-456B-8CB2-3FF49E03E5FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:comment_mail:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"311EB831-79BB-429C-A171-56CA92359277"}]}]}],"references":[{"url":"http://drupal.org/node/339495","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32905","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46944","source":"cve@mitre.org"},{"url":"http://drupal.org/node/339495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6385","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en el archivo index.php en W3matter RevSense 1.0 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro section."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3matter:revsense:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6EDF436D-1249-4B4F-B864-3412E2A80842"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/revsense-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32996","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47066","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0812-exploits/revsense-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6386","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en showads.php en Z1Exchange v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1scripts:z1exchange:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00CEFB62-0227-45F1-9A8D-67D6591E0659"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32598","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47028","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6387","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb."},{"lang":"es","value":"Quick Tree View .NET v3.1 almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de la base de datos a través de una petición directa a qtv.mdb"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:quick_tree_view_.net:3.1:*:*:*:*:*:*:*","matchCriteriaId":"45849B3C-C5D9-4A77-BEEC-9EC8312F7C98"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/3293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7303","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6388","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb."},{"lang":"es","value":"Rapid Classified v3.1 y v3.15 almacena información sensible dentro de la raíz web con un control de acceso insuficiente; esto permite a atacantes remotos descargar el fichero de la base de datos a través de una solicitud directa a cldb.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4u2ges:rapid_classified:3.1:*:*:*:*:*:*:*","matchCriteriaId":"1455F4B4-A479-4EB4-B7EE-D202FE3B4FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:4u2ges:rapid_classified:3.15:*:*:*:*:*:*:*","matchCriteriaId":"4E5B3E12-B1B0-436B-B31E-D34D6BAE0BB9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47016","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7324","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6389","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote attackers to execute arbitrary SQL commands via the Password parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en asadmin/default.asp del software de gestión de contactos de Rae Media en sus versiones SOHO, Standard y Enterprise que permite a atacantes remotos ejecutar comandos SQL de su elección a través de parámetro \"Password\" (contraseña). NOTA: algunos de estos detalles se han obtenido de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aliensoftcorp:rae_media_contact_management:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"A761026F-3407-457B-8385-4C78409ECCAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:aliensoftcorp:rae_media_contact_management:-:-:soho:*:*:*:*:*","matchCriteriaId":"8F64E20C-A6D0-41A9-84E6-E78D60F1EF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:aliensoftcorp:rae_media_contact_management:-:-:standard:*:*:*:*:*","matchCriteriaId":"FDD9C2E6-32F7-4276-8BE5-D02F0DA38893"}]}]}],"references":[{"url":"http://secunia.com/advisories/32988","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32616","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7333","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6390","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp de Ocean12 Membership Manager Pro que permite a atacantes remotos ejecutar comandos SQL de su elección a través de parámetro \"Password\" (contraseña). NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12tech:membership_manager_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"6B228D99-A91F-4894-821D-66C56934E2CB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46959","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7254","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6391","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main.asp de Jbook que permite a atacantes remotos ejecutar comandos SQL de su elección a través del nombre de usuario (parámetro \"user\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nexusjnr:jbook:-:*:*:*:*:*:*:*","matchCriteriaId":"4B57E567-282F-48FB-BF02-3CECA4C9FAAD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6392","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T19:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showads.php de Z1Exchange que permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1scripts:z1exchange:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00CEFB62-0227-45F1-9A8D-67D6591E0659"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32598","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46938","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6393","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow."},{"lang":"es","value":"El cliente PSI Jabber anterior a v0.12.1 permite a atacantes remotos producir una denegación de servicio (caída) y posiblemente ejecutar código a su elección a través de una petición de transferencia de ficheros con un valor negativo en la opción SOCK5, que evita la comprobación de entero y produce un desbordamiento de entero y un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:*:*:*:*:*:*:*:*","versionEndIncluding":"0.12","matchCriteriaId":"E299EC7B-3898-4C83-AFAD-5159AA6F7190"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"38EE9C09-EBE8-4FEE-BB3F-90F5C780CAF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"12BEC7A5-6322-4EAC-9300-122103385353"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"0DCECDB6-FE12-4525-B0C6-E21BB8C726D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.9:*:*:*:*:*:*:*","matchCriteriaId":"BD2D5C56-C318-4034-B190-BD286BEC4344"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"797DB5B4-2650-4D12-94CF-37C2DBFB4036"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"1880019A-5430-48B0-AF4F-50324D7FD80B"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1EEC8538-FE8A-47B5-BABF-DE32AF12D018"},{"vulnerable":true,"criteria":"cpe:2.3:a:psi-im:psi:0.11:*:*:*:*:*:*:*","matchCriteriaId":"C3A98A96-1288-4956-BBBC-F1EDEAE843C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:jabber:jabber_client:*:*:*:*:*:*:*:*","matchCriteriaId":"19E14DB6-F5BF-4C7A-A2C5-6E57C97D8D25"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=252830","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://jolmos.blogspot.com/2008/12/psi-remote-integer-overflow.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34119","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34301","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=658912","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1741","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/25/5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7555","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00071.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00080.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=252830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://jolmos.blogspot.com/2008/12/psi-remote-integer-overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=658912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/25/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00071.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00080.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6394","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en core/user.php en CS-Cart v1.3.5 y anteriores, permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"cs_cookies[customer_user_id] cookie\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"52E123C3-EBD2-4F60-A3D3-64ACF069103E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A21449C4-0D1F-4642-9193-19E178C0A2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0FFBA9BB-10CA-4EA4-A164-7B4AEB60BCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EA28C65-C87E-47B9-AEB2-A2007851A2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2560C3BF-C7DC-4645-B278-F86658660ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:*:*:*:*:*:*","matchCriteriaId":"F6184F41-3EF2-4DDA-A22E-24CF5EA7F008"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*","matchCriteriaId":"9979A5D8-91BE-4956-A408-DECEADE7D16E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"48662D7D-F946-45A4-AC02-0A25168154E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/31686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00128-09022008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495907/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30979","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44852","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00128-09022008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495907/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6395","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request."},{"lang":"es","value":"La interfaz de gestión Web de 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point, permite a atacantes remotos provocar una denegación de servicio (caída del dispositivo) a través de una solicitud HTTP POST mal formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:wireless_8760_dual-radio:*:*:*:*:*:*:*:*","matchCriteriaId":"95A646EE-022C-474F-B972-C901ADFD9B94"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31714","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30988","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020807","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44890","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6396","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en account.php en Celerondude Uploader v6.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"username\". \r\nNOTA:los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:celerondude:uploader:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ADD55C97-7910-478B-8D57-8360C50BBCD6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/uploader6-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44897","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/uploader6-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6397","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"rlatex en AlcoveBook sgml2x v1.0.0 permite a usuarios locales sobreescribir ficheros de forma arbitraria a través de un ataque de enlace simbólico en los ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcovebook:sgml2x:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0EFCE921-9356-400B-973B-B95A6CA5F6BA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00312.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30963","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44879","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00312.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6398","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompiled$$.png, (2) /tmp/decompiled$$.sng, and (3) /tmp/canonicalized$$.sng temporary files."},{"lang":"es","value":"sng_regress en SNG v1.0.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlaces simbólicos en los ficheros temporales (1)/tmp/recompiled$$.png (2) /tmp/decompiled$$.sng y (3) /tmp/canonicalized$$.sng."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_raymond:sng:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D8F6B7F5-ABC6-489B-938B-2A046C631A16"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496407","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30965","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44881","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.debian.org/debian-devel/2008/08/msg00283.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6399","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to \"add additional roles to their user account\" via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en DotNetNuke v4.5.2 hasta v4.9 permite a atacantes remotos \"añadir reglas adicionales de sus cuentas de usuario\" a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:*","matchCriteriaId":"2902A37C-97AA-42CD-A038-3DA1A6E4653A"}]}]}],"references":[{"url":"http://osvdb.org/51141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33401","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33109","source":"cve@mitre.org"},{"url":"http://osvdb.org/51141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6400","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script or HTML via the headerMsg parameter to (1) show.php and (2) search.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en refbase versiones anteriores a v0.9.5 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"headerMsg\" de (1) show.php y (2) search.php.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:refbase:refbase:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.0","matchCriteriaId":"9D7A0B79-57C0-4644-933D-0740C6454F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:refbase:refbase:0.6:*:*:*:*:*:*:*","matchCriteriaId":"14F4E236-C640-41F1-BF57-63E39F875E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:refbase:refbase:0.6.1:b1:*:*:*:*:*:*","matchCriteriaId":"58F0B9FF-D94F-4A3B-85C2-775609462A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:refbase:refbase:0.7:*:*:*:*:*:*:*","matchCriteriaId":"248F487A-6BE7-40A5-B5C4-692E6D62D682"},{"vulnerable":true,"criteria":"cpe:2.3:a:refbase:refbase:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"22C8747F-798E-456E-96A8-26A004423DBD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32815","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=641612","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32372","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46735","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=641612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6401","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the kat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sayfa.php en JETIK-WEB permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"kat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetik:jetik-web:-:*:*:*:*:*:*:*","matchCriteriaId":"C1E20FAD-9DD8-491A-B277-9409F513399F"}]}]}],"references":[{"url":"http://secunia.com/advisories/31932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31343","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45392","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6542","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6402","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mod_dir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en hu/modules/reg-new/modstart.php en Sofi WebGui v0.6.3 PRE y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"mod_dir\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:muskatli:sofi_webgui:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.3pre","matchCriteriaId":"C78B8124-B9FB-4ECA-9CDC-BE95DF5D1643"},{"vulnerable":true,"criteria":"cpe:2.3:a:muskatli:sofi_webgui:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DBBC1AFE-5C30-4D2E-8C17-6170EAFC72A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:muskatli:sofi_webgui:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C298A70B-F03B-4680-BFA0-BC7A16AB5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:muskatli:sofi_webgui:0.6.0pre:*:*:*:*:*:*:*","matchCriteriaId":"1CC2C76F-3C25-47C4-9130-D6AFAED9828F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31341","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45380","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6539","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6403","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpl_dir parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en themes/default/include/html/insert.inc.php en OpenRat v0.8-beta4 y versiones anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"tpl_dir\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openrat:openrat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8-beta4","matchCriteriaId":"E96DF2FF-D3F5-4710-ADFE-16ABB048DC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openrat:openrat:0.8-beta1:*:*:*:*:*:*:*","matchCriteriaId":"EEDF9D08-33E8-4C12-B177-1DD6674AD5C3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31339","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45363","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6538","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6404","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en add_calendars.php en eXtrovert Software Thyme v1.3 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"callback\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extrosoft:thyme:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3FD11855-78B8-4138-AB8E-C261AB93B63D"}]}]}],"references":[{"url":"http://www.digitrustgroup.com/advisories/web-application-security-thyme2.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31287","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45302","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-thyme2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6405","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showcategory.php en Hotscripts Clone permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greatclone:hotscripts_clone:-:*:*:*:*:*:*:*","matchCriteriaId":"B6F7B25F-1F34-4F85-BDFE-09E34F5AF76A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31345","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45362","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6406","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php en DataLife Engine (DLE) v7.2 permite a atacantes remotos inyectar web script o HTML de su elección a través de la cadena \"query\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datalifecms:datalife_engine:7.2:*:*:*:*:*:*:*","matchCriteriaId":"29FA7B1F-600D-4EE4-AEDF-CF599BF005D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/31998","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496605/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45345","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496605/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6407","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the framefile parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en frame.php en ol'bookmarks manager v0.7.5 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro \"framefile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_wilson:ol\\'bookmarks:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B91F10F1-E0EB-4F2D-AD34-3472492A5E06"}]}]}],"references":[{"url":"http://secunia.com/advisories/31706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31348","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6547","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6408","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en frame.php en ol'bookmarks manager v0.7.5 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"framefile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_wilson:ol\\'bookmarks:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B91F10F1-E0EB-4F2D-AD34-3472492A5E06"}]}]}],"references":[{"url":"http://secunia.com/advisories/31706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31348","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45367","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6547","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6409","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a brain action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en ol'bookmarks manager v0.7.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"brain\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_wilson:ol\\'bookmarks:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B91F10F1-E0EB-4F2D-AD34-3472492A5E06"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45368","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6547","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6410","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en show.php en ol'bookmarks manager v0.7.5 y versiones anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro \"show\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_wilson:ol\\'bookmarks:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.5","matchCriteriaId":"7B8170B3-20DA-4E5B-8A2A-3A0D8D1244D4"}]}]}],"references":[{"url":"http://secunia.com/advisories/31706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31348","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6411","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the login cookie to 1."},{"lang":"es","value":"Explay CMS v2.1 y versiones anteriores permite a atacantes remotos evitar autenticaciones y conseguir acceso administrativo enviando la cookie login a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:explay:explay_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"08E074F8-8A6A-43E7-84DD-BE279E16120A"},{"vulnerable":true,"criteria":"cpe:2.3:a:explay:explay_cms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A60600E0-389E-4CFC-B8CD-FA22542F9F45"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31270","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45300","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6500","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6412","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows \"low privileged\" users to gain administrator privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Vignette Content Management v7.3.0.5, v7.3.1, v7.3.1.1, v7.4, y v7.5 permite a usuarios \"con privilegios bajos\" conseguir privilegios de administrador a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:vignette_content_management:7.3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9EE4D50E-C1B0-4ABE-B791-4CF3B3138F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:vignette_content_management:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4C860CA4-5032-4930-8438-519F010FCEFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:vignette_content_management:7.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8C42E373-4B1C-4546-8386-8AC532CADAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:vignette_content_management:7.4:*:*:*:*:*:*:*","matchCriteriaId":"5B97A17D-EE5F-410A-9FD7-A4B9E1376D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:vignette_content_management:7.5:*:*:*:*:*:*:*","matchCriteriaId":"B59A8491-309D-4AA1-A90E-C08C3294F2B8"}]}]}],"references":[{"url":"http://dialog.vignette.com/hm?g=1.2jds7.bky8.rs.0.27gqh.htk8&h=1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31328","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020910","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45312","source":"cve@mitre.org"},{"url":"http://dialog.vignette.com/hm?g=1.2jds7.bky8.rs.0.27gqh.htk8&h=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/31983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6413","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Answers 5.x-1.x-dev y posiblemente otras versiones 5.x, un módulo para Drupal, permite a atacantes remotos inyectar web script o HTML a través de Simple Answer de una pregunta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ticklespace:answers_module:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"61604FDC-1826-4D2D-853D-4B819A95C248"}]}]}],"references":[{"url":"http://drupal.org/node/310223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2008/Sep/0202.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31146","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2620","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45112","source":"cve@mitre.org"},{"url":"http://drupal.org/node/310223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2008/Sep/0202.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6414","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  detail.php en AJ Auction Pro Platinum Skin v2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"item_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:2.0:*:pro_platinum_skin:*:*:*:*:*","matchCriteriaId":"DE14F493-0110-4996-9D1E-859488179E49"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31362","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6415","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostname."},{"lang":"es","value":"Desbordamiento de búfer en YoungZSoft CCProxy v6.5 permite a atacantes remotos ejecutar código de su elección a través de una petición CONNECTION con un hostname largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youngzsoft:ccproxy:6.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE80CE2-A5CF-46C9-94BD-4E48CEA132D1"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2008/09/ccproxy-near-stealth-patching.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31997","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31416","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020902","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45304","source":"cve@mitre.org"},{"url":"http://jbrownsec.blogspot.com/2008/09/ccproxy-near-stealth-patching.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6416","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"internal pages.\""},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en GreenSQL-Console versiones anteriores a 0.3.5 permiten a atacantes remotos inyectar web script o HMTL de su elección a través de vectores no especificados relacionado a \"páginas internas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.4","matchCriteriaId":"9D11BB18-C3FC-4FA3-AF4A-46DC7196F3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"05DAC737-3BB3-427C-B6FA-91C6EAF20595"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7BB83DC8-DBA2-4581-87AA-2136D31CB11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F0CA3C1C-C689-4736-AE0F-5F3EC1F76D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9C593FDE-3D10-407B-B4CE-CFACC7E59DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8AA502A4-9DD3-46BA-82F4-16DE27A918AE"}]}]}],"references":[{"url":"http://osvdb.org/45870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.greensql.net/node/70","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42771","source":"cve@mitre.org"},{"url":"http://osvdb.org/45870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.greensql.net/node/70","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6417","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the \"installation directory\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en GreenSQL-Console versiones anteriores a v0.3.5 permite a atacantes obtener el \"directorio de instalación\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.4","matchCriteriaId":"9D11BB18-C3FC-4FA3-AF4A-46DC7196F3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"05DAC737-3BB3-427C-B6FA-91C6EAF20595"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7BB83DC8-DBA2-4581-87AA-2136D31CB11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F0CA3C1C-C689-4736-AE0F-5F3EC1F76D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9C593FDE-3D10-407B-B4CE-CFACC7E59DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql-console:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8AA502A4-9DD3-46BA-82F4-16DE27A918AE"}]}]}],"references":[{"url":"http://osvdb.org/45871","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.greensql.net/node/70","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42773","source":"cve@mitre.org"},{"url":"http://osvdb.org/45871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.greensql.net/node/70","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6418","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en scrape.php en TorrentTrader versiones anteriores a 2008-05-13 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"info_hash\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.0:*:*:*:*:*:*:*","matchCriteriaId":"88AFCBF2-5DE9-4134-B087-7D44A50568D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.06:*:classic_edition:*:*:*:*:*","matchCriteriaId":"0ECABE86-898C-4193-A240-9E92B4A0CAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.07:*:classic_edition:*:*:*:*:*","matchCriteriaId":"E8231D11-48B0-4A07-BBB4-488F661C3B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader:1.08:*:classic_edition:*:*:*:*:*","matchCriteriaId":"60839FED-D5F4-477E-8A4F-730F9CFB1104"}]}]}],"references":[{"url":"http://osvdb.org/45858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30480","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/492878/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29451","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42785","source":"cve@mitre.org"},{"url":"http://osvdb.org/45858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/492878/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6419","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id parameter to display_blog.php, (2) scm_mem_id parameter to social_my_profile_download.php, and the (3) catid parameter to social_forum_subcategories.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Social Site Generator (SSG) v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) sgc_id de display_blog.php, el parámetro (2) scm_mem_id de social_my_profile_download.php, y el parámetro (3) catid de social_forum_subcategories.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialsitegenerator:social_site_generator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCB2AE51-0427-46F9-BD2C-9A2D86686A36"}]}]}],"references":[{"url":"http://osvdb.org/45859","source":"cve@mitre.org"},{"url":"http://osvdb.org/45860","source":"cve@mitre.org"},{"url":"http://osvdb.org/45861","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29452","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42777","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5701","source":"cve@mitre.org"},{"url":"http://osvdb.org/45859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6420","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.php, (2) webadmin/download.php, and (3) webadmin/download_file.php."},{"lang":"es","value":"Social Site Generator (SSG) v2.0 permite a atacantes remotos leer ficheros de su elección a través de los parámetros (1) filedload.php, (2) webadmin/download.php, y (3) webadmin/download_file.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialsitegenerator:social_site_generator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCB2AE51-0427-46F9-BD2C-9A2D86686A36"}]}]}],"references":[{"url":"http://osvdb.org/45862","source":"cve@mitre.org"},{"url":"http://osvdb.org/45863","source":"cve@mitre.org"},{"url":"http://osvdb.org/45864","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34149","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42781","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5711","source":"cve@mitre.org"},{"url":"http://osvdb.org/45862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6421","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en social_game_play.php en Social Site Generator (SSG) v2.0 permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro \"path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialsitegenerator:social_site_generator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCB2AE51-0427-46F9-BD2C-9A2D86686A36"}]}]}],"references":[{"url":"http://osvdb.org/45865","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29462","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42780","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5707","source":"cve@mitre.org"},{"url":"http://osvdb.org/45865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6422","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PsychoStats v2.3, v2.3.1, y v2.3.3 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" de  (1) weapon.php y (2) map.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.3:*:*:*:*:*:*:*","matchCriteriaId":"77B6DD34-3AE6-4D9F-A992-ECCDDD70A9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12BD8BB5-C5F2-452B-B2C9-BF90A9397BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EAE97F4A-D67F-4C12-A749-F27466D1B21B"}]}]}],"references":[{"url":"http://osvdb.org/45868","source":"cve@mitre.org"},{"url":"http://osvdb.org/45869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29449","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42770","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5699","source":"cve@mitre.org"},{"url":"http://osvdb.org/45868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6423","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the site_id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en passwiki.php en PassWiki v0.9.16 RC3 y versiones anteriores permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"site_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:*:rc3:*:*:*:*:*:*","versionEndIncluding":"0.9.16","matchCriteriaId":"52ED43AF-935D-4E3D-BFC7-2B318CAADEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"22E81E6D-5AC0-47DA-B901-658BD9E780CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"2905DBB1-66B5-429A-9B40-7D89E9B466A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"BC7D0F12-9203-4249-A456-D4740FCFEF2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"ABCECA35-F332-469D-A538-AB0AFCEBC57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"ACEA56A9-E912-42DC-A9B0-5B5ED4F0B62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"18FC577F-D845-41DA-9AEE-887FF79C517E"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"263F0B3F-251B-48F6-A6E8-1695184DAC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"93DC2C13-EA2C-4AA9-9D4C-2BED788BBB0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"5D33931B-0B6D-4713-A21A-2EB38DA2D55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"6DC4E8A8-77F8-43CD-A7EB-42E627563550"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"FB4C02B0-D345-4EB9-A3F4-588BF4D36213"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"B1C999D9-C847-44AE-A503-2AA8916A1C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.15:beta:*:*:*:*:*:*","matchCriteriaId":"78EC02A3-2591-4C1C-B645-3C0442B2B413"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.15:beta2:*:*:*:*:*:*","matchCriteriaId":"F364EF65-33D1-41CD-95BA-3DCDE8EE77A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.15:rc1:*:*:*:*:*:*","matchCriteriaId":"3BA02159-676F-4B89-AD48-70B67A917753"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.16:beta1:*:*:*:*:*:*","matchCriteriaId":"10DED21D-6B0D-41F4-B289-1E5A86127EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.16:beta2:*:*:*:*:*:*","matchCriteriaId":"C597D14C-3F65-4571-9061-C8383E3A9870"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.16:beta3:*:*:*:*:*:*","matchCriteriaId":"04C99AF7-166C-4BB5-B4FF-7BCD1E4E6F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.16:rc1:*:*:*:*:*:*","matchCriteriaId":"687FD39E-F7A7-49FD-9F3E-249DCB12A4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-apps:passwiki:0.9.16:rc2:*:*:*:*:*:*","matchCriteriaId":"4E1A36B1-BBA1-4B4A-86C5-2705ED84682A"}]}]}],"references":[{"url":"http://osvdb.org/45853","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42768","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5704","source":"cve@mitre.org"},{"url":"http://osvdb.org/45853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6424","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot)."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en FFFTP v1.96b permite a servidores FTP remotos crear o sobre escribir ficheros de su elección a través de una respuesta a un comando FTP LIST con un nombre de fichero que contiene un .. (punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jun_sota:ffftp:1.96b:*:*:*:*:*:*:*","matchCriteriaId":"D4AAEA8C-F6C1-4C9B-AE92-2DADF811E94F"}]}]}],"references":[{"url":"http://osvdb.org/45894","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30428","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/FFFTP196b-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29459","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1708/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42796","source":"cve@mitre.org"},{"url":"http://osvdb.org/45894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/FFFTP196b-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1708/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6425","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the news_id parameter, a different vector than CVE-2008-2456."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  news.php en ComicShout v2.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"news_id\", un vector diferente a CVE-2008-2456."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comicshout:comicshout:2.8:*:*:*:*:*:*:*","matchCriteriaId":"B99F9F6B-B04D-4DF6-AA58-B6ABE268B3F1"}]}]}],"references":[{"url":"http://osvdb.org/51438","source":"cve@mitre.org"},{"url":"http://www.comicshout.com/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492918","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29464","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42758","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5713","source":"cve@mitre.org"},{"url":"http://osvdb.org/51438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.comicshout.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6427","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Hivemaker Professional v1.0.2 y versiones anteriores, cuando magic_quotes_gpc no está activo, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hivemaker:hivemaker:*:-:pro:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"B488D7BE-49BA-4D94-91F7-CC1761AEE219"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=91","source":"cve@mitre.org"},{"url":"http://osvdb.org/45916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30465","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492917/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1923/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42751","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5928","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=91","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1923/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6428","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors."},{"lang":"es","value":"El marco de trabajo (framework) CGI en Kaya v0.4.0 permite a atacantes remotos inyectar cabeceras HTTP de su elección y conducir ataques de secuencias de comandos en sitios cruzados (XSS) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayalang:kaya:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"95766713-23EE-4FD3-A697-43DDF75C3866"}]}]}],"references":[{"url":"http://kayalang.org/about/news","source":"cve@mitre.org"},{"url":"http://osvdb.org/45882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42774","source":"cve@mitre.org"},{"url":"http://kayalang.org/about/news","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6429","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_request action to index2.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente PrayerCenter (com_prayercenter) v1.4.9 y versiones anteriores para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"view_request\" de index2.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mike_leeper:com_prayercenter:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.9","matchCriteriaId":"BBDB0D55-0260-459B-86CE-3B7A1DBE6121"}]}]}],"references":[{"url":"http://osvdb.org/45856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30493","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42772","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5708","source":"cve@mitre.org"},{"url":"http://osvdb.org/45856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6430","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente MyContent (com_mycontent) v1.1.13 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"view\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mycontent:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"E9901091-88C1-492D-A9D2-039632F2A35A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/45852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29468","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42783","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5714","source":"cve@mitre.org"},{"url":"http://osvdb.org/45852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6431","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en BMForum v5.6 permiten a atacantes remotos inyectar web script o HTML a través del parámetro (1) outpused de index.php, los parámetros (2) footer_copyright y (3) verandproname de newtem/footer/bsd01footer.php, y los parámetros (4) topads y (5) myplugin de newtem/header/bsd01header.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmforum:bmforum:5.6:*:*:*:*:*:*:*","matchCriteriaId":"3FAEE45F-59D5-467D-A5B6-08A693970995"}]}]}],"references":[{"url":"http://osvdb.org/45612","source":"cve@mitre.org"},{"url":"http://osvdb.org/45613","source":"cve@mitre.org"},{"url":"http://osvdb.org/45614","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30369","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492449/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29339","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42590","source":"cve@mitre.org"},{"url":"http://osvdb.org/45612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492449/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6433","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo index.cfm en Blue River Interactive Group Sava CMS en versiones anteriores a 5.0.122, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro keywords en una acción search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueriver:sava_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"88868EF7-0946-42ED-A0E0-ECEDECA0CDED"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/67/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/45615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29346","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49224","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/67/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6434","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en archivo index.cfm en versiones anteriores a 5.0.122, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro LinkServID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueriver:sava_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"88868EF7-0946-42ED-A0E0-ECEDECA0CDED"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/67/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/45616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29346","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49225","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/67/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6435","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admin_menu_page_overview] parameters to cms/includes/header.inc.php; and the (4) lang[login_username] and (5) lang[login_password] parameters to cms/includes/login.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phpSQLiteCMS 1 RC2 permiten a atacantes remotos inyectar web script o HTML a través de los parámetros (1) lang[home], (2) lang[admin_menu], y (3) lang[admin_menu_page_overview] de cms/includes/header.inc.php; and y los parámetros (4) lang[login_username] y (5) lang[login_password] de cms/includes/login.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpsqlitecms:phpsqlitecms:1:*:rc2:*:*:*:*:*","matchCriteriaId":"5D86360A-3BED-4F41-923E-D02DF9BD5C41"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/492446/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29338","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42585","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492446/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6436","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el servidor web en Xerox WorkCentre 7132, 7228, 7235, y 7245 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7132:*:*:*:*:*:*:*","matchCriteriaId":"92DDC733-1AAA-407D-BB64-C2C0491F495C"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7228:*:*:*:*:*:*:*","matchCriteriaId":"9EA2F49E-B0F0-47A5-9BB0-30A41AE6F736"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7235:*:*:*:*:*:*:*","matchCriteriaId":"444133C0-0A4C-48E3-88E9-8478814C7FF8"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7245:*:*:*:*:*:*:*","matchCriteriaId":"559D8BE3-12AE-4518-89A9-BD681E65F57A"}]}]}],"references":[{"url":"http://osvdb.org/45627","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29345","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1628/references","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42595","source":"cve@mitre.org"},{"url":"http://osvdb.org/45627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1628/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6437","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en  PHPFreeForum v1.0 RC2 y versiones anteriores permiten a atacantes remotos inyectar web script o HTML a través del parámetro (1) message de error.php, y los parámetros (2) nickname y (3) randomid de part/menu.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lukas_waldauf:phpfreeforum:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"78F176CA-05E4-42C2-9978-606A6DADD464"}]}]}],"references":[{"url":"http://osvdb.org/45607","source":"cve@mitre.org"},{"url":"http://osvdb.org/45608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492445/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29337","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42586","source":"cve@mitre.org"},{"url":"http://osvdb.org/45607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492445/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6438","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2008-2455.  NOTE: it was later reported that 2.1.4 is also affected."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en macgurublog_menu/macgurublog.php en la extensión (plugin) MacGuru BLOG Engine v2.2 para e107 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"uid\", un vector diferente a CVE-2008-2455."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107coders:macguru_blog_engine_plugin:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9BA401E0-464B-4424-A18C-0F597D477C26"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]}]}],"references":[{"url":"http://osvdb.org/51408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492506/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29344","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2468","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42715","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5666","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6346","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6856","source":"cve@mitre.org"},{"url":"http://osvdb.org/51408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492506/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6439","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search_results.php en ABK-Soft AbleDating v2.4 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"keyword\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abledating:abledating:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A7BDDE99-2776-45F5-8A37-378AAC25A75D"}]}]}],"references":[{"url":"http://secunia.com/advisories/30366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492478/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29342","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492478/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6440","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for \"controllers ... that aren't standard helpdesk pages,\" possibly involving the (1) /display and (2) /kb URIs."},{"lang":"es","value":"Cerberus Helpdesk versiones anteriores a v4.0 (Build 600) permite a atacantes remotos obtener información sensible a través de peticiones directas para \"controladores ... que no están en páginas estándar de ayuda,\" posiblemente envolviendo las URIs (1) /display y (2) /kb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerberus:cerberus_helpdesk:2.5:*:*:*:*:*:*:*","matchCriteriaId":"1C6F44C4-A739-455A-BCAB-31D451617E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3","matchCriteriaId":"D9C0B41F-159F-4CD9-B14A-314604EBF680"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:0.97.3:*:*:*:*:*:*:*","matchCriteriaId":"5A5F9D6D-3ED3-4E5A-A381-0C53407224D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B99D671F-2887-4224-8E0E-C45528071BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.1:*:*:*:*:*:*:*","matchCriteriaId":"1903F2F5-DB22-4CBA-86E7-D6E4482D762E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7148995A-B65B-4223-878E-738086406C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C4093ACE-47A5-4D3A-8102-7B2A987A6D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.4:*:*:*:*:*:*:*","matchCriteriaId":"3981BFBC-321D-47FD-92FA-A4AC2CC3B38E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EE71308B-ED33-4AB5-A8DC-1EFC6517E93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.7:*:*:*:*:*:*:*","matchCriteriaId":"EC3CA063-B7F7-4445-8603-39AA89105562"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.7.1:development_release:*:*:*:*:*:*","matchCriteriaId":"2B88F76F-DD8B-4D51-9844-E4CBBA9E69EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:2.649:*:*:*:*:*:*:*","matchCriteriaId":"5C335BB8-EAE8-41CF-80F5-55723B4A23B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:3.2:*:*:*:*:*:*:*","matchCriteriaId":"CF99B700-332F-4349-BA86-81E043595300"},{"vulnerable":true,"criteria":"cpe:2.3:a:webgroupmedia:cerberus_helpdesk:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A2D4EA63-1513-417B-8465-0F3853ECCACF"}]}]}],"references":[{"url":"http://secunia.com/advisories/30344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29335","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6441","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command."},{"lang":"es","value":"Una vulnerabilidad de formato de cadena en el motor del cliente de Epic Games Unreal, cuando se utiliza en múltiples juegos, permite a servidores remotos ejecutar código arbitrariamente a través de (1) el parámetro \"CLASS\" en el comando DLMGR, (2) un paquete malformado (PKG), y posiblemente (3) el parámetro \"LEVEL\" en el comando WELCOME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epicgames:unreal_engine:2:*:*:*:*:*:*:*","matchCriteriaId":"0DB76B1A-D2AF-4BC7-B3FB-F9C3D8B7077A"},{"vulnerable":true,"criteria":"cpe:2.3:a:epicgames:unreal_engine:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8C9F2B6F-7334-43F0-AE5E-70EDC79052A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:epicgames:unreal_engine:3:*:*:*:*:*:*:*","matchCriteriaId":"A735A5C2-04CC-44E1-B658-F90F2020F292"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/unrealcfs-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0190.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48290","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48291","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496297/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31141","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45088","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45089","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45090","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/unrealcfs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496297/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6442","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX Sina Inc. DLoader Class permite a atacantes remotos sobrescribir ficheros arbitrariamente a través de la URL en el primer parámetro del método \"DonwloadAndInstall\". NOTA: La procedencia de esta información es desconocida; los detalles de esta información fueron obtenidos únicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sina:dloader:-:*:*:*:*:*:*:*","matchCriteriaId":"1C5D5B92-0EBE-4A12-B833-112D62E41A95"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30223.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30223","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43881","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6443","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum_duzen.php en phpKF permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro \"fno\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpkf:phpkf:-:*:*:*:*:*:*:*","matchCriteriaId":"74C2364F-F4EF-4C16-A7E7-7CB7138F1F19"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30318","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30318/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30318/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6444","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en CSTransfer.dll en Baidu Hi IM permitiría a atacantes remotos ejecutar código de modo arbitrario a través de un paquete manipulado, probablemente relacionado con un valor \"longitud\" incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baidu:baidu_hi:-:*:*:*:*:*:*:*","matchCriteriaId":"E1F410CC-67AF-4367-B8FA-C8462645A54F"}]}]}],"references":[{"url":"http://osvdb.org/51696","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496322/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31162","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45117","source":"cve@mitre.org"},{"url":"http://osvdb.org/51696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6445","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad inespecífica en YourPlace en anteriores a v1.0.1 tienen un impacto y vectores desconocidos, posiblemente relacionado con una autenticación incorrecta y la posibilidad de subir código PHP de manera arbitraria. NOTA: Algunos de los detalles fueron obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourplace:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"1A2BE6F6-BEA9-4F37-9CAB-2F8B92812EFC"}]}]}],"references":[{"url":"http://osvdb.org/46754","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=611591&group_id=229069","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30106","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43601","source":"cve@mitre.org"},{"url":"http://osvdb.org/46754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=611591&group_id=229069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/30106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6446","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de código estático en el componente Guestbook (Libro de Visitas) de CMS MAXSITE, permite a atacantes remotos inyectar código PHP arbitrario en el libro de visitas a través del parámetro 'message'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geniuscyber:maxsite:-:*:*:*:*:*:*:*","matchCriteriaId":"92533B1F-8E75-4131-AC80-5302215E15E5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47025","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7322","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6447","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method."},{"lang":"es","value":"Un desbordamiento de búfer en emmailstore.dll 6.5.0.3 en el control ActiveX QuikSoft EasyMail MailStore permite a atacantes remotos ejecutar código arbitrario a través de una cadena demasiado larga en el primer argumento del método CreateStore."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quiksoft:easymail_mailstore_object:6.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3ABC2F-A31B-42A8-8006-28517E99918F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32722","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47207","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7402","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6448","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en install.cgi en SKYARC System MTCMS WYSIWYG Editor permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skyarc:mtcms_wysiwyg_editor:-:*:*:*:*:*:*:*","matchCriteriaId":"8F0AEE30-E777-41D6-971C-9F09A7FD10CB"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN21312708/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000003.html","source":"cve@mitre.org"},{"url":"http://www.mtcms.jp/01/3886.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49226","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN21312708/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mtcms.jp/01/3886.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6449","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en múltiples routers de Century Systems incluyendo XR-410 anteriores a v1.6.9, XR-510 anteriores a v3.5.3, XR-440 anteriores a v1.7.8, y otros routers de la serie XR, desde XR-510 a XR-730, permite a atacantes remotos modificar la configuración  como administrador, a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-1100:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.2","matchCriteriaId":"53874792-ED4B-4F01-98D1-1BB64EED51CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-410:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.8","matchCriteriaId":"E18F661E-DA48-4905-8757-4465D24C10E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-410-l2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"3E858B01-0A21-4F8A-A226-59A7C387B477"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-440:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.7","matchCriteriaId":"50032952-21C9-4BE1-AF3E-065C3D442283"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-510:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0","matchCriteriaId":"343DC34E-C51F-4780-9F56-6ED6E734AA34"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-540:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"CA30B120-C560-4E2D-B682-E1D366FC0A55"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-640:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.7","matchCriteriaId":"D95818FB-2DAD-4D15-85D7-D38A2992670C"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-640-l2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"5BC723D2-9CB8-43C8-B4AB-4AB2B4BD7DC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:centurysys:xr-730:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0","matchCriteriaId":"7F1E9349-7A5D-40A2-B50F-AAE83BCA973A"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN67573833/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31173","source":"cve@mitre.org"},{"url":"http://www.centurysys.co.jp/support/xr_common/JVN67573833.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43949","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN67573833/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.centurysys.co.jp/support/xr_common/JVN67573833.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6450","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en Under Construction Baby (UCB) PC2M c0.9.22.4 y anteriores, permiten a atacantes remotos inyectar  secuencias de comandos web o HTML a su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:under_construction_baby:pc2m:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.22.4","matchCriteriaId":"9A2EC126-3BB4-47D2-8404-C5CC22658065"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN38893575/index.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000008.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rcdtokyo.com/pc2m/note/archives/i000854.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49227","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN38893575/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rcdtokyo.com/pc2m/note/archives/i000854.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6451","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en humor.php en jPORTAL 2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\". NOTA: Esta vulnerabilidad podría solaparse con CVE-2004-2036 o CVE-2005-3509."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jportal:jportal:2:*:*:*:*:*:*:*","matchCriteriaId":"D060C860-D6C0-4688-8B02-07FAED40AF03"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31274","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6505","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6452","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en show_vote.php en Oceandir 2.9 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oceandir:oceandir:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9","matchCriteriaId":"E7A3B9BE-CEF7-49B1-BE57-478BE7880A9F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6504","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6453","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en section.php en 6rbScript 3.3, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en parámetro \"nombre\" (name)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:6rbscript:6rbscript:3.3:*:*:*:*:*:*:*","matchCriteriaId":"80BFCC9E-BA0E-4D6D-850D-DF28FDD8C03A"}]}]}],"references":[{"url":"http://osvdb.org/48508","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31945","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31299","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6520","source":"cve@mitre.org"},{"url":"http://osvdb.org/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6454","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en section.php en 6rbScript 3.3 permite a atacantes remotos ejecutar comandos SQL a través del parámetro singerid en una acción \"cantantes\" (singers)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:6rbscript:6rbscript:3.3:*:*:*:*:*:*:*","matchCriteriaId":"80BFCC9E-BA0E-4D6D-850D-DF28FDD8C03A"}]}]}],"references":[{"url":"http://osvdb.org/48509","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31945","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31282","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6511","source":"cve@mitre.org"},{"url":"http://osvdb.org/48509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6455","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de fijación de sesión en Edikon phpShop 0.8.1 permite a atacantes remotos secuestrar sesiones web a través de vectores no especificados. NOTA: La procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edikon:phpshop:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"5910C18D-DA35-437C-8CF1-FB415AE88928"}]}]}],"references":[{"url":"http://osvdb.org/48231","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31251","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45244","source":"cve@mitre.org"},{"url":"http://osvdb.org/48231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6456","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión HBook (h_book) de TYPO3 en las versiones 2.3.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_helmich:hbook:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0","matchCriteriaId":"D360BB61-8C03-4B96-98D0-7323844B9775"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://osvdb.org/48276","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31261","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45259","source":"cve@mitre.org"},{"url":"http://osvdb.org/48276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6457","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión Swigmore institute (cgswigmore) para TYPO3 antes de la versión 0.1.2 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:walnutstreet:cgswigmore:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.1","matchCriteriaId":"489D5FB7-9BC8-4DCF-AD1F-19955AF075CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:walnutstreet:cgswigmore:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4E8F04D-2391-427A-A5F2-BC8B9EB708A1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://osvdb.org/48273","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45256","source":"cve@mitre.org"},{"url":"http://osvdb.org/48273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6458","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión FE address edit para tt_address & direct mail (dmaddredit) para TYPO3 antes de la versión 0.4.0 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dieter_mayer:fe_address_edit:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.0","matchCriteriaId":"382D62D8-480C-45EC-BD5B-E4D303284329"}]}]}],"references":[{"url":"http://osvdb.org/48274","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31259","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45257","source":"cve@mitre.org"},{"url":"http://osvdb.org/48274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6459","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión auto BE User Registration (autobeuser) de TYPO3 antes de la versión 0.0.2 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:autobeuser:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.2","matchCriteriaId":"9538A307-AA75-46FF-9FC7-B28C8662B7DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://osvdb.org/48272","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31239","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45255","source":"cve@mitre.org"},{"url":"http://osvdb.org/48272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6460","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión Simple Random Objects (mw_random_objects) de TYPO3 en versiones anteriores a la 1.0.3, permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirko_werner:mw_random_objects:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"183027A3-692F-427E-ADCC-0CD2FF315DD5"}]}]}],"references":[{"url":"http://osvdb.org/48277","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45261","source":"cve@mitre.org"},{"url":"http://osvdb.org/48277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6461","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión Random Prayer 2 (ste_prayer2) para TYPO3 antes de la versión 0.0.3 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_prayer2:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.2","matchCriteriaId":"A357460C-4C91-4931-A475-51050A1B23A4"}]}]}],"references":[{"url":"http://osvdb.org/48280","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45264","source":"cve@mitre.org"},{"url":"http://osvdb.org/48280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6462","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión My quiz and poll (myquizpoll) para TYPO3 antes de la versión 0.1.4 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_gusbeth:myquizpoll:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.3","matchCriteriaId":"E86D2D26-B76C-41DD-84D4-0A079B9671F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_gusbeth:myquizpoll:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C806DFE-28CA-4F1E-ACF9-C99F4798641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_gusbeth:myquizpoll:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AAAD8BA8-3780-4593-B05A-681F48B1C061"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://osvdb.org/48278","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31257","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45262","source":"cve@mitre.org"},{"url":"http://osvdb.org/48278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6463","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en la extensión Diocese of Portsmouth Church Search (pd_churchsearch) para TYPO3, en las versiones anteriores a la 0.1.1 y 0.2.X antes de 0.2.10, permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:pd_churchsearch:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.10","matchCriteriaId":"5DBECBD1-DFDC-4287-B782-C0344B607708"}]}]}],"references":[{"url":"http://osvdb.org/48279","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31260","source":"cve@mitre.org"},{"url":"http://osvdb.org/48279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6464","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en event.php en Mevin Productions Basic PHP Events Lister 1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mevin:basic-php-events-lister:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D928CB2-5888-4FD5-B0D3-8DD828F20ECB"}]}]}],"references":[{"url":"http://osvdb.org/48499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31779","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31278","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2648","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6508","source":"cve@mitre.org"},{"url":"http://osvdb.org/48499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/2648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6465","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters."},{"lang":"es","value":"Múltiples vulnerabilidades ejecución de secuencias de comandos en sitios cruzados (XSS) en login.php en webshell4 en Parallels H-Sphere 3.0.0 P9 y el 3.1 P1 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetros (1) err, (2) errorcode, y (3) login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*","matchCriteriaId":"8EEFBEDF-95BE-4D85-9DA5-A0B512D1D85F"},{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:h-sphere:3.1:p1:*:*:*:*:*:*","matchCriteriaId":"314ED98D-F033-4096-895F-ACBFCB916974"}]}]}],"references":[{"url":"http://osvdb.org/48232","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31256","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.xssing.com/index.php?x=3&y=65","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45252","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45254","source":"cve@mitre.org"},{"url":"http://osvdb.org/48232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.xssing.com/index.php?x=3&y=65","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6466","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo image_gallery.php en el plugin Image Gallery (image_gallery) de Akira Powered versión 0.9.6.2 para e107, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro image en una acción image-detail ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","matchCriteriaId":"2ED52F96-48B9-4111-AAEB-4E9190114802"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akirapowered:image_gallery:0.9.6.2:*:*:*:*:*:*:*","matchCriteriaId":"2E459A72-A3F7-4E93-B789-B2CC844999A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/34384","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31286","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6516","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6467","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en jobs/jobseekers/job-info.php en Diesel Job permite a atacantes remotos ejecutar comandos SQL a través del parámetro job_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dieselscripts:diesel_job_site:*:*:*:*:*:*:*:*","matchCriteriaId":"9A5B44F0-17D2-4E40-8C80-D707BEA17BC2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6512","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6468","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en Diesel Pay permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"area\" durante la navegación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dieselscripts:diesel_pay:-:*:*:*:*:*:*:*","matchCriteriaId":"3F39A492-D469-49F5-BDFE-D75A33EB33D4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6469","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en PlainCart 1.1.2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro p."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plaincart:plaincart:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A8C0573D-8552-4772-AB14-2B1CD04972E7"}]}]}],"references":[{"url":"http://osvdb.org/48436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31952","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31275","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6503","source":"cve@mitre.org"},{"url":"http://osvdb.org/48436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6470","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to \"javascript insert\" and the (1) mods/messages/getusers.php and (2) mods/abcode/listimg.php files.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en versiones de ClanSphere anteriores a la 2008.2.1 permiten a atacantes remotos obtener información sensible, y posiblemente tenga otros impactos desconocidos, a través de vectores relacionados con \"insertar javascript\" y los ficheros  (1) mods/messages/getusers.php y (2) mods/abcode/listimg.php . NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:*:*:*:*:*:*:*:*","versionEndIncluding":"2008","matchCriteriaId":"9D1B0445-1178-4FC9-99AD-5482EAB3FD25"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D480ABFE-DEEF-4BD9-9810-A280883672C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4:*:*:*:*:*:*:*","matchCriteriaId":"3B498CF2-0ED8-497E-9375-5C7E31941095"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.1:*:*:*:*:*:*:*","matchCriteriaId":"91ED323B-9626-46F5-AFA9-98C3705A502F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5036F226-B242-485D-95F9-3A4218AC4C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5C8E2F6F-2A34-4335-93FA-5EB054BFEAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A2C73C22-D21C-4BAF-B945-C83F08D56AC6"}]}]}],"references":[{"url":"http://osvdb.org/48451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31965","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=627530","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.clansphere.net/index/news/view/id/289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.clansphere.net/index/news/view/id/306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45269","source":"cve@mitre.org"},{"url":"http://osvdb.org/48451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=627530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.clansphere.net/index/news/view/id/289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.clansphere.net/index/news/view/id/306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6471","sourceIdentifier":"cve@mitre.org","published":"2009-03-13T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en detail.php en MountainGrafix EasyLink 1.1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat en una acción \"show\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mountaingrafix:easylink:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"218B49FA-1C0B-494E-BF20-39A019DF95DD"}]}]}],"references":[{"url":"http://osvdb.org/48395","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6494","source":"cve@mitre.org"},{"url":"http://osvdb.org/48395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6472","sourceIdentifier":"cve@mitre.org","published":"2009-03-14T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors."},{"lang":"es","value":"El disector WLCCP en Wireshark 0.99.7 hasta la versión 1.0.4 permite a atacantes remotos provocar una denegación de servicio (con un bucle infinito) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:242","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47292","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6223","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9629","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2008-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6473","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified \"a\" parameter with a \"%\" wildcard symbol in the b parameter."},{"lang":"es","value":"_blogadata/include/init_pass2.php en Blogator-script v0.95 permite a atacantes remotos cambiar la contraseña de usuarios de su elección mediante el parámetro \"a\" modificado con el carácter especial \"%\" en el parámetro \"b\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogator-script:blogator-script:0.95:*:*:*:*:*:*:*","matchCriteriaId":"F75A63DE-A2BC-4E11-B894-3CE004BAA360"}]}]}],"references":[{"url":"http://osvdb.org/51227","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490501/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5370","source":"cve@mitre.org"},{"url":"http://osvdb.org/51227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490501/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6474","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection."},{"lang":"es","value":"El interfaz de gestión en F5 BIG-IP v9.4.3 permite a usuarios remotos autenticados con privilegios de \"Resource Manager\" inyectar código Perl de su elección mediante parámetros de configuración no especificados relacionados a Perl EP3 con plantillas, provocando probablemente la inyección de código estático."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:f5:tmos:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"238F0964-D138-4673-9747-C73E8D84E367"}]}]}],"references":[{"url":"http://osvdb.org/51116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490496/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28639","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49308","source":"cve@mitre.org"},{"url":"http://osvdb.org/51116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490496/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6475","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en componente guestbook (components/guestbook/guestbook.php) en Drake CMS v0.4.11 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante la cabecera HTTP \"Via\" (HTTP_VIA) en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2.846","matchCriteriaId":"57C6D116-C212-466A-AB6E-F1129F5A8610"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2_alpha_rev.846","matchCriteriaId":"9A3496EE-F57E-4DDB-A92E-E21EED2212A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.2","matchCriteriaId":"C32FBEE1-C7E4-460D-B3F4-D16D2F7BC697"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.3","matchCriteriaId":"B12BF45A-2B23-4546-99F7-ADD29ECC72BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.4b","matchCriteriaId":"026D5111-7DDA-4DB6-B5D0-0EF684860858"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.5","matchCriteriaId":"6FB072D0-215B-4A9C-B34D-E5790C49029F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.6","matchCriteriaId":"D3FB1F84-A011-4F56-A43C-299437669184"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.7","matchCriteriaId":"C4D064CC-4D32-432E-AC7D-E9153D7CBA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.7_beta","matchCriteriaId":"D3660CD7-58B4-4CD0-BECA-FEE453CDD390"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.8_beta","matchCriteriaId":"BD7DD22A-93C0-4F35-8CE3-2202A181818E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.9","matchCriteriaId":"1A7D6BD7-6E3F-4DB1-B8D4-E5807D1A1525"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.0","matchCriteriaId":"7FF0824F-04B7-48C0-B599-68E133885A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.0b","matchCriteriaId":"5C379D82-9300-4782-BA35-1329C071A04B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.1","matchCriteriaId":"FFE4B57B-4364-4DF0-BC65-7B80A7C856DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.10_rc6","matchCriteriaId":"3E4B454E-059A-41B9-924C-C92E30EAB66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.11","matchCriteriaId":"34C22CC4-046D-4E20-8531-B66D7DD21910"},{"vulnerable":true,"criteria":"cpe:2.3:a:drake_team:drake_cms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"31A99027-7076-4C46-9093-377E2905B89A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41677","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6476","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en blog/search.aspx en BlogEngine.NET permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"q\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetblogengine:blogengine.net:*:*:*:*:*:*:*:*","matchCriteriaId":"68B13303-5E46-43D5-AAC8-576ED39ABF0C"}]}]}],"references":[{"url":"http://osvdb.org/44290","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/44/blogengine-search-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34227","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49307","source":"cve@mitre.org"},{"url":"http://osvdb.org/44290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/44/blogengine-search-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6477","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Mumbo Jumbo Media vOP4 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mumbojumbo:op4:*:*:*:*:*:*:*:*","matchCriteriaId":"D90F1259-FF6A-43C8-82DD-4E44018D25AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28763","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1211/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49303","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5440","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1211/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6478","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag to (1) create-file and (2) list-control in vz/cp/vzdir/infrman/envs/files/; or modify system configuration via the path parameter to vz/cp/vzdir/infrman/envs/files/index."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el gestor de ficheros en el interfaz web VZPP en Parallels Virtuozzo 365.6.swsoft (disponible en v4.0.0 - v365.6.swsoft) y v25.4.swsoft (disponible en v3.0.0 - v25.4.swsoft) permite a atacantes remotos crear y borrar ficheros de su elección como usuario administrador mediante un enlace o etiqueta IMG en (1) \"create-file\" y (2) \"list-control\" en vz/cp/vzdir/infrman/envs/files/; o modificar configuración del sistema mediante el parémetro \"path\" en vz/cp/vzdir/infrman/envs/files/index."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:virtuozzo_containers:3.0.0-25.4.swsoft:*:*:*:*:*:*:*","matchCriteriaId":"08E98B5A-7F59-4021-AB33-ED7150B722A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:virtuozzo_containers:4.0.0-365.6.swsoft:*:*:*:*:*:*:*","matchCriteriaId":"DC5F0BF2-7B4E-4BBD-8D65-8E51AEFEC207"}]}]}],"references":[{"url":"http://osvdb.org/44395","source":"cve@mitre.org"},{"url":"http://px.dynalias.org/files/virtuozzo_overwrite.html.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490409/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28589","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41640","source":"cve@mitre.org"},{"url":"http://osvdb.org/44395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://px.dynalias.org/files/virtuozzo_overwrite.html.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490409/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6479","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the \"change password\" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la funcionalidad \"cambiar contraseña\" en el interfaz web VZPP para Parallels Virtuozzo v25.4.swsoft (disponible en v3.0.0 - v25.4.swsoft) permite a atacantes remotos modificar la contraseña mediante un enlace o etiqueta IMG a vz/cp/pwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:parallels_virtuozzo:25.4swsoft:*:*:*:*:*:*:*","matchCriteriaId":"37D6E0D9-F285-45F5-9A5C-CC068695B614"}]}]}],"references":[{"url":"http://osvdb.org/44394","source":"cve@mitre.org"},{"url":"http://px.dynalias.org/files/virtuozzo_pwd.html.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490409/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28593","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41638","source":"cve@mitre.org"},{"url":"http://osvdb.org/44394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://px.dynalias.org/files/virtuozzo_pwd.html.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490409/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6480","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter."},{"lang":"es","value":"La vulnerabilidad de tipo cross-site request forgery (CSRF) en el archivo engine/modules/imagepreview.php en Datalife Engine versión 6.7, permite a los atacantes remotos secuestrar la autenticación de usuarios arbitrarios para peticiones que utilizan una modificación del parámetro image."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softnews_media_group:datalife_engine:6.7:*:*:*:*:*:*:*","matchCriteriaId":"0F8593B1-C5BE-45BA-9934-4BB88BD21ECA"}]}]}],"references":[{"url":"http://osvdb.org/51107","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490372/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41598","source":"cve@mitre.org"},{"url":"http://osvdb.org/51107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490372/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6481","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Versioning (com_versioning) v1.0.2 en Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una tarea de edición en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomprod:com_versioning:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A1FD03D6-E0AE-482C-8762-625E59A96EDD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30050","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5989","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6482","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_live_site parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en admin.treeg.php en el componente Flash Tree Gallery (com_treeg) v1.0 para Joomla!, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante el parámetro mosConfig_live_site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:justjoomla:com_treeg:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4AF5B00E-7228-4796-99C0-2D1D3FF3D69C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/49499","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32041","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46260","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6928","source":"cve@mitre.org"},{"url":"http://osvdb.org/49499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6483","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle) component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en admin.googlebase.php en el componente Ecom Solutions VirtueMart Google Base (alias com_googlebase o Froogle) v1.1 para Joomla!, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart-solutions:com_googlebase:1.1:*:*:*:*:*:*:*","matchCriteriaId":"AD812792-FF7F-4F2B-BC63-33A55A701EE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/49529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32098","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6975","source":"cve@mitre.org"},{"url":"http://osvdb.org/49529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6484","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attackers to execute arbitrary SQL commands via the user field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Mole Group Taxi Map Script (alias Taxi Calc Dist Script), permite a atacantes remotos ejecutar comandos SQL de su elección mediante el campo user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole-group:taxi_calc_dist_script:-:*:*:*:*:*:*:*","matchCriteriaId":"D9636510-0F9B-449B-B4CC-2F3E0CDF4DB9"}]}]}],"references":[{"url":"http://osvdb.org/49695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32576","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32140","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46382","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7010","source":"cve@mitre.org"},{"url":"http://osvdb.org/49695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6485","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary SQL commands via the ctg parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en SoftComplex PHP Image Gallery, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"ctg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softcomplex:php_image_gallery:-:*:*:*:*:*:*:*","matchCriteriaId":"8333F4E9-C3EA-4FC3-BAB4-1F4B18990FC4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32182","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46436","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7026","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6486","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_dir] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos en PHP en lideshow_uploadvideo.content.php en SharedLog, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[root_dir]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shatm:sharedlog:*:*:*:*:*:*:*:*","matchCriteriaId":"18C2E253-8CBE-4B0D-ABF4-A55CC3ABCCCC"}]}]}],"references":[{"url":"http://osvdb.org/51911","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497978/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32035","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46293","source":"cve@mitre.org"},{"url":"http://osvdb.org/51911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497978/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6487","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.asp en Digiappz DigiAffiliate v1.4 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) admin y (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digiappz:digiaffiliate:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"C3ADB544-4412-4CC0-9BE3-AB0851D390F4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32217","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46500","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7067","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6488","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the Admin field in a login action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en SoftComplex PHP Image Gallery v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el campo \"Admin\" en una acción login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softcomplex:php_image_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B12C0A2C-9B21-4285-BB99-58C4682B9CD7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32159","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49337","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6489","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MyAlbum component (com_myalbum) 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the album parameter to index.php."},{"lang":"es","value":"Vulnerabildiad de inyección SQL en el componente MyAlbum (com_myalbum) 1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"album\" a indexl.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huseyin_bora_abaci:com_myalbum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B587D8F4-ADB2-496A-92D5-010048F7A47D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28496","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41510","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6490","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"function/update_xml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying the target filename in the target_file parameter.  NOTE: this can be leveraged for code execution by overwriting a PHP file, as demonstrated using function/upload_file.php."},{"lang":"es","value":"function/update_xml.php en FLABER 1.1 y anteriores permite a atacantes remotos sobreescribir ficheros de su elección especificando el nombre de fichero objetivo en el parámetro target_file. NOTA: Esto puede ser aprovechado para ejecutar código mediante la sobreescritura de un fichero PHP, como ha quedado demostrado usando function/upload_file.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flysforum:flaber:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"BE052C6B-82DA-47ED-A2D1-7A86D571025C"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1163/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41715","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5407","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1163/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6491","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en PHPGKit 0.9 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro DOCUMENT_ROOT. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denis_moinel:phpgkit:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C5E5720C-ADB2-474B-8181-00B62CF6D17F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28526","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28526/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28526/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6492","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en process.php en Tizag Countdown Creator v3 permite a atacantes remotos ejecutar código de su elección a través de la subida de un fichero con una extensión ejecutable a través de index.php, entonces accede al fichero subido a través de una petición directa al fichero en pics/.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tizag:tizag_countdown_creator:3:*:*:*:*:*:*:*","matchCriteriaId":"591CB34C-874A-471B-993D-BA0B2026E76C"}]}]}],"references":[{"url":"http://osvdb.org/51305","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33007","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32661","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47129","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7354","source":"cve@mitre.org"},{"url":"http://osvdb.org/51305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6493","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database/News.mdb."},{"lang":"es","value":"Easy Content Management Publishing almacena información sensible en la raíz del directorio web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos a través de una petición directa a Database/News.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-news:easy_content_management_publishing:-:*:*:*:*:*:*:*","matchCriteriaId":"E80FF0F7-EB4B-4213-9EB4-22CB6EE3B573"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49392","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7340","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6494","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb."},{"lang":"es","value":"ASP User Engine.NET almacena información sensible bajo la web raíz con insuficientes controles de acceso, lo cual permite a atacantes remotos descargar una base de datos a través de una petición directa por users.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robs-projects:asp_user_engine.net:-:*:*:*:*:*:*:*","matchCriteriaId":"78C087F8-25DF-457F-9D48-8866D3C14706"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49400","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6495","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Fritz Berger yet another php photo album - next generation (yappa-ng) v2.3.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"album\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zirkon_box:yappa-ng:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1C6965F9-CFB5-4F87-B61A-DDB57F097CCF"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN55833077/index.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/yappang-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47078","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN55833077/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0812-exploits/yappang-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6496","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX VSPDFEditorX.VSPDFEdit en VSPDFEditorX.ocx v1.0.200.0 en VISAGESOFT eXPert PDF EditorX permite a atacantes remotos crear o sobre escribir ficheros de su elección a través de un primer argumento del método extractPagesToFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visagesoft:expert_pdf_editorx:1.0.200.0:*:*:*:*:*:*:*","matchCriteriaId":"D2266812-D642-4BDB-B52E-EC244704617F"}]}]}],"references":[{"url":"http://secunia.com/advisories/32990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32664","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47166","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7358","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6497","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTTP requests for the /- URI."},{"lang":"es","value":"El router ADSL Neostrada Livebox permite a atacantes remotos provocar una denegación de servicio (caída de red) a través de múltiples peticiones HTTP para la URI /-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:tp:neostrada_livebox_adsl_router:-:*:*:*:*:*:*:*","matchCriteriaId":"7027420B-BBC0-4458-AD70-4BEB1B8166F7"}]}]}],"references":[{"url":"http://osvdb.org/50673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499010/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32696","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47183","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7387","source":"cve@mitre.org"},{"url":"http://osvdb.org/50673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499010/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6498","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter."},{"lang":"es","value":"La vulnerabilidad de tipo cross-site request forgery (CSRF) en el archivo security/xamppsecurity.php en XAMPP versión 1.6.8, permite a los atacantes remotos secuestrar la autenticación de usuarios para las peticiones que cambian una determinada contraseña de .htaccess por medio del parámetro xampppasswd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C91DDACF-8508-47A2-B9D2-39B4B37BF4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47201","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7384","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6499","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1."},{"lang":"es","value":"security/xamppsecurity.php en XAMPP v1.6.8 realiza una operación \"extract\" en el array superglobal SERVER, lo cual permite a atacantes remotos suplantar variables críticas, como lo demostrado a través del establecimiento de la variable REMOTE_ADDR de 127.0.0.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C91DDACF-8508-47A2-B9D2-39B4B37BF4CF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47202","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7384","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6500","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CodeToad ASP Shopping Cart Script permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cadena de consulta URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codetoad:asp_shopping_cart_script:*:*:*:*:*:*:*:*","matchCriteriaId":"7AD426A9-D1D1-472F-97F8-A2545E86CE5F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/aspshoppingcart-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32568","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47003","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/aspshoppingcart-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6501","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profiles/index.php en Pro Chat Rooms v3.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"gud\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prochatrooms:pro_chat_rooms:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE0DC64F-2477-4A6F-B294-B48D6D45BEFB"}]}]}],"references":[{"url":"http://osvdb.org/50696","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32758","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47241","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7409","source":"cve@mitre.org"},{"url":"http://osvdb.org/50696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6502","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. (dot dot) in the avatar parameter, and cause other users to execute this script by using sendData.php to send a message to (1) an individual user or (2) a room, leading to cross-site request forgery (CSRF), cross-site scripting (XSS), or other impacts."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Pro Chat Rooms v3.0.2 permite a usuarios autenticados remotamente seleccionar una secuencia de comandos PHP local de su elección como un avatar a través de un .. (punto punto) en el parámetro \"avatar\", provocando que otros usuario ejecuten esta secuencia de comandos usando sendData.php para enviar un mensaje (1) a un usuario individual (2) un room, dirigiendo falsificación de petición en sitios cruzados  (CSRF), secuencias de comandos en sitios cruzados (XSS), u otros impactos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prochatrooms:pro_chat_rooms:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE0DC64F-2477-4A6F-B294-B48D6D45BEFB"}]}]}],"references":[{"url":"http://osvdb.org/50697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47242","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7409","source":"cve@mitre.org"},{"url":"http://osvdb.org/50697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6503","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/login.php and (2) order.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PrestaShop v1.1.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de PATH_INFO en (1)admin/login.php y (2) order.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:1.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"863A3D6E-DD4A-4FF0-B0E8-4C8331FAA555"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498994/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32689","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47158","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498994/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6504","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \\u0023 representation for the # character."},{"lang":"es","value":"ParametersInterceptor en OpenSymphony XWork 2.0.x antes de 2.0.6 y 2.1.x antes de 2.1.2, tal como se utiliza en Apache Struts y otros productos, no restringe adecuadamente las referencias # (almohadilla) a objetos de contexto, lo que permite a atacantes remotos ejecutar sentencias OGNL (Object-Graph Navigation Language) y modificar los objetos del contexto del lado del servidor contexto objetos, como lo demuestra el uso de una representación \\u0023 del carácter #."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FDB359E4-7D59-4124-855D-8E9CF71554CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CF27EEA-B36A-4FA1-BC8F-37003457FD53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9ABB7703-3606-4983-ADCE-829A3291ED66"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"89891ADF-86DD-4921-81CA-8482FA6AD156"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"00DB2D6F-008C-4132-B7A5-86366AE4C551"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A1AC722-E97E-4EA2-A6F6-9C6EED5131E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"318A2710-854A-44BB-8A9D-C5C360BC48E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensymphony:xwork:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32976658-0BE5-42E2-A466-7CB9FF5ABF40"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5CF11DCF-6F6E-4E18-988E-E43918FBB8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"386538BE-F258-4870-8E11-750ADA228026"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B4CF15B9-3714-4206-9971-1F7D59E20483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFA32D87-65C7-4589-86B7-500BE3203CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"98C3FB11-4E24-4067-A3A9-021F849DAAE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"661F1610-9FCD-4FC1-BCA1-69C58E0A1389"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D9C89E22-B106-4EAB-90A1-0EA86C165737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E1BABB2-780E-47E0-87A9-A164906C8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94BD452B-AE41-4F7A-9DB9-4B1039582537"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"ACFDC53B-7B8E-4333-BC87-E01024EC9C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9F0818E7-B617-4C30-BFAC-9FE2F375F8BD"}]}]}],"references":[{"url":"http://fisheye6.atlassian.com/cru/CR-9/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://issues.apache.org/struts/browse/WW-2692","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://jira.opensymphony.com/browse/XW-641","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/49732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://struts.apache.org/2.x/docs/s2-003.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32101","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46328","source":"cve@mitre.org"},{"url":"http://fisheye6.atlassian.com/cru/CR-9/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://issues.apache.org/struts/browse/WW-2692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://jira.opensymphony.com/browse/XW-641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/49732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://struts.apache.org/2.x/docs/s2-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6505","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0.x and (2) DefaultStaticContentLoader in 2.1.x."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Apache Struts v2.0.x anteriores a v2.0.12 y v2.1.x anteriores a v2.1.3, permite a atacantes remotos leer ficheros de su elección a través de ..%25f (punto punto barra, codificado) en una dirección Web con /struts/ path, relativo a (1) FilterDispatcher en v2.0.x y (2)DefaultStaticContentLoader en v2.1.x.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D9C89E22-B106-4EAB-90A1-0EA86C165737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E1BABB2-780E-47E0-87A9-A164906C8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94BD452B-AE41-4F7A-9DB9-4B1039582537"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"ACFDC53B-7B8E-4333-BC87-E01024EC9C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9F0818E7-B617-4C30-BFAC-9FE2F375F8BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"A4275EB1-8AD1-4CB2-BC19-8F279BFA8D59"}]}]}],"references":[{"url":"http://issues.apache.org/struts/browse/WW-2779","source":"cve@mitre.org"},{"url":"http://osvdb.org/49733","source":"cve@mitre.org"},{"url":"http://osvdb.org/49734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://struts.apache.org/2.x/docs/s2-004.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32104","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://issues.apache.org/struts/browse/WW-2779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://struts.apache.org/2.x/docs/s2-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6506","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no espécificada en phpBB anteriores a v3.0.4 permite a atacantes saltarse las restricciones de seguridad y activar cuentas desactivadas, a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3","matchCriteriaId":"AF8238B0-BEED-4B7C-8431-622A69D25E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"60480BCC-6784-4A12-BBAC-A98181A362F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6637E3D8-FBBA-45EF-ADCF-CFA5CF924069"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"60B63076-D942-46B8-96DA-DD2ED812FCA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7924312D-46E8-456B-B920-36E33A719945"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D08D3F47-E8FA-4FEC-A3D5-B01B0C1862D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"2F959028-8C40-4341-A9EB-BFE9C8951111"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.01:*:*:*:*:*:*:*","matchCriteriaId":"474A1EF7-AD8A-49B3-A629-5917081FB0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF122E0D-ABB7-4042-A127-B061CD1F1165"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EFEFD3F1-87C7-45B9-B524-FF6DDD474C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6F9A1BA2-583C-4FFB-8E31-7F89EDC0A5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"87E212D1-431B-4595-B0BF-520AE07A4A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"E5876E29-AFE1-4351-842F-C20055CB68CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc5:*:*:*:*:*:*","matchCriteriaId":"F08C7C49-7B1F-4C0D-BACF-6B80D25DA75C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc6:*:*:*:*:*:*","matchCriteriaId":"84BBDC01-58AA-4F1C-B5AD-5697AD538D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc7:*:*:*:*:*:*","matchCriteriaId":"BF7CD162-BAF6-43ED-B8B0-1D9C272BFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:rc8:*:*:*:*:*:*","matchCriteriaId":"3F75B66A-E334-4019-B09D-C5FC21329CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE94F5A1-2850-4C32-8D77-9E601076C2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85EF28FC-7EA3-4BC6-9997-8B90721C61CC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33166","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50806","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32842","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6507","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T16:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum."},{"lang":"es","value":"Una vulnerabilidad sin especificar en phpBB antes de la versión 3.0.4 permite a atacantes obtener información sensible a través de vectores desconocidos relacionados con la ausencia de petición de contraseña en un mensaje privado que cita una entrada de un foro protegido por contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E962E706-3624-44B0-B97F-ABF8F0260957"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE94F5A1-2850-4C32-8D77-9E601076C2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85EF28FC-7EA3-4BC6-9997-8B90721C61CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EDCB089B-5EB5-4886-9B95-0C2C3CA39D31"}]}]}],"references":[{"url":"http://secunia.com/advisories/33166","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50806","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6508","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T20:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el filtro AuthCheck de la Consola de administración de Openfire 3.6.0a y anteriores permite a atacantes remotos eludir el proceso de autenticación y acceder a la pantalla de administración a través de un .. (punto punto) en una URI que coincida con la lista de cadenas excluidas (Exclude-Strings), como lo demuestra una secuencia  /setup/setup-/.. en una URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.0a","matchCriteriaId":"8733075B-1FFE-4A66-A80E-81111A3FC05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"20332EC7-FD3C-4118-8FE9-CF8DF62FC2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44EE43D4-190A-4188-AB48-34C87FA1CC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"73E425C2-E94D-41A9-A0A7-22498B138E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B1438E68-1149-49A8-AC38-4D65D19D7B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"57A6F7A2-1AFB-41DB-9C2D-BE0785BAC6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABD75603-FE40-47CB-9810-F91C983F8732"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4CC033A-F03B-4486-A27D-042FF0D3AB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF90E1E8-1635-4A20-9EA1-4BAE1C63EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"972DEE02-8707-473D-9BB9-A6A04F4B239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F9819365-ACD9-4801-B277-9B6D2A9CF3BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"70B640A2-A662-4BDC-970E-D71F6C1AC7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DF31BC81-E6B0-4B98-95C1-27C4F163A146"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DC95549-3BC1-4296-9993-3C917FE895F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"664BCEB5-F38C-4FB2-95B3-E8F88FB8FC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D5EA88D8-C41E-4CE1-85EB-8A0A23811FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1B16CECC-131F-4463-B8CE-101BD597C210"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"650101D4-7395-4C4E-8862-84CE365259BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A848F149-C5EC-4E1E-B3EB-98066C5AE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CE2746D5-0081-4065-97D0-2DBF5B8F00AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6B870602-8455-4DDD-8CEE-0A4016714E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE94D0C3-188D-42D1-B868-D32AF4D3432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5B845B1D-DC2D-47F0-A3DF-32AE01DDB6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7A1F4DD7-1B60-4006-842E-AE286302247F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A469BBA3-5DD6-42B5-ABBD-A9342ADC703A"}]}]}],"references":[{"url":"http://osvdb.org/49663","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32478","source":"cve@mitre.org"},{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.andreas-kurtz.de/archives/63","source":"cve@mitre.org"},{"url":"http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46488","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7075","source":"cve@mitre.org"},{"url":"http://osvdb.org/49663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.andreas-kurtz.de/archives/63","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6509","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T20:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en CallLogDAO en el complemento SIP para Openfire 3.6.0a y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro tipo (type) de sipark-log-summary.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.0a","matchCriteriaId":"8733075B-1FFE-4A66-A80E-81111A3FC05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"20332EC7-FD3C-4118-8FE9-CF8DF62FC2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44EE43D4-190A-4188-AB48-34C87FA1CC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"73E425C2-E94D-41A9-A0A7-22498B138E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B1438E68-1149-49A8-AC38-4D65D19D7B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"57A6F7A2-1AFB-41DB-9C2D-BE0785BAC6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABD75603-FE40-47CB-9810-F91C983F8732"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4CC033A-F03B-4486-A27D-042FF0D3AB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF90E1E8-1635-4A20-9EA1-4BAE1C63EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"972DEE02-8707-473D-9BB9-A6A04F4B239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F9819365-ACD9-4801-B277-9B6D2A9CF3BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"70B640A2-A662-4BDC-970E-D71F6C1AC7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DF31BC81-E6B0-4B98-95C1-27C4F163A146"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DC95549-3BC1-4296-9993-3C917FE895F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"664BCEB5-F38C-4FB2-95B3-E8F88FB8FC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D5EA88D8-C41E-4CE1-85EB-8A0A23811FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1B16CECC-131F-4463-B8CE-101BD597C210"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"650101D4-7395-4C4E-8862-84CE365259BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A848F149-C5EC-4E1E-B3EB-98066C5AE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CE2746D5-0081-4065-97D0-2DBF5B8F00AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6B870602-8455-4DDD-8CEE-0A4016714E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE94D0C3-188D-42D1-B868-D32AF4D3432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5B845B1D-DC2D-47F0-A3DF-32AE01DDB6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7A1F4DD7-1B60-4006-842E-AE286302247F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A469BBA3-5DD6-42B5-ABBD-A9342ADC703A"}]}]}],"references":[{"url":"http://osvdb.org/51912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32478","source":"cve@mitre.org"},{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"cve@mitre.org"},{"url":"http://www.andreas-kurtz.de/archives/63","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46487","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7075","source":"cve@mitre.org"},{"url":"http://osvdb.org/51912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.andreas-kurtz.de/archives/63","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6510","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T20:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en login.jsp  en la Consola de Administración de Openfire 3.6.0a y anteriores permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.0a","matchCriteriaId":"8733075B-1FFE-4A66-A80E-81111A3FC05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"20332EC7-FD3C-4118-8FE9-CF8DF62FC2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44EE43D4-190A-4188-AB48-34C87FA1CC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"73E425C2-E94D-41A9-A0A7-22498B138E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B1438E68-1149-49A8-AC38-4D65D19D7B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"57A6F7A2-1AFB-41DB-9C2D-BE0785BAC6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABD75603-FE40-47CB-9810-F91C983F8732"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4CC033A-F03B-4486-A27D-042FF0D3AB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF90E1E8-1635-4A20-9EA1-4BAE1C63EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"972DEE02-8707-473D-9BB9-A6A04F4B239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F9819365-ACD9-4801-B277-9B6D2A9CF3BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"70B640A2-A662-4BDC-970E-D71F6C1AC7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DF31BC81-E6B0-4B98-95C1-27C4F163A146"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DC95549-3BC1-4296-9993-3C917FE895F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"664BCEB5-F38C-4FB2-95B3-E8F88FB8FC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D5EA88D8-C41E-4CE1-85EB-8A0A23811FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1B16CECC-131F-4463-B8CE-101BD597C210"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"650101D4-7395-4C4E-8862-84CE365259BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A848F149-C5EC-4E1E-B3EB-98066C5AE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CE2746D5-0081-4065-97D0-2DBF5B8F00AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6B870602-8455-4DDD-8CEE-0A4016714E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE94D0C3-188D-42D1-B868-D32AF4D3432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5B845B1D-DC2D-47F0-A3DF-32AE01DDB6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7A1F4DD7-1B60-4006-842E-AE286302247F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A469BBA3-5DD6-42B5-ABBD-A9342ADC703A"}]}]}],"references":[{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-629","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46486","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7075","source":"cve@mitre.org"},{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6511","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T20:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en login.jsp en Openfire 3.6.0a y anteriores permite a atacantes remotos redirigir a los usuarios a sitios Web arbitrarios y llevar a cabo ataques de phishing a través del parámetro URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.0a","matchCriteriaId":"8733075B-1FFE-4A66-A80E-81111A3FC05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"20332EC7-FD3C-4118-8FE9-CF8DF62FC2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44EE43D4-190A-4188-AB48-34C87FA1CC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"73E425C2-E94D-41A9-A0A7-22498B138E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B1438E68-1149-49A8-AC38-4D65D19D7B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"57A6F7A2-1AFB-41DB-9C2D-BE0785BAC6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABD75603-FE40-47CB-9810-F91C983F8732"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4CC033A-F03B-4486-A27D-042FF0D3AB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF90E1E8-1635-4A20-9EA1-4BAE1C63EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"972DEE02-8707-473D-9BB9-A6A04F4B239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F9819365-ACD9-4801-B277-9B6D2A9CF3BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"70B640A2-A662-4BDC-970E-D71F6C1AC7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DF31BC81-E6B0-4B98-95C1-27C4F163A146"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DC95549-3BC1-4296-9993-3C917FE895F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"664BCEB5-F38C-4FB2-95B3-E8F88FB8FC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D5EA88D8-C41E-4CE1-85EB-8A0A23811FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1B16CECC-131F-4463-B8CE-101BD597C210"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"650101D4-7395-4C4E-8862-84CE365259BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A848F149-C5EC-4E1E-B3EB-98066C5AE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CE2746D5-0081-4065-97D0-2DBF5B8F00AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6B870602-8455-4DDD-8CEE-0A4016714E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE94D0C3-188D-42D1-B868-D32AF4D3432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5B845B1D-DC2D-47F0-A3DF-32AE01DDB6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7A1F4DD7-1B60-4006-842E-AE286302247F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A469BBA3-5DD6-42B5-ABBD-A9342ADC703A"}]}]}],"references":[{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7075","source":"cve@mitre.org"},{"url":"http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498162/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6512","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the Same Origin Policy and the intended access restrictions of the allowCrossOrigin function by hosting an assumed-safe file type containing Google Gear commands on the target domain, then accessing that file from the attacking domain, whose response headers are not checked and cause the worker code to run in the target domain."},{"lang":"es","value":"Vulnerabilidad de dominio cruzado en la API WorkerPool en Google Gears anteriores a v0.5.4.2 lo que permite a atacantes remotos evitar la política de igual origen y las restricciones de acceso previstas de la función allowCrossOrigin , asumiendo la existencia de un fichero seguro que contiene los comandos de Google Gear en el dominio objetivo, cuando se accede a ese fichero desde el dominio atacante, las cabeceras de respuesta no son chequeadas y el código worker corre en el dominio objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:gears:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5","matchCriteriaId":"271F3D6D-7889-4E46-8C18-96E7DE62FDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:gears:0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE9BA757-2DE8-4FCD-BFA6-34E6A75CB6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:gears:0.2:*:*:*:*:*:*:*","matchCriteriaId":"35698CCD-C9A1-4351-9E1D-5C70317600D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:gears:0.3:*:*:*:*:*:*:*","matchCriteriaId":"3213B623-4184-4F0D-A857-7FC53C362600"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:gears:0.4:*:*:*:*:*:*:*","matchCriteriaId":"74B98C2A-B8BE-4F2B-8C61-8408388586FC"}]}]}],"references":[{"url":"http://blog.watchfire.com/wfblog/2008/12/breaking-google-gears-cross-origin-communication-model.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://code.google.com/apis/gears/upcoming/api_workerpool.html#cross_origin","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-December/066291.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32698","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47173","source":"cve@mitre.org"},{"url":"http://blog.watchfire.com/wfblog/2008/12/breaking-google-gears-cross-origin-communication-model.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://code.google.com/apis/gears/upcoming/api_workerpool.html#cross_origin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-December/066291.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6513","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php."},{"lang":"es","value":"Vulnerabilidad de ausencia de restricción en la subida de ficheros en saa.php en Andy's PHP Knowledgebase (aphpkb) v0.92.9 permite a atacantes remotos ejecutar código de forma arbitraria mediante la subida de un fichero ejecutable, lo que permite el acceso a través de un enlace que este listado en authors.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aphpkb:aphpkb:0.92.9:*:*:*:*:*:*:*","matchCriteriaId":"8907866F-CF5A-4369-A16B-E5FCAC9D3FB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34476","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=113755&release_id=667918","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46977","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=113755&release_id=667918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6514","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Expo plugin in Compiz Fusion 0.7.8 allows local users with physical access to drag the screen saver aside and access the locked desktop by using Expo mouse shortcuts, a related issue to CVE-2007-3920."},{"lang":"es","value":"El plugin Expo en Compiz Fusion v0.7.8 permite a usuarios locales con acceso físico, arrastrar a un lado el salvapantallas y acceder al escritorio bloqueado mediante el uso de los atajos de teclado de Expo, relacionado con CVE-2007-3920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compiz:compiz_fusion:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"8BC4142D-1AF7-4031-BF33-8DF26EBD0E57"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=561567","source":"cve@mitre.org"},{"url":"http://gitweb.compiz-fusion.org/?p=fusion/plugins/expo%3Ba=commit%3Bh=f97a9fa6f0ad578f674d1f248bd7bef90e3260e0","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34465","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32712","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/compiz-fusion-plugins-main/+bug/247088","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47172","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00860.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00878.html","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=561567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gitweb.compiz-fusion.org/?p=fusion/plugins/expo%3Ba=commit%3Bh=f97a9fa6f0ad578f674d1f248bd7bef90e3260e0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/compiz-fusion-plugins-main/+bug/247088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00878.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6515","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Fritz Berger yet another php photo album - next generation (yappa-ng) lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de una cadena de petición a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vclcomponents:yappa-ng:*:*:*:*:*:*:*:*","matchCriteriaId":"F60BB549-1363-49BE-9930-4F72EB27E840"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/yappang-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49494","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/yappang-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6516","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) tema_dizin parameter to baslik.php and (2) portal_ayarlarportal_dili parameter to anket_yonetim.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en phpKF-Portal v1.10 permite a atacantes remotos incluir archivos de su elección a través de un .. (punto punto) en los parámetros (1) tema_dizin en baslik.php, (2) portal_ayarlarportal_dili en anket_yonetim.php. NOTA: El origen de esta información es desconocida, los detalles se han obtenido exclusivamente de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpkf:phpkf-portal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"030DF4D5-7F70-435D-AFBB-051B4CFD4D84"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6517","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the news_user cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en NewsHOWLER v1.03 Beta, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"news_user cookie\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nick_jenkin:newshowler:1.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"67DB5C71-C11A-4103-9A31-F99E894CDDD9"}]}]}],"references":[{"url":"http://osvdb.org/52236","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495548/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44519","source":"cve@mitre.org"},{"url":"http://osvdb.org/52236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6518","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users to execute arbitrary code by uploading a PHP file as an Avatar, then accessing the avatar via a direct request."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en la característica de perfil en VidiScript permite a usuarios autenticados remotamente registrados ejecutar código de su elección subiendo un fichero PHP como un Avatar, entonces accede el avatar a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vidiscript:vidiscript:-:*:*:*:*:*:*:*","matchCriteriaId":"118BD821-43DD-4E21-84EF-DCEA5E9BEC19"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44525","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6519","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en Xitami Web Server v2.2a hasta v2.5c2, y posiblemente otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente ejecutar código de su elección a través de especificadores de formato de cadena en una petición de proceso de larga ejecución Web (LRWP), lo que lanza  un código de validación de usuario incorrecto que involucra a la función \"sendfmt\" en el kernel SMT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"96C0A1F6-9876-42AD-8B28-4E2306555DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.4:*:*:*:*:*:*:*","matchCriteriaId":"2DE649DA-2818-4E06-9BD5-EBBD4A6B3861"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.4d7:*:*:*:*:*:*:*","matchCriteriaId":"5C295F4D-B9E1-433A-BF3C-E74071FA18FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.4d7:*:windows:*:*:*:*:*","matchCriteriaId":"1D0EC8E9-20BC-4547-B341-9C5CB4A79CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3DE159E-C488-4354-B571-C1DE0D920819"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5c2:*:*:*:*:*:*:*","matchCriteriaId":"B49FD0B7-1DB7-4DC0-A3ED-E4034B7FAEDB"}]}]}],"references":[{"url":"http://www.bratax.be/advisories/b013.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41644","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5354","source":"cve@mitre.org"},{"url":"http://www.bratax.be/advisories/b013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6520","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a URI that ends in (1) .ssi, (2) .shtm, or (3) .shtml, which triggers incorrect logging code involving the sendfmt function in the SMT kernel."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en el filtro SSI de Xitami Web Server v2.5c2 y puede que otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y puede que ejecutar código de su elección a través de unos especificadores de formato de cadena en una URI que termine en  (1) .ssi, (2) .shtm, or (3) .shtml, esto lanza un código de registro incorrecto que incluye a la función sendfmt en el kernel SMT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5c2:*:*:*:*:*:*:*","matchCriteriaId":"B49FD0B7-1DB7-4DC0-A3ED-E4034B7FAEDB"}]}]}],"references":[{"url":"http://www.bratax.be/advisories/b013.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41645","source":"cve@mitre.org"},{"url":"http://www.bratax.be/advisories/b013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6521","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an invalid File parameter, which reveals the installation path in an error message."},{"lang":"es","value":"index.php en Terracotta (también conocido como OpenTerracotta) v0.6.1 permite a atacantes remotos conseguir información sensible a través de un parámetro \"file\" incorrecto, lo que revelaría el path de la instalación en el mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devraj_mukherjee:openterracotta:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"028C0FC4-29C8-46C2-8F27-EA8E08734E20"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490341/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41571","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490341/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6522","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka OpenTerracotta) 0.6.1, and possibly other versions, allow remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the (1) CurrentDirectory and (2) File parameters to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en la  función RenderFile function in ContentRender.class.php en Terracotta (también conocida como OpenTerracotta) v0.6.1, y posiblemente otras versiones, permite a atacantes remotos listar directorios de su elección y leer archivos a través de .. (punto punto) en los parámetros (1) \"CurrentDirectory\" y (2) \"File\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devraj_mukherjee:openterracotta:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"028C0FC4-29C8-46C2-8F27-EA8E08734E20"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490341/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28550","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490341/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6523","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie.  NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbitrary users."},{"lang":"es","value":"auth.php en openInvoice v0.90 beta y anteriores permite a atacantes remotos eludir la autenticación y obtener privilegios mediante el establecimiento de la cookie \"oiauth\". NOTA: Esto puede ser aprovechado junto con otra vulnerabilidad en resetpass.php para modificar contraseñas de usuarios de manera arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cale_dunlap:openinvoice:0.90:beta:*:*:*:*:*:*","matchCriteriaId":"F22349A9-2532-417D-904E-B6C58FCF7424"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28854","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41947","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5466","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6524","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter.  NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication."},{"lang":"es","value":"resetpass.php en openInvoice v0.90 beta y anteriores que permite a usuarios remotos autenticados cambiar la contraseña de usuarios arbitrarios a través del parámetro uid modificado. NOTA: esto puede ser aprovechado por con una vulnerabilidad diferente, en el archivo auth.php para modificar contraseña sin autenticacion."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cale_dunlap:openinvoice:*:beta:*:*:*:*:*:*","versionEndIncluding":"0.90","matchCriteriaId":"3E52BE72-2AB5-42E6-BE62-7779D0C548FB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28854","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41947","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49580","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5466","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6525","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el Admin Panel en Nice PHP FAQ Script (Knowledge base Script) permite a atacantes remotos la ejecución de comandos SQL de su elección a través del parámetro \"Password\" (también conocido como el campo \"pass\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nicephpscripts:nice_php_faq_script:*:*:*:*:*:*:*:*","matchCriteriaId":"C3F88EB8-7988-4D78-9F9B-22360EBAB0F4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32150","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46402","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7018","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6526","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the cat_id parameter, a different vector than CVE-2008-1838."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en BosDev BosClassifieds que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro cat_id, un vector diferente a CVE-2008-1838."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bos_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"C5EF3BE8-43CA-400A-9285-47B249672F2D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32075","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46308","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6527","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum.asp en GO4I.NET ASP Forum v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"iFor\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:go4i:go41.net_asp_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AD8D80BA-8E79-43A7-92C3-55F5452241B1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32066","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46514","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6930","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6528","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T14:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream."},{"lang":"es","value":"NTFS TmaxSoft JEUS 5 anteriores a Fix 26 permite a los atacantes remotos leer el código fuente de secuencias de comandos añadiendo ::$DATA a la URL, lo que accede a la secuencia de datos alternativos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tmaxsoft:jeus:5:*:*:*:*:*:*:*","matchCriteriaId":"71F7D52D-5A29-492F-8AB7-B4546C77FC5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33123","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499235/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499236/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32804","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47303","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7442","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499235/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6529","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en listtest.php en eZoneScripts Living Local v1.1, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"r\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonescripts:living_local:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2BB288BC-B61E-4D7C-AEE5-56C8A6A8CE70"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32761","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47214","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7408","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6530","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en editimage.php en eZoneScripts Living Local v1.1, permite a administradores autenticados remotamente la ejecución de código PHP subiendo un archivo con una extensión ejecutable y después accediendo al mismo a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonescripts:living_local:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2BB288BC-B61E-4D7C-AEE5-56C8A6A8CE70"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32760","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47215","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7408","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6531","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamically transformed into method calls, aka \"WebWork 1 Parameter Injection Hole.\""},{"lang":"es","value":"La la aplicación ebWork 1 web framework en Atlassian JIRA v3.13.2, permite a atacantes remotos invocar los métodos públicos de JIRA a través de una URL manipulada en la llamada al método. También conocido como \"WebWork 1 Parameter Injection Hole.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*","versionEndExcluding":"3.13.2","matchCriteriaId":"5D496B15-7014-4024-B0F2-F7FA15C67190"}]}]}],"references":[{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2008-12-09","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52707","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32746","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47211","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2008-12-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6532","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to \"execute old updates\" that modify the database."},{"lang":"es","value":"Vulnerabilidad múltiple de falsificación de petición en sitios cruzados - CSRF - en la característica de actualización en Drupal v5.x anteriores a v5.13 y v6.x anteriores a v6.7, permiten a los atacantes remotos desarrollar acciones no autorizadas como el superusuarío a través de vectores no especificados, como se ha demostrado por provocación del superusuario la \"ejecución de antiguas actualizaciones\" que modifican la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"}]}]}],"references":[{"url":"http://drupal.org/node/345441","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33147","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50661","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3414","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47260","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/345441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6533","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors."},{"lang":"es","value":"Drupal v5.x anterior a v5.13 y v6.x anterior a v6.7 no borra el contenido relacionado cuando un formato de entrada es eliminado, lo que evita que se filtre adecuadamente y permita a atacantes remotos llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"}]}]}],"references":[{"url":"http://drupal.org/node/345441","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33147","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50662","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3414","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47259","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/345441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6534","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as \"&\" (ampersand) in the middle of an argument."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en NULL FTP Server Free y Pro v1.1.0.7, permite a usuarios autenticados remotamente la ejecución de comandos de su elección a través de un comando SITE personalizado que contiene caracteres de consola como \"&\" (ampersand) en la mitad del argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vwsolutions:null_ftp:1.1.0.7:pro:*:*:*:*:*:*","matchCriteriaId":"4E529381-3D6B-4BB4-AA0E-6E20FB934190"},{"vulnerable":true,"criteria":"cpe:2.3:a:vwsolutions:null_ftp:1.1.0.7:svr:*:*:*:*:*:*","matchCriteriaId":"4A4A9CD0-AA5A-4F22-BF39-F80E49257F64"}]}]}],"references":[{"url":"http://secunia.com/advisories/32999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/nullftpserver1107-en.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32656","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vwsolutions.com/knowledgeBase/releaseNotes.aspx?productId=14","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47099","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7355","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/nullftpserver1107-en.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vwsolutions.com/knowledgeBase/releaseNotes.aspx?productId=14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6535","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T21:00:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter."},{"lang":"es","value":"admin/settings.php en PayPal eStores permite a atacantes remotos evitar las restricciones de acceso establecidas y modificar las contraseñas de administrador a través de una petición directa con el parámetro \"NewAdmin\" modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paypalestores:paypal_estores:-:*:*:*:*:*:*:*","matchCriteriaId":"CEB68A94-48D3-4B2B-BA0A-563A5DF6420D"}]}]}],"references":[{"url":"http://osvdb.org/50682","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47203","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7367","source":"cve@mitre.org"},{"url":"http://osvdb.org/50682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6536","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats (c10)."},{"lang":"es","value":"Vulnerabilidad sin especificar en 7-zip anterior a v4.5.7 tiene un impacto y vectores de ataque desconocidos, como se ha demostrado mediante la suite para el testeo de formatos de archivo PROTOS GENOME (c10)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:*:beta:*:*:*:*:*:*","versionEndIncluding":"4.56","matchCriteriaId":"ADE1F7F4-D350-4019-994A-A8B6ADE0F6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:3.13:*:*:*:*:*:*:*","matchCriteriaId":"78964B58-D6EE-46BF-A065-76E0008F1C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.20:*:*:*:*:*:*:*","matchCriteriaId":"4B7851A5-6B88-4DE0-8C59-99F6D8520C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.23:*:*:*:*:*:*:*","matchCriteriaId":"6DA74A3A-3A54-4AF5-9110-2327C1013EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.24:beta:*:*:*:*:*:*","matchCriteriaId":"85A64D47-84EB-4E3F-AA18-0A87BB701FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.25:beta:*:*:*:*:*:*","matchCriteriaId":"348EC1F4-2E2A-4C20-80B9-BC302590A7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.26:beta:*:*:*:*:*:*","matchCriteriaId":"C9BC7CBB-9160-42A3-B14D-08928D2DF1D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.27:beta:*:*:*:*:*:*","matchCriteriaId":"F832C2F1-D139-4D57-B487-B99CB79C481F"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.28:beta:*:*:*:*:*:*","matchCriteriaId":"C27BE872-67E5-4841-8843-1E57BB696C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.29:beta:*:*:*:*:*:*","matchCriteriaId":"53717C67-2B82-4786-99B7-876E7E65CE50"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.30:beta:*:*:*:*:*:*","matchCriteriaId":"96C66C64-BEBA-4429-A83D-A4426E5F6427"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.31:*:*:*:*:*:*:*","matchCriteriaId":"46A11930-4ABD-4579-9984-6DA239129BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.32:*:*:*:*:*:*:*","matchCriteriaId":"4619294B-E699-48AC-BE80-6F5DA4526EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.33:beta:*:*:*:*:*:*","matchCriteriaId":"1D1E315D-E2FC-4895-8BF2-2067E61FC634"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.34:beta:*:*:*:*:*:*","matchCriteriaId":"BF7BBCB3-16DD-4E28-9A53-8670C7B26A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.35:beta:*:*:*:*:*:*","matchCriteriaId":"8D425B12-088B-470A-94F7-7CB03BE71A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.36:beta:*:*:*:*:*:*","matchCriteriaId":"48F215E8-3DE3-4D75-A9C7-D9B1996C8040"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.37:beta:*:*:*:*:*:*","matchCriteriaId":"228166EE-DD78-4A7F-A248-87203AF016A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.38:beta:*:*:*:*:*:*","matchCriteriaId":"5F0F264B-B208-42EE-81EE-2C34BD56D61C"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.39:beta:*:*:*:*:*:*","matchCriteriaId":"AF8095FA-8E13-4CDC-85D6-EFD4CA0D4F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.40:beta:*:*:*:*:*:*","matchCriteriaId":"D3E3273A-8C06-4049-9365-F5034C2FD764"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.41:beta:*:*:*:*:*:*","matchCriteriaId":"6F673D53-1CFB-4491-9D23-A58B77A77654"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.42:*:*:*:*:*:*:*","matchCriteriaId":"3187BF76-7AB6-4086-9BAD-09FDBC51D55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.43:beta:*:*:*:*:*:*","matchCriteriaId":"3071CC75-581A-4A34-A354-4ECA2C2ADD55"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.44:beta:*:*:*:*:*:*","matchCriteriaId":"AF85486D-6F16-4BD7-A318-8E80EF3E1E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.45:beta:*:*:*:*:*:*","matchCriteriaId":"ED9B7457-2349-4FF5-BE09-AB5E4E618B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.46:beta:*:*:*:*:*:*","matchCriteriaId":"5B2E0E16-AC01-4D34-A145-1510DA0DE4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.47:beta:*:*:*:*:*:*","matchCriteriaId":"53C18BF5-D237-4BBE-B008-84C2CF81FBAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.48:beta:*:*:*:*:*:*","matchCriteriaId":"0AC41507-1413-4224-8DCB-B96469087564"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.49:beta:*:*:*:*:*:*","matchCriteriaId":"6BB31556-1D8C-4C98-9013-605DE461FB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.50:beta:*:*:*:*:*:*","matchCriteriaId":"0F0851E8-0C8A-48C6-B519-1A2CFD500B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.51:beta:*:*:*:*:*:*","matchCriteriaId":"56A6D1EC-4605-43F0-9290-380168627D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.52:beta:*:*:*:*:*:*","matchCriteriaId":"56A4F4D2-C4E7-4240-8938-C695586CFE93"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.53:beta:*:*:*:*:*:*","matchCriteriaId":"566C6D0A-5475-4241-B84D-668BB251F099"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.54:beta:*:*:*:*:*:*","matchCriteriaId":"4BBDB69E-5657-4AF8-BDC5-84996D4A020E"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:7-zip:4.55:beta:*:*:*:*:*:*","matchCriteriaId":"6C43EB38-9089-4EB3-B369-D744C4EA897B"}]}]}],"references":[{"url":"http://osvdb.org/43649","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29434","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"cve@mitre.org"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0914/references","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41247","source":"cve@mitre.org"},{"url":"http://osvdb.org/43649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0914/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6537","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup \"do\" action to LightNEasy.php, which is cleared from $_GET but later accessed using $_REQUEST."},{"lang":"es","value":"LightNEasy/lightneasy.php en LightNEasy No database v1.2 permite a atacantes remotos conseguir el hash del password del administrador a través de la acción de configuración \"do\" a LightNEasy.php, que es eliminada desde $_GET pero posteriormente accedida usando $_REQUEST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2:*:no_database:*:*:*:*:*","matchCriteriaId":"1B1842C6-07FB-4857-A18F-FEB0037ED1BE"}]}]}],"references":[{"url":"http://osvdb.org/44397","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29757","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41768","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5425","source":"cve@mitre.org"},{"url":"http://osvdb.org/44397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6538","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser."},{"lang":"es","value":"DeStar v0.2.2-5 permite a atacantes remotos añadir usuarios de su elección a través de una petición directa a config/add/CfgOptUser."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:holger_schurig:destar:0.2.2-5:*:*:*:*:*:*:*","matchCriteriaId":"DDE07E50-D552-4A2C-A928-1BA9152A5DD6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28426","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41384","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6539","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter."},{"lang":"es","value":"Vulnerabilidad de inyección directa de código estático en user/settings/ en DeStar v0.2.2-5, permite a usuarios autenticados remotamente añadir usuarios administradores de su elección e inyectar código Python de su elección en  destar_cfg.py a través del parámetro \"Pin\" modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:holger_schurig:destar:0.2.2-5:*:*:*:*:*:*:*","matchCriteriaId":"DDE07E50-D552-4A2C-A928-1BA9152A5DD6"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/5305","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6540","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restrictions by using the default keys."},{"lang":"es","value":"DotNetNuke anteriores a v4.8.2, durante la instalación o actualización, no avisan al administrador que los valores (1) ValidationKey y (2) DecryptionKey  no pueden ser modificados  en el fichero web.config, lo que permite a atacantes remotos saltarse las restricciones de intento de acceso utilizando las claves por defecto.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.1","matchCriteriaId":"EFFBB6F1-D566-4D0D-B8F2-F8817D3DB7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*","matchCriteriaId":"FE94AE61-4CA4-48B5-BB08-D808CF750CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"72A73BE5-6668-484E-8E7C-16E839E98882"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"}]}]}],"references":[{"url":"http://osvdb.org/43720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno12/tabid/1148/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489957/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28391","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41399","source":"cve@mitre.org"},{"url":"http://osvdb.org/43720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno12/tabid/1148/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/489957/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6541","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en el módulo de gestión en DotNetNuke anterior a v4.8.2, permite a administradores remotos la subida de archivos de su elección y la elevación de privilegios en el servidor a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.1","matchCriteriaId":"EFFBB6F1-D566-4D0D-B8F2-F8817D3DB7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*","matchCriteriaId":"FE94AE61-4CA4-48B5-BB08-D808CF750CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"72A73BE5-6668-484E-8E7C-16E839E98882"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"}]}]}],"references":[{"url":"http://osvdb.org/43719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno11/tabid/1147/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28438","source":"cve@mitre.org"},{"url":"http://osvdb.org/43719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno11/tabid/1147/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6542","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per vendor advisory: http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx\r\n\r\n\r\nMitigating factors\r\n\r\n    * The host user must have added the HTM or HTML file type to the default File Upload Extensions\r\n    * The user must have access to the file manager.\r\n    * By default this issue only affects Admin users.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform \"server-side execution of application logic\" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files."},{"lang":"es","value":"Vulnerabilidad no específica en Skin Manager en DotNetNuke anteriores a v4.8.2 permite a administradores autentificados remotos ejecutar una aplicación lógica desde el lado del servidor, subiendo un fichero estático que es convertido a script dinámico a través de vectores desconocidos, relativos a ficheros HTM y HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.1","matchCriteriaId":"EFFBB6F1-D566-4D0D-B8F2-F8817D3DB7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*","matchCriteriaId":"FE94AE61-4CA4-48B5-BB08-D808CF750CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"}]}]}],"references":[{"url":"http://osvdb.org/43721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28438","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49767","source":"cve@mitre.org"},{"url":"http://osvdb.org/43721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6543","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php3, (2) locate.php3, (3) search_results.php3, (4) classifieds/index.php3, and (5) classifieds/view.php3; (6) index.php3, (7) manager.php3, (8) pass.php3, (9) remember.php3 (10) sign-up.php3, (11) update.php3, (12) userSet.php3, and (13) verify.php3 in controlcenter/; (14) alterCats.php3, (15) alterFeatured.php3, (16) alterHomepage.php3, (17) alterNews.php3, (18) alterTheme.php3, (19) color_help.php3, (20) createdb.php3, (21) createFeatured.php3, (22) createHomepage.php3, (23) createL.php3, (24) createM.php3, (25) createNews.php3, (26) createP.php3, (27) createS.php3, (28) createT.php3, (29) index.php3, (30) mailadmin.php3, and (31) setUp.php3 in controlpannel/; (32) include/sendit.php3 and (33) include/sendit2.php3; and possibly (34) include/adminHead.inc, (35) include/usersHead.inc, and (36) style/default.scheme.inc."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero en  ComScripts TEAM Quick Classifieds v1.0 a través del parámetro DOCUMENT_ROOT a (1) index.php3, (2) locate.php3, (3) search_results.php3, (4) classifieds/index.php3, y(5) classifieds/view.php3; (6) index.php3, (7) manager.php3, (8) pass.php3, (9) remember.php3 (10) sign-up.php3, (11) update.php3, (12) userSet.php3, y (13) verify.php3 en controlcenter/; (14) alterCats.php3, (15) alterFeatured.php3, (16) alterHomepage.php3, (17) alterNews.php3, (18) alterTheme.php3, (19) color_help.php3, (20) createdb.php3, (21) createFeatured.php3, (22) createHomepage.php3, (23) createL.php3, (24) createM.php3, (25) createNews.php3, (26) createP.php3, (27) createS.php3, (28) createT.php3, (29) index.php3, (30) mailadmin.php3, y (31) setUp.php3 en controlpannel/; (32) include/sendit.php3 y (33) include/sendit2.php3; y probablemente (34) include/adminHead.inc, (35) include/usersHead.inc, y (36) style/default.scheme.inc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comscripts:quick_classifieds:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A4EB848-60E9-4F8D-A861-D1E38D2C0FB9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28417","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28417/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42469","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28417/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6544","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) settings[default_theme_dir] parameter to Sources/Subs-Graphics.php and (2) settings[default_theme_dir] parameter to Sources/Themes.php.  NOTE: CVE and multiple third parties dispute this issue because the files contain a protection mechanism against direct request"},{"lang":"es","value":"** DISPUTADA ** Múltiples vulnerabilidades de inclusión remota de ficheros PHP en Simple Machines Forum  (SMF) v1.1.4, permite a atacantes remotos la ejecución de código PHP de su elección a través de una URL en los parámetros (1) settings[default_theme_dir] a Sources/Subs-Graphics.php y (2) settings[default_theme_dir] a Sources/Themes.php. NOTA: CVE y varios terceros discuten esta cuestión porque los archivos contienen un mecanismo de protección contra las peticiones directas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"449E930B-AB74-4B64-AC0A-C04A13C828B9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-03/0425.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-03/0426.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-03/0431.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41518","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-03/0425.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-03/0426.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-03/0431.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6545","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en news/include/createdb.php en Web Server Creator Web Portal v0.1, permite a atacantes remotos ejecutar código PHP de su elección a través del parámetro \"langfile\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comscripts:web_server_creator_web_portal:0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF05211-5C94-4F4F-BF3E-22411C9BBE45"}]}]}],"references":[{"url":"http://www.osvdb.org/53093","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28631","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43555","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/53093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6546","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to \"activation permissions.\""},{"lang":"es","value":"Vulnerabilidad no específica en phpns anteriores a v2.1.3 tiene un impacto desconocido y vectores de ataque relativos a \"permisos de activación\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alecwh:phpns:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2","matchCriteriaId":"625DBDD7-EF56-401F-997C-CC24623D81D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:alecwh:phpns:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3D1F7BF5-567B-47A4-9F5F-D8DCAA6A3577"}]}]}],"references":[{"url":"http://osvdb.org/48867","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://phpns.alecwh.com/news.php?a=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/48867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://phpns.alecwh.com/news.php?a=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6547","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors."},{"lang":"es","value":"schema.py en FormEncode para Python (python-formencode) v1.0 no aplica la característica chained_validators, lo que permite a atacantes evitar las restricciones de acceso establecidas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:formencode:formencode:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7B308656-80A5-409E-B0C7-2F83725DED9E"}]}]}],"references":[{"url":"http://osvdb.org/47082","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31081","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31163","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/download.php?group_id=91231&atid=596416&file_id=271779&aid=1925164","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1925164&group_id=91231&atid=596416","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30282","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43878","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00607.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/47082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/download.php?group_id=91231&atid=596416&file_id=271779&aid=1925164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1925164&group_id=91231&atid=596416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00607.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6548","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors."},{"lang":"es","value":"El analizador rst (parser/text_rst.py) en MoinMoin v1.6.1 no valida adecuadamente las ACL de la página web incluida , lo que permite a atacantes leer archivos sin autorización a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmo:moinmoin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"23A64B6E-48D4-4743-97E3-C1EC6C1A2EBE"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://osvdb.org/48877","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://osvdb.org/48877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-6549","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors."},{"lang":"es","value":"La función password_checker en config/multiconfig.py en MoinMoin v1.6.1 utiliza la característica cracklib y python-crack incluso cuando ambas no están como \"thread-safe\", lo que permite a atacantes remotos provocar una denegación de servicio (falta de segmentación y caída) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmo:moinmoin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"23A64B6E-48D4-4743-97E3-C1EC6C1A2EBE"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/48876","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/48876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6550","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T01:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary web script or HTML via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en glossaire.php en Glossaire v2.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"letter\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davidbourrier:glossaire:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B757B8ED-F7D8-485F-9467-92814EB311EF"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28609.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28609","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49772","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28609.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6551","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) an adminlang cookie to admin/ind_ex.php; or the module parameter to (2) 3rdparty/adminpart/add3rdparty.php, (3) polling/adminpart/addpolling.php, (4) contact/adminpart/addcontact.php, (5) brandnews/adminpart/addbrandnews.php, (6) newsletter/adminpart/addnewsletter.php, (7) game/adminpart/addgame.php, (8) tour/adminpart/addtour.php, (9) articles/adminpart/addarticles.php, (10) product/adminpart/addproduct.php, or (11) plain/adminpart/addplain.php in modules/."},{"lang":"es","value":"Varias vulnerabilidades de salto de directorio en e-Vision CMS v2.0.2 y versiones anteriores. Cuando magic_quotes_gpc está deshabilitado, permite a usuarios remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en (1) una cookie adminlang a admin/ind_ex.php o en el parámetro \"module\" (modulo) a (2) 3rdparty/adminpart/add3rdparty.php, (3) polling/adminpart/addpolling.php, (4) contact/adminpart/addcontact.php, (5) brandnews/adminpart/addbrandnews.php, (6) newsletter/adminpart/addnewsletter.php, (7) game/adminpart/addgame.php, (8) tour/adminpart/addtour.php, (9) articles/adminpart/addarticles.php, (10) product/adminpart/addproduct.php, o (11) plain/adminpart/addplain.php en modules/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-vision:e-vision_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.02","matchCriteriaId":"125A3496-48DD-40E8-8C63-EE0AEC0BF63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-vision:e-vision_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AFE3FC69-8453-4688-989F-54BE641C1CBB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46457","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6552","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9."},{"lang":"es","value":"Red Hat Cluster Project v2.x permite a usuarios locales modificar o sobrescribir ficheros de su elección mediante ataques de enlaces simbólicos a ficheros en /tmp, implicando componentes no especificados en Resource Group Manager (también conocido como rgmanager) versiones anteriores a v2.03.09-1, en gfs2-utils versiones anteriore a v2.03.09-1, y en CMAN - The Cluster Manager versiones anteriores a v2.03.09-1 para Fedora 9."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.00.00:*:*:*:*:*:*:*","matchCriteriaId":"6C049531-EC84-456A-96C8-DA0A53343E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.01.00:*:*:*:*:*:*:*","matchCriteriaId":"6DF4752C-D8A9-4065-B562-FC264224E89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.02.00:*:*:*:*:*:*:*","matchCriteriaId":"1E57EEC9-F0EE-4B13-A6DC-934974183DEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.00:*:*:*:*:*:*:*","matchCriteriaId":"57D5A467-CD50-43D0-B711-CB2DC4538A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.01:*:*:*:*:*:*:*","matchCriteriaId":"C534C075-8156-4431-BC5F-36D985C36C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.03:*:*:*:*:*:*:*","matchCriteriaId":"E01FC592-60D5-417F-A8AF-647AA7EC311D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.04:*:*:*:*:*:*:*","matchCriteriaId":"589238CE-D4D1-425E-B43A-FA686E7F707D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.05:*:*:*:*:*:*:*","matchCriteriaId":"C69E61C3-DD71-4AFC-8895-BF03ABA72F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.7:*:*:*:*:*:*:*","matchCriteriaId":"7C37DAB7-3B1A-447F-ADC6-1011D66EC22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.08:*:*:*:*:*:*:*","matchCriteriaId":"7B7789DD-D69F-4B00-89CA-8E5EFDFB8655"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.09:*:*:*:*:*:*:*","matchCriteriaId":"25A87A44-1D4F-4192-8440-213A5C28FBAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.10:*:*:*:*:*:*:*","matchCriteriaId":"55342974-C2F5-4B2A-9B33-E863BF1C2F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.03.11:*:*:*:*:*:*:*","matchCriteriaId":"3A8EFE56-2267-4108-AF0E-642DE1C9F0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.00:*:*:*:*:*:*:*","matchCriteriaId":"7E5615C1-1FF5-4051-A608-32491B1E88B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.01:*:*:*:*:*:*:*","matchCriteriaId":"9C631CD9-92ED-4AF8-AFE9-5023C2BCA2E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.02:*:*:*:*:*:*:*","matchCriteriaId":"9CE29A34-4D4C-4242-8C2D-107A32FA70C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.03:*:*:*:*:*:*:*","matchCriteriaId":"B3FBED0F-1959-422A-BDD5-6BC1E1DCEC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.04:*:*:*:*:*:*:*","matchCriteriaId":"3D34E256-54EF-4850-BE89-78F465247CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.05:*:*:*:*:*:*:*","matchCriteriaId":"2E3AD327-D339-47B2-8E92-15459FAFD607"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.06:*:*:*:*:*:*:*","matchCriteriaId":"7030912C-95C4-4147-9A1A-FF73D3561F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.07:*:*:*:*:*:*:*","matchCriteriaId":"C8DAEB97-54E9-409C-9B5E-CE2A04DF8FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.08:*:*:*:*:*:*:*","matchCriteriaId":"CFC5BEA8-87B8-477F-8F13-F62ED1D48C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.09:*:*:*:*:*:*:*","matchCriteriaId":"6FFD0CCC-6C62-40A0-9795-DB50DF507F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.10:*:*:*:*:*:*:*","matchCriteriaId":"1B7810B2-4FAC-453B-A6AD-93C93BA7BDB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.11:*:*:*:*:*:*:*","matchCriteriaId":"C27C14EE-D852-4C6C-9736-4201E8328658"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.12:*:*:*:*:*:*:*","matchCriteriaId":"6BE22AF1-608E-4783-B14D-3543FD89A741"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cluster_project:2.99.13:*:*:*:*:*:*:*","matchCriteriaId":"4F734960-8098-4D02-9379-00E2FAF8A6D1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.03-1:*:*:*:*:*:*:*","matchCriteriaId":"F12B9C5F-29A5-4B40-89E2-CD32477C087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.04-1:*:*:*:*:*:*:*","matchCriteriaId":"06ABB244-870D-4D5F-81FA-0D8D133A1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.05-1:*:*:*:*:*:*:*","matchCriteriaId":"C31DAF4D-B7BB-43CE-87EC-33062475AF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.07-1:*:*:*:*:*:*:*","matchCriteriaId":"25AD771F-0B14-4EC9-A425-3E49BE177402"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.08-1:*:*:*:*:*:*:*","matchCriteriaId":"15DBBFE0-79B9-4776-BE5F-00B861350C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:rgmanager:2.03.03-1:*:*:*:*:*:*:*","matchCriteriaId":"69DCA7E1-6DA3-45EB-861E-9E81772D2B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:rgmanager:2.03.04-1:*:*:*:*:*:*:*","matchCriteriaId":"434FA1DD-2051-4D79-8C77-2A65BBAECD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:rgmanager:2.03.05-1:*:*:*:*:*:*:*","matchCriteriaId":"BDEB8EE9-4CC1-4605-89A3-FF825F2FE850"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:rgmanager:2.03.07-1:*:*:*:*:*:*:*","matchCriteriaId":"96CADCB9-566C-4B0F-9CD6-EB6C428486DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:rgmanager:2.03.08-1:*:*:*:*:*:*:*","matchCriteriaId":"6FA6195C-7577-4602-BA42-CE3C966CC49D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gfs2-utils:2.03.03-1:*:*:*:*:*:*:*","matchCriteriaId":"2C7CF4AF-CC1E-47F0-8B17-71DD6702A984"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gfs2-utils:2.03.04-1:*:*:*:*:*:*:*","matchCriteriaId":"0ADCAF38-52C3-47A6-8C12-71B9F443F18F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gfs2-utils:2.03.05-1:*:*:*:*:*:*:*","matchCriteriaId":"BB493A19-F941-45B0-BA19-8F3EEF91A97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gfs2-utils:2.03.07-1:*:*:*:*:*:*:*","matchCriteriaId":"0A1D95B2-55B7-4795-9F6C-A57F7C8411D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gfs2-utils:22.03.08-1:*:*:*:*:*:*:*","matchCriteriaId":"D45A7C07-4AF7-4E0D-ADF3-9487198A2D14"}]}]}],"references":[{"url":"http://osvdb.org/50299","source":"cve@mitre.org"},{"url":"http://osvdb.org/50300","source":"cve@mitre.org"},{"url":"http://osvdb.org/50301","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1337.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36530","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36555","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43367","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43372","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1339.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1341.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0264.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0265.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32179","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0416","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0417","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46412","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404","source":"cve@mitre.org"},{"url":"http://osvdb.org/50299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1337.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1339.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1341.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0265.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6553","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as an administrator, which allows remote attackers to (1) create administrative accounts via an add_admin action, (2) remove administrative accounts via a delete_admin action, and (3) modify administrative passwords via a change_password action."},{"lang":"es","value":"Vulnerabilidad en microcms-admin-home.php en Implied de Design Micro CMS (Micro-CMS) v3.3 (v0.3.5) no requiere autenticación de administrador, lo que permite a atacantes remotos (1) crar cuentas administrativas a través de una acción add_admin, (2) eliminar cuentas administrativas a través de una acción delete_admin y (3) modificar contraseñas de administración a través de una acción change_password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impliedbydesign:micro-cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.5","matchCriteriaId":"195FC2FE-C47B-4D62-A1D4-957C95D4C8BF"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/32063.pl","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32063","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46294","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6933","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/32063.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6554","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T20:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string."},{"lang":"es","value":"cgi-bin/script en el router Aztech ADSL2/2+ 4-port v3.7.0 build 070426 permite a atacantes remotos ejecutar código de su elección utilizando caracteres especiales del interprete de comandos en una cadena de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aztech:adsl2\\/2\\+4-port_router:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"157895CB-5A1A-4D7D-9BF1-1743F8BBC518"}]}]}],"references":[{"url":"http://core.ifconfig.se/~core/?p=21","source":"cve@mitre.org"},{"url":"http://osvdb.org/44267","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490100/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41492","source":"cve@mitre.org"},{"url":"http://core.ifconfig.se/~core/?p=21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/490100/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6555","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T20:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command."},{"lang":"es","value":"cgi-bin/webutil.pl en The Puppet Master WebUtil permite a atacantes remotos ejecutar código de su elección utilizando caracteres especiales del interprete de comandos en el comando \"dig\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppetmaster:webutil:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DCB9C9AF-C5E1-4EB4-88FD-907F3FF483B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppetmaster:webutil:2.7:*:*:*:*:*:*:*","matchCriteriaId":"925BE712-36D5-4A8C-939D-A535503A4F30"}]}]}],"references":[{"url":"http://osvdb.org/51181","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28393","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41400","source":"cve@mitre.org"},{"url":"http://osvdb.org/51181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6556","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T20:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command."},{"lang":"es","value":"Vulnerabilidad en cgi-bin/webutil.pl en Puppet Master WebUtil v2.3 que permite a usuarios remotos ejecutar comandos de su elección a través de metacarácteres en el comando whois."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppet_master:webutil:2.3:*:*:*:*:*:*:*","matchCriteriaId":"175124A5-4BED-4D57-95B9-1566761B5920"}]}]}],"references":[{"url":"http://osvdb.org/51181","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28393","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41400","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49820","source":"cve@mitre.org"},{"url":"http://osvdb.org/51181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6557","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T20:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command."},{"lang":"es","value":"cgi-bin/webutil.pl en The Puppet Master WebUtil v2.7 permite a atacantes remotos ejecutar código de su elección utilizando caracteres especiales del interprete de commandos en el comando \"details\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppetmaster:webutil:2.7:*:*:*:*:*:*:*","matchCriteriaId":"925BE712-36D5-4A8C-939D-A535503A4F30"}]}]}],"references":[{"url":"http://osvdb.org/51181","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28393","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41400","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49821","source":"cve@mitre.org"},{"url":"http://osvdb.org/51181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6558","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T20:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH environment variable to point to a malicious bin/hvenv program."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en hvdisp y rcvm en ReliantHA v.1.1.4 en SCO UnixWare 7.1.4 que permite a usuarios locales obtener permisos de root modificando la variable de entorno RELIANT_PATH para que apunte a un programa bin/henv malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unixware:reliantha:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C8C3E2D7-9D56-4A2A-A0D2-FF4AE99B4B11"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/46706","source":"cve@mitre.org"},{"url":"http://osvdb.org/46707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28624","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5356","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/46706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6559","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T20:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters."},{"lang":"es","value":"Vulnerabilidad en el comando Merge mcd en ReliantHA v1.1.4 en SCO UnixWare 7.1.4. Permite a usuarios locales obtener permisos de root a través de un argumento -d manipulado que contiene secuencias de .. (dos puntos) que apuntan a un directorio que contiene un fichero cuyo nombre contiene metacaracteres de shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sco:reliantha:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C7832F9D-DD63-4EEA-B7BE-4176C7E8599F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51234","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28625","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/5357","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/5357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6560","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T14:09:53.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product."},{"lang":"es","value":"Desbordamiento de búfer en CMAN - The Cluster Manager versiones anteriores a v2.03.09-1 en Fedora 9 y Red Hat Enterprise Linux (RHEL) 5 permite a atacantes provocar una denegación de servicio (consumo de CPU y consumo de memoria) a través de un fichero cluster.conf con muchas líneas. \r\nNOTA: no está claro si este problema cruza fronteras de privilegios en usuarios reales del producto."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue. The misbehaviour of CMAN is triggered by corrupted / specially crafted cluster.conf configuration file. Ability to edit this file is restricted to system administrator, therefore no privilege boundary is crossed.","lastModified":"2009-08-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.03.08-1","matchCriteriaId":"E5280A55-F6CF-4D35-B9D4-A76321EC591A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.03-1:*:*:*:*:*:*:*","matchCriteriaId":"F12B9C5F-29A5-4B40-89E2-CD32477C087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.04-1:*:*:*:*:*:*:*","matchCriteriaId":"06ABB244-870D-4D5F-81FA-0D8D133A1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.05-1:*:*:*:*:*:*:*","matchCriteriaId":"C31DAF4D-B7BB-43CE-87EC-33062475AF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cman:2.03.07-1:*:*:*:*:*:*:*","matchCriteriaId":"25AD771F-0B14-4EC9-A425-3E49BE177402"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"D32A30CD-EA21-4AA6-868F-3448AA50B70D"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"A00F5B01-0C61-48A6-BE78-1981CA6C09FD"}]}]}],"references":[{"url":"http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=468966","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49832","source":"cve@mitre.org"},{"url":"http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-875-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=468966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6561","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix Presentation Server Client for Windows before 10.200 does not clear \"credential information\" from process memory in unspecified circumstances, which might allow local users to gain privileges."},{"lang":"es","value":"Citrix Presentation Server Client para Windows versiones anteiores a v10.200 no limpia \"información confidencial\" de procesos de memoria en circunstancias sin especificar, lo cual permite a usuarios locales conseguir privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server_client:10.200:*:*:*:*:*:*:*","matchCriteriaId":"497C22C5-2213-4001-B6E1-48EFE4ACEF3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX116227","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1019605","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0845","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41102","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX116227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1019605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6562","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en jax_linklists.php de Jack (tR) Jax LinkLists v1.00, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro cat. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jax_scripts:jax_linklists:1.00:*:*:*:*:*:*:*","matchCriteriaId":"5CB48A64-5ADD-4750-939D-CA00C9765790"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28518","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41573","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6563","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DTD file."},{"lang":"es","value":"Desbordamiento de búfer en el analizador XML en Trillian v3.1.9.0, y posiblemente versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de un fichero DTD manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E64CC47-F11E-4DA9-AEFE-70DF7AD4C8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:basic:*:*:*:*:*","matchCriteriaId":"C3C523E8-A945-462C-8E0B-3B08A73C61EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:pro:*:*:*:*:*","matchCriteriaId":"BF549D88-C312-4EB7-BFB4-97E0FFACE06E"}]}]}],"references":[{"url":"http://osvdb.org/51130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490772/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28747","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41782","source":"cve@mitre.org"},{"url":"http://osvdb.org/51130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/490772/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6564","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks."},{"lang":"es","value":"Protocolo Nortel UNIStim, utilizado en Communication Server 1000 y otros productos, utiliza números de secuencia predecibles, lo que permite a atacantes remotos secuestrar seisiones a través de ataques de rastreo o fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:communication_server_1000:*:*:*:*:*:*:*:*","matchCriteriaId":"D5F61F4A-78E4-469C-8218-55B588FFBD23"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:unistim_protocol:*:*:*:*:*:*:*:*","matchCriteriaId":"3208B0FF-93A1-4E05-AA5C-67A27B9FAFFB"}]}]}],"references":[{"url":"http://osvdb.org/44379","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29747","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019847","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41801","source":"cve@mitre.org"},{"url":"http://osvdb.org/44379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6565","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the signature."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Invision Power Board v2.3.1 y anteriores, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de una etiqueta IFRAME en la firma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"80F198C2-6AAD-482F-A95E-10505A69993C"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"19CF6BD7-04F2-4D69-8402-EC4B637EA083"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2F0C566E-2AC5-47A2-9246-2FBC87828690"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8B83740E-6C38-4BEB-84A2-6B0F01799DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"29692429-A920-4BAD-9D79-D36EBE74EFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0D52AB16-A202-48B6-82C0-AD13EBCC7FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C498DCB3-3CC7-4334-BF61-F5DA43F4B90F"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*","matchCriteriaId":"99A7875E-DAF0-46CD-AE30-246EB3FC6BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.3.1_final:*:*:*:*:*:*:*","matchCriteriaId":"F2103FBA-1B72-43FC-A1ED-28F8C7DA0EE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*","matchCriteriaId":"94FBF21B-CF52-41BB-BAF1-AF822586D28B"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9AF155D-BDF6-4B5F-89BF-62CDE6FB48DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"19B001F3-8A6E-423D-9382-AA696D193F08"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2CDDB243-B03B-4DFE-9234-FD886EA80C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7139AE38-8E5D-4D1D-A126-9CD10CE13E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6E24336F-BD4C-4596-8FFE-9D53AB802BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.x:*:*:*:*:*:*:*","matchCriteriaId":"AE478AB9-7ED4-4FDD-8990-CC4442CFA416"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0_alpha3:*:*:*:*:*:*:*","matchCriteriaId":"14F5777B-25A8-4D20-AD24-A639E315582F"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0_pdr3:*:*:*:*:*:*:*","matchCriteriaId":"6FF0C787-BDC5-4154-809A-864DA3D4769D"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf1:*:*:*:*:*:*:*","matchCriteriaId":"23A69133-FF5A-457E-823F-64920A0DB9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0_pf2:*:*:*:*:*:*:*","matchCriteriaId":"23C37B74-6486-46A2-AC2C-C27786ED697E"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C63DDA0-9B4C-4D3E-9633-82C330753ABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AB960ACC-74D4-4AFB-886C-11EB5180DFD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1BA6316-7E7E-4A6B-AA54-1846198D64BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EA70C944-F70E-49F4-AA9C-D19148925C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6CAF5259-D99A-45A1-8DD4-C6858B302272"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"67ED0140-7137-4F8D-AEA1-53251D4D4273"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"75723F84-9989-4195-9827-E3A6DF2ABA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-03-08:*:*:*:*:*:*:*","matchCriteriaId":"ED5116FA-C532-42DF-ABBD-193AD7B799A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-04-25:*:*:*:*:*:*:*","matchCriteriaId":"8A90F21A-0FE7-456C-86FA-2F60542A7EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E8BC2011-5D19-4AF2-BCCD-38A03D0175FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AEEA453B-2359-4B20-A8EE-71B07B60EDB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1.x:*:*:*:*:*:*:*","matchCriteriaId":"DEEA02AE-B0C9-4C37-8A0A-23351EBE58FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*","matchCriteriaId":"232885C1-B578-4E6E-8472-FF47A17DF976"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"19FFFBC9-F6F0-421C-BD8A-6F2F81C4E62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"7CB7078D-61D2-4ED9-AC8E-2D4F350F0716"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"7EC2800F-3A8C-4B63-B754-D921DFF79496"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"C5C8BA41-7876-4738-A68A-2162E28A3AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"18BF761A-6459-42B0-BCB8-F735FBDD6139"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.2:*:*:*:*:*:*:*","matchCriteriaId":"05AF1F12-0E9C-478C-9DDA-356E5231A073"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C9826649-436F-4C05-A0DB-0C5D5CC42B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6D2431F4-91A3-42C0-985C-1A5DBE305E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DE56D215-CECF-4FB2-9042-A0CA9FC1D3AD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/490115/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/490115/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6566","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Octopussy before 0.9.5.8 has unknown impact and attack vectors related to a \"major security\" vulnerability."},{"lang":"es","value":"Vulnerabilidad no específica en Octopussy anteriores a v0.9.5.8 tiene impacto desconocido y vectores de ataque relativos una vulnerabilidad de \"seguridad mayor\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:octopussy:octopussy:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.5.8","matchCriteriaId":"CB4D7980-981F-40EF-BB93-6D5AADD2DF5E"}]}]}],"references":[{"url":"http://freshmeat.net/projects/octopussy/releases/275561","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/48839","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://freshmeat.net/projects/octopussy/releases/275561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/48839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-6567","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via (1) the e-mail address, (2) a comment, which is not properly handled during moderation, and (3) the tag parameter to gallery/tags.php."},{"lang":"es","value":"Múltiples vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Gallarific Free Edition, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) la dirección de correo electrónico, (2) un comentario que no es manejado adecuadamente durante la moderación y (3) el parámetro etiqueta a gallery/tags.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallarific:gallarific:-:-:free:*:*:*:*:*","matchCriteriaId":"D4AB8E49-6207-4DAC-8570-DEEF231B812A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0398.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51166","source":"cve@mitre.org"},{"url":"http://osvdb.org/51167","source":"cve@mitre.org"},{"url":"http://osvdb.org/51168","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28794","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0398.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6568","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Yehe 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the envoyer feature.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en Yehe v2.0 permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable, entonces accede a él a través de una petición directa al fichero en la función envoyer.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yehe:yehe:2.0:*:*:*:*:*:*:*","matchCriteriaId":"52213FAE-CE52-4D3B-B19F-A4F652972E9E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42279","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6569","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en Cybozu Garoon v2.0.0 a la v2.1.3, permite a atacantes remotos secuestrar sesiones web a través del ID de sesión en la página de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1556F99E-1609-44FF-83F0-F43FBDE738A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"348C389E-ADFD-4D2C-AA54-220664EA2755"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48F3F19B-25A7-4E9E-9961-1F7C8DBC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"08AE0E10-87A4-4862-A873-A943F44A9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C88D773E-B6DE-4FD2-A911-0D13C6CA902C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C846A750-F26E-4F1F-85A3-F95BCC9F8A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2E139B6A-2F36-4EB5-BA1F-84D67C89E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F585001-37C9-42F5-8B13-56827E6AC785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"47FD3F43-9ECA-4815-8BDC-B9DAC07E9400"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5F2D43-8B67-4D84-94AF-262F6D66F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"277403E7-3CD9-458C-9669-FB983FF94568"}]}]}],"references":[{"url":"http://cybozu.co.jp/products/dl/notice/detail/0021.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18700809/index.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000034.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/46564","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30871","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.lac.co.jp/info/advisory/98.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29981","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43427","source":"cve@mitre.org"},{"url":"http://cybozu.co.jp/products/dl/notice/detail/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18700809/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/46564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.lac.co.jp/info/advisory/98.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6570","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en el lector RSS en Cybozu Garoon v2.0.0 hasta v2.1.3, lo que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de una entrada RSS manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1556F99E-1609-44FF-83F0-F43FBDE738A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"348C389E-ADFD-4D2C-AA54-220664EA2755"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48F3F19B-25A7-4E9E-9961-1F7C8DBC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"08AE0E10-87A4-4862-A873-A943F44A9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C88D773E-B6DE-4FD2-A911-0D13C6CA902C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C846A750-F26E-4F1F-85A3-F95BCC9F8A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2E139B6A-2F36-4EB5-BA1F-84D67C89E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F585001-37C9-42F5-8B13-56827E6AC785"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"47FD3F43-9ECA-4815-8BDC-B9DAC07E9400"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5F2D43-8B67-4D84-94AF-262F6D66F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"277403E7-3CD9-458C-9669-FB983FF94568"}]}]}],"references":[{"url":"http://cybozu.co.jp/products/dl/notice/detail/0023.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN52363223/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000035.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/46565","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30871","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.lac.co.jp/english/advisory/99_e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29981","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43426","source":"cve@mitre.org"},{"url":"http://cybozu.co.jp/products/dl/notice/detail/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN52363223/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.lac.co.jp/english/advisory/99_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6571","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via (1) new_images.php, (2) login.php, and unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en LinPHA anterior a v1.3.4 podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) new_images.php, (2) login.php y vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"B1B0AB37-187C-4144-996C-77B60349513F"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2EE653B-2731-4C3E-A7D0-3465276E879C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"108B066B-28C1-4888-B696-78F816A89B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9113509A-C884-46F4-BE97-C49382536FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5BD294BF-79FE-4940-B2D1-CB2506370EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"00E9B8B3-87E5-46A5-8242-04E620D54086"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F46907-9618-4F1C-8C68-E33EBC8E32B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0E05B25E-8507-4B40-AD6B-835019EF06EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C16546DA-1516-47C1-B603-34AF3DE3A9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"656D37D2-289D-49EB-AB25-D8522AB8A79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"059C1787-16E2-48BA-96A2-092F58E6F53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A16B7211-B340-4E4E-A016-74F7596A7B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F06B06C9-CE7F-45A1-946E-C3D3BF843FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B371E12C-9CB4-4E03-8B1E-F8A858AD5476"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F4ECA9FA-1BC3-4644-8A7D-F27DE382B519"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8C616987-BB74-4781-850E-22EA77D61D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"27827923-6084-46C8-A7E1-94B0B4D181BA"}]}]}],"references":[{"url":"http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50225","source":"cve@mitre.org"},{"url":"http://osvdb.org/50226","source":"cve@mitre.org"},{"url":"http://osvdb.org/50227","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29724","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6572","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search_results.php en ABK-Soft AbleDating v2.4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"keyword\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abledating:abledating:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A7BDDE99-2776-45F5-8A37-378AAC25A75D"}]}]}],"references":[{"url":"http://osvdb.org/45605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30366","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492478/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42597","source":"cve@mitre.org"},{"url":"http://osvdb.org/45605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492478/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6573","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services (SES) in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 (1) allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager (SPIM) in the web interface; and allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to (2) permissions for SPIM profiles in the web interface and (3) a crafted SIP request to the SIP server."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Avaya SIP Enablement Services (SES) en Avaya Avaya Communication Manager 3.x, 4.0, y 5.0 (1) permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados relacionados con perfiles en el SIP Personal Information Manager (SPIM) en la interfaz web; y permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de vectores no especificados relacionados a (2) permisos para perfiles SPIM en la interfaz web y (3) una petición SIP manipulada en el servidor SIP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"B13FEC26-15CC-4F82-8C24-BBD9C3FBA80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"84E2136B-6FE3-4548-A89D-444ED9393C22"}]}]}],"references":[{"url":"http://osvdb.org/44284","source":"cve@mitre.org"},{"url":"http://osvdb.org/44285","source":"cve@mitre.org"},{"url":"http://osvdb.org/44286","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-150.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-151.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28682","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=22","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=25","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=26","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41730","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41733","source":"cve@mitre.org"},{"url":"http://osvdb.org/44284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-150.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-151.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6574","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials."},{"lang":"es","value":"Vulnerabilidad no especificada en SIP Enablement Services (SES) en Avaya Communication Manager 3.1.x y 4.x permite a atacantes remotos conseguir privilegios y provocar una denegación de servicio a través de vectores desconocidos relacionados con reutilizar credenciales válidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5DE700B-B830-445B-AF08-4AD28EF1BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*","matchCriteriaId":"522FD345-91ED-4FE2-8069-028C3A2E3974"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*","matchCriteriaId":"3507CABD-74EE-4A53-9C09-AF38B3F218F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"}]}]}],"references":[{"url":"http://osvdb.org/44288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28687","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=24","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41734","source":"cve@mitre.org"},{"url":"http://osvdb.org/44288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6575","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service (resource consumption) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor SIP en SIP Enablement Services (SES) en Avaya Communication Manager 3.1.x y 4.x permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de recursos) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5DE700B-B830-445B-AF08-4AD28EF1BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*","matchCriteriaId":"522FD345-91ED-4FE2-8069-028C3A2E3974"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*","matchCriteriaId":"3507CABD-74EE-4A53-9C09-AF38B3F218F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"}]}]}],"references":[{"url":"http://osvdb.org/44287","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.voipshield.com/research-details.php?id=23","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49849","source":"cve@mitre.org"},{"url":"http://osvdb.org/44287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.voipshield.com/research-details.php?id=23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6576","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the \"session limitation technique\" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions."},{"lang":"es","value":"Vulnerabilidad no especificada en la \"sesión técnica limitada\" en el servicio FTP en Nortel Communications Server 1000 (CS1K) 4.50.x, cuando se está ejecutando en VGMC o señalizando nodos, permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos y actualizaciones fallidas) a través de vectores desconocidos que provocan consumos de todas las sesiones disponibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*","matchCriteriaId":"F4AE008D-E790-4D77-A541-841C4E0896A8"}]}]}],"references":[{"url":"http://osvdb.org/44380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29747","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019845","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=11","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41804","source":"cve@mitre.org"},{"url":"http://osvdb.org/44380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6577","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges."},{"lang":"es","value":"Nortel MG1000S, Signaling Server, y Call Server en el Communications Server 1000 (CS1K) 4.50.x contiene múltiples cuentas y contrseñas fijadas en código sin especificar, lo cual permite a atacantes remotos conseguir privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*","matchCriteriaId":"F4AE008D-E790-4D77-A541-841C4E0896A8"}]}]}],"references":[{"url":"http://osvdb.org/44374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29747","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019848","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=14","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41802","source":"cve@mitre.org"},{"url":"http://osvdb.org/44374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6578","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Nortel Communication Server 1000 4.50.x permiten a atacantes remotos ejecutar comandos de su elección y conseguir privilegios, obtener información sensible, o provocar una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*","matchCriteriaId":"F4AE008D-E790-4D77-A541-841C4E0896A8"}]}]}],"references":[{"url":"http://osvdb.org/44375","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29747","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019849","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=29","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41803","source":"cve@mitre.org"},{"url":"http://osvdb.org/44375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6579","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T22:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to \"web resources to phones and administrators.\""},{"lang":"es","value":"Nortel Communication Server 1000 4.50.x permite a atacantes remotos obtener estructuras de aplicación Web a través de vectores desconocidos relacionados con \"recursos web de teléfonos y administradores\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*","matchCriteriaId":"F4AE008D-E790-4D77-A541-841C4E0896A8"}]}]}],"references":[{"url":"http://osvdb.org/44377","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29747","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1019846","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=28","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41805","source":"cve@mitre.org"},{"url":"http://osvdb.org/44377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1019846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6580","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request to (1) makered.mdb and (2) makered97.mdb."},{"lang":"es","value":"La secuencia de comando Red_Reservations para ColdFusion guarda información sensible bajo la raíz de la web con insuficientes controles de acceso lo que permite a atacantes remotos descargar la base de datos a través de una petición directa a (1) makered.mdb y (2) makered97.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:funscripts:red_reservations:-:*:*:*:*:*:*:*","matchCriteriaId":"6E960765-109B-4FB6-9769-A69C786F2F0D"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49817","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7440","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6581","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter."},{"lang":"es","value":"login.php en PhpAddEdit v1.3 permite a atacantes remotos evitar la autenticación y conseguir acceso de administrador mediante la manipulación del parámetro de una cookie \"addedit\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpaddedit:phpaddedit:1.3:*:*:*:*:*:*:*","matchCriteriaId":"F9396513-CFC2-4460-8CE8-CBD01CAB9CB5"}]}]}],"references":[{"url":"http://osvdb.org/50674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpaddedit.com/page/new/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32779","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47264","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7418","source":"cve@mitre.org"},{"url":"http://osvdb.org/50674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phpaddedit.com/page/new/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6582","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en index.php en Miniweb v2.0 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"username\" en el momento del acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miniweb2:miniweb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"502AA6BE-9E42-4F65-94B5-1BCDABF1CC12"}]}]}],"references":[{"url":"http://secunia.com/advisories/30085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32819","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47364","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7586","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6583","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .SRT file."},{"lang":"es","value":"Desbordamiento de búfer en BS.player v2.27 build 959 permite a atacantes remotos producir una denegación de servicio (caída) y posiblemente ejecutar código de manera arbitraria a través de una cadena larga en un fichero .SRT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bsplayer:bs.player:2.27:*:*:*:*:*:*:*","matchCriteriaId":"102DE8A0-2F3B-4F61-BEA3-EA92324B4DA8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28811","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1243/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41841","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5455","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1243/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6584","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the url_upload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory."},{"lang":"es","value":"html/index.php en TorrentFlux v2.3 permite a usuarios remotos autenticados ejecutar código de forma arbitraria a través de una URL con un fichero que contiene una extensión ejecutable en el parámetro \"url_upload\", que es descargado por TorrentFlux y puede ser accedido a través de una petición directa en el directorio de usuario html/downloads/"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrentflux:torrentflux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FF1CC35-4592-4B8B-B023-D0C5DA7B1CF5"}]}]}],"references":[{"url":"http://osvdb.org/44645","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28846","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41925","source":"cve@mitre.org"},{"url":"http://osvdb.org/44645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6585","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en html/admin.php en TorrentFlux v2.3 permite a atacantes remotos secuestrar la autenticación de los administradores para realizar peticiones que añadan nuevas cuentas a través de la acción \"addUser\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrentflux:torrentflux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FF1CC35-4592-4B8B-B023-D0C5DA7B1CF5"}]}]}],"references":[{"url":"http://osvdb.org/44646","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29935","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28846","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41926","source":"cve@mitre.org"},{"url":"http://osvdb.org/44646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6586","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action."},{"lang":"es","value":"La vulnerabilidad de falsificación de solicitudes Cross-site  (CSRF) en gui / index.php en µTorrent (uTorrent) WebUI 0.315 permite a los atacantes remotos (1) secuestrar la autenticación de usuarios para solicitudes que obligan a descargar archivos torrent arbitrarios a través de la acción add-url y (2) secuestrar la autenticación de administradores para solicitudes que modifican la cuenta de administrador a través de la acción de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent_webui:0.315:*:*:*:*:*:*:*","matchCriteriaId":"9555C8C9-F4FD-4255-8617-CF0CEE6CA3D8"}]}]}],"references":[{"url":"http://osvdb.org/44647","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28847","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41926","source":"cve@mitre.org"},{"url":"http://osvdb.org/44647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6587","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en index.tmpl en Vuze (anteriormente conocido como Azureus HTML WebUI), probablemente la v0.7.6, permite a atacantes remotos secuestrar la autenticación de los usuarios en las peticiones que fuerzan la descarga de ficheros torrent de modo arbitrario a través del parámetro \"upurl\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vuze:vuze:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"C6DCD74D-380D-44EE-A407-8A2F9155C60C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28848","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491066/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6588","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aztech ADSL2/2+ 4-port router has a default \"isp\" account with a default \"isp\" password, which allows remote attackers to obtain access if this default is not changed."},{"lang":"es","value":"EL router Aztech ADSL2/2+ 4-port tiene una cuenta \"isp\" con una contraseña \"isp\" por defecto lo que permite a atacantes remotos conseguir acceso si los valores por defecto no se han cambiado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aztech:adsl2\\/2\\+4-port_router:-:*:*:*:*:*:*:*","matchCriteriaId":"E624A64E-7A2C-4209-A810-F09F22659FEB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2008-q2/0010.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2008-q2/0012.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50068","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2008-q2/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2008-q2/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6589","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy \"no database\" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en LightNEasy \"no database\" (también conocido como flat) v1.2.2, y posiblemente SQLite v1.2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de modo arbitrario a través del parámetro \"page\" en (1) index.php y (2) LightNEasy.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:*","matchCriteriaId":"F76F72FB-D3CE-4229-93B1-FE0A021972B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"65EA4824-622E-4A2E-969F-05AF2C5B1F8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44676","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/44677","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41888","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/44677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6590","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in LightNEasy \"no database\" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en  LightNEasy \"no database\" (también conocido como flat) v1.2.2, y posiblemente SQLite v1.2.2, permite a atacantes remotos leer fichero de modo arbitrario a través de ..(punto punto) en el parámetro \"page\" en (1) index.php y (2) LightNEasy.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:*","matchCriteriaId":"F76F72FB-D3CE-4229-93B1-FE0A021972B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"65EA4824-622E-4A2E-969F-05AF2C5B1F8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44672","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/44673","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/44673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6591","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LightNEasy \"no database\" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php."},{"lang":"es","value":"LightNEasy \"no database\" (también conocido flat) v1.2.2, y posiblemente SQLite v1.2.2, permite a atacantes remotos crear ficheros a su elección a través del parámetro \"page\" a (1) index.php y (2) LightNEasy.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:*","matchCriteriaId":"F76F72FB-D3CE-4229-93B1-FE0A021972B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:sqlite:*:*:*:*:*","matchCriteriaId":"AE0BB79F-7442-4C26-8268-33E259324DF3"}]}]}],"references":[{"url":"http://osvdb.org/44678","source":"cve@mitre.org"},{"url":"http://osvdb.org/44679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28839","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/44678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6592","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy \"no database\" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte)."},{"lang":"es","value":"thumbsup.php en Thumbs-Up v1.12, cuando se utiliza en LightNEasy \"no database\" (también conocido como flat) y SQLite v1.2.2 permite a atacantes remotos copiar, renombrar, y leer ficheros de modo arbitrario a través de secuencias de salto de directorio en el parámetro \"image\" con un parámetro modificado cache_dir conteniendo un %00 (byte codificado nulo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:*","matchCriteriaId":"F76F72FB-D3CE-4229-93B1-FE0A021972B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"65EA4824-622E-4A2E-969F-05AF2C5B1F8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28801","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49851","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5452","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6593","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en LightNEasy/lightneasy.php en LightNEasy SQLite v1.2.2 y anteriores permite a atacantes remotos inyectar código PHP de forma arbitraria en comments.dat a través del parámetro \"dlid\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:1.2.2:*:no_database:*:*:*:*:*","matchCriteriaId":"F76F72FB-D3CE-4229-93B1-FE0A021972B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sqlite:sqlite:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"65EA4824-622E-4A2E-969F-05AF2C5B1F8C"}]}]}],"references":[{"url":"http://secunia.com/advisories/29833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44675","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28801","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42009","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5452","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/491064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6594","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the cm_rdfexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión cm_rdfexport para TYPO3 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network-publishing:rdf_newsfeed_export:-:*:*:*:*:typo3:*:*","matchCriteriaId":"E1DC6F49-E431-4E9A-B1A2-30101FB9F9D7"}]}]}],"references":[{"url":"http://osvdb.org/45094","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080416-2/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49829","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/45094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080416-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6595","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión pmk_rssnewsexport para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:pmk_rssnewsexport_extension:*:*:*:*:*:*:*:*","matchCriteriaId":"AF6913A1-0C3C-4E1B-A17E-4D7866C5B10C"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080416-2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/45093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49830","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080416-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/45093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6596","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php in PHCDownload v1.1 permite atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"hash\". NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcredo:phcdownload:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E61F4ED-E256-4D9A-B8B7-F7A879B20D6A"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28922.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28258","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28922","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28922.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6597","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en upload/install/index.php en PHCDownload v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"step\". NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcredo:phcdownload:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E61F4ED-E256-4D9A-B8B7-F7A879B20D6A"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28922.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28922","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28922.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6598","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to \"bri restart logic.\""},{"lang":"es","value":"Multiples condiciones de carrera en WANPIPE anteriores a v3.3.6 tiene un impacto desconocido y vectores de ataque relacionados con \"bri restart logic\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.0beta:*:*:*:*:*:*:*","matchCriteriaId":"BBD6EF62-EFDA-43BC-AFBD-12F21779A8C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.1beta:*:*:*:*:*:*:*","matchCriteriaId":"E23B36F2-2023-411B-93B1-5E9AFEA14F02"},{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.2.1beta:*:*:*:*:*:*:*","matchCriteriaId":"228C385E-14B6-4998-AA13-E66650F11EA9"},{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.2beta:*:*:*:*:*:*:*","matchCriteriaId":"CC537A77-AD98-4B7F-AA30-575072D51170"},{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.3beta:*:*:*:*:*:*:*","matchCriteriaId":"19340EA9-16DE-49C5-8042-9CEC5C14F328"},{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.4beta:*:*:*:*:*:*:*","matchCriteriaId":"615A2299-1DD7-4AAA-8DDF-021CC0B769E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:sangoma:wanpipe:3.3.5beta:*:*:*:*:*:*:*","matchCriteriaId":"15B3E0EA-1FF5-4B32-8BDF-C0A4A07FAA01"}]}]}],"references":[{"url":"http://freshmeat.net/projects/wanpipe/releases/276026","source":"cve@mitre.org"},{"url":"http://osvdb.org/48840","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49828","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/wanpipe/releases/276026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6599","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cookiecheck.php in CookieCheck 1.0 stores tmp/cc_sessions under the web root with insufficient access control, which allows remote attackers to obtain session data via a direct request related to the \"default session save path.\""},{"lang":"es","value":"cookiecheck.php en CookieCheck v1.0 almacena tmp/cc_sessions majo la raíz web con insuficientes controles de acceso, lo que permitiría a atacantes remotos obtener datos de la sesión a través de una petición directa relacionada con \"ruta de guardado por defecto\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jath_pala:cookiecheck:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8D89BE59-F745-4B61-9098-AF3B74682518"}]}]}],"references":[{"url":"http://code.google.com/p/cookiecheck/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://code.google.com/p/cookiecheck/source/browse/patches/cookiecheck-1.0-security-fix-1.patch?spec=svn11&r=11","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://osvdb.org/48865","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49827","source":"cve@mitre.org"},{"url":"http://code.google.com/p/cookiecheck/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://code.google.com/p/cookiecheck/source/browse/patches/cookiecheck-1.0-security-fix-1.patch?spec=svn11&r=11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://osvdb.org/48865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6600","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search feature in XMLPortal 3.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica de búsqueda en XMLPortal v3.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"query\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlportal:xmlportal:3.0:*:*:*:*:*:*:*","matchCriteriaId":"339DF92C-12A5-46EE-A7C4-8A088C331784"}]}]}],"references":[{"url":"http://osvdb.org/44289","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/44/xmlportal-xss.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/44289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/44/xmlportal-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6601","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address of users via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en Epona v1.5rc3 permite a atacantes remotos obtener la IP real de los usuarios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epona:epona:1.5:rc3:*:*:*:*:*:*","matchCriteriaId":"5B5C3057-9472-4582-AB42-5F2BBD55BA9F"}]}]}],"references":[{"url":"http://freshmeat.net/projects/epona/releases/276088","source":"cve@mitre.org"},{"url":"http://osvdb.org/48866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49826","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/epona/releases/276088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6602","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Download Center Lite before 2.1 has unknown impact and attack vectors related to \"A minor security fix.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en Download Center Lite anteriores a v2.1 con un impacto desconocido y vectores de ataque relacionado con un \"arreglo de seguridad menor\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stadtaus:download_center_lite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"BA65B993-6B24-4865-B850-CB52B05FD6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stadtaus:download_center_lite:1.6:*:*:*:*:*:*:*","matchCriteriaId":"71241F4D-C043-4E20-A454-51118AFB5B42"}]}]}],"references":[{"url":"http://freshmeat.net/projects/download-center-lite/releases/275651","source":"cve@mitre.org"},{"url":"http://osvdb.org/48834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34653","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49780","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/download-center-lite/releases/275651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6603","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937."},{"lang":"es","value":"MoinMoin v1.6.2 y v1.7 no maneja adecuadamente los puntos de cumplimiento de la ACL cuando acl_hierarchic esta fijado como Verdadero, lo que permitiría a atacantes remotos evitar las restricciones de acceso previstas, una vulnerabilidad diferente que CVE-2008-1937."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmo:moinmoin:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"76F8DDF8-D923-40FE-9D47-F676A04BD908"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmo:moinmoin:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F2863EC4-FAD5-4456-983F-F3676E887CF7"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://hg.moinmo.in/moin/1.7/rev/88356b3f849a","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter","source":"cve@mitre.org"},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/48875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34655","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41911","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://hg.moinmo.in/moin/1.7/rev/88356b3f849a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/48875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6604","sourceIdentifier":"cve@mitre.org","published":"2009-04-04T22:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagina parameter, a different vulnerability than CVE-2007-5390."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en PicoFlat CMS v0.5.9 permite a atacantes remotos incluir y ejecutar ficheros locales de modo arbitrario a través de .. (punto punto) en el parámetro \"pagina\", una vulnerabilidad diferente de CVE-2007-5390."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:picoflat:picoflat_cms:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D7698EBB-749E-4903-AA3C-293A82C619C4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5690","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6605","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that cause a denial of service (network outage) via a page parameter with a % (percent) character followed by a non-alphanumeric character."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la secuencia de comandos (script) xslt en la interfaz de gestión basada en web en 2wire 1701HG, 1800HW, 2071HG, y 2700HG con software empotrado (firmware) 3.17.5, 3.7.1, 4.25.19, o 5.29.51 permite a atacantes remotos secuestrar la conectividad de la intranet de usuarios de su elección para peticiones que provocan una denegación de servicio (corte de red) a través del parámetro \"page\" con un carácter % (por ciento) permitido por un carácter no alfanumérico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1701hg:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A9E57A4E-6027-4746-B448-EBE314204195"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1701hg:3.17.5:*:*:*:*:*:*:*","matchCriteriaId":"0B41E413-BFE7-489A-AEEF-EE4E2A1C3400"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1701hg:4.25.19:*:*:*:*:*:*:*","matchCriteriaId":"A5D67397-9203-4F77-9BEB-99488BD04986"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1701hg:5.29.51:*:*:*:*:*:*:*","matchCriteriaId":"AD8AE2D3-B32F-488E-BF2F-C1FF48888EA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1800hw:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"B6E391DE-3C16-4184-9539-727E4514495F"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1800hw:3.17.5:*:*:*:*:*:*:*","matchCriteriaId":"AB3507B7-2244-4474-A778-F2DE99892FF2"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1800hw:4.25.19:*:*:*:*:*:*:*","matchCriteriaId":"608EDD3A-D9BD-4A52-B574-022D557D19BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1800hw:5.29.51:*:*:*:*:*:*:*","matchCriteriaId":"0559DC0E-3AC8-4BF4-BE42-18BBAB0A01DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2071hg:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8CA2383F-F4ED-4E15-BCF3-147FFB1AB9E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2071hg:3.17.5:*:*:*:*:*:*:*","matchCriteriaId":"D76D05D1-7C09-44B0-9CF1-2AF4481C9B08"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2071hg:4.25.19:*:*:*:*:*:*:*","matchCriteriaId":"7F0131C7-4B6F-4E70-9302-8086C68608C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2071hg:5.29.51:*:*:*:*:*:*:*","matchCriteriaId":"CBBF27FB-74F1-4BD4-8E47-86DB966C46EB"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2700hg:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A891B7D4-1949-474C-91AD-CBC606C0C742"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2700hg:3.17.5:*:*:*:*:*:*:*","matchCriteriaId":"E781C116-7C24-4B47-A552-2153E2E3636D"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2700hg:4.25.19:*:*:*:*:*:*:*","matchCriteriaId":"D3BE0B7E-4DFE-42BC-BA1B-0CA7931288A6"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2700hg:5.29.51:*:*:*:*:*:*:*","matchCriteriaId":"9950F2F2-3808-4181-B942-2166EBE3C6F6"}]}]}],"references":[{"url":"http://osvdb.org/49835","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32211","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46537","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7060","source":"cve@mitre.org"},{"url":"http://osvdb.org/49835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6606","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view.php in MatPo Link v1.2 Beta. Permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matpo:matpo_link:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"67EA9A3E-96B1-42B4-B5ED-3FB386979C27"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32076","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6967","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6971","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6607","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary web script or HTML via the thema parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en view.php en MatPo Link v1.2 Beta permite a atacantes remotos inyectar web script o HTML a través del parámetro \"thema\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matpo:matpo_link:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"67EA9A3E-96B1-42B4-B5ED-3FB386979C27"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32082","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6971","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6608","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter (aka user field) to admin/index.php, (2) the user_pass parameter (aka pass field) to admin/index.php, or (3) the id parameter to calendar_details.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en DevelopItEasy Events Calendar v1.2 que permiten a usuarios remotos ejecutar comandos SQL de su elección a través de (1) el parámetro user_name (también llamado user field) en admin/index.php, (2) el parámetro user_pass (también llamado pass field) en admin/index.php o (3) el parámetro id en calendar_details.php. NOTA: algunos de estos detalles han sido obtenidos de información procedente de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:developiteasy:events_calendar:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF047413-CC31-49FA-BC02-060888C78220"}]}]}],"references":[{"url":"http://osvdb.org/49755","source":"cve@mitre.org"},{"url":"http://osvdb.org/49756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32596","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46395","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7013","source":"cve@mitre.org"},{"url":"http://osvdb.org/49755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6609","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en phpcksec.php de Stefan Ott phpcksec v.02 que permite a usuarios remotos inyectar código de script web o HTML de su elección a través del parámetro \"path\" (ruta)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ott:phpcksec:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0C2C73-D41C-4B8D-86A1-5503820D4962"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32890","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47425","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6610","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbitrary directories and read arbitrary files via a full pathname in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en phpcksec.php en Stefan Ott phpcksec v0.2.0 permite a atacantes remotos listar directorios y leer ficheros de su elección a través de una ruta completa en el parámetro \"file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ott:phpcksec:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0C2C73-D41C-4B8D-86A1-5503820D4962"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47426","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6611","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  index.php en Minimal ABlog v0.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abweb:minimal_ablog:0.4:*:*:*:*:*:*:*","matchCriteriaId":"20DC2CBA-194F-4ABF-97E6-AC7E175B23BB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50349","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46963","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6612","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en admin/uploader.php en Minimal ABlog v0.4 permite a atacantes remotos ejecutar código de su elección a través de la subida de un fichero con una extensión ejecutable, entonces accede a él a través de una petición directa al fichero en img/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abweb:minimal-ablog:0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3EFE4FC-31FF-4E5E-96F2-3A791C6A45C4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46964","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6613","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request."},{"lang":"es","value":"uploader.php en minimal-ablog v0.4 no restringe adecuadamente el acceso, lo cual permite a atacantes remotos conseguir privilegios administrativos a través de peticiones directas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abweb:minimal-ablog:0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3EFE4FC-31FF-4E5E-96F2-3A791C6A45C4"}]}]}],"references":[{"url":"http://secunia.com/advisories/32886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50350","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46965","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6614","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) allow remote attackers to execute arbitrary SQL commands via (1) the administrators_username parameter (aka the Username field) or (2) the administrators_pass parameter (aka the Password field)."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en microcms-admin-login.php en Implied By Design (IBD) Micro CMS v3.5 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) Username y (2) Password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impliedbydesign:ibd_micro_cms:3.5:*:*:*:*:*:*:*","matchCriteriaId":"98894097-537C-475D-8242-3C348FC7A616"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0344.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51298","source":"cve@mitre.org"},{"url":"http://wired-security.net/texts/advisories/IBD_Micro_CMS_3.5_SQL_Injection_Login_Bypass_Advisory.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29159","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29159/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53272","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9699","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wired-security.net/texts/advisories/IBD_Micro_CMS_3.5_SQL_Injection_Login_Bypass_Advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29159/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6615","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advanced_search_result page.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Zen Software Zen Cart 2008 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"keyword\" en la página advanced_search_result.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:2008:*:*:*:*:*:*:*","matchCriteriaId":"969D134E-DED8-43F8-B582-F95BE4A9C81A"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29020.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29020","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42161","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6616","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Zen Software Zen Cart 2008 permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"keyword\" en la página advanced_search_result.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:2008:*:*:*:*:*:*:*","matchCriteriaId":"969D134E-DED8-43F8-B582-F95BE4A9C81A"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29020.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29020","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42162","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6617","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en adm/visual/upload.php en SiteXS CMS v0.1.1 permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con una extensión ejecutable, entonces accede a él a través de una petición directa al fichero en images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitexs_cms:sitexs_cms:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8FD25F9-269E-4B07-9418-9ADE3495674A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491578/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42250","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5726","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491578/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6618","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacher_id parameter in (1) class/HomepageMain.php and (2) class/HomepageTop.php, and (3) the message_id parameter in class/MessageReply.php."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en ClassSystem v2.3 que permiten a usuarios remotos ejecutar comandos SQL de su elección  a través del parámetro teacher_id de (1) class/HomepageMain.php y (2) class/HomepageTop.php, y (3) el parámetro messages_id de class/MessageReply.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netlab:classsystem:2.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D4DD6-455B-44C6-8EB7-D532BDD78426"}]}]}],"references":[{"url":"http://osvdb.org/45639","source":"cve@mitre.org"},{"url":"http://osvdb.org/45640","source":"cve@mitre.org"},{"url":"http://osvdb.org/45641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.chroot.org/exploits/chroot_uu_005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42650","source":"cve@mitre.org"},{"url":"http://osvdb.org/45639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.chroot.org/exploits/chroot_uu_005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6619","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en class/ApplyDB.php en ClassSystem v2.3 permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con  una extensión ejecutable, entonces se accede a él a través de una petición directa al fichero en class/UploadHomepage/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netlab:classsystem:2.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D4DD6-455B-44C6-8EB7-D532BDD78426"}]}]}],"references":[{"url":"http://secunia.com/advisories/30365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.chroot.org/exploits/chroot_uu_005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492583/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.chroot.org/exploits/chroot_uu_005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/492583/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6620","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php in GraFX miniCWB 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errcontext, (2) _GET, (3) _POST, (4) _SESSION, (5) _SERVER, and (6) fckphp_config[Debug_SERVER] parameters."},{"lang":"es","value":"Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php de GraFX miniCWB v2.1.1 y anteriores. Permite a usuarios remotos inyectar código de script web o HTML a través de los parámetros (1) errcontext, (2) _GET, (3) _POST, (4) _SESSION, (5) _SERVER y (6) fckphp_config[Debug_SERVER]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grafxsoftware:minicwb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"9CBD5FDB-BEF5-476B-8BBA-246B23695E8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=121181445919047&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/45647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29368","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42630","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=121181445919047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/45647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6621","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors in DPX images.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad no especificada en la herramienta de procesamiento de imágenes GraphicsMagick v1.2.3 que permite a usuarios remotos causar una denegación de servicio (caída de la aplicación) a través de vectores de ataque no especificados en las imagenes DPX. NOTA: algunos de estos detalles han sido obtenidos de información procedente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*","matchCriteriaId":"05EE52FC-600E-4A8A-BB0D-96DD200C8DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E3834A3-8A7E-4914-A20C-EE694150D044"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E54C88D-035D-43F7-8D26-F07C9DC24D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEDB13AA-2AD3-4FFE-9851-53BB0531BC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"071499F5-8FB0-4EE9-B816-6514AF6C17AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F96A991C-67A7-4C36-99C4-846BD2175F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8AC0F79E-4DD6-4EF9-82E1-68DC8EB7EF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BD7E2792-B4BC-4C71-990D-0B7462919568"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10F2FD22-4058-45D6-8352-0AA6382746C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4F41DBD-6F06-40DC-A722-EC51B9ACC07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"96CA70E0-2533-417A-B8C4-F687BF256691"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF103AE-6F15-4F2D-A375-F2AF91171EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65929D5C-31B1-4A70-8E9C-AC6749332480"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC45DB14-ABB2-4116-930D-349A81CDB982"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0573F148-0204-4F6B-A7B7-12DDF61C7383"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"7D259740-FE5A-4D28-B554-FD176F9BD1FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"489040F9-1992-4030-9AFC-9855CFB8C1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A9942F4B-6608-4828-988C-2F76EB73CC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"12D4C9D5-2A4F-4263-943C-1F46E0BB802E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FAA39999-2648-4EBB-A9CD-15FBE9900E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"4AD2742D-41F6-43F4-B90B-B75D54E08326"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2755909D-D83F-4810-824D-7514EE501AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"5763F6B5-C4FB-4792-B5D8-058B314D177E"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2:*:*:*:*:*:*:*","matchCriteriaId":"634E509D-7E46-43EE-BE38-7C3A7690761D"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"01E41E1B-BE16-4581-A503-CEC993D11A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1B3C34D3-56B0-4539-8361-4EEBBD878777"},{"vulnerable":true,"criteria":"cpe:2.3:a:graphicsmagick:graphicsmagick:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"C656F3BD-3FB8-484C-8853-853C47BDFCE1"}]}]}],"references":[{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/dpx.c","source":"cve@mitre.org"},{"url":"http://osvdb.org/46258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/dpx.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=604837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6622","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en choosecard.php de WEBBDOMAIN Post Card (Web Postcards) v1.02 y v1.01 y anteriores. Permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomian:post_card:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"B26A0B66-7642-4CD9-A04D-9C19C2B43608"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomian:post_card:1.01:*:*:*:*:*:*:*","matchCriteriaId":"97F048B8-865C-4A01-A0E3-18C394A4C716"}]}]}],"references":[{"url":"http://osvdb.org/49823","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32494","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32097","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6977","source":"cve@mitre.org"},{"url":"http://osvdb.org/49823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6623","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en getin.php en WEBBDOMAIN Post Card (tambien conocido como Web Postcards) v1.02 y anteriores permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a traves del parametro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:post_card:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"47523CDB-3EAD-47CC-8643-26DAE4769A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:post_card:1.01:*:*:*:*:*:*:*","matchCriteriaId":"08B58CFA-0CE5-4A5A-A08B-7CBFEDFAEF79"}]}]}],"references":[{"url":"http://osvdb.org/49824","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32494","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46359","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6989","source":"cve@mitre.org"},{"url":"http://osvdb.org/49824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6624","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en getin.php en WEBBDOMAIN Petition v1.02, v2.0, y v3.0 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a traves del parametro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:petition:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A3F8B66E-9EEB-4A39-AA23-C1E02AE8AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:petition:1.02:*:*:*:*:*:*:*","matchCriteriaId":"0FBB98B4-B1C7-4013-8D77-71DD1A6C1D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:petition:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9B81BD7E-03B3-4D1C-A8D0-7AA0006B4D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:petition:3.0:*:*:*:*:*:*:*","matchCriteriaId":"50610FFE-DEF9-4E93-9DD0-9028BEA4D498"}]}]}],"references":[{"url":"http://osvdb.org/49759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46362","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6983","source":"cve@mitre.org"},{"url":"http://osvdb.org/49759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6625","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en getin.php en WEBBDOMAIN Polls (Poll) v1.0 y v1.01 que permite a usuarios remotos ejecutar comandos SQL de su elección  a través del parámetro \"username\" (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:polls:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2DA5993E-16F7-40D5-933A-0CD412CC908D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:polls:1.01:*:*:*:*:*:*:*","matchCriteriaId":"B3C2576A-689F-4D5D-B276-A2479BFD4428"}]}]}],"references":[{"url":"http://osvdb.org/49760","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46360","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6984","source":"cve@mitre.org"},{"url":"http://osvdb.org/49760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6626","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en getin.php en WEBBDOMAIN Quiz v1.02 y anteriores permite a atacantes remotos ejecutar comandos SQL a traves del parametro \"username\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:quiz:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"BD56793E-5893-45D1-98CB-9E126B710B8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:quiz:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B927E9F8-A68B-43DF-BCAB-9AABAB566457"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:quiz:1.01:*:*:*:*:*:*:*","matchCriteriaId":"17A8C361-36FF-4AEF-AF5F-F32E87EC1D68"}]}]}],"references":[{"url":"http://osvdb.org/49761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46358","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6985","source":"cve@mitre.org"},{"url":"http://osvdb.org/49761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6627","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en getin.php en WEBBDOMAIN WebShop v1.2, v1.1, v1.02 y anteriores, permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:webshop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"DD476171-1C12-4706-810E-B947885DF0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:webshop:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9A8078CF-FBC7-4DAA-B9A4-0F1A0016BE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:webshop:1.02:*:*:*:*:*:*:*","matchCriteriaId":"592A052D-483D-4B1C-B89D-291D1E2B3E8A"}]}]}],"references":[{"url":"http://osvdb.org/49720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46357","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6986","source":"cve@mitre.org"},{"url":"http://osvdb.org/49720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6628","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.327","lastModified":"2023-11-07T02:03:23.997","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-6268.  Reason: This candidate is a duplicate of CVE-2008-6268.  Notes: All CVE users should reference CVE-2008-6268 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6629","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T21:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en detail.php en WEBBDOMAIN Multi Languages WebShop Online v1.02 que permite a usuarios remotos inyectar código de script web o HTML de su elección a través del parámetros \"name\" (nombre)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webbdomain:webshop_online:1.02:*:*:*:*:*:*:*","matchCriteriaId":"CD861C02-E036-42FB-B5B6-041399701EC3"}]}]}],"references":[{"url":"http://osvdb.org/49719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6974","source":"cve@mitre.org"},{"url":"http://osvdb.org/49719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6630","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en la extensión wt_gallery v2.5.0 y anteriores para TYPO3 permite a atacantes remotos leer ficheros de imagen de forma arbitraria y determinar la estructura del directorio a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:wt_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0","matchCriteriaId":"3810266B-2D74-4BFA-A791-319980116B8E"}]}]}],"references":[{"url":"http://osvdb.org/45050","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29182","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42364","source":"cve@mitre.org"},{"url":"http://osvdb.org/45050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6631","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than CVE-2008-0679."},{"lang":"es","value":"Múltiples vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de BlogPHP v2.0, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML a través de (1) el parámetro user en una acción sendmessage -enviar mensaje- y (2) el parámetro username -nombre de usuario- cuando se registra a un nuevo usuario. Se trata de vectores diferentes de CVE-2008-0679."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogphp:blogphp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B791B20C-7AE9-41C2-9C90-1E3A01EA9998"}]}]}],"references":[{"url":"http://osvdb.org/45038","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/soapbox/blogphp.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29133","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42369","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42370","source":"cve@mitre.org"},{"url":"http://osvdb.org/45038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/soapbox/blogphp.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6632","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT'])."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en func/login.php en MercuryBoard v1.1.5 y anteriores que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de la cabecera HTTP User-Agent ($_SERVER['HTTP_USER_AGENT'])."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mercuryboard:mercuryboard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"52EA61E4-5CA7-42DB-A1B1-FE4B780F814A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mercuryboard:mercuryboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CAAB645C-2D52-4710-952B-0A4ED0008977"},{"vulnerable":true,"criteria":"cpe:2.3:a:mercuryboard:mercuryboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"52E42E9E-1C19-4ABE-99DA-A88B4D5C533D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mercuryboard:mercuryboard:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2473C711-A505-43C7-81B4-48EE7D32395C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mercuryboard:mercuryboard:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"70279A6A-640B-4831-AB5A-D9C485A32EC6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29280","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42519","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5653","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6633","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resaopen.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en RoomPHPlanning v1.5 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"idresa\" a resaopen.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beaussier:roomphplanning:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F11BBEFF-68A4-4A15-85F4-DC4F044DD722"}]}]}],"references":[{"url":"http://osvdb.org/45604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29354","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42626","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5670","source":"cve@mitre.org"},{"url":"http://osvdb.org/45604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6634","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en RoomPHPlanning v1.5 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro idroom para weekview.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beaussier:roomphplanning:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F11BBEFF-68A4-4A15-85F4-DC4F044DD722"}]}]}],"references":[{"url":"http://secunia.com/advisories/30376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42626","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6635","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir_inc parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo skins/default.php en Geody Labs Dagger - The Cutting Edge versión r12feb2008, cuando register_globals está habilitado, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro dir_inc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geody:dagger:r12feb2008:*:*:*:*:*:*:*","matchCriteriaId":"726AA792-4100-4D3B-918D-E95A56FEECB8"}]}]}],"references":[{"url":"http://secunia.com/advisories/30771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=79973&release_id=668019","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29906","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=79973&release_id=668019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6636","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir_edge_skins parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivos PHP en el archivo skins/default.php en Geody Labs Dagger - The Cutting Edge versión r12feb2008, cuando register_globals está habilitado, permite a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro dir_edge_skins. NOTA: se desconoce la procedencia de esta información; los datos fueron obtenidos únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geody:dagger:*:*:*:*:*:*:*:*","matchCriteriaId":"6B923CFF-B651-429C-90C8-F72E3A1494FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/30771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=79973&release_id=668019","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=79973&release_id=668019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6637","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en forgotPW.php de Library Video Company SAFARI Montage v3.1.x, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) school y (2) email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libraryvideocompany:safari_montage:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.3","matchCriteriaId":"4B5BE280-34BA-40BA-8670-7A3542DC8B8F"}]}]}],"references":[{"url":"http://osvdb.org/45646","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29343","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42598","source":"cve@mitre.org"},{"url":"http://osvdb.org/45646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6638","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control Versalsoft HTTP Image Uploader ActiveX (UUploaderSvrD.dll v6.0.0.35), permiten a atacantes remotos eliminar ficheros de su elección a través del método RemoveFileOrDir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:versalsoft:http_file_upload_activex_control:6.0.0.35:*:*:*:*:*:*:*","matchCriteriaId":"F8301775-3BFD-49EE-9D51-04D151775CB6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28301","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41258","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5272","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5569","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6639","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the update_user_pwd action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados - CSRF - en el archivo admin.php en AjaXplorer v2.3.3 y v2.3.4 permitir a los atacantes remotos secuestrar la autenticación de administradores para peticiones que modifiquen las contraseñas a través de la acción update_user_pwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajaxplorer:ajaxplorer:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4C9B8E9F-8B96-4772-A85B-EA9627A936C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ajaxplorer:ajaxplorer:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D05FAAAF-FFE2-43FC-8540-9A6FD442FEA3"}]}]}],"references":[{"url":"http://gmda.altervista.org/AjaXplorer-2.3.3/cka.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/45656","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42694","source":"cve@mitre.org"},{"url":"http://gmda.altervista.org/AjaXplorer-2.3.3/cka.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/45656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6640","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2) profil.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidad de inyección SQL en BatmanPorTaL permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id de (1) uyeadmin.asp y (2) profil.asp. NOTA: información de origen desconocido; los detalles de han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:batmanportal:*:*:*:*:*:*:*:*","matchCriteriaId":"FC68E662-051F-4C6B-9508-095D4D7F0334"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29057/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42231","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29057/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6641","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the (4) username or (5) password fields to yonet/default.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Shader TV (Beta) permite a administrador remotos autenticados ejecutar comandos SQL de forma arbitraria a través del parámetro \"sid\" a (1) kanal.asp, (2) google.asp, y (3) hakk.asp en yonet/; y permite a atacantes remotos ejecutar comandos SQL a través de los campos (4) \"username\" y (5) \"password\" a yonet/default.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:shader_tv:*:beta:*:*:*:*:*:*","matchCriteriaId":"85B11336-C802-4028-A0CB-444758FA4DCE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29091","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42261","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5564","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6642","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidade de inyección SQL en view.php en DotContent FluentCMS v4.x permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"sid\". NOTA: Algunos detalles se obtuvieron a través de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotcontent:fluentcms:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7CC617AE-6895-434A-95AD-D49461B8476B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotcontent:fluentcms:4.1:*:*:*:*:*:*:*","matchCriteriaId":"64FFCA23-7746-494B-98C3-51355FFB3AE8"}]}]}],"references":[{"url":"http://osvdb.org/44831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29970","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28965","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42048","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5509","source":"cve@mitre.org"},{"url":"http://osvdb.org/44831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6643","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTION parameter in a direct request to admin.php."},{"lang":"es","value":"LokiCMS v0.3.4 y posiblemente versiones anteriores no restringe propiamente acceso a funciones administrativas, lo que permite a los atacantes remotos evitar restricciones establecidas y modificar los parámetros de configuración a través del parámetro LokiACTION en una petición directa a admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokicms:lokicms:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"64C57EEB-4C90-494C-AD38-46CF0353DD98"}]}]}],"references":[{"url":"http://osvdb.org/45866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492877/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42766","source":"cve@mitre.org"},{"url":"http://osvdb.org/45866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492877/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6644","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Default.aspx en DotNetNuke v4.8.3 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a traves de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.3","matchCriteriaId":"E31C3AB7-C4B4-4F81-9385-4932B49C51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*","matchCriteriaId":"FE94AE61-4CA4-48B5-BB08-D808CF750CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"72A73BE5-6668-484E-8E7C-16E839E98882"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"}]}]}],"references":[{"url":"http://secunia.com/advisories/30617","source":"cve@mitre.org"},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno19/tabid/1166/Default.aspx","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492793/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29437","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42752","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno19/tabid/1166/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492793/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6645","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header ($_SERVER ['HTTP_USER_AGENT']), which is not properly handled when displaying log files."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Opencosmo VisualSentinel v0.7, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de una cabecera User-Agent ($_SERVER ['HTTP_USER_AGENT']), que no es manejada adecuadamente cuando se muestran los ficheros de log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opencosmo:visualsentinel:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B99C6DFA-492C-4D78-A9D6-AD098B3805A3"}]}]}],"references":[{"url":"http://osvdb.org/51439","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492876/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/492879/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/51439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492876/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/492879/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6646","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en el archivo index.php en CoronaMatrix phpAddressBook v2.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coronamatrix:phpaddressbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1DE3AB56-6A99-4347-BFC8-03AA45BE0E14"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/491525/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42140","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/491525/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6647","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gallery.php en Ktools PhotoStore v3.4.3 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"gid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F3649B9F-BCD9-447B-B59C-999E970F6E5A"}]}]}],"references":[{"url":"http://osvdb.org/45140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29132","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42318","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5580","source":"cve@mitre.org"},{"url":"http://osvdb.org/45140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6648","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php.  NOTE: this might be the same issue as CVE-2008-6647."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en crumbs.php de Ktools PhotoStore v3.4.3 y v3.5.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gid de about_us.php. NOTA: puede que se trate de la misma vulnerabilidad que CVE-2008-6647."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F3649B9F-BCD9-447B-B59C-999E970F6E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5D4B9CC6-192B-473E-B509-D40FF20017ED"}]}]}],"references":[{"url":"http://osvdb.org/45141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29136","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42317","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5582","source":"cve@mitre.org"},{"url":"http://osvdb.org/45141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6649","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en manager/image_details_editor.php en Ktools PhotoStore v2.5, v2.9.8, v3.1.0, y otras versiones hasta la v3.5.2 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:2.5:*:*:*:*:*:*:*","matchCriteriaId":"92AF0430-3049-48F0-B640-F085054F772B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:2.9.8:*:*:*:*:*:*:*","matchCriteriaId":"A0889C33-935A-4178-838C-41021092E875"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4097AB6A-8C26-4FDD-997B-35CAF87432B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"91C049C6-2A6A-4AEE-968C-405A8D8E544B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D3BBC207-976A-4CFD-9C01-347C3660A1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"234E39E4-6AA2-47A4-966D-D426968AD8F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.4:*:*:*:*:*:*:*","matchCriteriaId":"6C845416-5EAD-403B-88C8-09DAF7499DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"76BEDE83-FB93-4AEF-BFF6-1AE49C2CB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F3649B9F-BCD9-447B-B59C-999E970F6E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5D5CCBA-B248-4885-AB4C-2B49F458A943"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"586F6BAE-F0AF-4CE3-B599-07D5BC0242D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:photostore:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5D4B9CC6-192B-473E-B509-D40FF20017ED"}]}]}],"references":[{"url":"http://osvdb.org/45142","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30194","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29136","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42408","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5582","source":"cve@mitre.org"},{"url":"http://osvdb.org/45142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6650","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:17.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a different vulnerability than CVE-2008-4628."},{"lang":"es","value":"del.php de miniBloggie v1.0, permite a atacantes remotos eliminar las entradas que deseen a través de una solicitud directa que un parámetro post_id modificado. Vulnerabilidad diferente de CVE-2008-4628."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebland:minibloggie:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF7F35B5-15BD-432F-B17B-2A93AD95B0E6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42300","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5568","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6651","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:18.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en edithistory.php en OxYProject OxYBox v0.85 permite a atacantes remotos inyectar código PHP de forma arbitraria en oxyhistory.php a través del parámetro \"oxymsg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oxyproject:oxybox:0.85:*:*:*:*:*:*:*","matchCriteriaId":"A2CC1526-BC3B-4BF9-A9D5-3D6837DDE1A3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42110","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6652","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:18.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en asd.php de OneCMS v2.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sitename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insanevisions:onecms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"89EE97C6-1088-45BD-BA99-35E421407B10"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29102","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42255","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5557","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6653","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:18.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en webhosting.php en el modulo Webhosting (com_webhosting) anteriores a v1.1 RC7 para Joomla! y Mambo permite a atacantes remotos ejecutar comando SQL de forma arbitraria a través del parámetro \"catid\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:*:rc6:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"A8B45E80-5854-4DC7-9F27-224A21C16BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:0.5:beta:*:*:*:*:*:*","matchCriteriaId":"3B64E468-BE99-4CCB-9E44-4F046C6CB9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:0.5.3:beta:*:*:*:*:*:*","matchCriteriaId":"5866A02F-5EC3-449E-BBFF-9173BDA57E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:0.5.4:beta:*:*:*:*:*:*","matchCriteriaId":"378344FC-FEF0-4B56-8479-3E3180642865"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:0.5.5:beta:*:*:*:*:*:*","matchCriteriaId":"040435EE-9424-4F92-926F-6F925C6C35E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:0.5.6:beta:*:*:*:*:*:*","matchCriteriaId":"59073E87-8754-4C6E-9154-EB9FB97271A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.0:stable:*:*:*:*:*:*","matchCriteriaId":"11A950D1-499E-4367-B46C-69FD99356D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.0.1:stable:*:*:*:*:*:*","matchCriteriaId":"6AE00A66-6849-4B52-A4BE-FB6D97385946"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"33E5417B-2168-4D35-9F25-15F8F2766A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"4FD23F63-6578-4CDC-8383-90C889D91878"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D278D0CA-5253-476E-B31D-EC99DB4763B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"08002280-692A-4093-A12C-725F63A25B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"E59735D5-7165-4144-BD8F-26508307312A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"831EBF2C-7E7B-488A-969C-1B9F3D1F41D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wh-com:com_webhosting:1.1:rc5:*:*:*:*:*:*","matchCriteriaId":"925BFD93-4F7C-477A-920F-63D8A26D10FC"}]}]}],"references":[{"url":"http://forum.wh-com.de/index.php?topic=497.0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50423","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29000","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42124","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5527","source":"cve@mitre.org"},{"url":"http://forum.wh-com.de/index.php?topic=497.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/50423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6654","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:18.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search_results.php in InfoBiz Server allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search_results.php en InfoBiz Server permite a atacantes remotos inyectar secuencias de comandos web o HTML de modo arbitrario a través del parámetro \"keywords\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:structum:infobiz_server:-:*:*:*:*:*:*:*","matchCriteriaId":"051769A5-ECF3-4D35-9EC6-8D3CB6CCFCBF"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/63/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30120","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44876","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29116","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42290","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/63/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/44876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6655","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:18.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the (1) nom_branche and (2) nom parameters to php/prenom.php; the (3) nom_branche parameter to php/index.php; and the (4) nom_branche, (5) nom, and (6) prenom parameters to php/info.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en  GEDCOM_TO_MYSQL 2, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1)los parámetros nom_branche y (2) nom parameters de php/prenom.php; (3) el parámetro nom_branche de php/index.php; y (4) los parámetros nom_branche, (5) nom y (6) prenom de php/info.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comscripts:gedcom_to_mysl:2:*:*:*:*:*:*:*","matchCriteriaId":"FE6F2DA2-2B3B-424B-A3EC-0C200340A3A8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29048/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/75-GEDCOM_to_MySQL2-XSS.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42211","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29048/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.ownspace.org/index.php?/archives/75-GEDCOM_to_MySQL2-XSS.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6656","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T14:17:18.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Open Auto Classifieds v1.4.3b permite a atacantes remotos ejecutar comando SQL de forma arbitraria a través de (1)el parámetro \"id\" a listings.php y (2)el campo \"username\" a login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openautoclassifieds:open_auto_classifieds:1.4.3b:*:*:*:*:*:*:*","matchCriteriaId":"40DB32D1-2329-4EDE-9499-9742C5178E9F"}]}]}],"references":[{"url":"http://freshmeat.net/projects/openauto/releases/277061","source":"cve@mitre.org"},{"url":"http://osvdb.org/50255","source":"cve@mitre.org"},{"url":"http://osvdb.org/50256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29027","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42158","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5531","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/openauto/releases/277061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6657","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en index.php en Simple Machines Forum (SMF) v1.0 anteriores a v1.0.15 y v1.1 anteriores a v1.1.7  permite a atacantes remotos secuestrar la autenticación de los administradores para realizar peticiones para instalar paquetes a través del parámetro \"package\" en una acción install2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"549FC613-BB72-42FD-AD04-0FAC2FC2A942"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C1063E88-7F6D-4E42-B196-7292320C4F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1F6A0089-3041-45E4-A1BB-F35A9039A12B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E336DF9F-8978-44FD-9C1D-86F2C0E3AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8053CE57-37BF-4468-AD24-ECB1356779AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C381B85E-5A0F-4E32-A729-AB1E4A44A8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9DEB09-1A83-4AE0-B357-249E8C1F7988"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2FBA0C02-402C-4E96-AADB-B0A1C397B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"449E930B-AB74-4B64-AC0A-C04A13C828B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D869E1D5-8E27-4A13-9FD7-8189B3AC9AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"44A73B71-B2AC-470D-A03C-BED3AAD81C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"ABF69D49-AE48-4195-B958-A5D81AABD824"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3FA54F25-0EF9-40B1-A9B6-77F15DD27A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"CE14DC75-497A-4794-9260-E2A1291C9C6D"}]}]}],"references":[{"url":"http://osvdb.org/50071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.simplemachines.org/community/index.php?topic=272861.0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46343","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6993","source":"cve@mitre.org"},{"url":"http://osvdb.org/50071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.simplemachines.org/community/index.php?topic=272861.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6658","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action, as demonstrated by a predictable package filename in attachments/ that was uploaded through a post2 action to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Simple Machines Forum (SMF) v1.0 anterior a v1.0.15 y v1.1 anterior a v1.1.7, permite a administradores autenticados en remoto instalar paquetes desde directorios de su elección a través de un .. (punto punto) en el parámetro paquete en una acción install2, tal y como se ha demostrado por un nombre de fichero de paquete predecible en attachments/ que fue subido durante una acción post2 en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"549FC613-BB72-42FD-AD04-0FAC2FC2A942"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C1063E88-7F6D-4E42-B196-7292320C4F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1F6A0089-3041-45E4-A1BB-F35A9039A12B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E336DF9F-8978-44FD-9C1D-86F2C0E3AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8053CE57-37BF-4468-AD24-ECB1356779AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C381B85E-5A0F-4E32-A729-AB1E4A44A8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9DEB09-1A83-4AE0-B357-249E8C1F7988"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2FBA0C02-402C-4E96-AADB-B0A1C397B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"449E930B-AB74-4B64-AC0A-C04A13C828B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D869E1D5-8E27-4A13-9FD7-8189B3AC9AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"44A73B71-B2AC-470D-A03C-BED3AAD81C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"ABF69D49-AE48-4195-B958-A5D81AABD824"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3FA54F25-0EF9-40B1-A9B6-77F15DD27A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"CE14DC75-497A-4794-9260-E2A1291C9C6D"}]}]}],"references":[{"url":"http://osvdb.org/50070","source":"cve@mitre.org"},{"url":"http://www.simplemachines.org/community/index.php?topic=272861.0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6993","source":"cve@mitre.org"},{"url":"http://osvdb.org/50070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.simplemachines.org/community/index.php?topic=272861.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6659","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during a jsoption action, related to Sources/QueryString.php and Sources/Themes.php, as demonstrated by a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Simple Machines Forum (SMF) v1.0 anterior a la v1.0.15 y v1.1 anterior a la v1.1.7 permite a usuarios remotos autenticados configurar ficheros locales de forma arbitraria a través de secuencias de salto de directorio en el valor de theme_dir field durante una acción jsoption, relacionada con Sources/QueryString.php y Sources/Themes.php, como se demostró mediante un fichero .gif en attachments/con código PHP que fue subido a través de la acción profile2 en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"549FC613-BB72-42FD-AD04-0FAC2FC2A942"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C1063E88-7F6D-4E42-B196-7292320C4F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1F6A0089-3041-45E4-A1BB-F35A9039A12B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E336DF9F-8978-44FD-9C1D-86F2C0E3AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8053CE57-37BF-4468-AD24-ECB1356779AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C381B85E-5A0F-4E32-A729-AB1E4A44A8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9DEB09-1A83-4AE0-B357-249E8C1F7988"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2FBA0C02-402C-4E96-AADB-B0A1C397B982"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"449E930B-AB74-4B64-AC0A-C04A13C828B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D869E1D5-8E27-4A13-9FD7-8189B3AC9AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"44A73B71-B2AC-470D-A03C-BED3AAD81C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"ABF69D49-AE48-4195-B958-A5D81AABD824"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3FA54F25-0EF9-40B1-A9B6-77F15DD27A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"CE14DC75-497A-4794-9260-E2A1291C9C6D"}]}]}],"references":[{"url":"http://osvdb.org/50072","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32139","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.simplemachines.org/community/index.php?topic=272861.0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7011","source":"cve@mitre.org"},{"url":"http://osvdb.org/50072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.simplemachines.org/community/index.php?topic=272861.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6660","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a .sql extension, then accessing this file via a direct request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en bigdump.php en Alexey Ozerov BigDump 0.29b permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión ejecutable seguido de una extensión .sql, entonces accede a ese fichero a través de una petición directa.\r\nNOTA: alguno de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ozerov:bigdump:029b:*:*:*:*:*:*:*","matchCriteriaId":"E3CC2B8E-A04C-4562-9B8D-4ABFB91D6519"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498093/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46539","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498093/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6661","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file."},{"lang":"es","value":"Múltiples desbordamientos de entero en el motor de análisis de Bitdefender para Linux v7.600825 y anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída) o puede que ejecutar código de su elección a a través de unos ficheros malformados PE empaquetados (1) NeoLite y (2) ASProtect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:bitdefender_antivirus:*:*:*:*:*:*:*:*","versionEndIncluding":"7.60825","matchCriteriaId":"3D94CC5D-6271-4063-8996-408ED0F7BE2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122893066212987&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33240","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/50826","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32751","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/3459","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47219","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=122893066212987&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/50826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/3459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6662","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption."},{"lang":"es","value":"AVG Anti-Virus para Linux v7.5.51, y posiblemente anteriores, permite a atacantes remotos provocar una denegación de servicio (fallo de segmentación) o posiblemente ejecutar código de su elección a través de fichero UPX comprimidos mal formado, lo que lanza una corrupción de memoria"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.5.51:*:*:*:*:*:*:*","matchCriteriaId":"FA3D2B2C-1325-4712-97D3-AC3779B82210"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122893196715523&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08014.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/51962","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32749","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/3461","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47254","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=122893196715523&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/51962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/32749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/3461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6663","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the auction_id parameter, a different vector than CVE-2009-0106."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en profile.php en PHPAuctions.info en PHPAuctions (también conocido como PHPAcuctionSystem) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro auction_id parámetro, un vector diferente que el de CVE-2009-0106."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauctions:phpauctions:*:*:*:*:*:*:*:*","matchCriteriaId":"880DBB22-F9CF-41AD-869B-9BB6F1B8E056"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29856","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50472","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6664","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values."},{"lang":"es","value":"action.php en SH-News v3.0 permite a atacantes remotos saltarse la autentificación y obtener privilegios administrativos fijando las cookies shuser y shpass a valores \"non-zero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yarck:sh-news:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8EBA3B67-FE24-48D8-9811-73AE1E23F514"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shnews.de/change-log","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43123","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5829","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shnews.de/change-log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6665","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection."},{"lang":"es","value":"change.php en Ananta CMS v1.0b5, con magic_quotes_gpc desactivado, permite a atacantes remotos conseguir privilegios de administrador a través de un parámetro email modificado, posiblemente relacionado con la inyección de código.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anantasoft:ananta_cms:1.0b5:*:*:*:*:*:*:*","matchCriteriaId":"409FB4A3-AC24-4A12-B3C9-71234BBF39FC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29752","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43119","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5824","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6666","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo.  NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Kronos webTA permite a atacantes remotos inyectar web script o HTML de su elección a través del campo descriptión a (1) servlet/com.threeis.webta.H710selProject y (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 el estado del informe inicial es erróneo, pero la razón para esta conclusión es errónea."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kronos:kronos_webta:-:*:*:*:*:*:*:*","matchCriteriaId":"92977F1F-AAAD-47D0-AF17-F7F4D7411ED0"}]}]}],"references":[{"url":"http://osvdb.org/46207","source":"cve@mitre.org"},{"url":"http://osvdb.org/46208","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30588","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493193/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43056","source":"cve@mitre.org"},{"url":"http://osvdb.org/46207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493193/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6667","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1."},{"lang":"es","value":"A+ PHP Scripts News Management System (NMS) permite a atacantes remotos evitar la autentificación y obtener privilegios de administador si ponemos las cookies mobuser y mobspass a valor 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_melvin:a\\+_php_scripts_news_management_system:-:*:*:*:*:*:*:*","matchCriteriaId":"82F482E7-B93A-44B7-9990-D320125F1B99"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29977","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43431","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5954","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6668","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) id parameter to comm.php and (2) var_filename parameter to viewrq.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en nweb2fax 0.2.7 y anteriores, permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro (1) id sobre comm.php y (2) var_filename sobre viewrq.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.7","matchCriteriaId":"8695E8EF-9C9B-4E71-AF74-B1BED529B958"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1613B40C-CF7A-4A77-896E-76106D61DC94"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29804","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43173","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6669","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action."},{"lang":"es","value":"viewrq.php en nweb2fax v0.2.7 y anteriores permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres shell en el parámetro var_filename en (1) un tif o (2) acción PDF format."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.7","matchCriteriaId":"8695E8EF-9C9B-4E71-AF74-B1BED529B958"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5CDBDC77-0695-4770-8034-C77D678A38BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1613B40C-CF7A-4A77-896E-76106D61DC94"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"92E42B20-7188-4579-8F0C-3C5D3EABE6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"48F359BB-CAC1-4259-86D9-DA219B40483A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FFED647F-23AB-4FD3-B080-52B9BEF7EFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dirk_bartley:nweb2fax:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"884CBA30-8D8D-46C9-A542-CA8667CC22C1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29804","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43174","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6670","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet to UDP port 27960."},{"lang":"es","value":"Desbordamiento de entero en Vertex4 SunAge v1.08.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete UDP manipulado al puerto 27960."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08.1","matchCriteriaId":"F1B60228-0A98-49D1-B9D5-50EB34A9EDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.05:*:*:*:*:*:*:*","matchCriteriaId":"A8A50227-19D3-4EA6-8958-2B4DFF8CB5F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.06:*:*:*:*:*:*:*","matchCriteriaId":"12F09929-F09D-4C64-8929-3A2FF1618C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.08:*:*:*:*:*:*:*","matchCriteriaId":"72474255-37A3-4AC1-889A-A1FB482B9AF4"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/sunagex-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/sunagex.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/46561","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1903/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43249","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/sunagex-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/sunagex.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/46561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1903/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6671","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted join packet to UDP port 27960."},{"lang":"es","value":"Vertex4 SunAge v1.08.1 y anteriores permiten a atacantes remotos provocar una denegación de servicio (bucle infinito y cuelgue) a través de un paquete UDP join manipulado al puerto 27960."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08.1","matchCriteriaId":"F1B60228-0A98-49D1-B9D5-50EB34A9EDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.05:*:*:*:*:*:*:*","matchCriteriaId":"A8A50227-19D3-4EA6-8958-2B4DFF8CB5F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.06:*:*:*:*:*:*:*","matchCriteriaId":"12F09929-F09D-4C64-8929-3A2FF1618C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.08:*:*:*:*:*:*:*","matchCriteriaId":"72474255-37A3-4AC1-889A-A1FB482B9AF4"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/sunagex-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/sunagex.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/46562","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1903/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43249","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/sunagex-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/sunagex.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/46562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1903/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6672","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (\"runtime error\") via a crafted join packet to UDP port 27960, probably related to an invalid nickname command."},{"lang":"es","value":"Vertex4 SunAge v1.08.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (\"Error en tiempo de ejecución\")a través de un paquete UDP join al puerto 27960, probablemente relativo a un comando nickname no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08.1","matchCriteriaId":"F1B60228-0A98-49D1-B9D5-50EB34A9EDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.05:*:*:*:*:*:*:*","matchCriteriaId":"A8A50227-19D3-4EA6-8958-2B4DFF8CB5F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.06:*:*:*:*:*:*:*","matchCriteriaId":"12F09929-F09D-4C64-8929-3A2FF1618C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:vertex4:sunage:1.08:*:*:*:*:*:*:*","matchCriteriaId":"72474255-37A3-4AC1-889A-A1FB482B9AF4"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/sunagex-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/sunagex.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1903/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43249","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/sunagex-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/sunagex.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1903/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6673","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1) change the admin password via the cSaveAdminPW action; (2) modify site information, such as the contact address, via the saveAdmin; and (3) modify the site design via the saveDesign action."},{"lang":"es","value":"asp/bs_login.asp en QuickerSite v1.8.5 no restringe el acceso de forma adecuada a las funcionalidades administrativas, lo que permite a atacantes remotos (1) cambiar la clave de administrador a través de una acción cSaveAdminPW; (2) modificar información acerca del sitio, como la dirección de contacto, a través de saveAdmin; y (3) modificar el diseño del sitio a través de una acción saveDesign."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"96DA9C10-710B-4E2E-B0D4-D94E5308FC95"}]}]}],"references":[{"url":"http://secunia.com/advisories/30501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6674","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter."},{"lang":"es","value":"mailPage.asp en QuickerSite v1.8.5 permite a atacantes remotos inundar la cuentas de correo con mensajes a través de un gran número de peticiones con un parámetro sEmail modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"96DA9C10-710B-4E2E-B0D4-D94E5308FC95"}]}]}],"references":[{"url":"http://secunia.com/advisories/30501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_39.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29524","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_39.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6675","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en QuickerSite v1.8.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) close sobre showThumb.aspx; (2) SB_redirect y (3) SB_feedback sobre process_send.asp, como se puede comprobar en default.asp; (4) paramCode y (5) cColor sobre picker.asp; y (6) query string, (7) Referer header, y (8) la cabecera X-FORWARDED-FOR sobre rss.asp.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"96DA9C10-710B-4E2E-B0D4-D94E5308FC95"}]}]}],"references":[{"url":"http://osvdb.org/46221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42860","source":"cve@mitre.org"},{"url":"http://osvdb.org/46221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6676","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message."},{"lang":"es","value":"QuickerSite v1.8.5 permite a atacantes remotos conseguir información sensible a través de una petición a showThumb.aspx sin ningún parámetro, lo que revelará el path de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"96DA9C10-710B-4E2E-B0D4-D94E5308FC95"}]}]}],"references":[{"url":"http://osvdb.org/46222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42861","source":"cve@mitre.org"},{"url":"http://osvdb.org/46222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6677","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en fckeditor251/editor/filemanager/connectors/asp/upload.asp en QuickerSite v1.8.5 permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con un extensión ejecutable, cuando se está accediendo a él, a través de una petición directa sobre el fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"96DA9C10-710B-4E2E-B0D4-D94E5308FC95"}]}]}],"references":[{"url":"http://secunia.com/advisories/30501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bugreport.ir/index_39.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6678","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T10:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en asp/includes/contact.asp en QuickerSite v1.8.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro sNickName en una acción del perfil sobre default.asp.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quickersite:quickersite:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"96DA9C10-710B-4E2E-B0D4-D94E5308FC95"}]}]}],"references":[{"url":"http://osvdb.org/46228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_39.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29524","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42866","source":"cve@mitre.org"},{"url":"http://osvdb.org/46228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/39/exploit.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_39.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6679","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file."},{"lang":"es","value":"Desbordamiento de búfer en el módulo de escritura BaseFont en Ghostscript v8.62, y posiblemente otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída ps2pdf) y posiblemente ejecución de código arbitrario a través de un fichero Postscript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*","matchCriteriaId":"755FCEC1-E1DD-42BC-9606-17217DB69128"}]}]}],"references":[{"url":"http://bugs.ghostscript.com/show_bug.cgi?id=690211","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35559","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35569","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/10","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=493445","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10019","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/757-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html","source":"cve@mitre.org"},{"url":"http://bugs.ghostscript.com/show_bug.cgi?id=690211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=493445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/757-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6680","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error."},{"lang":"es","value":"libclamav/pe.c en ClamAV anteriores a v0.95 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un fichero manipulado que provoca un error de división por 0.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.94.2","matchCriteriaId":"42BBC078-58AE-4792-BA8A-CEEF912E8F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*","matchCriteriaId":"F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*","matchCriteriaId":"0722860E-934A-49CA-BEAD-0EB05AA6E4C6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1771","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34357","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-754-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0934","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49845","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-754-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6681","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element."},{"lang":"es","value":"vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en dijit.Editor en Dojo anteriores a v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de entidades en un elemento TEXTAREA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"72B44884-7A73-4E52-BF22-751E824E1E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"83852B57-3A53-4D77-A96F-981AAE36E420"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1B6EEA9-7DA2-4654-93AC-C689E305BB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BFD690AA-F874-45F0-BF71-D9E7CD27F7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"76E3DF57-4959-4442-B480-2AC6602290D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"754DB42B-D1C6-4673-B795-9DBBFFC0B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"19A04248-DA1A-4D71-A7D2-49D908352D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1521836E-BCFD-4665-A461-F9CD0DA2195D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"528A98A5-751F-40F1-9AF7-0CB84D0E154A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DA636E72-459D-44A8-8278-4E5091975D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A419DC98-A35B-4DFD-994C-B7B31CBE14A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dojotoolkit:dojo:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"096A2AB6-5CED-47CC-81EC-6D4D4A890777"}]}]}],"references":[{"url":"http://trac.dojotoolkit.org/ticket/2140","source":"cve@mitre.org"},{"url":"http://www.dojotoolkit.org/book/dojo-1-1-release-notes","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34661","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49883","source":"cve@mitre.org"},{"url":"http://trac.dojotoolkit.org/ticket/2140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dojotoolkit.org/book/dojo-1-1-release-notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6682","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) \" (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Apache Struts v2.0.x anteriores a v2.0.11.1 y v2.1.x anteriores a v2.1.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores asociados con el manejo no adecuado de (1) \" (comillas doble) en el atributo href en una etiqueta s:a, y (2) parámetros en el atributo acción de una etiqueta s:url.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D9C89E22-B106-4EAB-90A1-0EA86C165737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E1BABB2-780E-47E0-87A9-A164906C8421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94BD452B-AE41-4F7A-9DB9-4B1039582537"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:struts:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DEE2D92E-A527-469A-89A9-9685D8E08650"}]}]}],"references":[{"url":"http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34686","source":"cve@mitre.org"},{"url":"https://issues.apache.org/struts/browse/WW-2414","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://issues.apache.org/struts/browse/WW-2427","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/struts/browse/WW-2414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://issues.apache.org/struts/browse/WW-2427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6683","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via the r parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en listtest.php en Apartment Search Script, permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través del parámetro r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:apartment_search_script:*:*:*:*:*:*:*:*","matchCriteriaId":"1724580F-C863-4AD4-93C0-55C818F2B41B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32065","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46282","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6956","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6684","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en editimage.php en Apartment Search Script, permite a atacantes remotos ejecutar código mediante la subida de un archivo con extensión ejecutable y cabecera GIF, entonces, accediendo a este fichero a través de una petición directa a un fichero renombrado en Member_Admin/logo/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:apartment_search_script:*:*:*:*:*:*:*:*","matchCriteriaId":"1724580F-C863-4AD4-93C0-55C818F2B41B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32065","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46283","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6956","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6685","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Frontend Filemanager (air_filemanager) v0.6.1 y anteriroes (extensión para TYPO3) permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_waggershauser:air_filemanager:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.1","matchCriteriaId":"36021FC7-FA27-485C-9997-0CF4CC9E8E03"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_waggershauser:air_filemanager:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"33C6F9C3-6C82-4F27-A7E6-0094A9FF0B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_waggershauser:air_filemanager:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4C106C6C-4AAA-47CC-9BA3-31C8CCC1C476"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_waggershauser:air_filemanager:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"45AB7A0C-183A-4690-90FF-F22D56833259"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_waggershauser:air_filemanager:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"57F09D15-7D9B-4A53-BA65-F765FB870288"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_waggershauser:air_filemanager:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"05F8A94D-8D0C-40EA-B202-121BA24C2929"}]}]}],"references":[{"url":"http://osvdb.org/46382","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29837","source":"cve@mitre.org"},{"url":"http://osvdb.org/46382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6686","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CoolURI (cooluri) v1.0.11 y anteriores (extensión para TYPO3), permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jan_bednarik:cooluri:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.11","matchCriteriaId":"38D77669-341D-4C3C-A287-84EB01AB30F2"}]}]}],"references":[{"url":"http://osvdb.org/46383","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29821","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43197","source":"cve@mitre.org"},{"url":"http://osvdb.org/46383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6687","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en DCD GoogleMap (dcdgooglemap) v1.1.0 y anteriores (extensión para TYPO3), permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_cadu:dcdgooglemap:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"ECAE6056-608D-4090-8C50-8254BC82C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_cadu:dcdgooglemap:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5BECE701-B211-497D-A8A4-3337F50AA896"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_cadu:dcdgooglemap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"823FA4ED-B597-4F9F-9946-85F0152D6009"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_cadu:dcdgooglemap:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E14B5496-81EC-41B9-936B-CD9AF32E04E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_cadu:dcdgooglemap:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6E1C8AE-86AA-47F7-80F7-2AD302E5D371"}]}]}],"references":[{"url":"http://osvdb.org/46378","source":"cve@mitre.org"},{"url":"http://osvdb.org/46384","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30773","source":"cve@mitre.org"},{"url":"http://typo3.org/extensions/repository/view/dcdgooglemap/1.1.1/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29815","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43199","source":"cve@mitre.org"},{"url":"http://osvdb.org/46378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/extensions/repository/view/dcdgooglemap/1.1.1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6688","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en JobControl (dmmjobcontrol) v1.15.0 y anteriores (extensión para TYPO3) permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:*:*:*:*:*:*:*:*","versionEndIncluding":"1.15.0","matchCriteriaId":"3B2E2639-9974-4C2A-903D-C386AB55AC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"421912BF-3882-49E2-9BB2-59ED296F6306"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9CF86D2B-F508-4C67-B356-B46D211E2973"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D9EE8D-0880-4184-8EF9-F3BA19534351"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E2F34F6-CC59-44D0-BAED-524186126D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0497203C-464D-43F2-B5EF-70D4D0CF14FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0B7DF0-E1A0-425C-AE30-50B6446258E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF65F5BB-4B50-4C84-8911-B9C6278CFB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1BD95041-6C13-4077-92F8-941F3FE16348"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.6:*:*:*:*:*:*:*","matchCriteriaId":"018B9765-EF07-41FE-894B-B515C8892FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.7:*:*:*:*:*:*:*","matchCriteriaId":"3347C94C-B734-4853-A886-4A4C81B1E68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8:*:*:*:*:*:*:*","matchCriteriaId":"27663404-9323-48F1-9F66-38B3AFFBE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"153A869A-9140-4B26-AD9E-5C9949E4A38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A9C9ABAB-3012-427E-9F4A-AB130ED5E9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"787E56B3-1BBB-4923-A475-14D0B0C9F954"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9:*:*:*:*:*:*:*","matchCriteriaId":"ADB635ED-5537-42FF-B1A3-7CFAFD3E1E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"50259F6C-1FD5-45F3-80E8-745D9DF1678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"21C8D317-9996-4B61-B4D4-728D9BACF22D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"703F79E1-F353-4852-A0CD-128FE51CBE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"90432F4B-6805-4714-AAB9-D567E0AA24EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"BB108D53-38D1-4F2A-A421-4265803A678B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD19DDF6-C097-4192-A47F-0817AC387F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"E2F8E2E1-FB6B-4AE8-9EE7-5D7C1E76125B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"D92196FA-F26F-4CDC-A506-60EBE1EB48F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"7177D6BD-7925-4A6C-A404-AF3ED3436794"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"17C0C155-BEFF-42EC-90F8-CDC5E808B5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A2F3FE-AEF3-4FD6-928C-72DC70ABB4C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"BB8986C5-9AB4-4D16-8A1B-DDD1915ACA50"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"23AD0874-BD63-4E26-90FF-019E3900F28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"3B72E7EC-D147-428A-AA91-B4842FED45B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"2F694249-2EBB-4B34-A518-4DF97E3100E6"}]}]}],"references":[{"url":"http://osvdb.org/46385","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29828","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43202","source":"cve@mitre.org"},{"url":"http://osvdb.org/46385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6689","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en JobControl (dmmjobcontrol) v1.15.0 y anteriores (extensión para TYPO3) permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:*:*:*:*:*:*:*:*","versionEndIncluding":"1.15.0","matchCriteriaId":"3B2E2639-9974-4C2A-903D-C386AB55AC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"421912BF-3882-49E2-9BB2-59ED296F6306"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9CF86D2B-F508-4C67-B356-B46D211E2973"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D9EE8D-0880-4184-8EF9-F3BA19534351"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E2F34F6-CC59-44D0-BAED-524186126D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0497203C-464D-43F2-B5EF-70D4D0CF14FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0B7DF0-E1A0-425C-AE30-50B6446258E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF65F5BB-4B50-4C84-8911-B9C6278CFB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1BD95041-6C13-4077-92F8-941F3FE16348"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.6:*:*:*:*:*:*:*","matchCriteriaId":"018B9765-EF07-41FE-894B-B515C8892FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.7:*:*:*:*:*:*:*","matchCriteriaId":"3347C94C-B734-4853-A886-4A4C81B1E68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8:*:*:*:*:*:*:*","matchCriteriaId":"27663404-9323-48F1-9F66-38B3AFFBE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"153A869A-9140-4B26-AD9E-5C9949E4A38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A9C9ABAB-3012-427E-9F4A-AB130ED5E9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"787E56B3-1BBB-4923-A475-14D0B0C9F954"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9:*:*:*:*:*:*:*","matchCriteriaId":"ADB635ED-5537-42FF-B1A3-7CFAFD3E1E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"50259F6C-1FD5-45F3-80E8-745D9DF1678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"21C8D317-9996-4B61-B4D4-728D9BACF22D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"703F79E1-F353-4852-A0CD-128FE51CBE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"90432F4B-6805-4714-AAB9-D567E0AA24EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"BB108D53-38D1-4F2A-A421-4265803A678B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD19DDF6-C097-4192-A47F-0817AC387F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"E2F8E2E1-FB6B-4AE8-9EE7-5D7C1E76125B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"D92196FA-F26F-4CDC-A506-60EBE1EB48F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"7177D6BD-7925-4A6C-A404-AF3ED3436794"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"17C0C155-BEFF-42EC-90F8-CDC5E808B5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A2F3FE-AEF3-4FD6-928C-72DC70ABB4C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"BB8986C5-9AB4-4D16-8A1B-DDD1915ACA50"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"23AD0874-BD63-4E26-90FF-019E3900F28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"3B72E7EC-D147-428A-AA91-B4842FED45B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_renskers:dmmjobcontrol:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"2F694249-2EBB-4B34-A518-4DF97E3100E6"}]}]}],"references":[{"url":"http://osvdb.org/46386","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43204","source":"cve@mitre.org"},{"url":"http://osvdb.org/46386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6690","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no específica en nepa-design.de Spam Protection (nd_antispam) extensión v1.0.3 para TYPO3 permite a atacantes remotos modificar la configuración a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:nd_antispam:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3328555E-F633-488E-AB5A-A2C2B4FCFCFA"}]}]}],"references":[{"url":"http://osvdb.org/46387","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43205","source":"cve@mitre.org"},{"url":"http://osvdb.org/46387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6691","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Diocese of Portsmouth Calendar Today (pd_calendar_today) extensión v0.0.3 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:diocese_of_portsmouth:pd_calendar_today:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7F4256AB-F54A-4D90-95A3-B992E5586E74"}]}]}],"references":[{"url":"http://osvdb.org/46388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30737","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29819","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43206","source":"cve@mitre.org"},{"url":"http://osvdb.org/46388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6692","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Diocese of Portsmouth Training Courses (pd_trainingcourses), extensión v0.1.1 para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:pd_trainingcourses:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A8EECC13-77C9-4683-A9A2-D0547E6EC185"}]}]}],"references":[{"url":"http://osvdb.org/46389","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29822","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43207","source":"cve@mitre.org"},{"url":"http://osvdb.org/46389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6693","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Download system (sb_downloader) v0.1.4 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian_baumann:sb_downloader:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.4","matchCriteriaId":"9ABAF0DB-CC63-4D08-BE8F-5A2061C3BE45"}]}]}],"references":[{"url":"http://osvdb.org/46390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30737","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43208","source":"cve@mitre.org"},{"url":"http://osvdb.org/46390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6694","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Random Prayer (ste_prayer) v0.0.1 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_prayer:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BA448D28-CEE3-493F-8957-E2928F34760E"}]}]}],"references":[{"url":"http://osvdb.org/46391","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43209","source":"cve@mitre.org"},{"url":"http://osvdb.org/46391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6695","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en TIMTAB social bookmark icons (timtab_sociable) v2.0.4 y anteriores (extensión para TYPO3) permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frank_naegler:timtab_sociable:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"0A642EE2-80B2-483E-B586-211C5AD7B01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:frank_naegler:timtab_sociable:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A64B33F7-377F-4181-9183-960920B41320"},{"vulnerable":true,"criteria":"cpe:2.3:a:frank_naegler:timtab_sociable:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"556D5D10-5854-4721-82FE-F1B729627123"},{"vulnerable":true,"criteria":"cpe:2.3:a:frank_naegler:timtab_sociable:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF0988A2-37CC-47F3-A42E-A55F83897A91"},{"vulnerable":true,"criteria":"cpe:2.3:a:frank_naegler:timtab_sociable:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F52F7C98-E5A2-44C4-B315-7FC61D38B39B"}]}]}],"references":[{"url":"http://osvdb.org/46392","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30737","source":"cve@mitre.org"},{"url":"http://typo3.org/extensions/repository/view/timtab_sociable/2.0.5/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29823","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43210","source":"cve@mitre.org"},{"url":"http://osvdb.org/46392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/extensions/repository/view/timtab_sociable/2.0.5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6696","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Fussballtippspiel (toto) v0.1.1 y anteriores (extensión para TYPO3) permite a atacantes remotos a ejecutar comandos SQL de su elección a través de vectores desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manu_oehler:toto:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.1","matchCriteriaId":"9580E376-3B61-4BFF-94D7-5E097E6EB10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:manu_oehler:toto:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"68F35600-03F0-49E7-98B6-4DCAD08736CA"}]}]}],"references":[{"url":"http://osvdb.org/46394","source":"cve@mitre.org"},{"url":"http://typo3.org/extensions/repository/view/toto/0.1.2/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29824","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43212","source":"cve@mitre.org"},{"url":"http://osvdb.org/46394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/extensions/repository/view/toto/0.1.2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6697","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en TARGET-E WorldCup Bets (worldcup) v2.0.0 y anteriores (extensión para TYPO3) permite a atacantes remotos ejecutar comandos de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"29B30FCB-75D7-4EC6-8CCF-7E792F109897"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"D968C544-AC69-4E8A-BA08-5AF8553C1ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"58402F40-22FD-4C3D-B6EA-3244E6277E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B4C7435E-9191-484A-9708-5B46AFED3794"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EDDDE629-2E79-43F8-A7AF-EA2EA14B4E89"}]}]}],"references":[{"url":"http://osvdb.org/46396","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29826","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43213","source":"cve@mitre.org"},{"url":"http://osvdb.org/46396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6698","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TARGET-E WorldCup Bets (worldcup) v2.0.0 y anteriores (extensión para TYPO3), permite a atacantes remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través vectores no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"D968C544-AC69-4E8A-BA08-5AF8553C1ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"58402F40-22FD-4C3D-B6EA-3244E6277E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B4C7435E-9191-484A-9708-5B46AFED3794"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EDDDE629-2E79-43F8-A7AF-EA2EA14B4E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_fritz:worldcup:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3780A749-C38C-4E50-9542-8DC5B081B8D4"}]}]}],"references":[{"url":"http://osvdb.org/46395","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29826","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43214","source":"cve@mitre.org"},{"url":"http://osvdb.org/46395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6699","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Resource Library (tjs_reslib) v0.1.0 y anteriores (extensión de TYPO3), permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través vectores no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:tjs_reslib:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"AEAF2A54-0F7E-4FE9-A935-8934D10C2907"}]}]}],"references":[{"url":"http://osvdb.org/46393","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29832","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43211","source":"cve@mitre.org"},{"url":"http://osvdb.org/46393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6700","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) mytable parameter to view.php, (2) mytable parameter to viewdb2.php, (3) tablehere parameter to category-rename.php, and (4) letter parameter to module-contacts.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Butterfly Organizer v2.0.0, permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros (1) mytable en view.php, (2) mytable en viewdb2.php, (3) tablehere en category-rename.php y (4) letter en module-contacts.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:butterflymedia:butterfly_organizer:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E6822-2B75-4570-936C-EADE1F61AE63"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43066","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5797","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6701","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request."},{"lang":"es","value":"NetScout (formalmente Network General) Visualizer V2100 e InfiniStream i1730 no restringen el acceso a ResourceManager/en_US/domains/add_domain.jsp, lo que permite a atacantes remotos obtener privilegios de administrador a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netscout:ngenius_infinistream:i1730:*:*:*:*:*:*:*","matchCriteriaId":"2E50306D-78A3-4A79-A4AF-2A7D4106EA47"},{"vulnerable":true,"criteria":"cpe:2.3:h:netscout:visualizer:v2100:*:*:*:*:*:*:*","matchCriteriaId":"07CCBDFE-BDB0-41CA-A1BC-57640ED11FCD"}]}]}],"references":[{"url":"http://osvdb.org/46195","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493171/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42938","source":"cve@mitre.org"},{"url":"http://osvdb.org/46195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493171/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6702","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via a long nickname, which triggers an exception."},{"lang":"es","value":"S.T.A.L.K.E.R.: Shadow of Chernobyl v1.0006 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una nickname largo, lo que provoca una excepción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker-game:s.t.a.l.k.e.r.\\:_shadow_of_chernobyl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0006","matchCriteriaId":"C2C2D4BC-DEB7-4B11-85F5-C4AE821B7D4F"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/stalkerboom-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/46432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30707","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493366/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29997","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43132","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/stalkerboom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/46432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493366/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6703","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función IPureServer::_Recieve en S.T.A.L.K.E.R.: Shadow of Chernobyl v1.0006 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de un paquete 0x39 comprimido, que es descomprimido por la función NET_Compressor::Decompress.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker-game:s.t.a.l.k.e.r.\\:_shadow_of_chernobyl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0006","matchCriteriaId":"C2C2D4BC-DEB7-4B11-85F5-C4AE821B7D4F"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/stalker39x-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/46626","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493765","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29997","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43454","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/stalker39x-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/46626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6704","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory."},{"lang":"es","value":"Desbordamiento de entero en la función NET_Compressor::Decompress en S.T.A.L.K.E.R.: Shadow of Chernobyl v1.0006 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de un paquete manipulado con un valor 0xc1 que contiene datos no comprimidos, lo que provoca una copia de una gran cantidad de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker-game:s.t.a.l.k.e.r.\\:_shadow_of_chernobyl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0006","matchCriteriaId":"C2C2D4BC-DEB7-4B11-85F5-C4AE821B7D4F"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/stalker39x-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/46627","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493765","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29997","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43456","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/stalker39x-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6705","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server termination) via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction."},{"lang":"es","value":"La función MultipacketReciever::RecievePacket en S.T.A.L.K.E.R.: Shadow of Chernobyl v1.0006 y aanteriores, permiten a atacantes remotos provocar una denegación de servicio (finalización de servicio) a través de paquetes manipulados sin los valores 0xe0 o 0xe1 esperados, lo que provoca la instrucción INT13."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker-game:s.t.a.l.k.e.r.\\:_shadow_of_chernobyl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0006","matchCriteriaId":"C2C2D4BC-DEB7-4B11-85F5-C4AE821B7D4F"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/stalker39x-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/46628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493765","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29997","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43458","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/stalker39x-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6706","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts \"subscriber table passwords,\" (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts \"subscriber table passwords.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el interfase de gestión web en Avaya SIP Enablement Services (SES) v3.x y v4.0, como los usados en Avaya Communicatión Manager v3.1.x, permite a atacantes remotos conseguir (1)configuración de la aplicación del servidor, (2) configuración del servidor de bases de datos, incluidas claves cifradas, (3) utilidad del sistema que desencripta \"claves de tablas de suscriptor\", (4) utilidad del sistema que desencripta las claves de la base de datos, y (5) una utilidad del sistema que encripta \"claves de tablas de suscriptor\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8D4881F-650A-4FA1-B604-70EBBED41AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F9EB9ECB-9ABF-40ED-9116-D3FE9FC73B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"43F41650-7E55-436A-9935-8CE88B428680"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BFF25B3-B7C7-479C-8C2A-995E568C3395"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"}]}]}],"references":[{"url":"http://osvdb.org/46602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30751","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29939","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=81","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=82","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=83","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=84","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=85","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43387","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43388","source":"cve@mitre.org"},{"url":"http://osvdb.org/46602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=81","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=82","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=83","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=84","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=85","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6707","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an \"unnecessary default application,\" (4) unspecified scripts in the states folder, (5) an unspecified \"default application\" that lists server configuration, and (6) \"full system help.\""},{"lang":"es","value":"El interfase de administración web de Avaya SIP Enablement Services (SES) v3.x y v4.0, como las usadas en Avaya Communication Manager v3.1.x no realiza autentificación para ciertas tareas, lo que permite a atacantes remotos obtener información sensible y acceso a funcionalidades restringidas a través de (1) la utilidad de instalación de certificados, (2) secuencias de comandos no específicas en el directorio de objetos, (3) una \"aplicación por defecto no necesaria\", (4) secuencias de código no específicas en el directorio \"States\",(5) una \"aplicación por defecto\" no específica que lista la configuración del servidor, y (6) \"ayuda del sistema completa\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8D4881F-650A-4FA1-B604-70EBBED41AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F9EB9ECB-9ABF-40ED-9116-D3FE9FC73B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"43F41650-7E55-436A-9935-8CE88B428680"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BFF25B3-B7C7-479C-8C2A-995E568C3395"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"}]}]}],"references":[{"url":"http://osvdb.org/46598","source":"cve@mitre.org"},{"url":"http://osvdb.org/46599","source":"cve@mitre.org"},{"url":"http://osvdb.org/46600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30751","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29939","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=86","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=87","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=88","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=89","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=90","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=91","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43381","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43384","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43389","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43393","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43394","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43395","source":"cve@mitre.org"},{"url":"http://osvdb.org/46598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=86","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=87","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=89","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=90","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=91","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6708","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of \"data viewing or restoring parameters.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el interfase de administración web de Avaya SIP Enablement Services (SES)v3.x y v4.0, como las usadas en Avaya Communication Manager v3.1.x y v4.x, permite a usuarios remotos autentificados, obtener privilegios de root a través de vectores desconocidos relativos a la configuración de \"viendo datos locales o restaurando parámetros\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5DE700B-B830-445B-AF08-4AD28EF1BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*","matchCriteriaId":"522FD345-91ED-4FE2-8069-028C3A2E3974"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*","matchCriteriaId":"3507CABD-74EE-4A53-9C09-AF38B3F218F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8D4881F-650A-4FA1-B604-70EBBED41AE7"}]}]}],"references":[{"url":"http://osvdb.org/46604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30751","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29939","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=77","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43390","source":"cve@mitre.org"},{"url":"http://osvdb.org/46604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6709","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of \"local data viewing or restoring parameters.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el interfase de administración web de Avaya SIP Enablement Services (SES)v3.x y v4.0, como las usadas en Avaya Communication Manager v3.1.x, permite a usuarios remotos autentificados, ejecutar comandos de su elección a través de vectores no específicos, relativos a la configuración de \"viendo datos locales o restaurando parámetros\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F8D4881F-650A-4FA1-B604-70EBBED41AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F9EB9ECB-9ABF-40ED-9116-D3FE9FC73B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"43F41650-7E55-436A-9935-8CE88B428680"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BFF25B3-B7C7-479C-8C2A-995E568C3395"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*","matchCriteriaId":"423E4EEB-3D6F-449E-B623-C8D051E8FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"87089C0E-2241-46A7-93EE-EC41D52A89C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*","matchCriteriaId":"5BD89D61-0B42-4DDE-99F1-71570A37A136"}]}]}],"references":[{"url":"http://secunia.com/advisories/30751","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46603","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29939","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=78","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=78","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1943/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6710","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to \"configuring data viewing or restoring credentials.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el interfase de administración web de Avaya Communication Manager v3.1.x anteriores a CM v3.1.4 SP2 y v4.0.x anteriores a v4.0.3 SP1 permite a administradores remotos autentificados, obtener privilegios de root a través de vectores no específicos, relativos a \"viendo datos de configuración o restaurando credenciales\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5DE700B-B830-445B-AF08-4AD28EF1BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*","matchCriteriaId":"522FD345-91ED-4FE2-8069-028C3A2E3974"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*","matchCriteriaId":"3507CABD-74EE-4A53-9C09-AF38B3F218F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"78F06597-F0EB-4753-BFFF-62A21EE230DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.2:sp1:*:*:*:*:*:*","matchCriteriaId":"D14829C8-3C05-426D-835B-355E4240B8EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"}]}]}],"references":[{"url":"http://secunia.com/advisories/30799","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46582","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29939","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=79","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1944/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1944/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6711","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to \"viewing system logs.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el interfase de administración Web en Avaya Communication Manager v3.1.x anteriores a CM v3.1.4 SP2 y v4.0.x anteriores v4.0.3 SP1 permiten a usuarios remotos autentificados, ejecutar comandos de su elección a través de vectores desconocidos, relativo a \"viendo registros de sistema\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88F5C363-3A38-43FC-A06D-73E280AB844B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4030E5D-BC15-481D-A15E-98FAE65130D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3FC3A86-CE3D-4C12-9E31-7F7280EF9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBD119B9-FE11-4165-943D-119E906DC013"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"89F99C5C-C184-4A5C-B8BA-F558C4A38730"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*","matchCriteriaId":"1EAA2BC9-4794-4441-8AA8-3C1B7297FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9F0B0D66-9900-4B9A-A892-31B8607DA852"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5DE700B-B830-445B-AF08-4AD28EF1BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15215:*:*:*:*:*:*","matchCriteriaId":"522FD345-91ED-4FE2-8069-028C3A2E3974"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.1:sp15500:*:*:*:*:*:*","matchCriteriaId":"3507CABD-74EE-4A53-9C09-AF38B3F218F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"825C1D4E-CD86-4122-84D7-CF1CB4CF8F10"}]}]}],"references":[{"url":"http://secunia.com/advisories/30799","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46581","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29939","source":"cve@mitre.org"},{"url":"http://www.voipshield.com/research-details.php?id=80","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1944/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43391","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.voipshield.com/research-details.php?id=80","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1944/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6712","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference."},{"lang":"es","value":"El servicio HTTP/XML-RPC en Crysis v1.21 (versión del juego v1.1.1.6156) y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición larga HTTP, lo que provoca una desreferenciación de puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ea:crysis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.21","matchCriteriaId":"6727C27C-0A21-40BB-AE96-8F056CE6FA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ea:crysis:1.1:*:*:*:*:*:*:*","matchCriteriaId":"359F6C10-9244-4656-96C0-C4880D925A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ea:crysis:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C4799ADB-A7EA-4044-AB66-9DC9330BC2BF"}]}]}],"references":[{"url":"http://aluigi.org/poc/dontcrysis.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-06/0211.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/46261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493385/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29759","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43126","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/dontcrysis.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-06/0211.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/46261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493385/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6713","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and crash) via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference."},{"lang":"es","value":"World in Conflict (WIC) v1.008 y anteriores permiten a atacantes remotos provocar una denegación de servicio (violación de acceso y caída) a través de un block de datos zero-byte al puerto 48000 TCP, lo que provoca una desreferenciación de puntero nulo.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:*:*:*:*:*:*:*:*","versionEndIncluding":"1.008","matchCriteriaId":"DF6A7B57-F319-45D9-B4B7-7C2D327BAD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.000:*:*:*:*:*:*:*","matchCriteriaId":"42A169F0-0538-4F86-BBEA-364C4CCE9C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.001:*:*:*:*:*:*:*","matchCriteriaId":"74AD4BBF-BDEF-4E28-8193-FDE28DA82C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.002:*:*:*:*:*:*:*","matchCriteriaId":"C9315BFF-078B-434B-9076-EFD3A7F730AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.003:*:*:*:*:*:*:*","matchCriteriaId":"7BB1DFA1-138A-4998-AD04-F0CDA3F20C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.005:*:*:*:*:*:*:*","matchCriteriaId":"03B5DF66-1148-4B88-9C6C-AE1D06355202"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.006:*:*:*:*:*:*:*","matchCriteriaId":"6845BCF6-1E2D-4D77-AFEC-900B5BE61747"},{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:wic:1.007:*:*:*:*:*:*:*","matchCriteriaId":"A0D85DC2-9367-4213-89DD-B81B89BE0403"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/wicboom-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/46533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493596/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29888","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1901/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43289","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/wicboom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/493596/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1901/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6714","sourceIdentifier":"cve@mitre.org","published":"2009-04-10T22:00:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie."},{"lang":"es","value":"Admin.php en xeCMS v1.0.0 RC2 y anteriores permiten a atacantes remotos saltarse la autentificación y acceder al panel de administración configurando la cookie xecms_username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xecms_project:xecms:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C4DF6652-349F-4F85-BA81-F23E6665C023"},{"vulnerable":true,"criteria":"cpe:2.3:a:xecms_project:xecms:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D28D6F32-B3B8-4C28-91BF-150DFFBDB5B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29740","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43114","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5818","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6715","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) homeadmin/adminhome.php and (2) homeadmin/signinform.php."},{"lang":"es","value":"Varias vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la aplicación web Pre ADS Portal version v2.0 y anteriores permiten a usuarios remotos inyectar código web script o HTML de su elección a través de (1) homeadmin/adminhome.php y (2) homeadmin/signinform.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_ads_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"40928AAF-65CA-400B-AA86-281D45871EAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32151","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46398","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7017","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6716","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified impact via a direct request."},{"lang":"es","value":"homeadmin/adminhome.php de la aplicación web Pre ADS Portal versiones v2.0 y anteriores no requiere autenticación de administrador por lo que permite a usuarios remotos impactar de manera no especificada en la aplicación a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_ads_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"40928AAF-65CA-400B-AA86-281D45871EAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32151","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7017","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6717","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) adminstart.php, (2) admineventtype.php, (3) admineventdetails.php, (4) admineventlist.php, (5) adminuserslist.php, (6) adminleaderslist.php, (7) admindatabase.php, and possibly (8) index.php."},{"lang":"es","value":"U&M Software Signup 1.0 and 1.1 no requiere autenticación de administrador para todos los scripts del directorio admin/, lo que permite a usuarios remotos impactar de manera no especificada en la aplicación a través de (1) adminstart.php, (2) admineventtype.php, (3) admineventdetails.php, (4) admineventlist.php, (5) adminuserslist.php, (6) adminleaderslist.php, (7) admindatabase.php y posiblemente (8) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uochm:signup:1.0:*:*:*:*:*:*:*","matchCriteriaId":"800AFBAB-1004-4BFA-AE88-3A080132A06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:uochm:signup:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0A0BD97-367B-4333-96BD-032F8FCC8C99"}]}]}],"references":[{"url":"http://signup.uochm.com/features.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7032","source":"cve@mitre.org"},{"url":"http://signup.uochm.com/features.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6718","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) user_manual.php, (2) user_config.php, (3) user_kundnamn.php, (4) user_kundlista.php, (5) user_aktiva_kunder.php, (6) database.php, and possibly (7) index.php."},{"lang":"es","value":"U & M Software JustBookIt 1.0 no requiere autenticación de administrador para todos los scripts en el directorio /admin, lo que permite a atacantes remotos tener un impacto no especificado a través de una solicitud directa a (1) user_manual.php, (2) user_config.php, (3) user_kundnamn.php, (4) user_kundlista.php, (5) user_aktiva_kunder.php, (6) database.php, y posiblemente (7) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uochm:justbookit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"922141A5-1761-4481-9C0D-592244927474"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6719","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) start.php, (2) aktivitet.php, (3) prop_aktivitet.php, (4) kategorier.php, (5) konfig.php, (6) security.php, (7) manual.php, and possibly (8) index.php."},{"lang":"es","value":"U&M Software Event Lister (alias JustListIt) 1.0 no requiere autenticación de administrador para todos los scripts del directorio /admin, lo que permite a atacantes remotos realizar acciones no especificadas a través de una solicitud a (1) start.php, (2) aktivitet.php , (3) prop_aktivitet.php, (4) kategorier.php, (5) konfig.php, (6) security.php, (7) manual.php y, posiblemente, (8) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uochm:justlistit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A81F482-AE82-44A3-98DA-8A42ADAC6784"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46441","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7034","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6720","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka the admin field)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/adm_login.php en DeltaScripts PHP Links 1.3 y anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro admin_username (conocido también como el campo admin)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_links:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"2089E5BB-3C94-4F1B-B900-1531C8631AA4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50392","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7024","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6721","sourceIdentifier":"cve@mitre.org","published":"2009-04-14T16:26:56.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName parameter (aka the username field)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  index.php en AJ Square AJ Article permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"txtName\" (también conocido como el campo \"username\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:aj_article:*:*:*:*:*:*:*:*","matchCriteriaId":"71FF1EA5-0CC9-49E4-9BCD-BAB051C27265"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32054","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46297","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6722","sourceIdentifier":"cve@mitre.org","published":"2009-04-14T16:26:56.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache."},{"lang":"es","value":"Novell Access Manager v3 SP4 no expira adecuadamente sesiones certificadas X.509, lo cual permite a atacantes físicamente próximos obtener una sesión validada utilizando un proceso del navegador web de la víctima que continúa enviando el sessionID SSL original y válido, relacionado con la incapacidad de Apache Tomcat de limpiar entradas de la caché de SSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:access_manager:3:sp4:*:*:*:*:*:*","matchCriteriaId":"342C4B38-A879-4C02-BEEF-E151A45CAD4D"}]}]}],"references":[{"url":"http://osvdb.org/49737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7001788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32121","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/49737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7001788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6723","sourceIdentifier":"cve@mitre.org","published":"2009-04-14T16:26:56.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator."},{"lang":"es","value":"TurnkeyForms Entertainment Portal v2.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo enviando la cookie adminLogged al administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:entertainment_portal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6E9C1589-AACD-4701-AB1A-A609046E38A5"}]}]}],"references":[{"url":"http://osvdb.org/49749","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32174","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46422","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7028","source":"cve@mitre.org"},{"url":"http://osvdb.org/49749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6724","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:51.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.pl in Perl Nopaste 1.0 allows remote attackers to inject arbitrary web script or HTML via the language parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.pl in Perl Nopaste 1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"language\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_matthai:pnopaste:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7EAD08FA-16CC-447D-ABAF-69ED548C6A6D"}]}]}],"references":[{"url":"http://osvdb.org/51010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33251","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=237095&release_id=649688","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33036","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47627","source":"cve@mitre.org"},{"url":"http://osvdb.org/51010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=237095&release_id=649688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6725","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:51.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) index.php in a mythings page (mythings.php) and (2) the users page in admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en CMScout 2.06 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" a (1) index.php en una página mythings (mythings.php) y (2) a la página users en admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmscout:cmscout:2.06:*:*:*:*:*:*:*","matchCriteriaId":"F6426CD8-D79C-428B-871F-ED416DE34DB6"}]}]}],"references":[{"url":"http://osvdb.org/51118","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cmscout.co.za/index.php?page=news&id=30","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33068","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47659","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7625","source":"cve@mitre.org"},{"url":"http://osvdb.org/51118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cmscout.co.za/index.php?page=news&id=30","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6726","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:51.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bit parameter to (1) admin.php and (2) index.php, different vectors than CVE-2008-3415."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en CMScout 2.06 ,cuando register_globals está activado, permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro \"bit\" a (1) admin.php and (2) index.php, vectores diferentes que en CVE-2008-3415."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmscout:cmscout:2.06:*:*:*:*:*:*:*","matchCriteriaId":"F6426CD8-D79C-428B-871F-ED416DE34DB6"}]}]}],"references":[{"url":"http://osvdb.org/51119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cmscout.co.za/index.php?page=news&id=30","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33068","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47660","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7625","source":"cve@mitre.org"},{"url":"http://osvdb.org/51119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cmscout.co.za/index.php?page=news&id=30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6727","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Ultimate PHP Board (UPB) v2.2.2, v2.2.1 y versiones 2.x anteriores. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de la cabecera HTTP User-Agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myupb:upb:2.0:b1:*:*:*:*:*:*","matchCriteriaId":"C52D7ADE-288F-4A74-B311-23D8B3E45446"},{"vulnerable":true,"criteria":"cpe:2.3:a:myupb:upb:2.1.1b:*:*:*:*:*:*:*","matchCriteriaId":"0836F87D-0336-4F80-A7CA-950CA3E4D265"},{"vulnerable":true,"criteria":"cpe:2.3:a:myupb:upb:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"49FC94B1-2913-4E8F-A4F6-26E411BF7D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:myupb:upb:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2BA7955D-C569-4B70-B195-FC903A15F1C9"}]}]}],"references":[{"url":"http://osvdb.org/51011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47607","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7607","source":"cve@mitre.org"},{"url":"http://osvdb.org/51011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6728","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el modulo \"Sections\" de PHP-Nuke probablemente en versiones anteriores a v8.0. Permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"artid\" de una acción printpage solicitada a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","versionEndIncluding":"7.9","matchCriteriaId":"5BC56275-9F65-43B6-A091-68FB42968C2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3CA1307E-34B7-4BC1-BBA8-59347330B714"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE7B61B-172B-499A-B7E9-BA6EF4BEADCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1BF21F07-5A08-45BE-BB72-4B48017B76FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C4065BB3-A189-4D68-A514-7160C532629A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D18BDCD3-C7E8-4D73-BA36-3A4D245DBE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"31A013B9-9A29-4CBE-A6AE-DC83F34BB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.4:*:*:*:*:*:*:*","matchCriteriaId":"2831357B-2252-458A-9ED9-40AE0831FE93"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9FDA9804-C61A-4172-B3B3-B2E8AC0D4B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:5.6:*:*:*:*:*:*:*","matchCriteriaId":"F42BD4C3-71D7-48E2-B3A4-7B1975982D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"34D84C9E-B703-4285-BE2E-CBF17BA28C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"EDEA81E1-E9E9-45F6-8C61-D496888451E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F2D294C7-FBE3-4D3A-A497-29C3EF6615DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"99F22ADA-E201-44CE-8EE9-FEB4170E16C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:6.8:*:*:*:*:*:*:*","matchCriteriaId":"D714A77C-1771-4648-A68C-D34477B57AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"A365BB29-7E19-42E6-AA70-7951F939C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D5E8572B-43BE-4068-929F-2B6FAA9EF959"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F8882C59-6721-4925-8EB6-1C54455BD03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6F6110-F77B-42CE-BAD0-0AEAFC04E982"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"017A5AD3-CD1C-41E0-B53D-3881C31F7463"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.4:*:*:*:*:*:*:*","matchCriteriaId":"68BA9153-537A-4CC5-A3E8-DE4FCF49EB52"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.5:*:*:*:*:*:*:*","matchCriteriaId":"C7481433-4DFA-4D32-BA93-FBEAC37D8D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.6:*:*:*:*:*:*:*","matchCriteriaId":"85535C0D-C858-4AF8-8350-EFBF74609CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7CC4F979-7F10-4F0D-96AD-5EE88E437897"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:7.8:*:*:*:*:*:*:*","matchCriteriaId":"3A3B4A35-6019-468E-89FA-BC2EEADB7D31"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123073887531700&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/52033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499656/100/0/threaded","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123073887531700&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/52033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499656/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6729","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en password.php de PHPmotion v2.1 y anteriores. Permiten a usuarios remotos secuestrar (hijack) la autenticación de usuarios aleatorios a través de las peticiones que modifican la cuenta de usuario mediante (1) el parámetro \"password\" (contraseña) o (2) el parámetro \"email_address\" (dirección de e-mail)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"CD84931B-60C2-4926-A1C2-D2975EAB99FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5BE53E-218B-47E9-A6B1-99BEE23CE9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmotion:phpmotion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"AE3A4CB2-5934-4333-9FFE-D4728B62F0D1"}]}]}],"references":[{"url":"http://osvdb.org/50999","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47585","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7557","source":"cve@mitre.org"},{"url":"http://osvdb.org/50999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6730","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en admin/usercheck.php de FlexPHPLink Pro vPro 0.0.6 y 0.0.7; cuando magic_quotes_gpc está deshabilitada, permite a usuarios remotos ejecutar comandos SQL de su elección a través de (1) el parámetro \"checkuser\" (nombre de usuario) o (2) el parámetro \"checkpass\" (contraseña)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphplink:0.0.6:*:pro:*:*:*:*:*","matchCriteriaId":"42E80016-8A42-4568-9025-36C7C3CC1607"},{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphplink:0.0.7:*:pro:*:*:*:*:*","matchCriteriaId":"D388B4CA-8950-4B4F-BCD1-247B12ED9DBF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53188","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47644","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6731","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the renamed file in linkphoto/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en submitlink.php de FlexPHPLink Pro v0.0.7 que permite a usuarios remotos ejecutar código PHP de su elección mediante la subida de un fichero con extensión de fichero ejecutable y accediendo a él mediante una petición directa al fichero renombrado en el directorio linkphoto/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphplink:0.0.7:*:pro:*:*:*:*:*","matchCriteriaId":"D388B4CA-8950-4B4F-BCD1-247B12ED9DBF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53187","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33034","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47614","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6732","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via \"newly generated paths.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el objeto \"Language skin\" en DotNetNuke anteriores a v4.8.4 permite a atacantes remotos inyectar secuencias de comando web o HTML de forma arbitraria a través de \"newly generated paths.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.3","matchCriteriaId":"E31C3AB7-C4B4-4F81-9385-4932B49C51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*","matchCriteriaId":"FE94AE61-4CA4-48B5-BB08-D808CF750CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"72A73BE5-6668-484E-8E7C-16E839E98882"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1681BA4-9C05-45DF-B51B-D89633EB0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"884BA1BF-BD03-4437-A02C-825B59634A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C627743E-9B8B-431B-A513-89CBF7C1E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"677B54A1-6945-459F-9ADA-D6D9E89F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C7059E6A-4A54-4364-8977-400C18905D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"}]}]}],"references":[{"url":"http://secunia.com/advisories/30617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno20/tabid/1167/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46322","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29686","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno20/tabid/1167/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6733","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la pagina de manejo de errores en DotNetNuke v4.6.2 hasta la v4.8.3  permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de el parámetro \"querystring\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno18/tabid/1165/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29686","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43026","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno18/tabid/1165/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6734","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Public/index.php en Keller Web Admin CMS v0.94 Pro permite a atacantes remotos incluir y ejecutar ficheros locales de forma arbitraria a traves de .. (punto punto) en el parámetro \"action\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keller_web_admin:kwa:0.94:*:pro:*:*:*:*:*","matchCriteriaId":"23602350-8FF5-4A78-9E03-39162B4B8446"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43373","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5940","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5956","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6735","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the sLanguage cookie."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en qc/index.php en ThaiQuickCart v3 permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en la cookie \"sLanguage\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thaiquickcart:thaiquickcart:3:*:*:*:*:*:*:*","matchCriteriaId":"3F93298D-6BE8-4BBD-9A93-377B56625B93"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29774","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43143","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6736","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php.  NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation."},{"lang":"es","value":"Flat Calendar v1.1 no restringe adecuadamente el acceso a sus funciones administrativas, lo que permite a atacantes remotos (1) añadir nuevos eventos a través de calAdd.php que es accesible desde admin/add.php, o (2) borrar eventos a través de admin/deleteEvent.php. NOTA: Esta es únicamente una vulnerabilidad cuando el administrador no sigue las recomendación de la documentación de seguridad del producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:circulargenius:flat_calendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1EB90A-88E6-4CCD-A32D-879E185611F9"}]}]}],"references":[{"url":"http://osvdb.org/51506","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493278/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29662","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43039","source":"cve@mitre.org"},{"url":"http://osvdb.org/51506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493278/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6737","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information."},{"lang":"es","value":"Crysis v1.21 y anteriores permite a atacantes remotos obtener información sensible del jugador como su IP mediante el envío de un paquete \"keyexchange\" sin un paquete previo \"join\", lo que produce que Crysis envíe un paquete desconectado incluyendo información del log no relacionada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ea:crysis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.21","matchCriteriaId":"6727C27C-0A21-40BB-AE96-8F056CE6FA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ea:crysis:1.1:*:*:*:*:*:*:*","matchCriteriaId":"359F6C10-9244-4656-96C0-C4880D925A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ea:crysis:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C4799ADB-A7EA-4044-AB66-9DC9330BC2BF"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/crysislog-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/46260","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30706","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29720","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43087","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/crysislog-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6738","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_access cookie to 1."},{"lang":"es","value":"MyShoutPro v1.2 permite a atacantes remotos evitar la autenticación y conseguir privilegios de administrador mediante el ajuste de la cookie \"admin_access\" a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_girling:myshoutpro:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F1A2F675-DF67-40CA-BD6B-DFBBF0E2366F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29780","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43145","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5845","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6739","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request."},{"lang":"es","value":"La secuencia de comandos Todd Woolums ASP Download management no exige autenticación para setupdownload.asp, lo que permite a atacantes remotos conseguir privilegios de administrador a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toddwoolums:asp_download:1.03:*:*:*:*:*:*:*","matchCriteriaId":"EAC2E2D9-27EF-460D-ACBA-4F93832BB260"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6740","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the _settings[pluginpath] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en html/admin/modules/plugin_admin.php en HoMaP-CMS v0.1 permite a atacantes remotos ejecutar código PHP de forma arbitraria a través de una URL en el parámetro \"_settings[pluginpath]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:homap:homap:0.1:*:*:*:*:*:*:*","matchCriteriaId":"36D84EFE-A107-477A-BE86-C7165F630C18"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29877","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5902/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5902/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6741","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the db_character_set parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a \"\\\" (backslash) sequence that does not quote the \"'\" (single quote) character, as demonstrated via a manlabels action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Load.php en Simple Machines Forum (SMF) v1.1.4 y anteriores permite a atacantes remotos ejecutar comandos SQL de forma arbitraria mediante el ajuste de el parámetro \"db_character_set\" a caracteres multibyte tal como big5, lo que produce que la función de PHP \"addslashes\" produzca una secuencia \"\\\" (barra invertida) no la comilla \"'\" (comilla simple), como se demostró a través de la acción \"manlabels\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"EFF60548-26B3-4213-BC8A-D8CD0D4B76C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"549FC613-BB72-42FD-AD04-0FAC2FC2A942"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C1063E88-7F6D-4E42-B196-7292320C4F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1F6A0089-3041-45E4-A1BB-F35A9039A12B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E336DF9F-8978-44FD-9C1D-86F2C0E3AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8053CE57-37BF-4468-AD24-ECB1356779AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"B3A7489D-17BA-4F95-BF8E-440C73A91E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"D396FF37-AC26-47E3-B5FB-E6A792494B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"638DD0BD-6DE4-421A-93A5-642BBB6AE1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C381B85E-5A0F-4E32-A729-AB1E4A44A8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9DEB09-1A83-4AE0-B357-249E8C1F7988"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_forum:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2FBA0C02-402C-4E96-AADB-B0A1C397B982"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29734","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43118","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6742","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a download action and a large fs value."},{"lang":"es","value":"Foxy P2P software permite a atacantes remotos producir una denegación de servicio (agotamiento de memoria) a través de un URI de foxi con una descarga y un valor \"fs\" largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gofoxy:foxy:-:*:*:*:*:*:*:*","matchCriteriaId":"11E69B7D-BC33-461E-B7B6-75B3C062030A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29776","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43146","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5843","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6743","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T21:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and performing a direct request to (1) delete.php, (2) edit-submit.php, (3) edit.php, (4) submit.php, and (5) update.php, which bypasses the security check that is performed by verify.php."},{"lang":"es","value":"RSMScript v1.21 permite a atacantes remotos saltar la autenticación y obtener permisos de administrador ajustando la \"cookie\" de verificación a un valor arbitrario y realizando un petición directa a (1) \"delete.php\", (2) \"edit-submit.php\", (3) \"edit.php\", (4) \"submit.php\", y (5) \"update.php\", permitiendo saltar el control de seguridad realizado por \"verify.php\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shock-therapy:rsmscript:1.21:*:*:*:*:*:*:*","matchCriteriaId":"0DA61FD8-5FDC-4D32-83AA-F27581A2D476"}]}]}],"references":[{"url":"http://osvdb.org/50802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47451","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7497","source":"cve@mitre.org"},{"url":"http://osvdb.org/50802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6744","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Cybozu Office v6, Cybozu Dezie anteriores a v6.0(1.0), y Cybozu Garoon v2.0.0 hasta la v2.1.3 permite a atacantes remotos secuestrar la autenticación de victimas inespecíficas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:*:*:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"BEF18E01-4AC8-42D8-A6C5-C6D43975E591"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2AA522EF-30FD-4084-90CE-53281588032B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"801F2F15-F3A3-4322-8431-30D60DF100A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1A7FF28F-A677-41C7-9A24-EA25FA122319"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"85989F0A-8913-4BC8-ABD5-113C5E42C9A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"594992A0-B9B0-4986-AC14-E17F9D9697AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"171FF417-00A7-4404-99EA-029B1574F724"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5801F2B2-523A-47C9-A21A-625357961199"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E6DB31B6-C2B0-432B-B0EC-EC3A0218E818"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6A804339-9D42-4914-850D-A3B15BDBE8CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"998A4F76-9945-4F75-AF15-90409F210B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_garoon:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F84B0A2D-C60F-41DB-93B3-E3896543A0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_office:6:*:*:*:*:*:*:*","matchCriteriaId":"A0B6B282-E664-4629-B028-C04CAB527D61"}]}]}],"references":[{"url":"http://cybozu.co.jp/products/dl/notice/detail/0016.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cybozu.co.jp/products/dl/notice/detail/0018.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18405927/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/46575","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43438","source":"cve@mitre.org"},{"url":"http://cybozu.co.jp/products/dl/notice/detail/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cybozu.co.jp/products/dl/notice/detail/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN18405927/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6745","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action."},{"lang":"es","value":"index.php en BlogPHP v2.0 permite a atacantes remotos conseguir privilegios de administrador a través de un parámetro \"email\" manipulado en la acción \"register2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogphp:blogphp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B791B20C-7AE9-41C2-9C90-1E3A01EA9998"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43275","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5909","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6746","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la visualización de un contacto en Turba Contact Manager H3 antes de 2.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el nombre del contacto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"45D61822-21E8-4A22-9201-4ED7104F24A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C1B743CB-49C1-4D74-BF47-EE969A3B3314"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"759122B2-A78E-487F-B169-D8CBAF694E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C9538A1D-FC8D-4809-A22C-153070B90858"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.0:*:*:*:*:*:*:*","matchCriteriaId":"313E4D5E-D8BB-4E89-A15B-2243CFD80F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"D123373E-BC16-4A32-B278-483CB05B57E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A1093122-42C0-4948-B7E3-CF69AFE23A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.2:*:*:*:*:*:*:*","matchCriteriaId":"07FF05F6-274D-4F52-9924-2AED5FB57D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4CC970E4-DD4C-4F73-81ED-AB3BA2035169"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"308657CE-8112-4B71-B279-71AE5C2656B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A10B7CE6-75F3-4A9D-84FC-B3608D458C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1468FA88-0236-4AC2-8005-771BAC0CADB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"2CDCB4BF-EFCF-4C9E-BB3C-CBF609980A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0:*:*:*:*:*:*:*","matchCriteriaId":"265F8139-BDF8-457C-A3B6-041AFA14AEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4732BCD6-E444-4054-87E6-EFDE065F7582"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"D3885FB2-2D6A-47EE-9156-C5C44897E75B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"654A7D44-2998-4EB5-9D42-C9B0713EB970"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"CC218B23-C87A-488B-84E6-8B97D58B7660"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"89D04A62-87CA-48FD-B28C-9AE3556EF7AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0FA59046-8729-4ACA-BD56-63F04B85CCE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"79E44CB2-9960-4A3D-8B38-1A069FBC89D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C29B457A-E80B-4EC5-9DFF-DF3A5D0CC41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2375DE2-DBAE-4275-B03A-4A0E6958DD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"A1A5388B-2310-4C44-9EDF-E2EDDB8698D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E8E5A3AF-B68D-4A8A-86C6-581DDBFEBA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A8C60703-7863-4C31-8F39-9B0E77F3525A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BD583BAE-8123-40B9-8A68-96725A86EBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"55DE9D91-F494-4946-B6AD-91C27B5D3894"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE9CA86E-B688-495F-8233-69632B56E1FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"56B99A86-A8A6-474E-B54F-9F010FFE7C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"88F73B3B-DB27-40F9-BCC2-E5ACC10F2A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4035BF4B-64F9-4A0D-82D0-99276B8B7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6D808D3F-9332-4667-838C-CD545EDAD37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C26797E3-7181-4519-8D83-B92801BDAB9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4D761FAA-35F5-4570-8FAC-35D956CF6785"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:alpha:*:*:*:*:*:*","matchCriteriaId":"39F8B975-056E-438C-9502-BFA3025C5CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"6E649CA6-3EBD-40A4-860F-08141F8FB9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:rc2:*:*:*:*:*:*","matchCriteriaId":"E360D4DD-DD33-4B44-AA59-6AFB26B4F5E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:rc3:*:*:*:*:*:*","matchCriteriaId":"CE8BF387-55C6-4EEA-9989-7F3DB090312C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:rc4:*:*:*:*:*:*","matchCriteriaId":"80A86199-3908-4084-B4DA-60CB7260C548"}]}]}],"references":[{"url":"http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.181.2.165&r2=1.181.2.170&ty=h","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000414.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29743","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43098","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.181.2.165&r2=1.181.2.170&ty=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6747","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"dotProject en versiones anteriores a v2.1.2 no restringe adecuadamente el acceso a las paginas de administración lo que permite a atacantes remotos conseguir privilegios. NOTA: Algunos de estos detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"59F53855-341B-425B-B28D-A25C6A758D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:0.2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"369174C6-2D7C-44EC-9021-B8DDB1CA753B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3862952F-9DE1-471A-A895-A1AFCA3C40F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"22FFB14E-3C84-4AAE-A04D-221DCDE0F47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A2AA0527-4CB6-48BE-AA09-82952570369D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"71C66B24-724C-416F-8678-85A50D70522B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"935791D0-FFC0-4774-B00F-F83634BA4FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.1:*:*:*:*:*:*:*","matchCriteriaId":"792AA210-2C58-48DE-B2DA-4E58306A339E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"947D5000-870C-4F49-A6BE-68D7E93245AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotproject:dotproject:2.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1A2558DD-A897-48BA-8706-C6790424732D"}]}]}],"references":[{"url":"http://osvdb.org/46143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30470","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=21656&release_id=616346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29679","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43019","source":"cve@mitre.org"},{"url":"http://osvdb.org/46143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=21656&release_id=616346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6748","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI."},{"lang":"es","value":"Una vulnerabilidad de inyección de Eval en Megacubo v5.0.7 permite a atacantes remotos inyectar y ejecutar código PHP arbitrario a través de una acción de jueg en una URI mega://"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:megacubo:megacubo:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"82AC0E99-5A09-4F5C-AD6C-57D8E2232729"}]}]}],"references":[{"url":"http://osvdb.org/51106","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_megacubo.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499654/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47697","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7623","source":"cve@mitre.org"},{"url":"http://osvdb.org/51106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_megacubo.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499654/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6749","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) checkuser and (2) checkpass parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/usercheck.php en FlexPHPDirectory v0.0.1, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) CheckUser y (2) checkpass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpdirectory:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AADE4157-3C0F-447A-B70A-26DD29262CCD"}]}]}],"references":[{"url":"http://osvdb.org/51302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7614","source":"cve@mitre.org"},{"url":"http://osvdb.org/51302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6750","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photo/."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin restricciones en add.php en FlexPHPDirectory v0.0.1 permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en photo/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexphpdirectory:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AADE4157-3C0F-447A-B70A-26DD29262CCD"}]}]}],"references":[{"url":"http://osvdb.org/51303","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47641","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7614","source":"cve@mitre.org"},{"url":"http://osvdb.org/51303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6751","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in settings/my_photo."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin rstricciones en index.php del plugin de Clon de Twitter (TClone) para ReVou Micro Blogging permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable, para, a continuación, acceder a él a través de una solicitud directa al archivo settings/my_photo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:revou:revou:*:*:*:*:*:*:*:*","matchCriteriaId":"B9275E4A-D31A-4B07-8D51-543A07C405A4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:revou:tclone:*:*:*:*:*:*:*:*","matchCriteriaId":"55C5971F-459D-43B9-BA59-7E9E79CC2F6F"}]}]}],"references":[{"url":"http://osvdb.org/51706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33247","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32954","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47500","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7531","source":"cve@mitre.org"},{"url":"http://osvdb.org/51706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6752","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which allows remote attackers to change the administrator's password and gain privileges via a direct request with modified newpass1 and newpass2 parameters in a Change operation."},{"lang":"es","value":"adminlogin/password.php en el plugin de Clon de Twitter (TClone) para ReVou Micro Blogging no comprueba la contraseña original antes de cambiar las contraseñas, lo que permite cambiar , a atacantes remotos, la contraseña del administrador y obtener privilegios a través de una solicitud directa con unos parametros newpass1 y newpass2 modificados en una operación de cambio de contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:revou:revou:*:*:*:*:*:*:*:*","matchCriteriaId":"B9275E4A-D31A-4B07-8D51-543A07C405A4"}]}]}],"references":[{"url":"http://osvdb.org/51705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33247","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34851","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7523","source":"cve@mitre.org"},{"url":"http://osvdb.org/51705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6753","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to AjaxUniqueTextField."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en SilverStripe anterior a v2.2.2 permite a atacantes remotos ejecutar comandos SQL a su elección a través de vectores no especificados relacionados con AjaxUniqueTextField."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"C9782624-2EF6-4F59-99F7-CF89C1C8583B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D93D92D9-A3CC-46D0-8539-587F2B3A3A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6330F446-45E8-4C3E-8585-4BAA9385DFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3AC23F5D-AC9E-4F83-95B2-CEF6E546E732"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"77480CB4-04B8-4934-AB1D-B61BB262CD40"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3D735517-B50D-4C4B-A95F-E48626AB5671"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA1CDF7-D273-4044-94AB-3295EAD98AD0"}]}]}],"references":[{"url":"http://silverstripe.org/archive/show/43794","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/13/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34852","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50368","source":"cve@mitre.org"},{"url":"http://silverstripe.org/archive/show/43794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6754","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky."},{"lang":"es","value":"El complemento Personal Sticky Threads v1.0.3c para vBulletin permite leer , a los usuarios autenticados, el título, autor, y las páginas de un hilo arbitrario activando un sticky personal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*","matchCriteriaId":"4628EC50-A591-4A9B-8E62-70D8A0865CCD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mephisteus:the_personal_sticky_threads:1.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"3657E585-711F-4546-AA5D-1C87384717D0"}]}]}],"references":[{"url":"http://osvdb.org/51205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499562/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33017","source":"cve@mitre.org"},{"url":"http://osvdb.org/51205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499562/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6755","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script."},{"lang":"es","value":"ZoneMinder v1.23.3 en Fedora 10 establece la propiedad de /etc/zm.conf a la cuenta de usuario de apache, y establece los permisos a 0600, lo cual facilita a los atacantes remotos la modificación de este archivo para acceder a él a través de un archivo de secuencias de comandos PHP (1) o CGI (2)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.3:*:*:*:*:*:*:*","matchCriteriaId":"07DFFF95-A7C4-4C99-A9FE-640AD078B872"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"BA70E035-8475-4046-ABD7-5AE59F874EBA"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=476529","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50324","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00204.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=476529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-6756","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file."},{"lang":"es","value":"ZoneMinder v1.23.3 en Gentoo Linux utiliza  permisos 0644 para el archivo /etc/zm.conf, lo que permite a los usuarios locales obtener el usuario y contraseña de la base de datos mediante la lectura de este archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoneminder:zoneminder:1.23.3:*:*:*:*:*:*:*","matchCriteriaId":"07DFFF95-A7C4-4C99-A9FE-640AD078B872"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=250715","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50325","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=250715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6757","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_search parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en manuals_search.php en ViArt Shop (alias Shopping Cart) v3.5 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro manuals_search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.5:*:*:*:*:*:*:*","matchCriteriaId":"CC790AD6-CFAB-48AD-99BB-2845D713389B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53284","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33043","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6758","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en cart_save.php en Viart Shop (alias Shopping Cart) v3.5 permite a atacantes remotos secuestrar la autenticación de usuarios a su elección para las solicitudes que conducen ataques persistentes de ejecución de secuencias de comandos en sitios cruzados(XSS) a través del parámetro cart_name en una acción de guardar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.5:*:*:*:*:*:*:*","matchCriteriaId":"CC790AD6-CFAB-48AD-99BB-2845D713389B"}]}]}],"references":[{"url":"http://osvdb.org/51029","source":"cve@mitre.org"},{"url":"http://osvdb.org/53283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6759","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_search.php, which reveals the installation path in an error message."},{"lang":"es","value":"Viart Shop (alias Shopping Cart) v3.5 permite a atacantes remotos obtener información sensible a través de una URL en el parámetro POST_DATA a manuals_search.php, el cual revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.5:*:*:*:*:*:*:*","matchCriteriaId":"CC790AD6-CFAB-48AD-99BB-2845D713389B"}]}]}],"references":[{"url":"http://www.osvdb.org/53281","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/53281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6760","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter."},{"lang":"es","value":"Viart Shop (alias Shopping Cart) v3.5 permite a atacantes remotos obtener información sensible a través de una acción añadir y salvar no autenticada para un carro de compra en cart_save.php, lo cual revela los nombres de tabla de SQL en un mensaje de error, relacionado con el código que pierde el control a falta de un parámetro user_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.5:*:*:*:*:*:*:*","matchCriteriaId":"CC790AD6-CFAB-48AD-99BB-2845D713389B"}]}]}],"references":[{"url":"http://www.osvdb.org/53282","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/53282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6761","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject arbitrary PHP code into const.inc.php via the installdbname parameter (aka the Database Name field).  NOTE: the installation instructions specify deleting admin/install.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin/install.php en Flexcustomer v0.0.6 podría permitir a atacantes remotos inyectar código PHP arbitrario en const.inc.php a través del parámetro installdbname (alias Database Name field). NOTA: las instrucciones de instalación especifican la eliminación de admin/install.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:china-on-site:flexcustomer0.0.6:*:*:*:*:*:*:*:*","matchCriteriaId":"26A43C4E-9F54-478D-B661-9FCF2A17313B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47652","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7622","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6762","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en wp-admin/upgrade.php en WordPress, probablemente v2.6.x, permite a atacantes remotos redirigir a los usuarios a sitios Web a su elección y llevar a cabo ataques de phishing a través de una URL en el parámetro backto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/52213","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50382","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/52213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6763","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username."},{"lang":"es","value":"login2.php en Silentum LoginSys v1.0.0 permite a atacantes remotos eludir la autenticación y obtener acceso a una cuenta a su elección mediante la creación de la cookie logged_in de la cuenta de el usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hypersilence:silentum_loginsys:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4EF44BE6-3D25-4E20-8622-3A6518ED1B70"}]}]}],"references":[{"url":"http://secunia.com/advisories/31801","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47941","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47616","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6764","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login.php en Silentum LoginSys v1.0.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hypersilence:silentum_loginsys:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4EF44BE6-3D25-4E20-8622-3A6518ED1B70"}]}]}],"references":[{"url":"http://maximilianosoler.com.ar/vulns/XSS-Silentum_LoginSys.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31801","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47940","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31055","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44925","source":"cve@mitre.org"},{"url":"http://maximilianosoler.com.ar/vulns/XSS-Silentum_LoginSys.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6765","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter."},{"lang":"es","value":"Viart Shop (alias Shopping Cart) v3.5 permite a atacantes remotos acceder al contenido de un carrito de la compra a su elección a través de un parámetro cart_name modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.5:*:*:*:*:*:*:*","matchCriteriaId":"CC790AD6-CFAB-48AD-99BB-2845D713389B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6766","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests."},{"lang":"es","value":"cart_save.php en Viart Shop (alias Shopping Cart) v3.5 permite a atacantes remotos provocar una denegación de servicio (exceso de carritos de la compra) a través de una avalancha de solicitudes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viart:viart_shop:3.5:*:*:*:*:*:*:*","matchCriteriaId":"CC790AD6-CFAB-48AD-99BB-2845D713389B"}]}]}],"references":[{"url":"http://www.osvdb.org/53285","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021497","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/53285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6767","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request."},{"lang":"es","value":"wp-admin/upgrade.php en WordPress, probablemente v2.6.x, permite a atacantes remotos actualizar la aplicación, y posiblemente causar una denegación de servicio (caída de la aplicación), a través de una solicitud directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50384","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6768","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en admin/editor/images.php en K&S Shopsoftware  permite a atacantes remotos ejecutar código PHP arbitrario mediante la subida de un archivo con una extensión ejecutable, luego accediendo a él a través de una solicitud directa a el archivo en images/upload/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shopsystem-forum:k\\&s_shopsoftware:*:*:*:*:*:*:*:*","matchCriteriaId":"B821F150-BAA8-4C88-9C66-7393A45DFA7E"}]}]}],"references":[{"url":"http://osvdb.org/51210","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32888","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47424","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7500","source":"cve@mitre.org"},{"url":"http://osvdb.org/51210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6769","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en upload.php en YourPlace v1.0.2 y anteriores permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable, luego accediendo a él a través de una solicitud directa al archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"856DD089-E3A0-408A-8C9F-0A587D0AE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"77583454-EBFD-451B-9632-3503B1F45D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DE0839B7-9337-425E-AEA3-3F802D3BBDD9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47569","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6770","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to a database containing user credentials via a direct request for users.txt."},{"lang":"es","value":"YourPlace v1.0.2 y anteriores almacenan información sensible bajo la el directorio raíz web con insuficiente control de acceso, lo cual permite ataques remotos a una base de datos con las credenciales de usuario a través de una petición directa a users.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"856DD089-E3A0-408A-8C9F-0A587D0AE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"77583454-EBFD-451B-9632-3503B1F45D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DE0839B7-9337-425E-AEA3-3F802D3BBDD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47565","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6771","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user/uploads/phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"YourPlace v1.0.2 y anteriores permite a atacantes remotos obtener información sensible del sistema a través de una solicitud directa a user/uploads/phpinfo.php, el cual llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"856DD089-E3A0-408A-8C9F-0A587D0AE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"77583454-EBFD-451B-9632-3503B1F45D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DE0839B7-9337-425E-AEA3-3F802D3BBDD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47563","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6772","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user."},{"lang":"es","value":"login/register_form.php en YourPlace v1.0.2 y anteriores no comprueba que un nombre de usuario ya existe cuando se crea una nueva cuenta, lo cual permite a atacantes remotos eludir las restricciones de acceso al registrar una nueva cuenta de usuario con el nombre de usuario del usuario objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"856DD089-E3A0-408A-8C9F-0A587D0AE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"77583454-EBFD-451B-9632-3503B1F45D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DE0839B7-9337-425E-AEA3-3F802D3BBDD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47564","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6773","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the (1) fav1_url, (2) fav1_name, (3) fav2_url, (4) fav2_name, (5) fav3_url, (6) fav3_name, (7) fav4_url, (8) fav4_name, (9) fav5_url, or (10) fav5_name parameters."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en user/internettoolbar/edit.php en YourPlace v1.0.2 y anteriores permite a usuarios remotos autenticados ejecutar código PHP a su elección en user/internettoolbar/index.php a través de los parámetros (1) fav1_url, (2) fav1_name, (3) fav2_url, (4) fav2_name, (5) fav3_url, (6) fav3_name, (7) fav4_url, (8) fav4_name, (9) fav5_url, o (10) fav5_name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"856DD089-E3A0-408A-8C9F-0A587D0AE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"77583454-EBFD-451B-9632-3503B1F45D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DE0839B7-9337-425E-AEA3-3F802D3BBDD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47562","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6774","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"internettoolbar/edit.php en YourPlace v1.0.2 y anteriores no termina la ejecución cuando un usuario no válido es detectado, lo cual permite a atacantes remotos eludir las restricciones y editar la configuración de la barra de herramientas a través de un nombre de usuario no válido. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"856DD089-E3A0-408A-8C9F-0A587D0AE7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"77583454-EBFD-451B-9632-3503B1F45D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:peterselie:yourplace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DE0839B7-9337-425E-AEA3-3F802D3BBDD9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6775","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consumption, and connectivity loss) via a flood of vCards to UDP port 9204."},{"lang":"es","value":"HTC Touch Pro y HTC Touch Cruise vCard permite a atacantes remotos causar denegación de servicio (consumo de CPU, consumo de SMS, y pérdida de conectividad) a través de una avalancha de vCards a el puerto UDP 9204."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:htc:touch_cruise:*:*:*:*:*:*:*:*","matchCriteriaId":"85794EE8-A138-4F29-829A-DE2BCE1E8429"},{"vulnerable":true,"criteria":"cpe:2.3:h:htc:touch_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"49A8FB97-96F2-4D48-9C19-7330CDB2460D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0370.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52009","source":"cve@mitre.org"},{"url":"http://www.mseclab.com/index.php?page_id=110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499416/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47497","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0370.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mseclab.com/index.php?page_id=110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499416/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6776","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en viewcomments.php en Scripts For Sites (SFS) EZ Hot or Not permite a atacantes remotos ejecutar comandos SQL a través del parámetro phid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_hot_or_not:*:*:*:*:*:*:*:*","matchCriteriaId":"5761A515-DAAC-4F56-A21D-14699C672F57"}]}]}],"references":[{"url":"http://osvdb.org/49540","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46278","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6914","source":"cve@mitre.org"},{"url":"http://osvdb.org/49540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6777","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a confirm action, the (2) user parameter in a newconfirm action, and (3) reqpwd action to member.php; and the (4) quote parameter in a post action and (5) pid parameter in an edit action to post.php, different vectors than CVE-2005-0413.2 and CVE-2007-6667."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en MyPHP Forum v3.0 y anteriores permiten a atacantes remotos ejecutar comandos SQL a su elección a través de el (1) parámetro id (identificación) en una acción de confirmación, (2) parámetro usuario (user) en una acción newconfirm y (3) acción reqpwd a member.php; y el (4) parámetro quote en una acción post y (5) parámetro pid en una acción edit a post.php, diferentes vectores que en CVE-2005-0413.2 y CVE-2007-6667."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphp:myphp_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"E959C994-642A-4537-91BA-5C28B9F35301"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphp:myphp_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5ED98B7B-A74D-4592-B9E3-E5FC7DA44146"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphp:myphp_forum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"78C9F6E1-5CB3-4880-944B-8F1E96C3050D"}]}]}],"references":[{"url":"http://secunia.com/advisories/28280","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31995","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46238","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6879","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6778","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewfaqs.php en Scripts for Sites (SFS) EZ Auction permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_auction:*:*:*:*:*:*:*:*","matchCriteriaId":"5483D9CC-9680-44DE-B5C8-1D3F7148FBE6"}]}]}],"references":[{"url":"http://osvdb.org/49513","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32036","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46276","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6918","source":"cve@mitre.org"},{"url":"http://osvdb.org/49513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6779","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Sarkilar para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en una acción showcontent (muestra contenido) a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:sarkilar_module:*:*:*:*:*:*:*:*","matchCriteriaId":"283957F8-C91F-4F37-82D1-A388CA57039C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0810-exploits/phpnukesarkilar-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31830","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45992","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0810-exploits/phpnukesarkilar-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6780","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Scripts for Sites (SFS) SFS EZ Affiliate permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id en una acción de listado (list)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_affiliate:*:*:*:*:*:*:*:*","matchCriteriaId":"597E1419-6DFC-455A-84E8-9B43BD6A525A"}]}]}],"references":[{"url":"http://osvdb.org/49554","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6911","source":"cve@mitre.org"},{"url":"http://osvdb.org/49554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6781","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Sites for Scripts (SFS) Gaming Directory permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id en una acción de listado (list)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_gaming_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"1964B489-9AB0-49CA-9B5E-7FA53C1BDB55"}]}]}],"references":[{"url":"http://osvdb.org/49553","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32021","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46250","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6894","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6906","source":"cve@mitre.org"},{"url":"http://osvdb.org/49553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6782","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Sites for Scripts (SFS) EZ Hosting Directory permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id en una acción de listado (list)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_hosting_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"DF25CE7B-2D4C-4E86-94F1-94E1A2019542"}]}]}],"references":[{"url":"http://secunia.com/advisories/32558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49551","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32021","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6905","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6783","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Sites for Scripts (SFS) EZ Home Business Directory permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id en una acción de listado (list)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_home_business_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"F6E66DC1-D14B-49C3-B728-30B775E62346"}]}]}],"references":[{"url":"http://secunia.com/advisories/32558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49552","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32021","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6784","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en directory.php en Scripts For Sites (SFS) EZ Adult Directory permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id en una acción de listado (list)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_adult_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"D5F1119F-81F3-48B3-B4FF-EF4C94D1E0BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32021","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6895","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6785","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en Mini File Host v1.5 permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable,para a continuación acceder a él a través de una solicitud directa al archivo en un directorio sin especificar, como lo demuestra la creación de un archivo name.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galaxyscripts:mini_file_host:1.5:*:*:*:*:*:*:*","matchCriteriaId":"D9E709CE-314B-46CA-BE30-0B54B2824698"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47460","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6786","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read arbitrary files via directory traversal sequences in a pagename argument in the (1) handle_edit and (2) handle_raw functions."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio transversal en geekigeeki.py en GeekiGeeki anterior a v3.0 permitie a atacantes remotos leer ficheros arbitrarios a través de saltos de directorio transversal en un argumento pagename en las funciones (1) handle_edit y (2) handle_raw."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codewiz:geekigeeki:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1747B77-5A58-4E6C-B63A-C855EBC5D6ED"}]}]}],"references":[{"url":"http://secunia.com/advisories/33162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.codewiz.org/wikigit/geekigeeki.git/blobdiff/92e45c3ce9260c69b4201d877c0f2e431024a52e..5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0:/geekigeeki.py","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.codewiz.org/wikigit/geekigeeki.git?a=commit%3Bh=5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50719","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32831","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47375","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.codewiz.org/wikigit/geekigeeki.git/blobdiff/92e45c3ce9260c69b4201d877c0f2e431024a52e..5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0:/geekigeeki.py","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.codewiz.org/wikigit/geekigeeki.git?a=commit%3Bh=5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6787","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en administrator/index.php en Lizardware CMS v0.6.0 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jeremy_powers:lizardware_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.0","matchCriteriaId":"7D1990C6-04A6-4894-9D0D-9756DBDB280F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jeremy_powers:lizardware_cms:0.6.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"095ADA3E-49E9-4D35-B25A-78795218EAD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jeremy_powers:lizardware_cms:0.6.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"97C458E4-2F25-43A2-AEF6-5AD8E35E11F7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47440","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6788","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T19:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en MindDezign Photo Gallery v2.2, cuando está desactivada la opción magic quotes_gpc, permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\" en una acción info en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minddezign:photo_gallery:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5105C020-BE1E-40D6-8BCC-09F37FEC2BAD"}]}]}],"references":[{"url":"http://osvdb.org/49266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31893","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46075","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6819","source":"cve@mitre.org"},{"url":"http://osvdb.org/49266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6789","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T19:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en MindDezign Photo Gallery v2.2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"username\" en una acción de autenticación en el módulo de administración en index.php, es un vector distinto a CVE-2008-6788."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minddezign:photo_gallery:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5105C020-BE1E-40D6-8BCC-09F37FEC2BAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/32358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50344","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6820","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6790","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T19:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php."},{"lang":"es","value":"El módulo administrador en MindDezign Photo Gallery 2.2 permite a atacantes remotos añadir usuarios con derechos administrativos y obtener privilegios mediante la modificación del parámetro nombre de usuario en una acción de editar cuenta sobre index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minddezign:photo_gallery:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5105C020-BE1E-40D6-8BCC-09F37FEC2BAD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31897","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46078","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6820","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6791","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T19:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode field."},{"lang":"es","value":"PumpKIN TFTP Server v2.7.2.0 permite a atacantes remotos provocar una denegación de servicio a través de una petición Write con un campo modo largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:klever:pumpkin:2.7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9C4E1FDD-73E2-4CE6-A006-0BD27B3FF817"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31922","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46122","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6838","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6792","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:03.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by \"Users and Groups\" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks."},{"lang":"es","value":"system-tools-backends anteriores a v2.6.0-1ubuntu1.1 in Ubuntu v8.10, cuando es utilizado por \"Usuarios y Grupos\" en GNOME System Tools, cuentas con contraseña hashes con 3DES y consecuentemente limita la efectividad de la longitud de contraseñas a 8 caracteres, lo que hace más fácil para atacantes dependientes de contexto tener éxito en un ataque de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"A997A76A-22F0-4A67-9D66-97911B8BDDD9"}]}]}],"references":[{"url":"http://osvdb.org/50037","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32566","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-663-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50435","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/287134","source":"cve@mitre.org"},{"url":"http://osvdb.org/50037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-663-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/287134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6793","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:03.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image."},{"lang":"es","value":"La función get_file_type en lib/file_content.php en DFLabs PTK v0.1, v0.2, y v1.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos a través de un intérprete de comandos metacarácter después de una secuencia arg1= en un nombre de fichero con imágenes forenses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:0.1:*:*:*:*:*:*:*","matchCriteriaId":"FDB46681-8F9F-457F-9ACA-72B53CB72720"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:0.2:*:*:*:*:*:*:*","matchCriteriaId":"F09EE1CC-AA88-4853-A4DA-96788A8A9D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9180AA-A197-4BAB-A960-1AC3EF4FAE42"}]}]}],"references":[{"url":"http://osvdb.org/49574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32553","source":"cve@mitre.org"},{"url":"http://www.ikkisoft.com/stuff/LC-2008-07.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498081/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32128","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3020","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46380","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7001","source":"cve@mitre.org"},{"url":"http://osvdb.org/49574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ikkisoft.com/stuff/LC-2008-07.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498081/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6794","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:03.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo directory.php en Scripts For Sites (SFS) EZ Pub Site permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sfs_ez_pub:fsf_ex_pub:*:*:*:*:*:*:*:*","matchCriteriaId":"52B3FCE3-5EB3-49F1-8C14-5CE37D7767DD"}]}]}],"references":[{"url":"http://osvdb.org/49483","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50473","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6923","source":"cve@mitre.org"},{"url":"http://osvdb.org/49483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6795","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:04.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo view_news.php en nicLOR Vibro-School-CMS permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro nID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niclor:vibro-school-cms:*:*:*:*:*:*:*:*","matchCriteriaId":"F0568CC7-B131-4035-BE2D-986D40F467E1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32109","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46348","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6981","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6796","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:04.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo manager/login.php en Pre Projects Pre Real Estate Listings que permite a los atacantes remotos para ejecutar arbitrariamente comandos SQL a través del parámetro usernam1 (también conocido como el campo Admin o el campo Username)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_real_estate_listings:*:*:*:*:*:*:*:*","matchCriteriaId":"B43DFC40-2989-422A-A4A4-143CB10CC898"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32134","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46394","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6797","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"El servidor en Mitel NuPoint Messenger R11 y R3 envía el nombre de usuario y contraseña en texto claro al servidor Exchange, lo que permite a los atacantes remotos obtener información sensibles rastreando la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mitel_nupoint_messenger:r3:*:*:*:*:*:*:*","matchCriteriaId":"64EEFEF4-0274-4EB1-84CE-D0133742E163"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mitel_nupoint_messenger:r11:*:*:*:*:*:*:*","matchCriteriaId":"ECE575AB-6AC1-41F0-8CD7-A7AC89CFFF9B"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/576996","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mitel.com/resources/NuPoint_and_Exchange.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34847","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/576996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mitel.com/resources/NuPoint_and_Exchange.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6798","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field)."},{"lang":"es","value":"Múltiples vulnerabilidad de inyección SQL en el archivo login.php en Pre Projects Pre Real Estate Listings que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro (1) us (también conocido como el campo Username) o (2) el parámetro ps (también conocido como el campo Password)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_real_estate_listings:*:*:*:*:*:*:*:*","matchCriteriaId":"B43DFC40-2989-422A-A4A4-143CB10CC898"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32134","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6799","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to \"7.\""},{"lang":"es","value":"El archivo connection.php en FlashChat versión 5.0.8, permite a los atacantes remotos omitir el mecanismo de filtro de roles y alcanzar privilegios administrativos mediante el establecimiento del parámetro s en \"7\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tufat:flashchat:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0957E342-B5A2-4DAC-AF87-9D3BF78BB803"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122425865430237&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/flashchat-bypass.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32350","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49337","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31800","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45974","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122425865430237&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0810-exploits/flashchat-bypass.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6800","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.203","lastModified":"2023-11-07T02:03:25.440","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is not a security issue.  It was originally created based on one vendor's misinterpretation of an upstream changelog comment that referred to a race condition in the winbind daemon (aka winbindd) in Samba before 3.0.32.  The upstream vendor states: \"The Samba Team sees no way to exploit this race condition by a user of the system or an external attacker. In order to be able to trigger the race condition a privileged user (root) need to intentionally kill a winbind child process and carefully time the killing to trigger the race condition. Although, if the user is already privileged, it can more easily just kill the parent process directly.\"  CVE concurs with the dispute.  Notes: CVE users should not use this identifier"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2008-6801","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados - CSRF - en Vivvo CMS anteriores a v4.0.4, permite a los atacantes remotos secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"73C3A59A-9416-4665-BCA2-808E81600111"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"629A0AD1-3F22-4491-A97C-D55BC77A29F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1B456221-5438-4008-9B0B-9EBC7E429461"}]}]}],"references":[{"url":"http://secunia.com/advisories/32324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49172","source":"cve@mitre.org"},{"url":"http://www.vivvo.net/changelog.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vivvo.net/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6802","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en phPhotoGallery 0.92 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los campos (1) Username y (2) Password. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpexplorer:phphotogallery:0.92:*:*:*:*:*:*:*","matchCriteriaId":"74D596BB-A80D-491D-8B07-531727C976D4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31850","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31850/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31850/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6803","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en diziler.asp en Yigit Aybuga Dizi Portali que permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro id. NOTA: se desconoce el origen de esta información, los detalles han sido obtenidos únicamente de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yigit_aybuga:dizi_portali:*:*:*:*:*:*:*:*","matchCriteriaId":"943DFF12-3C17-451D-A2F9-38B613875F40"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31849","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6804","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies.  NOTE: a third party reports that the vendor disputes the existence of this issue"},{"lang":"es","value":"** CUESTIONADA ** \t\r\nTribiq CMS 5.0.9a beta permite a atacantes remotos eludir el proceso de autenticación y obtener acceso administrativo mediante el establecimiento de las cookies COOKIE_LAST_ADMIN_USER y COOKIE_LAST_ADMIN_LANG . NOTA: Una tercera parte informa que el vendedor niega la existencia de este problema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.9a:beta:*:*:*:*:*:*","matchCriteriaId":"2C2EBACD-38A7-4578-8C19-F22CF572783A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32001","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46237","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6886","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6805","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Mic_Blog v0.0.3, cuando magic_quotes_gpc está desactivado, permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) cat en category.php, (2) user en login.php , y (3 ) site en register.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:micgr:mic_blog:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1BCC5D0B-9E59-4F1B-9854-721E469BAFBB"}]}]}],"references":[{"url":"http://secunia.com/advisories/32310","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49186","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49187","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49188","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31787","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45932","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6764","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6806","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en includes/imageupload.php en 7Shop v1.1 y anteriores permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con extensión ejecutable, accediendo posteriormente a él a través de una petición directa al fichero en images/artikel/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:7-shop:7shop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"8047898C-6601-4C23-B669-95E4581BA839"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-shop:7shop:0.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"F89DE156-9363-4D08-B6B9-DEA141E9F87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:7-shop:7shop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF1E3679-2A0A-46EC-A3A9-9F63D0810562"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31978","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2965","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46184","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/2965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6807","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitrary PHP code via a URL in the xml_dir parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: the lib_dir vector is already covered by CVE-2006-6630."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en ListRecords.php en osprey v1.0a4.1 permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro xml_dir. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente a partir de información de terceros. NOTA: el vector lib_dir ya está cubierta por CVE-2006-6630."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibiblio:osprey:1.0a4.1:*:*:*:*:*:*:*","matchCriteriaId":"694E1E7F-4D7C-44D3-982F-0CEC1E2204F1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31883","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46066","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6808","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en links.php en Scripts for Sites (SFS) EZ Link Directory permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cat_id en una acción list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_link_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"33921116-3F79-4629-8B7B-38E0827858C7"}]}]}],"references":[{"url":"http://osvdb.org/49549","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32034","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6908","source":"cve@mitre.org"},{"url":"http://osvdb.org/49549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6809","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en hotel_habitaciones.php enVenalsur Booking Centre Booking System for Hotels Group v2.01 permite a atacantes remotos ejecutar comandos SQL a través del parámetro HotelID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookingcentre:booking_system_for_hotels_group:2.01:*:*:*:*:*:*:*","matchCriteriaId":"688575CE-17AA-4C97-9992-F4B5A2017B2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32512","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46913","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6810","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allow remote attackers to execute arbitrary SQL commands via the (1) myusername (username) and (2) password parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/checklogin.php en Venalsur Booking Centre Booking System for Hotels Group v2.01 permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) myusername (nombre de usuario) y (2) password. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookingcentre:booking_system_for_hotels_group:2.01:*:*:*:*:*:*:*","matchCriteriaId":"688575CE-17AA-4C97-9992-F4B5A2017B2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/32430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46914","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7263","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6811","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/plugins/wp-shopping-cart/."},{"lang":"es","value":"Vulnerabilidad de carga de archivos sin restricciones en image_processing.php en e-Commerce Plugin v3.4 y anteriores para Wordpress, permite a atacantes remotos ejecutar código de su elección subiendo un fichero con extensión ejecutable, y luego accediendo a él mediante una petición directa al fichero en wp-content/plugins/wp-shopping-cart/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instinct:e-commerce_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"B0FA9732-E1B2-4047-B479-40871584E0A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31982","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46224","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6867","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6812","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el archivo bukutamu.php en phpWebNews versión 0.2 MySQL Edition, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del parámetro det."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surat_kabar:phpwebnews:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2","matchCriteriaId":"AA86478B-793E-4B37-89F0-10E0D009B5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:surat_kabar:phpwebnews:0.1:*:*:*:*:*:*:*","matchCriteriaId":"64EC1995-9002-4852-8F82-9E99FC28A53D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30080","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43683","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6813","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the id_kat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en phpWebNews v0.2 MySQL Edition, permite a atacantes remotos ejecutar comandos SQL de su elección a través de parámetro id_kat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surat_kabar:phpwebnews:0.2:*:mysql:*:*:*:*:*","matchCriteriaId":"CB3B0A6D-770E-41B2-9B4C-2D06B97D392A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30079","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43684","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6814","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direct request to the file in components/com_simpleboard/, a different vulnerability than CVE-2006-3528."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en image_upload.php en el componente SimpleBoard (com_simpleboard) v1.0.1 y anteriores para Mambo permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con extensión ejecutable y un contenido de tipo image/jpeg, para posteriormente acceder al fichero mediante una petición directa en components/com_simpleboard/, una vulnerabilidad diferente a CVE-2006-3528."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"214C71D6-216D-4F39-96E7-E002967A1A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2522DB6-DFCA-4CC9-BC2E-673FE5C0AA84"},{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1845E826-71C0-4E1F-AE6E-D2F3CD8A6C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"995C878F-CEAC-4D55-A9B7-B34B69820ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C0DABF8C-4226-4101-B6BF-DBF50CF7E724"},{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E77F6D71-DDB0-4FC6-8882-2BA75FA3C728"},{"vulnerable":true,"criteria":"cpe:2.3:a:jan_de_graaff:com_simpleboard:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"7B05EA3B-4AEB-45CB-BDEC-6AAA6A1C2492"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31981","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46223","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6815","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup."},{"lang":"es","value":"mykdownload.php en MyKtools v2.4 no requiere autenticación administrativa, lo que permite a atacantes remotos leer una copia de la base de datos haciendo una petición directa, y después enviando una petición sin especificar a la página de descarga de la copia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myktools:myktools:2.4:*:*:*:*:*:*:*","matchCriteriaId":"EA8637B3-B27D-4D61-8E4E-E3EDE3AB5D59"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31950","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46145","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6855","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6816","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php."},{"lang":"es","value":"Eaton MGEOPS Network Shutdown Module en versiones anteriores a la v3.10 Build 13 permite a atacantes remotos ejecutar código de su elección mediante la adición de una acción personalizada al frontend MGE a través de pane_actionbutton.php y, a continuación, ejecutar esta acción a través de exec_action.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:eaton:network_shutdown_module:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1_beta","matchCriteriaId":"0D1299F8-C870-4C68-86D4-A2EB621B4523"},{"vulnerable":true,"criteria":"cpe:2.3:h:eaton:network_shutdown_module:2.6:*:*:*:*:*:*:*","matchCriteriaId":"03D2E515-97B2-4AE3-ABF4-FEBC19F0E39A"},{"vulnerable":true,"criteria":"cpe:2.3:h:eaton:network_shutdown_module:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1234CA53-2CFB-4DDB-86BF-E2640B1862ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:eaton:network_shutdown_module:3.02:*:*:*:*:*:*:*","matchCriteriaId":"AE6590DA-3F79-48A1-AA1D-4FE23EF7C6A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:eaton:network_shutdown_module:3.04:*:*:*:*:*:*:*","matchCriteriaId":"F1A47FAC-2BDF-4117-89F3-9956867CEBAC"}]}]}],"references":[{"url":"http://download.mgeops.com/install/win32/nsm/release_note_nsm_320.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/50051","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nruns.com/security_advisory_eaton_mge_ops_network_shutdown_module_authentication_bypass.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497824/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31933","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46131","source":"cve@mitre.org"},{"url":"http://download.mgeops.com/install/win32/nsm/release_note_nsm_320.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nruns.com/security_advisory_eaton_mge_ops_network_shutdown_module_authentication_bypass.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497824/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6817","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T14:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Mole Group Lastminute Script v4.0 y anteriores almacena contraseñas en texto claro, permitiendo que atacantes locales o remotos dependiendo del contexto obtengan información sensible. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole-group:lastminute_script:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"ECA68A31-C023-4476-B02C-B55C8FD182A6"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43646","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6818","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Mole Group Real Estate Script v1.1 y anteriores almacena contraseñas en texto claro, permitiendo a atacantes locales o remotos dependiendo del contexto obtener información sensible. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mole-group:real_estate_script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E4B4DBAC-13D0-4922-A231-5ABE5FFFFB15"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43645","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6819","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"win32k.sys en Microsoft Windows Server 2003 y Vista, permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores relativos a CreateWindow, TranslateMessage, y DispatchMessage, posibilidad de condición de carrera entre hilos, es una vulnerabilidad distinta a CVE-2008-1084."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*","matchCriteriaId":"60EC86B8-5C8C-4873-B364-FB1F8EFE1CFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://bugtraq.ru/cgi-bin/forum.mcgi?type=sb&b=2&m=152274","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35121","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/35121.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugtraq.ru/cgi-bin/forum.mcgi?type=sb&b=2&m=152274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/35121.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-6820","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T21:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs with \"OS privilege,\" which has unknown impact and attack vectors, a different vulnerability than CVE-2008-3856."},{"lang":"es","value":"El proceso db2fmp  en IBM DB2 v8 anterior a FP17, v9.1 anterior a FP5 y v9.5 anterior a FP2 sobre Windows, se ejecuta con \"privilegios OS\" lo que tiene unos vectores de ataque e impacto desconocidos. Vulnerabilidad distinta de  CVE-2008-3856."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*","matchCriteriaId":"E0252A93-49D5-4C5E-B774-8400526CA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/48149","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30026","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30227","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30228","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31058","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/48149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6821","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T21:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 might allow attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, a different vulnerability than CVE-2007-3676 and CVE-2008-3853."},{"lang":"es","value":"Desbordamiento de búfer en el servidor DAS en IBM DB2 v8 anterior a la FP17, v9.1 anterior a la FP5 y v9.5 anterior a FP2, podría permitir a atacantes ejecutar código de su elección o provocar una denegación de servicio  (caída de aplicación) a través de vectores no especificados. Vulnerabilidad distinta de VE-2007-3676 y CVE-2008-3853."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*","matchCriteriaId":"E0252A93-49D5-4C5E-B774-8400526CA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22004","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22188","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22190","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35408","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51108","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6822","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, as demonstrated by an upload with an image/jpeg content type.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricciones en uploadp.php en New Earth Programming Team (NEPT) imgupload (también conocido como Image Uploader) v1.0 permite a los atacantes remotos ejecutar arbitrariamente código, subiendo un archivo con una extensión ejecutable y un tipo de contenido modificado, así se accede a este fichero a través de una petición directa, como se demuestra con la subida de un tipo de contenido image/jpeg. NOTA: estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newearthpt:imgupload:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C71D81C4-7B2D-41D8-8628-F0854CCB2CC9"}]}]}],"references":[{"url":"http://osvdb.org/49428","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32412","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31909","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46089","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6830","source":"cve@mitre.org"},{"url":"http://osvdb.org/49428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6823","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup."},{"lang":"es","value":"Múltiples vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el gestor de interfaz para los puntos de acceso A-LINK WL54AP3 y WL54AP2 anteriores a firmware v1.4.2-engl permite a los atacantes remotos secuestrar la autenticación del administrador para peticiones que (1) modifiquen la configuración de red a través de ciertos parámetros goform/formWanTcpipSetup (2) modificando credenciales a través de ciertos parámetro para goform/formPasswordSetup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"AB64EDB4-EB4E-48CC-B207-DE54741C3654"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6FF39DDE-2735-4785-B542-A7A101B2C10B"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"52DEAF38-2CB1-4447-B51B-B60BA5EB7A90"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB339519-E4CF-4D9C-AC1F-5A5D62476067"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7551D250-97C9-47D8-95D7-BEFD93CE8BE1"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D41D5C73-FA27-4638-BF85-FCC482C9D0D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A0DBDAB8-AE14-457E-B8AA-D6B7F7F14185"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B5F69F-CB26-4D5C-ADCB-39FE52D6783D"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5DE06447-21DE-46C8-8542-F68284F15A31"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"883F22D5-733D-4734-9FB1-EC5B3B29D719"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"363909FB-1988-4A1F-90FA-9568D86363E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"360D30FD-5AE8-4596-8F3F-81B9C1BAE43A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"6C5FB4AA-21AC-493B-BBEB-1F96ED640C2A"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"505B3D8C-E931-45C7-B90C-51116679E494"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3EDF7E6E-6491-4852-885E-C27F535A25DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"46ECD44B-A521-45E0-9D04-9ADB0305C687"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F78440A9-C4BE-4F3E-87C5-87CB14B4BCF5"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F0DAD2BB-574A-4C93-85E3-6AAD8B922593"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8080FEFB-24E5-437D-A0CD-BA2D852E329C"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"64001FD3-2960-4F79-B3D1-F9B53FBE6A1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"EA7144C7-FE50-44D4-AB4C-EDFC69784FFD"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C991819A-6BEE-407A-BA02-2F83CA729159"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"074B6C17-74DD-4444-B1DC-D4B5E991C92C"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EED10C72-472E-45F1-8F77-3F83C9EDE691"}]}]}],"references":[{"url":"http://osvdb.org/49466","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.a-link.com/WL54AP3.html","source":"cve@mitre.org"},{"url":"http://www.louhinetworks.fi/advisory/alink_081028.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/49465","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497997/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46256","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6899","source":"cve@mitre.org"},{"url":"http://osvdb.org/49466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.a-link.com/WL54AP3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.louhinetworks.fi/advisory/alink_081028.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/49465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497997/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6824","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"El gestor de interfaz en los puntos de acceso  A-LINK WL54AP3 y WL54AP2 tiene una contraseña blanca por defecto para la cuenta de administrador, lo que hace más fácil a los atacantes remotos obtener acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap2:*:*:*:*:*:*:*:*","matchCriteriaId":"C573A32E-B957-421C-A749-825D0D506983"},{"vulnerable":true,"criteria":"cpe:2.3:h:a-link:wl54ap3:*:*:*:*:*:*:*:*","matchCriteriaId":"09F83E29-D0BF-4EEF-A867-782D4A2BD48D"}]}]}],"references":[{"url":"http://www.louhinetworks.fi/advisory/alink_081028.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/497997/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51199","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6899","source":"cve@mitre.org"},{"url":"http://www.louhinetworks.fi/advisory/alink_081028.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/497997/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6825","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the langChoice parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en user/index.php en Fonality trixbox CE v2.6.1 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales a través de ..(punto punto) en el parámetro langChoice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trixbox:trixbox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"4D61D824-D9CA-4788-B5FD-24766B5AF7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:trixbox:trixbox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FC38E264-1887-4D71-9F13-E6143ABFAD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:trixbox:trixbox:2.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"790D43F1-BE49-4190-9D2A-0A5CA0DAD773"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-07/0101.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/50421","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30135","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43686","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6026","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-07/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6826","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages."},{"lang":"es","value":"dhtml.pl de MHF Media Pro permite a usuarios remotos ejecutar comandos de su elección a través de metacaracteres de shell en el parámetro \"page\" (página), como se ha demostrado usando las páginas (1) advert_top.htm o (2) advert_login.htm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mhfmedia:ads_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"C6C36E5C-2DFE-4A4F-B8FE-830D6434DFEF"}]}]}],"references":[{"url":"http://osvdb.org/49406","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31923","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6845","source":"cve@mitre.org"},{"url":"http://osvdb.org/49406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6827","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a \"Shatter\" style attack on the \"command prompt\" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function."},{"lang":"es","value":"El control \"ListView\" (vista de lista) del cliente de interfaz gráfico (AClient.exe) en Altiris Deployment Solution v6.x anterior a 6.9.355 SP1 de Symantec permite a usuarios locales obtener privilegios de SYSTEM y ejecutar comandos de su elección a través un tipo de ataque \"Shatter\" en el botón oculto del interfaz gráfico \"command prompt\" para (1) sobreescribir el parámetro CommandLine a cmd.exe para usar privilegios de SYSTEM y (2) modificar la DLL que es cargada usando la función de la API LoadLibrary."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.9.355","matchCriteriaId":"0BFF6A8E-0812-4686-840C-193C32339936"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:-:*:*:*:*:*:*","matchCriteriaId":"679093B0-ECFF-4923-827F-7DBE8458C56A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122460544316205&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://osvdb.org/49426","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31773","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.insomniasec.com/advisories/ISVA-081020.1.htm","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/31766","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021071","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.20a.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2876","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46006","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=122460544316205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/49426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/31773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.insomniasec.com/advisories/ISVA-081020.1.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/31766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/avcenter/security/Content/2008.10.20a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6828","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server."},{"lang":"es","value":"Altiris Deployment Solution v6.x anterior a 6.9.355 SP1 de Symantec almacena la contraseña de \"Application Identity Account\" (cuenta de identidad de aplicación) en texto claro, lo que permite a usuarios locales obtener privilegios y modificar clientes de \"Deployment Solution Server\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.355","matchCriteriaId":"D0E5D393-D973-4AFA-AF0C-F0E63DC5AE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:-:*:*:*:*:*:*","matchCriteriaId":"679093B0-ECFF-4923-827F-7DBE8458C56A"}]}]}],"references":[{"url":"http://secunia.com/advisories/31773","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31767","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021072","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2876","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46007","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/2876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6829","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a \"/\\/\" (forward slash, backward slash, forward slash).  NOTE: this might be the same issue as CVE-2008-2031."},{"lang":"es","value":"VicFTPS v5.0 permite a atacantes remotos causar una denegación de servicio (caída del servicio) a través de un comando LIST que comienza con \"/\\/\" (barra, barra invertida, barra, barra invertida).  NOTA: puede ser el mismo tema que CVE-2008-2031."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vicftps:vicftps:5.0:*:*:*:*:*:*:*","matchCriteriaId":"277689B4-A3F0-40C0-85A1-9130B8D1E898"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/2927","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6834","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/6834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6830","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface."},{"lang":"es","value":"La desconexión de Citrix Web Interface v5.0 y v5.0.1 para servidores de aplicación Java no finaliza adecuadamente la sesión del interfaz web, lo que permite a atacantes remotos con acceso a la misma instancia del navegador obtener acceso a la sesión de interfaz web del usuario. NOTA: el atacante también debe tener credenciales válidas para el interfaz web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:web_interface:5.0:*:java_application_server:*:*:*:*:*","matchCriteriaId":"73BDAAF1-EE3A-4AA4-BEDD-5DF57C291AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:web_interface:5.0.1:*:java_application_server:*:*:*:*:*","matchCriteriaId":"E55E4257-B303-4ADD-845A-4A51C85A8065"}]}]}],"references":[{"url":"http://osvdb.org/49387","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX118768","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31943","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021110","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2946","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46135","source":"cve@mitre.org"},{"url":"http://osvdb.org/49387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX118768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6831","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname (Full Name) parameter in the ViewProfile page or (2) returnUrl parameter in a form, as demonstrated using secure/AddComment!default.jspa (aka \"Add Comment\")."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en JIRA Enterprise Edition v3.13 de Atlassian permiten a usuarios remotos inyectar codigo web script o código HTML a través de (1) el parámetro \"fullname\" (nombre completo) en la página \"ViewProfile\" (ver perfil) o (2) el parámetro returnUrl en un formulario, como se ha demostrado usando secure/AddComment!default.jspa (añadir comentario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:jira:3.13:*:enterprise:*:*:*:*:*","matchCriteriaId":"7ECA8B69-B096-4011-8CC2-0261F95EC6DA"}]}]}],"references":[{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2008-10-29","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/49415","source":"cve@mitre.org"},{"url":"http://osvdb.org/49416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31967","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46167","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46168","source":"cve@mitre.org"},{"url":"http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2008-10-29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/49415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6832","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados(CSRF) en JIRA Enterprise Edition v3.13 de Atlassian permite a usuarios remotos secuestrar la autenticación de usuarios sin especificar a través de vectores de ataque desconocidos. NOTA: el origen de esta información es desconocido; algunos detalles han sido obtenidos exclusivamente de infomración de terceras partes.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:jira:3.13:*:enterprise:*:*:*:*:*","matchCriteriaId":"7ECA8B69-B096-4011-8CC2-0261F95EC6DA"}]}]}],"references":[{"url":"http://osvdb.org/49417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32113","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31967","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46169","source":"cve@mitre.org"},{"url":"http://osvdb.org/49417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6833","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a files array element for a blogs action, as demonstrated by the files[0] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en commsrss.php de fuzzylime (cms) en sus versiones anteriores a la v3.01b. Permite a usuarios remotos incluir y ejecutar archivos locales a través de los caracteres .. (punto punto) en un elemento de array de ficheros en una acción de un blog, como se ha demostrado a través del parámetro \"files[0]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_\\(cms\\):3.0:*:*:*:*:*:*:*","matchCriteriaId":"EDA7CEB4-EED7-4493-AB21-849E1FCEB469"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_\\(cms\\):3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3FC9D9EA-F9E4-4CC3-85AD-4E2E28DB4B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_\\(cms\\):3.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"553BFAF3-3706-43B0-A267-991D467A844A"}]}]}],"references":[{"url":"http://osvdb.org/49873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43941","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6060","source":"cve@mitre.org"},{"url":"http://osvdb.org/49873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6834","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the s parameter to code/commupdate.php in a count action or (2) the heads parameter to code/newsheads.php.  NOTE: the blog.php vector is already covered by CVE-2008-3164."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en fuzzylime (cms) v3.01 y v3.01a permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar los caracteres .. (punto punto) en (1) el parámetro \"s\" de code/commupdate.php en una acción \"count\" o (2) el parámetro \"heads\" de code/newsheads.php. NOTA: el vector en blog.php está ya cubierto por CVE-2008-3164."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_\\(cms\\):3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3FC9D9EA-F9E4-4CC3-85AD-4E2E28DB4B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_\\(cms\\):3.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"553BFAF3-3706-43B0-A267-991D467A844A"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/6016","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6835","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:45.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en OpenID 5.x antes de 5.x-1.2, un  modulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_wolanin:openid:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"421290CB-E860-4F32-AE8A-644DC73A423A"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_wolanin:openid:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"659265E0-9FB3-4899-B9CE-54C57F65A30F"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_wolanin:openid:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"0E179022-F11E-4928-BA30-635732BE62E7"}]}]}],"references":[{"url":"http://drupal.org/node/280592","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/280593","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/46938","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31027","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30165","source":"cve@mitre.org"},{"url":"http://drupal.org/node/280592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/280593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/46938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6836","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:49.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en OpenID 5.x antes de 5x.-1.2, un modulo para Drupal, permite a atacantes remotos secuestrar la autenticación de victimas no especificadas para borrar identidades OpenID mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_wolanin:openid:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"421290CB-E860-4F32-AE8A-644DC73A423A"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_wolanin:openid:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"659265E0-9FB3-4899-B9CE-54C57F65A30F"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_wolanin:openid:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"0E179022-F11E-4928-BA30-635732BE62E7"}]}]}],"references":[{"url":"http://drupal.org/node/280592","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/280593","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/46939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31027","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30165","source":"cve@mitre.org"},{"url":"http://drupal.org/node/280592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/280593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/46939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6837","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:49.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-3258.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Zoph v0.7.2.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados, un problema diferente a CVE-2008-3258. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F42AD28-D141-4F7F-9218-52AACBD23C70"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30116","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30116/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43693","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30116/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6838","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:51.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the _off parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Zoph 0.7.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"_off\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F42AD28-D141-4F7F-9218-52AACBD23C70"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30116","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30116/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30116/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6839","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:51.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg and (2) goodmsg parameters to (a) login.php and (b) index.php, and the (3) dir and (4) id parameters to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TGS Content Management 0.3.2r2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) msg y (2) goodmsg para (a) login.php y (b) index.php, y los parámetros (3) dir y (4) id para index.php. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:r2:*:*:*:*:*:*","matchCriteriaId":"C25F9DA1-8624-4060-B519-DB121B4C5E9B"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30157.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30157","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43708","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/30157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6840","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[pear_dir] parameter to (a) Mail/RFC822.php, (b) Net/Socket.php, (c) XML/Parser.php, (d) XML/Tree.php, (e) Mail/mimeDecode.php, (f) Console/Getopt.php, (g) System.php, (h) Log.php, and (i) File.php in includes/pear/; the CONFIG[pear_dir] parameter to (j) includes/prepend.php, and (k) includes/cachedConfig.php; and the (2) CONFIG[includes] parameter to (l) prepend.php and (m) email.list.search.php in includes/.  NOTE: the CONFIG[pear_dir] parameter to includes/mailaccess/pop3.php is already covered by CVE-2006-2666."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en V-webmail v1.6.4, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en  el parámetro:(1) CONFIG[pear_dir] a (a) Mail/RFC822.php, (b) Net/Socket.php, (c) XML/Parser.php, (d) XML/Tree.php, (e) Mail/mimeDecode.php, (f) Console/Getopt.php, (g) System.php, (h) Log.php, y (i) File.php in includes/pear/; el parámetro CONFIG[pear_dir] a (j) includes/prepend.php, y (k) includes/cachedConfig.php; y el parámetro (2) CONFIG[includes] a (l) prepend.php y (m) email.list.search.php en includes/.  NOTE: el parámetro CONFIG[pear_dir] a includes/mailaccess/pop3.php está corregido CVE-2006-2666."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:christof_bruyland:v-webmail:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F46CD504-58BD-4E5D-9687-A88B2D0577AD"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0807-exploits/vwebmail-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30162","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46680","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0807-exploits/vwebmail-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6841","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com_dbquery) component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to classes/DBQ/admin/common.class.php."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en los componentes  Green Mountain Information Technology y Consulting Database Query v1.4.1.1 y anteriores para Joomla! , permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"mosConfig_absolute_path\" a classes/DBQ/admin/common.class.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gmitc:com_dbquery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1.1","matchCriteriaId":"78C2E590-39A4-4C3B-9775-4749EBA676C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gmitc:com_dbquery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E4530ECD-CA15-4D47-9CFA-E01590630828"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30093","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43615","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6003","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6842","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the post parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en data/modules/blog/module_pages_site.php en Pluck v4.6.1 permite a los atacantes remotos incluir e ejecutar arbitrariamente archivos locales a traves de ..(punto punto) el el parámetro post."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pluck-cms:pluck:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0A0E6835-7334-4640-B619-F7AB5573D07B"}]}]}],"references":[{"url":"http://secunia.com/advisories/34415","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49378","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8271","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6843","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Fantastico, utilizado con cPanel v11.x,  permite a los atacantes remotos leer arbitrariamente archivos a través de ..(punto punto) en el parámetro sup3r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:*:*:*:*:*:*:*","matchCriteriaId":"54FEA113-975A-4252-9418-64F11FF98E32"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11:*:*:*:*:*:*:*","matchCriteriaId":"DDFCB83D-77D1-4782-8741-C6AD089DE488"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.4.19:*:*:*:*:*:*:*","matchCriteriaId":"CCC97216-E9A0-467B-86D7-8F4DB146220C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.8.6:stable:*:*:*:*:*:*","matchCriteriaId":"3CB69DCF-617E-4E3F-8494-9C74626DF262"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.8.6_stable:*:*:*:*:*:*:*","matchCriteriaId":"E4E24B1A-A25F-4ADB-906B-A346F782E821"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.16:*:*:*:*:*:*:*","matchCriteriaId":"6E3919CF-D66F-4713-8E34-F4C9E9EDFB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18:*:*:*:*:*:*:*","matchCriteriaId":"CF562242-C032-4D52-9464-91EF5C9EEA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.1:*:*:*:*:*:*:*","matchCriteriaId":"80AD4CE4-714E-4949-B676-F1F692172773"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.2:*:*:*:*:*:*:*","matchCriteriaId":"6FAC2F2A-3A9C-4B7D-8B20-4DBEB6DF9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*","matchCriteriaId":"53A19523-B3B1-48E6-A202-CEB1CBD2DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.4:*:*:*:*:*:*:*","matchCriteriaId":"064D2D20-2410-4BF5-BEAB-B0FEA6858814"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.19.3:*:*:*:*:*:*:*","matchCriteriaId":"04480CFC-EA47-4723-B23D-0C415598D254"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.21:*:*:*:*:*:*:*","matchCriteriaId":"80CEE914-DB4B-4777-B8BD-A8EAE6526E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.21:beta:*:*:*:*:*:*","matchCriteriaId":"5BB81672-314F-49D4-AD9E-CA8D1A14CD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22:*:*:*:*:*:*:*","matchCriteriaId":"67891987-C727-45FF-B027-11B25D2849D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.1:*:*:*:*:*:*:*","matchCriteriaId":"011314F7-1977-453B-B308-DB776DF604E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.2:*:*:*:*:*:*:*","matchCriteriaId":"051B4B2E-BF9B-4EA8-973B-6D96A1618F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.22.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3915A3-45AA-4B53-9990-2FED41439D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.23.1:current:*:*:*:*:*:*","matchCriteriaId":"45F18137-728C-421A-BF9D-15CB576F67CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.23.1_current:*:*:*:*:*:*:*","matchCriteriaId":"C1C35162-E9F6-4B8F-925E-19E5779095D5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498814/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498814/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6844","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, and other parameters."},{"lang":"es","value":"La vista de registro (/user/register) en eZ Publish v3.5.6 y anteriores, y posiblemente otras versiones anteriores a v3.9.5, v3.10.1, y v4.0.1, permite a los atacantes remotos obtener privilegios como otros usuarios, a través de modificar ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, y otros parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.6","matchCriteriaId":"5C747CEF-358A-4532-90E7-7F1626D48746"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"424D0A1C-18CC-4648-B621-ABEE39475427"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DA4CD0FB-13BD-4DDB-B82C-7204206F764F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"DE243CE3-75E4-4C29-BF80-30FEB6321BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"9C62DE22-8ABC-4A27-86FD-D045887C1867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"EACF1838-EC9B-45EA-A5D0-0252E4E54F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B14B2E33-CB8C-4F40-B7D1-3FE67E9D6D1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E163DA2F-053F-4D9F-B793-9A2B70ADE342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"ECA5BE97-28F9-4DEE-BAB3-093D6F35F730"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6035B56A-94C9-4131-9C49-3EE37DCE23A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6F8F2AC-AB82-4925-91D2-A6DE65E4A4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A84C0A8-C576-4233-BC05-30CA56A41FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDF55F25-B30D-4FC9-ADA7-7F185CD5338F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8CC77C98-2C37-49CE-AFB4-49D84BEC78FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"568B3930-DDA1-4582-B1E8-BA4B4E83E49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"24159950-04AD-43EA-BEC5-C306A438CEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.8.8:*:*:*:*:*:*:*","matchCriteriaId":"86A3EDD1-A9D1-4820-81F4-694CFBE486CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.8.9:*:*:*:*:*:*:*","matchCriteriaId":"4A5877E3-7F00-4A51-A9C7-BB6A6F9B6CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C76B152B-FE9D-47A5-B011-066814F72953"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"77519B1C-CB4E-4239-81AA-5C1CDE81A45B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A4F62153-7A64-44C1-ABE7-68D4628DEE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.9.4:*:*:*:*:*:*:*","matchCriteriaId":"C1E36BA3-79F0-4A2A-AE4A-431394ED3D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:3.10:*:*:*:*:*:*:*","matchCriteriaId":"3A05AD5F-15F8-4673-B39E-1EF9E418BC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ez:ez_publish:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D6C14110-DF6C-4A67-B56D-040C933D984C"}]}]}],"references":[{"url":"http://ez.no/developer/security/security_advisories/ez_publish_4_0/ezsa_2008_003_insufficient_form_handling_made_privilege_escalation_possible","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52708","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32762","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47216","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7406","source":"cve@mitre.org"},{"url":"http://ez.no/developer/security/security_advisories/ez_publish_4_0/ezsa_2008_003_insufficient_form_handling_made_privilege_escalation_possible","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6845","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file."},{"lang":"es","value":"La característica de descompresión en ClamAV v0.93.3 y anteriores permite a los atacantes remotos causar una denegación de servicio (fallo de segmentación) a través de un archivo LZH corrupto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.93.3","matchCriteriaId":"E71D5324-4A45-4428-A0AE-0270C9A9DBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*","matchCriteriaId":"68EC0AEB-91CF-4A79-AF40-A475E896FB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*","matchCriteriaId":"5935EDE0-9203-4150-9B7A-AB10B377F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*","matchCriteriaId":"59C2680C-C187-487A-B6C4-F509E0C52436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*","matchCriteriaId":"A796E5E1-6481-49EF-8D97-9EC2A01C712B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*","matchCriteriaId":"03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*","matchCriteriaId":"22958219-46D6-4868-B324-BFC2F2C893F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*","matchCriteriaId":"4543DDEE-C1D1-428F-91C7-98B8985A5931"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*","matchCriteriaId":"1FED760C-7106-49CE-B4FE-CA53A1092C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*","matchCriteriaId":"CABA4177-6B24-4364-BC34-D5ED171E60FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"F488ACB2-A013-4BF3-B5AC-897E40BA87F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"2D5799FA-DD99-4A35-BC56-B2FBEB747226"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"F32EA99F-088E-499E-9DCE-EFA9A64D1673"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"F8B04C5B-316D-4C6A-96CF-F145F7C9E636"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"20769174-C51F-47D5-A34F-EB772F542A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"721B8B46-DFD9-4937-96A3-8D731304415B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"CDF18A59-FB30-45C6-B28E-4499DCD78F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"0B28E0BE-1E2D-45D2-B483-2D81326BF482"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"F47FD5DF-F22E-4B78-9B92-A9C41950F836"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"C1F9571F-9192-414F-B680-10A22C71CFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"F7CAC876-9AAC-407C-A34E-98AA6801D25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*","matchCriteriaId":"470FC8FE-785A-4934-8989-D17C1796870E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"79A6C0FE-2EED-447D-9F62-12CFF1E0918A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*","matchCriteriaId":"0928E05F-92E7-4451-AC11-4E6A014E1154"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"B2E7A70A-3584-4259-80CA-03AE290ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"D27D70A0-EC82-4DC7-A66D-60D263B76E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*","matchCriteriaId":"28C9C5AD-97A9-42C8-917C-2787785F5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"F4AB3389-1C30-47BB-9DAE-0F744E7F8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"4DA837A0-C8CB-486B-845E-A370E3137697"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"235A144A-4AB1-4756-AFB1-58AFFE02649E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"767BBE7F-6CC4-42D4-9730-6E617D36AAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"4EA7CD6A-133F-48E4-87BC-77CF21A25940"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"F65A7930-A913-4C3D-95A3-E629D6A468C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"9C24942D-7AD6-4391-8F05-2827AB6A751E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"DA719FE4-04E0-4664-8EEC-70CD613408DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"C859F864-B68F-4805-B804-E50F2C3FFE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"B5CAFEA5-C062-43EA-A302-38887DA6768C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"525DC218-308C-4A0E-96A7-DC74B8973B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"72C71B82-8F84-4855-A138-7E7436788D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"039341D8-8E2B-4901-BFA6-9CCC46A18C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"C048A75E-6587-485C-9F2B-E12BED34FF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"5B003639-3228-4AC1-AB46-73481BB5DDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"6D6A495D-F9BB-41B9-A912-670D837EA278"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"45F5E6B4-88DD-4426-9FB6-D9009F6B8740"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DB1EB857-D417-49EB-89FD-04733C872EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"4551D5ED-6C72-4C9B-A556-491042A6113A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"01859947-09D4-417E-92A4-FA4F1625C60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"797B7A3B-BAEA-4868-BC3E-CE629FE151F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"30337B76-E552-431F-B49C-A418E5B851A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"53027413-3353-4051-88FA-A46859AD747A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"970D5900-7F83-4140-A3E4-FF4E710DBD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*","matchCriteriaId":"AA0D4F76-258B-4E5D-AA4D-8231E846C76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*","matchCriteriaId":"F2A669CC-C10F-4E74-ACD0-DF933D723EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"13E8E7E7-E29A-4539-8D8C-45B9C39B0146"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*","matchCriteriaId":"A966F2C4-47A0-445F-8927-0F0222A48FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"7681419E-5125-40D6-BE61-57CE9C8F3DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"2CE0D056-B84F-4331-832C-5D1703A15A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"96A13543-D7E2-41D6-8E8E-BE150ECDAA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*","matchCriteriaId":"27310591-C883-4929-824A-AE99E7592D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*","matchCriteriaId":"2964A047-0277-4DA4-BDBE-3F5FC3C1F68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"E891471A-A0B8-4251-A6D3-60E947A18F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"D0E6A5E0-66E0-4EA7-9007-2389179500C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"ED827D10-C862-4BC7-AB33-06E040DAE161"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"51DC9827-D7D1-4D34-AA35-6A7BDB92907D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"37A3B776-0096-41B7-8D2E-C6F0B4F37458"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"B5AAC04C-FFC7-45D8-A29C-6B258CD56489"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*","matchCriteriaId":"A06278C4-328D-4D14-9BC1-DCA697EC9EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"9A66094D-050A-405E-AB0F-239A39F64E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*","matchCriteriaId":"B931BDB2-DBE4-4983-ABFB-86941CDD14F2"}]}]}],"references":[{"url":"http://osvdb.org/51963","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08011.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499078/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32752","source":"cve@mitre.org"},{"url":"http://osvdb.org/51963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499078/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6846","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed (1) ISO or (2) RPM file."},{"lang":"es","value":"Múltiple desbordamiento de búfer basado en pila en avast! Linux Home Edition v1.0.5, v1.0.5-1, y v1.0.8 que permite a los atacantes remotos causar una denegación de servicio (caída de la aplicación) o ejecutar arbitrariamente código a través de ficheros malformados (1) ISO o (2) RPM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus:1.0.5:-:linux_home:*:*:*:*:*","matchCriteriaId":"D79D8C5A-C8C2-454B-8BA1-063680006E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus:1.0.5-1:-:linux_home:*:*:*:*:*","matchCriteriaId":"824F2066-0D51-4DA2-8DF2-2DA2DB046470"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus:1.0.8:-:linux_home:*:*:*:*:*","matchCriteriaId":"1924B367-9A74-4EAC-81C1-D90E4BC1F4E5"}]}]}],"references":[{"url":"http://osvdb.org/52016","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08013.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499080/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32747","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47251","source":"cve@mitre.org"},{"url":"http://osvdb.org/52016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6847","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en Employee/emp_login.asp en Pre ASP Job Board permite a los atacante remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preproject:pre_asp_job_board:-:*:*:*:*:*:*:*","matchCriteriaId":"E623DDB2-405B-432C-BD3F-5AB60B1325A6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/preaspjob-xsscm.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47007","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/preaspjob-xsscm.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6848","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary web script or HTML via the category parameter in a select action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de phpGreetCards v3.7, permite a usuarios remotos inyectar código HTML a su elección a través del parámetro category en la acción de selección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpgreetcards:3.7:*:*:*:*:*:*:*","matchCriteriaId":"62A8F290-5367-4A70-BBBD-C7F37F434A79"}]}]}],"references":[{"url":"http://osvdb.org/50989","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33001","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47590","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7561","source":"cve@mitre.org"},{"url":"http://osvdb.org/50989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6849","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/number_shell.php."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en index.php de phpGreetCards v3.7, permite a atacantes remotos ejecutar código de su elección PHP mediante la subida de un archivo con una extensión ejecutable para, a continuación, acceder a él a través de un enlace que este listado en userfiles/number_shell.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpgreetcards:3.7:*:*:*:*:*:*:*","matchCriteriaId":"62A8F290-5367-4A70-BBBD-C7F37F434A79"}]}]}],"references":[{"url":"http://osvdb.org/50988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32995","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47591","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7561","source":"cve@mitre.org"},{"url":"http://osvdb.org/50988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6850","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en messages.php de PHP-Fusion v6.01.17 and v7.00.3, permite a usuarios remotos inyectar código web y HTML a su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:6.01.17:*:*:*:*:*:*:*","matchCriteriaId":"48294BDF-951F-4F06-B5E1-8C6F0C5592F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:php-fusion:7.00.3:*:*:*:*:*:*:*","matchCriteriaId":"DAD29FD1-6C54-465D-A65A-A981E50F27A3"}]}]}],"references":[{"url":"http://osvdb.org/51053","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33295","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.php-fusion.co.uk/news.php?readmore=443","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33058","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47665","source":"cve@mitre.org"},{"url":"http://osvdb.org/51053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.php-fusion.co.uk/news.php?readmore=443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6851","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the name parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en page.php de PHP Link Directory (phpLD) v3.3, cuando register_globals es activado y register_globals es desactivado, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_link_directory:php_link_directory:3.3:*:*:*:*:*:*:*","matchCriteriaId":"54F91C45-4A12-469D-A2A1-021087DA681F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32989","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47580","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6852","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Ice Gallery (com_ice) v0.5 beta 2 para Joomla! permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro catid de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markus_donhauser:ice_gallery_component_for_joomla:0.5:beta2:*:*:*:*:*:*","matchCriteriaId":"758947A2-A5B8-47BD-8561-81770C2B822B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47604","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6853","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute arbitrary SQL commands via the PollID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules/poll/index.php de AIST NetCat v3.0 y v3.12, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro PollID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"07F9D73E-1A8D-4863-9A4C-3B650175206C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcat:netcat:3.12:*:*:*:*:*:*:*","matchCriteriaId":"964AAFEB-5AB1-47D7-A096-1A53F287E5AD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47632","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6854","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute FAQ Manager.NET v6.0  permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo mediante la manipulación de cierta cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_faq_manager_.net:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FE812B97-2865-4833-BECA-ABB1BE0F2A50"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32028","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46303","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6902","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6855","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a certain cookie."},{"lang":"es","value":"Xigla Software Absolute News Feed v1.0  y posiblemente la v1.5 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo mediante la manipulación de cierta cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_news_feed:1.0:*:*:*:*:*:*:*","matchCriteriaId":"665658B1-6B81-4D89-8871-164244B6D103"},{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_news_feed:1.5:*:*:*:*:*:*:*","matchCriteriaId":"55B742F7-28DD-4AC6-AC3C-1D6AE8CF43B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32027","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46302","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6856","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute News Manager.NET 5.1 \r\npermite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de una \"cookie\" a un determinado valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_news_manager.net:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3E8EFC50-220C-4D80-8133-8DC6BD91E92E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32024","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46301","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6857","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Absolute Podcast .NET v1.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo fijando una cookie en cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_podcast.net:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CB3B636-86E7-44C2-90D9-E1B4777B6FD7"}]}]}],"references":[{"url":"http://osvdb.org/49467","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32003","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46241","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6882","source":"cve@mitre.org"},{"url":"http://osvdb.org/49467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6858","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Absolute Banner Manager .NET v4.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo fijando una cookie en cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_banner_manager.net:4.0:*:*:*:*:*:*:*","matchCriteriaId":"18FA085D-9B96-4F3F-907C-D9739368AEE6"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32023","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46244","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6890","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6859","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute Control Panel XE v1.5 permite a atacantes remotos evitar la autenticacion fijando una cookie en cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_control_panel_xe:1.5:*:*:*:*:*:*:*","matchCriteriaId":"353D91C9-8782-46E5-B90B-719F4D85D420"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32025","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46247","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6893","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6860","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute Poll Manager XE v4.1 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo fijando una cookie con cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_poll_manager_xe:4.1:*:*:*:*:*:*:*","matchCriteriaId":"62DE3B41-B7AE-49C6-B985-F23CD13F70DF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32005","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46242","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6861","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute Newsletter v6.0 y v6.1 permite a atacantes remotos evitar la autenticación y obtener acceso como administradores modificando una cookie a un cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_newsletter:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D93B3018-7CB1-4849-BD38-E85175439A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_newsletter:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2FC042EA-C9AC-49AD-A09F-8E8C4A8BB891"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6904","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6862","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Absolute Content Rotator v6.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo fijando un cookie en cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_content_rotator:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DC11E121-1C5F-4E96-A10A-D25C9D699EC5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32026","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46243","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6863","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute Form Processor .NET v4.0 permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo fijando el valor de una cookie en cierto valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_form_processor.net:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A866E4CD-8ECD-4C96-B0EE-F81C277ADAE3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32009","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46245","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6864","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value."},{"lang":"es","value":"Xigla Software Absolute Live Support .NET v5.1 permite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de una \"cookie\" a un determinado valor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_live_support_.net:5.1:*:*:*:*:*:*:*","matchCriteriaId":"54FD92AB-9ABC-4294-BD7F-B9FE7250BABF"}]}]}],"references":[{"url":"http://secunia.com/advisories/32472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46246","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6865","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en modules.php en el módulo Sectionsnew para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro artid en una acción printpage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:sections_module:*:*:*:*:*:*:*:*","matchCriteriaId":"C37BC1D2-C2AC-46C0-8BE2-30482FABFE2A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]}]}],"references":[{"url":"http://osvdb.org/51890","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497939/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51735","source":"cve@mitre.org"},{"url":"http://osvdb.org/51890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497939/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6866","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en modules.php en Current_Issue module para PHP-Nuke permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"id\" en un acción de resumen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:current_issue_module:*:*:*:*:*:*:*:*","matchCriteriaId":"E5EBEC78-3054-4A12-A538-107BE22E3CD4"}]}]}],"references":[{"url":"http://osvdb.org/51889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497944/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51736","source":"cve@mitre.org"},{"url":"http://osvdb.org/51889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497944/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6867","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en content.php en Scripts For Sites (SFS) EZ Career permite a atacantes remotos ejecutar comandos SQL a través del parámetro topic (tema)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts_for_sites:ez_career:*:*:*:*:*:*:*:*","matchCriteriaId":"C4E4A114-B436-4B5C-8805-9458DFE9CA2C"}]}]}],"references":[{"url":"http://osvdb.org/49486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46275","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6919","source":"cve@mitre.org"},{"url":"http://osvdb.org/49486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6868","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en default/login.php en EditeurScripts EsBaseAdmin v2.1 permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro msg. NOTA: el asunto EsContacts fue tratado en CVE-2008-2037."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts:esbaseadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"30D6D518-FBE3-452F-8B7D-E0D72DAD9F7A"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34112","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52436","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6869","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini."},{"lang":"es","value":"Oramon Oracle Database Monitoring Tool 2.0.1, almacena información sensible bajo el directorio raíz web sin el suficiente control de acceso, lo que permite a atacantes remotos, descargar la base de datos con sus credenciales a través de una petición directa para config/oramon.ini."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oramon:oramon:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0EC79820-F905-4376-BBBA-C3355721BE7B"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/3305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46967","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7286","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6870","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp."},{"lang":"es","value":"Merlix Educate Server permite a atacantes remotos evitarse las restricciones de seguridad previstas y obtener información sensible a través de peticiones directas a (1) config.asp y (2) users.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merlix:educate_server:-:*:*:*:*:*:*:*","matchCriteriaId":"376FFA15-E611-4A06-832E-B52E80D6DC60"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47107","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7348","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6871","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified sensitive information via a direct request."},{"lang":"es","value":"Merlix Educate Server almacena el archivo db.mdb bajo el archivo raíz web sin el suficiente control de acceso, lo que permite a atacantes remotos obtener información sensible a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merlix:educate_server:-:*:*:*:*:*:*:*","matchCriteriaId":"376FFA15-E611-4A06-832E-B52E80D6DC60"}]}]}],"references":[{"url":"http://secunia.com/advisories/33018","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47108","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6872","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/aspthaiForum.mdb."},{"lang":"es","value":"ASPThai.NET ASPThai Forums v8.5 guarda información sensible bajo la cuenta de administrador web con control de acceso insuficiente, que permite a atacantes remotos descargarse datos a través de peticiones directas a database/aspthaiForum.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspthai.net:aspthai_forums:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E8DBEDD1-3CD0-440F-842A-AD79E3E35D23"}]}]}],"references":[{"url":"http://secunia.com/advisories/32912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46960","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7292","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6873","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Active Web Mail v.4.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través de parámetro TabOpenQuickTab1 en (1) popaccounts.aspx, (2) addressbook.aspx, y (3) emails.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_web_mail:4.0:*:*:*:*:*:*:*","matchCriteriaId":"07E425D9-4294-4A58-9CF9-49BFF9DA4D09"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/3303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52444","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7288","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6874","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQL commands via the iType parameter in (1) Auto1/type.asp or (2) auto2/type.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ASP SiteWare autoDealer v1 and v2 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro iType en (1) Auto1/type.asp o (2) auto2/type.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspsiteware:autodealer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"12B32B88-CAC0-44DE-92FD-FFD0FF1B2427"},{"vulnerable":true,"criteria":"cpe:2.3:a:aspsiteware:autodealer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1D2CDD9-0121-4E49-AF2A-D1E3304FFF62"}]}]}],"references":[{"url":"http://secunia.com/advisories/23572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47365","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7463","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6875","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-5220."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en default.asp en ASP Product Catalog permite a atacantes remotos ejecutar comandos SQL a través del parámetro cid, un vector diferente que CVE-2007-5220."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:humayun_shabbir_bhutta:asp_product_catalog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6F3715-533E-4B6A-B91A-8C4BD4EBCFC2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122901307932738&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51976","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25884","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2007/3345","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36894","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52433","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122901307932738&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2007/3345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6876","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037."},{"lang":"es","value":"Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en login.php en EsPartenaires v1.0 permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro msg. NOTA: el asunto de EsContacts fue tratado en CVE-2008-2037."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts:espartenaires:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5550394D-1355-4A44-A47E-2D5C1BBC3409"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34112","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52437","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6877","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the loader_file parameter.  NOTE: the vendor disputes this issue, stating \"at worst, the use of this vulnerability will reveal some local file paths."},{"lang":"es","value":"** DISPUTADA ** Vulnerabilidad de salto de directorio en admin/includes/initsystem.php en Zen Cart v1.3.8 y v1.3.8a, cuando .htaccess no esta soportado, lo que permite a atacantes remotos incluir y ejecutar ficheros locales de forma arbitraria a través de .. (punto punto) en el parámetro \"loader_file\". NOTA: El vendedor no esta de acuerdo con este hecho, \"den el peor de los casos la explotación de esta vulnerabilidad solo muestro algunos ficheros locales\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B860D940-F10D-473A-B146-E11C50F9C2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.3.8a:*:*:*:*:*:*:*","matchCriteriaId":"37D23070-9ED0-466B-BADF-11CD436232D3"}]}]}],"references":[{"url":"http://osvdb.org/46912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002028.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=102802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6038","source":"cve@mitre.org"},{"url":"http://osvdb.org/46912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=102802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6878","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _SESSION[language] parameter.  NOTE: the vendor disputes this issue, stating \"at worst, the use of this vulnerability will reveal some local file paths."},{"lang":"es","value":"** DISPUTADA ** Vulnerabilidad de salto de directorio en admin/includes/languages/english.php en Zen Cart v1.3.8a, v1.3.8 y anteriores, cuando .htaccess no esta soportado permite a atacantes remotos incluir y ejecutar ficheros locales arbitrariamente a través de .. (punto punto) en el parámetro \"_SESSION[language]\". NOTA: El vendedor no esta de acuerdo con este hecho, \"en el peor de los casos, la utilización de esta vulnerabilidad únicamente mostrara algunos ficheros locales\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B860D940-F10D-473A-B146-E11C50F9C2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.3.8a:*:*:*:*:*:*:*","matchCriteriaId":"37D23070-9ED0-466B-BADF-11CD436232D3"}]}]}],"references":[{"url":"http://osvdb.org/46913","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002028.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=102802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6038","source":"cve@mitre.org"},{"url":"http://osvdb.org/46913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2008-July/002028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=102802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6879","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Apache Roller v2.3, v3.0, v3.1, y v4.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro q en una acción de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:roller:2.3:*:*:*:*:*:*:*","matchCriteriaId":"2C4F6585-17A3-4EF7-AF04-609AEAA3084F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:roller:3.0:*:*:*:*:*:*:*","matchCriteriaId":"113D4B57-9D4E-408B-A1D0-80CAE862CF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:roller:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B13BC4B-6DC9-44CD-AC45-DF4CDBF6BA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:roller:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BB9B4815-4B5F-488A-B498-1065E74ECA05"}]}]}],"references":[{"url":"http://issues.apache.org/roller/browse/ROL-1766","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51151","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=668737","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33110","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://issues.apache.org/roller/browse/ROL-1766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=668737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-6880","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en joke.php en EasySiteNetwork Free Jokes Website permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easysitenetwork:jokes_complete_website:*:*:*:*:*:*:*:*","matchCriteriaId":"811A5BE9-597A-4E6A-8482-4D99506ADF7E"}]}]}],"references":[{"url":"http://osvdb.org/52032","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499351/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32908","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47468","source":"cve@mitre.org"},{"url":"http://osvdb.org/52032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499351/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6881","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to (1) getChat.php, (2) getChatRoom.php, and (3) getSavedChatRooms.php."},{"lang":"es","value":"Vulnerabilidad de inyección múltiple SQL en el componente Live Chat (com_livechat) para Joomla! permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los últimos parámetro para (1) getChat.php, (2) getChatRoom.php, y (3) getSavedChatRooms.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joompolitan:com_livechat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E47D9C0E-C137-48DC-8B21-0ECBDFCCEC0D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://secunia.com/advisories/33122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32803","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7441","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6882","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string."},{"lang":"es","value":"Componente Live Chat (com_livechat) v1.0 para Joomla! permite a los atacantes remotos usar la secuencia de comandos xmlhttp.php como un proxy HTTP abierto para esconder una actividad de escaner de la red o un escaner de redes internas a través de una petición GET con una URL completa en la pregunta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joompolitan:com_livechat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E47D9C0E-C137-48DC-8B21-0ECBDFCCEC0D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32803","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47305","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7441","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6883","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T20:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente para Joomla! Live Chat v1.0 (com_livechat), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"last\" a getChatRoom.php. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joompolitan:com_livechat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E47D9C0E-C137-48DC-8B21-0ECBDFCCEC0D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32803","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47304","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52442","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7441","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6884","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in XOOPS 2.3.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter to (1) blocks.php and (2) main.php in xoops_lib/modules/protector/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en XOOPS v2.3.1, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros de su elección al utilizar los caracteres .. (punto punto) en el parámetro \"xoopsConfig[language]\" de (1) blocks.php i (2) main.php en xoops_lib/modules/protector/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D1E3E73-430E-45D9-A4B9-60EE24C62EF9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122875395329794&w=2","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://osvdb.org/50572","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/50573","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32685","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4540","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4563","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47153","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7380","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122875395329794&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://osvdb.org/50572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/50573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6885","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute in a URL BBcode tag in a private message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en pmlite.php en XOOPS v2.3.1 y v2.3.2a permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un atributo \"STYLE\" en una etiqueta \"URL BBcode\" en un mensaje privado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D1E3E73-430E-45D9-A4B9-60EE24C62EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"2507D4B9-B505-4DF0-B63B-47085F95376F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122875449930810&w=2","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/33048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50574","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32685","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4540","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4563","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122875449930810&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/33048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=4563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6886","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality, which allows remote attackers to obtain the administrator password hash and conduct brute force guessing attacks."},{"lang":"es","value":"RSA EnVision v3.5.0, v3.5.1, v3.5.2, y v3.7.0 no restringe el acceso correctamente a una funcionalidad de perfil de usuario no especificada, permitiendo a atacantes remotos obtener el hash de la contraseña de administrador y llevar a cabo ataques para revelar mediante fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:envision:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3D09DC51-1615-471B-867D-737142885FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:envision:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EAFAE772-8245-4AC5-AF5B-1E4F0E19661D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:envision:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"195FFEF0-BF85-427E-AB63-BEE858F36B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:envision:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"00A2B824-4429-41A6-A9EE-32A1E6D7C9CA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122765140110581&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/32883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50273","source":"cve@mitre.org"},{"url":"http://www.secfault.org/?p=78","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32473","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3288","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46884","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122765140110581&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/32883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secfault.org/?p=78","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6887","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en etailad.asp en Pre Classified Listings v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"siteid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_classified_listings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EE36A629-13CC-4DE5-8900-D9B4F6F1569E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47006","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6888","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the address parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en signup.asp en Pre Classified Listings v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"address\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_classified_listings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EE36A629-13CC-4DE5-8900-D9B4F6F1569E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32567","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47005","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6889","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Merchantsadd.asp en ASPReferral v5.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro AccountID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:aspreferral:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6BCB7B09-37F5-4DC7-9C38-744C2C46D463"}]}]}],"references":[{"url":"http://secunia.com/advisories/32928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50379","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32534","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46957","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6890","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the message_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en messages.asp en ASP Forum Script permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"message_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codetoad:asp_forum_script:*:*:*:*:*:*:*:*","matchCriteriaId":"A8B54A74-98CF-48C2-9422-2655C05F6B60"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/aspforum-cmsqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32571","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47000","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/aspforum-cmsqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6891","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter to (a) new_message.asp and (b) messages.asp, and the (2) query string to default.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) ASP Forum Script, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) forum_id contra (a)new_message.asp y (b) messages.asp, y (2) cadena query sobre defalult.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codetoad:asp_forum_script:*:*:*:*:*:*:*:*","matchCriteriaId":"A8B54A74-98CF-48C2-9422-2655C05F6B60"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0812-exploits/aspforum-cmsqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32571","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47002","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0812-exploits/aspforum-cmsqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6892","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter.  NOTE: this might be the same issue as CVE-2005-3572."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lire/index.php en Peel v3.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"rubid\". NOTA: podría tratarse de la misma vulnerabilidad que CVE-2005-3572."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:3.1:*:*:*:*:*:*:*","matchCriteriaId":"210D3C76-F771-417E-9867-07B6A2F6F60B"}]}]}],"references":[{"url":"http://osvdb.org/50604","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32715","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7395","source":"cve@mitre.org"},{"url":"http://osvdb.org/50604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6893","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Alt-N MDaemon WorldClient v10.0.2, al utilizar Internet Explorer 7, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una etiqueta \"img\" modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68EF5E1D-3C8E-4001-8743-2A24EACC48BD"}]}]}],"references":[{"url":"http://files.altn.com/MDaemon/Release/RelNotes_en.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/50648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32776","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47209","source":"cve@mitre.org"},{"url":"http://files.altn.com/MDaemon/Release/RelNotes_en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6894","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName and (2) fPassword parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en login.php en 3CX Phone System Free Edition v6.1793 y v6.0.806.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"fName\" y (2) \"fPassword\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3cx:phone_system:6.0.806.0:*:*:*:*:*:*:*","matchCriteriaId":"BB16122B-179E-49FA-93FB-943656D20216"},{"vulnerable":true,"criteria":"cpe:2.3:a:3cx:phone_system:6.1793:-:free:*:*:*:*:*","matchCriteriaId":"716B3157-7B8C-4ACC-8953-356C5DF84CE5"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=122868146707468&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50599","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32709","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47167","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=122868146707468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6895","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service (unstable service or crash) via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT."},{"lang":"es","value":"3CX Phone System v6.0.806.0, permite a atacantes remotos provocar una denegación de servicio (servicio inestable o caída) a través de vectores no especificados, como se ha demostrado con el escaneo de la vulnerabilidad con NEssus o SAINT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3cx:phone_system:6.0.806.0:-:-:*:*:*:*:*","matchCriteriaId":"9C25E383-B739-46C9-AB78-3D421E26DDF2"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=122868146707468&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52450","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=122868146707468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6896","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path."},{"lang":"es","value":"login.php en 3CX Phone System v6.0.806.0, cuando se alcanza el 100% de la capacidad del disco, permite a atacantes remotos obtener información sensible a través de vectores desconocidos que muestran la ruta de instalación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3cx:phone_system:6.0.806.0:-:-:*:*:*:*:*","matchCriteriaId":"9C25E383-B739-46C9-AB78-3D421E26DDF2"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=122868146707468&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52452","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=122868146707468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6897","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) \"a\" HTML tag; a long src attribute in (2) embed, (3) img, or (4) script tags; (5) a long background attribute in a body tag; and other unspecified tags."},{"lang":"es","value":"Múltiple desbordamiento de búfer en Getleft.exe en Andres Garcia Getleft v1.2 permite a atacantes remotos causar una denegación de servicio (caída) y probablemente ejecutar código a su elección a través de la etiqueta larga (1)HTML \"a\", un atributo largo src en (2) embed, (3) img, o (4) una etiqueta script; (5) un atributo background largo en body tag; y otras etiquetas no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andres_garcia:getleft:1.2:*:*:*:*:*:*:*","matchCriteriaId":"8BB505BB-5F56-42B6-B0F8-C6A2F6A86844"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32994","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47597","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7564","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6898","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods."},{"lang":"es","value":"Desbordamiento de búfer en el XHTTP Module v4.1.0.0 en el control ActiveX para SaschArt SasCam Webcam Server v2.6.5, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un argumento largo al método \"Get\" y a otros métodos no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:saschart:sascam_webcam_server:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A1B7B676-AB4F-4F43-B826-2F88845AAF7E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/14195","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33053","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47654","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7617","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/14195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6899","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T22:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (5) stat SFTP command."},{"lang":"es","value":"Múltiple desbordamiento de búfer en freeSSHd v1.2.1 permite a usuarios autenticados remotamente causar una denegación de servicio (caída) y ejecutar código a su elección a través de (1) open, (2) unlink, (3) mkdir, (4) rmdir, o(5) comando stat SFTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freesshd:freesshd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F810FB16-1D91-4996-BD80-39E5ED9FD951"}]}]}],"references":[{"url":"http://www.bmgsec.com.au/advisories/freeSSHd-bof.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499486/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32972","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52434","source":"cve@mitre.org"},{"url":"http://www.bmgsec.com.au/advisories/freeSSHd-bof.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499486/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6900","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T00:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in \"Add Pen/Author Name\" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photos/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en la característica \"Add Pen/Author Name\" en AvailScript Article Script, permite a usuarios ejecutar código de su elección subiendo un archivo con una extensión ejecutable, y después accediendo al archivo a través de una petición directa en photos/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:availscript_article_script:*:*:*:*:*:*:*:*","matchCriteriaId":"352D7827-379E-4A41-ABBD-27558E7C784E"}]}]}],"references":[{"url":"http://secunia.com/advisories/31816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32821","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47374","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6901","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) settings.php, (2) deleteuser.php, (3) mini_calendar.php, (4) manage_venues.php, and (5) manage_gigs.php, a different vector than CVE-2007-4585."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en 2532designs 2532|Gigs v1.2.2 Stable, cuando register_globals es activado y  magic_quotes_gpc es desactivado, permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de ..(punto a punto) en el parámetro \"lenguaje\". (1) settings.php, (2) deleteuser.php, (3) mini_calendar.php, (4) manage_venues.php, y (5) manage_gigs.php, un vector diferente que  CVE-2007-4585."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2532gigs:2532gigs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A9DC14B2-F531-40B4-ACC7-EDD94AE0ADB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/26585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32911","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47465","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7510","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6902","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in flyers/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en upload_flyer.php en 2532designs 2532|Gigs v1.2.2 Stable permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión ejecutable, luego accede a él a través de una petición a un fichero en flyers/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2532gigs:2532gigs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A9DC14B2-F531-40B4-ACC7-EDD94AE0ADB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/26585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32911","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47466","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7510","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6903","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T00:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a \"fuzzed\" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats."},{"lang":"es","value":"Sophos Anti-Virus para Windows anteriores a v7.6.3, Anti-Virus para Windows NT/9x anteriores a v.4.7.18, Anti-Virus para OS X anteriores a v.4.9.18, Anti-Virus para Linux anteriores a v.6.4.5, Anti-Virus para UNIX anteriores a v7.0.5, Anti-Virus para Unix y Netware anteriores a v.4.37.0, Sophos EM Library, y Sophos small business solutions, cuando el archivo escaneado CAB está activo, permite a atacantes remotos causar una denegación de servicio (falta de segmentación) a través del fichero \"fuzzed\" CAB, como se ha demostrado mediante la suite para el testeo de formatos de archivo PROTOS GENOME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.7.18:*:windows-nt:*:*:*:*:*","matchCriteriaId":"F1BEF5DD-8418-4C76-9351-ACD3ED25236E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.7.18:*:windows_9x:*:*:*:*:*","matchCriteriaId":"A15CB3E6-A97F-491B-B27E-E4AF255E0088"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.9.18:*:os_x:*:*:*:*:*","matchCriteriaId":"E61D3204-DE1E-489E-9624-DD02F1B58F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.37.0:*:netware:*:*:*:*:*","matchCriteriaId":"77FF9B2E-2A38-4A13-AA20-83081A5D9AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:6.4.5:*:linux:*:*:*:*:*","matchCriteriaId":"550B1595-4C9F-412C-B903-DDD8202C1F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:7.0.5:*:unix:*:*:*:*:*","matchCriteriaId":"52F3B857-84EC-4FB8-A332-B7B81BCEB28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus7.6.3:*:windows:*:*:*:*:*:*","matchCriteriaId":"98EFEFC0-92AC-43A6-A072-B6AD2D4B0984"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122893252316489&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/50863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32748","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021476","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sophos.com/support/knowledgebase/article/50611.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=122893252316489&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sophos.com/support/knowledgebase/article/50611.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6904","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T01:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE."},{"lang":"es","value":"Vulnerabilidad sin especificar en Sophos SAVScan v4.33.0 de Linux, y probablemente otros productos y versiones, permiten a atacantes remotos causar una denegación de servicio (falta de segmentación) y probablemente ejecutar código a su elección a través de archivos manipulados que han sido empaquetados con (1)armadillo, (2) asprotect, o (3) asprotectSKE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.7.18:*:windows-nt:*:*:*:*:*","matchCriteriaId":"F1BEF5DD-8418-4C76-9351-ACD3ED25236E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.7.18:*:windows_9x:*:*:*:*:*","matchCriteriaId":"A15CB3E6-A97F-491B-B27E-E4AF255E0088"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.9.18:*:os_x:*:*:*:*:*","matchCriteriaId":"E61D3204-DE1E-489E-9624-DD02F1B58F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:4.37.0:*:netware:*:*:*:*:*","matchCriteriaId":"77FF9B2E-2A38-4A13-AA20-83081A5D9AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:6.4.5:*:linux:*:*:*:*:*","matchCriteriaId":"550B1595-4C9F-412C-B903-DDD8202C1F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus:7.0.5:*:unix:*:*:*:*:*","matchCriteriaId":"52F3B857-84EC-4FB8-A332-B7B81BCEB28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:anti-virus7.6.3:*:windows:*:*:*:*:*:*","matchCriteriaId":"98EFEFC0-92AC-43A6-A072-B6AD2D4B0984"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=122893252316489&w=2","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32748","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/50611.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52443","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=122893252316489&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sophos.com/support/knowledgebase/article/50611.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6905","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete (1) categories or (2) groups; (3) ban users; or (4) delete users via the admin page."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en index.php en BabbleBoard v1.1.6 permite a usuarios remotos autenticados secuestrar la autenticación de los administradores para las solicitudes que eliminan (1)categorías o (2)grupos; (3) bannear usuarios; o (4)eliminar los usuarios a través de la página de administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:babbleboard:babbleboard:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"BEFAC945-D573-4091-A61C-73C906D5E4BC"}]}]}],"references":[{"url":"http://osvdb.org/50721","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47396","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7475","source":"cve@mitre.org"},{"url":"http://osvdb.org/50721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6906","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en BabbleBoard v1.1.6 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través del nombre de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:babbleboard:babbleboard:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"BEFAC945-D573-4091-A61C-73C906D5E4BC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32840","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47403","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6907","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, as accessible from a form generated by index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en checkuser.php en 2532designs 2532|Gigs v1.2.2 Stable, cuando magic_quotes_gpc están desabilitadas, permite a atacatnes remotos ejecutar comandos de su elección a través de los parámetros (1) \"username\" y (2) \"password\", accesibles desde un formulario generado por index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2532gigs:2532gigs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A9DC14B2-F531-40B4-ACC7-EDD94AE0ADB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/26585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32913","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47491","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6908","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges."},{"lang":"es","value":"Services v5.x anterior a v5.x-0.92 y v6.x anterior a v6.x-0.13, un módulo de Drupal, utiliza un hash inseguro al firmar las solicitudes, lo que permite a atacantes remotos suplantar a otros usuarios y obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*","matchCriteriaId":"971DC8A9-7356-4D6F-993C-5F5F28EF037D"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*","matchCriteriaId":"E589A651-CBBB-49E5-8D67-68DBE6159570"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"BCF5BAF1-3FF5-4D36-8B18-0C1DA07C4344"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*","matchCriteriaId":"9B403152-7E41-43D5-A71D-1FFBCD99C334"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*","matchCriteriaId":"47E13993-D2EE-40AD-98E2-EC5B76589970"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*","matchCriteriaId":"EBF94F5E-8314-436F-8259-0190E32586A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4307E56C-E735-416C-B170-225609059BEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/348295","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32894","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47458","source":"cve@mitre.org"},{"url":"http://drupal.org/node/348295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6909","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks that modify critical data and allow remote attackers to impersonate other users and gain privileges."},{"lang":"es","value":"El Modulo Services v5.x anterior a v5.x-0.92 y v6.x anterior a v6.x-0.13 para Drupal,  no firma todos los datos necesarios en las peticiones, cuyo impacto se desconoce, probablemente relacionado con ataques de hombre-en-el-medio (man-in-the-middle)que modifican datos críticos y permiten a atacantes remotos suplantar a otros usuarios y obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*","matchCriteriaId":"971DC8A9-7356-4D6F-993C-5F5F28EF037D"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*","matchCriteriaId":"E589A651-CBBB-49E5-8D67-68DBE6159570"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"BCF5BAF1-3FF5-4D36-8B18-0C1DA07C4344"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*","matchCriteriaId":"9B403152-7E41-43D5-A71D-1FFBCD99C334"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*","matchCriteriaId":"47E13993-D2EE-40AD-98E2-EC5B76589970"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*","matchCriteriaId":"EBF94F5E-8314-436F-8259-0190E32586A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4307E56C-E735-416C-B170-225609059BEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/348295","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50743","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32894","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47458","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52438","source":"cve@mitre.org"},{"url":"http://drupal.org/node/348295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/32894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6910","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request."},{"lang":"es","value":"El Modulo Services v5.x anterior a v5.x-0.92 y v6.x anterior a v6.x-0.13 para Drupal,  no emplea tiempos de espera para las peticiones firmadas, lo que permite a atacantes remotos suplantar a otros usuarios y obtener privilegios a través de un ataque de reproducción que envía la misma petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*","matchCriteriaId":"971DC8A9-7356-4D6F-993C-5F5F28EF037D"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*","matchCriteriaId":"E589A651-CBBB-49E5-8D67-68DBE6159570"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"BCF5BAF1-3FF5-4D36-8B18-0C1DA07C4344"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*","matchCriteriaId":"9B403152-7E41-43D5-A71D-1FFBCD99C334"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*","matchCriteriaId":"47E13993-D2EE-40AD-98E2-EC5B76589970"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*","matchCriteriaId":"EBF94F5E-8314-436F-8259-0190E32586A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4307E56C-E735-416C-B170-225609059BEE"}]}]}],"references":[{"url":"http://drupal.org/node/348295","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32894","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52441","source":"cve@mitre.org"},{"url":"http://drupal.org/node/348295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/50743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6911","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginUsername parameter to includes/logincheck.inc.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL enla función authenticateUser en includes/authentication.inc.php en BrewBlogger (BB) v2.1.0.1, cuando magic_quotes está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"loginUsername\" a includes/logincheck.inc.php. NOTA: algunos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brewblogger:brewblogger:2.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FE1A4437-101B-48D5-B985-AA77C27DF120"}]}]}],"references":[{"url":"http://osvdb.org/46863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30133","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43649","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6023","source":"cve@mitre.org"},{"url":"http://osvdb.org/46863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6912","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php."},{"lang":"es","value":"Zeeways SHAADICLONE v2.0 permite a atacantes remotos eludir la autenticación y obtener privilegios de administrador a través de una solicitud directa al admin/home.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:shaadiclone:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8F76E275-2BCF-4BC3-9678-1A2A332D019D"}]}]}],"references":[{"url":"http://osvdb.org/49746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32222","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46502","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7066","source":"cve@mitre.org"},{"url":"http://osvdb.org/49746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6913","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile edit action, then accessing the file via a direct request to jobseekers/logos/."},{"lang":"es","value":"vulnerabilidad de carga sin restricciones de archivos en editresume_next.php en Zeeways ZEEJOBSITE v2.0 permite a los usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable como una foto en la acción de editar un perfil, para a continuación acceder al archivo a través de una solicitud directa a jobseekers/logos/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeejobsite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9559D2DC-A6DB-47C8-808F-9D7315486F0F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32225","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46505","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6914","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in companylogo/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en viewprofile.php en Zeeways ZEEPROPERTY v1.0 permite a los usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable como una foto en una modificación del perfil, luego accediendo al fichero relacionado a través de una petición directa al fichero en companylogo/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeeproperty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC40560-CF59-4954-9033-6D38515E39D3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32224","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46503","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6915","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or HTML via the propid parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en view_prop_details.php en Zeeways ZEEPROPERTY v1.0 permite a atacantes remotos inyectar secuencias de comandos web a su arbitrarios o HTML a través del parámetro propid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeeproperty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC40560-CF59-4954-9033-6D38515E39D3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32224","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46504","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6916","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a trailing dot in the hostname."},{"lang":"es","value":"Siemens SpeedStream 5200 con Netport Software v1.1 permite a atacantes remotos eludir la autenticación a través de un encabezado de host no válido, tal vez la participación de un punto en el nombre del host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:speedstream_5200:-:*:*:*:*:*:*:*","matchCriteriaId":"6A6CECEE-F415-47B2-883F-941665D513E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_doe:netport_software:1.1:*:*:*:*:*:*:*","matchCriteriaId":"90E040B2-B625-4262-8BDE-5DF5A50ECB23"}]}]}],"references":[{"url":"http://osvdb.org/49870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32635","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32203","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46508","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7055","source":"cve@mitre.org"},{"url":"http://osvdb.org/49870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6917","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username (user parameter)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en Exocrew ExoPHPDesk v1.2 Final permite a atacantes remotos ejecutar comandos SQL a través del nombre de usuario (parámetro user)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exoscripts:exophpdesk:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B26628-AA60-4FEB-95CE-B248EE976F32"}]}]}],"references":[{"url":"http://secunia.com/advisories/27638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32220","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46493","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6918","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in galeria/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restriccion en admin/galeria.php de ThePortal2 2.2 permite a atacantes remotos ejecutar código PHP de su elección subiendo un archivo con una extensión de fichero ejecutable, y luego realizando una petición directa al fichero en galeria/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theportal2.pl:theportal2:2.2:*:*:*:*:*:*:*","matchCriteriaId":"88CA4627-3DBC-419A-BD5C-8CCF615AC8FD"}]}]}],"references":[{"url":"http://osvdb.org/51143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47649","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7620","source":"cve@mitre.org"},{"url":"http://osvdb.org/51143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6919","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to \"fook!admin.\""},{"lang":"es","value":"profileedit.php de TaskDriver v1.3 y anteriores permite a atacantes remotos evitar la autenticación y obtener privilegios administrativos configurando la cookie auth a \"fook!admin.\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:taskdriver:taskdriver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"C704D43B-72DE-4A6F-8534-3FA5E5CE7B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:taskdriver:taskdriver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"31F4009E-4AD6-4E5B-80A5-2727B870AF24"}]}]}],"references":[{"url":"http://secunia.com/advisories/25221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33030","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47608","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6920","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then accessing it via a direct request to the file in photoes/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restriccion en auth.php de phpEmployment 1.8 permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión de fichero ejecutable durante una acción regnew, y luego realizando una petición directa al fichero en photoes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpemployment:1.8:*:*:*:*:*:*:*","matchCriteriaId":"6C0E13F8-F773-4597-9964-DD3573365C9E"}]}]}],"references":[{"url":"http://osvdb.org/50981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33000","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47592","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7563","source":"cve@mitre.org"},{"url":"http://osvdb.org/50981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6921","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photoes/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restriccion en index.php de phpAdBoard 1.8 permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión de fichero ejecutable, y luego realizando una petición directa al fichero en photoes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpadboard:1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F9AB93C-A1E4-4C84-9BFF-A77E39AA0F35"}]}]}],"references":[{"url":"http://osvdb.org/50996","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32998","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47593","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7562","source":"cve@mitre.org"},{"url":"http://osvdb.org/50996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6922","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argument to the (1) CreateUserPath, (2) Logout, (3) DeleteMailByUID, (4) MoveToInbox, (5) MoveToFolder, (6) DeleteMailEx, (7) GetMailDataEx, (8) SetReplySign, (9) SetForwardSign, and (10) SetReadSign methods, which are not properly handled by (a) the POP3 Class ActiveX control (CMailCom.POP3); or a long argument to the (11) AddAttach, (12) SetSubject, (13) SetBcc, (14) SetBody, (15) SetCc, (16) SetFrom, (17) SetTo, and (18) SetFromUID methods, which are not properly handled by the Class ActiveX control (CMailCOM.SMTP), as demonstrated via the indexOfMail parameter to mwmail.asp."},{"lang":"es","value":"Multiples desbordamientos de búfer basados en pila en CMailCOM.dll de CMailServer 5.4.6 permiten a usuarios remotos ejecutar código de su elección a través de un argumento largo a los métodos(1) CreateUserPath, (2) Logout, (3) DeleteMailByUID, (4) MoveToInbox, (5) MoveToFolder, (6) DeleteMailEx, (7) GetMailDataEx, (8) SetReplySign, (9) SetForwardSign, y (10) SetReadSign, que no son apropiadamente manejados por (a) el control de ActiveX POP3 (CMailCom.POP3); o un argumento largo a los métodos (11) AddAttach, (12) SetSubject, (13) SetBcc, (14) SetBody, (15) SetCc, (16) SetFrom, (17) SetTo, y (18) SetFromUID, que no son apropiadamente manejados por el control de la clase ActiveX (CMailCOM.SMTP), como se ha demostrado a través del parámetro indexOfMail de mwmail.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youngzsoft:cmailserver:5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9370A870-4C62-418C-BB7F-1B6A20505B89"}]}]}],"references":[{"url":"http://osvdb.org/46750","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30940","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30098","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43594","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6012","source":"cve@mitre.org"},{"url":"http://osvdb.org/46750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6923","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente content (com_content) v1.0.0  de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro Itemid en una acción blogcategory action de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_content:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F5D5CF8B-B638-4323-A112-3DC84833A3A2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52455","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6924","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email, (3) password, (4) password2, (5) security_code, and (6) register parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en register.php en eSyndiCat Directory v2.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"username\", (2) \"email\", (3) \"password\", (4) \"password2\", (5) \"security_code\" y (6) \"register\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intelliants:esyndicat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"305ED00F-4304-46F7-AC55-0EAB491678C2"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0807-exploits/esyndicat-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46908","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30178","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43715","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0807-exploits/esyndicat-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/46908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6925","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the \"request logging\" feature.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en function.php en Zenphoto v1.1.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados en la funcionalidad \"request logging\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenphoto:zenphoto:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"44500202-5A1B-4165-8F4F-167337C80840"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43864","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6926","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action.  NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el archivo autoinstall4imagesgalleryupgrade.php en el Módulo Fantástico De Luxe para cPanel, permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de secuencias de salto de directorio en el parámetro scriptpath_show en una acción GoAhead. NOTA: este problema solo cruza los límites de privilegios cuando las configuraciones de seguridad, como disable_functions y safe_mode, están activas, ya que la explotación requiere la carga de código ejecutable en un directorio de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","matchCriteriaId":"DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:*:*:*:*:*:*:*:*","matchCriteriaId":"54FEA113-975A-4252-9418-64F11FF98E32"}]}]}],"references":[{"url":"http://www.netenberg.com/forum/index.php?topic=6832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/497964/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498526","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498529/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32016","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46252","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6897","source":"cve@mitre.org"},{"url":"http://www.netenberg.com/forum/index.php?topic=6832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/497964/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498529/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6927","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allow remote attackers to inject arbitrary web script or HTML via the (1) localapp, (2) updatedir, (3) scriptpath_show, (4) domain_show, (5) thispage, (6) thisapp, and (7) currentversion parameters in an Upgrade action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en autoinstall4imagesgalleryupgrade.php en el módulo Fantastico De Luxe para cPanel permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"localapp\", (2) \"updatedir\", (3) \"scriptpath_show\", (4) \"domain_show\", (5) \"thispage\", (6) \"thisapp\" y (7) \"currentversion\" en una acción \"Upgrade\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","matchCriteriaId":"DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"}]}]}],"references":[{"url":"http://secunia.com/advisories/32423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.netenberg.com/forum/index.php?topic=6832","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/49518","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497964/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498526","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46253","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6897","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.netenberg.com/forum/index.php?topic=6832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/49518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/497964/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6928","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in classifieds1/yellow_images/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en PHPStore Complete Classifieds permite a usuarios remotos autenticados mediante la subida de ficheros como logo, con extensión ejecutable, y accediendolo a través de una petición directa en  classifieds1/yellow_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:complete_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"99AFBF2C-63D6-4D26-8024-5030A208142C"}]}]}],"references":[{"url":"http://osvdb.org/50294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7084","source":"cve@mitre.org"},{"url":"http://osvdb.org/50294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6929","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in cars/cars_images/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en PHPStore Auto Classifieds permite a usuarios remotos autenticados ejecutar código de forma arbitraria mediante la subida de un fichero como un logo con una extensión ejecutable, y accederlo a través de una petición directa en cars/cars_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:auto_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"6A4C2B6C-F473-4E86-B7BF-1DBDD5FA5945"}]}]}],"references":[{"url":"http://osvdb.org/50292","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52445","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7082","source":"cve@mitre.org"},{"url":"http://osvdb.org/50292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6930","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in realty/re_images/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en PHPStore Real Estate permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un fichero como logo con una extensión ejecutable, y acceder a el a través de una petición directa en realty/re_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:real_estate:*:*:*:*:*:*:*:*","matchCriteriaId":"D2CC18BB-33F9-4300-AD9E-B429B18E10BB"}]}]}],"references":[{"url":"http://osvdb.org/50293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3101","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52446","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7085","source":"cve@mitre.org"},{"url":"http://osvdb.org/50293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6931","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseeker_profile_images."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en PHPStore Job Search (también conocido como PHPCareers) permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un fichero con una extensión ejecutable como foto, se accede a través de una petición directa del fichero en jobseekers/jobseeker_profile_images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpstore:phpcareers:*:*:*:*:*:*:*:*","matchCriteriaId":"B85FDA0E-1811-49C3-8AEC-1AA4580DE218"}]}]}],"references":[{"url":"http://osvdb.org/50295","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52447","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7083","source":"cve@mitre.org"},{"url":"http://osvdb.org/50295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6932","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en submit_file.php en AlstraSoft SendIt Pro permite a atacantes remotos ejecutar código arbitrario mediante la subida de un fichero con una extensión ejecutable, y accediendo a el a través de una petición del fichero en send/files/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alstrasoft:sendit:*:*:pro:*:*:*:*:*","matchCriteriaId":"2CEED72D-AA5B-4479-83B3-E3A6C1ED2F4D"}]}]}],"references":[{"url":"http://osvdb.org/49844","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32666","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32277","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3139","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46593","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7101","source":"cve@mitre.org"},{"url":"http://osvdb.org/49844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6933","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. (dot dot) in the list parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en MiniGal b13 (también conocido como MG2)  permite a atacantes remotos leer el código fuente de ficheros .php, y posiblemente el contenido de otros ficheros a través de ..(punto punto) en el parámetro \"list\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minigal:minigal:b13:*:*:*:*:*:*:*","matchCriteriaId":"98918BD3-1FE0-433C-B1EF-D7CE39854D90"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32312","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46635","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6934","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en Sanus|artificium (también conocido como Sanusart) Free simple guestbook PHP script, descargado antes de 20081111, permite a atacantes remotos la inyección de código PHP en messages.txt a través del parámetro \"message\" a act.php, que es ejecutado cuando se accede a guestbook/guestbook.php. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sansuart:free_simple_guestbook_php_script:*:*:*:*:*:*:*:*","matchCriteriaId":"4074AA7C-036B-4D65-B5CC-2155C6A96B90"}]}]}],"references":[{"url":"http://osvdb.org/49703","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.sanusart.com/news.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32240","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3095","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7079","source":"cve@mitre.org"},{"url":"http://osvdb.org/49703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.sanusart.com/news.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6935","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en Exodus 0.10 permite a atacantes remotos inyectar argumentos en la linea de comandos, sobrescribir ficheros y producir una denegación de servicio a traves de un URI im://"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_fuhrman:exodus:0.10:*:*:*:*:*:*:*","matchCriteriaId":"BAA8A232-6A1A-4223-AF10-40BBB665C1DA"}]}]}],"references":[{"url":"http://osvdb.org/49888","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/exodus_uri.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498389/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32330","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46663","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7145","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7167","source":"cve@mitre.org"},{"url":"http://osvdb.org/49888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/exodus_uri.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498389/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6936","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en Exodus v0.10, permite a atacantes remotos inyectar argumentos en la línea de comandos, sobrescribir archivos de su elección, y provocar una denegación de servicio a través de la codificación de caracteres en pres:// URI. Vector distinto del CVE-2008-6935."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabber:exodus:0.10:*:*:*:*:*:*:*","matchCriteriaId":"BEDFCD37-A34F-4EE0-8959-1E7CC64A9E07"}]}]}],"references":[{"url":"http://secunia.com/advisories/32729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52630","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6937","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en Exodus v0.10 permite a atacantes remotos inyectar argumentos en la linea de comandos, sobreescribir ficheros de forma arbitraria, y producir una denegación de servicio a través de espacios codificados en una URI xmpp://, un vector diferente que CVE-2008-6935 y CVE-2008-6936. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente mediante información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabber:exodus:0.10:*:*:*:*:*:*:*","matchCriteriaId":"BEDFCD37-A34F-4EE0-8959-1E7CC64A9E07"}]}]}],"references":[{"url":"http://secunia.com/advisories/32729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52631","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6938","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T21:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to cause a denial of service (crash or hang) and obtain the full pathname of the server via a request to a file in the ISAPI directory that is not an executable DLL, which triggers the crash when the DLL load fails, as demonstrated using Isapi\\users.txt."},{"lang":"es","value":"Pi3Web v2.0.3 anterior a PL2 instalada sobre Windows como aplicación de escritorio y sin usar Pi3Web/Conf/Intenet.pi3, permite a atacantes remotos provocar una denegación de servicio (caída o cuelgue) y obtener el nombre completo de la ruta del servidor a través de una petición a un archivo en el directorio ISAPI que no es una DLL ejecutable, lo que provoca la caída cuando la carga de la DLL falla, como ha sido demostrado con Isapi\\users.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:holger_zimmermann:pi3web:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3_pl1","matchCriteriaId":"F55CD4D4-080A-4877-82D5-5AFE2A2BC3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:holger_zimmermann:pi3web:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FC69C856-3621-467B-87D6-5F376C65E65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:holger_zimmermann:pi3web:2.0:*:*:*:*:*:*:*","matchCriteriaId":"13A3A7A6-0BE6-4D07-ABD0-8BB5965A66E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:holger_zimmermann:pi3web:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B5D6ABEC-7F14-473A-A6BD-F0A444AE8843"},{"vulnerable":true,"criteria":"cpe:2.3:a:holger_zimmermann:pi3web:2.0.2_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"2E3F46E6-D47D-475E-9E69-D06A93BE25C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0171.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49998","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/49999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498575","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498602","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32287","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46600","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7109","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0171.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/49999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6939","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username."},{"lang":"es","value":"TurnkeyForms Web Hosting Directory permite a atacantes remotos saltarse la autenticación y (1) obtener privilegios administrativos fijando la cookie adm a 1, o (2) obtener privilegios como usuario fijando el valor de la cookie logueada a nombre de usuario objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:web_hosting_directory:-:*:*:*:*:*:*:*","matchCriteriaId":"C5813206-19DA-4B07-8E25-E5EB5AD54F2D"}]}]}],"references":[{"url":"http://osvdb.org/49838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46586","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7107","source":"cve@mitre.org"},{"url":"http://osvdb.org/49838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6940","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db."},{"lang":"es","value":"TurnkeyForms Web Hosting Directory  almacena información sensible bajo el directorio raíz sin el suficiente control de acceso, lo que permite a atacantes remotos obtener una copia de la base de datos mediante una petición directa a admin/backup/db."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:web_hosting_directory:-:*:*:*:*:*:*:*","matchCriteriaId":"C5813206-19DA-4B07-8E25-E5EB5AD54F2D"}]}]}],"references":[{"url":"http://osvdb.org/49839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46587","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7107","source":"cve@mitre.org"},{"url":"http://osvdb.org/49839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6941","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la funcionalidad de login en TurnkeyForms Web Hosting Directory permite a atacantes remotos ejecutar comandos SQL a través del campo \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:web_hosting_directory:-:*:*:*:*:*:*:*","matchCriteriaId":"C5813206-19DA-4B07-8E25-E5EB5AD54F2D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36166","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52448","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7107","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6942","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/."},{"lang":"es","value":"Vulneribilidad de subida de ficheros sin restricciones en ScriptsFeed Realtor Classifieds System (también conocido como Real Estate Classifieds) permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un fichero con una extensión ejecutable con perfil de logo, entonces se accede a dicho fichero a través de una petición directa al fichero en re_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsfeed:realtor_classifieds_system:-:*:*:*:*:*:*:*","matchCriteriaId":"FE98C8B0-345B-4332-839E-86903B16304F"}]}]}],"references":[{"url":"http://osvdb.org/49960","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46609","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7110","source":"cve@mitre.org"},{"url":"http://osvdb.org/49960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6943","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en ScriptsFeed Recipes Listing Portal permite a usuarios autenticados remotamente ejecutar código de su elección al almacenar un fichero con extensión ejecutable como uno de formato foto y posteriormente accediendo a él mediante una petición directa al fichero en pictures/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsfeed:recipes_listing_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"7C7ED054-6A45-4C43-8C19-51BAD3865F96"}]}]}],"references":[{"url":"http://osvdb.org/49960","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46607","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7112","source":"cve@mitre.org"},{"url":"http://osvdb.org/49960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6944","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en ScriptsFeed Auto Classifieds, permite a usuarios autenticados ejecutar código de su elección subiendo un archivo con una extensión ejecutable como un logo del perfil, después accediendo a él a través de una petición directa en cars_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsfeed:auto_classifieds:-:*:*:*:*:*:*:*","matchCriteriaId":"13541DC7-7735-4368-809F-9FF6BCC91E78"}]}]}],"references":[{"url":"http://osvdb.org/49960","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32690","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46608","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7111","source":"cve@mitre.org"},{"url":"http://osvdb.org/49960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6945","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Interchange v5.7 anteriores a v5.7.1, v5.6 anteriores a v5.6.1, y v5.4 anteriores a v5.4.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de (1) el parámetro de la variable CGI mv_order_item CGI en Core, (2) el widget country-select, o (3) posiblemente el especificador de valor cuando es utilizado en la característica UserTag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BA9547B6-91A7-49F5-9013-F7B5B1853F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"665111F3-8F4C-496F-8F1C-F95F63486F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D29016C3-479F-4B05-BC2F-95A0E84E562F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"61E31CAA-5DE4-408D-88C2-0A97C3B39DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icdevgroup:interchange:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"27D18865-1291-434D-923B-0FE99CF68CEC"}]}]}],"references":[{"url":"http://ftp.icdevgroup.org/interchange/5.7/WHATSNEW","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/49852","source":"cve@mitre.org"},{"url":"http://osvdb.org/49853","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.icdevgroup.org/i/dev/news?id=ssEkj9j8&mv_arg=00030&mv_pc=96","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46598","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46599","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/interchange/5.7/WHATSNEW","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/49852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.icdevgroup.org/i/dev/news?id=ssEkj9j8&mv_arg=00030&mv_pc=96","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6946","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en manageproject.php en Collabtive v0.4.8, permite a atacantes asistidos por el usuario, inyectar secuencias de comandos web o HTML de su elección a través del nombre de proyecto (project Name), que no es manejado adecuadamente cuando el administrador realiza una acción de edición. Relacionado con admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collabtive:collabtive:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6F84A621-E3B3-426A-981C-87E0F8D8A035"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46496","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6947","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via unspecified vectors associated with the added mode in a users action to admin.php."},{"lang":"es","value":"Collabtive v0.4.8 permite a atacantes remotos evadir la autenticación y crear nuevos usuarios, incluido administradores, mediante vectores no especificados asociados con el modo \"added\" en una acción de usuario en \"admin.php\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collabtive:collabtive:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6F84A621-E3B3-426A-981C-87E0F8D8A035"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46497","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6948","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to (1) the showproject action in managefile.php or (2) the Messages feature."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en Collabtive v0.4.8 permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable utilizando un tipo MIME text/plain, para luego acceder a el mediante una petición directa al fichero en files/, relaccionado con (1) la acción showproject en managefile.php o (2) la función Messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collabtive:collabtive:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6F84A621-E3B3-426A-981C-87E0F8D8A035"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46498","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6949","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that (1) submit or edit a new project, or (2) upload files to a project, or (3) attach files to messages via unknown vectors.  NOTE: these issues can be leveraged with other vulnerabilities to create remote attack vectors that do not require authentication."},{"lang":"es","value":"Vulnerabilidad múltiple de falsificación de petición en sitios cruzados (CSRF) en Collabtive v0.4.8 permite a lo atacantes remotos secuestrar la autenticación de un administrador por peticiones que (1) enviar o editar un nuevo proyecto, o (2) subir un archivo a un proyecto, o (3) adjunta un archivo a un mensaje a través de vectores desconocidos. NOTA: este asunto puede ser elevado con otra vulnerabilidad para crear un vector de ataque remoto que no requiera autenticación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collabtive:collabtive:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6F84A621-E3B3-426A-981C-87E0F8D8A035"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498186/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6950","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en login.asp en Bankoi WebHosting Control Panel v1.20 permite a atacantes remotos ejecutar comandos SQL a través de los campos (1) nombre de usuario (username) o (2) contraseña (password)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webhost-panel:bankoi_webhosting_control_panel:1.20:*:*:*:*:*:*:*","matchCriteriaId":"EA8FE5A2-2FF3-42E2-A85D-D5572615C1D2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32299","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46637","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7120","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6951","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request."},{"lang":"es","value":"MauryCMS v0.53.2 y anteriores no requiere autenticación administrativa para Editors/fckeditor/editor/filemanager/browser/default/browser.html, permitiendo que atacantes remotos cargen ficheros de su elección mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.maury91:maurycms:0.53.2:*:*:*:*:*:*:*","matchCriteriaId":"8A9C2C4D-44EA-49A1-8EBC-ECC9769A534B"}]}]}],"references":[{"url":"http://secunia.com/advisories/32787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46802","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7203","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6952","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Rss.php en MauryCMS v0.53.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"c\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.maury91:maurycms:0.53.2:*:*:*:*:*:*:*","matchCriteriaId":"8A9C2C4D-44EA-49A1-8EBC-ECC9769A534B"}]}]}],"references":[{"url":"http://osvdb.org/49963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32364","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3216","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46738","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7162","source":"cve@mitre.org"},{"url":"http://osvdb.org/49963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6953","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI."},{"lang":"es","value":"Desbordamiento de búfer en oovoo.exe en ooVoo v1.7.1.35, y posiblemente en versiones anteriores v1.7.1.59, permite a atacantes remotos producir una denegación de servicio (caida) y posiblemente ejecutar código arbitrario a través de una URI larga oovoo:."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oovoo:oovoo:1.7.1.35:*:*:*:*:*:*:*","matchCriteriaId":"8E45A2E6-9793-4990-8FF0-C3E51D86C918"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0082.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/49791","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://retrogod.altervista.org/9sg_oovoo_url_poc.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32698","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498235/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32251","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46549","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7090","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-11/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/49791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://retrogod.altervista.org/9sg_oovoo_url_poc.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498235/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/3124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6954","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules."},{"lang":"es","value":"La interfaz web en Cobbler (CobblerWeb) anterior a v1.29, permite a usuarios autenticados remotamente ejecutar código Python de su elección en cobblerd, mediante la edición de la plantilla \"Cheetah kickstart\" a los módulos \"import Python\" arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.8","matchCriteriaId":"D2918B32-247E-482A-B0A7-4FAE6D6D6DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"7FFB6CA1-8DE6-46A2-B651-9185B5C3F2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F56967E4-ED40-41BF-9C91-7954A010AF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2572B0E1-B53E-4321-AEFF-9693BDB4BDEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8E6FA453-E023-4F97-A8D8-AF237E380388"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"627B0E5A-ADCC-42BD-BB59-AEF9E644DACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B59B8107-434B-4840-AC71-7F8C5B49DAB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"5D040E2B-7C70-4472-BC3D-05E3A3ED3737"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"9E9F8A0A-64A8-485D-A9D7-D7AC21DFF72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9F63C6E4-14DD-4478-8BAA-339AD0ACCD62"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"04B41068-0E9E-4E07-BB13-F36DAEE72FCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5E229C4C-B695-4206-ACBB-F5CC650839B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"853B8AF2-A457-4B55-BF75-DB9D8DE223B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1AC609A3-8BEC-434D-B54D-35C37D1D1F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"084D307A-8D04-4CA6-8578-671DEE947F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"6FCE8A70-8380-4B3D-B21B-5DC4DE89BA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DEFF3158-173F-49A7-83A7-A81B4FC01415"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C0619FD9-7B6D-4DCB-ABFF-F88836929A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7DCE6AEA-64C4-4C14-B86B-3C23DCA1681D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D1E8A8A7-2C7F-4472-8325-F084422EF292"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"309F7F4F-FDA3-4DDB-ADC9-3B3FBCB1EC4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"36D63C65-AB90-4333-B65A-01E8169B5949"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"841920B9-7D97-4307-B26B-A4CC8719D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"CDB39A4A-3E43-4136-81CD-B60794EC404E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"07589167-C139-41FF-903E-9368C614F782"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"63A5A98D-B58F-49BD-B592-ADF7C24B2914"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C6422638-6A04-4C78-A2EE-A2EF306EC437"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"9BF19E29-9CA7-4020-9493-37F1303D1872"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"370D7F49-D17C-4E15-B32E-EB70B7132073"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"44F6519E-D036-4C98-A801-0C7BFAD5D83A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"34821A36-4C63-40BA-B45F-0C7B6B6D2455"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"96CA84D7-1B4B-4C07-8743-9D1B291A9EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3E173676-83B1-44FE-9739-CA46FDE94944"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8F114D84-0D39-47B1-B337-A2616E672346"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.0.2-1:*:*:*:*:*:*:*","matchCriteriaId":"DDFDEAC9-E8AC-4597-A584-A5989F11BE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.0.3-1:*:*:*:*:*:*:*","matchCriteriaId":"CB865F95-A38D-4A67-8219-AA74946F4571"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"90C6F857-41DD-46E4-9D58-DF95EF2D0711"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1347D094-2161-4FAA-9208-4EAB6E6E5A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5ED95EDC-D6A6-4011-908E-E9540B708651"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6C225ECD-81C9-45CF-AAD2-51C1093DCBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FC4E3814-CC61-4777-8560-BD942EECED66"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dehaan:cobbler:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"392DF7EC-212D-4EF1-ABE8-72FC4A3788AD"}]}]}],"references":[{"url":"http://freshmeat.net/projects/cobbler/releases/288374","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/50291","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32317","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46625","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00462.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00485.html","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/cobbler/releases/288374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/50291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00462.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00485.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6955","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini."},{"lang":"es","value":"mxCamArchive v2.2 almacena información sensible balo la raíz web con insuficientes controles de acceso, lo que permite a atacantes remotos conseguir detalles de configuración y contraseñas a través de una petición directa del archivo archive/config.ini."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infireal:mxcamarchive:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AA4585C0-A259-4BC3-968D-E35EA525B161"}]}]}],"references":[{"url":"http://osvdb.org/49886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32324","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46647","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7136","source":"cve@mitre.org"},{"url":"http://osvdb.org/49886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6956","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin/admin.php en mxCamArchive v2.2 permite a usuarios administradores autenticados remotamente inyectar código PHP de su elección en un programa no especificado mediante el parámetro \"descriptio\", permitiendo su ejecución mediante la invocación de \"index.php\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infireal:mxcamarchive:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AA4585C0-A259-4BC3-968D-E35EA525B161"}]}]}],"references":[{"url":"http://osvdb.org/49887","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46658","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7136","source":"cve@mitre.org"},{"url":"http://osvdb.org/49887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6957","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter."},{"lang":"es","value":"member.php en Crossday Discuz! Board permite a atacantes remotos restaurar las contraseñas de usuarios de su elección a través de las acciones (1) lostpasswd y (2) getpasswd. Posiblemente involucrando a la generación predecible del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discuz:discuz\\!:-:*:*:*:*:*:*:*","matchCriteriaId":"51A5E1E5-8EFA-4D11-8883-2EB11B71E4D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/32731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.discuz.net/archiver/?tid-1112426.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46785","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.discuz.net/archiver/?tid-1112426.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6958","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter."},{"lang":"es","value":"wap/index.php en Crossday Discuz! Board v6.x and v7.x permite a usuarios remotos autenticados ejecutar código PHP arbitrario a través de el parámetro \"creditsformula\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comsenz:crossday_discuz\\!_board:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"00979F78-85D5-4861-8D69-BF938BF90C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:comsenz:crossday_discuz\\!_board:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BC481881-13F7-4A9B-9DD7-938DAF9734E2"}]}]}],"references":[{"url":"http://osvdb.org/50202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.80vul.com/dzvul/sodb/13/dz-exp-sodb-2008-13_php.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.discuz.net/archiver/?tid-1112426.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32303","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46644","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7119","source":"cve@mitre.org"},{"url":"http://osvdb.org/50202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.80vul.com/dzvul/sodb/13/dz-exp-sodb-2008-13_php.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.discuz.net/archiver/?tid-1112426.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6959","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dll 2.3.1.1 allows remote attackers to overwrite arbitrary files via the SaveLastError method.  NOTE: this might be related to CVE-2008-1647."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control Chilkat Socket ActiveX(ChilkatSocket.ChilkatSocket.1) en ChilkatSocket.dll v2.3.1.1, permite a atacantes remotos sobrescribir archivos de su elección a través del método SaveLastError. NOTA: esto podría estar relacionado con el CVE-2008-1647."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkatsoft:chilkat_socket:*:2.3.1.1:*:*:*:*:*:*","matchCriteriaId":"DF9F0CF8-8E67-4DB7-8C64-4A208B322AEB"}]}]}],"references":[{"url":"http://osvdb.org/49902","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32333","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46657","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7142","source":"cve@mitre.org"},{"url":"http://osvdb.org/49902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6960","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php."},{"lang":"es","value":"download.php en X10media x10 Automatic Mp3 Search Engine Script v1.5.5 a la v1.6, permite a atacantes remotos la lectura de archivos de su elección a través del parámetro \"url\" codificado, como se demostró obteniendo las credenciales de la base de datos desde includes/constants.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x10media:x10_automatic_mp3_script:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D03C9233-19C5-40D0-A908-4591C9EDE6D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:x10media:x10_automatic_mp3_script:1.6:*:*:*:*:*:*:*","matchCriteriaId":"360D04A0-F42E-4DD5-9B91-1A44C59D4927"}]}]}],"references":[{"url":"http://osvdb.org/49797","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32537","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32227","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46489","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7074","source":"cve@mitre.org"},{"url":"http://osvdb.org/49797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6961","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties."},{"lang":"es","value":"mailnews en Mozilla Thunderbird anteriores a v2.0.0.18 y SeaMonkey anteriores a v1.1.13, cuando JavaScript es habilita en correo electrónico, permite a los atacantes remotos obtener información sensible acerca del recipiente, o comentarios en correos re-enviados, a través de una secuencia de comando que lee las propiedades (1) .documentURI or (2) .textContent DOM"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.12","matchCriteriaId":"54CA4275-83F7-4BCC-8027-6610AB86BB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"8813A5AB-98DC-472F-ABED-C163C6D63976"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*","matchCriteriaId":"97BDCEEC-25FE-4763-AC63-BA6B4F25E0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"}]}]}],"references":[{"url":"http://secunia.com/advisories/32714","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-59.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32363","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021247","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=458883","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-59.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=458883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6962","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer."},{"lang":"es","value":"Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, y AntiVir Personal - FREE permite a los usuarios locales ejecutar arbitrariamente código a través de peticiones IOCTL manipuladas que sobreescriben un puntero al núcleo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:-:-:premium:*:*:*:*:*","matchCriteriaId":"60FC2C76-3B5F-418E-A2DD-9F5D2FBE4EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:6.35.00.00:*:*:*:*:*:*:*","matchCriteriaId":"C23C179C-B50E-4F47-BFFA-85848131C99D"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*","matchCriteriaId":"B38A75AF-D8B4-4B54-87E9-6EED562CAAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir_personal:*:*:premium:*:*:*:*:*","matchCriteriaId":"BECD1C6B-EC0F-4203-BA12-F8B02472FF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir_professional:*:*:*:*:*:*:*:*","matchCriteriaId":"E36F359D-D095-45BB-9154-707F3889B44F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir_security_suite:-:-:premium:*:*:*:*:*","matchCriteriaId":"F805305F-CFA4-4BC9-8C89-885D85B4B8E5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32269","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/VUPEN-Security-Advisory-20081112.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46567","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/VUPEN-Security-Advisory-20081112.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6963","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request."},{"lang":"es","value":"admin.php en TurnkeyForms Text Link Sales permite a los atacantes remotos evitar la autenticación y ganar privilegios administrativos a través de peticiones directas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyforms:text_link_sales:*:*:*:*:*:*:*:*","matchCriteriaId":"07D4605F-CBC8-427A-9075-72C0C8F80032"}]}]}],"references":[{"url":"http://osvdb.org/49868","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32302","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7118","source":"cve@mitre.org"},{"url":"http://osvdb.org/49868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6964","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la página de login en X7 Chat v2.0.5 permite a los atacantes remoto para ejecutar arbitrariamente comandos SQL a través del campo contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x7_group:x7_chat:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"45DF975F-3AFD-4C4B-BBD7-29E753C9D045"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32309","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7123","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6965","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to (1) site.php, (2) auction.php, (3) mail.php, (4) fee_setting.php, (5) earnings.php, (6) insertion_fee_settings.php, (7) custom_category.php, (8) subcategory.php, (9) category.php, (10) report.php, (11) store_manager.php, and (12) choose_sell_format.php in admin/, and possibly other vectors."},{"lang":"es","value":"AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, y Web v2.0 envía una redirección pero no existe cuando ciertas secuencias de comandos son llamadas directamente, lo que permite a los atacantes remotos evitar autenticación a través de una petición directa a (1) site.php, (2) auction.php, (3) mail.php, (4) fee_setting.php, (5) earnings.php, (6) insertion_fee_settings.php, (7) custom_category.php, (8) subcategory.php, (9) category.php, (10) report.php, (11) store_manager.php, y (12) hoose_sell_format.php in admin/, y posiblemente otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:*:*:*:*:*:*:*:*","matchCriteriaId":"248B2F82-9B0E-4C10-AEBF-ADA52C4423C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:1.0:*:pro_platinum_skin:*:*:*:*:*","matchCriteriaId":"819E9AE3-ACCE-447C-9548-0A71D2C6D44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:2.0:*:pro_platinum_skin:*:*:*:*:*","matchCriteriaId":"DE14F493-0110-4996-9D1E-859488179E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:web_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E093125D-5091-4EBF-8F2A-BAB9D299C284"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32243","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46528","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7087","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6966","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php."},{"lang":"es","value":"AJ Square AJ Auction Pro Platinum Skin #1 envía una redirección pero no existe cuando es llamada directamente, lo que permite a los atacantes remotos evitar la autenticación a través de una petición directa a admin/user.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj_square:aj_auction:1.0:*:pro_platinum_skin:*:*:*:*:*","matchCriteriaId":"819E9AE3-ACCE-447C-9548-0A71D2C6D44B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32243","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46528","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7087","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6967","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893."},{"lang":"es","value":"Múltiples vulnerabilidad no especificada en WorldClient en Alt-N MDaemon anteriores a v10.02 tienen impacto desconocido y vector de ataque, probablemente relativo a de ejecución de secuencias de comandos en sitios cruzados - XSS - WorldClient DLL v10.0.1, una vulnerabilidad diferente que CVE-2008-6893."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.1","matchCriteriaId":"5E29B9A0-41DA-48C6-9CCE-746256C18D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*","matchCriteriaId":"63BE92A3-5320-4E68-89F7-BF977E602FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6727183-BD1B-4816-A0B0-3CA24B1F41D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.71_sp1:*:*:*:*:*:*:*","matchCriteriaId":"7503CBFE-B6F8-457E-BA78-16414EE14789"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74E791DD-1376-4E77-9D7B-C66E88146248"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"759C3190-DABF-4C54-8D26-A5285883BFA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF752E6A-0AB8-4B82-A895-9AF79B0783FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2CFA585E-4355-4497-8936-FD63E334B917"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"6906B4D1-9336-4E52-A1D4-1402F5EF2BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"96A1816E-0E48-4879-86A4-22E7FCCAC598"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8B02DB57-1B98-43AF-B400-73019A747C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0E724258-DCD1-4F09-AD2F-3880F86FA649"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.4:*:pro:*:*:*:*:*","matchCriteriaId":"0906EDEB-A59F-4DDD-8763-AFA9EC78F9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.4:*:standard:*:*:*:*:*","matchCriteriaId":"2CFEEA75-350C-47D6-A2D4-8714D1D4907A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"772A222C-606C-42B5-A523-9584FFB9E0BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B1B8B55A-93D3-4456-8B84-DA437F7E18FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"EAD8D901-F60B-400B-A51E-0881D0077FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E419B0EF-DB52-43D7-906C-744CEF5D8E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EFB3DE93-03F4-4543-AF4D-A76C0AA86D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"505D587A-DD1A-4C31-9C8E-D407CECF3545"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E131AB50-9C43-4AF9-8637-618172FC1769"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"596930EE-960D-4307-B726-73DEBE5ABF36"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4A221378-1198-4FBA-9857-05BA2E5E4B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1A537AF6-0E86-41BD-AA41-B1598DCA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5162F06-31BD-4B04-8F60-A4ACBB7E16DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8CCADFC8-99A1-4F7E-96E6-FD6F3F35EA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AECE0B12-1F51-49A9-9C66-B7DC94ACE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E9125B2D-3EED-4014-8622-E9EBC5B2C99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"ECA9FB24-DF9E-4A58-9F4B-B1613ADFCC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4141E02E-C2DA-42C0-ABAB-62AFE4F869AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"32AA5447-4879-41A7-8F92-CAB0C3CD5E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2A9121D0-504E-444B-94C3-0E5C240376C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:7.2:*:*:*:*:*:*:*","matchCriteriaId":"BA25D7ED-BA8E-45E0-9399-B85499EF74D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6DB0B5F8-F010-4B70-947B-EA28EA38E237"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8F04FD52-7EA8-430E-86C7-5D3733A449AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7EFC20A7-14DF-4E00-873B-6F97A10EEA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB9AF729-E2FA-4703-86AB-AD7416BD6EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"72594AA0-3CB8-4F87-B709-F81E18D2ECBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"50D5F6E0-2047-4531-8C01-D79D3AE69170"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9CEAB790-561D-4815-99E0-78B62294B54E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.0.5:*:*:*:*:*:*:*","matchCriteriaId":"20CB70E2-1E3A-4FC1-BD26-E22EAC68D874"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DC8AC4F7-CADE-448D-82C6-C4D19EAAADFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4A93052-5501-431A-B6E5-7C0574C66C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.6.5:*:*:*:*:*:*:*","matchCriteriaId":"D5CE884A-B10D-4E2F-B020-92C2CB2CAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.50:*:*:*:*:*:*:*","matchCriteriaId":"CF4AD8B6-940B-445F-83EE-77379CFF36DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.51:*:*:*:*:*:*:*","matchCriteriaId":"1A3610BC-6E11-437F-B7DF-3FEC2812BBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.53:*:*:*:*:*:*:*","matchCriteriaId":"B578384C-73DA-4D2A-8A5D-5293391A3172"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.60:*:*:*:*:*:*:*","matchCriteriaId":"964F316B-E449-49BA-8FF6-343D20AA7716"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:9.64:*:*:*:*:*:*:*","matchCriteriaId":"315E7C89-460E-4A0F-89B9-9228DCC1EF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.1","matchCriteriaId":"BF20F74D-1767-411D-9474-F2597293E1F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C6D4C366-2A06-4D1E-AC25-368CFA4D2305"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:2.1:*:standard:*:*:*:*:*","matchCriteriaId":"27A288FA-8810-4615-B2AD-E595FEDA3A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0:*:*:*:*:*:*:*","matchCriteriaId":"97FD2E84-B802-4BDA-A39B-D84F67ABC21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"B12B5202-F814-4962-A09E-44B9C075FF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9343C918-6C63-4EE7-9B30-30C1209041C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13AE088E-E03F-4BB0-8A5B-ED2734B3B0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2DFD683F-21E3-49CA-B22A-40FA79FECF57"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6CC30F32-5C76-4D1A-979D-949D0C1DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F4FAD806-A5CE-46D5-AD59-13F364F988EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BB67A240-BF23-4B74-944D-127B263154E0"}]}]}],"references":[{"url":"http://files.altn.com/MDaemon/Release/RelNotes_en.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/50011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32355","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46688","source":"cve@mitre.org"},{"url":"http://files.altn.com/MDaemon/Release/RelNotes_en.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/50011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6968","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters."},{"lang":"es","value":"Vulnerabilidad múltiple de inyección SQL en submit.php en Pligg CMS v9.9.5 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) category y (2) id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B84CC9F6-6447-4AD1-A83B-C5404221B073"}]}]}],"references":[{"url":"http://www.digitrustgroup.com/advisories/web-application-security-pligg","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45086","source":"cve@mitre.org"},{"url":"http://www.digitrustgroup.com/advisories/web-application-security-pligg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6969","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the (1) step_id and (2) CHECKOUT_CZ_BLOWFISH_KEY parameters."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS en checkout.php en Avactis Shopping Cart v1.8.0 y v1.8.1 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de parámetros (1) step_id y (2) CHECKOUT_CZ_BLOWFISH_KEY."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pentasoft_corp.:avactis_shopping_cart:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"26A2904F-365C-442F-B101-96EEFA94F98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pentasoft_corp.:avactis_shopping_cart:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2C1C0994-4B40-4BEB-AA9E-A3C10B5CE351"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/81/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/47946","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.avactis.com/forums/index.php?showtopic=3577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44929","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/81/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.avactis.com/forums/index.php?showtopic=3577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6970","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en dosearch.inc.php en UBB.threads v7.3.1 y versiones anteriore, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro array Forum[]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3.1","matchCriteriaId":"7D436670-0C8F-4AB2-9630-2B50F8D60928"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AA38F711-1FB7-4E7A-8D42-8B5A713B2FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7CF67B8C-C987-41DB-A4B2-A82D5624507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD52AFE-0F32-41CE-8A22-55AA3B261646"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9ED11502-50F6-446B-B223-8E2B1B0163CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*","matchCriteriaId":"65952A65-78AC-4239-9D15-BA850AF64598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"094040BF-4C59-4266-9683-76C59D332F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F02151FE-89D6-4FB5-82E2-50A2F1046341"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*","matchCriteriaId":"11E1B205-864C-4FAD-8891-12FBAC0E090F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"047CFF77-7616-41A2-9879-EA0E33B4922C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*","matchCriteriaId":"6B321E2E-4AD3-4236-918A-F87804990FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2232ED2E-0323-4DBB-8540-98BD52750025"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"895472F7-D0F8-4C6A-95C6-15963652ABEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"858FAA03-DD05-472D-9F67-3089262F5E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*","matchCriteriaId":"8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*","matchCriteriaId":"3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4F82ADBA-67A1-47E8-8D09-21138BDE84AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FD0DFCB9-3033-4509-BEDC-2B032524C4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*","matchCriteriaId":"124A5853-5C97-412B-B55B-7430B23565DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*","matchCriteriaId":"66D3CCE6-909B-46F4-AD8F-603E433C01D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"803A29EC-E63B-4F66-93E1-60698EE76011"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3159B6DF-CE17-490F-AA01-03E5D2EAC7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"07593CA3-8583-44FE-82CB-9DB32C988766"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5.2_beta2:*:*:*:*:*:*:*","matchCriteriaId":"A6AA2A70-1F8B-4D03-84C6-352AB85F5CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3FD5A8F6-8B50-4B2D-A3DA-A0141EFE55A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:7.0:*:*:*:*:*:*:*","matchCriteriaId":"059B6128-00FF-4012-8851-CC6F3E7B8DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:7.1:*:*:*:*:*:*:*","matchCriteriaId":"425118E7-CDCA-422B-BD60-D1DBEB7AB0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:7.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA9BC99-D343-4B57-B565-4CF75B37F6F4"}]}]}],"references":[{"url":"http://osvdb.org/47954","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00130-09082008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31074","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubbcentral.com/forums/ubbthreads.php/topics/216722/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44976","source":"cve@mitre.org"},{"url":"http://osvdb.org/47954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00130-09082008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubbcentral.com/forums/ubbthreads.php/topics/216722/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6971","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify passwords of other users and gain privileges."},{"lang":"es","value":"La funcionalidad de reinicio de contraseña en Simple Machines Forum (SMF) v1.0.x anteriores a v1.0.14, v1.1.x anteriores a v1.1.6, y v2.0 anteriores a v2.0 beta 4 incluye pistas acerca del estado del generador de número aleatorios con un campo del formulario escondido y genera códigos validados predecibles, lo que permite a los atacantes remotos, modificar la contraseña de otros usuario y obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A3F625DB-65E9-41FB-B733-CC4AEF1B9895"},{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"DD622FF4-C724-4D50-9712-5E632F3E83CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"603B3808-FDFF-432E-8937-984897377BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5656FF9-3F20-476C-A3F7-69EED049E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:2.0:rc1.2:*:*:*:*:*:*","matchCriteriaId":"B37BDC8B-C00C-4443-A1DD-C1823E064940"},{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:2.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"5567FA10-E124-496B-A9FB-BE8915842792"},{"vulnerable":true,"criteria":"cpe:2.3:a:simplemachines:smf:2.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"25997E1A-8BC3-4366-A731-1F826F60EE99"}]}]}],"references":[{"url":"http://osvdb.org/47945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31053","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.simplemachines.org/community/index.php?topic=260145.0","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44931","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6392","source":"cve@mitre.org"},{"url":"http://osvdb.org/47945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.simplemachines.org/community/index.php?topic=260145.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6972","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Drupal Content Construction Kit (CCK) 5.x through 5.x-1.8 allow remote authenticated users with \"administer content\" permissions to inject arbitrary web script or HTML via the (1) \"field label,\" (2) \"help text,\" or (3) \"allowed values\" settings."},{"lang":"es","value":"Vulnerabilidad múltiple de ejecución de secuencias de comandos en sitios cruzados - XSS - en Drupal Content Construction Kit (CCK) v5.x hasta v5.x-1.8 permite a los usuarios remotos autenticados con permisos \"administrar contenido\" inyectar arbitrariamente una secuencia de comandos web o HTML a través de los parámetros (1) \"field label,\" (2) \"help text,\" o (3) \"allowed values\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:cck:5.x-1.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"2E5BFC44-CC70-4F5A-95DF-2A8B4E7FF901"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:cck:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"2215B4E1-902D-4589-8F9F-B6314AE52E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:cck:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"970B9EFC-00F4-4202-95AF-825A4BF29878"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:cck:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"25365C2D-66D9-4A50-926B-774B37EE2482"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:cck:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"74A1E260-E3E5-403B-81BB-490F4324D6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:cck:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"3A7501B8-CFC0-4909-9DAB-0B8E78A9B14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yves_chedemois:cck:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"D1134889-22DA-4829-B157-AAC47883EFD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yves_chedemois:cck:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"32D617BA-6060-4AE8-BF91-EC46D79978A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:yves_chedemois:cck:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"687DDBBA-C4C4-4094-B06B-5B1B8C46D2AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:yves_chedemois:cck:5.x-1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"850E6DE9-2D84-4A2F-BFFE-589FC5563791"},{"vulnerable":true,"criteria":"cpe:2.3:a:yves_chedemois:cck:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"94A3AD40-AEAF-4FAC-9B72-5F83CD072612"}]}]}],"references":[{"url":"http://drupal.org/node/304093","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/47929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31757","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44915","source":"cve@mitre.org"},{"url":"http://drupal.org/node/304093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/47929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6973","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in IBM WebSphere Commerce 6.0 before 6.0.0.7 have unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad mútiple no especificada en IBM WebSphere Commerce v6.0 anteriores a v6.0.0.7 tienen un impacto desconocido y vector de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF24659-1284-4762-925C-4879B56AC386"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4783F5D2-0709-4E5B-B6B7-DF7823E928CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8EB6E277-36B8-483E-8F9E-34D350BBB0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"40A7EA48-BCC0-41BD-975D-0C01B6066BE7"}]}]}],"references":[{"url":"http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24021397","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LI74127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53084","source":"cve@mitre.org"},{"url":"http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24021397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LI74127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6974","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en apply.cgi in DD-WRT 24 sp1 y anteriores, permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones que (1) ejecuten comandos de su elección a través del parámetro ping_id, (2) cambien las credenciales administrativas a través de los parámetro http_username y http_passwd,(3) activen la administración remota a través del parámetro remote_management o (4) configure el reenvío de puerto a través de los parámetros from, tom ip y pro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dd-wrt:dd-wrt:*:sp1:*:*:*:*:*:*","versionEndIncluding":"24","matchCriteriaId":"B493087F-145B-41F9-979C-ABE3DFCD63BD"}]}]}],"references":[{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499024","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499132","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499135","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9209","source":"cve@mitre.org"},{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/499024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6975","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters.  NOTE: This issue reportedly exists because of a \"weak ... anti-CSRF fix\" implemented in 24 sp2."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en apply.cgi in DD-WRT 24 sp2, permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones que (1) ejecuten comandos de su elección a través del parámetro ping_id, (2) cambien las credenciales administrativas a través de los parámetro http_username y http_passwd,(3) activen la administración remota a través del parámetro remote_management o (4) configure el reenvío de puerto a través de los parámetros from, tom ip y pro. NOTE: Esta característica reportada existe debido a \"debilidad ... solución anti-CSRF\" implementada en 24 sp2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dd-wrt:dd-wrt:24:sp2:*:*:*:*:*:*","matchCriteriaId":"99F93777-C194-4920-900C-629F214F846E"}]}]}],"references":[{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499024","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499135","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/9209","source":"cve@mitre.org"},{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/499119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/9209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6976","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request."},{"lang":"es","value":"RouterOS de MikroTik versiones 3.x hasta 3.13 y versiones 2.x hasta 2.9.51, permite a los atacantes remotos modificar la configuración de Network Management System (NMS) por medio de una petición de configuración SNMP diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.9.51","matchCriteriaId":"65E288F0-B974-4F43-8496-32B2600C9D7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"3.13","matchCriteriaId":"04970C31-680F-4171-B97C-EBBBBE829A50"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31025","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44944","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6366","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/31025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/6366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-6977","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en album.asp en Full Revolution aspWebAlbum v3.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro  message en una acción sumary."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fullrevolution:aspwebalbum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D6E16888-0DBA-4891-9AEB-6C8D2A76537C"}]}]}],"references":[{"url":"http://osvdb.org/47915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44878","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6357","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6420","source":"cve@mitre.org"},{"url":"http://osvdb.org/47915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6978","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en Full Revolution aspWebAlbum v3.2 permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable mediante una acción uploadmedia en album.asp, para a continuación, acceder al fichero a través de una solicitud directa en pics/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fullrevolution:aspwebalbum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D6E16888-0DBA-4891-9AEB-6C8D2A76537C"}]}]}],"references":[{"url":"http://osvdb.org/47913","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30996","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44876","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6357","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6420","source":"cve@mitre.org"},{"url":"http://osvdb.org/47913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6979","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php.  NOTE: some of these details are obtained from third party information.  NOTE: this issue might be resultant from a separate SQL injection vulnerability."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpAdultSite CMS, posiblemente v2.3.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro results_per_page a index.php.\r\nNOTA: Algunos de los detalles fueron obtenidos de una tercera parte. NOTA: Esta situación se produce por el resultado de una vulnerabilidad de inyección SQL separada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpadultsite:phpadultsite_cms:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1F08E7A8-1B2B-4F3D-8A02-CC447423005A"}]}]}],"references":[{"url":"http://osvdb.org/47943","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2008/09/phpadult-cms-exploit/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496069/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31057","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44923","source":"cve@mitre.org"},{"url":"http://osvdb.org/47943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2008/09/phpadult-cms-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6980","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the results_per_page parameter to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en as_archives.php en phpAdultSite CMS, probablemente v2.3.2, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro results_per_page de index.php.  NOTA: Algunos de estos detalles se han obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpadultsite:phpadultsite_cms:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1F08E7A8-1B2B-4F3D-8A02-CC447423005A"}]}]}],"references":[{"url":"http://osvdb.org/47942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2008/09/phpadult-cms-exploit/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496069/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44922","source":"cve@mitre.org"},{"url":"http://osvdb.org/47942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2008/09/phpadult-cms-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6981","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message.  NOTE: this issue might be resultant from a separate SQL injection vulnerability."},{"lang":"es","value":"index.php en phpAdultSite CMS, posiblemente v2.3.2, permite a los atacantes remoto obtener la ruta completa de instalación a través del parámetro inválido results_per_page, lo desvela la ruta en un mensaje de error. NOTA_ este asunto debería ser el resultado de una vulnerabilidad de inyección SQL separada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpadultsite:phpadultsite_cms:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1F08E7A8-1B2B-4F3D-8A02-CC447423005A"}]}]}],"references":[{"url":"http://www.davidsopas.com/2008/09/phpadult-cms-exploit/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496069/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44924","source":"cve@mitre.org"},{"url":"http://www.davidsopas.com/2008/09/phpadult-cms-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496069/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6982","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS)en index.php en devalcms v1.4a permite a atacantes remotos inyectar script web o HTML a su elección a través del parámetro currentpath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*","matchCriteriaId":"115E1869-2151-48E0-89CA-ADF197BF5A05"}]}]}],"references":[{"url":"http://osvdb.org/47971","source":"cve@mitre.org"},{"url":"http://sourceforge.net/projects/devalcms/files/devalcms/devalcms-1.4b/devalcms-1.4b.zip/download","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44940","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6369","source":"cve@mitre.org"},{"url":"http://osvdb.org/47971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/projects/devalcms/files/devalcms/devalcms-1.4b/devalcms-1.4b.zip/download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6983","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php."},{"lang":"es","value":"El archivo modules/tool/hitcounter.php en devalcms v1.4a permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de la cabecera HTTP Referer con un fichero objetivo específico en el parámetro gv_folder_data, como se demuestra modificando modules/tool/url2header.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*","matchCriteriaId":"115E1869-2151-48E0-89CA-ADF197BF5A05"}]}]}],"references":[{"url":"http://osvdb.org/47972","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44942","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6369","source":"cve@mitre.org"},{"url":"http://osvdb.org/47972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6984","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with (1) a base64-encoded username that begins with a valid shortname, or (2) a username that matches a valid password, as demonstrated using (a) SMTP and qmail, and (b) Courier IMAP and POP3."},{"lang":"es","value":"Plesk v8.6.0, cunado la ordenación de nombres de login está activada, permite a atacantes remotos saltarse la autenticación y enviar correo electrónico spam a través de un mensaje con (1) un nombre de usuario codificado base64 que comienze con un shortname válido, o (2) un nombre de usuario que coincida con una contraseña válida, como se demostró utilizando (a) SMTP y qmail, y (b) Courier IMAP y POP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:plesk:8.6.0:-:linux\\/unix:*:*:*:*:*","matchCriteriaId":"CB07B3E7-2A3B-4E39-8502-72F0E130F9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:plesk:8.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"893022B3-8E65-4BB8-9215-D10955B57B2F"}]}]}],"references":[{"url":"http://www.osvdb.org/51652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495881","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30956","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1020801","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44856","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6985","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en includes/classes/shopping_cart.php en Zen Cart v1.2.0 a v1.3.8a, cuando magic_quotes_gpc está desactivado, permiten a atacantes remotos ejecutar comandos SQL a través del parámetro ID cuando (1) se añade algo o (2) se actualiza el carrito de la compra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*","matchCriteriaId":"C27DEB51-7745-4B5A-9E23-5491526E857E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*","matchCriteriaId":"0B6F7573-2BED-4035-88A3-88D4EDE39CA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*","matchCriteriaId":"96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.2d:*:*:*:*:*:*:*","matchCriteriaId":"62FF3EA3-FF9F-4E21-B485-C570DB62E0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.3d:*:*:*:*:*:*:*","matchCriteriaId":"271B7AA0-13C1-409A-A6CA-9532757B864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3FD3CD1F-4BE7-436B-A0BE-2F96162AD76B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*","matchCriteriaId":"82CED1DF-15F5-47A2-9C70-F276B466167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.5d:*:*:*:*:*:*:*","matchCriteriaId":"A866A952-5EE5-4B11-826E-123B19A98D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.6d:*:*:*:*:*:*:*","matchCriteriaId":"BE17BAE0-11F8-4BCB-AE63-9482F17083A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3:*:*:*:*:*:*:*","matchCriteriaId":"AB406101-000B-4787-9EA8-3FF35CFFE23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4616B2FA-266F-4D69-A04A-657EF731B0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0A6A2F06-753F-41A6-84E5-7F1AE340265E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"BDB743EA-A17B-406C-81CE-64A52FBB5966"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1BE00024-0295-43BE-8123-56526197B58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"AE050A6F-DF2A-47E8-8188-59BC00C11E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8a:*:*:*:*:*:*:*","matchCriteriaId":"8B91E4C9-31A7-4CA6-8641-F0D4AEA543BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00129-09042008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/48346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496002/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496032/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31023","source":"cve@mitre.org"},{"url":"http://www.zen-cart.com/forum/showthread.php?p=604473","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00129-09042008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/48346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496032/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zen-cart.com/forum/showthread.php?p=604473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6986","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products_id array parameter in a multiple_products_add_product action, a different vulnerability than CVE-2008-6985."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función actionMultipleAddProduct en includes/classes/shopping_cart.php en Zen Cartv v1.3.0 hasta v1.3.8a, cuando magic_quotes_gpc es desactivada, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro products_id en una acción multiple_products_add_product, una vulnerabilidad diferente a CVE-2008-6985."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3:*:*:*:*:*:*:*","matchCriteriaId":"AB406101-000B-4787-9EA8-3FF35CFFE23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"12EF0BC7-0F38-454B-9864-E740E931FF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4616B2FA-266F-4D69-A04A-657EF731B0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0A6A2F06-753F-41A6-84E5-7F1AE340265E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"BDB743EA-A17B-406C-81CE-64A52FBB5966"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1BE00024-0295-43BE-8123-56526197B58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"AE050A6F-DF2A-47E8-8188-59BC00C11E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8a:*:*:*:*:*:*:*","matchCriteriaId":"8B91E4C9-31A7-4CA6-8641-F0D4AEA543BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/31758","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00129-09042008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/48347","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496002/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496032/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31023","source":"cve@mitre.org"},{"url":"http://www.zen-cart.com/forum/showthread.php?p=604473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00129-09042008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/48347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496002/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496032/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zen-cart.com/forum/showthread.php?p=604473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6987","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in eZoneScripts Dating Website script allows remote attackers to execute arbitrary code via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros no restringida en la secuencia de comandos eZoneScripts Dating Website que permite a los atacantes remotos, ejecutar arbitrariamente código a través de vectores desconocidos. NOTA: la procedencia de esta información es desconocida; lo detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezonescripts:dating_website_script:*:*:*:*:*:*:*:*","matchCriteriaId":"9A815DD2-96D6-4D1B-B6A2-27FF5C0890C7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44959","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6988","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Easy Photo Gallery (también conocido como Ezphotogallery) v2.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) galleryid  sobre gallery.php, y (2) size e (3) imageid sobre show.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezphotogallery:ezphotogallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8825D681-D4AC-4BC1-99A5-CA2D28033D3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48313","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48314","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48316","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496220/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45050","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6428","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496220/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6989","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gallery.php en Easy Photo Gallery (también conocido como Ezphotogallery) v2.1 permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezphotogallery:ezphotogallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8825D681-D4AC-4BC1-99A5-CA2D28033D3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48315","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496220/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6428","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496220/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6990","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en gallery.php en Easy Photo Gallery (alias Ezphotogallery) v2.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro password. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezphotogallery:ezphotogallery:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8825D681-D4AC-4BC1-99A5-CA2D28033D3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/31774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/48315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6991","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL commands via the id_rub_page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo public/page.php en Websens CMSbright permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través parámetro id_rub_page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsbright:cmsbright:*:*:*:*:*:*:*:*","matchCriteriaId":"B3DAA610-ED45-4D27-96B1-7B35DDBA82C8"}]}]}],"references":[{"url":"http://osvdb.org/47910","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31669","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30946","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6343","source":"cve@mitre.org"},{"url":"http://osvdb.org/47910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6992","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as \"x=y=z\", which is successfully parsed by MySQL."},{"lang":"es","value":"GreenSQL Firewall (greensql-fw), posiblemente en versiones anteriores a  v0.9.2 o v0.9.4, permite a atacantes remotos evitar la protección de inyección SQL a través de una clausula WHERE que contenga una expresión \"x=y=z\", lo que es parseado con éxito por MySQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.3","matchCriteriaId":"80AFABA4-7292-44AD-BFDF-76BA26F10DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql_firewall:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E234BCE8-671E-4BBF-B889-0A498A6BC89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql_firewall:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"140435FF-4874-41BC-A8D1-C4471360F15B"},{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql_firewall:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C862B9BE-4641-4078-816B-25EBC0DD35DF"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=39337","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/48910","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sla.ckers.org/forum/read.php?16%2C24367","source":"cve@mitre.org"},{"url":"http://www.greensql.net/node/89","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.greensql.net/node/98","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.greensql.net/security","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.mysql.com/bug.php?id=39337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/48910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sla.ckers.org/forum/read.php?16%2C24367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.greensql.net/node/89","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.greensql.net/node/98","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.greensql.net/security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-6993","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Siemens Gigaset WLAN Camera v1.27 tiene una contraseña insegura por defecto, que permite a los atacantes remotos conducir actividades no autorizadas. NOTA: la procedencia de esta información es desconocida; lo detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:gigaset_wlan_camera:1.27:*:*:*:*:*:*:*","matchCriteriaId":"669A7008-1167-4129-B09E-BE109379488D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30973","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6994","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated.  NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header."},{"lang":"es","value":"Un desbordamiento del búfer en la región stack de la memoria en la función SaveAs (función SaveFileAsWithFilter) en el archivo win_util.cc en Chrome de Google versión  0.2.149.27,  permite a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de una página web con un elemento TITLE largo, que desencadena el desbordamiento cuando el usuario guarda las páginas y es generado un nombre de archivo largo. NOTA: podría ser posible explotar este problema por medio de una respuesta HTTP que incluye un nombre de archivo largo en un encabezado Content-Disposition."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=1414","source":"cve@mitre.org"},{"url":"http://osvdb.org/48259","source":"cve@mitre.org"},{"url":"http://security.bkis.vn/?p=119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1020823","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496042/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44935","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44939","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6365","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6367","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=1414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.bkis.vn/?p=119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1020823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/win_util.cc?r1=1757&r2=1766&pathrev=1766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.infoworld.com/d/security-central/critical-vulnerability-patched-in-googles-chrome-599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496042/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6995","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a \"%\" (percent) character, which triggers a buffer over-read, as demonstrated using an \"about:%\" URI."},{"lang":"es","value":"Desbordamiento inferior de entero en net/base/escape.cc en chrome.dll en Google Chrome v0.2.149.27 pemite a atacantes remotos causar una denegación de servicio (caída buscador) a través de un URI con un manejador no válido seguido de un carácter \"%\" (tanto por cierto), que provoca una sobre-lectura del buffer, como se ha demostrado usando una URI \"about:%\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-09/0028.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=122","source":"cve@mitre.org"},{"url":"http://evilfingers.com/advisory/google_chrome_poc.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/47908","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/net/base/escape.cc?r1=1757&r2=1760&pathrev=1760","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30983","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44899","source":"cve@mitre.org"},{"url":"https://www.evilfingers.com/advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6353","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-09/0028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://evilfingers.com/advisory/google_chrome_poc.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/47908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/net/base/escape.cc?r1=1757&r2=1760&pathrev=1760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.evilfingers.com/advisory/Google_Chrome_Browser_0.2.149.27_in_chrome_dll.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6996","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the \"ask where to save each file before downloading\" setting."},{"lang":"es","value":"Google Chrome BETA (v0.2.149.27) no pide confirmacion al usuario antes de descargar un fichero ejecutable, lo cual facilita a atacantes remotos o malware producir una denegacion de servicio (consumo del espacio de disco) o explotar otras vulnerabilidades a traves de una URL que haga referencia a un fichero ejecutable, posiblemente relacionado con la caracteristica \"preguntar donde guardar antes de iniciar descarga\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"}]}]}],"references":[{"url":"http://codereview.chromium.org/472/diff/1/2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=1793","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/48261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495942/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495951/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495954/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495959/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496048/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31000","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44904","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6355","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/472/diff/1/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/48261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495942/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495951/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495954/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495959/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496048/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6997","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an \"Inspect Element\" action."},{"lang":"es","value":"Google Chrome v0.2.149.27 permite a atacantes asistidos remotamente causar una denegación de servicio (caída buscador) a través de la etiqueta IMG con un atributo largo src, que deriva en la caída cuando la victima realiza una acción \"Inspect Element\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"}]}]}],"references":[{"url":"http://badzmanaois.blogspot.com/2008/09/google-chrome-inspect-element-denial-of.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/48260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44941","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6386","source":"cve@mitre.org"},{"url":"http://badzmanaois.blogspot.com/2008/09/google-chrome-inspect-element-denial-of.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6998","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en chrome/common/gfx/url_elider.cc en Google Chrome v0.2.149.27 y otras versiones anteriores a v0.2.149.29, podría permitir a atacantes remotos asistidos por usuarios ejecutar código de su elección a través del objetivo de un enlace (atributo href) con un número de elementos de path largo, lo que provocará un desbordamiento cuando la barra de estado se ha actualizado después de que el usuario mueva el ratón sobre el enlace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/48264","source":"cve@mitre.org"},{"url":"http://shinnok.evonet.ro/vulns_html/chrome.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31034","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31071","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44934","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45032","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6372","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/48264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shinnok.evonet.ro/vulns_html/chrome.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/chrome_official_branch/src/chrome/common/gfx/url_elider.cc?r1=1774&r2=1797&pathrev=1797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/31034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6999","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"phpAuction v3.2, y posiblemente v3.3.0 GPL Basic Edition, permite a atacantes remotos conseguir información de la configuración a través de una petición directa a phpinfo.php, cuando se llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauction:phpauction:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F6DE37F-D3CB-4241-98BE-CE147D2A28D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpauction:phpauction:3.3.0:*:gpl_basic:*:*:*:*:*","matchCriteriaId":"0AE98CB7-1527-448F-BBC3-99228BCCEF67"}]}]}],"references":[{"url":"http://osvdb.org/47939","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31803","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44936","source":"cve@mitre.org"},{"url":"http://osvdb.org/47939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7000","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter.  NOTE: this might be related to CVE-2005-2255.1."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en index.php en PHPAuction v3.2, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro lan. NOTA: esto estaría relacionado con CVE-2005-2255-1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauction:phpauction:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F6DE37F-D3CB-4241-98BE-CE147D2A28D5"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44938","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/phpauction32-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7001","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en el gestor de ficheros de Creative Mind Creator CMS v5.0, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:creative_mind:creator_cms:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C4EB14F0-CB07-460E-83C0-B26E0AE4AB22"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44982","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6405","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7002","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir restrictions for certain functions, which might allow local users to bypass intended access restrictions and call programs outside of the intended directory via the (1) exec, (2) system, (3) shell_exec, (4) passthru, or (5) popen functions, possibly involving pathnames such as \"C:\" drive notation."},{"lang":"es","value":"PHP v.5.2.5 no respeta las restricciones de ciertas funciones(a) open_basedir y(b) safe_mode_exec_dir, que pueden permitir a usuarios locales saltarse las restricciones de acceso previstas y las llamadas a programas externas del directorio previsto a través de las funciones (1) exec, (2) system, (3) shell_exec, (4) passthru, o(5) popen , probablemente relacionados con nombres de ruta como \"C:\" notación unidad."}],"vendorComments":[{"organization":"Red Hat","comment":"This is not a security issue.  For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-7002#c7","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31064.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/31064.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7003","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T05:24:52.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary SQL commands via the (1) user_id and (2) password parameter."},{"lang":"es","value":"Múltiples vulnerabilidad de inyección SQL en login.php en The Rat CMS Alpha v.2 permite a atacantes remotos ejecutar comandos SQL a su elección a través de (1) user_id y(2) parámetro password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the-rat-cms:the-rat-cms:alpha2:*:*:*:*:*:*:*","matchCriteriaId":"3F07F81E-F657-4C7A-AB5C-AE5378057846"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32845","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47335","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7478","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7004","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c."},{"lang":"es","value":"Desbordamiento de búfer en Electronic Logbook (ELOG) anteriores a v2.7.1 tiene un impacto y unos vectores de ataque desconocidos y posiblemente relacionados con elog.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.0","matchCriteriaId":"8001B79B-38EC-4E1A-B7DB-24785BA4A108"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AB5B281C-756F-4730-B988-129D5D5ED9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFEE69C0-8B08-4BCD-B388-7356E84466B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE73E755-EA42-4BDE-A6CC-E72658FD1A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E8249E7-DCF1-463D-BD6B-07B621E82EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"17DC6466-3E39-4502-AA3D-BEFDE016F759"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"121FC6FD-EA8D-43F0-9F2B-21FE4D56A8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.:*:*:*:*:*:*:*","matchCriteriaId":"F4C02CDA-6A86-4BAB-A9FC-24065EFC4E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A50F1799-7D13-48E3-83FB-9413BEC6AF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E35B5A4E-FDEB-4A9D-B3CC-4025F215FED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3589711E-612A-4C7A-A447-6190F5B988F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A43AAE0-7F48-4CAE-A669-A24902CE4D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D4A9DAE4-A22A-45E8-9259-393FF0DFB3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5E24350-DAB6-4D46-BB8C-BA127ADEAC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55A2F36E-B9EB-4D1F-93FB-4518A18E77B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80BB7A6F-CF02-4557-9EA3-977C160E0C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"26EB6E8F-24B5-4BA8-8ED6-3843ABE3E9DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"48420EC7-FC95-448D-912F-6BB9D2C0C084"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"6E8E5F55-AC2C-4844-8671-F8D7CA812F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B2A6942-5B5C-4622-BF2C-D69941250269"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A30AC66A-5BC9-4FA9-A8FB-4699FFDFA5CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B0F201C0-9AE3-4BB1-A744-CEB928534A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F97A2D31-B3C8-4A2D-9296-0D9FAE55F109"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"610F7CC0-63F7-41C9-BC41-B9A20BD9A022"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B671811E-E214-44CC-B2C5-89FA83B21A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B0B6187A-3335-4D89-B8F0-A4EAD8E88498"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5EA5C490-0487-4759-9274-844C5C6C8F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4F595EE-5852-4808-9003-42BC80DB7477"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E51017F-A270-4406-947E-D13857FE325C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0F9BF705-D6E5-42E4-AA3B-0D05D3E269C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1CC9A579-D75A-41FD-82CD-79ED098F448E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"73206777-B2E7-46E8-862C-FBF429A42C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8C96FD4C-1CBE-4BFB-A39B-0F64C9E96B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF5A2D83-B941-4A6E-842F-FDBCBBE670B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0D6A4B7-ADDB-4A28-B22B-A1A1DD811F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB7B94F8-688E-46BC-B390-3EDF54F050F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1CBB6D1D-698C-4A9B-9F6A-E10F6E730DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FBBE3368-77D3-4A61-A65B-F2096BF95823"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"39CBB4E1-91D5-4267-9E1D-0A82678489DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49C63CDB-1192-4A07-85E7-03F81909D6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"130EC88D-5245-42DB-AB4A-71C9AF44CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CBC05390-FE1B-47D0-8AC4-AFDFF40C6DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"15AD984D-3F11-4EFF-A653-D24221A2008F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4AC35EE0-08E3-406E-B866-F8691D9E69E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"398E385D-AE8B-4600-87E8-177130B0F414"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"97A00A3F-137A-4204-AA47-E55D71374672"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DB2B702F-EED9-4DAB-AD45-502F44D1748C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"E36E4839-FD1D-418A-8F62-88C39E378F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4D52BB1B-D26F-44B7-B139-5B5F2D3F1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A949E7C5-527E-467E-B91D-54B2D90A3893"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"350EA9F1-3FF4-4880-81AD-483B1CDBEA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"B5B9A416-DB7F-4F13-B3E7-9DFA387D4656"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1D34F07F-8017-43D0-9750-03B6103B622E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0CED236A-63A2-43D7-9C9D-6C9107D2CE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"334D4A05-FB4A-4463-9978-0E59325EDDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EC55AF-21A6-406C-B02E-9DA668DB6B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03CBEF0B-74ED-439A-8DC2-EEB76F48FB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E013834E-8725-49B0-8544-D383A5A03166"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3A659097-9731-440C-9065-C04E6AC5C855"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"565BF8F2-C8B1-4933-882F-7ADA522F25C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"296F9E95-95BF-4F63-B601-6820C5CBC237"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"5D6E8A41-2AA2-4757-826A-8122E9002476"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7D8C5A99-E5A7-4650-92ED-116AFF7EDC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"97BD7090-ACE3-4D24-8765-38467B3F2E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"96675B57-21EC-41AD-9E57-A1A0A93E6B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3BD45019-5174-4173-B7A3-272F2890D53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"31EAE462-E18C-494F-B0BC-F8C21D883BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"66257524-9911-4625-8562-6D8FC6A378DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57638FC4-791C-4060-B91B-32C679945B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elog:elog:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A6F10C8B-6F2E-4F76-B74C-C04EB78E5B4D"}]}]}],"references":[{"url":"http://www.osvdb.org/41684","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0265","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39903","source":"cve@mitre.org"},{"url":"https://midas.psi.ch/elog/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/41684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://midas.psi.ch/elog/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7005","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter.  NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution."},{"lang":"es","value":"include/modules/top/1-random_quote.php en Minb Is Not a Blog (minb) v0.1.0 permite a atacantes remotos ejecutar PHP arbitrariamente a través del parámetro \"quotes_to_edit parameter\". NOTA: Esta situación ha sido reportada como \"falta de restricción de subida de ficheros\" en algunas fuentes, pero esto seria una potencial consecuencia de la ejecución de código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minb:minb_is_not_a_blog:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1919EA3D-5C65-495E-8F19-93094CA0640B"}]}]}],"references":[{"url":"http://osvdb.org/51805","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496234/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45054","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6432","source":"cve@mitre.org"},{"url":"http://osvdb.org/51805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496234/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7006","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php."},{"lang":"es","value":"Free PHP VX Guestbook v1.06 permite a atacantes remotos evitar la autenticación y descargar la copia de seguridad de la base de datos a través de una petición directa a admin/backupdb.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpversion:php_vx_guestbook:1.06:*:*:*:*:*:*:*","matchCriteriaId":"1258AD9A-633B-4074-B11A-90ED4C36144F"}]}]}],"references":[{"url":"http://osvdb.org/48156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31174","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45150","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6456","source":"cve@mitre.org"},{"url":"http://osvdb.org/48156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7007","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin_pass cookie values to 1."},{"lang":"es","value":"Free PHP VX Guestbook v1.06 permite a atacantes remotos evitar la autenticacion y conseguir privilegios administrativos mediante la manipulacion de los valores (1) \"admin_name\" y (2) \"admin_pass cookie\" a \"1\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpversion:php_vx_guestbook:1.06:*:*:*:*:*:*:*","matchCriteriaId":"1258AD9A-633B-4074-B11A-90ED4C36144F"}]}]}],"references":[{"url":"http://osvdb.org/48155","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31174","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45152","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6457","source":"cve@mitre.org"},{"url":"http://osvdb.org/48155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7008","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db."},{"lang":"es","value":"HyperStop Web Host Directory v1.2 permite a atacantes remotos evitar la autenticacion y descarga la base de datos de la copia de seguridad a traves de una peticion directa a admin/backup/db."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hyperstop:web_host_directory:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABD94957-BD95-4854-9859-56BEABE43264"}]}]}],"references":[{"url":"http://osvdb.org/48282","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/webhost-database.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31922","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31249","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45241","source":"cve@mitre.org"},{"url":"http://osvdb.org/48282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstorm.linuxsecurity.com/0809-exploits/webhost-database.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7009","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en multiscan.exe en Check Point ZoneAlarm Security Suite v7.0.483.000 y v8.0.020.000  permite a usuarios locales ejecutar código de forma arbitraria a través de un fichero o directorio con una ruta larga. NOTA: Algunos de estos detalles fueron obtenidos de terceras personas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm:7.0.483.000:*:*:*:*:*:*:*","matchCriteriaId":"99C03D0F-DD01-453F-9116-7591D138970E"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm:8.0.020.000:*:*:*:*:*:*:*","matchCriteriaId":"7C97EC71-5BE4-4790-BBD0-F85BE9731620"}]}]}],"references":[{"url":"http://osvdb.org/48097","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496226/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31124","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020859","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45082","source":"cve@mitre.org"},{"url":"http://osvdb.org/48097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496226/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7010","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to admin/register.php."},{"lang":"es","value":"Skalfa Software SkaLinks Exchange Script v1.5 permite a atacantes remotos añadir nuevos administradores a través de una petición directa a admin/register.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skalinks:exchange_script:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EC398D1A-B382-4B71-9453-CDD0DA9C0652"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0809-exploits/skalinks-editor.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31158","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45116","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6445","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0809-exploits/skalinks-editor.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7011","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set."},{"lang":"es","value":"El motor de Unreal, el utilizado en Unreal Tournament v3 1.3, Unreal Tournament 2003 y 2004, Dead Man's Hand, Pariah, WarPath, Postal2, y Shadow Ops, permite a usuarios remotos autenticados producir una denegación de servicio (salida de servidor) a través de múltiples descargas de ficheros desde el servidor, lo que inicia un fallo de aserción cuando la marca (flag) de cierre en UnChan.cpp esta activado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digital_extreme:pariah:*:*:*:*:*:*:*:*","matchCriteriaId":"6587F764-5D9B-4D59-8038-D8088ECC3EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament:3:1.3:*:*:*:*:*:*","matchCriteriaId":"9AB57FD3-DF3A-4214-9A4E-BBD05E7D72D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament:2003:*:*:*:*:*:*:*","matchCriteriaId":"0A1BC445-F213-4032-89ED-C27B3526D2B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament:2004:*:*:*:*:*:*:*","matchCriteriaId":"AD75F3DD-8EB1-4BE0-B6DF-E4DC0D96B7E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:groove_games:warpath:*:*:*:*:*:*:*:*","matchCriteriaId":"3DD522D7-62CF-4912-94F0-98425CE7E453"},{"vulnerable":true,"criteria":"cpe:2.3:a:human_head_studios:dead_mans_hand:*:*:*:*:*:*:*:*","matchCriteriaId":"B4C4B092-731F-4E66-8EA3-977EF1AF165F"},{"vulnerable":true,"criteria":"cpe:2.3:a:red_mercury:shadow_ops:*:*:*:*:*:*:*:*","matchCriteriaId":"C1D034C6-5A04-46F2-97B6-70C21320B546"},{"vulnerable":true,"criteria":"cpe:2.3:a:whiptail_interactive:postal:2:*:*:*:*:*:*:*","matchCriteriaId":"ACACD3D7-A342-45A9-B4F2-4121F5DF7E46"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/48293","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496399/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31205","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/48293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496399/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7012","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"courier/1000@/api_error_email.html (aka \"error reporting page\") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters."},{"lang":"es","value":"courier/1000@/api_error_email.html (tambien conocido como \"error reporting page\") en Accellion File Transfer Appliance FTA_7_0_178, y posiblemente otras versiones anteriores de FTA_7_0_189, permite a atacantes remotos enviar spam a través de los parámetros modificados \"description\" y \"client_email parameter\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:accellion:secure_file_transfer_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"7_0_178","matchCriteriaId":"7115262A-B4F1-4271-A2E8-3F6BD8F005EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_135:*:*:*:*:*:*:*","matchCriteriaId":"59DB02D8-8C89-48C6-9365-1AA8FEB88C15"}]}]}],"references":[{"url":"http://osvdb.org/48242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31178","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020870","source":"cve@mitre.org"},{"url":"http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45159","source":"cve@mitre.org"},{"url":"http://osvdb.org/48242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1020870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zebux.free.fr/pub/Advisory/Advisory_Accellion_SPAM_Engine_Vulnerability_200808.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7013","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login response that triggers a divide-by-zero error."},{"lang":"es","value":"NetService.dll en Baidu Hi IM permite a servidores remotos producir una denegación de servicio (caída de cliente) a través de una respuesta de login manipulada que inicio un error de \"división por cero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baidu:baidu_hi_im:-:*:*:*:*:*:*:*","matchCriteriaId":"151426D3-B928-4456-830E-A9AFA064DEDA"}]}]}],"references":[{"url":"http://osvdb.org/51697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496353/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/51697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496353/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7014","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value."},{"lang":"es","value":"fhttpd v0.4.2 permite a atacantes remotos producir una denegación de servicio (caida) a través de una cabecera de autorización HTTP con un carácter no valido después del valor \"Basic\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fhttpd:fhttpd:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"61050F88-DE1C-4C7C-BA63-1DAA0A2547E3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31265","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45278","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6493","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7015","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service (server exit) via a packet with a large length value that triggers a memory allocation failure."},{"lang":"es","value":"El motor de Unreal v3, utilizado en Unreal Tournament v3 1.3, Frontlines: Fuel of War v1.1.1, y otros productos, permite a atacantes remotos producir una denegación de servicio (salida del servidor) a través de un paquete con un valor de entero largo que inicia un fallo de localización de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament:3:1.3:*:*:*:*:*:*","matchCriteriaId":"9AB57FD3-DF3A-4214-9A4E-BBD05E7D72D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontlines:fuel_of_war:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"C2B3F85B-D64A-448D-AE99-49D101E9CB5E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0189.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/48292","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496280/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31140","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45095","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0189.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496280/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7016","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server."},{"lang":"es","value":"tnftpd, en versiones anteriores a la 20080929 divide largas cadenas de comandos en múltiples comandos, lo que permite a atacantes remotos llevar a cabo ataques de falsificación de petición en sitios cruzados (CSFR) mediante vectores desconocidos, probablemente en relación con un enlace ftp:// manipulado para un servidor tnftpd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:tnftpd:20040810:*:*:*:*:*:*:*","matchCriteriaId":"AC68BD7B-B1D0-41C2-94AE-3548FE7CEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:tnftpd:20061217:*:*:*:*:*:*:*","matchCriteriaId":"DDEBC33A-0575-49C1-B2CD-06BB08761E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:tnftpd:20080609:*:*:*:*:*:*:*","matchCriteriaId":"2C3BA76D-C8C1-41C8-ABBB-CCF81DE0F25F"}]}]}],"references":[{"url":"http://freshmeat.net/projects/tnftpd/?branch_id=14355&release_id=285654#","source":"cve@mitre.org"},{"url":"http://osvdb.org/48637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31958","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45534","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/tnftpd/?branch_id=14355&release_id=285654#","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7017","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928, allows remote attackers to inject arbitrary web script or HTML via the CN (CommonName) field in the subject of an X.509 certificate."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en analyse.php en CAcert 20080921, y posiblemente otras versiones anteriores a la 20080928, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo CN (CommonName) del asunto de un certificado X.509."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacert:cacert:20080921:*:*:*:*:*:*:*","matchCriteriaId":"27BE97DB-D007-4372-95F8-0EB488FA13AB"}]}]}],"references":[{"url":"http://www.cynops.de/advisories/AKLINK-SA-2008-007.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45515","source":"cve@mitre.org"},{"url":"http://www.cynops.de/advisories/AKLINK-SA-2008-007.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7018","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field (descr parameter) in an Add New Event action in an unspecified request as generated by an add action in index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en NashTech Easy PHP Calendar 6.3.25 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo Details (parámetro descr) en una acción Add New Event en una petición no especificada, tal y como es generada por una acción add en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nashtech:easy_php_calendar:6.3.25:*:*:*:*:*:*:*","matchCriteriaId":"7470B1DC-31D6-4639-9F15-062FB2F52381"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/496796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31478","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45517","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7019","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Esqlanelapse 2.6.1 and 2.6.2 allows remote attackers to bypass authentication and gain privileges via modified (1) enombre and (2) euri cookies."},{"lang":"es","value":"Esqlanelapse 2.6.1 y 2.6.2 permite a atacantes remotos evitar la autentificación y obtener privilegios modificando las cookies (1) enombre y (2) euri."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:esqlanelapse:esqlanelapse:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2DCDD246-6D10-4F80-B813-56911418589D"},{"vulnerable":true,"criteria":"cpe:2.3:a:esqlanelapse:esqlanelapse:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF2CEF5-ED5C-4F17-87B7-E1D42B4A47D9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31428","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45438","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6583","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7020","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer."},{"lang":"es","value":"McAfee SafeBoot Device Encryption 4 build 4750 y versiones anteriores almacena contraseñas de autenticación de pre-arranque en el búfer BIOS Keyboard y no limpia este búfer después del uso, lo cual permite a usuarios locales obtener información sensible leyendo las localizaciones de memoria físicas asociadas con este búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:safeboot_device_encryption:4:*:*:*:*:*:*:*","matchCriteriaId":"8C4C3873-FFCD-434C-88BF-F092BBBFF9F8"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2008/Sep/0378.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31903","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"cve@mitre.org"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08010.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45275","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2008/Sep/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-08010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7021","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an image or logo, then accessing it via a direct request to the file in an unspecified directory."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en editlogo.php en AvailScript Jobs Portal Script permite a usuarios remotos autenticados ejecutar código de su elección mediante la subida de un fichero con una extensión ejecutable como si fuera una imagen o un logo, y accederlo a través de una petición directa en un directorio no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:availscript:jobs_portal_script:-:*:*:*:*:*:*:*","matchCriteriaId":"5B9261B9-E16B-4ED2-BBEA-FDC8732A5F50"}]}]}],"references":[{"url":"http://secunia.com/advisories/31810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45335","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6514","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7022","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.ChilkatMailMan2.1) allows remote attackers to execute arbitrary programs via the LoadXmlEmail method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en ChilkatMail_v7_9.dll en el control ActiveX Chilkat Software IMAP (ChilkatMail2.ChilkatMailMan2.1) permite a atacantes remotos ejecutar programas de su elección mediante el método LoadXmlEmail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chilkatsoft:chilkat_imap_activex_control:7.9:*:*:*:*:*:*:*","matchCriteriaId":"8B8D05E9-E605-49F3-AE47-9645EC8D7AB9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45532","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6600","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7023","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation."},{"lang":"es","value":"Aruba Mobility Controller con ArubaOS 3.3.1.16, y posiblemente otras versiones, instala por defecto el mismo certificado X.509 por defecto para todas las instalaciones, lo que permite a atacantes remotos eludir la autenticación. NOTA: esto es sólo una vulnerabilidad cuando el administrador no sigue las recomendaciones de la documentación de seguridad del producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:arubanetworks:aruba_mobility_controller:-:*:*:*:*:*:*:*","matchCriteriaId":"864BE899-DE23-4C41-B17A-3218F6B2C11A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C79BFC0F-08A2-49CE-BA64-249093C2BFC5"}]}]}],"references":[{"url":"http://osvdb.org/51731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496604/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496622/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31336","source":"cve@mitre.org"},{"url":"http://osvdb.org/51731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496604/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496622/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7024","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to \"admin\" and setting the name parameter to \"users.\""},{"lang":"es","value":"admin.php en Arz Development The Gemini Portal 4.7 y versiones anteriores permite a atacantes remotos saltarse la autenticación y obtener privilegios administrativos fijando la cookie \"user\" con el valor \"admin\" y el parámetro \"name\" con el valor \"users\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arzdev:gemini_lite:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7B7BD679-7E52-49F8-826B-C1205DEF7D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:arzdev:gemini_lite:3.6:*:*:*:*:*:*:*","matchCriteriaId":"81810F8F-C549-473C-BCD0-2536E9813336"},{"vulnerable":true,"criteria":"cpe:2.3:a:arzdev:gemini_portal:4.7:*:*:*:*:*:*:*","matchCriteriaId":"5F1E5188-5F3E-4741-A6DF-FE1C2FB5B6B1"}]}]}],"references":[{"url":"http://osvdb.org/48639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496761/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31429","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45439","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6584","source":"cve@mitre.org"},{"url":"http://osvdb.org/48639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7025","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response."},{"lang":"es","value":"TrueVector en Check Point ZoneAlarm v8.0.020.000, con vsmon.exe en ejecución, permite a proxies HTTP remotos provocar una denegación de servicio (caída) y deshabilitar el módulo HIDS mediante una respuesta manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm:8.0.020.000:*:*:*:*:*:*:*","matchCriteriaId":"7C97EC71-5BE4-4790-BBD0-F85BE9731620"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/496764/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31431","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496764/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7026","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in (1) student/avatars/ or (2) professor/avatars/."},{"lang":"es","value":"Vulnerabilidad de carga de archivos sin restricciones en filesystem3.class.php en eFront 3.5.1 build 2710 y versiones anteriores permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable como un fichero de avatar y a continuación solicitando el fichero mediante una petición directa en (1) student/avatars/ or (2) professor/avatars/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"A0AD6773-F9FC-47D2-A8FD-2A711A8651A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC4945EB-C2DC-41FB-8B49-8F27D1EBF19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9648CD63-D34E-4298-8D54-2FF72C257477"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E993440A-7730-4540-B6BC-5CFC1636FE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B9A7A13D-A022-49A0-BED7-701D333724B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8802C5D3-64CD-4199-ABBC-F5AEE5AFDE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"BD62DC8C-619B-4B61-AFAC-B7F6AFCBEB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A230995D-9925-4774-9CFC-4329F756EE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"395AFAEC-9811-4CB8-A105-AB9B9C85DA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"E7699ABE-E6AB-490F-9D1E-34F1EE2467B6"}]}]}],"references":[{"url":"http://forum.efrontlearning.net/viewtopic.php?f=1&t=271","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/54294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496851/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31491","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45574","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6633","source":"cve@mitre.org"},{"url":"http://forum.efrontlearning.net/viewtopic.php?f=1&t=271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/54294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496851/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7027","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1."},{"lang":"es","value":"Libra File Manager 1.18 y versiones anteriores permite a atacantes remotos eludir la autenticación y obtener privilegios mediante el establecimiento de las cookies \"user\" y \"pass\" a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.18","matchCriteriaId":"93AF7428-B3B2-4962-A3EC-7417FCF22B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EC32424A-D58D-4CB8-82B8-58DEB5C09410"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.03:*:*:*:*:*:*:*","matchCriteriaId":"BB9543DA-0F76-4438-BE61-51D42412A813"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.05:*:*:*:*:*:*:*","matchCriteriaId":"8A152A89-1E0A-47A3-AABD-C5FBC4869EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.08:*:*:*:*:*:*:*","matchCriteriaId":"6D225985-9697-4704-AA54-1A9B9D7B8988"},{"vulnerable":true,"criteria":"cpe:2.3:a:libra_file_manager:php_filemanager:1.17:*:*:*:*:*:*:*","matchCriteriaId":"4DFE7EF9-9374-4DF3-9851-E830D424A7AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31422","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6579","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/6579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7028","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RPG.Board 0.8 Beta2 and earlier allows remote attackers to bypass authentication and gain privileges by setting the keep4u cookie to a certain value."},{"lang":"es","value":"RPG.Board 0.8 Beta2 y versiones anteriores permite a atacantes remotos eludir la autenticación y obtener privilegios mediante el establecimiento de la cookie \"keep4u\" a un valor determinado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:*:beta_1:*:*:*:*:*:*","versionEndIncluding":"0.0.8","matchCriteriaId":"53B62F45-B2CD-4EB2-AA4C-8C8C0C64381A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:0.0.8:beta_2:*:*:*:*:*:*","matchCriteriaId":"36B8E9A1-93E7-4563-9525-1FDD4BA712F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:0.8:beta_1:*:*:*:*:*:*","matchCriteriaId":"65D1D9FB-0047-42CE-A142-AF45E5BB659C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aves:rpg_board:0.8:beta_2:*:*:*:*:*:*","matchCriteriaId":"B826DF79-5F5B-4CDC-AC49-8C0B2447DFE6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/31466","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45501","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7029","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/."},{"lang":"es","value":"Vulnerabilidad de subida de archivo sin restricción en usercp.php en AlilG Application AliBoard Beta, permite a usuarios autenticados remotamente ejecutar código de su elección subiendo un archivo como avatar, con una extensión ejecutable y accediendo a él posteriormente a través de una petición directa al archivo en uploads/avatars/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alilg:aliboard:beta:*:*:*:*:*:*:*","matchCriteriaId":"46EA83BB-E0D6-4946-9F4A-F8AA4C351D67"}]}]}],"references":[{"url":"http://osvdb.org/51183","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487921/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27737","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40276","source":"cve@mitre.org"},{"url":"http://osvdb.org/51183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487921/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7030","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Site2Nite Real Estate Web, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) username -nombre de usaurio- o (2) password -contraseña- de un componente no especificado, puede que agentlist.asp. NOTA: Esta vulnerabilidad ha sido reportada por un investigador de poca confianza, por lo que puede tener incorrecciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:site2nite:real_estate_web:*:*:*:*:*:*:*:*","matchCriteriaId":"02DA53AC-8D44-49BB-B78F-33AD17E3DF59"}]}]}],"references":[{"url":"http://www.osvdb.org/51076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488070/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27779","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40509","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488070/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7031","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en Foxit Remote Access Server (también conocido como WAC Server) v2.0 Build 3503, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de paquete SSH largos. Vector distinto de CVE-2008-0151."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:wac_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4B62FEC-CB95-4E1E-9D69-7173B93782BA"}]}]}],"references":[{"url":"http://aluigi.org/adv/wachof-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/50997","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488366/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27873","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40608","source":"cve@mitre.org"},{"url":"http://aluigi.org/adv/wachof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488366/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7032","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición cruzada en sitios cruzados (CSRF) en la consola de gestión web en F5 BIG-IP v9.4.3 permite a atacantes remotos secuestrar la autenticación de los administradores para las peticiones que crean nuevos administradores y ejecutan comandos de consola, como se ha demostrado al usar tmui/Control/form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7D573E73-C132-4CFE-90CD-8FA4C77678BA"}]}]}],"references":[{"url":"http://osvdb.org/50985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487862/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487863/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27720","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40419","source":"cve@mitre.org"},{"url":"http://osvdb.org/50985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487862/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487863/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7033","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the section parameter in a section action to index.php, a different vulnerability than CVE-2008-2568.  NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Simple Shop Galore (com_simpleshop) de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"section\" en una acción \"section\" en index.php. Es una vulnerabilidad distinta a la CVE-2008-2568. NOTA: esta vulnerabilidad fue descubierta por un investigador que no es confiable, por lo que los detalles pueden ser incorrectos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galore:com_simpleshop:*:*:*:*:*:*:*:*","matchCriteriaId":"2D6439D7-7E8B-41E5-8BB3-F188D5A301B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.osvdb.org/52094","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488692","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40802","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/52094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7034","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3 allows remote attackers to execute arbitrary PHP code via a URL in unspecified vectors that modify the _smarty_compile_path variable in the fetch function."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en kernel/smarty/Smarty.class.php en PHPEcho CMS v2.0 rc3, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en vectores no especificados que modifican la variable _smarty_compile_path en la función \"fetch\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigran_abrahamyan:phpecho_cms:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"424BAF45-72ED-4F77-9F7F-352073B30F4E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0401.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51018","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27960","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40792","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0401.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7035","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the resistance field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en un componente no especificado en Simple Machines phpRaider v1.0.7 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del campo resistencia. NOTA: la procedencia de esta información es desconocida; lo detalles ha sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpraider:phpraider:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"82B44E2E-BB9F-48F2-B669-C7A5DF76DCF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:phpraider:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9E97ACB5-195E-41BD-A4B0-F2C42FCB64B8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27976","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40849","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7036","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier, and DevTracker module 0.20 for E-XooPS 1.0.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) direction and (2) order_by parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php del módulo DevTracker v3.0 de bcoos v1.1.11 y versiones anteriores, y el módulo DevTracker v0.20 de E-XooPS v1.0.8, permiten a usuarios remotos inyectar codigo de script web o código HTML a través los parámetros (1)direction y (2) order_by."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-xoops:e-xoops:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08","matchCriteriaId":"243B277E-5E4F-42F5-AAF1-B50A5321A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-xoops:e-xoops:1.05:r3:*:*:*:*:*:*","matchCriteriaId":"887B44D9-E66E-47FA-9907-990EB45D2B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-xoops:e-xoops:1.05:rev1:*:*:*:*:*:*","matchCriteriaId":"612472B6-AFE7-44B0-8618-331676BBF017"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-xoops:e-xoops:1.05:rev2:*:*:*:*:*:*","matchCriteriaId":"4367B09C-EF84-4546-B93E-23A8635A5717"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-xoops:e-xoops:1.05:rev3:*:*:*:*:*:*","matchCriteriaId":"2D118187-7614-4F5C-B557-F8CCC0762203"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:devtracker:0.20:*:*:*:*:*:*:*","matchCriteriaId":"89AF4CF8-7F93-433F-96C4-4D27CB509DC7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:devtracker:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EF0EF50-B5EC-4D18-9C1B-74EC19D6B212"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.11","matchCriteriaId":"E2AC698D-0626-4C76-ACF7-E2D262D7AD51"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"804AE6B2-78AC-4F30-B32E-750DC34E65CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3149225-061C-4DD4-A8E2-AFC1EA346403"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"22C78428-E995-46A4-9AFA-7B91963B744F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"2C0D78D1-7BAB-4B08-A761-73A91F557B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bcoos:bcoos:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"6BC539C7-3ED6-4ABB-AECB-5FF1A09C31F9"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2008/02/bcoos-and-e-xoops-devtracker-module-two.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/44334","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/44335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27619","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40306","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2008/02/bcoos-and-e-xoops-devtracker-module-two.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/44334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/44335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7037","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sidebar gadget in ITN News Gadget (aka ITN Hub Gadget) 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a short_title response."},{"lang":"es","value":"El accesorio Sidebar en ITN News Gadget (también conocido como ITN Hub Gadget) v1.06 para Windows Vista, y posiblemente otras versiones anteriores a la v1.23, permite a servidores web remotos o atacantes \"hombre en el medio\" (man-in-the-middle) ejecutar comandos de su elección mediante un script en una respuesta \"short_title\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itn:itn_news_gadget:1.06:*:*:*:*:*:*:*","matchCriteriaId":"92E53B73-AC1D-45F6-9E27-FB9106065748"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://www.mwrinfosecurity.com/publications/mwri_itn-news-gadget-advisory_2008-02-04.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27725","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43563","source":"cve@mitre.org"},{"url":"http://www.mwrinfosecurity.com/publications/mwri_itn-news-gadget-advisory_2008-02-04.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7038","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php.  NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo My_eGallery para PHP-Nuke, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gid en una acción showgall sobre modules.php. Nota: este asunto fue revelado por un investigador poco fiable, por lo que la información podría ser incorrecta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxdev:my_egallery:-:*:*:*:*:*:*:*","matchCriteriaId":"1943F997-8B2F-49C9-B6E9-6E5331309853"}]}]}],"references":[{"url":"http://osvdb.org/51021","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488916/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28030","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40910","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5203","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5242","source":"cve@mitre.org"},{"url":"http://osvdb.org/51021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488916/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7039","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter in a comment.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/comments.php en Gelato CMS v0.95 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"content\" en un comentario. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gelatocms:gelatocms:0.95:*:*:*:*:*:*:*","matchCriteriaId":"31EE181F-2818-4613-B802-E56C0878247D"}]}]}],"references":[{"url":"http://osvdb.org/44310","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/44/gelato-cms-xss.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27587","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40264","source":"cve@mitre.org"},{"url":"http://osvdb.org/44310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/44/gelato-cms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7040","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter.  NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ahah/sf-profile.php del módulo Yellow Swordfish Simple Forum de Wordpress permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro u. NOTA: este problema fue descubierto por un investigador que no es de confianza, por lo que los detalles pueden ser incorrectos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yellowswordfish:simple_forum:-:*:*:*:*:*:*:*","matchCriteriaId":"69AC2CAB-6987-4636-823C-F989E071F425"}]}]}],"references":[{"url":"http://osvdb.org/52210","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488279","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27854","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41578","source":"cve@mitre.org"},{"url":"http://osvdb.org/52210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7041","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:01.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php."},{"lang":"es","value":"AJ Classifieds permite a atacantes remotos saltarse la autenticación y obtener privilegios de administrador a través de una petición directa sobre admin/home.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:aj_classifieds:-:*:*:*:*:*:*:*","matchCriteriaId":"04290453-5BBB-46C7-8912-86AF8D802B4E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32256","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46547","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7089","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7042","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmp_sid parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en url.php en FreshScripts Fresh Email Script v1.0 hasta v1.11 permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"tmp_sid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freshscripts:fresh_email_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0790D0EF-7049-474C-84F5-3E5A21036B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freshscripts:fresh_email_script:1.11:*:*:*:*:*:*:*","matchCriteriaId":"E6DB5125-1CBE-46C4-9432-F9A42D30875C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32241","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46527","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7080","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7043","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to inject arbitrary web script or HTML via the Email parameter.  NOTE: this can be leveraged to modify cookies and conduct session fixation attacks."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en register.php en FreshScripts Fresh Email Script v1.0 hasta v1.11, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro Email. NOTA: Esto puede ser elevado para modificar cookies y conducir ataques de fijación de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freshscripts:fresh_email_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0790D0EF-7049-474C-84F5-3E5A21036B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freshscripts:fresh_email_script:1.11:*:*:*:*:*:*:*","matchCriteriaId":"E6DB5125-1CBE-46C4-9432-F9A42D30875C"}]}]}],"references":[{"url":"http://osvdb.org/49849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32241","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46529","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7080","source":"cve@mitre.org"},{"url":"http://osvdb.org/49849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7044","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to execute arbitrary SQL commands via the ques parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/include/newpoll.php en AJ Square Free Polling Script (AJPoll) Database version permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"ques\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:free_polling_script:*:*:*:*:*:*:*:*","matchCriteriaId":"860DCC2B-DB9D-4E29-93C2-DD36CA1879C3"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/3102","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46530","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7086","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7045","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php."},{"lang":"es","value":"AJ Square Free Polling Script (AJPoll) Database permite a atacantes remotos saltarse la autenticación y resetear los votos de la encuesta a través de una petición directa a  admin/resetvote.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:free_polling_script:*:*:*:*:*:*:*:*","matchCriteriaId":"860DCC2B-DB9D-4E29-93C2-DD36CA1879C3"}]}]}],"references":[{"url":"http://osvdb.org/49779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7086","source":"cve@mitre.org"},{"url":"http://osvdb.org/49779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7046","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"AJ Square Free Polling Script (AJPoll) permite a atacantes remotos evitar la autenticación y crear nuevas votaciones a través de una petición directa a admin/include/newpoll.php. Vector distinto del CVE-2008-7045. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:free_polling_script:*:*:*:*:*:*:*:*","matchCriteriaId":"860DCC2B-DB9D-4E29-93C2-DD36CA1879C3"}]}]}],"references":[{"url":"http://osvdb.org/49779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/49779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7047","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp."},{"lang":"es","value":"NatterChat v1.1 permite a los atacantes remotos evitar la autenticación y obtener privilegios de administrador para leer o borrar habitaciones y mensajes a través de una petición directa a admin/home.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:natterchat:natterchat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"514BE8C6-6DD3-41D0-B6CF-AD6106A3AAFB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32395","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46764","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7048","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) txtUsername parameter to registerDo.asp, as invoked from register.asp, or (2) txtRoomName parameter to room_new.asp.  NOTE: these issues might be resultant from XSS in SQL error messages."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) NatterChat v1.12 permiten a usuarios remotos inyectar código de script web o código HTML a través de el (1) parámetro txtUsername de registerDo.asp, cuando se invoca desde register.asp, o el (2) parámetro txtRoomName de room_new.asp.  NOTA: estos problemas pueden ser resultado de XSS en mensajes de error SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:natterchat:natterchat:1.12:*:*:*:*:*:*:*","matchCriteriaId":"754CD03A-0BC5-41F8-8374-E2C2FB758D41"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-11/0461.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46768","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-11/0461.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7049","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the (1) txtUsername parameter (aka Username) and (2) txtPassword parameter (aka Password) in a form generated by home.asp.  NOTE: due to lack of details, it is not clear whether this is related to CVE-2004-2206."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.asp en NatterChat v1.1 y v1.12 permite a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros 1) \"txtUsername\" (también conocido como Username) y (2) \"txtPassword\" (también conocido como Password) en un formulario generado por home.asp. NOTA: Debido a la falta de detalles del vendedor, no queda claro que esté relacionada con la vulnerabilidad CVE-2004-2206."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:natterchat:natterchat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"514BE8C6-6DD3-41D0-B6CF-AD6106A3AAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:natterchat:natterchat:1.12:*:*:*:*:*:*:*","matchCriteriaId":"754CD03A-0BC5-41F8-8374-E2C2FB758D41"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32385","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46748","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7172","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7050","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password_check function in auth/auth_phpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, (1) does not invoke the CheckPassword function with the required arguments, which always triggers an authentication failure, and (2) returns true instead of false when an authentication failure occurs, which allows remote attackers to bypass authentication and gain privileges with an arbitrary password."},{"lang":"es","value":"La función password_check en auth/auth_phpbb3.php en WoW Raid Manager v3.5.1 anterior a Patch 1, cuando usando autenticación PHPBB3, (1) no invoca la función CheckPassword con los argumentos requeridos, lo que siempre lanza un fallo de autenticación, y (2) devuelve verdadero en lugar de falso cuando se produce un fallo de autenticación, lo que permite a los atacantes remotos evitar la autenticación y ganar privilegios con una contraseña arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"71959C66-7190-4513-8042-4D8D5A651F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"EDB674C5-D4D4-41CA-BB09-AE6A368B5FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"11AF4B36-D51B-48B4-A613-0CAA5BE17FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"938EEB42-5FEA-4B12-A9E6-B3F53E02DA3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3242351A-C53D-4E68-8ACC-3D6FF029D07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1E14EC3B-FB10-4C3E-BCF0-09BC3F7ECD53"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowraidmanager:wowraidmanager:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"76E94008-29BC-40E8-8058-2172CCAFCD48"}]}]}],"references":[{"url":"http://github.com/Illydth/wowraidmanager/commit/7dd6367ae85003dd5d715431b6ab695f2c2f200a","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49704","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3109","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2153","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2167","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://github.com/Illydth/wowraidmanager/commit/7dd6367ae85003dd5d715431b6ab695f2c2f200a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/49704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7051","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a direct request to (1) user.php, (2) articles.php, (3) articlesuspend.php, (4) site.php, (5) statistics.php, (6) mail.php, (7) category.php, (8) subcategory.php, (9) changepassword.php, (10) polling.php, and (11) logo.php in admin/."},{"lang":"es","value":"AJ Square AJ Article permite a atacantes remotos saltar la funcionalidad de autenticación y acceso de administrador mediante una petición directa a (1) user.php, (2) articles.php, (3) articlesuspend.php, (4) site.php, (5) statistics.php, (6) mail.php, (7) category.php, (8) subcategory.php, (9) changepassword.php, (10) polling.php, y (11) logo.php en admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:aj_article:*:*:*:*:*:*:*:*","matchCriteriaId":"71FF1EA5-0CC9-49E4-9BCD-BAB051C27265"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32254","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3097","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7052","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T10:30:02.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en profile.php en Pre Projects Pre Real Estate Listings, permite a usuarios remotos autenticados ejecutar código de su elección subiendo un archivo con una extensión ejecutable como logo del perfil, después accediendo al mismo a través de una petición directa al fichero en re_images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:preprojects:pre_real_estate_listings:-:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDD4F-D306-43C9-A406-5FB5F9C1F9E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32257","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3121","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46564","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7053","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption."},{"lang":"es","value":"Control ActiveX LogMeIn Remote Access Utility (RACtrl.dll) permite a atacantes remotos provocar una denegación de servicio (caída) al configurar las propiedades de fgcolor y bgcolor a determinados valores largos que provocan una corrupción de memoria."}],"vendorComments":[{"organization":"LogMeIn","comment":"LogMeIn is aware of the CVE-2008-7053 issue and has resolved it on 9/3/2008. The fix is included in LogMeIn ActiveX Plugin since version 392-G2.”","lastModified":"2014-06-18T13:31:40.190"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logmein:ractrl.dll:*:*:*:*:*:*:*:*","matchCriteriaId":"A4A11944-3639-4AE1-B080-BD1859E65C72"}]}]}],"references":[{"url":"http://packetstorm.foofus.com/0808-exploits/logmein-activex.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30923","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44843","source":"cve@mitre.org"},{"url":"https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7053","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/6326","source":"cve@mitre.org"},{"url":"http://packetstorm.foofus.com/0808-exploits/logmein-activex.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-7053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/6326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7054","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the (1) gsLanguage and (2) language_home parameters to modules/diary/showdiary.php; (3) admin_home, (4) gsLanguage, and (5) language_home parameters to modules/diary/showdiarydetail.php; (6) gsLanguage and (7) language_home parameters to modules/diary/submit_diary.php; (8) admin_home parameter to modules/news/news_summary.php; (9) nLink, (10) gsLanguage, and (11) language_home parameters to modules/news/inlinenews.php; and possibly other unspecified vectors in (12) diary/showeventlist.php, (13) gallery/showgallery.php, (14) reviews/showreviews.php, (15) gallery/showgallerydetails.php, (16) reviews/showreviewsdetails.php, (17) news/shownewsdetails.php, (18) gallery/submit_gallery.php, (19) guestbook/submit_guestbook.php, (20) reviews/submit_reviews.php, (21) news/submit_news.php, (22) diary/inlineeventlist.php, and (23) news/archivednews_summary.php in modules/, related to the lack of directory traversal protection in modules/moduleSec.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en ezContents versión 2.0.3 permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de los parámetros (1) gsLanguage y (2) language_home en el archivo modules/diary/showdiary.php; parámetros (3) admin_home, (4) gsLanguage y (5) language_home en el archivo modules/diary/showdiarydetail.php; parámetros (6) gsLanguage y (7) language_home en el archivo modules/diary/submit_diary.php; (8) parámetro admin_home en el archivo  modules/news/news_summary.php; parámetros (9) nLink, (10) gsLanguage y (11) language_home en el archivo modules/news/inlinenews.php; y posiblemente otros vectores no especificados en los archivos (12) diary/showeventlist.php, (13) gallery/showgallery.php, (14) reviews/showreviews.php, (15) gallery/showgallerydetails.php, (16) review/showreviewsdetails.php , (17) news/shownewsdetails.php, (18) gallery/submit_gallery.php, (19) guestbook/submit_guestbook.php, (20) reviews/submit_reviews.php, (21) news/submit_news.php, (22) diary/inlineeventlist.php, y (23) news/archivednews_summary.php en modules/, relacionadas a la falta de protección de salto de directorio en el archivo modules/moduleSec.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BCCD2322-56E6-4626-AA65-A6F88AFAD775"}]}]}],"references":[{"url":"http://secunia.com/advisories/31606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47773","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47774","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47775","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47776","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47777","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495705/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30821","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44665","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6301","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/495705/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7055","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via \"....//\" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function."},{"lang":"es","value":"module.php en ezContents v2.0.3 permite a atacantes remotos evitar el mecanismo dee protección de salto de directorio para incluir y ejecutar ficheros locales de su elección mediante secuencias \"...//\" (doble punto punto barra) en el parámetro \"link\", no siendo filtrado adecuadamente al usar la función \"str_replace\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BCCD2322-56E6-4626-AA65-A6F88AFAD775"}]}]}],"references":[{"url":"http://secunia.com/advisories/31606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495705/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30821","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44663","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6301","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/495705/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7056","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request."},{"lang":"es","value":"BandSite CMS v1.1.4 no controla de acceso a adminpanel/phpmydump.php, lo que permite a atacantes remotos obtener copias de la base de datos a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grayscalecms:bandsite_cms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D205FE1A-0BBC-42AB-BF47-440BB224458F"}]}]}],"references":[{"url":"http://secunia.com/advisories/21992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30788","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44588","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6286","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7057","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en merchandise.php en BandSite CMS v1.1.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"type\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grayscalecms:bandsite_cms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D205FE1A-0BBC-42AB-BF47-440BB224458F"}]}]}],"references":[{"url":"http://secunia.com/advisories/21992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30788","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44590","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6286","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7058","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en BandSite CMS v1.1.4 permite a atacantes remotos secuestrar la autenticación de los administradores y forzar una desconexión a través de adminpanel/logout.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grayscalecms:bandsite_cms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D205FE1A-0BBC-42AB-BF47-440BB224458F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30788","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44589","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6286","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7059","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en One-News Beta v2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro q."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aled_owen:one-news:*:beta2:*:*:*:*:*:*","matchCriteriaId":"07FB188A-4A5B-416C-939E-D923D862E4C6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/495679/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30804","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44644","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495679/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7060","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the (1) title or (2) content parameters in a news item to add.php, and the (3) itemnum, (4) author, or (5) comment parameters in a comment to index.php.  NOTE: vectors 1 and 2 require user authentication."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en One-News Beta v2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"title\" o (2) \"content\" en un elemento noticia en add.php, y los parámetros (3) \"itemnum\", (4) \"author\", o (5) \"comment\" en un comentario en \"index.php\". NOTA: los vectores 1 y 2 requieren autenticación del usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:one-news:one-news:*:beta2:*:*:*:*:*:*","matchCriteriaId":"7E052EA2-32AA-4F86-AE16-734A1DB4E734"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/495679/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30804","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44645","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44646","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495679/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7061","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994.  NOTE: there is inconsistent information about the environments under which this issue exists."},{"lang":"es","value":"El gestor de \"tooltips\" (chrome/views/tooltip_manager.cc) de Google Chrome v0.2.149.29 Build 1798 y, posiblemente, de otras versiones anteriores a la v0.2.149.30 permite a atacantes remotos provocar una denegación de servicio (consumo de toda la CPU o caída de la aplicación) a través de una etiqueta con un atributo de título largo, que no es adecuadamente manejada cuando se muestra un \"tooltip\". Es una vulnerabilidad diferente a la CVE-2008-6994. NOTA: existen incosistencias en la información sobre los entornos bajo los que esta vulnerabilidad existe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2008/09/beta-release-0214930.html","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/render_widget_host_hwnd.cc?r1=1287&r2=2042&pathrev=2042","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://src.chromium.org/viewvc/chrome/trunk/src/chrome/views/tooltip_manager.cc?r1=1287&r2=2042&pathrev=2042","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=2042","source":"cve@mitre.org"},{"url":"http://www.blackhat.org.il/exploits/chrome-freeze-exploit.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496078/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496094/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496101/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496126/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496138/100/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496145/100/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496146/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496151/100/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496172/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30975","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45039","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2008/09/beta-release-0214930.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/render_widget_host_hwnd.cc?r1=1287&r2=2042&pathrev=2042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://src.chromium.org/viewvc/chrome/trunk/src/chrome/views/tooltip_manager.cc?r1=1287&r2=2042&pathrev=2042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=2042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.org.il/exploits/chrome-freeze-exploit.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496078/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496094/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496101/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496126/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496138/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496145/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496146/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496151/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/496172/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7062","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/."},{"lang":"es","value":"Vulnerabilidad de subida de archivo sin restricción en admin/index.php del módulo Download Manager v1.0 para LoveCMS v1.6.2 Final, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión ejecutable y posteriormente accediendo a él a través de una petición directa a uploads/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lovecms:lovecms:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"682D1313-5E31-48F8-9A38-B45CCB1A5872"}]}]}],"references":[{"url":"http://osvdb.org/50276","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46871","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7233","source":"cve@mitre.org"},{"url":"http://osvdb.org/50276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7063","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb."},{"lang":"es","value":"Ocean12 FAQ Manager Pro almacena información sensible bajo el directorio web raíz con un  control de acceso insuficiente, lo que permite a atacantes remotos descargar la base de datos a través de una petición directa a admin/o12faq.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocean12tech:faq_manager_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"5FC1609D-17C4-4108-B53A-2EFD29CEE413"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46954","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7064","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when running on Windows, allows remote attackers to include and execute arbitrary local files via a \"\\\" (backslash) in the lang parameter to index.php, which bypasses a protection mechanism that only checks for \"/\" (forward slash), as demonstrated by uploading and including PHP code in an avatar file."},{"lang":"es","value":"La vulnerabilidad de salto del directorio en la función get_lang en el archivo global.php en Quicksilver Forums versión 1.4.2 y anteriores, como es usado en QSF Portal anterior a versión 1.4.5, cuando es ejecutado en Windows, permite a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un \"\\\" (barra diagonal invertida) en el parámetro lang en archivo index.php, que omite un mecanismo de protección que solo comprueba \"/\" (barra diagonal), como es demostrado al cargar e incluir el código PHP en un archivo avatar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quicksilver_forums:quicksilver_forums:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F47737FE-E985-4C4A-86C6-A13EC17CE42C"}]}]}],"references":[{"url":"http://osvdb.org/50143","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38670","source":"cve@mitre.org"},{"url":"http://www.qsfportal.com/index.php?a=newspost&t=191","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/32452","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46823","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46828","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7217","source":"cve@mitre.org"},{"url":"http://osvdb.org/50143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.qsfportal.com/index.php?a=newspost&t=191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/32452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7065","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP packet to UDP port 5060."},{"lang":"es","value":"Los dispositivos Siemens C450 IP y C475 IP VoIP permiten a atacantes remotos provocar una denegación de servicio (desconexión de llamadas y reinicio del dispositivo) a través de un paquete SIP manipulado al puerto UDP 5060."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:gigaset_c450_ip:-:*:*:*:*:*:*:*","matchCriteriaId":"C418EA24-2674-44A4-B64B-D1229A4837B2"},{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:gigaset_c475_ip:-:*:*:*:*:*:*:*","matchCriteriaId":"92CE7C50-A68E-4337-AAD9-11EFEF0078C4"}]}]}],"references":[{"url":"http://osvdb.org/50274","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498599/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32451","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46820","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7220","source":"cve@mitre.org"},{"url":"http://osvdb.org/50274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498599/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7066","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters."},{"lang":"es","value":"OpenForum v0.66 Beta permite a atacantes remotos evitar la autenticación y restaurar las contraseñas de otros usuarios a través de una petición directa con el parámetro \"update\" ajustado a \"1\" y los parámetros \"usuario\" y \"contraseña\" modificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2enetworx:openforum:0.66:beta:*:*:*:*:*:*","matchCriteriaId":"43B4C55E-0004-4355-89D7-25DE3CCA178A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32536","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46969","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7291","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7067","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[PT_Config][dir][data] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en admin/plugins/Online_Users/main.php en PageTree CMS v0.0.2 BETA 0001 permite a atacantes remotos ejecutar código PHP arbitrario a traves de una URL en el parámetro GLOBALS[PT_Config][dir][data]"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagetreecms:page_tree_cms:0.0.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"6D87CFE1-0F10-4B2A-B801-A794BAACF0E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32510","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46922","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7255","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7068","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file truncation) via a key with the NULL byte.  NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database entries but does not have permissions to truncate the file."},{"lang":"es","value":"La función dba_replace en PHP v5.2.6 y 4.x permite a atacantes dependientes de contexto producir una denegación de servicio (corte de fichero) a través de una clave con un byte NULL. NOTA: Esto solo se produce en unas circunstancias muy concretas en la cual el atacante puede modificar o añadir las entradas de la base de datos pero no tiene permisos para cortar el fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"This is not a security issue. A user with read and write access to a file can reasonably be expected to manipulate the contents of the file, including truncating it. Instead of using dba_replace(), a user could simply fopen() the file in write mode, which provides the same end-result.","lastModified":"2009-08-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1313&r2=1.2027.2.547.2.1314&","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/58","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/52206","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498746/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498981/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498982/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47316","source":"cve@mitre.org"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1313&r2=1.2027.2.547.2.1314&","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/58","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/52206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498746/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498982/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7069","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat."},{"lang":"es","value":"All Club CMS (ACCMS) v0.0.2 almacena información sensible en la raíz de la web sin los suficientes controles de acceso, lo que permite a atacantes remotos obtener la base de datos de información de la configuración, incluyendo las credenciales, a través de una petición directa a accms.dat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.2","matchCriteriaId":"26DDA5C5-21E3-4558-ACFA-120FF796A171"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"C03A4FF9-6FAB-4E34-8CF6-A62FC85AB315"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"D9EDEF96-9AC0-49FC-9D75-85C13CD00A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"81504884-9E4C-498C-AB8D-D113FB7831F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"299A6583-FBE6-490E-ABF6-DC32DAF8983B"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"127A9BB8-2BD2-4AC6-84BE-64CD31666CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"EFECE6F3-7443-42B9-B51B-E6FEAD9600C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_arbogast:accms:0.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"E51A4E80-722A-473C-BFE6-C2EEC25B1391"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7266","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7070","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a \" (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI.  NOTE: this might be due to an incomplete fix for CVE-2007-2951."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en el gestor de la URI en KVIrc v3.4.2 Shiny permite a atacantes remotos ejecutar comandos arbitrarios a través de \" (comillas) seguidas de switches de linea de comando en la URI (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:///. NOTA: Esto debería producirse debido a un arreglo incompleto de CVE-2007-2951."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kvirc:kvirc:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B6742F39-882E-47E3-A375-B43C7ED771C3"}]}]}],"references":[{"url":"http://retrogod.altervista.org/kvirc_342_cmd.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32410","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498557/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32410","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46779","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7181","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/kvirc_342_cmd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498557/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7071","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en authenticate.php en Chipmunk Topsites permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro \"username\", relacionado con login.php. NOTA: Algunos de los detalles fueron obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk-scripts:chipmunk_topsites:-:*:*:*:*:*:*:*","matchCriteriaId":"103BB5CB-759E-474E-B8C6-BE77442FBD4C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32469","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46836","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7227","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7072","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Chipmunk Topsites permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"start\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk-scripts:chipmunk_topsites:-:*:*:*:*:*:*:*","matchCriteriaId":"103BB5CB-759E-474E-B8C6-BE77442FBD4C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32470","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46837","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7227","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7073","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en lib/action/rss.php en RSS module v0.1 para Pie Web M{a,e}sher, cuando register_globals esta activado, permite a atacantes remotos ejecutar código PHP de forma arbitraria a través de una URL en el parámetro \"lib\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rssmodule:rss_module:0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF5047A0-EFBE-44C2-BEFC-B8F9F732B363"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ekkaia:pie_web:*:*:*:*:*:*:*:*","matchCriteriaId":"725564FB-E8E0-4BA1-9797-725B68C1F36C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32465","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.z0rlu.blogspot.com/2008/11/pie-web-maesher-mod-rss-01-remote-file.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46834","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7225","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.z0rlu.blogspot.com/2008/11/pie-web-maesher-mod-rss-01-remote-file.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7074","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled \"when displaying the signon message.\""},{"lang":"es","value":"Vulnerabilidad de formato de cadena en MemeCode Software i.Scribe desde v1.88 hasta v2.00 anteriores a la Beta9 permite a servidores SMTP remotos producir una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de los especificadores del formato de cadena en la respuesta del servidor, lo que no es correctamente manejado \"cuando se muestra el mensaje signon\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:1.88:*:*:*:*:*:*:*","matchCriteriaId":"B43F9986-6C5A-44C4-8B74-8973A221F466"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:1.89:*:*:*:*:*:*:*","matchCriteriaId":"79726288-F9AD-4378-BBCC-FED62FFAD995"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:1.90:*:*:*:*:*:*:*","matchCriteriaId":"E3C99347-3030-4CFA-8615-4410B16BFF28"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:alpha1:*:*:*:*:*:*","matchCriteriaId":"2102E98F-39AC-41A2-8F63-6E8F0AAD3729"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:alpha2:*:*:*:*:*:*","matchCriteriaId":"FD0C7F29-D138-481F-BBB4-2AA18D87C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:alpha3:*:*:*:*:*:*","matchCriteriaId":"B416E217-2274-41B0-9E2D-338462682A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:alpha4:*:*:*:*:*:*","matchCriteriaId":"77867372-C31A-4C5E-B89C-C07A6806A9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:beta10:*:*:*:*:*:*","matchCriteriaId":"0A97611C-5C8B-43EF-A5F9-41196190E59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:beta11:*:*:*:*:*:*","matchCriteriaId":"DFD7A3FC-87EC-4D6D-B4D9-4E97E484AAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:beta6:*:*:*:*:*:*","matchCriteriaId":"1E9F9068-242C-427A-B787-FCAEF427601E"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:beta7:*:*:*:*:*:*","matchCriteriaId":"E3A14D50-F2B1-43DC-9197-2BD7E4DA98E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:beta8:*:*:*:*:*:*","matchCriteriaId":"48E483AB-5EE1-40C4-BF6D-96C582427BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcode:i.scribe:2.00:beta9:*:*:*:*:*:*","matchCriteriaId":"084F9645-8819-4C1D-9403-5F8BEAE7F5FB"}]}]}],"references":[{"url":"http://memecode.com/site/ver.php?id=264","source":"cve@mitre.org"},{"url":"http://osvdb.org/50232","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46970","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7249","source":"cve@mitre.org"},{"url":"http://memecode.com/site/ver.php?id=264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7075","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via (1) the subcatid parameter to article.list.php; or the artid parameter to (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, or (5) article.download.php; and (6) the PATH_INFO to article.download.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de inyeccion SQL en Kalptaru Infotech Ltd. Star Articles v6.0 permite a atacantes remotos inyectar comandos SQL arbitrarios a traves de (1) el parametro subcatid a article.list.php; o el parametro artid a (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, o (5) article.download.php; y (6) el PATH_INFO a article.download.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptaru_infotech:stararticles:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E2730A6-9E62-407E-9A41-B7BCBA121A64"}]}]}],"references":[{"url":"http://osvdb.org/50452","source":"cve@mitre.org"},{"url":"http://osvdb.org/50453","source":"cve@mitre.org"},{"url":"http://osvdb.org/50454","source":"cve@mitre.org"},{"url":"http://osvdb.org/50455","source":"cve@mitre.org"},{"url":"http://osvdb.org/50456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7240","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7243","source":"cve@mitre.org"},{"url":"http://osvdb.org/50452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/3269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7076","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile photo, then accessing it via a direct request to the file in authorphoto/."},{"lang":"es","value":"Vulnerabilidad de subida no restringida de ficheros en user.modify.profile.php en Kalptaru Infotech Ltd. Star Articles v6.0 permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un fichero con una extensión ejecutable como la foto del perfil, cuando es accedido a través de una petición directa en authorphoto/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptaru_infotech:stararticles:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E2730A6-9E62-407E-9A41-B7BCBA121A64"}]}]}],"references":[{"url":"http://osvdb.org/50459","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46982","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7251","source":"cve@mitre.org"},{"url":"http://osvdb.org/50459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7077","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SailPlanner v0.3a permite a atacantes remotos ejecutar comandos SQL a traves delos campos (1) \"username\" y (2) \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:relative:sailplanner:0.3a:*:*:*:*:*:*:*","matchCriteriaId":"016D86DB-3A01-4808-AD90-423D7084A873"}]}]}],"references":[{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln32521.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46932","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7267","source":"cve@mitre.org"},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln32521.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7078","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute arbitrary code via a long argument to the (2) MKD, (3) XMKD, (4) RMD, and other unspecified commands in the FTP component."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Rumpus anteriores a v6.0.1 permite a atacantes remotos (1) producir una denegación de servicio (fallo de la segmentación) a traves de un verbo HTTP largo en el componente HTTP; y permite a usuarios remotos autenticados ejecutar código arbitrario a traves de un argumento largo a los comandos (2) MKD, (3) XMKD, (4) RMD, y otros sin especificar en el componente FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxum:rumpus:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"E3024D27-B634-419B-A951-20AAD007D70D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maxum.com/Rumpus/News601.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498786/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32558","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32560","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46987","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46988","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7314","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maxum.com/Rumpus/News601.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498786/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7079","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in a .M3U playlist file.  NOTE: this issue might be related to CVE-2008-0619."},{"lang":"es","value":"Desbordamiento de búfer en Nero ShowTime v5.0.15.0  permite a atacantes remotos producir una denegación de servicio (caída) y posiblemente una ejecución arbitraria de código a través de una entrada larga en un fichero de lista de reproducción .M3U. NOTA: Este hecho esta relacionado con CVE-2008-0619."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nero:showtime:5.0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"F03E0D20-0239-4065-89C9-F4CE3D60C7E9"}]}]}],"references":[{"url":"http://osvdb.org/50199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32446","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46811","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7207","source":"cve@mitre.org"},{"url":"http://osvdb.org/50199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7080","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql."},{"lang":"es","value":"Team PHP PHP Classifieds Script almacena información sensible en la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos obtener la base de datos de las credenciales a través de una peticion directa para admin/backup/datadump.sql."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpclassifiedsscript:php_classifieds_script:*:*:*:*:*:*:*:*","matchCriteriaId":"B1DD0116-0D22-41E4-9FD4-E25D0EB105A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/32776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50153","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46803","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/50153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7081","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"userHandler.cgi en el firmware RaidSonic ICY BOX NAS v2.3.2.IB.2.RS.1 permite a atacantes remotos evitar la autenticación y conseguir privilegios de administrador cambiando el parámetro \"login\" a \"admin\". NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:raidsonic:icy_box_nas:2.3.2.ib.2.rs.1:*:*:*:*:*:*:*","matchCriteriaId":"39DBF503-AA49-441D-8EB4-1D09450C81CA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46968","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7082","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.733","lastModified":"2025-09-26T19:39:38.973","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) deleteposts actions, which allows remote attackers to steal the token and bypass the cross-site request forgery (CSRF) protection mechanism to hijack the authentication of moderators by reading the token from the HTTP Referer header."},{"lang":"es","value":"MyBB (también conocido como MyBulletinBoard) v1.4.3 incluye el parámetro \"my_post_key\" en URLs en moderation.php con las acciones (1) \"mergeposts\", (2) \"split\", y (3) \"deleteposts\", lo que permitiría a atacantes remotos robar la credencial de autenticación y evitar la protección de falsificación de petición en sitios cruzados (CSRF) y secuestrar la autenticación de los moderadores mediante la lectura de la credencial de autenticación de la cabecera HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0F6FC2B1-45DF-439E-8BAE-A15A08E7D9F7"}]}]}],"references":[{"url":"http://osvdb.org/50275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498630/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32467","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46885","source":"cve@mitre.org"},{"url":"http://osvdb.org/50275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/498630/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7083","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T10:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ReVou Micro Blogging Twitter clone permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los campos (1) nombre de usuario y (2) contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:revou:micro_blogging_twitter_clone:*:*:*:*:*:*:*:*","matchCriteriaId":"31D89A04-8E06-48D6-9229-9AFA47D6BC63"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/32525","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46907","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7084","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:16.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servidor web v1.0 en Velocity Security Management System, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hirschelectronics:velocity_security_management_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43FC62C8-384F-4514-B889-B91EF39523B3"}]}]}],"references":[{"url":"http://osvdb.org/51464","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494422/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30261","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43867","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6151","source":"cve@mitre.org"},{"url":"http://osvdb.org/51464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494422/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7085","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:16.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Maian Greetings v2.0 Basic y Advanced, permite a atacantes remotos ejecutar secuencias de comandos SQL de su elección a través de los parámetros (1) \"id\" en una acción viewpage  a la URI por defecto, probablemente index.php, o (2) \"divid\" en una acción schedule a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:advanced:*:*:*:*:*","matchCriteriaId":"D45D14DD-701E-440E-8759-CD697E3ACF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thehockeystop:hockeystats_online:2.0:*:basic:*:*:*:*:*","matchCriteriaId":"F7805DAA-6BCD-4B7C-946C-AD447B2947E1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30248","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43852","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6084","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7086","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:16.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin."},{"lang":"es","value":"Maian Greetings v2,1 permite a atacantes remotos evitar la autenticación y obtener privilegios administrativos estableciendo la cookie mecard_admin_cookie a admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maianscriptworld:maian_greetings:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B25880B4-5128-455F-BF54-74C75A7CC7B8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30199","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43744","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7087","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:16.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en search_wA.php en OpenPro v1.3.1, permite a atacantes remotos ejecutar  código PHP de su elección a través de una URL en el parámetro LIBPATH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpro:openpro:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C679E761-98E4-4477-B356-F23AE22273DA"}]}]}],"references":[{"url":"http://osvdb.org/51466","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494426/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30264","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52898","source":"cve@mitre.org"},{"url":"http://osvdb.org/51466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/494426/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7088","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:16.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path.  NOTE: this may be the same vulnerability as CVE-2008-0251, but this is not clear due to lack of details from the vendor."},{"lang":"es","value":"Vulnerabilidad de subida de archivo sin restricción en upload.php en PhotoPost vBGallery v2.4.2, permite a usuarios autenticados remotamente la ejecución de código de su elección subiendo un archivo con una extensión ejecutable seguida de una extensión segura, después accediendo a él a través de una petición directa en una determinada ruta. NOTA: podría tratarse de la misma vulnerabilidad que CVE-2008-0251, pero no está claro debido a la falta de detalles por parte del fabricante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_vbgallery:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8EC9E408-D903-43B6-B15E-EB7EED7191EA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30249","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43845","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6082","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7089","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Pligg v9.9 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección  a través del parámetro \"keyword\" en una acción search a user.php y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"9.9.0","matchCriteriaId":"74D4E140-8598-4BC4-BED2-D884BF4F1452"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.5:*:*:*:*:*:*:*","matchCriteriaId":"BC61B629-A379-4D0B-B653-F8C17B1F69A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.0:beta:*:*:*:*:*:*","matchCriteriaId":"66E91F30-8583-40CF-A2D5-4631DECEAA08"}]}]}],"references":[{"url":"http://www.gulftech.org/?node=research&article_id=00120-07312008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/50186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44187","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6173","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00120-07312008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/50186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7090","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Pligg v9.9 y anteriores, permite a atacantes remotos (1) determinar la existencia de archivos de su elección  a través de ..(punto punto) en la variable $tb_url en trackback.php o (2) añadir archivos de su elección a través de ..(punto punto) en el parámetro \"template\" a settemplate.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"9.9","matchCriteriaId":"CE717C7E-C2C0-4652-A1C0-F3360B1CE111"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.5:*:*:*:*:*:*:*","matchCriteriaId":"BC61B629-A379-4D0B-B653-F8C17B1F69A5"}]}]}],"references":[{"url":"http://www.gulftech.org/?node=research&article_id=00120-07312008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/50187","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50188","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44190","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44191","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6173","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00120-07312008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/50187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7091","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Pligg v9.9 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección  a través de el (1)parámetro id a vote.php, que no está manejado adecuadamente en libs/link.php; de los parámetros (2) id ao trackback.php; (3) un parámetro no especificado a submit.php; (4) la variable requestTitle en una consulta a  story.php; las variables (5) requestID y (6) requestTitle en recommend.php; los parámetros(7) categoryID a cloud.php; (8) title a out.php; (9) username a login.php; (10) id a cvote.php y(11) commentid a edit.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"9.9.0","matchCriteriaId":"74D4E140-8598-4BC4-BED2-D884BF4F1452"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.5:*:*:*:*:*:*:*","matchCriteriaId":"BC61B629-A379-4D0B-B653-F8C17B1F69A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pligg:pligg_cms:9.9.0:beta:*:*:*:*:*:*","matchCriteriaId":"66E91F30-8583-40CF-A2D5-4631DECEAA08"}]}]}],"references":[{"url":"http://www.gulftech.org/?node=research&article_id=00120-07312008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/50189","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50190","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50191","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50192","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50193","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50194","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50195","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50196","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50197","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/50198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/494987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44193","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6173","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00120-07312008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/50189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/50198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/494987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7092","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to inject arbitrary web script or HTML via a Javascript event in the (1) url, (2) PageName, and (3) title parameters in a CustomBookMarkLink action to Campaign/Campaign; (4) a Javascript event in the displayIcon parameter to Campaign/updateOfferTemplateSubmit.do (aka the templates web page); (5) crafted input to Campaign/CampaignListener (aka the listener server), which is not properly handled when displaying the status log; and (6) id parameter to Campaign/campaignDetails.do, (7) id parameter to Campaign/offerDetails.do, (8) function parameter to Campaign/Campaign, (9) sessionID parameter to Campaign/runAllFlowchart.do, (10) id parameter in an edit action to Campaign/updateOfferTemplatePage.do, (11) Frame parameter in a LoadFrame action to Campaign/Campaign, (12) affiniumUserName parameter to manager/jsp/test.jsp, (13) affiniumUserName parameter to Campaign/main.do, and possibly other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en Affinium Campaign de Unica versión 7.2.1.0.55,  permite a atacantes remotos inyectar script web o HTML arbitrario por medio de un event Javascript en los parámetros (1) url, (2) PageName y (3) title en una acción CustomBookMarkLink en Campaign/Campaign; (4) un evento Javascript en el parámetro displayIcon en archivo Campaign/updateOfferTemplateSubmit.do (también se conoce como la página web de plantillas); (5) una entrada diseñada en Campaign/CampaignListener (también se conoce como el servidor de escucha), que no se maneja apropiadamente cuando se muestra el registro de estado; y (6) parámetro id en archivo Campaign/campaignDetails.do, (7) parámetro id en archivo Campaign/offerDetails.do, (8) parámetro función en archivo Campaign/Campaign, (9) parámetro sessionID en archivo Campaign/runAllFlowchart.do, (10) parámetro id en una acción edit en archivo Campaign/updateOfferTemplatePage.do, (11) parámetro frame en una acción LoadFrame en Campaign/Campaign, (12) parámetro affiniumUserName en archivo manager/jsp/test.jsp, (13) parámetro affiniumUserName en archivo Campaign/main.do, y posiblemente otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unica:affinium_campaign:7.2.1.0.55:*:*:*:*:*:*:*","matchCriteriaId":"1989FF33-E3C4-466D-A721-D9C5327677CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31280","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47520","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47522","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47523","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47525","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/47526","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/47528","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/47530","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/286.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/288.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/289.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/290.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/47526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/47528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/47530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/286.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/288.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/289.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.portcullis.co.uk/290.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7093","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to (1) create arbitrary directories or files via a .. (dot dot) in the folder name in the new folder functionality or (2) list arbitrary files via a crafted request to Campaign/CampaignListener."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Unica Affinium Campaign v7.2.1.0.55, permite a atacantes remotos (1) crear directorio o archivos de su elección a través de ..(punto punto) en el nombre de carpeta en la nueva funcionalidad \"new Folder\" o (2) listar archivos de su elección a través de peticiones manipuladas aCampaign/CampaignListener."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unica:affinium_campaign:7.2.1.0.55:*:*:*:*:*:*:*","matchCriteriaId":"1989FF33-E3C4-466D-A721-D9C5327677CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31280","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47519","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/47529","source":"cve@mitre.org"},{"url":"http://www.portcullis.co.uk/287.php","source":"cve@mitre.org"},{"url":"http://www.portcullis.co.uk/291.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/47529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.portcullis.co.uk/287.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.portcullis.co.uk/291.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7094","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Campaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows remote attackers to cause a denial of service (server crash) via a crafted length field that triggers (1) connection exhaustion or (2) memory allocation failure."},{"lang":"es","value":"Campaign/CampaignListener en el servidor de escucha en Unica Affinium Campaign v7.2.1.0.55, permite a atacantes remotos provocar una denegación de servicio (caída de servidor) a través de un campo con una longitud manipulada que lanza (1) un agotamiento de conexión o (2) un fallo de asignación de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unica:affinium_campaign:7.2.1.0.55:*:*:*:*:*:*:*","matchCriteriaId":"1989FF33-E3C4-466D-A721-D9C5327677CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/31280","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47518","source":"cve@mitre.org"},{"url":"http://www.portcullis.co.uk/292.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44076","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/47518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.portcullis.co.uk/292.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7095","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName (1.3.6.1.6.3.18.1.1.1.2) or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (1.3.6.1.6.3.16.1.2.1.3) with knowledge of one community string, and (2) read SNMPv3 user names via SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB."},{"lang":"es","value":"Demonio en ArubaOS v3.3.2.6 en Aruba Mobility Controller no restringe el acceso SNMP, lo que permite a los atacantes remotos (1) leer todas las cadenas de caracteres SNMP de la comunidad a través SNMP-COMMUNITY-MIB::snmpCommunityName (v1.3.6.1.6.3.18.1.1.1.2) o SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (v1.3.6.1.6.3.16.1.2.1.3) con conocimiento de una cadena de caracteres de la comunidad, y (2) leer SNMPv3 nombres de usuario a través SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:arubanetworks:aruba_mobility_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"7CEC5D17-929C-4814-A021-3AC9251F6EA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CF90F10B-64EA-4BFB-991F-11BD3192E2AB"}]}]}],"references":[{"url":"http://osvdb.org/51916","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498033/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32102","source":"cve@mitre.org"},{"url":"http://osvdb.org/51916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498033/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7096","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3."},{"lang":"es","value":"Intel Desktop y Intel Mobile Boards con firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, y DX38BT, permite a administradores locales con privilegios \"ring\" 0, obtener privilegios adicionales y modificar el código que se ejecuta en el modo \"System Management\", o acceder a la memoria del hipervisor como se demostró en la Black Hat 2008 con el accedo a ciertos registros remapeados en Xen v3.3"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dg33bu:*:*:*:*:*:*:*","matchCriteriaId":"D1376E2A-28CB-4376-B1EF-A2DE6B8C74B1"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dg33fb:*:*:*:*:*:*:*","matchCriteriaId":"6713EC82-4581-435F-BA76-21CBFA7F5DF4"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dg33tl:*:*:*:*:*:*:*","matchCriteriaId":"79EC6C9F-2D7E-465A-8A6D-3E8C3119ECED"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dp35dp:*:*:*:*:*:*:*","matchCriteriaId":"36675625-0E36-4814-9953-1851F1269608"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dq35jo:*:*:*:*:*:*:*","matchCriteriaId":"DD17FF68-F220-4EC2-888D-F8B516363C37"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dq35mp:*:*:*:*:*:*:*","matchCriteriaId":"C51D4DBA-4A7D-443D-BF1A-1A16CE1A291D"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:dx38bt:*:*:*:*:*:*:*","matchCriteriaId":"DF9D3283-A387-4B02-8371-C559C9A521F0"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:bios:mgm965tw:*:*:*:*:*:*:*","matchCriteriaId":"B0243E43-EE68-4EC8-87BF-648ED9A1C4AD"}]}]}],"references":[{"url":"http://invisiblethingslab.com/bh08/part2-full.pdf","source":"cve@mitre.org"},{"url":"http://osvdb.org/49901","source":"cve@mitre.org"},{"url":"http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html","source":"cve@mitre.org"},{"url":"http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30823","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44676","source":"cve@mitre.org"},{"url":"http://invisiblethingslab.com/bh08/part2-full.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/49901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7097","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands via (1) the $id variable in admin/includes/dele_cpac.php, (2) $ord[order_id] variable in payments/payment_received.php, (3) $id variable in includes/functions.php, and (4) unspecified variables in modules/chat.php, as demonstrated via the (a) show parameter in an online action to index.php; (b) PATH_INTO to the room/ handler; (c) image and (d) id parameters in a vote action to index.php; (e) PATH_INFO to the blog/ handler; and (f) id parameter in a blog_edit action to index.php."},{"lang":"es","value":"Vulnerabilidad múltiple de inyección SQL en Qsoft K-Rate Premium permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de (1) la variable $id en admin/includes/dele_cpac.php, (2)  variable $ord[order_id] en payments/payment_received.php, (3) variable $id en includes/functions.php, y (4) variables no especificada en modules/chat.php, como se demuestra a través del a) parámetro show en una acción on-line para index.php; (b) PATH_INTO para room/ handler; (c) imagen y (d) parámetro id en una acción vote para index.php; (e) PATH_INFO para el blog/ handler; y (f) parámetro id en una acción blog_edit para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qsoft-inc:k-rate:-:-:premium:*:*:*:*:*","matchCriteriaId":"E8FB5094-D224-43F3-9F7C-73756B0F05A9"}]}]}],"references":[{"url":"http://osvdb.org/48338","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30842","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44670","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6312","source":"cve@mitre.org"},{"url":"http://osvdb.org/48338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7098","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the (1) Title and (2) Text fields; (3) the gallery, possibly the Description field in Your Pictures; (4) the forum, possibly the Your Message field when posting a new thread; or (5) the vote parameter in a view action to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Qsoft K-Rate Premium, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del blog, posiblemente a través de los campos (1) \"Title\" y (2) \"Text\"; el campo (3) \"gallery\", posiblemente la descripción del campo en \"Your Pictures\"; (4) el foro, posiblemente el campo \"Your Message\" cuando se publica un nuevo hilo; o (5) el parámetro \"vote\" en una acción view a index.php. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qsoft-inc:k-rate:-:-:premium:*:*:*:*:*","matchCriteriaId":"E8FB5094-D224-43F3-9F7C-73756B0F05A9"}]}]}],"references":[{"url":"http://osvdb.org/48339","source":"cve@mitre.org"},{"url":"http://osvdb.org/48340","source":"cve@mitre.org"},{"url":"http://osvdb.org/48341","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30842","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44674","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6312","source":"cve@mitre.org"},{"url":"http://osvdb.org/48339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7099","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote attackers to execute arbitrary PHP code via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica Manage Templates en Qsoft K-Rate Premium permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de vectores desconocidos. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qsoft-inc:k-rate:-:-:premium:*:*:*:*:*","matchCriteriaId":"E8FB5094-D224-43F3-9F7C-73756B0F05A9"}]}]}],"references":[{"url":"http://osvdb.org/48342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52924","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6312","source":"cve@mitre.org"},{"url":"http://osvdb.org/48342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7100","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a \"unique id\" for user actions and improper validation of a \"user identity.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en DotNetNuke v4.0 a la v4.8.4 y 5.0, permite a usuarios autenticados remotamente evitar la autenticación y  obtener privilegios a través de vectores desconocidos relacionados con un identificador único (\"unique id\") para las acciones de usuario y una validación inadecuada de la identidad de usuario ((\"user identity\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB3D130-5DC4-4FE6-B178-EF1638E3A43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1681BA4-9C05-45DF-B51B-D89633EB0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"884BA1BF-BD03-4437-A02C-825B59634A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C627743E-9B8B-431B-A513-89CBF7C1E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"677B54A1-6945-459F-9ADA-D6D9E89F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C7059E6A-4A54-4364-8977-400C18905D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"}]}]}],"references":[{"url":"http://osvdb.org/48343","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31145","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45081","source":"cve@mitre.org"},{"url":"http://osvdb.org/48343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7101","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en DotNetNuke v4.0 a la v4.8.4 y 5.0, permite a atacantes remotos obtener información sensible (número de portal) accediendo a la página del asistente de instalación mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB3D130-5DC4-4FE6-B178-EF1638E3A43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1681BA4-9C05-45DF-B51B-D89633EB0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"884BA1BF-BD03-4437-A02C-825B59634A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C627743E-9B8B-431B-A513-89CBF7C1E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"677B54A1-6945-459F-9ADA-D6D9E89F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C7059E6A-4A54-4364-8977-400C18905D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"102921DE-5513-4BCB-8383-D22A78C59735"}]}]}],"references":[{"url":"http://osvdb.org/48344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno22/tabid/1175/Default.aspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45080","source":"cve@mitre.org"},{"url":"http://osvdb.org/48344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno22/tabid/1175/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7102","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation."},{"lang":"es","value":"DotNetNuke v2.0 hasta v4.8.4 permite a los atacantes remotos cargar archivos .ascx en lugar de un archivo de piel (skin), y posiblemente acceso privilegiado a funcionalidades, a través de vectores desconocidos relativos a la validación de parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"72A73BE5-6668-484E-8E7C-16E839E98882"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB3D130-5DC4-4FE6-B178-EF1638E3A43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1681BA4-9C05-45DF-B51B-D89633EB0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"884BA1BF-BD03-4437-A02C-825B59634A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C627743E-9B8B-431B-A513-89CBF7C1E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"677B54A1-6945-459F-9ADA-D6D9E89F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C7059E6A-4A54-4364-8977-400C18905D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"}]}]}],"references":[{"url":"http://osvdb.org/48345","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45077","source":"cve@mitre.org"},{"url":"http://osvdb.org/48345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/31145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7103","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attackers to cause a denial of service (browser crash) or execute arbitrary code via a long Document.Location property value."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en un control ActiveX en najdisitoolbar.dll en Najdi.si Toolbar 2.0.4.1 permite a los atacantes remotos causar una denegación de servicio (caída del navegador) o ejecución arbitraria de código a través de un valor largo de la propiedad Document.Location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:najdi.si:toolbar:2.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8D7303E3-0383-4263-8DB2-BD028B5496BC"}]}]}],"references":[{"url":"http://osvdb.org/47909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31671","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30922","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44840","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6327","source":"cve@mitre.org"},{"url":"http://osvdb.org/47909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7104","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file."},{"lang":"es","value":"Servicio Sophos PureMessage Scanner (PMScanner.exe) en PureMessage para Microsoft Exchange v3.0 anteriores a v3.0.2  que permite a los atacantes remoto causar una denegación de servicio (retraso de la cola de mensajes e incompleta actualización de las reglas de spam)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:puremessage_for_microsoft_exchange:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C485701C-D42E-4E4C-8A45-A9AB24B55ADD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30881","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/44385.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44775","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sophos.com/support/knowledgebase/article/44385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7105","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text.  NOTE: this might be related to CVE-2008-7104."},{"lang":"es","value":"PureMessage de Sophos para Microsoft Exchange versiones 3.0 anteriores a 3.0.2, permite a los atacantes remotos causar una denegación de servicio (terminación del archivo EdgeTransport.exe) por medio de un mensaje codificado TNEF con un cuerpo de texto rico diseñado que no se maneja apropiadamente durante la conversión a texto plano. NOTA: esto podría estar relacionado con CVE-2008-7104."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:puremessage_for_microsoft_exchange:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C485701C-D42E-4E4C-8A45-A9AB24B55ADD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30881","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/44385.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52925","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sophos.com/support/knowledgebase/article/44385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7106","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T20:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay)."},{"lang":"es","value":"La instalación de Sophos PureMessage para Microsoft Exchange v3.0 anteriores a v3.0.2, cuando el anti-virus y anti-spam son soportados, no crea o lanza el motor asociado de escaneo cuando el sistema está bajo una cargar fuerte, que tiene un impacto no especificado, probablemente evitar remotamente la protección del escaneo o denegación de servicio (pérdida de mensaje o retraso)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:puremessage_for_microsoft_exchange:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C485701C-D42E-4E4C-8A45-A9AB24B55ADD"}]}]}],"references":[{"url":"http://www.sophos.com/support/knowledgebase/article/44385.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52926","source":"cve@mitre.org"},{"url":"http://www.sophos.com/support/knowledgebase/article/44385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7107","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL 0x222003 request to the \\\\.\\easdrv device interface."},{"lang":"es","value":"easdrv.sys en ESET Smart Security v3.0.667.0, permite a usuarios locales provocar una denegación de servicio (caída) mediante una petición IOCTL 0x222003 manipulada al interfaz del dispositivo \\\\.\\easdrv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset:smart_security:3.0.667.0:*:*:*:*:*:*:*","matchCriteriaId":"2D814023-316C-4969-8D18-3D721C89D4C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30719","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44520","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7108","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) quantity or (2) Add Engraving fields to the default URI; (3) Quantity field to phpcart.php; (4) Name, (5) Company, (6) Address, (7) City, and (8) Province/State fields in a checkout action to phpcart.php; and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en  Carmosa phpCart v3.4 a la v4.6.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los campos (1) \"quantity\" o (2) \"Add Engraving\" a la URI por defecto; (3) \"Quantity\" a phpcart.php; (4) \"Name\", (5) \"Company\", (6) \"Address\", (7) \"City\" y  (8) \"Province/State\" en una acción checkout a phpcart.php; y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcart:phpcart:3.4:*:*:*:*:*:*:*","matchCriteriaId":"1E0683AE-4A61-46EA-87AE-11A461650E10"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/495806/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30884","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495806/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7109","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password."},{"lang":"es","value":"La utilidad del archivo de escáner (también conocido como listener) en Kyocera Mita (KM) v3.3.0.1 permite a atacantes remotos evitar la autorización y subir archivos arbitrarios en el sistema del cliente a través de un programa modificado que no pide contraseña al usuario."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyoceramita:scanner_file_utility:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F14BBB-2781-438F-9C56-EE7006676E81"}]}]}],"references":[{"url":"http://secunia.com/advisories/31631","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=320","source":"cve@mitre.org","tags":["Exploit","Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/495772/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30855","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44717","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53004","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/495772/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2008-7110","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. (dot dot) in a request."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio la Utilidad de archivo de escáner (también conocido como listener) en Kyocera Mita (KM) v3.3.0.1 permite a atacantes remotos subir archivos en cualquier ubicación a través de un .. (punto punto) en una solicitud."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyoceramita:scanner_file_utility:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F14BBB-2781-438F-9C56-EE7006676E81"}]}]}],"references":[{"url":"http://secunia.com/advisories/31631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=320","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495772/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30855","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495772/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7111","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109."},{"lang":"es","value":"La utilidad del archivo de escáner (también conocido como listener) en Kyocera Mita (KM) v3.3.0.1 no restringe los nombres de archivo o extensiones de los archivos subidos, lo que permite ejecutar código arbitrario a los atacantes remotos o sobrescribir archivos aprovechando CVE-2008-7110 y CVE-2008-7109."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyoceramita:scanner_file_utility:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F14BBB-2781-438F-9C56-EE7006676E81"}]}]}],"references":[{"url":"http://secunia.com/advisories/31631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=320","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495772/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495772/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7112","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to cause a denial of service (hang or crash) via invalid field length values in a malformed (1) document or (2) request."},{"lang":"es","value":"La utilidad del archivo de escáner (también conocido como listener) en Kyocera Mita (KM) v3.3.0.1 permite a atacantes remotos provocar una denegación de servicio (bloqueo de la aplicación) a través de valores inválidos de longitud en (1) un documento o (2) una petición mal formados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyoceramita:scanner_file_utility:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F14BBB-2781-438F-9C56-EE7006676E81"}]}]}],"references":[{"url":"http://secunia.com/advisories/31631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=321","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7113","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack."},{"lang":"es","value":"La utilidad del archivo de escáner (también conocido como listener) en Kyocera Mita (KM) v3.3.0.1 utiliza un pequeño espacio de números de identificación de usuario para el control de acceso predecible, lo que permite a atacantes remotos subir documentos a través de un ataque de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyoceramita:scanner_file_utility:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F14BBB-2781-438F-9C56-EE7006676E81"}]}]}],"references":[{"url":"http://secunia.com/advisories/31631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=321","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/guides/content.aspx?g=security&seqNum=321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7114","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en members_search.php de iFusion Services iFdate v2.0.3 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del campo name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ifusionservices:ifdate:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"EB347C90-5693-42CC-A10A-87F0154BF5DD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30850","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44668","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6315","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7115","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/.  NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244."},{"lang":"es","value":"La interfaz web para el router Belkin Wireless G y módem ADSL2 F5D7632-4V6 con firmware 6.01.08 permite a atacantes remotos evitar la autenticación y obtener privilegios de administrador a través de una solicitud directa a (1) statusprocess.exe, (2) system_all.exe o (3) restore.exe en cgi-bin /. NOTA: el vector setup_dns.exe ya fue cubierto por CVE-2008-1244."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:f5d7632-4:6.01.08:*:*:*:*:*:*:*","matchCriteriaId":"7FC84DE7-99D0-42B8-B496-9D8A0C2E6E75"},{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:wireless_g_router:*:*:*:*:*:*:*:*","matchCriteriaId":"62AB0A6E-166C-480B-BE17-0EBA7FB277E1"}]}]}],"references":[{"url":"http://secunia.com/advisories/31665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44874","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6305","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1020747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7116","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the username."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el panel de administración (admin/) en WeBid Auction Script v0.5.4 permite a atacantes remotos ejecutar comandos SQL a través del nombre de usuario (username)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webidsupport:webid:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E74968B2-1A04-4FDE-850F-180D07FE542C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44817","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6339","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7117","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) files via a certain request with the file parameter set to style.css.  NOTE: this can probably be leveraged for cross-site scripting (XSS) attacks."},{"lang":"es","value":"eledicss.php in WeBid auction script v0.5.4 permite a atacantes remotos modificar arbitrariamente archivos de hojas de estilo en cascada (CSS) a través de una solicitud con el parámetro file asignado a \"style.css\". NOTA: esto probablemente se puede aprovechar para ataques de ejecución de secuencias de comandos en sitios cruzados(XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webidsupport:webid:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E74968B2-1A04-4FDE-850F-180D07FE542C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44822","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6339","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7118","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.log."},{"lang":"es","value":"WeBid auction script v0.5.4 almacena información sensible bajo el directorio raíz de la Web con control de acceso insuficiente, lo que permite obtener los logs de las consultas SQL a atacantes remotos a través de una petición directa a logs/cron.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webidsupport:webid:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E74968B2-1A04-4FDE-850F-180D07FE542C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44820","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6339","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7119","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en item.php en el script de subastas WeBid v0.5.4 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webidsupport:webid:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E74968B2-1A04-4FDE-850F-180D07FE542C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/30945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44817","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7120","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en Mr. CGI Guy Hot Links SQL-PHP v3 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro news.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrcgiguy:hot_links_sql-php:*:*:*:*:*:*:*:*","versionEndIncluding":"3","matchCriteriaId":"EC4B2F10-E526-4A87-B044-78B272A3AEBD"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31118","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/31118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7121","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Mr. CGI Guy Hot Links SQL-PHP v3 y anteriores permite a atacantes remotos inyectar HTML o scripts web a través de la barra de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrcgiguy:hot_links_sql-php:3:*:*:*:*:*:*:*","matchCriteriaId":"9390D355-4A08-42BE-8CB3-00F08B029D5A"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7122","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in an ActiveX control in (epRegPro.ocx) in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the (1) About, (2) CreateKey, (3) DeleteBranch, (4) DeleteKey, (5) DeleteValue, (6) EnumKeys, (7) EnumValues, (8) QueryType, (9) QueryValue, (10) RenameKey, and (11) SetValue methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en un  control ActiveX (epRegPro.ocx) en Evans Programming Registry Pro, permite a atacantes remotos leer y modificar claves del registro importantes a través de los métodos (1) About, (2) CreateKey, (3) DeleteBranch, (4) DeleteKey, (5) DeleteValue, (6) EnumKeys, (7) EnumValues, (8) QueryType, (9) QueryValue, (10) RenameKey y (11) SetValue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evansprogramming:registry_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"19C3B5C8-5273-454E-BC08-B6E46DC2F21A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28287","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5271","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7123","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte (%00) in the login parameter in an ajout action, which bypasses the regular expression check."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin/configuration/modifier.php de zKup CMS v2.0 hasta v2.3, permite a atacantes remotos inyectar código PHP de su elección en fichiers/config.php a través de un byte nulo (%00) en el parámetro de registro -login- de una acción ajout; de este modo se salta la comprobación de expresiones regulares."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.0:*:*:*:*:*:*:*","matchCriteriaId":"89B6CE8B-C2A3-408A-B882-DA5AA172B7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.01:*:*:*:*:*:*:*","matchCriteriaId":"40C1868A-8AA4-4D92-AA03-FFCEE91CF396"},{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.02:*:*:*:*:*:*:*","matchCriteriaId":"4BFC7799-2458-4270-8C52-C188DAF9AAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.03:*:*:*:*:*:*:*","matchCriteriaId":"CD14E82B-FC1A-4CE9-9E82-CD98557286A4"}]}]}],"references":[{"url":"http://osvdb.org/43082","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28149","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5220","source":"cve@mitre.org"},{"url":"http://osvdb.org/43082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/5220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7124","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator."},{"lang":"es","value":"zKup CMS v2.0 hasta v2.3 no requiere autenticación administrativa, para admin/configuration/modifier.php, lo que permite a usuarios autenticados obtener privilegios de administrador a través de una petición directa, como se demostró añadiendo un nuevo administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.0:*:*:*:*:*:*:*","matchCriteriaId":"89B6CE8B-C2A3-408A-B882-DA5AA172B7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.01:*:*:*:*:*:*:*","matchCriteriaId":"40C1868A-8AA4-4D92-AA03-FFCEE91CF396"},{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.02:*:*:*:*:*:*:*","matchCriteriaId":"4BFC7799-2458-4270-8C52-C188DAF9AAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zkup:zkup:2.03:*:*:*:*:*:*:*","matchCriteriaId":"CD14E82B-FC1A-4CE9-9E82-CD98557286A4"}]}]}],"references":[{"url":"http://osvdb.org/43081","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28149","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41068","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5219","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5220","source":"cve@mitre.org"},{"url":"http://osvdb.org/43081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7125","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"pphoto de Ariadne anterior a v2.6, permite a usuarios autenticados en remoto con ciertos privilegios ejecutar comandos Shell de su elección a través de vectores que están relacionados con programas PINP y el comando annotate. NOTA: Algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ariadne-cms:ariadne_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"7FD6F6C8-9212-430A-B803-C2AC60D35DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariadne-cms:ariadne_cms:2.4:*:*:*:*:*:*:*","matchCriteriaId":"13226ED7-BC97-4185-85C4-4AE7107BB4A7"}]}]}],"references":[{"url":"http://osvdb.org/43055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ariadne-cms.org/download/changes/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40989","source":"cve@mitre.org"},{"url":"http://osvdb.org/43055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ariadne-cms.org/download/changes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7126","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en osagent.exe en Borland VisiBroker Smart Agent 08.00.00.C1.03 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de un paquete manipulado un valor de longitud de cadena larga al puerto UDP 14000 que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:visibroker:*:*:*:*:*:*:*:*","versionEndIncluding":"08.00.00.c1.03","matchCriteriaId":"C1D3737F-4146-4ED8-B7E5-137FE2F0D274"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/visibroken-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/43057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0748/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40978","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/visibroken-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/43057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0748/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7127","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled."},{"lang":"es","value":"osagent.exe en Borland VisiBroker Smart Agent v08.00.00.C1.03 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de una paquete manipulado con una logitus de cadena larga al puerto UDP 14000, lo que provoca una fallo de localización de memoria que no se gestiona de forma adecuada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:visibroker:*:*:*:*:*:*:*:*","versionEndIncluding":"08.00.00.c1.03","matchCriteriaId":"C1D3737F-4146-4ED8-B7E5-137FE2F0D274"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/visibroken-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/43058","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0748/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40983","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/visibroken-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/43058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/29213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0748/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7128","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors."},{"lang":"es","value":"La función ssl_parse_client_key_exchange de XySSL anterior a v0.9, no protege de determinados ataques Bleichenbacher que utilicen determinado texto cifrado, esto permite a atacantes remotos recuperar las claves a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"6E54F52B-1D44-45CE-A4FB-4084E52FCAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF85863-AE04-4B1E-87AA-5D32B3D28A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.2:*:*:*:*:*:*:*","matchCriteriaId":"BE0643D9-E251-4EC7-BC24-BBCA5BA6CD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.3:*:*:*:*:*:*:*","matchCriteriaId":"4018A22E-F8C7-4A2E-BBC7-1A360BEEC868"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.4:*:*:*:*:*:*:*","matchCriteriaId":"21128DCE-2FEA-4038-9FA3-167C1BA9B041"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.5:*:*:*:*:*:*:*","matchCriteriaId":"7DFD8E9D-3CAF-4BC6-B5F2-5DE27A53E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.6:*:*:*:*:*:*:*","matchCriteriaId":"4116FDA1-E82E-436F-9E5A-80CBB5512EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.7:*:*:*:*:*:*:*","matchCriteriaId":"232BBEA4-E2B6-4667-AD6D-DECF21647316"}]}]}],"references":[{"url":"http://polarssl.org/?archive#001c","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0917/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41253","source":"cve@mitre.org"},{"url":"http://polarssl.org/?archive#001c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0917/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7129","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification."},{"lang":"es","value":"XySSL anterior a v0.9, permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un certificado X.509 que no pasa la validación de firma RSA durante la verificación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"6E54F52B-1D44-45CE-A4FB-4084E52FCAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF85863-AE04-4B1E-87AA-5D32B3D28A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.2:*:*:*:*:*:*:*","matchCriteriaId":"BE0643D9-E251-4EC7-BC24-BBCA5BA6CD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.3:*:*:*:*:*:*:*","matchCriteriaId":"4018A22E-F8C7-4A2E-BBC7-1A360BEEC868"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.4:*:*:*:*:*:*:*","matchCriteriaId":"21128DCE-2FEA-4038-9FA3-167C1BA9B041"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.5:*:*:*:*:*:*:*","matchCriteriaId":"7DFD8E9D-3CAF-4BC6-B5F2-5DE27A53E8C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.6:*:*:*:*:*:*:*","matchCriteriaId":"4116FDA1-E82E-436F-9E5A-80CBB5512EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xyssl:xyssl:0.7:*:*:*:*:*:*:*","matchCriteriaId":"232BBEA4-E2B6-4667-AD6D-DECF21647316"}]}]}],"references":[{"url":"http://osvdb.org/49101","source":"cve@mitre.org"},{"url":"http://polarssl.org/?archive#001c","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0917","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41255","source":"cve@mitre.org"},{"url":"http://osvdb.org/49101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://polarssl.org/?archive#001c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7130","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to upload arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en DB2 Monitoring Console v2,2,4 y anteriores,, permite a atacantes remotos subir archivos de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.24","matchCriteriaId":"8EB11E08-D0FC-4079-A437-76839FE5C8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.236:*:*:*:*:*:*:*","matchCriteriaId":"16E6FA61-0C08-4B6A-8678-DEC944D8D8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.246:*:*:*:*:*:*:*","matchCriteriaId":"2646C0A1-226E-4C58-89AD-74872EC3CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.248:*:*:*:*:*:*:*","matchCriteriaId":"4BD7D741-38F6-4DFA-AFE7-14D0B398B38F"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.251:*:*:*:*:*:*:*","matchCriteriaId":"2312A554-036A-4DB5-B344-B6428A324052"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"65A94230-F13A-48EF-9382-069E5152F24D"}]}]}],"references":[{"url":"http://osvdb.org/43113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=797405","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28253","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41211","source":"cve@mitre.org"},{"url":"http://osvdb.org/43113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=797405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7131","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T10:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database."},{"lang":"es","value":"Vulnerabilidad no especificada en DB2 Monitoring Console v2.2.4 y anteriores, permite a atacantes remotos obtener acceso a una base de datos a través de un enlace a una víctima que en ese momento esté conectada a la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.24","matchCriteriaId":"8EB11E08-D0FC-4079-A437-76839FE5C8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.236:*:*:*:*:*:*:*","matchCriteriaId":"16E6FA61-0C08-4B6A-8678-DEC944D8D8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.246:*:*:*:*:*:*:*","matchCriteriaId":"2646C0A1-226E-4C58-89AD-74872EC3CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.248:*:*:*:*:*:*:*","matchCriteriaId":"4BD7D741-38F6-4DFA-AFE7-14D0B398B38F"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.1.251:*:*:*:*:*:*:*","matchCriteriaId":"2312A554-036A-4DB5-B344-B6428A324052"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_kohlmann:db2_monitoring_console:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"65A94230-F13A-48EF-9382-069E5152F24D"}]}]}],"references":[{"url":"http://osvdb.org/43114","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=797405","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28253","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41212","source":"cve@mitre.org"},{"url":"http://osvdb.org/43114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=797405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7132","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote attackers to inject arbitrary web script or HTML via the nuked_nude parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Nuked-Klan v1.3 beta permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro nuked_nude. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros.  \t"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"2F896FAC-3E50-4608-86AC-7A9984219A4C"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28527.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28527","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41591","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7133","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search and (2) d index.php parameters to index.php, (3) dir parameter to thumber.php, and the d parameter to (4) describe.php and (5) addcomment.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS)en nlinetools.org EasyImageCatalogue permite a atacantes remotos inyectar código web o HTML de su elección a través de los parámetros (1) search (2)d index.php en index.php, (3)parámetro dir en thumber.php, y el parámetro d en (4) describe.php y (5) addcomment.php. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros.  \t"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinetools:easyimagecatalogue:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B694E4D9-2E02-481D-AB56-4BB9DF998EAB"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28164.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28164","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41187","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7134","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter, (2) message parameter in a login action, (3) category parameter in a browse action, (4) now parameter, or (5) search parameter in a search_results action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la URI por defecto en Chris LaPointe RedGalaxy Download Center v1.2 permite a atacantes remotos inyectar código web o HTML de su elección a través del (1) parámetro file,(2)parámetro message en una acción de login, (3) parámetro category en una acción browse, (4) parámetro now, o (5) parámetro search in una acción search_results. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de Terceros.  \t"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redgalaxy:download_center:1.2:*:*:*:*:*:*:*","matchCriteriaId":"28DEFD25-2F46-4C51-BE6E-61DF4F9CE195"}]}]}],"references":[{"url":"http://download.redgalaxy.net/?nav=home","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28219","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41198","source":"cve@mitre.org"},{"url":"http://download.redgalaxy.net/?nav=home","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7135","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the IsChecked method, a different vector than CVE-2008-7136."},{"lang":"es","value":"toolbaru.dll en ICQ Toolbar (ICQToolbar) v2.3 permite a atacantes remotos causar una denegación de servicio (caída de toolbar) a través de un argumento largo al método IsChecked, un vector diferente que CVE-2008-7136."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:icq_toolbar:2.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC8B74E-C553-4426-B1A2-CC681D907DFA"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/5WP0115NPU.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28086","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41014","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5WP0115NPU.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7136","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the (1) RequestURL, (2) GetPropertyById, or (3) SetPropertyById method, different vectors than CVE-2008-7135."},{"lang":"es","value":"toolbaru.dll en ICQ Toolbar (ICQToolbar) v2.3 permite a atacantes remotos causar una denegación de servicio (caída de toolbar) a través de un argumento largo al método (1) RequestURL, (2) GetPropertyById, o (3) SetPropertyById, un vector diferente que CVE-2008-7135."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:icq_toolbar:2.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC8B74E-C553-4426-B1A2-CC681D907DFA"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/5WP0115NPU.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28118","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5217","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5WP0115NPU.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7137","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port 59278 and other unspecified vectors."},{"lang":"es","value":"WS-Proxy en Eye-Fi v1.1.2 permite a atacantes remotos causar una denegación de servicio (caída) a través de una cadena query vacía al puerto 59278 y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eye.fi:eye-fi_manager:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EAB27E8-AB18-421C-A3EA-01C73FC222BC"}]}]}],"references":[{"url":"http://osvdb.org/42720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/articles/article.aspx?p=1177111&seqNum=3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28085","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40996","source":"cve@mitre.org"},{"url":"http://osvdb.org/42720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/articles/article.aspx?p=1177111&seqNum=3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7138","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce."},{"lang":"es","value":"El Manager en Eye-Fi v1.1.2 genera valores predecibles de snonce basados en el momento del día, lo que permite a atacantes superar la autentificación y subir imágenes de su elección deduciendo el snonce."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eye.fi:eye-fi_manager:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EAB27E8-AB18-421C-A3EA-01C73FC222BC"}]}]}],"references":[{"url":"http://osvdb.org/42719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28085","source":"cve@mitre.org"},{"url":"http://osvdb.org/42719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7139","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of (1) urn:SetOptions for autostart, (2) urn:SetDesktopSync for file upload, or (3) urn:SetFolderConfig for file download location or modification of authentication credentials; and (4) urn:AddNetwork for adding an arbitrary Service Set Identifier (SSID) to hijack the image upload."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF)en WS-Proxy en Eye-Fi v1.1.2 permite a atacantes remotos secuestrar las autentificaciones para peticiones de usuarios que modifican la configuración a través del parámetro SOAPAction de (1) urn:SetOptions para autostart, (2) urn:SetDesktopSync para el fichero upload, o (3) urn:SetFolderConfig para fichero de localización de descarga y modificación de credenciales de autentificación y (4) urn:AddNetwork para añadir el Service Set Identifier (SSID)a su elección para secuestrar la imagen subida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eye.fi:eye-fi_manager:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EAB27E8-AB18-421C-A3EA-01C73FC222BC"}]}]}],"references":[{"url":"http://osvdb.org/42718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/articles/article.aspx?p=1177111","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28085","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40995","source":"cve@mitre.org"},{"url":"http://osvdb.org/42718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.informit.com/articles/article.aspx?p=1177111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/489045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7140","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) language_setup parameter to setup.php or (2) test parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: a third party has been reported that the test parameter is not used in @lex Guestbook."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en @lex Guestbook 4.0.5 y anteriores permite a atacantes remotos inyectar código web o HTML a través del (1) parámetro language_setup parameter en setup.php o (2) parámetro test en idex.php.  NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros. NOTA: Información de terceros ha sido reportada inidicando que el parámetro test no es usado en @lex Guestbook."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexguestbook:\\@lex_guestbook:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.5","matchCriteriaId":"D37FAFFD-2286-4D72-99DB-FC13B90B0C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexguestbook:\\@lex_guestbook:3.12:*:*:*:*:*:*:*","matchCriteriaId":"3536A90F-12F9-41B2-982E-72AB09FC9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexguestbook:\\@lex_guestbook:3.13:*:*:*:*:*:*:*","matchCriteriaId":"4D98AB29-4844-457F-B68F-3C27ED41F744"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexguestbook:\\@lex_guestbook:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D2A564FF-3553-4305-B031-7E78A3E55252"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexguestbook:\\@lex_guestbook:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CA347569-5A86-4716-B71C-1C63FDC925C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexguestbook:\\@lex_guestbook:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A8D2E556-0B91-478C-8779-5FD3D6CD1565"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28519.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28519.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41566","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28519.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln28519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7141","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the language_setup parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en setup.php en @lex Poll v2.1 permite a atacantes remotos inyectar script web o HTML a su elección a través del parámetro language_setup. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexphpteam:\\@lex_poll:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A38009D-E2CF-4365-ACA4-F3CAF0A1D1E8"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28520.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28520","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41564","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/28520.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7142","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en el módulo isk Usage (frontend/x/diskusage/index.html) en cPanel v11.18.3 permite a atacantes remotos listar directorios arbitrariamente a través del parámetro showtree."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*","matchCriteriaId":"53A19523-B3B1-48E6-A202-CEB1CBD2DDB4"}]}]}],"references":[{"url":"http://osvdb.org/51582","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489747/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28300","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28300/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41266","source":"cve@mitre.org"},{"url":"http://osvdb.org/51582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489747/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28300/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7143","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the Referer header."},{"lang":"es","value":"phpBB v2.0.23 incluye la el ID de sesión en una petición a modcp.php cuando el moderador o administrador cierra un hilo, lo que permite a atacantes remotos secuestrar la sesión a través de un envío en el hilo conteniendo una URL a una imagen hospedada remotamente, que permite incluir el ID de sesión en la cabercera Referer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.23:*:*:*:*:*:*:*","matchCriteriaId":"C7381ECE-381B-4D77-9C32-829CC520424E"}]}]}],"references":[{"url":"http://osvdb.org/51121","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489815/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/51121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489815/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7144","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats."},{"lang":"es","value":"Múltiples vulnerabilidad no especificadas en RARLAB WinRAR anterior v3.71 tienen impacto desconocido y vectores atacados relacionados con la manipulación de ficheros (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, o (9) ZIP, como se ha demostrado mediante la suite para el testeo de formatos de archivo PROTOS GENOME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*","versionEndIncluding":"3.70","matchCriteriaId":"0F37E494-C901-414A-9F61-BA2109E6E4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*","matchCriteriaId":"0FFE81D1-EE81-415D-ACE0-F97AF38BE007"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*","matchCriteriaId":"16A1E0B7-020F-4110-9603-58CA8CEB7581"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*","matchCriteriaId":"AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*","matchCriteriaId":"3366C2D1-F30A-413B-94A2-7DBDACC083EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*","matchCriteriaId":"8585089C-A6B5-4BFE-BEA3-133B94F24F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*","matchCriteriaId":"C1011521-AEF2-40EB-B671-66B20FF01CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*","matchCriteriaId":"B73F9019-EA47-4962-B080-C65ED42000F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*","matchCriteriaId":"9843D850-DC4C-49D5-AAEB-EF75FB54F08C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*","matchCriteriaId":"2C9B3100-2223-4201-AE29-B4A4EAFF2595"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*","matchCriteriaId":"7F95B556-A1B4-4AEF-8223-5ED44819515D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*","matchCriteriaId":"C89BC32A-6D3B-4B83-BD49-856233EEF51C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*","matchCriteriaId":"F5611BDE-8CB6-4FCE-BB12-D16BF60BCE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:*","matchCriteriaId":"769CCD65-7409-4685-A228-AE69BEBA5795"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:*","matchCriteriaId":"2229C927-EB0A-4EE4-95FB-7F7EEAA0E5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:*","matchCriteriaId":"D721A91B-17D8-4AAF-AC2E-1D9ABEBC39B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F097ED7F-E004-4163-AE7D-0EA89517709C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:*","matchCriteriaId":"9C152F70-47A9-466F-8299-4A9C36540A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A1860DC9-69C8-4464-A15F-1BF38A2845A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta7:*:*:*:*:*:*:*","matchCriteriaId":"25F16922-1BA6-4CDC-B2B3-0E68C13AD815"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.60_beta8:*:*:*:*:*:*:*","matchCriteriaId":"8C71933B-40E9-459C-84D4-B6E90DD7C2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.61:*:*:*:*:*:*:*","matchCriteriaId":"56569258-AAA1-4C61-A9C2-C1F310BC710E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.62:*:*:*:*:*:*:*","matchCriteriaId":"2EB470C6-902C-4836-BC31-16532FD1E5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta1:*:*:*:*:*:*:*","matchCriteriaId":"A941C7F1-8577-4CE1-9852-B2A4C06F23A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta2:*:*:*:*:*:*:*","matchCriteriaId":"2821BC83-1A0C-4071-93F7-9B0ADB503038"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta3:*:*:*:*:*:*:*","matchCriteriaId":"BD80CDF8-4FEA-4B72-BEEF-3E645B4059F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta4:*:*:*:*:*:*:*","matchCriteriaId":"A9EAA3B3-7AA5-4429-9D2F-27DA958513F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta5:*:*:*:*:*:*:*","matchCriteriaId":"3337C986-BA06-4A2F-B0A2-A4E128A36214"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta6:*:*:*:*:*:*:*","matchCriteriaId":"10D394F7-4674-461C-BFB4-F4FD6B73F3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta7:*:*:*:*:*:*:*","matchCriteriaId":"CCC6E995-0B48-4F52-9516-E07C31220978"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.70_beta8:*:*:*:*:*:*:*","matchCriteriaId":"EFA1E9B1-C55F-4EB6-A086-6C077C8713EE"}]}]}],"references":[{"url":"http://osvdb.org/43439","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/29407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"cve@mitre.org"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0916/references","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41251","source":"cve@mitre.org"},{"url":"http://osvdb.org/43439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/29407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0916/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7145","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en CoronaMatrix phpAddressBook v2.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través de 1) nombre de usuarios o (2) parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coronamatrix:phpaddressbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1DE3AB56-6A99-4347-BFC8-03AA45BE0E14"}]}]}],"references":[{"url":"http://osvdb.org/51050","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490097/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28456","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/490097/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7146","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to (1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, or (3) Create_Course.htm in help/1/Instructor/, which reveals the installation path in an error message."},{"lang":"es","value":"IntraLearn Software IntraLearn v2.1, y probablemente otras versiones anteriores v4.2.3, permite a atacantes remotos obtener información sensible a través de peticiones directas a 1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, o (3) Create_Course.htm en help/1/Instructor/, que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intralearn:intralearn:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"C632A77F-A16F-4D1A-BA1E-D65236A73B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:intralearn:intralearn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F374ED4A-19ED-40E0-809A-E8F8A83CCE83"}]}]}],"references":[{"url":"http://osvdb.org/42991","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/42992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/42993","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/ref/42/intralearn-21-multiple.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/42991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/42992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/42993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/ref/42/intralearn-21-multiple.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7147","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allow remote attackers to inject arbitrary web script or HTML via the (1) outline and (2) course parameters to library/description_link.cfm, or the (3) records_to_display and (4) the_start parameters to library/courses_catalog.cfm."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ntraLearn Software IntraLearn v2.1 y probablemente otros versiones anteriores v4.2.3, permiten a atacantes remotos ejecutar script web o HTML a su elección a través de los parámetros (1) outline y (2) course en library/description_link.cfm, o los parámetros (3) records_to_display y (4) the_start en library/courses_catalog.cfm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intralearn:intralearn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F374ED4A-19ED-40E0-809A-E8F8A83CCE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:intralearn:intralearn:4.2:*:*:*:*:*:*:*","matchCriteriaId":"13F02538-A3AA-4078-B49C-B08D8D87A0E9"}]}]}],"references":[{"url":"http://osvdb.org/42988","source":"cve@mitre.org"},{"url":"http://osvdb.org/42989","source":"cve@mitre.org"},{"url":"http://osvdb.org/ref/42/intralearn-21-multiple.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/42988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/ref/42/intralearn-21-multiple.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7148","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Synfig Animation Studio before 0.61.08 allows attackers to execute arbitrary code via a crafted .sif file."},{"lang":"es","value":"Vulnerabilidad no especificada en Synfig Animation Studio anterior v0.61.08 permite a atacantes ejecutar código a su elección a través de un fichero manipulado .sif."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:*:*:*:*:*:*:*:*","versionEndIncluding":"0.61.07","matchCriteriaId":"10603BB7-9597-41A9-91A1-9D169E562371"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.01:*:*:*:*:*:*:*","matchCriteriaId":"01D23F31-57A1-4DD5-9476-BF269776CF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.02:*:*:*:*:*:*:*","matchCriteriaId":"B8494D16-12D4-4F22-A366-AAD794271618"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.03:*:*:*:*:*:*:*","matchCriteriaId":"3C6C3079-F5FC-4277-BBE5-16A44994EEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.04:*:*:*:*:*:*:*","matchCriteriaId":"9BC29900-8C52-4066-9632-580DB2FEB3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.05:*:*:*:*:*:*:*","matchCriteriaId":"463E45F5-156D-4CDA-B892-F1D0FB731625"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.06:*:*:*:*:*:*:*","matchCriteriaId":"F6813559-2A7B-4C17-A061-E320F62B10B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:synfig:synfigstudio:0.61.07:rc1:*:*:*:*:*:*","matchCriteriaId":"7A7B8F73-8606-4E0B-9C71-847947B7CBA8"}]}]}],"references":[{"url":"http://osvdb.org/48854","source":"cve@mitre.org"},{"url":"http://synfig.org/Releases/0.61.08","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/48854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://synfig.org/Releases/0.61.08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7149","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in AgileWiki before 0.10.1 has unknown impact and attack vectors related to passwords."},{"lang":"es","value":"Vulnerabilidad no especificada en AgileWiki anterior v.0.10.1 tiene impactos desconocidos y vectores atacados relacionados con contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agilewiki:agilewiki:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"21AEF664-942A-4375-BF40-C2C6638475BD"}]}]}],"references":[{"url":"http://freshmeat.net/projects/agilewiki/releases/273210","source":"cve@mitre.org"},{"url":"http://osvdb.org/43171","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/agilewiki/releases/273210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7150","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Refine by Taxonomy 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a taxonomy term, which is not properly handled by refine_by_taxo when displaying tags."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Taxonomy v5.x anterior v.5.x-0.1, un módulo para Drupal, permite a atacantes remotos inyectar script web o HTML a su elección a través de un término taxonomy, que no es gestionado apropiadamente por refine_by_taxo cuando muestra etiquetas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ber_kessels:refine_by_taxo:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D4D24B67-A97E-4878-9671-1B32F6F959E1"}]}]}],"references":[{"url":"http://drupal.org/node/230460","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/230470","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41035","source":"cve@mitre.org"},{"url":"http://drupal.org/node/230460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/230470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7151","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF)en Live v5.x anterior v5.x-0.1, un módulo para Drupal, permite a atacantes remotos secuestrar la autenticación de privilegios de usuarios por peticiones sin especificar que pueden ser aprovechado para ejecutar código PHP a su elección. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gurpartap_singh:live:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"BF4338DC-0224-4A59-AF69-35D78AE25581"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/236607","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/236609","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41754","source":"cve@mitre.org"},{"url":"http://drupal.org/node/236607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/236609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7152","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota en Specimen Image Database (SID), cuando register_globals es activado, permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro dir en (1) client.php o (2) taxonservice.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simon_rycroft:sid:*:*:*:*:*:*:*:*","matchCriteriaId":"7A17687C-C7FD-42F5-B1F8-476D889B795E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/28142","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28142/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/28142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/28142/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7153","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header.  NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función autoDetectRegion en doceboCore/lib/lib.regset.php en Docebo v3.5.0.3 y anteriores permite a atacantes remotos ejecutar comandos SQL a su elección a través de la cabecera Accept-Language HTTP. NOTA: esto también puede ser aprovechado para ejecutar código PHP a su elección usando el comando INTO DUMPFILE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0.3","matchCriteriaId":"E1F840F9-0DED-42C4-8284-B5A4231EF736"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23AA5FB6-D586-4D59-B358-D49E70E263B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"361855A0-5096-43D8-9CE1-83C0B7CC0AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6D1C2A0C-5092-4E30-9A77-6B70C2D40036"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"5A3571BE-A6AF-468C-9B92-9179DEBA9BF9"}]}]}],"references":[{"url":"http://osvdb.org/40138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27211","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39589","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4879","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4891","source":"cve@mitre.org"},{"url":"http://osvdb.org/40138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7154","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) class.module/class.event_manager.php, (3) lib/lib.domxml5.php, or (4) menu/menu_over.php in doceboCore/; or (5) class/class.conf_cms.php, (6) lib/lib.compose.php, (7) modules/chat/teleskill.php, or (8) class/class.admin_menu_cms.php in doceboCms/; which reveals the installation path in an error message."},{"lang":"es","value":"Docebo 3.5.0.3 y versiones anteriores permite a atacantes remotos obtener información sensible mediante una petición directa a (1) class/class.conf_fw.php, (2) class.module/class.event_manager.php, (3) lib/lib.domxml5.php o (4) menu/menu_over.php en doceboCore/; o (5) class/class.conf_cms.php, (6) lib/lib.compose.php, (7) modules/chat/teleskill.php o (8) class/class.admin_menu_cms.php en doceboCms/; lo que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0.3","matchCriteriaId":"E1F840F9-0DED-42C4-8284-B5A4231EF736"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23AA5FB6-D586-4D59-B358-D49E70E263B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"361855A0-5096-43D8-9CE1-83C0B7CC0AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6D1C2A0C-5092-4E30-9A77-6B70C2D40036"},{"vulnerable":true,"criteria":"cpe:2.3:a:docebo:docebo:3.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"5A3571BE-A6AF-468C-9B92-9179DEBA9BF9"}]}]}],"references":[{"url":"http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27211","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4879","source":"cve@mitre.org"},{"url":"http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/4879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7155","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direct request."},{"lang":"es","value":"NetRisk 1.9.7 no restringe de manera apropiada el acceso a admin/change_submit.php, lo que permite a atacantes remotos cambiar la contraseña de usuarios de su elección mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprisk:netrisk:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"F159AA19-A7A3-4BDE-8D91-EF3AAC422AB2"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27150.pl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27150","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39465","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27150.pl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7156","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php."},{"lang":"es","value":"EkinBoard v1.1.0 y anteriores, cuando register_globals es habilitada, permite a atacantes remotos superar las autorizaciones y obtener privilegios de administrador al establecer el parámetro _groups[] a 2, como queda demostrado a través de backup.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ekinboard:ekinboard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"873EEA39-C39D-41AA-9775-4FA67F6C395F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39512","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7157","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in uploaded/avatars/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en EkinBoard 1.1.0 y versiones anteriores permite a atacantes remotos ejecutar código de su elección subiendo un archivo como avatar, con una extensión ejecutable seguida de una extensión segura y accediendo a él posteriormente a través de una petición directa al archivo en uploaded/avatars/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ekinboard:ekinboard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"873EEA39-C39D-41AA-9775-4FA67F6C395F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39507","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7158","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Numara FootPrints v7.5a hasta v7.5a1 y v8.0 hasta v8.0a permite a atacantes remotos ejecutar comandos a su elección a través de metacaracteres de consola en (1) parámetro transcriptFile en MRcgi/MRchat.pl o (2) parámetro LOADFILE en MRcgi/MRABLoad2.pl. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:numarasoftware:footprints:7.5a:*:*:*:*:*:*:*","matchCriteriaId":"7D661292-9DD0-49D0-9DFE-C74F7021CA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:numarasoftware:footprints:7.5a1:*:*:*:*:*:*:*","matchCriteriaId":"B47124F3-5F65-43A5-A04C-FBFF26B5761D"},{"vulnerable":true,"criteria":"cpe:2.3:a:numarasoftware:footprints:8.0:*:*:*:*:*:*:*","matchCriteriaId":"043916A1-7BF5-4D73-8516-44AC665016F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:numarasoftware:footprints:8.0a:*:*:*:*:*:*:*","matchCriteriaId":"27FD3D2A-234F-4DE0-A82E-3395F79BD40C"}]}]}],"references":[{"url":"http://osvdb.org/42813","source":"cve@mitre.org"},{"url":"http://osvdb.org/42816","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39810","source":"cve@mitre.org"},{"url":"https://footprintssupport.numarasoftware.com/MRcgi/MRTicketPage.pl?USER=&MRP=0&PROJECTID=4&MR=89552&MAXMININC=&MAJOR_MODE=DETAILS","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/42813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://footprintssupport.numarasoftware.com/MRcgi/MRTicketPage.pl?USER=&MRP=0&PROJECTID=4&MR=89552&MAXMININC=&MAJOR_MODE=DETAILS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7159","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string."},{"lang":"es","value":"La función silc_asn1_encoder de lib/silcasn1/silcasn1_encode.c en Secure Internet Live Conferencing (SILC) Toolkit anterior a v1.1.8, permite a atacantes remotos sobrescribir una posición de la pila y puede que ejecutar código de su elección a través de un valor OID manipulado. Está relacionado con el uso incorrecto de una cadena con formato %lu."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libsilc as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2009-09-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.6","matchCriteriaId":"EA762451-1AEA-4138-B446-39560935B994"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C06811A1-DF33-4EC9-A2EE-49CE2F4A4EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FE803FA-43C9-4565-A1B6-6890A2275A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9754DA96-8464-412C-8337-51F8DE9884B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A4BC8115-1A4B-4CFD-9431-3C2A231D0237"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"262AEDC5-8FB8-4D15-AC4D-906110718D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F422F232-FDA3-4FB4-AD84-2641EF0A0134"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36192","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53477","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7160","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string."},{"lang":"es","value":"la funcion silc_http_server_parse en lib/silchttp/silchttpserver.c en el servidor HTTP interno en silcd en Secure Internet Live Conferencing (SILC) Toolkit anteriores a  v1.1.9 permite a atacantes remotos sobrescribir un lugar de la pila y posiblemente ejecutar código arbitrario a través de una cabecera Content-Lenght, relacionada con el uso incorrecto de un formato de cadena %lu."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libsilc as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2009-09-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"5FC1A78E-F04E-4F03-8020-4DB4D6F1F458"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C06811A1-DF33-4EC9-A2EE-49CE2F4A4EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FE803FA-43C9-4565-A1B6-6890A2275A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9754DA96-8464-412C-8337-51F8DE9884B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A4BC8115-1A4B-4CFD-9431-3C2A231D0237"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"262AEDC5-8FB8-4D15-AC4D-906110718D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F422F232-FDA3-4FB4-AD84-2641EF0A0134"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"301B0871-8F41-483F-B457-488A89428975"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.9","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36194","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-7161","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T10:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header.  NOTE: this issue might be related to CVE-2005-3058."},{"lang":"es","value":"Fortinet FortiGuard Fortinet FortiGate-1000 v3.00 build 040075,070111 permite a atacantes remotos evitar el filtrado URL a través de una petición GET o POST fragmentada que utiliza HTTP/1.0 sin la cabecera Host. Nota: este caso podría estar relacionado con CVE-2005-3058."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:fortigate-1000:3.00:*:*:*:*:*:*:*","matchCriteriaId":"784BEAB3-DB51-4276-B688-6B021CC3BB14"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/485794/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485813/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39684","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485794/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485813/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7162","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T10:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in a .M3U file.  NOTE: this might be related to CVE-2008-4504."},{"lang":"es","value":"Desbordamiento de búfer en Hero Super Player v3000 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de un nombre de fichero largo en un fichero .M3U. NOTA: podría estar relacionado con CVE-2008-4504."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heroshare:hero_super_player_3000:-:*:*:*:*:*:*:*","matchCriteriaId":"0D9554DF-A158-4A7A-80B2-2BD4EFF74E63"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27478.cpp","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40025","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/27478.cpp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/27478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7163","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T10:30:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the sine[config][index_main] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en mods/Integrated/index.php en SineCMS v2.3.5 y anterior, cuando register_globals está habilitado, permite a atacantes incluir y ejecutar ficheros locales de su elección a través del parámetro sine[config][index_main]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.5","matchCriteriaId":"DD8C0117-9D1C-4FD5-8E58-7F60F974DA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3FEE9253-FE44-414F-8D02-69778F2B2F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6CBC67CB-A8BC-4963-AC19-C3AE37D813A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CD4CE86-0756-476F-9185-1C4B6CC7CC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.2:*:*:*:*:*:*:*","matchCriteriaId":"380A3DE7-FABD-463D-801B-CA2A153F214F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4BB442-E540-4C6B-AAC7-B263B1ECAC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3E2A379B-14AF-4BFD-B042-6729C6D178B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sinecms:sinecms:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F681DE3D-E8FC-4B0D-9BD4-7C5A6F8C97A8"}]}]}],"references":[{"url":"http://osvdb.org/40084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27156","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39446","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4854","source":"cve@mitre.org"},{"url":"http://osvdb.org/40084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7164","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T10:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Shareaza before 2.3.1.0 have unknown impact and attack vectors related to \"very important security fixes,\" possibly involving update notifications and a domain that is no longer controlled by the vendor."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Shareaza anterior a v2.3.1.0 tiene un impacto y vectores de ataque desconocidos relacionados con \"soluciones de seguridad muy importantes\" posiblemente involucrado con notificaciones de actualización y un dominio que no es controlado por el fabricante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ryo-oh-ki:shareaza:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.0.0","matchCriteriaId":"D4AA2E00-BE17-4ADA-8954-CDA49EB28AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ryo-oh-ki:shareaza:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1680FDCE-CF85-452B-980F-C9BD8E5E0DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ryo-oh-ki:shareaza:2.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A9003C2C-ABCB-42EB-BC30-75CE24E23A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:ryo-oh-ki:shareaza:2.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BFDF64A4-9989-41B4-8A75-97B138330C68"}]}]}],"references":[{"url":"http://osvdb.org/40217","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28302","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=110672&release_id=565250","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27171","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39484","source":"cve@mitre.org"},{"url":"http://osvdb.org/40217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=110672&release_id=565250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/27171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7165","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T10:30:01.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters."},{"lang":"es","value":"Falsificación de petición en sitios cruzados en cp06_wifi_m_nocifr.cgi en el panel de administración en TELECOM ITALIA Alice Gate2 Plus Wi-Fi permite a atacantes remotos secuestrar la autenticación del administración, por peticiones que deshabilitan la encriptación Wi-Fi a través de ciertos valores para los parámetros wlChannel y wlRadioEnable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alice:gate2_plus_wi-fi:*:*:*:*:*:*:*:*","matchCriteriaId":"29442571-2C53-4410-BDE8-68BF6C1D9565"}]}]}],"references":[{"url":"http://osvdb.org/40739","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486733/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27374","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39831","source":"cve@mitre.org"},{"url":"http://osvdb.org/40739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/486733/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7166","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T10:30:01.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header.  NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364."},{"lang":"es","value":"Desbordamiento de búfer en la interfaz web en BitTorrent v6.0.1 (build 7859) y anteriores, y uTorrent v1.7.6 (build 7859) y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída) a través de una cabecera Range manipulada. NOTA: esta vulnerabilidad es probablemente diferente que CVE-2008-0071 y CVE-2008-0364."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"26B450D4-2DD6-42EA-8F98-68CD643AFD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A3628182-3D58-4555-9DFF-1921CA3C54F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"68FDECB8-8713-4D37-A0DB-E2FB5D3A16DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EFF04516-5372-4D39-A58A-E0840E99C9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"738167A5-9052-4ABA-843B-D5DC2DD0EAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FF3687F7-A1DC-4AB1-91F2-60C2639A3146"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"946E1E70-E472-4C8F-BDE9-63E952F1AD41"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE2183E7-8338-4CE5-9D10-85E623BC50AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"02DE484A-930E-40CE-8FC7-25C32D94DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"79D7B8AC-D171-413B-B1DF-82484A4C4B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"23512725-DA47-47F9-8081-2B0A74471DBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"168AAA79-E82A-426B-ABAB-C62FA18D757E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4E21B17B-EA03-4B0A-B944-E869994E596E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"2A5D0343-9AD0-4F1D-ACDA-20BDD76F6EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"43485B34-530E-4A80-8C39-3A751E8090B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"184686B8-37F7-43F7-AFAD-4B92946424C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"22BD68CE-00DD-457E-8195-96670270D543"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D822D5A-F3C2-4726-9A87-B3AEC6A7D2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19B5B235-6BE8-477B-B7D1-21FF14541391"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"34604F10-6D7A-48D3-9761-5907B1511018"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B6EC9CC-538E-4F44-B065-9C0B7AD9F5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1EABCAD8-2455-4817-8352-E1C99D6031C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5BAAD599-5C89-48FA-99F3-1EFE5D491E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"24BB8DB0-1342-4D49-9883-3C853FBD858A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5DA8E4C7-A501-4506-9D47-4CB75EE23459"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"73653253-EEDA-410E-B7F0-3A6997F4CCAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DB6F507B-8AEC-488F-879C-73EDB63E72B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F08D41D8-E7F7-4F78-BA39-F480C1327C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8E190768-A30C-473A-ABF2-9306C2807918"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9C5230C8-4BCF-4366-A925-9A282DD9537F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"211C4C3B-0587-45BE-819E-51426E849A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"A75C68D1-F42F-4B49-9C26-767E7285001E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"BBE28509-8681-4875-B3F2-6CB89FB31B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"4C9FCE5F-1B0F-4A33-98EB-FC3F0CDE2EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"437FACF4-0016-4E00-AFD8-0C4D32EEBF73"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"A196C475-C350-462F-8B20-29FA403BAC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.0:*:*:*:*:*:*:*","matchCriteriaId":"6ED97A72-801C-40EB-AE70-FAC1A4593BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.1:*:*:*:*:*:*:*","matchCriteriaId":"85E091CB-F105-4032-B6CE-E2AB5098B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.2:*:*:*:*:*:*:*","matchCriteriaId":"142AF7BB-E734-45D0-A82A-A66C212296A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.3:*:*:*:*:*:*:*","matchCriteriaId":"BF0E7BF1-5C10-469A-BB85-F83B0348B0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.4:*:*:*:*:*:*:*","matchCriteriaId":"54685CE2-734E-4DD2-92E5-D170C9AC8C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.6:*:*:*:*:*:*:*","matchCriteriaId":"24B3E9A7-759A-474B-B5A2-77336D010F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBF44AF-C4F1-4EF8-BFCD-6E43FEA76FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.8:*:*:*:*:*:*:*","matchCriteriaId":"826E9D27-A316-4A99-AAD0-C73A8E81513E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.20.9:*:*:*:*:*:*:*","matchCriteriaId":"3D4E9832-90DA-4D4F-A7F5-EDC118EC85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.0:*:*:*:*:*:*:*","matchCriteriaId":"51155C5E-5394-4015-9ECE-CA7B63EA4C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"C216CC0F-4AB7-4CAA-A44B-EE83500F0C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.22.4:*:*:*:*:*:*:*","matchCriteriaId":"9FCBFEB7-419A-468D-BA8C-5FBDEE7D1C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.24.0:*:*:*:*:*:*:*","matchCriteriaId":"122BCB78-104C-48B1-B0AF-BA9E1DBAC496"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.24.2:*:*:*:*:*:*:*","matchCriteriaId":"74325695-412A-465E-8278-AEA222354A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.26.0:*:*:*:*:*:*:*","matchCriteriaId":"112ACDDE-7742-4D7A-BA03-FE50ADF8ED02"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.27.1:*:*:*:*:*:*:*","matchCriteriaId":"751E51E0-F2B9-4FB2-97C1-1D7EC3F9A6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:4.27.2:*:*:*:*:*:*:*","matchCriteriaId":"37E6EF53-6DC8-49C5-9125-BC32CA644131"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4BAEFBC6-5B93-4C44-AD87-7946367AF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1F393E6B-6576-4671-8311-3B64EDAB621F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898F4B04-1329-4442-A01B-BAF47549E3E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6715F83C-7928-41CE-AB4D-7B855C3038B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9865DE2B-0BDF-4120-BD0C-408518F84286"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ECC8D79A-3A04-4E26-8EDD-7A07F3EF5D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EDA4DD9D-E3C9-4818-BB2C-9F4A86F65216"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"153A361C-691C-4126-9FE5-EC964437F1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E6395ECE-34FF-43D3-9DDA-0503B06F08E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8D7B594F-AB4B-4C92-BFFD-CD55C5FB2393"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"696B8F10-DCCB-41F5-B771-3B8EF8DD33B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bittorrent:bittorrent:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1FFA73B3-9FA6-4026-A59E-3EBBE3CDFBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.6","matchCriteriaId":"E33159FF-D7D2-4304-89B5-357496BB8E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F133D6CF-1F5C-4DA9-AD2B-A0EBD3F8783F"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E1BE1497-6C95-41B3-861D-318B79C0BD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8FD2577B-7D73-414F-ABD9-99B8DB77277A"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A91C32-D05F-459B-8CF1-BC965610F70F"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DE4258E9-055A-4079-917B-B1C9680816FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"64611E61-2728-437C-B35C-B104C0828A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2FD9058B-A162-466A-95F9-3FC1BB6838D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E5F63991-BFBD-4C52-B87F-DD59F4974AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2148FDA-313B-4603-A89C-EDE7E41A31C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2F1A8AD9-50CD-4254-9A54-E439EC4B11AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.4:*:*:*:*:*:*:*","matchCriteriaId":"068F4B69-E6C1-4DA9-9EEB-EECB6899B3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E4950A28-EB7F-4991-86E4-CDC4FA381ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.5:*:*:*:*:*:*:*","matchCriteriaId":"36CE40C8-0FB1-4656-9BAD-155B4409FE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.6:*:*:*:*:*:*:*","matchCriteriaId":"18259FA6-04B8-4C50-B74C-306F59DC090B"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7:*:*:*:*:*:*:*","matchCriteriaId":"7A643D2C-DFEC-4A98-8B56-C4B9511F65C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9D1773-3FCB-4D0C-A837-7D3B9ABA7B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E6B47FF8-885A-4509-B259-447EBDE79831"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"01788873-AAB2-464E-B564-0E0EA62078E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"69E3BDC4-9B81-4D5C-897E-793173F973FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:utorrent:utorrent:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"EC998099-553A-4719-A903-0C67EC0D23DD"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ruttorrent2-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/42825","source":"cve@mitre.org"},{"url":"http://osvdb.org/42826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28695","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://aluigi.altervista.org/adv/ruttorrent2-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7167","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricción en upload.php de Page Manager 2006-02-04, permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable y luego accediendo a él a través de una solicitud directa al fichero en un directorio no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sami_ekblad:page_manager:2006-02-04:*:*:*:*:*:*:*","matchCriteriaId":"3A25EC83-061F-4D07-831A-DF97ED5B33FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29929","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1952/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43356","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5936","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1952/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7168","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control UUSee UUUpgrade ActiveX (UUUpgrade.ocx v3.0.2.12) permite a atacantes remotos forzar la descarga y sobreescritura de archivos a través de argumentos manipulados en el método Update, como se ha explotado públicamente en Junio 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uusee:uusee:4.0.0.32_2008:*:*:*:*:*:*:*","matchCriteriaId":"71CE4A8E-ED35-4431-9AB3-315CD591F393"},{"vulnerable":true,"criteria":"cpe:2.3:a:uusee:uuupgrade.ocx:3.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"4688E322-FFD2-47E0-8B64-A9BEB504A8CC"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29963.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29963","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43428","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29963.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/29963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7169","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a sign task to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Jabode horoscope (com_jabode) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una tarea de sign en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabode:com_jabode:*:*:*:*:*:*:*:*","matchCriteriaId":"12B70C7E-8D63-4B84-B245-7229FFD10679"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29994","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5963","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7170","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet."},{"lang":"es","value":"GSC build 2067 y anteriores se basa en el cliente para forzar los privilegios de administrador, lo que permite a los atacantes remotos ejecutar arbitrariamente comandos a través de paquetes manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gameservers:gsc:1.00:*:client:*:*:*:*:*","matchCriteriaId":"6492F0AF-62B3-4E3C-99C5-2E82F754CFD5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/493355/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29718","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43120","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493355/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7171","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, or (3) the Current question field in a vote action to admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Lightweight news portal (LNP) 1.0b permiten a usuarios remotos inyectar codigo de script web o código HTML de su elección  a través de (1) el parámetro photo de show_photo.php, (2) el parámetro potd de show_potd.php, o (3) el campo \"Current question\" en una acción \"vote\" de admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yanick_bourbeau:lightweight_news_portal:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"6458295E-43DC-4643-ABB8-4E381CBCD6B7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29848","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43224","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43226","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5873","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7172","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions."},{"lang":"es","value":"Lightweight news portal (LNP) v1.0b no restringe apropiadamente el acceso a la funcionalidad del administrador, lo que permite a los atacantes remotos obtener privilegios de administrados a través de peticiones directas a admin.php con las acciones (1) potd_delete, (2) potd, (3) vote_update, (4) vote, o (5) modifynews."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yanick_bourbeau:lightweight_news_portal:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"6458295E-43DC-4643-ABB8-4E381CBCD6B7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29848","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43225","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5873","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7173","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request.  NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage."},{"lang":"es","value":"Jura Internet Connection Kit para cafetera Jura Impressa F90 no proporciona restricciones de acceso a funciones privilegiadas, lo que permite a atacantes remotos causar una denegación de servicio (daño físico), modificación de la configuración del café, y probablemente ejecutar código a través de peticiones manipuladas. NOTA: este asunto es incluido en CVE porque la denegación del servicio puede incluir perdida financiera o daño en el agua."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juracapecoffee:internet_connectivity_kit:*:*:*:*:*:*:*:*","matchCriteriaId":"75EA9030-622F-4808-BF2D-3C432F4E319E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:juracapecoffee:jura_impressa:f90:*:*:*:*:*:*:*","matchCriteriaId":"A9939B9D-C364-4E17-9ED4-83FA5A7D54D1"}]}]}],"references":[{"url":"http://attrition.org/pipermail/vim/2008-June/002002.html","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-10784_3-9970757-7.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/46407","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493387/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493433/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493440/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29767","source":"cve@mitre.org"},{"url":"http://attrition.org/pipermail/vim/2008-June/002002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.cnet.com/8301-10784_3-9970757-7.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/46407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493387/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493433/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493440/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7174","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to improper use of the gets and sprintf functions."},{"lang":"es","value":"Múltiples desbordamientos del búfer en el Kit de Conexión a Internet de Jura para la máquina de café Jura Impressa F90, permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de vectores no especificados relacionados con el uso inadecuado de los gets y de las funciones sprintf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juracapecoffee:internet_connectivity_kit:*:*:*:*:*:*:*:*","matchCriteriaId":"75EA9030-622F-4808-BF2D-3C432F4E319E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:juracapecoffee:jura_impressa:f90:*:*:*:*:*:*:*","matchCriteriaId":"A9939B9D-C364-4E17-9ED4-83FA5A7D54D1"}]}]}],"references":[{"url":"http://news.cnet.com/8301-10784_3-9970757-7.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493387/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493433/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29767","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-10784_3-9970757-7.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493387/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493433/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7175","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en wp-admin/admin.php en el plugin NextGEN Gallery v0.96 y anteriores para Wordpress permite a atacantes remotos inyectar HTML o secuencias de comandos web a través del campo de descripción de la imagen en una acción de edición de página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"0.96","matchCriteriaId":"10A17DCF-CA36-4753-9221-83876102456D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.33:*:*:*:*:*:*:*","matchCriteriaId":"26E4204A-4BA2-4C33-A710-3CE60D878E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.34:*:*:*:*:*:*:*","matchCriteriaId":"50C0A270-EA27-48BD-8D64-29E828F63ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.35:*:*:*:*:*:*:*","matchCriteriaId":"A5D79D5B-7B3D-4237-8171-46842328C1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.36:*:*:*:*:*:*:*","matchCriteriaId":"EC872D48-CCFD-4875-8AEA-B7A2436577A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.37:*:*:*:*:*:*:*","matchCriteriaId":"40854E84-09A4-4129-A2B0-08DA99E5EF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.39:*:*:*:*:*:*:*","matchCriteriaId":"0E8D4A40-6F78-4E5A-978B-62BA1E55087B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.40:*:*:*:*:*:*:*","matchCriteriaId":"15D03EEA-C197-44FE-A876-658EB96A46F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.41:*:*:*:*:*:*:*","matchCriteriaId":"E4C4D8AF-0FBE-44DC-8A61-4A19309721C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.42:*:*:*:*:*:*:*","matchCriteriaId":"E4E26C7B-D322-4D02-B538-F1A3D66B30BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.43:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D83-6DD5-49C3-BA08-49B08E4E1840"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A051BAEC-92D1-4691-91F8-960650FE3CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.51:*:*:*:*:*:*:*","matchCriteriaId":"43C3D5E4-B66D-4125-B238-B1214E16B98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.52:*:*:*:*:*:*:*","matchCriteriaId":"BE91517A-34BE-4A5C-A18C-13BE00C41D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.60:*:*:*:*:*:*:*","matchCriteriaId":"57F767DA-EA78-48DE-BD21-B1B83689BEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.61:*:*:*:*:*:*:*","matchCriteriaId":"0E581082-EF11-487B-B3BC-BBEEEB2D0D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.62:*:*:*:*:*:*:*","matchCriteriaId":"427728C9-A494-4F6B-AEB0-F20891DEF96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.63:*:*:*:*:*:*:*","matchCriteriaId":"3A6111C6-3F0B-43ED-86E7-F1E000EF3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DB844E83-F5AF-473C-8941-177D29997BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.70:*:*:*:*:*:*:*","matchCriteriaId":"6EB2CA50-8D2F-43FB-B46E-C339CA332876"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.71:*:*:*:*:*:*:*","matchCriteriaId":"206CCC66-F0BE-4DC4-899D-48452E7C7C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.72:*:*:*:*:*:*:*","matchCriteriaId":"6AE16C00-E4EB-4BCE-98C9-53624A6A3C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.73:*:*:*:*:*:*:*","matchCriteriaId":"D290E48B-7373-4B45-9B20-5304BD552849"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.74:*:*:*:*:*:*:*","matchCriteriaId":"D3C18566-A37D-48A3-B8E0-388B73FD02C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.80:*:*:*:*:*:*:*","matchCriteriaId":"C8AB81AC-E5A4-4E19-A496-7465E88460EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.81:*:*:*:*:*:*:*","matchCriteriaId":"E8E94D50-4413-4E88-94AC-983FF664E6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.82:*:*:*:*:*:*:*","matchCriteriaId":"D3CC5B94-A0F7-4CD4-837E-BFD5601415F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.83:*:*:*:*:*:*:*","matchCriteriaId":"D8FA1DD5-DAE2-40B0-B51E-8EEFBC027353"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CB81F577-5B52-4309-A7CE-DB24EDE52B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.91:*:*:*:*:*:*:*","matchCriteriaId":"2DC708AA-C4D5-4DAA-BDFB-66D218C7B832"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.92:*:*:*:*:*:*:*","matchCriteriaId":"935E1759-87D1-4B54-B199-70828CC5474E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.93:*:*:*:*:*:*:*","matchCriteriaId":"834ECC39-7DA7-48FC-A97C-1B79BC115DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.94:*:*:*:*:*:*:*","matchCriteriaId":"029EE532-F83D-47D5-BDBC-344C74E50989"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_rabe:nextgen_gallery:0.95:*:*:*:*:*:*:*","matchCriteriaId":"5DC41F9F-FD8C-49C4-8F9E-4A772B16353C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://osvdb.org/51428","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493182/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/51428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493182/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7176","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) change_lang parameter to index.php or (2) modload parameter to modules.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Facil CMS 0.1RC, permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en los parámetros (1) change_lang de index.php o (2) modload de modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:celina_jorge:facil_cms:0.1:rc:*:*:*:*:*:*","matchCriteriaId":"77EF95CE-88D5-4C7E-BED0-F7D89355F74C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29692","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43037","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5792","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7177","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719."},{"lang":"es","value":"Desbordamiento de buffer en el módulo listing en Netwide Assembler (NASM) anterior v2.03.01 tiene impacto desconocido y vectores atacados, una vulnerabilidad diferente que CVE-2008-2719."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of nasm as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nasm:netwide_assembler:*:*:*:*:*:*:*:*","versionEndIncluding":"2.03.01","matchCriteriaId":"5D4D79A3-DA6C-4FC2-A318-118842A75950"}]}]}],"references":[{"url":"http://secunia.com/advisories/30836","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=607497","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29955","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020378","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1939","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452800","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43441","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01000.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=607497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/29955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/1939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-7178","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el modulo Uploader v1.1 para XOOPS permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en el parámetro filename en una acción downloadfile de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:uploader:1.1:*:*:*:*:*:*:*","matchCriteriaId":"83ED03B2-B5B2-4FDF-ACFE-522EA013CA94"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29600","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42925","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7179","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php."},{"lang":"es","value":"OTManager CMS v2.4 permite a atacantes remotos evitar la autenticación y obtener privilegios de administrador estableciendo las cookies ADMIN_Hora, ADMIN_Logado y ADMIN_Nome a valores determinados, tal como se utilizan desde Admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otmanager:otmanager_cms:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2CD4D8F-384E-4C45-8BAE-610183EFF55D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29999","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5959","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7180","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable."},{"lang":"es","value":"del_query1.php en Telephone Directory 2008 permite a los atacantes remotos, borrar arbitrariamente contactos a través de una petición directa lo que modifica la variable id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rittwick_banerjee:telephone_directory_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"83640097-CC45-4856-8D0A-5587D2025B74"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42973","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5769","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7181","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php."},{"lang":"es","value":"Butterfly Organizer v2.0.0, permite a atacantes remotos (1) eliminar categorías de su elección a través de un parámetro tablehere modificado de category-delete.php con el parámetro is_js_confirmed activado a 1 o (2) eliminar cuentas de su elección a través del parámetro mytable de delete.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:butterflymedia:butterfly_organizer:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E6822-2B75-4570-936C-EADE1F61AE63"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/29703","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43067","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7182","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T10:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498.  NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859."},{"lang":"es","value":"Desbordamiento de búfer en el servicio IMAP en NetWin Surgemail v3.9e, y probablemente otras versiones anteriores a v3.9g2, permite a usuarios autenticados remotamente provocar una denegación de servicio (parada) y probablemente ejecutar código de su elección mediante un primer argumento largo en el comando APPEN, siendo un vector diferente que CVE-2008-1497 y CVE-2008-1498. NOTA: ante la falta de detalles, no está confirmado que sea la misma vulnerabilidad que CVE-2008-2859."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:3.9e:*:*:*:*:*:*:*","matchCriteriaId":"3B7F09A9-9719-47C2-8021-853F699A7553"}]}]}],"references":[{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496482","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30000","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5968","source":"cve@mitre.org"},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/496482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/5968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7183","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the eva[caminho] parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inclusión remoto de archivo PHP en eva/index.php en EVA CMS v2.3.1,, cuando register_globals está habilitado, permite a los atacantes remotos ejecutar arbitrariamente código PHP a través de una URL en el parámetro eva[caminho] para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evacms:eva_cms:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DCDC4F07-B22D-4C5D-9F2D-EFEFA42518C0"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0806-exploits/evacms-rfi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29954","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43437","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0806-exploits/evacms-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7184","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web script or HTML via a public comment."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Diigo Toolbar y Diigolet, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de un comentario público."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:diigo:diigo_toolbar:*:*:*:*:*:*:*:*","matchCriteriaId":"32696247-6074-4F9D-9454-A449D98307BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:diigo:diigolet:*:*:*:*:*:*:*:*","matchCriteriaId":"7BBAC7A3-4EDA-458B-9A22-A695D2A8A453"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/493531/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29611","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493531/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7185","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_lookup function in b-playlist-manager.c."},{"lang":"es","value":"GNOME Rhythmbox v0.11.5 permite a atacantes remotos provocar una denegación de servicio (falta de segmentación y caída) a través de un fichero de lista de reproducción (.pls) con un campo de Title -Título- largo. Puede que esté relacionado con la función g_hash_table_lookup de b-playlist-manager.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:rhythmbox:0.11.5:*:*:*:*:*:*:*","matchCriteriaId":"A19DD5B4-5383-429B-A4A3-6FC7260F5AA3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0806-advisories/rhythmbox-dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493683/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/493809/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29958","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43436","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0806-advisories/rhythmbox-dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/493683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/493809/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7186","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504."},{"lang":"es","value":"Coppermine Photo Gallery (CPG) v1.4.14 no restringe el acceso a update.php, lo que permite a atacantes remotos obtener información sensible como el prefijo de la tabla de la base de datos a través de una petición directa. NOTA: esto podría ser aprovechado para ataques contra CVE-2008-0504."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"71058CB9-81CA-4F5B-8204-F21C906A71EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7187","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message."},{"lang":"es","value":"Coppermine Photo Gallery (CPG) v1.4.14, permite a atacantes remoto obtener información sensible a través de una petición directa a include/slideshow.inc.php, filtrando el directorio de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine-gallery:coppermine_photo_gallery:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"71058CB9-81CA-4F5B-8204-F21C906A71EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1019285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487351/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1019285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/advisory-66.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7188","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address in the email parameter to recoverpass.php."},{"lang":"es","value":"ClipShare v2.6 no restringe adecuadamente el acceso a ciertas funcionalidades, lo que permite a atacantes remotos modificar el perfil de archivos de su elección a través deuna variable \"uid\" modificada en el siteadmin/useredit.php. NOTA: esto puede ser usado para recuperar la contraseña del usuario reemplazando la dirección de correo electrónico en el parámetro \"email\" en recoverpass.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clip-share:clipshare:2.6:*:*:*:*:*:*:*","matchCriteriaId":"81F26A57-555F-4664-8B3C-BC6A9857E031"}]}]}],"references":[{"url":"http://secunia.com/advisories/28313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39494","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4837","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7189","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Local Media Browser before 0.1 have unknown impact and attack vectors related to \"Security holes.\""},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Local Media Browser v0.1 tiene un impacto y vectores de ataque desconocidos relacionados con \"Security holes\" (Agujeros de seguridad)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bastian_blumentritt:local_media_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.1","matchCriteriaId":"8A8BD672-F22A-4994-AC37-51DB949EBD1E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/localmediabrowser/releases/269578","source":"cve@mitre.org"},{"url":"http://osvdb.org/40529","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/localmediabrowser/releases/269578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7190","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adium before 1.2 has unknown impact and attack vectors related to javascript: URLs, possibly cross-site scripting (XSS)."},{"lang":"es","value":"Vulnerabilidad sin especificar en Adium anterior a v1.2 tiene un impacto y vectores de ataque desconocidos relacionados con el JavaScript: Urls, posiblemente la ejecución de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"DC6CC3AE-F439-4631-A99B-6B9989B42AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0:*:*:*:*:*:*:*","matchCriteriaId":"55D44D7E-116F-488C-8566-F7EA78C847FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E8857D0-14C2-49F6-AE8F-287792895776"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56022448-6CEE-4DE9-BC5D-F3F401470257"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B9D4A6BA-AB30-4EFA-BF5E-9212CBF6B141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B33448B4-31F3-434F-96D4-934D65BF65FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ED8C3F99-1E0C-4FDB-8E76-46CF6CBBA7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A7B851E0-5D86-4D7F-A1AD-903ADA6A2C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6B6DEA45-1C3C-432E-9746-F1C548C8E8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE2A0AA-BD45-4A8B-BB3C-D69BFDC7E363"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6A1C31-EA56-406F-AE65-10F838E4292B"}]}]}],"references":[{"url":"http://osvdb.org/41802","source":"cve@mitre.org"},{"url":"http://trac.adium.im/wiki/PreviousVersionHistory","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/41802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.adium.im/wiki/PreviousVersionHistory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7191","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Polipo before 1.0.4 allows remote attackers to cause a denial of service (crash) via a long request URL."},{"lang":"es","value":"Vulnrabilidad sin especificar en  Polipo v1.0.4, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición larga de URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"B87BD6F6-311B-41FA-9F16-40D586D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.1:*:*:*:*:*:*:*","matchCriteriaId":"27A87C7D-74DC-4212-BE30-93E1ECF2A7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.2:*:*:*:*:*:*:*","matchCriteriaId":"101857FB-83FE-43EE-8AF0-45A647C37303"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.3:*:*:*:*:*:*:*","matchCriteriaId":"A70EDA52-5337-4156-B9A8-DCA50CEA40F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.4:*:*:*:*:*:*:*","matchCriteriaId":"42B57600-4ED1-44F1-9D44-69F9DD436E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.5:*:*:*:*:*:*:*","matchCriteriaId":"FE768CF9-8717-4574-8A90-6BF73FC61D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E9498F5-79ED-4206-ACB4-DE7FEFBBEBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.7:*:*:*:*:*:*:*","matchCriteriaId":"CB535DDC-498F-480A-AD59-BE2C8244E0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8:*:*:*:*:*:*:*","matchCriteriaId":"A8CBBE7B-B126-4185-8A7F-5A59D327A2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"5C1FBDCD-7708-4126-8F5B-F41883C693F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"2E435A87-A970-4A61-A9BD-DFAD9BE4AAEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"67D25AC2-1174-42DD-AB9B-206C1810EAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"8A4711C9-A2E5-4F89-96EA-B3CCBBCD8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.99.0:*:*:*:*:*:*:*","matchCriteriaId":"331F181F-BA3D-4878-8F8F-DC05BE66D093"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.99.1:*:*:*:*:*:*:*","matchCriteriaId":"887BB853-6A92-42C9-9C4F-26D05CC6C910"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.99.2:*:*:*:*:*:*:*","matchCriteriaId":"F52A9873-49DF-475C-835E-9B345080285C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.8.99.3:*:*:*:*:*:*:*","matchCriteriaId":"8A0CA7B2-937B-4660-9477-E8338B05C909"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9:*:*:*:*:*:*:*","matchCriteriaId":"8D73868E-7CEA-4220-B036-FCBB97327710"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"60F05C70-B466-4FE8-BEBA-0192D85CC200"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6AFBE9-4A95-4294-BCF2-112508DE930C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D6E98644-7BB2-4130-9DDB-A4571F97A7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9F399174-7787-4BD1-8326-C3AFAAC79A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"10D0588E-55D6-49E9-BA7E-74BEA2A13ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"2E18A8CE-7CE3-423F-A73B-84EAA5752451"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"805118D4-1C0A-4756-B0DC-F289A15BC7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"E47C62BD-4423-46C3-99F4-C5B85B8A3EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"A6C10550-C868-4296-9F31-F9DA8EE168E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"104426E2-B9A1-48B9-9D68-520F48D6EAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"40343B67-4140-4EE5-91E2-D8AA2778B50E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"93902630-EC59-48AA-BCEA-FEEBDC6518F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.99.0:*:*:*:*:*:*:*","matchCriteriaId":"DDE445A0-0F07-48EE-8FCB-49CAAF7760BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.99.1:*:*:*:*:*:*:*","matchCriteriaId":"39EDE559-7BC9-4505-ADF5-C5B7FF279E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.99.2:*:*:*:*:*:*:*","matchCriteriaId":"141164CD-4853-4F2E-BA93-3D1D8CA69A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F5BBDCC0-F47D-4983-90D8-03A138753A3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9539DB45-3093-4F8A-9BE4-AF18144093CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50674F88-D0C0-4BBD-B12C-F19F858B38CE"}]}]}],"references":[{"url":"http://osvdb.org/39912","source":"cve@mitre.org"},{"url":"http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text","source":"cve@mitre.org"},{"url":"http://osvdb.org/39912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7192","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en index.php en WoltLab Burning Board (wBB) v3.0.1, y posiblemente otras versiones 3.x, permite a atacantes remotos secuestrarla autenticación de usuarios para peticiones que eliminan mensajes privados a través del parámetro pmID en una acción \"delete\" en una página PM. Vulnerabilidad distinta de CVE-2008-0472."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0A340746-E49F-47B4-BB37-24943BDEF473"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/487139/100/200/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487139/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7193","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php."},{"lang":"es","value":"PHPKIT v1.6.4 PL1 incluye el ID de session en la URL, lo que permite a atacantes remotos llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados leyendo el parámetro PHPKITSID desde el HTTP Referer y usándolo en una petición para (1) modificar el perfil de usuario a través de upload_files/include.php  o (2) crear un nuevo adminitrador mediante upload_files/pk/include.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.4pl1:*:*:*:*:*:*:*","matchCriteriaId":"3D54EE3C-BFE5-4E90-B9D8-9B060C028151"}]}]}],"references":[{"url":"http://osvdb.org/50998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487249/100/200/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40033","source":"cve@mitre.org"},{"url":"http://osvdb.org/50998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487249/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7194","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request."},{"lang":"es","value":"Vulnerabilidad no especificada en Fujitsu Interstage HTTP Server, como el que se usa en Interstage Application Server v5.0, v7.0, v7.0.1 y v8.0.0 para Windows, permite a los atacantes provocar una denegación de servicio a través de una solicitud manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B5C41BEF-22FE-460D-B195-2B77B073C424"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"0314571B-98D3-40B0-AA16-56916E1169E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:standard:*:*:*:*:*","matchCriteriaId":"BF689AB2-DE03-4B8F-B1AF-B7B3EDD15081"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:standard_windows:*:*:*:*:*","matchCriteriaId":"90A435DC-3EA9-45EB-ADE5-7502AB3A5057"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:web_j:*:*:*:*:*","matchCriteriaId":"45AC726E-2709-4244-8A1F-F8EB2D9A7D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:web_j_windows:*:*:*:*:*","matchCriteriaId":"CF25C19E-1A38-4308-A9C8-2B003A9295A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"63C3AAED-7C59-493F-B705-A12704110289"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"99AC7276-3FF3-42D0-AA5A-E807C916E1AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise_windows:*:*:*:*:*","matchCriteriaId":"F7F7B5B2-5C36-4353-85CA-97356CFF79EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus:*:*:*:*:*","matchCriteriaId":"CEEEE36C-E14C-4D0F-B382-0903D104E578"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_developer:*:*:*:*:*","matchCriteriaId":"C23324B8-E010-4E21-ADEF-58FC0A0D2BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_developer_windows:*:*:*:*:*","matchCriteriaId":"D1768BFE-51D4-4474-B4D4-E6EDD2F2EC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_windows:*:*:*:*:*","matchCriteriaId":"132550E0-8EF8-4318-B885-F9516F836540"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"59E78C8D-7009-4CFB-85B7-9B564BD74AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8838238A-FD20-4481-8D5C-EB6BEBE95133"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"390FBC71-1CF2-4D05-9931-9F4E7ED9C096"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise_windows:*:*:*:*:*","matchCriteriaId":"2AFD1C0D-AF98-4B93-B449-24CB07A429AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus:*:*:*:*:*","matchCriteriaId":"BDD9380C-8224-44C5-9688-F3134A6A0C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus_windows:*:*:*:*:*","matchCriteriaId":"D98630E0-FE0C-43DB-8A0A-1A71C998156E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C657792-A571-4095-B966-D353C22A35E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"E7F2EDBD-8799-4EAF-9925-3C07FAEEBE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:enterprise_windows:*:*:*:*:*","matchCriteriaId":"8F3CB91A-FA1F-4C62-AAEB-1263487E09D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:standard_j:*:*:*:*:*","matchCriteriaId":"AA6ED703-53F9-4536-8E1D-46C30E547B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:standard_j_windows:*:*:*:*:*","matchCriteriaId":"207A8246-0063-4D58-9E7D-C64535017BC1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27391","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39847","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7195","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL."},{"lang":"es","value":"Vulnerabilidad no especificada en Fujitsu Interstage HTTP Server, como el que se usa en Interstage Application Server Enterprise Edition v7.0.1 para Solaris, permite a los atacantes provocar una denegación de servicio a través de vectores desconocidos relacionados con SSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:standard_windows:*:*:*:*:*","matchCriteriaId":"90A435DC-3EA9-45EB-ADE5-7502AB3A5057"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:*:web_j_windows:*:*:*:*:*","matchCriteriaId":"CF25C19E-1A38-4308-A9C8-2B003A9295A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:5.0:enterprise_windows:*:*:*:*:*:*","matchCriteriaId":"591F3E62-50DF-43F3-8610-EB928DE85345"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:enterprise_windows:*:*:*:*:*","matchCriteriaId":"F7F7B5B2-5C36-4353-85CA-97356CFF79EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_developer_windows:*:*:*:*:*","matchCriteriaId":"D1768BFE-51D4-4474-B4D4-E6EDD2F2EC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0:*:plus_windows:*:*:*:*:*","matchCriteriaId":"132550E0-8EF8-4318-B885-F9516F836540"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:enterprise_windows:*:*:*:*:*","matchCriteriaId":"2AFD1C0D-AF98-4B93-B449-24CB07A429AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:7.0.1:*:plus_windows:*:*:*:*:*","matchCriteriaId":"D98630E0-FE0C-43DB-8A0A-1A71C998156E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:enterprise_windows:*:*:*:*:*","matchCriteriaId":"8F3CB91A-FA1F-4C62-AAEB-1263487E09D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:interstage_application_server:8.0.0:*:standard_j_windows:*:*:*:*:*","matchCriteriaId":"207A8246-0063-4D58-9E7D-C64535017BC1"}]}]}],"references":[{"url":"http://secunia.com/advisories/28606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27391","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0233","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7196","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a \"PATH execution security flaw,\" possibly an untrusted search path vulnerability."},{"lang":"es","value":"Vulnerabilidad inespecífica en metashell anteriores a 0.03 tiene un impacto desconocido y vectores de ataque relacionados con \"PATH execution security flaw,\" posiblemente una vulnerabilidad de ruta de busqueda sin confianza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_reinsfelder:metashell:*:*:*:*:*:*:*:*","versionEndIncluding":"0.02b","matchCriteriaId":"65E8E8C9-2CB9-437F-99ED-7EA5163E25D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_reinsfelder:metashell:0.01b:*:*:*:*:*:*:*","matchCriteriaId":"66DAF258-2C0F-4F29-ACFF-58710AED7B8C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/40573","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7197","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en G15Daemon anterior a v1.9.4, tienen impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.3","matchCriteriaId":"EC625421-B015-4140-BAF2-21D1FB69B86D"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.1-2:*:*:*:*:*:*:*","matchCriteriaId":"B81060AF-E944-4007-ABCA-35A36DF0B620"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.1-02:*:*:*:*:*:*:*","matchCriteriaId":"4698890E-F773-4319-AFD8-D69A2DE7F029"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D29CE84E-7676-4C2E-B7F9-6A765F77A85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2-1:*:*:*:*:*:*:*","matchCriteriaId":"26FB348D-F0F6-4FEA-A4B4-33640DADF526"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"98873111-1B6C-4685-86F5-D63828A32E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.1-1:*:*:*:*:*:*:*","matchCriteriaId":"DA574C58-B5E3-4C5B-B87A-45E85A8C7ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7290E621-46FC-4E05-A15F-304C53053A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.2-1:*:*:*:*:*:*:*","matchCriteriaId":"7329C2F7-E8E3-45F6-A486-C8CC638EAC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.3-1:*:*:*:*:*:*:*","matchCriteriaId":"AE7D7D65-118E-447E-9112-CADF1762AD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C5C0C2C7-ABCA-4FDD-836A-FF761A323AC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.4-1:*:*:*:*:*:*:*","matchCriteriaId":"C533DB1D-105C-4669-B0E8-CB2E80A5EDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"70EB02AA-D350-4C56-A048-114C7CB6382A"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.5-1:*:*:*:*:*:*:*","matchCriteriaId":"FABF2DFB-9485-4D15-9375-7780E614BBB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.6a:*:*:*:*:*:*:*","matchCriteriaId":"E6A718BD-3794-4A14-97DA-AE5F9367CAB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.6a-1:*:*:*:*:*:*:*","matchCriteriaId":"43CC0469-22F7-4947-B32D-8D98DB1D7C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B5453280-DA98-4D51-B09D-CED322EECC38"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.2.7-1:*:*:*:*:*:*:*","matchCriteriaId":"FE4F1F29-7A30-491D-9CA4-B46738E6B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.9.0:pre2.0:*:*:*:*:*:*","matchCriteriaId":"B7A3FC0D-5AE6-4045-9B47-397EBAF6EFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7E8677E0-DADD-4347-8AAE-3FB73ACBE8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:g15tools:g15daemon:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EAB8B4E3-4980-40C6-AAEE-4BECDF7D1188"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/40528","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7198","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en phpns anterior a v2.1.1beta1 tiene impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alecwh:phpns:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1alpha2_b1","matchCriteriaId":"E5812541-6150-4027-BFB7-E766E076F47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alecwh:phpns:2.1.1_b1:*:*:*:*:*:*:*","matchCriteriaId":"28F1FA14-F0B9-4CAC-BFE7-BA4DA39C39D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alecwh:phpns:2.1.1alpha1_b1:*:*:*:*:*:*:*","matchCriteriaId":"DEEBF52B-7D1C-498F-B846-5EBA2A9AA358"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0029.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/40571","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/40571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7199","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrated by a Nessus scan or (2) malformed input to TCP port 502."},{"lang":"es","value":"Phoenix Contact FL IL 24 BK-PAC permite a atacantes remotos producir una denegación de servicio (cuelgue) a través de (1) manipulaciones sin especificar como se demuestra con un escaneo de Nessus o (2) entradas malformadas al puerto TCP 502."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:phoenixcontact:fl_il_24_bk-pac:*:*:*:*:*:*:*:*","matchCriteriaId":"EBEE4D59-055A-4AD3-8100-50CECFC68046"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0268.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51002","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0268.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7200","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad de doble liberación en el motor de servidor Deliantra anteriores a v2.4 tiene impacto desconocido y vectores de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:*:*:*:*:*:*:*:*","versionEndIncluding":"2.03","matchCriteriaId":"5F0980D4-7ACC-4783-B206-2CA0F9111D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.99:*:*:*:*:*:*:*","matchCriteriaId":"7653496F-6825-4AAA-9E2D-AC3963CD05AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9955:*:*:*:*:*:*:*","matchCriteriaId":"DFCFD04D-C246-4D54-B996-555F1F90D7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9956:*:*:*:*:*:*:*","matchCriteriaId":"C950392C-1A32-45EC-97D4-C04FBA8F58F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9959:*:*:*:*:*:*:*","matchCriteriaId":"7A9514D8-C83E-4AF6-A87F-BCDCAFEA01F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9960:*:*:*:*:*:*:*","matchCriteriaId":"0649F910-A018-4E1C-BDC7-EF927BD538F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9963:*:*:*:*:*:*:*","matchCriteriaId":"21A592D2-497F-42B1-B176-4E8D7CE0D199"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9965:*:*:*:*:*:*:*","matchCriteriaId":"5FC2FF6F-3EAF-46A1-AE2B-C1975F81986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9967:*:*:*:*:*:*:*","matchCriteriaId":"CFEBB9CD-AE36-4FD9-AAD9-D6971561B720"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9970:*:*:*:*:*:*:*","matchCriteriaId":"839B9CAA-481E-4204-B9AB-2E2B05307E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9972:*:*:*:*:*:*:*","matchCriteriaId":"15897149-5B2A-4BEF-BABD-DBDD09CA0EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9974:*:*:*:*:*:*:*","matchCriteriaId":"B6AB044D-2B5A-4BE5-8571-F827C0159195"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9975:*:*:*:*:*:*:*","matchCriteriaId":"BADA71DE-BD62-4A95-A3FE-1E2C72E1560A"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9976:*:*:*:*:*:*:*","matchCriteriaId":"5E638172-2A38-428C-B1ED-A351C6938938"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9977:*:*:*:*:*:*:*","matchCriteriaId":"9153061E-11B6-46D2-988D-052DF6EE4453"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:0.9978:*:*:*:*:*:*:*","matchCriteriaId":"62553756-A3BB-4F57-8DEE-BF623B02E86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:2.0:*:*:*:*:*:*:*","matchCriteriaId":"398C2EFC-8D7C-4875-90B1-30773DA3ED35"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:2.01:*:*:*:*:*:*:*","matchCriteriaId":"2B614A59-475A-4411-9E44-C4AC5AF834E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:deliantra:deliantra:2.02:*:*:*:*:*:*:*","matchCriteriaId":"355E0FF5-C147-49C3-A084-FE98186997DB"}]}]}],"references":[{"url":"http://cvs.schmorp.de/cf.schmorp.de/server/Changes","source":"cve@mitre.org"},{"url":"http://osvdb.org/48898","source":"cve@mitre.org"},{"url":"http://cvs.schmorp.de/cf.schmorp.de/server/Changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/48898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7201","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as demonstrated using (1) Nessus and (2) nmap."},{"lang":"es","value":"Lantronix MSS485-T permite a atacantes remotos producir una denegación de servicio (actividad inestable y perdida de servicio) a través de ciertos escaneos de vulnerabilidades, como se demuestra con (1) Nessus y (2) nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lantronix:mss485-t:*:*:*:*:*:*:*:*","matchCriteriaId":"D7FDD8F3-1C19-4205-A189-73507845CA44"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0487.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51003","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0487.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/51003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7202","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T10:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en OpenWebMail anteriores a v2.53 (Estable) permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a traves de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.52","matchCriteriaId":"F0B4876B-E63D-436F-BBE1-664AFB99F655"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.20:*:*:*:*:*:*:*","matchCriteriaId":"E146A1C0-C4EE-4083-A0D6-182789DD73A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.21:*:*:*:*:*:*:*","matchCriteriaId":"61B81A77-CA1C-4994-B94E-AF1F3B2539DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9A13D570-2C32-417D-97C6-944C751C4910"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.32:*:*:*:*:*:*:*","matchCriteriaId":"8A8933B8-0794-4CC9-BD12-C491B11EBEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.40:*:*:*:*:*:*:*","matchCriteriaId":"39A1A3AA-B9E9-477A-BA1F-AA749575E5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.41:*:*:*:*:*:*:*","matchCriteriaId":"D4A977EA-FC5F-4B9A-9FFF-EDED5A6D15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.50:*:*:*:*:*:*:*","matchCriteriaId":"974FF9FC-F658-4B73-971B-2A2FF2C351FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwebmail.acatysmoof:openwebmail:2.51:*:*:*:*:*:*:*","matchCriteriaId":"4439AFBD-68B5-4043-B726-B931F83C82E2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://freshmeat.net/projects/openwebmail/releases/270453","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/40581","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://freshmeat.net/projects/openwebmail/releases/270453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/40581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7203","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets."},{"lang":"es","value":"Valve Software Half-Life Counter-Strike 1.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de múltiples paquetes de login manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valvesoftware:counter-strike:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C03272CB-BBB8-46A5-81B0-D7CF991EBA40"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27159","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39535","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7204","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en VirtueMart 1.0.13a y anteriores, permite a atacantes remotos secuestrar la autenticación de administradores a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.13","matchCriteriaId":"11958D5A-0F07-4760-AC94-F4DEED19D07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"596314D8-050F-4788-AF4F-860FC8A75B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4F4F3360-18B1-4BB8-A70A-D7105DB24D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7FC3F460-4FD8-4B73-BD3A-7FF3C7D0AE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C5973528-FDFD-4D2D-B753-9F77DD77B559"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"81933705-B55D-4FEB-906B-4628320D73AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"170C99FE-E0EF-48C2-B5D3-EA02E3C0378C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B8295707-8C1F-4915-8DC0-17B95EE5D706"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D86737E6-E11B-422A-8425-E52717DAB290"}]}]}],"references":[{"url":"http://osvdb.org/41762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://virtuemart.net/index.php?option=com_content&task=view&id=276&Itemid=127","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40117","source":"cve@mitre.org"},{"url":"http://osvdb.org/41762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://virtuemart.net/index.php?option=com_content&task=view&id=276&Itemid=127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7205","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file."},{"lang":"es","value":"Vulnerabilidad no específica en la funcionalidad de mostrar producto en VirtueMart v1.0.13a y anteriores permite a atacantes remotos leer ficheros de su elección a través de vectores relativos a un fichero plantilla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.13a","matchCriteriaId":"8F0BB44A-ED92-41D8-9620-A328FEACD23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"596314D8-050F-4788-AF4F-860FC8A75B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4F4F3360-18B1-4BB8-A70A-D7105DB24D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7FC3F460-4FD8-4B73-BD3A-7FF3C7D0AE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C5973528-FDFD-4D2D-B753-9F77DD77B559"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"81933705-B55D-4FEB-906B-4628320D73AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"170C99FE-E0EF-48C2-B5D3-EA02E3C0378C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B8295707-8C1F-4915-8DC0-17B95EE5D706"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D86737E6-E11B-422A-8425-E52717DAB290"}]}]}],"references":[{"url":"http://osvdb.org/41761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://virtuemart.net/index.php?option=com_content&task=view&id=275&Itemid=127","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27532","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40114","source":"cve@mitre.org"},{"url":"http://osvdb.org/41761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://virtuemart.net/index.php?option=com_content&task=view&id=275&Itemid=127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7206","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the \"logbook contains HTML code,\" probably cross-site scripting (XSS)."},{"lang":"es","value":"Vulnerabilidad no específica en Electronic Logbook (ELOG) anteriores a la v2.7.2, tiene un impacto y vectores desconocidos cuando \"logbook contains HTML code,\" probablemente ejecución de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.6","matchCriteriaId":"8F0E0E74-8A2B-4152-9C54-FFFE9B2DBFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CF27C7ED-98A3-48A3-9DE0-376CB0FAFAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"699E4BEE-A5B1-474C-892A-08680690E784"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9266F578-79ED-48F9-A686-BBBBDF1CCB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7AF1F9C8-AC49-42E6-BAE3-9FC4BF1512C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B1671B86-B1DC-49DC-9AE1-883EF3DF7E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"74589737-6A1F-4F63-8330-CE1374A7F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"52BE6CD0-2901-44EC-A065-EDA5FF4831E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"30AC1C1A-DEC0-45DA-B09A-B029426732A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8EF8B8DF-A162-4603-B6BA-A1CC5D34AF56"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3E19C713-B881-4CC9-AB40-A5B12B7D14BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8E77FC6F-10A7-489B-8644-FBFA8C9E5326"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC97CEC-AF5B-4A69-928A-E1FFB9180CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"44B9943E-81C9-43A4-A5E2-9BDD62456EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"BB784D24-C980-4030-9E0E-9F7AE3FFD429"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FA8B3C4C-BB31-43E1-A8F3-49A204AE6709"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.4:*:*:*:*:*:*:*","matchCriteriaId":"158E603A-4C79-4C29-85CE-0BEBB485F287"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5:*:*:*:*:*:*:*","matchCriteriaId":"33629F82-9C9A-44C4-85A9-6B61F8760767"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"BE4E89CC-9CF3-4DC2-9829-3C215DC0C1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D34F0566-DCF7-4CAA-980A-78B989CC5C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9F69F7E5-0EAA-48F5-A358-F42576776745"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AA669F5E-B250-4467-B09D-F0ACCB5ED81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D3568E55-3043-4A88-9C84-04402288253A"}]}]}],"references":[{"url":"http://osvdb.org/41685","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27526","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40124","source":"cve@mitre.org"},{"url":"https://midas.psi.ch/elog/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://osvdb.org/41685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://midas.psi.ch/elog/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7207","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php."},{"lang":"es","value":"RivetTracker anteriores a la v1.0 almacena contraseñas en texto claro en config.php, lo que permite a usuarios locales ver las contraseñas, leyendo el ficheros config.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rivetcode:rivettracker:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8","matchCriteriaId":"96399C4D-FD42-4CEB-9F5E-460FDFB83345"},{"vulnerable":true,"criteria":"cpe:2.3:a:rivetcode:rivettracker:0.1:*:*:*:*:*:*:*","matchCriteriaId":"89D97FC7-C0B5-4462-B9A3-1D3BB56925CD"}]}]}],"references":[{"url":"http://osvdb.org/42433","source":"cve@mitre.org"},{"url":"http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip","source":"cve@mitre.org"},{"url":"http://osvdb.org/42433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rivetcode.com/files/rivettracker/rivettracker_1-0.zip","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7208","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en OneCMS 2.4 y posiblemente anteriores, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros: (1) username (variable $usernameb) sobre a_login.php y (2) user sobre staff.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insane_visions:onecms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"4172AA15-FAD3-4B0B-A9F3-A57C93D8AD1A"}]}]}],"references":[{"url":"http://osvdb.org/51057","source":"cve@mitre.org"},{"url":"http://osvdb.org/51058","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=774946","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.bugreport.ir/index_26.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485837/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487136/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27158","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0081","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39482","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4857","source":"cve@mitre.org"},{"url":"http://osvdb.org/51057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=774946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.bugreport.ir/index_26.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485837/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487136/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7209","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en la acción add2 en a_upload.php en OneCMS 2.4 y posiblemente anteriores, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con extensión ejecutable y usando un contenido seguro como una imagen GIF, después accediendo al mismo a través de una petición directa sobre el fichero en un directorio no específico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insane_visions:onecms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"4172AA15-FAD3-4B0B-A9F3-A57C93D8AD1A"}]}]}],"references":[{"url":"http://osvdb.org/51117","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=774946","source":"cve@mitre.org"},{"url":"http://www.bugreport.ir/index_26.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485837/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487136/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27158","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0081","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39485","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4857","source":"cve@mitre.org"},{"url":"http://osvdb.org/51117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=774946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugreport.ir/index_26.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485837/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487136/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7210","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter's hash value, which prevents the associated $_GET[\"s\"] variable from being unset.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat."},{"lang":"es","value":"directory.php in AJchat 0.10 permite a atacantes remotos saltarse la validación de entrada y conducir ataques de inyección SQL a través de un parámetro numérico con un valor que coincida con el valor hash del parámetro s, lo que previene la variable asociada $_GET[\"s\"] de no ser fijada. NOTA Se podría argumentar que esta vulnerabilidad se debe a un error en el comando PHP unset (CVE-2006-3017) y la corrección adecuada debería ser en PHP, y si es así, entonces esto no debería ser tratado como una vulnerabilidad en ajchat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ming_han:ajchat:0.10:*:*:*:*:*:*:*","matchCriteriaId":"1F973260-92E8-48C0-8946-C342BF30B6FB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27241","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39600","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7211","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade access to the Physical Device Object (PDO), which allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer."},{"lang":"es","value":"El controlador de audio CreativeLabs es1371mp.sys v5.1.3612.0 WDM, como el usado en las tarjetas de sonido Ensoniq PCI 1371, y cuando está ejecutándose Windows Vista, no crea un Functional Device Object (FDO) para prevenir el acceso en modo usuario al Physical Device Object (PDO), lo que permite a usuarios locales obtener privilegios de SYSTEM a través de una petición IRP manipulada que desreferencie un punterio FsContext nulo. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:soundblaster:ensoniq_pci_es1371_wdm_driver:5.1.3612.0:*:*:*:*:*:*:*","matchCriteriaId":"CA2ADF64-C1B6-444D-890B-DCC9011BA12C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=54","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485848/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=54","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485848/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7212","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in an error message."},{"lang":"es","value":"MOStlyCE anteriores a la v2.4, como la usada en Mambo v4.6.3 y anteriores, permiten a atacantes remotos obtener información sensible a través de determinadas peticiones sobre mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php el cual revela el path de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"6D2DE818-7FEA-48ED-BD22-A8760C1F297F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"97BAB160-6BB4-4535-BA60-B25303793FBD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brilaps:mostlyce:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"295DA818-1660-4534-A153-2F416C66D2D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"cve@mitre.org"},{"url":"http://osvdb.org/42529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39983","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7213","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php en MOStlyCE y anteriores a la v2.4, como la usada en Mambo v4.6.3 y anteriores, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro Command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"6D2DE818-7FEA-48ED-BD22-A8760C1F297F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"97BAB160-6BB4-4535-BA60-B25303793FBD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brilaps:mostlyce:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"295DA818-1660-4534-A153-2F416C66D2D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"cve@mitre.org"},{"url":"http://osvdb.org/42530","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27470","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39984","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7214","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en administrator/index2.php en MOStlyCE anterior a la v2.4, como la usada en Mambo v4.6.3, permite a atacantes remotos secuestrar la autenticación de administradores para peticiones que añaden nuevas cuentas de administradores a través de una tarea guardada en una acción com_users, como se demostró usando una vulnerabilidad cross site scripting (XSS) separada en mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"6D2DE818-7FEA-48ED-BD22-A8760C1F297F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"97BAB160-6BB4-4535-BA60-B25303793FBD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brilaps:mostlyce:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"295DA818-1660-4534-A153-2F416C66D2D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"cve@mitre.org"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"cve@mitre.org"},{"url":"http://osvdb.org/42531","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39985","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7215","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails."},{"lang":"es","value":"El Image Manager en MOStlyCE anteriores a v2.4, como las usadas en Mambo v4.6.3 y anteriores, permite a atacantes remotos renombrar ficheros de su elección y provocar una denegación de servicio a través de la modificación de los parámetros file[NewFile][name], file[NewFile][tmp_name], y file[NewFile][size] en un comando FileUpload, que es usado para modificar las variables equivalentes en $_FILES que son accedidas cuando la comprobación is_uploaded_file falla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"6D2DE818-7FEA-48ED-BD22-A8760C1F297F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo-foundation:mambo:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"97BAB160-6BB4-4535-BA60-B25303793FBD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brilaps:mostlyce:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"295DA818-1660-4534-A153-2F416C66D2D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"cve@mitre.org"},{"url":"http://osvdb.org/42532","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27472","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39986","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://forum.mambo-foundation.org/showthread.php?t=10158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/42532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/28670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_33.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/487128/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7216","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip."},{"lang":"es","value":"La extensión Peter's Math Anti-Spam Spinoff para  WordPress genera un clip de audio CAPTCHA concatenando ficheros de audio estático sin distorsiones adicionales, lo que permite a atacantes remotos saltarse la protección CAPTCHA leyendo los byte concretos del clip generado.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:peter\\'s_math_anti-spam_for_wordpress:-:*:*:*:*:*:*:*","matchCriteriaId":"0F50482F-7E89-4B2A-BDA6-43E514C49916"}]}]}],"references":[{"url":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486331/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27287","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688","source":"cve@mitre.org"},{"url":"http://docs.google.com/View?docid=df36cd52_19xzmkwqcg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486331/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7217","sourceIdentifier":"cve@mitre.org","published":"2009-09-13T22:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories."},{"lang":"es","value":"Microsoft Office 2008 para Mac, cuando se ejecuta en sistemas Macintosh que restringen el acceso a Office para administradores, no hacen cumplir esta restricción para el usuario ID 502, esto permite a usuarios locales con ese ID evitar las políticas de seguridad pretendidas y acceder a los programas Office. Está relacionado con los permisos y propietarios de ciertos directorios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"}]}]}],"references":[{"url":"http://osvdb.org/44959","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488","source":"cve@mitre.org"},{"url":"http://osvdb.org/44959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3B948488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7218","sourceIdentifier":"cve@mitre.org","published":"2009-09-13T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el API de Horde v3.1 anterior a v3.1.6 y v3.2 anterior a v3.2 anterior a v3.2-RC2; Turba H3 v2.1 anterior a v2.1.6 y v2.2 anterior a v2.2-RC2; Kronolith H3 2.1 anterior a v2.1.7 y H3 v2.2 anterior a v2.2-RC2; Nag H3 v2.1 anterior a v2.1.4 y v2.2 anterior a v2.2-RC2; Mnemo H3 v2.1 anterior a v2.1.2 y v2.2 anterior a v2.2-RC2; Horde Groupware v1.0 anterior a v1.0.3 y v1.1 anterior a v1.1-RC2; y Groupware Webmail Edition v1.0 anterior a v1.0.4 y v1.1 anterior a v1.1-RC2; tiene impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"71C2653B-7F0B-4628-9E77-44744BC05463"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B574D428-0A3A-47CA-A926-5C936F83919A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A30F59C-D09A-495D-B5E5-E908D913164E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B013D26B-BE67-4131-B320-EF87D19E9C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"664B0D12-607C-4B5F-AC8E-FB1BBD1332E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.1:*:*:*:*:*:*:*","matchCriteriaId":"46ADF628-449A-463E-A459-69FD9DB2ADAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D589E22C-7F87-43EF-B5FF-DC2B43E5252C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"57AD38FB-23DF-406D-8889-E9EB18D22C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"35BECCFA-1E18-41ED-882A-5C743D970EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C0285D4F-8CD8-48F9-9D68-A80E8742BAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B3808FD9-126C-422F-AFE4-4FF6E1366431"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"96A4F9E2-7978-4C82-9BD3-B6B73C4918E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"457276C8-6665-48C5-948C-E65E6309C0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"391F88AC-0D1B-4F13-874C-6FD3C6E90CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C5E6E0C-7E94-4187-B53B-1BBB73C23EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FDCD1651-0610-4338-9EA6-343865AA9F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6F6A557A-EC2D-40AF-88C7-208DB4E8FA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"733B59F3-1648-4875-9A9B-EC3BCA49BCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"012BBA79-F969-405E-BBC8-FDC23DE25012"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5A06B44D-9448-4C96-BD37-790DA9842BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B67D985-950E-42B5-BA8D-05AE8A3EE3EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:mnemo_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C2814A27-E3C4-4A69-8FEB-E4900CD9876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:mnemo_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D4CAC140-EA0B-4FFD-B8E7-3295623C6D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:mnemo_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"38397885-FDB3-4454-BFBB-2B28173FEC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"08307428-AE78-453B-A121-15AEB7049EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"195D72BA-A0A6-4568-BC67-77A44F9E0697"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3F7853DA-0958-401B-83C6-E35FACA4AAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C2BD1454-1D33-4026-A7F6-ADB358D3DC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"184A2E09-5784-44C4-A5D9-87EA906F86E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BD583BAE-8123-40B9-8A68-96725A86EBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE9CA86E-B688-495F-8233-69632B56E1FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"56B99A86-A8A6-474E-B54F-9F010FFE7C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"88F73B3B-DB27-40F9-BCC2-E5ACC10F2A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4035BF4B-64F9-4A0D-82D0-99276B8B7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6D808D3F-9332-4667-838C-CD545EDAD37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"73C0F1DE-D2CB-4FA1-89FA-2C6E0991FDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:turba_h3:2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"6E649CA6-3EBD-40A4-860F-08141F8FB9D2"}]}]}],"references":[{"url":"http://lists.horde.org/archives/announce/2008/000360.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000361.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000362.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000363.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000364.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000367.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000368.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000369.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000371.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000374.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000376.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000377.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/42775","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39599","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2008/000362.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000364.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000367.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000368.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000371.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000374.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/42775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7219","sourceIdentifier":"cve@mitre.org","published":"2009-09-13T22:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors."},{"lang":"es","value":"Horde Kronolith H3 v2.1 anterior v2.1.7 y v2.2 anterior v2.2-RC2; Nag H3 v2.1 anterior v2.1.4 y 2.2 anterior v2.2-RC2; Mnemo H3 v2.1 anterior v2.1.2 y H3 2.2 anterior v2.2-RC2; Groupware v1.0 anterior v1.0.3 y v1.1 anterior v1.1-RC2; y Groupware Webmail Edition v1.0 anterior v1.0.4 y v1.1 anterior v1.1-RC2, no valida las propiedades al compartir cambios, con un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"71C2653B-7F0B-4628-9E77-44744BC05463"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B574D428-0A3A-47CA-A926-5C936F83919A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A30F59C-D09A-495D-B5E5-E908D913164E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B013D26B-BE67-4131-B320-EF87D19E9C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"664B0D12-607C-4B5F-AC8E-FB1BBD1332E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware_webmail_edition:1.1:*:*:*:*:*:*:*","matchCriteriaId":"46ADF628-449A-463E-A459-69FD9DB2ADAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"391F88AC-0D1B-4F13-874C-6FD3C6E90CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C5E6E0C-7E94-4187-B53B-1BBB73C23EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FDCD1651-0610-4338-9EA6-343865AA9F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6F6A557A-EC2D-40AF-88C7-208DB4E8FA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"733B59F3-1648-4875-9A9B-EC3BCA49BCEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"012BBA79-F969-405E-BBC8-FDC23DE25012"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5A06B44D-9448-4C96-BD37-790DA9842BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:kronolith_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B67D985-950E-42B5-BA8D-05AE8A3EE3EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:mnemo_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C2814A27-E3C4-4A69-8FEB-E4900CD9876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:mnemo_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D4CAC140-EA0B-4FFD-B8E7-3295623C6D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:mnemo_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"38397885-FDB3-4454-BFBB-2B28173FEC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1:*:*:*:*:*:*:*","matchCriteriaId":"08307428-AE78-453B-A121-15AEB7049EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"195D72BA-A0A6-4568-BC67-77A44F9E0697"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3F7853DA-0958-401B-83C6-E35FACA4AAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C2BD1454-1D33-4026-A7F6-ADB358D3DC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:nag_h3:2.2:*:*:*:*:*:*:*","matchCriteriaId":"184A2E09-5784-44C4-A5D9-87EA906F86E1"}]}]}],"references":[{"url":"http://lists.horde.org/archives/announce/2008/000362.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000363.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000364.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000368.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000369.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000371.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000376.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000377.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27217","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2008/000362.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000364.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000365.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000368.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000371.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.horde.org/archives/announce/2008/000377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7220","sourceIdentifier":"cve@mitre.org","published":"2009-09-13T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make \"cross-site ajax requests\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en Prototype JavaScript Framework (prototypejs) anterior a v1.6.0.2, permite  a atacantes remotos realizar \"peticiones ajax en sitios cruzados\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6.0.2","matchCriteriaId":"78E4C4B0-7FA1-4DEE-A96A-A2A93E8E1DA2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]}],"references":[{"url":"http://github.com/sstephenson/prototype/blob/master/CHANGELOG","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://osvdb.org/46312","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2019/May/10","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2019/May/11","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2019/May/13","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37479","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37677","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/07/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523277","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533137","source":"cve@mitre.org","tags":["Issue Tracking","Not Applicable","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/2ad48cd9d47edd0e677082eb869115809473a117e1e30b52fb511590%40%3Cissues.zookeeper.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/6d1b9a75a004dab42c81e8aa149d90e6fd26ce8cd6d71295e565e366%40%3Cissues.zookeeper.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/769fcc5f331b61c4d7ce16b807678e9a1799628d0146322e14aa24ed%40%3Cdev.zookeeper.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/7ba863c5a4a0f1230cba2d11cf4de3a2eda3a42e8023d4990f564327%40%3Cdev.zookeeper.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87%40%3Cnotifications.zookeeper.apache.org%3E","source":"cve@mitre.org"},{"url":"https://seclists.org/bugtraq/2019/May/18","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://github.com/sstephenson/prototype/blob/master/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://osvdb.org/46312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2019/May/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2019/May/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2019/May/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/07/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Not Applicable","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/2ad48cd9d47edd0e677082eb869115809473a117e1e30b52fb511590%40%3Cissues.zookeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/6d1b9a75a004dab42c81e8aa149d90e6fd26ce8cd6d71295e565e366%40%3Cissues.zookeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/769fcc5f331b61c4d7ce16b807678e9a1799628d0146322e14aa24ed%40%3Cdev.zookeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/7ba863c5a4a0f1230cba2d11cf4de3a2eda3a42e8023d4990f564327%40%3Cdev.zookeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87%40%3Cnotifications.zookeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/May/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2008-7221","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en RunCMS v1.6.1, permite a atacantes remotos secuestrar la autenticación de administradores para peticiones que (1) añadan nuevos administradores o (2) modifiquen perfiles de usuario a través de peticiones manipuladas sobre system/admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD9BDC0-80CC-426E-AF93-36FBB4C3E1A0"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488287/100/200/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488287/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7222","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en system/admin.php de RunCMS v1.6.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de un parámetro rank_title en una acción RankForumAdd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD9BDC0-80CC-426E-AF93-36FBB4C3E1A0"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/488287/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27852","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488287/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7223","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS), en LinPHA anterior a v1.3.3, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML a través de (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php o (5) plugins/stats/stats_view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"1CCA245C-A695-478D-A1E4-BCFDE7242E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2EE653B-2731-4C3E-A7D0-3465276E879C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"108B066B-28C1-4888-B696-78F816A89B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9113509A-C884-46F4-BE97-C49382536FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5BD294BF-79FE-4940-B2D1-CB2506370EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"00E9B8B3-87E5-46A5-8242-04E620D54086"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F46907-9618-4F1C-8C68-E33EBC8E32B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0E05B25E-8507-4B40-AD6B-835019EF06EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C16546DA-1516-47C1-B603-34AF3DE3A9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"656D37D2-289D-49EB-AB25-D8522AB8A79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"059C1787-16E2-48BA-96A2-092F58E6F53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A16B7211-B340-4E4E-A016-74F7596A7B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F06B06C9-CE7F-45A1-946E-C3D3BF843FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B371E12C-9CB4-4E03-8B1E-F8A858AD5476"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F4ECA9FA-1BC3-4644-8A7D-F27DE382B519"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8C616987-BB74-4781-850E-22EA77D61D21"}]}]}],"references":[{"url":"http://freshmeat.net/projects/linpha/releases/271366","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup","source":"cve@mitre.org"},{"url":"http://osvdb.org/43191","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27678","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://freshmeat.net/projects/linpha/releases/271366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-7224","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link."},{"lang":"es","value":"Desbordamiento de búfer en entity_cache de ELinks anterior a v0.11.4rc0, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un enlace manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elinks:elinks:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.3","matchCriteriaId":"68CDC349-4D28-4240-B25D-CC4264F66BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elinks:elinks:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4A59D584-A2D1-421B-BA8B-7EC4EC459B3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:elinks:elinks:0.11.1-1:*:*:*:*:*:*:*","matchCriteriaId":"F1B64E10-7D8F-49DF-8F0A-4A23A128119B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elinks:elinks:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"74667C7B-513D-4306-A139-0C74092AD8C3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://linuxfromscratch.org/pipermail/elinks-users/2008-February/001604.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/41949","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10126","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://linuxfromscratch.org/pipermail/elinks-users/2008-February/001604.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/41949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7225","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Foxit Remote Access Server (También conocido como WAC Server) v2.0 Build 3503, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de paquetes SSH largos, es una vulnerabilidad distinta a CVE-2008-0151."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:wac_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4B62FEC-CB95-4E1E-9D69-7173B93782BA"}]}]}],"references":[{"url":"http://aluigi.org/adv/wachof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488366/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27873","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/adv/wachof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/488366/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2008-7226","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo Recipes v1.3, v1.4, y posiblemente otras versiones para PHP Nuke, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"recipeid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:recipe_module:1.3:*:*:*:*:*:*:*","matchCriteriaId":"9007E193-0071-468F-B8C6-426B96A56FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:recipe_module:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1A3EB265-421E-40E4-A55B-CFE4DC27F6C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"}]}]}],"references":[{"url":"http://osvdb.org/52224","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488649/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27955","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40807","source":"cve@mitre.org"},{"url":"http://osvdb.org/52224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488649/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7227","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors."},{"lang":"es","value":"PartialBufferOutputStream2 de GeoServer anterior a v1.6.1 y v1.7.0-beta1, intenta renovar los contenidos del búfer incluso cuando está trabajando un \"búfer en memoria\", esto evita que se muestren las excepciones en este servicio, lo que tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:*:beta4:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"3EEBA7FF-3004-41A1-A803-35B5A7175A49"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BE4C62CD-9AF7-4C6A-88AA-26829892A20E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:beta:*:*:*:*:*:*","matchCriteriaId":"37EDEF23-FF7A-44B7-8A0E-232264C172FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:pr1:*:*:*:*:*:*","matchCriteriaId":"B85C7FA5-F40A-4DAF-9F8D-58FC9F42DD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"033E86CF-49DF-4838-BA6C-E6087A5C72B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"620491F7-0AF2-4684-AA81-737B0D25B265"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D2083302-AF38-4D99-8744-6A5A92A225DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.0:rc7:*:*:*:*:*:*","matchCriteriaId":"9DBDF056-06C2-4CB7-BA1F-FA8297B86458"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E12CDE69-20CE-4265-94D8-683ACD15C21E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.4.0:m0:*:*:*:*:*:*","matchCriteriaId":"23DC2899-05E8-4E2A-8865-3F07A21E7E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.4.0:m1:*:*:*:*:*:*","matchCriteriaId":"306779D0-DB91-44F1-B96C-E8DBFBC42C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C4D89DD7-D7A2-470E-98CC-7DE5BE014C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9A3B8CCC-CB10-4CC0-8A9F-1F3CDC506974"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"1ECC2970-8445-4CB6-B09C-8B890DDF6B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"468B27AB-5F0D-48C0-BA43-317271A507E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"A36E07B7-67AA-466C-9CD8-F4199B01739A"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"35D08540-9125-4E1E-9E2F-54A237A1CAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"90191A81-3A2D-4ED6-A69C-1E43C0133EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5C7C32C-0086-4B67-827D-112A33A690BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"EBB59F80-4C47-4A80-A4A9-0AF125FD19F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"AA5AB47E-A6DD-4C58-9E4B-1C681C58F9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"642BEFCD-778B-443C-8863-CAFEAF877781"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A9099646-CA75-4431-AAB1-9DF1DE40E567"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"82F7E2B5-D036-469E-AE40-636A2585CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:1.7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7EF678DB-679E-4DFF-B57F-5C51C3F0867E"},{"vulnerable":true,"criteria":"cpe:2.3:a:geoserver:geoserver:3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"44C2E5C2-536C-4E89-9A9E-D9016D369FF0"}]}]}],"references":[{"url":"http://jira.codehaus.org/browse/GEOS-1747","source":"cve@mitre.org"},{"url":"http://osvdb.org/43266","source":"cve@mitre.org"},{"url":"http://jira.codehaus.org/browse/GEOS-1747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/43266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7228","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en White_Dune anteriores a  v0.29beta851 tiene un impacto y vectores de ataque desconocidos, es una vulnerabilidad diferente a CVE-2008-0101."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:white_dune:white_dune:*:*:*:*:*:*:*:*","versionEndIncluding":"0.29beta791","matchCriteriaId":"E6B0B9DC-3F04-40D3-81A6-16A19AA2C030"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-02/0005.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/42677","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2008-02/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/42677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7229","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly involving an encoded space character (%20)."},{"lang":"es","value":"GreenSQL Firewall(greensql-fw) anterior a v0.9.2, permite a atacantes remotos evitar la protección para la evitar la inyección SQL a través de una cadena manipulada, probablemente relacionado con la codificación del carácter \"espacio\" (%20)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greensql:greensql_firewall:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"E3675EE5-65F0-4A53-93AE-AF00852A0D6C"}]}]}],"references":[{"url":"http://osvdb.org/48906","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.greensql.net/node/41","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.greensql.net/security","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/48906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.greensql.net/node/41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.greensql.net/security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7230","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Small Footprint CIM Broker (SFCB) before 1.2.5 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Small Footprint CIM Broker (SFCB) anterior a v1.2.5, tiene impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chris_buccella:small_footprint_cim_broker:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"C09F3586-553C-4774-9BCB-BFBBEE4A62F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:chris_buccella:small_footprint_cim_broker:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"353BCE82-3A88-400A-B7FF-67CB0C870066"},{"vulnerable":true,"criteria":"cpe:2.3:a:chris_buccella:small_footprint_cim_broker:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53855A32-05CD-4AB5-8FAA-E12B32F38DBF"}]}]}],"references":[{"url":"http://freshmeat.net/projects/sfcb/releases/269256","source":"cve@mitre.org"},{"url":"http://osvdb.org/50224","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/sfcb/releases/269256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/50224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7231","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title)."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Meridio Document y Records Management anterior a v4.3 SR1, permite a usuarios autenticados inyectar secuencias de comandos web o HTML de su elección a través del campo Title en un (1) documento (subGeneralProps:dmpvDocTitle:PROP_W_title) o (2) contenedor(subGeneralProps:dmpvContainerTitle:PROP_W_title)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:meridio:document_and_records_management:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"2B8F8639-75DB-4323-A663-29D1D7FF953E"},{"vulnerable":true,"criteria":"cpe:2.3:a:meridio:document_and_records_management:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5CFE434C-05A5-41D8-8B7F-F5147FD5F2C3"}]}]}],"references":[{"url":"http://labs.mwrinfosecurity.com/advisories/meridio_cross_site_scripting_vulnerability/","source":"cve@mitre.org"},{"url":"http://labs.mwrinfosecurity.com/files/Advisories/mwri_meridio-advisory-embedded-xss_2008-01-15.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40422","source":"cve@mitre.org"},{"url":"http://labs.mwrinfosecurity.com/advisories/meridio_cross_site_scripting_vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.mwrinfosecurity.com/files/Advisories/mwri_meridio-advisory-embedded-xss_2008-01-15.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7232","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command."},{"lang":"es","value":"Desbordamiento de búfer en la función report en xtacacsd v4.1.2 y anteriores,  permite a atacantes remotos ejecutar código de su elección mediante un comando CONNECT TACACS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.2","matchCriteriaId":"3AC96F81-F52E-4171-A699-DF24CAAB3CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B43E198E-AD7A-4F7D-B047-6FD7E5143C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4BB9DEED-953D-4FB4-A441-F8624065783C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C8F22404-C731-46B5-870A-5371DEBA8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"6CB2981F-9E81-4C18-A9E5-C6A2F253457A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8F4F7744-5EC9-4A01-A035-84C50855FF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"91955D4E-258D-4961-B17A-D2F0BD161C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"6A1F6DFB-82C9-40DA-BF27-14D4CBF290A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"100213F3-0784-4AE3-99CE-72B99F0E2505"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2BCE2B-C4D6-4434-9D58-9A7B1F719B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:netplex-tech:xtacacsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D972A1-A3F0-48D3-9C34-428FA7298F72"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/xtacacsdz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://aluigi.org/poc/xtacacsdz.zip","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39551","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/xtacacsdz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://aluigi.org/poc/xtacacsdz.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7233","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Oracle Jinitiator component, aka AS02."},{"lang":"es","value":"Vulnerabilidad no especificada en el cliente E-Business Application, como el que se utiliza en Oracle Application Server v1.1.8.26 y E-Business Suite v11.5.10.2; permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con el componente Oracle Jinitiator, también conocido como AS02."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.1.8.26:*:*:*:*:*:*:*","matchCriteriaId":"3CDA373C-F62C-4617-AFD3-3A5A3631F381"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_11i:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"D96B6EEE-0F84-4B16-B551-86A000338974"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7234","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente racle BPEL Worklist Application en Oracle Application Server v10.1.2.2 y v10.1.3.3, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. También conocida como AS03."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A79FF0E1-4EEF-49E2-890C-1C8937CF2F5A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40295","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-7235","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect integrity via unknown vectors, aka AS04."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Forms en Oracle Application Server v10.1.2.2 y E-Business Suite v12.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad a través de vectores desconocidos, también conocida como AS04."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40296","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7236","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows remote attackers to affect integrity via unknown vectors, aka AS05."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle JDeveloper en Oracle Application Server v10.1.2.2 y v10.1.3.1, permite a atacantes remotos comprometer la integridad a través de vectores desconcidos. También conocido como AS05."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B4FEFEB0-0EC5-4285-870E-3E0682673E9C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40297","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-7237","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to affect confidentiality via unknown vectors, aka AS06."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Internet Directory en Oracle Application Server v9.0.4.3 y v10.1.2.2 permite a usuarios remotos autenticados afectar a la confidencialidad a través de vectores desconocidos, también conocida como AS06."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9CA9867F-D7BC-4230-9584-C2FBB6642482"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0223F3-A9D4-4A4F-8934-761D83CD5494"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40298","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/40298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2008-7238","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07)."},{"lang":"es","value":"Múltiples vulnerabilidades no especificada en Oracle E-Business Suite v12.0.3, permiten (1) a usuarios locales comprometer la confidencialidad e integridad a través de vectores desconocidos relacionados con el componente Application SErver (APP01); (2) a atacantes remotos comprometer la confidencialidad a través de vectores desconocidos relacionados con Oracle Applications Framework (APP03); usuarios autenticados en remoto comprometer la confidencialidad e integridad a través de vectores desconocidos relacionados con (3)CRM Technical Foundation (APP05) y (4) Oracle Application Object Library (APP06); y a usuarios autenticados en remoto comprometer la integridad y disponibilidad a través de vectores desconocidos relacionados con (5) Oracle Applications Technology Stack (APP07)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1036B69E-013B-4492-B691-40BAC7C2F42A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40284","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40286","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40288","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40289","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2008-7239","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle Applications Manager (APP04)."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.10.2 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos relativos a (1) Oracle Application Object Library (APP02) y (2) Oracle Applications Manager (APP04)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_11i:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"D96B6EEE-0F84-4B16-B551-86A000338974"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/28518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40285","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/40287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27229","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=120058413923005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/28518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1019218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/40287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-017A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/0150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7240","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/unverified.inc.php en Linux Web Shop (LWS) php User Base v1.3beta, permite a usuarios remotos añadir y ejecutar archivos locales de su elección a través del parámetro \"template\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linuxwebshop:php_user_base:1.3:beta:*:*:*:*:*:*","matchCriteriaId":"493E4DA0-A203-4A25-90BA-5EE884AFF6E5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/27964","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40793","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7241","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en PunBB anterior a v1.2.17, permite a atacantes remotos secuestrar la autenticación de usuarios sin especificar para peticiones relacionadas con el cierre de sesión. Probablemente relacionado con el cierre forzoso de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.16","matchCriteriaId":"6BA5E143-287D-42EC-BF9B-5FED37D40C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E04494D1-FE7F-431C-8242-A0591A5D0A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A97DA335-4815-4608-84D5-67F4E539D8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9481F02E-2523-4599-A39D-3ACE518CEC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"01C976DD-47E4-48CA-AF99-93D0653D31F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7277A122-5963-4E7F-BA1A-62B19AF804EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEF85286-A1F8-4797-99F0-4F42B6D859CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"05BCF8A0-5530-4B36-8CEA-5330307C74CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DDBA41AF-C817-476A-8ED1-57808D0B678C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C353C194-328F-4C4C-9773-F06A0FA3978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFE58D68-FC34-4F70-849A-2E6CC919230D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5713E747-5529-4A64-95B4-D9678D8E88B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1DFD4225-32F9-4D62-87C5-9632A1C03326"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4A75787B-6156-4710-9B24-48C5763E7771"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20A9473E-DE15-4BE2-839D-90B55F8713EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F4A94FF3-C732-4552-A32B-53C4739F7E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"C427E4AB-79A3-4B9E-BD73-35F8BE03B93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4CDCB2E5-91A9-48D8-8B98-19E770CEB1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CDD30AB1-3E59-4981-9DFD-E7270D9C009E"}]}]}],"references":[{"url":"http://osvdb.org/48685","source":"cve@mitre.org"},{"url":"http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/48685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7242","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) \"a,\" (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en MODx CMS v0.9.6.1 y v0.9.6.1p1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"search\", (2) \"a,\" (3) \"messagesubject\" y (4) \"messagebody\" a determinadas páginas accesibles desde el manager/index.php; los parámetros (5) \"highlight\", (6) \"id\", (7) \"email\", (8) \"name\" y (9) \"parent\" al index.php; y los parámetros (10) \"docgrp\" y (11) \"moreResultsPage\" a index-ajax.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:p1:*:*:*:*:*:*","matchCriteriaId":"3707754B-A6F7-49E4-8426-ED0D2437D2C6"}]}]}],"references":[{"url":"http://osvdb.org/41232","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487696/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40375","source":"cve@mitre.org"},{"url":"http://osvdb.org/41232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487696/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7243","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php.  NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la pagina 34 en MODx CMS v0.9.6.1 y v0.9.6.1p1 permite a atacantes remotos secuestrar la autenticación de otros usuarios para las peticiones de modificación de contraseña a través de manager/index.php. NOTA: Debido a la falta de detalles, no queda claro que este relacionado con CVE-2008-5941."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"},{"vulnerable":true,"criteria":"cpe:2.3:a:modxcms:modxcms:0.9.6.1:p1:*:*:*:*:*:*","matchCriteriaId":"3707754B-A6F7-49E4-8426-ED0D2437D2C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/28840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487696/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487696/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7244","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821."},{"lang":"es","value":"Mozilla Firefox v3.0.1 y anteriores permite a atacantes remotos producir una denegación de servicio (navegador colgado) mediante una llamada en bucle a la función window.print, también conocido como \"ataque DoS de impresión\", posiblemente relacionado con CVE-2009-0821."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"A09BB8A2-C8E5-4CFB-A2AB-061D0A9E82EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"}]}]}],"references":[{"url":"http://websecurity.com.ua/2456/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/2456/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7245","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821."},{"lang":"es","value":"Opera v9.52 y anteriores permite a atacantes remotos producir una denegación de servicio (navegador inutilizado), mediante una llamada en bucle a la función window.print, también conocido como \"ataque DoS de impresión\", posiblemente relacionado con CVE-2009-0821."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.52","matchCriteriaId":"BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5120A672-FB60-4DC3-A171-102793C05835"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"}]}]}],"references":[{"url":"http://websecurity.com.ua/2456/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6350","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/2456/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7246","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821."},{"lang":"es","value":"Google Chrome v0.2.149.29 y anteriores permite a atacantes remotos producir una denegación de servicio (navegador inutilizado) mediante una llamada en bucle a la función window.print, también conocido como \"ataque DoS de impresión\", posiblemente relacionado con la vulnerabilidad CVE-2009-0821."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.149.29","matchCriteriaId":"7F982490-7114-480A-A232-3A874B3E56E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"}]}]}],"references":[{"url":"http://websecurity.com.ua/2456/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/2456/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7247","sourceIdentifier":"cve@mitre.org","published":"2009-11-30T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink."},{"lang":"es","value":"sql/sql_table.cc en MySQL v5.0.x hasta la v5.0.88, v5.1.x hasta la v5.1.41, y v6.0 anteriores a v6.0.9-alpha, cuando el directorio de datos \"home\" contiene un enlace simbólico a un sistema de ficheros diferente, permite a usuarios autenticados remotamente saltar las restricciones de acceso implementadas al invocar CREATE TABLE con un argumento (1) DATA DIRECTORY o (2) INDEX DIRECTORY referido a un subdirectorio que requiera el seguimiento de este enlace simbólico."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mysql as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-12-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"214E3CF9-6362-4F5A-91B7-5E69564F7144"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*","matchCriteriaId":"9369CF20-D05C-41A2-8F9E-DE259FCF9E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B2BFBC7B-5C23-4CDB-AE4F-721378C36B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"4E9E9D88-6640-45E8-83AA-7B9C0936D905"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"19001041-22C4-4D2C-A918-378DACBB1DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*","matchCriteriaId":"6F610D56-6BB6-48FB-B43A-670CE9168500"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1668BB5B-E7FB-4430-B8D5-89E308F5DD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BF54CC8D-B736-461D-B693-686E862EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"053ACE9B-A146-42C0-ADB2-47F6119965D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"30B4F891-2A03-45A8-A49C-7F8B8F7D8407"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"69E62AC4-954E-476C-98BE-C138E328AE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"6B88385C-F5FB-401F-80D5-5BF11CE3C19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"35F21A5A-F9C0-4860-80AD-1D3937483F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*","matchCriteriaId":"2FA3E354-4366-46B5-ACD2-E72D0C8320A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*","matchCriteriaId":"0C002047-0FB1-4DC6-9108-B4B5AAFAC16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*","matchCriteriaId":"584C0690-2826-4389-95AD-42048AEE1916"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*","matchCriteriaId":"0CB85180-0F28-4281-BB59-E3F29BE25C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*","matchCriteriaId":"31B9607A-1E58-4471-BEDE-03484A1E9739"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F48E7355-2D9A-454D-AE66-B0AE015E31A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E51BF67A-BAEC-48F8-9290-67C6C5B8442E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5C6A2F-DEAE-470D-8888-0E9076CCA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1C09231E-8759-4DFB-AA8D-17A1C6D43AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"81592813-78D9-4366-AD2E-94677D93F599"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=39277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.mysql.com/commits/59711","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125908040022018&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38517","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:044","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/38043","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543619","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/bug.php?id=39277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.mysql.com/commits/59711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125908040022018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/38043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7248","sourceIdentifier":"secalert@redhat.com","published":"2009-12-16T01:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain."},{"lang":"es","value":"Ruby on Rails v2.1 anteriores a v2.1.3 y v2.2.x anteriores a v2.2.2 no verifica los token en peticiones con ciertos tipos de contenido, lo que permite a atacantes remotos evitar la protección contra la falsificación de petición en sitios cruzados (CSRF) para peticiones de aplicaciones que la requieren  con se demuestra en el uso de texto plano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B4B121-94BD-4E0F-8860-6239890043B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"63CF211C-683E-4F7D-8C62-05B153AC1960"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"456A2F7E-CC66-48C4-B028-353D2976837A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9B1CDAFA-2AC6-4C46-9E65-0BE9127E770F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9806A84-2160-40EA-9960-AE7756CE4E0A"}]}]}],"references":[{"url":"http://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36600","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38915","source":"secalert@redhat.com"},{"url":"http://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/28/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/02/2","source":"secalert@redhat.com"},{"url":"http://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2544","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/28/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7249","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T22:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167."},{"lang":"es","value":"Desbordamiento de búfer en Squid Analysis Report Generator (Sarg) v2.2.3.1 y posiblemente versiones anteriores permite a atacantes remotos asistidos por un usuario ejecutar código arbitrario a través de un método de petición larga HTTP en un fichero manipulado access.log, una vulnerabilidad diferente de CVE-2008-1167."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pedro_lineu_orso:sarg:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FE873AED-1668-4EC3-82B2-214AEF9F4E70"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=581212","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/489018/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0749","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/489018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2008-7250","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T22:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists because of an incomplete fix for CVE-2008-1168."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Squid Analysis Report Generator (Sarg) v2.2.4 permite a usuarios remotos inyectar codigo de script web o código HTML de su elección a través de un evento JavaScript onload en la cabecera User-Agent, que no es apropiadamente manejada cuando se muestra el log de Squid proxy. NOTE: esta vulnerabilidad existe debido a una solución incompleta a CVE-2008-1168."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pedro_lineu_orso:sarg:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FE873AED-1668-4EC3-82B2-214AEF9F4E70"}]}]}],"references":[{"url":"http://secunia.com/advisories/28668","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581509","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=581509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0001","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apple QuickTime anterior a v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) y posiblemente ejecutar código de su elección a través de una URL RTSP manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33385","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48154","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0002","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en QuickTime de Apple antes de v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de la aplicación)y posiblemente ejecutar código de su elección mediante un archivo de vídeo QTVR con átomos THKD manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33384","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-005/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5646","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-005/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0003","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en Apple QuickTime anterior a la versión 7.6 permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y ejecutar código arbitrario por medio de un archivo de película AVI con un valor nBlockAlign no válido en la estructura _WAVEFORMATEX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51526","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33387","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-006/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6218","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0004","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file."},{"lang":"es","value":"Desbordamiento de búfer en Apple QuickTime anterior a v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) y posiblemente ejecutar código de su elección a través de un fichero de audio MP3 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48157","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6211","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0005","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada en QuickTime de Apple antes de v7.6 permite a atacantes remotos provocar una denegación de servicio (cierre de aplicación) y posiblemente ejecutar código de su elección mediante un archivo de vídeo con codificación H.263 manipulado que dispara una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33386","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48158","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0006","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow."},{"lang":"es","value":"El error en la propiedad signedness de enteros en Apple QuickTime en versiones anteriores 7.6, permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y posiblemente ejecutar código arbitrario por medio de un archivo de película codificado de Cinepak con un átomo MDAT diseñado que desencadena un desbordamiento del búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500391/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33388","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-007/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500391/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-007/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0007","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms."},{"lang":"es","value":"Un desbordamiento del búfer en la región heap de la memoria en Apple QuickTime  en versiones anteriores a 7.6, permite a los atacantes remotos causar una denegación de servicio (terminación de aplicación) y posiblemente ejecutar código arbitrario por medio de un archivo de película QuickTime que contiene datos de ancho de imagen no válidos en átomos JPEG dentro de átomos STSD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"26878E5F-2CE4-4867-A33F-3E531802EABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51530","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33390","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-008/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6132","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-022A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-008/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0008","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T18:30:03.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"per http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html\r\n\r\n\"This issue does not\r\naffect systems running Mac OS X.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted MPEG-2 movie."},{"lang":"es","value":"Vulnerabilidad no especificada en Apple QuickTime MPEG-2 Playback Component antes de v7.60.92.0 en Windows, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección mediante una película MPEG-2 manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_mpeg-2_playback_component:*:*:*:*:*:*:*:*","matchCriteriaId":"A597C3FD-4C3D-4979-9BF9-AE897575413E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33393","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0211","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48162","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5974","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0009","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie file that triggers memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada en Pixlet codec en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) y posiblemente una ejecución arbitraria de código a través de archivos de vídeo manipuladas que lanzan una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51980","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2009/Feb/1021718.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48713","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2009/Feb/1021718.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0010","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a crafted length field, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento inferior de entero en QuickDraw Manager en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicacion) a través de una imagen PICT elaborada que desencadena un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503878/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34938","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022209","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1407","source":"cve@mitre.org"},{"url":"http://www.vupen.com/exploits/Apple_QuickTime_PICT_Poly_Tag_Parsing_Heap_Overflow_PoC_Exploit_1407144.php","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-021","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-021/","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503878/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/exploits/Apple_QuickTime_PICT_Poly_Tag_Parsing_Heap_Overflow_PoC_Exploit_1407144.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-021/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0011","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an \"insecure file operation\" on a temporary file."},{"lang":"es","value":"Certificate Assistant en Apple Mac OS X v10.5.6 que permite a los usuarios locales sobrescribir arbitrariamente archivos a través de vectores desconocidos en relación a una \"operación de archivo insegura\" en un fichero temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2009/Feb/1021720.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48715","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2009/Feb/1021720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0012","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en CoreText en Apple Mac OS X versión 10.5.6,permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena Unicode creada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51977","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33809","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0013","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information."},{"lang":"es","value":"dscl en DS Tools den Apple Mac OS X v10.4.11 y v10.5.6, requiere que la contraseña sea proporcionada como argumentos de la línea de comandos, esto permite a usuarios locales ganar privilegios al listar información de los procesos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2009/Feb/1021722.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33815","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48717","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2009/Feb/1021722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0014","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder."},{"lang":"es","value":"Folder Manager en Apple Mac OS X 10.5.6 usa permisos inseguros por defecto cuando recrea un carpeta Downloads después de que ha sido borrada, lo que permite a los usuarios evitar las restricciones de acceso y lee la carpeta Downloads."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33820","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0015","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to \"credential management.\""},{"lang":"es","value":"Vulnerabilidad no especificada en fseventsd en the FSEvents framework en Apple Mac OS X v10.5.6 que permite a los usuarios locales obtener información sensible (actividades de los ficheros del sistema y nombres de directorios) a través de vectores desconocidos relativos a \"gestión de credenciales\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33821","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0016","sourceIdentifier":"cve@mitre.org","published":"2009-03-14T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite loop) via a Digital Audio Access Protocol (DAAP) message with a crafted Content-Length header."},{"lang":"es","value":"Apple iTunes antes de la versión 8.1 sobre Windows permite a atacantes remotos provocar una denegación de servicio (mediante un bucle infinito) a través de un mensaje del Protocolo de acceso de audio digital (DAAP) con la cabecera Content-Length debidamente modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:windows:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"54518257-E550-48E5-8F7A-C4079F26C95E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*","matchCriteriaId":"49DC3DDC-8758-4D28-B2D5-161994C0E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"0D0E3B53-AFAE-47F1-B7E3-395406819357"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"389B617F-29D2-4171-B4E0-9E65BBFAF369"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"696D5986-155D-446C-A5FE-49C0DF1868AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"3370179D-5E8A-4036-AA23-252674C6D807"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"2B71E645-F15B-43FE-931B-819F9ABA89C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"E90B5E1A-4D90-4252-8E34-649F33F1A088"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*","matchCriteriaId":"3E74DB1C-208B-42DE-9A5E-E9010140C5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"262CAFD7-07C2-4C71-B2FC-165A88977881"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"018AC033-ACF0-496D-96E1-A03CC4162CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"3CA9634F-A553-4B72-BBA2-AD7EAE4DFA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*","matchCriteriaId":"A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E91D9ACF-2595-4A9A-B581-46F177300B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2320B809-DE44-49AA-9C96-196BF39749C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*","matchCriteriaId":"F2899F21-F01F-4C95-93AA-40C528EE56DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*","matchCriteriaId":"BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"FD00E684-506B-4ED6-B48C-7D565CDA188C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*","matchCriteriaId":"9136E8D6-310D-4D4E-A6AC-2F89218B8666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"28519DE2-61CA-4943-9247-9F6BCB0367DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*","matchCriteriaId":"78A3FEC0-F135-41F9-A260-52157B283B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.0:-:windows:*:*:*:*:*","matchCriteriaId":"822F3D7E-810F-41B9-823F-D0B54BD1A3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"79591197-B671-46B2-9EB2-03A75A838CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"359C82A7-F6FB-4140-BD11-2B38B323933A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*","matchCriteriaId":"A2DD1A9D-4AF4-452A-99C2-AE93611C985D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*","matchCriteriaId":"8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8.0:-:windows:*:*:*:*:*","matchCriteriaId":"E9B16D5E-9EF4-4253-8E07-75C8E5E0E33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*","matchCriteriaId":"6514E3F5-3B5D-43BE-A26D-5167B519F3EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9.0:-:windows:*:*:*:*:*","matchCriteriaId":"CA2B6657-6E0F-4915-ACB9-219F76D8E38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"23C49853-8616-4769-90BC-B6D85B24A36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"10A63976-A435-4F6C-8B09-3001CA3EDC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"B97DF98E-792B-474E-8820-DF88C4B28A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*","matchCriteriaId":"8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"97558F66-FA78-454B-B25C-DA2A39CA1A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"D5AE8F59-2DF8-403B-BAB9-6465E618897C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"B3F084A8-A293-4151-80F6-72C14582E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"F37B39AB-2D5B-417E-BCEF-29C18D386C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"7426FDD0-F909-48AB-97C9-C4B25C05E6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"372C1609-E534-41E0-87CD-C654BBF0B88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"9730866D-DFE9-448F-9D4E-6B21B3942737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"03FCF3E7-0649-43B7-90C8-521E90079156"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"E20BC99A-13FC-446C-A27A-6C2D859C172B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"DD300F1B-EE8F-4606-B024-A14CA2EF4D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:-:windows:*:*:*:*:*","matchCriteriaId":"407AD48A-EA07-456F-B46B-24383E416A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"C5B51908-CB81-492D-A437-D0508ABE05FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"0E826E91-CBBF-48D8-A4AD-7FB6830F3769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"2690D789-B1DC-40A5-8CC6-BBB499E9A550"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"066FC8C7-5A0B-4B2E-A51E-BFB42153FD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D2412E1-745B-4CFC-B075-1960A1410335"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"45F36172-97A7-4767-BC9E-8DC0444A8635"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"D0D889C7-320C-4674-834F-93C8B1701EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"23B4660B-D22B-4AC5-B6F2-87F83A2251A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F61B45F-86CA-43F6-BA12-62AB0FBAD352"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC37C091-02B8-4B39-9253-52C1008ADEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:-:windows:*:*:*:*:*","matchCriteriaId":"9F7D1E31-E28F-4EAD-AAE5-01AE478003B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*","matchCriteriaId":"70A4EEE2-1DD2-4936-8939-4683523670B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"91FB2868-DDF9-4D33-B78C-2A5180F9D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"95B58CD1-03CB-4C35-A290-7157941D210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"AEEC5C0E-DDC5-4B28-8C04-DF69C152E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"A27B736F-317F-4538-AA3B-72D6EF0D2D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:-:windows:*:*:*:*:*","matchCriteriaId":"2F688163-C543-4D58-BF71-DF50FFB0A112"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*","matchCriteriaId":"481E736B-0A83-4422-B1D3-4BD0F9565A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*","matchCriteriaId":"3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"0C0CB6DE-46C4-4F9D-B8FD-47C01922D2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*","matchCriteriaId":"A7448F89-CC4A-4B18-887F-B47C0B57404C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"040B2DB5-8F7D-4272-A0D1-2872B289B125"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:*:windows:*:*:*:*:*","matchCriteriaId":"4F173E7D-3EEC-4698-B0FE-5CCE6F990829"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"1A957B0E-9A86-40D4-8A39-01895C32838A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:-:windows:*:*:*:*:*","matchCriteriaId":"0B7DBB76-5A86-42A3-8A0A-19D616357619"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*","matchCriteriaId":"D41DA19A-4403-40A8-A3DB-01A12FD4F267"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.0:-:windows:*:*:*:*:*","matchCriteriaId":"BC16747F-9F32-4186-9824-487163276EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"F2043A3A-3578-42D8-AF54-7C8073CA0DB9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0236.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52578","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021842","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3487","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-11.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501758/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34094","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0702","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49200","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6001","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501758/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0017","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buffer overflow."},{"lang":"es","value":"csregprinter en el componente Printing de Apple Mac OS X v10.4.11 y v10.5.6, no maneja adecuadamente las condiciones de error, esto permite a usuarios locales ejecutar código de su elección a través de vectores desconocidos que provocan un desbordamiento del búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33811","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0018","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory."},{"lang":"es","value":"The Remote Apple Events server en Apple Mac OS X 10.4.11 y 10.5.6 no inicializa apropiadamente un búfer, lo cual permite a los atacantes remotos leer porciones de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33816","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0019","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via unspecified vectors that trigger an out-of-bounds memory access."},{"lang":"es","value":"Remote Apple Events en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) u obtener información sensible a través de vectores no especificados que lanzan un acceso a memoria fuera de rango."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33814","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0020","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:04.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption."},{"lang":"es","value":"Vulnerabilidad no especificada en CarbonCore en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) y ejecuta arbitrariamente código a través de bifurcación de recurso manipulada que lanza una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0021","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Note that versions 4.2.5 before 4.2.5p150 are development versions and not production versions.  Development versions are not included in the CPE configuration for CVEs.","cveTags":[],"descriptions":[{"lang":"en","value":"NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"NTP versiones 4.2.4 anteriores a 4.2.4p5 y versiones 4.2.5 anteriores a 4.2.5p150, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4p4","matchCriteriaId":"94D9BEE4-25C2-4147-B075-50F46113F59E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"088BFFA4-1AAB-4699-9793-F731A81B296A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B3475779-383A-4128-9145-474EC08030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*","matchCriteriaId":"B980A178-2958-4B36-8AD8-3932B12C5A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*","matchCriteriaId":"5D65210A-F80E-4019-91DA-49838369E03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*","matchCriteriaId":"29FAB224-3493-4273-A655-10BE44F5B5BE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33406","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33558","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33648","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0046.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021533","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0042","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://lists.ntp.org/pipermail/announce/2009-January/000055.html","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.ntp.org/pipermail/announce/2009-January/000055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0022","sourceIdentifier":"secalert@redhat.com","published":"2009-01-05T20:30:02.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Patch Information - http://www.samba.org/samba/history/security.html","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name."},{"lang":"es","value":"Samba v3.2.0 hasta v3.2.6, cuando el registro de acciones está habilitado, permite a usuarios autenticados remotamente acceder al sistema de ficheros raíz a través de una petición de conexión manipulada que especifica un nombre de recurso compartido en blanco."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-01-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"}]}]}],"references":[{"url":"http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch","source":"secalert@redhat.com"},{"url":"http://osvdb.org/51152","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33379","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33392","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33431","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:042","source":"secalert@redhat.com"},{"url":"http://www.samba.org/samba/security/CVE-2009-0022.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33118","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021513","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0017","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47733","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/702-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html","source":"secalert@redhat.com"},{"url":"http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.samba.org/samba/security/CVE-2009-0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/702-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0023","sourceIdentifier":"secalert@redhat.com","published":"2009-06-08T01:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow."},{"lang":"es","value":"La función apr_strmatch_precompile en strmatch/apr_strmatch.c en Apache APR-util anteriores a v1.3.5 permite a los atacantes remotos causar una denegación de servicio (caída del demonio) a través de una entrada manipulada en 1) un fichero .htaccess utilizado con el Servidor Apache HTTP, (2) la directiva SVNMasterURI en el módulo mod_dav_svn en el Servidor Apache HTTP, (3) el módulo mod_apreq2 para el Servidor Apache HTTP, o (4) una aplicación que utiliza la librería libapreq2, relativa a un \"bandera de desbordamiento inferior\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"16176496-B955-4F98-A395-9709C927D9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6EC87975-74CA-42E6-84ED-0DD2BF9FFC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9A896FA5-D3FC-4BD9-965A-C9A72D62780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D8EDB1D0-82A9-462F-9B3B-0EDF452341E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"F9DFFEDC-F5C7-47C7-95A9-6BF4208A1B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E87B09F2-ECEA-409D-B27B-0747280D4AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.0:*:*:*:*:*:*:*","matchCriteriaId":"67AB6223-9546-4906-B502-C82E3969FC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6459BE22-2334-48B3-85B8-5BEEB05A5399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A24FB91C-33BC-4305-AD53-0385E3B3F091"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"617C8C4B-8367-4EFB-8DA1-88986F6CDACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D85D6B73-F2CB-427D-9896-6BA79BE96FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"39B4A447-29CC-4D35-B25D-FA845785E66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"08B50283-4187-42F7-A2A3-F5789706708B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"40FD8140-F1E0-4F99-ACDA-926C0ACDC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"61D253E8-528E-47B3-887A-C540A8D91E0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"BD1CD8A7-6F0A-4BEB-8E8A-BEDAB71921E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B1D0594C-E2FF-4557-80E6-8F51A4D94F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1E706184-E7BC-452F-82FE-72EA8C37F4D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"867962AD-8EF4-4DC4-96F6-77896CEF3F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0EB78030-8C3B-4ACA-B62B-DC5DC5FBD073"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E53CBDDE-D914-49A8-B65C-9352487B3CBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.12","matchCriteriaId":"8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35284","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35360","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35395","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35444","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35487","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35565","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35710","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35797","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-03.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=779880","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1812","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:131","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1107.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1108.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507855/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35221","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-786-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1907","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503928","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50964","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10968","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12321","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=779880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507855/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-786-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0024","sourceIdentifier":"secalert@redhat.com","published":"2009-01-13T17:00:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions."},{"lang":"es","value":"La función sys_remap_file_pages en mm/fremap.c del kernel de Linux anterior a la versión v2.6.24.1 permite a usuarios locales provocar una denegación de servicio o ganar privilegios mediante vectores de ataque no especificados, relacionados con un miembro de la estructura de vm_file, y las funciones mmap_region y do_munmap."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 and Red Hat Enterprise MRG.","lastModified":"2009-01-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.24","matchCriteriaId":"3902B4CD-3000-4E95-8B99-07D8CE27676B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.24.y.git%3Ba=commit%3Bh=8a459e44ad837018ea5c34a9efe8eb4ad27ded26","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/1","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33211","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.24.y.git%3Ba=commit%3Bh=8a459e44ad837018ea5c34a9efe8eb4ad27ded26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0025","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3 y versiones anteriores no comprueba adecuadamente el valor de retorno de la función OpenSSL DSA_verify, lo que permite a atacantes remotos eludir la validación de la cadena del certificado a través de una firma SSL/TLS mal formada, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C52373DC-3E05-424B-9C78-4092A75C75A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AFE06E29-0A16-4034-A2BB-696A49798F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"75CECA87-F721-429B-8062-D3297233C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2F1447B1-A25F-45CC-B721-3204D7107999"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C61FB240-C932-4A3A-874D-5872F01EB352"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"999AF289-8D73-4648-ABCB-4853B9B1F230"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"6743968D-DDB2-4478-867A-642CCC492B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"098633E6-88F0-4DBC-986F-D11EDA29877F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"78725CCE-C153-4B00-8E76-ED6DFC1C86A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1950F046-FBD4-4A92-BA70-5E80374A12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1861756C-CC81-4EAB-8427-57A3C62BFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"5E53EFD9-16B8-457D-8C27-7771018EA524"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CDD642FC-1764-4090-A32D-830CEAE69E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"79503328-9EE2-414E-A6E8-B3BABA0D6CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2ABA5AA3-8951-4158-A4C6-64BE2010D39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"77A2D767-8E2D-4D65-ACF3-634B055023CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"D28C3D4C-5C3B-4686-9F67-6379C2AC338A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*","matchCriteriaId":"543DE620-09A2-4055-B30C-803C714237B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*","matchCriteriaId":"2C16513C-48A1-4FB6-AB11-F844ABC4BB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*","matchCriteriaId":"607BF60B-27F1-4C85-BB5F-D66FEA05CD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE954FD0-56AF-4757-BAA8-B0C64703F6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0EC243E5-D80C-43A8-AD12-5DA0FA442086"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BF891263-4ACE-47C3-83F3-C06E49F32451"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"01C3704B-8328-46C3-ACB1-D27FD7DED508"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"FF9000CE-EB3A-4194-84D1-4BB4C5010D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"19A4E6C3-CF69-4A81-B179-EB8F656E72AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6520F4-B203-400A-8629-8A40B739DB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*","matchCriteriaId":"55D7907A-46D1-4F7D-8B2F-321214204704"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*","matchCriteriaId":"B06686CF-0FFD-45D8-A9F6-D13DCF3E6EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*","matchCriteriaId":"EBF04613-7F33-4A63-A776-47C9A0BDBF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*","matchCriteriaId":"FA3C3939-2065-4A8C-99F8-BE44D1D2ABA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*","matchCriteriaId":"DEE416F3-CDAE-4285-9EC7-F3E161EDCA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"365BFA38-A0F6-4D48-A6B5-E534F88516DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*","matchCriteriaId":"CF2F3360-F5C2-47C1-B2E7-935CDB47407A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"52FBAE24-C9F7-4756-A7A0-A877ABFC3444"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A7230CE4-CD95-484C-A004-457FD4484403"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"A0BB3172-BFBC-4F56-8116-6EEC30FD566F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"D40FB919-A955-419D-9BEC-835F93E4FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"FF8A8F48-A890-4837-8C76-1A690523B39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*","matchCriteriaId":"399D70C9-8E61-4624-A7AD-9410AA7641B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*","matchCriteriaId":"2BB2F03D-96C6-49CD-80FA-570FF72B493F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*","matchCriteriaId":"60DC3DF4-4B36-4AA8-8561-C4255A8C4E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF07E87-B109-4B15-A358-7A454502E077"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"2E5D0852-413F-4875-93F5-64DDBCA6E85E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"301BF336-6AF6-4705-9BF1-00ED6608F572"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614C9459-D526-4880-AE03-4A1558CB941F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"A8B15E71-656A-4EB7-96B2-2CC9A2C19DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"A969C3E7-9E4F-4767-86D1-7E6B3970A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"34B56EBF-6218-46B7-A9F2-288E40635FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"A10ACCBC-6697-4BCB-9748-B966D83E0C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"719382EA-7D4E-46F2-92ED-DCA83AE685BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"9EDF0B51-76D3-4BD8-A2C7-6F21153CB886"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*","matchCriteriaId":"2D800F08-9B7A-4284-B2EF-DCDF60DEEC04"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D43375C5-0736-43DE-99B5-B75719D0AD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"4E492452-CBDB-43BC-A9AD-21AA84EA0653"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*","matchCriteriaId":"D5BD68D9-6CD9-48A7-A242-38B9ADD420BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*","matchCriteriaId":"65C15AB2-DCA7-4983-A741-3CA1D4A391A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*","matchCriteriaId":"6C6DB780-C075-462C-B426-1917A020C4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*","matchCriteriaId":"3B4FD922-49B2-4953-8EF2-9018B104BC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*","matchCriteriaId":"367DC15C-7174-4463-8D4B-B3E43AC0A57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*","matchCriteriaId":"CAEC7B62-DBBF-4ADD-81F7-8AD1F3642E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E4360536-0BA6-41DB-AA87-45AFB51562CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*","matchCriteriaId":"E3CBD1CC-14DF-4F00-9A5E-6D7A6604A8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"93C5ED24-5A13-4F06-BC9F-B8B8F46C1888"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*","matchCriteriaId":"438AEC8C-DD71-4A25-9E9D-A89415F7EC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"36A47938-C5AC-4471-A791-6F21AE20B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2CDF6B08-6BA8-400C-BF01-ABD2306FE0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"AFEDAAA4-AB94-43C6-97AE-B6E87D8E81B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*","matchCriteriaId":"FAF29410-5230-42F9-BC07-B940FC66DA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*","matchCriteriaId":"82068202-DF42-4808-A5C7-1A68B05EA1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*","matchCriteriaId":"5C8B18D7-4D15-46A7-8013-E6267127A427"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*","matchCriteriaId":"C4B45FE3-307E-4599-B2CF-5203FA606469"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*","matchCriteriaId":"F12E3841-1CF0-4969-A286-50769BAE31EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*","matchCriteriaId":"D8B11586-1274-422D-873A-25DF193FB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*","matchCriteriaId":"87D61CDA-BB78-4957-A502-6D77B567B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*","matchCriteriaId":"5A31533C-BD6E-4EB4-8047-3257BF51F592"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*","matchCriteriaId":"D8537C88-4F73-43DD-9BDC-AF470882EED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"6D7D1A96-0A8E-4E3A-9442-701E3D1A1F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"93C23313-817F-4AB5-9058-31B0C7F954A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*","matchCriteriaId":"FA9F93EC-1AA2-43A6-9869-8974C819370A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*","matchCriteriaId":"726720E2-4B59-4665-A72E-E2E996957EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"32E4FEA8-A654-4E9F-8948-5878E7C427C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"916D4013-27A5-4688-A985-A9B77F90AC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F8583B8D-54A4-4064-810B-34F4F5A33A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*","matchCriteriaId":"932E3F02-DD98-43FC-8077-50506E512989"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*","matchCriteriaId":"63C2A2FD-7AE7-462A-99B2-809BE1F35C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E01A12DF-E94B-426E-8751-96FC56105D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*","matchCriteriaId":"7717B1A2-CAF5-49F3-AC73-273074BBEE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*","matchCriteriaId":"F037EE61-50D6-4C1E-B24B-25A6D212E7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*","matchCriteriaId":"5140F118-BC25-43CB-B19C-0885A44D6646"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"19ADAB10-BDD0-409E-93C2-9E7223464131"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"32CEF8AD-9EE7-4ADA-888E-883751962529"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F592D0F-095C-4F3B-97E7-E92C259D0CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F42F7AF7-D37C-4213-B2BC-D2B9FE725BDE"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33494","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33546","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33551","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33559","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33683","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33882","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0009","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata44.html#008_bind","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/500207/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33151","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0366","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2938","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569","source":"secalert@redhat.com"},{"url":"https://www.isc.org/software/bind/advisories/cve-2009-0025","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html","source":"secalert@redhat.com"},{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata44.html#008_bind","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500207/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.isc.org/software/bind/advisories/cve-2009-0025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0026","sourceIdentifier":"secalert@redhat.com","published":"2009-01-21T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp."},{"lang":"es","value":"Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Apache Jackrabbit anterior a v1.5.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parametro \"q\" a (1) search.jsp o (2) swr.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:jackrabbit:1.4:*:*:*:*:*:*:*","matchCriteriaId":"6BFB91B7-F3A0-4C57-86B6-03E93B11FF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:jackrabbit:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"BF0BCD7D-8C64-49D4-B2E6-FC4C9F702483"}]}]}],"references":[{"url":"http://secunia.com/advisories/33576","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4942","source":"secalert@redhat.com"},{"url":"http://www.apache.org/dist/jackrabbit/RELEASE-NOTES-1.5.2.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/500196/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33360","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0177","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48110","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/jira/browse/JCR-1925","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/dist/jackrabbit/RELEASE-NOTES-1.5.2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500196/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/jira/browse/JCR-1925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0027","sourceIdentifier":"secalert@redhat.com","published":"2009-03-09T21:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request."},{"lang":"es","value":"El manejador de solicitudes de JBossWS en JBoss Enterprise Application Platform (alias JBoss o JBEAP PEA) 4.2 antes de 4.2.0.CP06 y 4.3 antes de 4.3.0.CP04 no valida la ruta durante una petición de un archivo WSDL con un punto final del web-service propio, lo que permite a atacantes remotos leer archivos XML arbitrarios a través de una solicitud debidamente modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp01:*:*:*:*:*:*","matchCriteriaId":"599FBAC3-2E83-443B-AACB-99BBA896CB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp02:*:*:*:*:*:*","matchCriteriaId":"43590B58-A1C7-4105-A00F-6C4F46A6CC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp03:*:*:*:*:*:*","matchCriteriaId":"A44F907E-AE57-4213-B001-A23319B72CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp04:*:*:*:*:*:*","matchCriteriaId":"243ED156-851C-4897-AF59-86FCA5C9C66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp05:*:*:*:*:*:*","matchCriteriaId":"125BF8B0-AF1B-4FB1-9D41-D9FB30AE23FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp06:*:*:*:*:*:*","matchCriteriaId":"A3E7C299-8A2D-4733-98AC-F6FA37CC1C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp01:*:*:*:*:*:*","matchCriteriaId":"2B3E4026-F98E-4AEB-9FE1-4FFBBF44AC55"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp02:*:*:*:*:*:*","matchCriteriaId":"960A513A-CAFC-4B3D-ABD7-4659CF545C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp03:*:*:*:*:*:*","matchCriteriaId":"C2D8DC6D-5E39-4A53-8BB8-F998706D573F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp04:*:*:*:*:*:*","matchCriteriaId":"3AA2D64E-D7E7-400D-AC7E-CB2045750791"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2009-0346.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0347.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0348.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0349.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34112","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34023","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021817","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479668","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-1548","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0346.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0347.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0348.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-1548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0028","sourceIdentifier":"secalert@redhat.com","published":"2009-02-27T17:30:09.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit."},{"lang":"es","value":"La llamada al sistema clone en el kernel de Linux v2.6.28 y anteriores, permite a usuarios locales enviar señales arbitrarias a un proceso padre desde un proceso hijo sin privilegios mediante el envío de un proceso hijo adicional con la bandera CLONE_PARENT, y entonces dejando que este nuevo proceso salga.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/52204","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"secalert@redhat.com"},{"url":"http://scary.beasts.org/security/CESA-2009-002.html","source":"secalert@redhat.com"},{"url":"http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34033","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34680","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34981","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35011","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35120","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35121","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35390","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35394","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33906","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479932","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7947","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2009-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0029","sourceIdentifier":"secalert@redhat.com","published":"2009-01-15T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call."},{"lang":"es","value":"ABI en el kernel de Linux v2.6.28 y anteriores sobre las plataformas s390, powerpc, sparc64, y mips 64-bit requiere que un argumento de 32-bit en un registro de 64-bit sea firmado adecuadamente cuando se envía una aplicación en modo de usuario, pero esto no lo puede realizar, lo que permitiría a usuarios locales producir una denegación de servicio (caída) o ganar privilegios a través de una llamada al sistema manipulada."}],"vendorComments":[{"organization":"Red Hat","comment":"This flaw affects most 64-bit architectures, including IBM S/390 and 64-bit PowerPC, but it does not affect x86_64 or Intel Itanium. The risks associated with fixing this flaw are greater than the security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 3, 4, or 5. Red Hat Enterprise MRG is not affected as it is not supported on 64-bit architectures other than x86_64.","lastModified":"2009-06-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=123155111608910&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33477","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33674","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34394","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33275","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479969","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=123155111608910&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0030","sourceIdentifier":"secalert@redhat.com","published":"2009-01-21T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663."},{"lang":"es","value":"Un parche para Red Hat SquirrelMail v1.4.8 establece el mismo valor de la cookie SQMSESSID para todas las sesiones, lo que permite a usuarios autenticados remotamente acceder a las listas de carpetas  y datos de configuración de otros usuarios en circunstancias oportunas utilizando la interfaz estándar de webmail.php. NOTA: esta vulnerabilidad existe debido a un parche incorrecto para CVE-2008-3663."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"796C453E-D59A-4988-BD91-24F31646D8FC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33611","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021611","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33354","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480224","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480488","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48115","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10366","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0057.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=480488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0031","sourceIdentifier":"secalert@redhat.com","published":"2009-01-21T02:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a \"missing kfree.\""},{"lang":"es","value":"Fuga de memoria en la función keyctl_join_session_keyring (security/keys/keyctl.c) en el kernel de Linux 2.6.29-rc2 y anteriores permite a usuarios locales provocar una denegación de servicio(agotamiento de memoria del núcleo) a través de vectores desconocidos relacionados con \"kfree perdido.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.1","matchCriteriaId":"4755B044-8D0F-4236-9EE4-70973A66E4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"}]}]}],"references":[{"url":"http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/51501","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33858","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34252","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34394","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34502","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34762","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34981","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35011","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/19/4","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386","source":"secalert@redhat.com"},{"url":"http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/19/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0032","sourceIdentifier":"secalert@redhat.com","published":"2009-01-27T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file."},{"lang":"es","value":"CUPS sobre  Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) v3.0 y v4.0, y Multi Network Firewall (MNF) v2.0, permite a usuarios locales sobrescribir archivos de su elección a través de un ataque de enlace simbólico sobre el archivo temporal /tmp/pdf.log."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. Red Hat does not ship the vulnerable backend that causes this flaw.","lastModified":"2009-01-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","matchCriteriaId":"772C32A8-A958-47B3-855D-116B0A7E9E5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:corporate_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"694A745A-7CE4-460E-9637-5689ED6CCC95"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:corporate_server:3.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"7D0156D0-33E6-48DE-80B9-75CBA1EB4D61"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:corporate_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"35578C7D-7F96-420A-B60E-2940F7E43E28"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:corporate_server:4.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"18FE4BDE-1B2F-4DC5-AC33-A4A938762C04"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"107F6BEE-C3CB-460A-B574-16D031D823AE"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:linux:2008.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"B9B78F34-9775-4851-A489-30CEBE3BEE34"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:linux:2008.1:*:*:*:*:*:*:*","matchCriteriaId":"9E024B17-9AEE-40AD-9EDC-3BC0FBB53BE3"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:linux:2008.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"FEC2E723-BC31-4E05-BF8E-FE460C32DD93"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:linux:2009.0:*:*:*:*:*:*:*","matchCriteriaId":"7F90D927-CBCD-4432-9C04-A5F040D8F337"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandriva:multi_network_firewall:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5E3891CA-CBFC-45FD-967E-03B3AF3CF1DC"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021637","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:027","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:029","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33418","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48210","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0033","sourceIdentifier":"secalert@redhat.com","published":"2009-06-05T16:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header."},{"lang":"es","value":"Apache Tomcat v4.1.0 hasta v4.1.39, v5.5.0 hasta v5.5.27 y v6.0.0 hasta v6.0.18, cuando se utilizan el conector Java AJP y el balanceo de carga mod_jk; permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de una solicitud manipulada con cabeceras inválidas. Está relacionado con el bloqueo temporal de los conectores que han encontrado errores, tal como se ha demostrado por un error que implica una cabecera HTTP Host mal formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*","matchCriteriaId":"6EF54C08-5FF1-4D02-AA16-B13096BD566C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*","matchCriteriaId":"D8F3B31D-8974-4016-ACAF-E7A917C99F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN87272440/index.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35326","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35344","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35788","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42368","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022331","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?rev=742915&view=rev","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=781362&view=rev","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504044/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35193","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1496","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50928","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10231","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19110","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5739","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN87272440/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?rev=742915&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=781362&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504044/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0034","sourceIdentifier":"secalert@redhat.com","published":"2009-01-30T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command."},{"lang":"es","value":"parse.c de sudo v1.6.9p17 hasta v1.6.9p19, no interpreta correctamente un grupo del sistema (también conocido como %group) en el fichero sudoers durante la decisión de autorización para un usuario que pertenezca a ese grupo. Esto permite a usuarios locales utilizar un fichero sudoers y obtener privilegios de root (administrador) a través de un comando sudo."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gratisoft:sudo:1.6.9:p17:*:*:*:*:*:*","matchCriteriaId":"CA0E731C-EDB7-45A2-87BB-2ED72E9A3D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gratisoft:sudo:1.6.9:p18:*:*:*:*:*:*","matchCriteriaId":"9FD0FEDA-E9A9-458C-8B45-0D1118433D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gratisoft:sudo:1.6.9:p19:*:*:*:*:*:*","matchCriteriaId":"F4D9940B-77D2-49F0-A758-C0B2D2BA096C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000060.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/51736","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33753","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33840","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33885","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35766","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0021","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327","source":"secalert@redhat.com","tags":["Product","Release Notes"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:033","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0267.html","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/500546/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504849/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33517","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021688","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1865","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=468923","source":"secalert@redhat.com","tags":["Issue Tracking","Permissions Required"]},{"url":"https://issues.rpath.com/browse/RPL-2954","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/51736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/33885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.gratisoft.us/bugzilla/show_bug.cgi?id=327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Release Notes"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/archive/1/500546/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504849/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.sudo.ws/cgi-bin/cvsweb/sudo/parse.c.diff?r1=1.160.2.21&r2=1.160.2.22&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=468923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://issues.rpath.com/browse/RPL-2954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-0036","sourceIdentifier":"secalert@redhat.com","published":"2009-02-11T20:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check."},{"lang":"es","value":"Desbordamiento de búfer en la función proxyReadClientSocket en proxy/libvirt_proxy.c en libvirt_proxy v0.5.1, podría permitir a usuarios locales elevar sus privilegios mediante el envío de una parte de la cabecera de un paquete virProxyPacket y posteriormente enviando el resto del paquete con valores manipulados en la cabecera del mismo. Relacionado con el uso de memoria que no ha sido inicializada en un control de validación.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libvirt:libvirt:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E4BA9E6F-7F06-4341-928A-5CE6C5EAAA7A"}]}]}],"references":[{"url":"http://git.et.redhat.com/?p=libvirt.git%3Ba=commitdiff%3Bh=2bb0657e28","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2009/02/10/8","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34397","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0382.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33724","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484947","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10127","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/libvir-list/2009-January/msg00699.html","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/libvir-list/2009-January/msg00726.html","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/libvir-list/2009-January/msg00728.html","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"http://git.et.redhat.com/?p=libvirt.git%3Ba=commitdiff%3Bh=2bb0657e28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/02/10/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0382.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/libvir-list/2009-January/msg00699.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/libvir-list/2009-January/msg00726.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/libvir-list/2009-January/msg00728.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0037","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL."},{"lang":"es","value":"La implementación de redirección en curl y libcurl v5.11 hasta v7.19.3, cuando CURLOPT_FOLLOWLOCATION esta activado, acepta valores de localización a elección del usuario, lo que permite a servidores HTTP remotos (1)iniciar peticiones arbitrarias a servidores de red interna, (2) leer o sobreescribir ficheros arbitrariamente a través de una redirección a un fichero: URL, o (3) ejecutar comando arbitrariamente a través de una redirección a un scp: URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:5.11:*:*:*:*:*:*:*","matchCriteriaId":"547AF432-EC84-4D3F-9A1A-9DDDE90FAA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.0:*:*:*:*:*:*:*","matchCriteriaId":"716A8128-1159-4E38-A35B-DB011915145B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.1beta:*:*:*:*:*:*:*","matchCriteriaId":"21D0B74A-8656-486A-97D8-0FFA2B6E7577"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFF7F97-FA48-43BF-BF90-180B9E9099AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.3:*:*:*:*:*:*:*","matchCriteriaId":"48753D9B-72A1-4F7C-A71E-AA502F5FA6AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2F7F9940-212B-4AA8-B42F-6A8DDBA27652"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.4:*:*:*:*:*:*:*","matchCriteriaId":"8F9238EF-73A5-486E-94BD-3A411DFBE419"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.5:*:*:*:*:*:*:*","matchCriteriaId":"8FF49459-9F8D-4BF5-9F24-DCB256A72FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CA5A191C-D5AE-4A22-8D1A-38FBF5C24705"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E7637717-CF5F-4AA4-9433-5C80C711D824"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3AC0FFDE-B7C6-47AD-8BED-181E10268643"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DAAA0E96-283D-4590-BE3C-76D0A222EB06"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.2:*:*:*:*:*:*:*","matchCriteriaId":"74325BB1-54AE-40BC-81C0-AD07CE6BBDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A980CED-EB95-4997-BE4C-56EF96A14471"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8D83D9F-242B-4689-91EF-64A56C769C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.4:*:*:*:*:*:*:*","matchCriteriaId":"17FA67F8-137F-4778-A6B6-A6EF59C2271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49F84D43-1CE6-452D-A819-44C7CCBCB8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"95EE97A0-420F-4FB7-89CF-2E8064D7E0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE2E637-D0CA-4B2E-8386-EF2892E5E074"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A6DC7AC-CF08-4E45-AA75-2BABF59D960B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7CB3A5AE-F854-483C-A6DA-02F811F2F6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.6:*:*:*:*:*:*:*","matchCriteriaId":"D20FA870-2B29-4CFE-ABD1-62DB4E165B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8019F384-E7EA-4E4D-8E09-4A1FDDB3849B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.7:*:*:*:*:*:*:*","matchCriteriaId":"37105953-D573-4191-BB96-758F6AFD882C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"35898A38-91F6-4C77-ACFD-70E1380AEF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6E3545C6-934D-4C55-B285-DB44783E0907"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"7F5AC6F4-443D-4EB6-83E7-4F193BCC1D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.8:*:*:*:*:*:*:*","matchCriteriaId":"2BC29408-D7CE-496B-AB2C-783EE40BCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC171D9-5418-4C66-BBDA-ABFD978CF113"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3CD68B6D-72AB-4A61-9528-8631B147A3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9:*:*:*:*:*:*:*","matchCriteriaId":"97233341-471B-4B59-95ED-F376460370AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A0080682-F304-45BE-A13B-C75C48245E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.2:*:*:*:*:*:*:*","matchCriteriaId":"46D90019-9713-46CB-90F5-CF6F016AE1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FE6D2C32-ADA4-4859-A30F-7B910D96F02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.4:*:*:*:*:*:*:*","matchCriteriaId":"7CDA26B4-A6F6-41B4-A592-C9AF101C5A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.5:*:*:*:*:*:*:*","matchCriteriaId":"87392CA8-DA66-4E55-9EDA-A85DC6AA253A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.6:*:*:*:*:*:*:*","matchCriteriaId":"DFFBF583-CE6A-4670-B196-3EEA7B4389BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.7:*:*:*:*:*:*:*","matchCriteriaId":"75DFDCF3-FBC3-4231-9915-2D4A7853C1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.9.8:*:*:*:*:*:*:*","matchCriteriaId":"D2669757-AA52-4C71-96E4-8A32883574D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10:*:*:*:*:*:*:*","matchCriteriaId":"8777B0FB-8BFB-4D98-A4C2-E60807CF0C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.1:*:*:*:*:*:*:*","matchCriteriaId":"19C0BD35-0B32-46B8-A442-2FEA4762523F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.2:*:*:*:*:*:*:*","matchCriteriaId":"8A9FFE5B-34E9-47FF-975C-ADC315E7C1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.3:*:*:*:*:*:*:*","matchCriteriaId":"E262EDF2-E490-48F1-B277-844C14CD7361"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.4:*:*:*:*:*:*:*","matchCriteriaId":"D1B1C3BA-BAC3-4424-9523-BCDC373E8EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.5:*:*:*:*:*:*:*","matchCriteriaId":"96B0B2AA-4FD6-4376-A239-00E9431C9F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.6:*:*:*:*:*:*:*","matchCriteriaId":"21A11159-1757-404E-AA07-DD865DCDEF8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.7:*:*:*:*:*:*:*","matchCriteriaId":"7E300177-087D-4103-9092-FF6A4052EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.10.8:*:*:*:*:*:*:*","matchCriteriaId":"2D5D1EA8-D015-49F2-B134-C665969F0276"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CC24D6B-E3E4-4C07-9C4E-3748FDE300EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.12:*:*:*:*:*:*:*","matchCriteriaId":"FAE6AD55-E3D2-46FD-8EFF-595EEF3B6F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"4848C3C8-432D-43E7-B0D9-8FD69D4C3B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"A0A7BE71-D4FB-42FF-8ED4-BA5A81BE8720"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.13:*:*:*:*:*:*:*","matchCriteriaId":"D020D95D-CD04-48A5-9488-1C6E7F69ED8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"B2458D0E-66F7-484C-9989-308530AE766D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.14:*:*:*:*:*:*:*","matchCriteriaId":"80B2D97A-083B-4DEB-A02E-124F36838130"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"EAF7D32E-D07A-478E-96E7-0302B6118B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.15:*:*:*:*:*:*:*","matchCriteriaId":"3D46E759-3E26-41AC-BF71-A0450CBF54FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"61CA2263-4478-477A-86C4-6CCCC36F3EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"B0401FA1-CF19-4BBA-B61B-263CFBA92B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"3A28049D-C8AF-42D0-A294-851854A66516"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F19EC641-0BC7-486B-A7B7-2C0264BC2DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.17:*:*:*:*:*:*:*","matchCriteriaId":"24C045C9-332E-4277-9167-F25D7F62F702"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.18:*:*:*:*:*:*:*","matchCriteriaId":"262827E1-A139-46E2-B44D-46CC40E8E33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:curl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"67B81B43-895A-4FD4-A274-CA762C73DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:5.11:*:*:*:*:*:*:*","matchCriteriaId":"339F2D11-27F1-42A8-A780-8D0DAFB168C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12:*:*:*:*:*:*:*","matchCriteriaId":"3DEC85E8-5555-46A9-9A95-30E1497AFA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"03060364-7DCD-4111-BF7A-BEF6AFCB3134"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"319DADFB-081B-46AA-9F7D-DD4D1C5BE26D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"3D9C6906-5FBD-4736-87B6-720E288E394A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13:*:*:*:*:*:*:*","matchCriteriaId":"4931FF86-51B6-470A-A2E0-A1B0942D1CF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"FA9DA33F-A33E-483E-AE4D-4422D62C02E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"F5028DB2-87D5-4AD8-87D4-325C519D6CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.14:*:*:*:*:*:*:*","matchCriteriaId":"E992CDB0-A787-4F7E-AC55-13FE7C68A1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"808143C5-108B-45BE-B626-A44F9F956018"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15:*:*:*:*:*:*:*","matchCriteriaId":"8EBBB3F1-98BD-40D1-B09F-1924D567625A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"88D5DAE5-ABEA-4FF1-836C-BA4741F13323"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"7E15191F-D4E6-425C-81BE-2CD55A815B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"0407CCC0-ACAA-4B2A-99A5-DA57791057B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"248D86F7-A8E5-448D-A55A-C05278BB9822"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"EBACF741-C988-4800-A9FF-E4836A1EE4E8"}]}]}],"references":[{"url":"http://curl.haxx.se/docs/adv_20090303.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://curl.haxx.se/lxr/source/CHANGES","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000060.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34138","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34202","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34237","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34251","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34255","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34259","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34399","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35766","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200903-21.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1738","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0341.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/501757/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504849/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33962","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021783","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-726-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0009.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0581","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1865","source":"secalert@redhat.com"},{"url":"http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/","source":"secalert@redhat.com"},{"url":"http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49030","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11054","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6074","source":"secalert@redhat.com"},{"url":"http://curl.haxx.se/docs/adv_20090303.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://curl.haxx.se/lxr/source/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0341.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501757/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504849/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-726-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0038","sourceIdentifier":"secalert@redhat.com","published":"2009-04-17T14:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la consola de administración web en Apache Geronimo Application Server 2.1 a 2.1.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) name, (2) ip, (3) username, o (4) description para console/portal/Server/Monitoring; o (5) el PATH_INFO para la URI por defecto bajo console/portal/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:*","matchCriteriaId":"ECF8E5A6-BCAA-428E-A703-6D1508AE2DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7353F7C5-18E8-4310-B31E-9B13963E3F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"73F4CBB7-FF16-4B01-85B2-5B3FE7C8BE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"366DB1DC-39E2-43A1-9A23-37B7A75F7D07"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=119","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34715","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502734/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34562","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","source":"secalert@redhat.com"},{"url":"http://dsecrg.com/pages/vul/show.php?id=119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502734/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0039","sourceIdentifier":"secalert@redhat.com","published":"2009-04-17T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web administration password, (2) upload applications, and perform unspecified other administrative actions, as demonstrated by (3) a Shutdown request to console/portal//Server/Shutdown."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en la consola de administración web en Apache Geronimo Application Server 2.1 a 2.1.3 permite a atacantes remotos realizar acciones no autorizadas como administradores para peticiones que (1) cambian la contraseña de administración de la web, (2) suben aplicaciones y realizan otras acciones de administración no especificadas como es demuestrado por (3) una petición de apagado a console/portal//Server/Shutdown."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:*","matchCriteriaId":"ECF8E5A6-BCAA-428E-A703-6D1508AE2DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7353F7C5-18E8-4310-B31E-9B13963E3F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"73F4CBB7-FF16-4B01-85B2-5B3FE7C8BE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:geronimo:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"366DB1DC-39E2-43A1-9A23-37B7A75F7D07"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=120","source":"secalert@redhat.com"},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34715","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502735/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34562","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","source":"secalert@redhat.com"},{"url":"http://dsecrg.com/pages/vul/show.php?id=120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://issues.apache.org/jira/browse/GERONIMO-4597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502735/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0040","sourceIdentifier":"secalert@redhat.com","published":"2009-02-22T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables."},{"lang":"es","value":"La libreria de referencia PNG (tambien conocida como libpng) anterior a v1.0.43, y v1.2.x anteriores a 1.2.35, utilizado en pngcrush y otras aplicaciones, lo que permite a atacantes dependientes de contexto producir una denegacion de servicio (caida de aplicacion) o posiblemente ejecutar codigo a traves de de un fichero PNG manipulado que inicia un puntero sin inicializar en (1) la funcion png_read_png, (2) manejador pCAL, o (3) instalacion de tablas de gamma de 16-bit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.43","matchCriteriaId":"AC1A6D90-D8E8-4F56-BA83-47E9E5B46549"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.35","matchCriteriaId":"9789BC2F-6EB8-4357-90E8-0F372DA76170"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0","matchCriteriaId":"48C7B5CA-82E7-4676-BDBA-76C1098DDEAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.8","matchCriteriaId":"80C038E4-C24D-45E9-8287-C205C0C07809"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:9.0:-:*:*:*:*:*:*","matchCriteriaId":"C3243C77-D635-480D-908C-328A479719E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt","source":"secalert@redhat.com","tags":["Product"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33970","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33976","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34137","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34143","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34152","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34210","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34265","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34320","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34388","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35258","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35302","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35379","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35386","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36096","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-28.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0046","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.kb.cert.org/vuls/id/649212","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:051","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0333.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0340.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/501767/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/503912/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33827","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0007.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0469","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0473","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1451","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1462","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1560","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48819","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.kb.cert.org/vuls/id/649212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0333.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0340.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/501767/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/503912/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505990/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-0041","sourceIdentifier":"cve@mitre.org","published":"2009-01-14T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Vendor Advisory: http://downloads.digium.com/pub/security/AST-2009-001.html","cveTags":[],"descriptions":[{"lang":"en","value":"IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"IAX2 en Asterisk Open Source v1.2.x anterior a v1.2.31, v1.4.x anterior a v1.4.23-rc4, y v1.6.x anterior a v1.6.0.3-rc2; Business Edition A.x.x, B.x.x anterior a B.2.5.7, C.1.x.x anterior a C.1.10.4, y C.2.x.x anterior a C.2.1.2.1; y s800i 1.2.x anterior a v1.3.0 responden de manera distinta ante un intento de acceso fallido  dependiendo de si la cuenta de usuario existe, lo que permite a atacantes remotos listar nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"b.2.5.2","matchCriteriaId":"24A5B8FE-5EB4-4EFD-957D-D0B7AADC55E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:beta8:*:*:*:*:*:*","versionEndIncluding":"c.1.0","matchCriteriaId":"5E583AB0-6127-4C34-B6C6-1837F5D0C2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:a:*:*:*:*:*:*:*","matchCriteriaId":"313B3A38-8DEA-4D62-A1A4-0B6011E81870"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"802F8680-AB38-41AF-BFC8-F6927F6B1626"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BCAE8D90-B032-4C60-B487-BE655D00FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB64A872-B7B8-46A8-81E4-49EDAC160531"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"21000270-C9B9-430C-A252-763887A15835"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12F7CF45-5482-4947-8F1D-48C746987475"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B64995D-7892-49AB-A89D-A5D15615C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0397DBD4-EA00-444A-9008-4932F99DF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"BB3C2CF4-4A4B-4398-92DC-EAE43801D08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"D7203093-7209-4184-92CB-08AD73FAC379"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F796D547-034A-46FB-B245-3863C198AA84"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0F04F844-79C4-41F3-9671-8B46460D0AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"F981A428-E7F3-4DE5-91DC-60A1C5C6C6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.30.4","matchCriteriaId":"BC6254A9-FDE8-4167-9B8F-BA387A813DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:rc3:*:*:*:*:*:*","versionEndIncluding":"1.4.23","matchCriteriaId":"FD73983B-7A1A-4016-B5D6-EA1019CC8D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:rc1:*:*:*:*:*:*","versionEndIncluding":"1.6.0.3","matchCriteriaId":"8E0B464C-075E-4B62-B00A-53AA2613B619"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E62D108C-862D-4BDB-BE37-285AA4C9C59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"CF1422F3-829D-498C-83A6-02989DFB70A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBEB9D69-A404-4053-92F9-CAC3481AFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E816CCDB-4169-4F09-AE87-E467F4BE7685"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"7435F043-F92B-4635-93CC-A2C39AAE1BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*","matchCriteriaId":"C7B2F43B-8B69-4BF6-86B7-A225175FF068"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:netsec:*:*:*:*:*:*","matchCriteriaId":"65223182-1675-462C-AF67-4A48760A63F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"0CF6584D-A7BB-4BD5-8232-9293FEE4A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"174D6B56-7D0F-46F0-849A-FD05CB348FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"938F545A-F8A7-455E-8E5A-2B5454B6CE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:netsec:*:*:*:*:*:*","matchCriteriaId":"E7C0897A-C841-4AAB-A6B3-1FCF7A99A60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*","matchCriteriaId":"21612C17-7368-4108-B55B-5AB5CA6733E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"A149F8C2-3DA5-44B2-A288-3482F3975824"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"9462B320-B69D-409D-8DCC-D8D6CA1A757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"BEA0014A-659B-4533-A393-6D4ADC80EB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"346C9F65-B5FB-4A75-8E1B-137112F270D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"7EFEE380-0C64-4413-AF3A-45ABC8833500"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"8CA18FC6-1480-400E-A885-8CDAE45AA7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"93741261-378B-4C02-8D68-0E5F39128375"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"72375576-F857-4585-A677-A326D89A65B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"51E5EB34-30AD-4E81-8BD4-4AB905E52B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"4359322B-08D0-4710-A9C3-54BD4A17B800"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:*","matchCriteriaId":"78F84DF4-DBA7-430C-AF17-F52024EF80D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:*","matchCriteriaId":"34266614-3588-485C-A609-37823F8499AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"40850BF4-E252-4667-9B46-9B6FEF6E997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1BB01DD1-B29B-4210-88CC-9ADB3148A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"99E9EE2A-56AD-42BC-8CB0-D34091849B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96877A3E-B54B-4F31-B281-76CDC98B2D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6D0B4503-42A6-4D88-954E-A662E91EC204"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A4B73813-BCD8-429E-B9B9-D6665E026BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"5BBA3ECC-4F40-41CD-A6D7-BBD680DDBACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBE2156-AF86-4C72-B33D-3FF83930F828"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61408884-FBBF-4D94-A552-F99AB46DCED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"4A527277-D97D-4B74-906F-7481BDBD96D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D8B57A32-7B83-4783-A244-C26301970444"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"88576385-EF03-408B-9775-B52E6AFFE48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:*:*:*:*:*:*:*","matchCriteriaId":"ED2BF36F-CF10-4F24-970B-3D0BB7561C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc1:*:*:*:*:*:*","matchCriteriaId":"BFC1BB05-15C6-4829-86EB-5B1BFA4B5B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc2:*:*:*:*:*:*","matchCriteriaId":"AB77E88B-7233-4979-914E-24E671C1FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc3:*:*:*:*:*:*","matchCriteriaId":"C4FF0F09-0268-480F-A2F3-6F8C3F323EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc4:*:*:*:*:*:*","matchCriteriaId":"1CCF9CAE-674A-4833-9D5C-FCBD865BE9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19.1:*:*:*:*:*:*:*","matchCriteriaId":"FB1593E1-BF21-4DB9-A18E-9F221F3F9022"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19.2:*:*:*:*:*:*:*","matchCriteriaId":"EC8E9FE3-FA25-4054-876E-4A3CE6E71AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:*:*:*:*:*:*:*","matchCriteriaId":"4BBAEADC-D1DE-46EF-808C-2F6D2A74D988"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:rc1:*:*:*:*:*:*","matchCriteriaId":"AEF8EB4B-2947-4BD3-ADF3-345AEFE85B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:rc2:*:*:*:*:*:*","matchCriteriaId":"E4476FB3-A759-49F5-ABDE-6D2A321B61BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:rc3:*:*:*:*:*:*","matchCriteriaId":"DFC109C3-2F52-48BE-B07E-3D65F31C1012"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21:*:*:*:*:*:*:*","matchCriteriaId":"E54101A9-3967-4111-8A03-DA1BB23141BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21:rc1:*:*:*:*:*:*","matchCriteriaId":"D8B00600-1D45-41F7-9A10-97FB39012FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21:rc2:*:*:*:*:*:*","matchCriteriaId":"D8CB2331-0F95-45E0-AF5B-0B9C74C5BA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21.1:*:*:*:*:*:*:*","matchCriteriaId":"D4ADB6A7-76AC-4AE3-B1AA-9F8DFA635418"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21.2:*:*:*:*:*:*:*","matchCriteriaId":"776BC35C-CF37-4F4E-9FD5-EC351D4C2C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"F10DAABC-FF06-44FB-98EC-B6AD17C03FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22:rc3:*:*:*:*:*:*","matchCriteriaId":"ACA8AFD5-4C7C-4876-93CA-C5B3E881C455"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22:rc4:*:*:*:*:*:*","matchCriteriaId":"547EEB2B-2ECA-4B00-83BB-CFAA11BE0145"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"83829E0F-C24B-4BD6-88EA-98898A9AD86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22.2:*:*:*:*:*:*:*","matchCriteriaId":"D4C19141-823E-4057-A699-FD1DFF92DF38"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:*:*:*:*:*:*:*","matchCriteriaId":"ECE7FE41-E749-49B8-99DF-19F9E7C4827A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:rc1:*:*:*:*:*:*","matchCriteriaId":"4E78234B-39B6-4DB4-A10F-AA55F174D4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:rc2:*:*:*:*:*:*","matchCriteriaId":"3984CF42-2431-4661-B333-C6721DF7123A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4_revision_95946:*:*:*:*:*:*:*","matchCriteriaId":"E3C6272B-D0C4-4EA5-AEE4-5A45DAA2DDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4beta:*:*:*:*:*:*:*","matchCriteriaId":"2A8012CE-4D4B-4131-87E7-16D7907E3BB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4F88914-6097-4AF1-8337-DCF062EB88AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8BDB49DC-5344-451E-B8D6-D02C3431CE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"B1FDA8D3-5082-479B-BA0A-F1E83D750B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7305910F-42BA-44CE-A7AC-B6F74200B68D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"B93EB4D6-3375-44BC-870F-714A3BC00C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta7:*:*:*:*:*:*","matchCriteriaId":"52F60D6E-64EB-4223-8A79-595693B444C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta7.1:*:*:*:*:*:*","matchCriteriaId":"37CF29B9-4397-4298-9326-0443E666CDC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta8:*:*:*:*:*:*","matchCriteriaId":"7D85DA34-A977-4A82-8E79-7BFE064DE9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta9:*:*:*:*:*:*","matchCriteriaId":"1476EF7B-A6F8-4B10-AF0F-986EA6BA3116"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"98E222F0-4CAA-4247-A00D-C6CEC2E55198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:rc5:*:*:*:*:*:*","matchCriteriaId":"63744245-6126-47F6-B9F5-E936538140C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:rc6:*:*:*:*:*:*","matchCriteriaId":"C8805BEE-A4CF-45C2-B948-F1E8EF0A0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E474C33-B42A-4BB8-AC57-8A9071316240"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B83B3132-7D78-4AC3-B83A-A6A20AA28993"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0147FCED-AE75-4945-B76E-33F2AA764B9B"},{"vulnerable":true,"criteria":"cpe:2.3:h:asterisk:s800i_appliance:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BBE03C02-BE4A-47B6-A2B4-68DAEC5AA47F"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2009-001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33453","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37677","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4910","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33174","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021549","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0063","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0042","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en la bilioteca Arclib (arclib.dll) anterior a v 7.3.0.15 en el motor de  CA Anti-Virus para CA Anti-Virus  Enterprise v7.1, r8, y r8.1; Anti-Virus 2007 v8 y 2008; Internet Security Suite 2007 v3 y 2008; y otros productos CA, permite a atacantes remotos evitar la detección de virus a través de un fichero mal formado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-spyware:2007:*:*:*:*:*:*:*","matchCriteriaId":"385B8B52-F5EA-4E13-A7EE-C2D1B694C785"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-spyware:2008:*:*:*:*:*:*:*","matchCriteriaId":"145A8680-6EDC-47CB-9754-F29D45251E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-spyware_for_the_enterprise:8.1:*:*:*:*:*:*:*","matchCriteriaId":"89F14F0B-C67C-4EF4-81DE-A5DB9A607CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-spyware_for_the_enterprise:r8:*:*:*:*:*:*:*","matchCriteriaId":"EB09F459-B652-4C6F-B481-89E73D750BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*","matchCriteriaId":"C469EBBE-EE96-4CED-BD8C-36461750C6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"9C5E892B-0EE8-4B76-97B8-0BAF17E83F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*","matchCriteriaId":"607CCBDA-7288-4496-A7ED-EF6DED40CA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:*","matchCriteriaId":"FE175BB8-DF9B-4DA0-AD2F-885CC13BB812"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:r8:*:*:*:*:*:*:*","matchCriteriaId":"11BCD267-E8CE-4A97-B769-5F4CAF9830D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*","matchCriteriaId":"865B7BD2-3AD1-41CA-842B-47BC4F1426DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:antivirus_gateway:7.1:*:*:*:*:*:*:*","matchCriteriaId":"2E779636-EBB1-4A8A-BB87-E6759E92BE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_client_agent:-:*:windows:*:*:*:*:*","matchCriteriaId":"8E8F42A2-E1D8-4224-8D3F-EA644D490347"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*","matchCriteriaId":"0E2FA702-184A-44FF-8DEA-7811804EE175"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*","matchCriteriaId":"D301B65D-A20B-4991-A0D8-DFE3363F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_ez_antivirus:r6.1:*:*:*:*:*:*:*","matchCriteriaId":"C94D2000-2B28-4055-B528-437E2399F2A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_ez_antivirus:r7:*:*:*:*:*:*:*","matchCriteriaId":"E8741DC0-CCDD-456D-B155-24A4A447A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3DDF2EE3-753B-4C7E-84EF-144FA5986A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_intrusion_detection:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2D703BC4-2604-415D-ABA7-E2ED92B82FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*","matchCriteriaId":"0FF55705-42ED-4503-8534-FDEA365E84E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"AB548763-E1A7-4DB1-BE86-ED5AA1CA81BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r11:*:*:*:*:*:*:*","matchCriteriaId":"6B28429A-F343-4BE8-A94D-5A5AC3F6258C"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"CFF64064-1C35-4888-BBC2-52F68EF9517F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5E02DA21-B25B-4626-BFDC-61AA8AF3537E"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:8.1:*:*:*:*:*:*:*","matchCriteriaId":"77203D28-404B-464B-A444-6D17C91517FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:_nil_:linux:*:*:*:*:*","matchCriteriaId":"7B114475-CA4D-49CB-BAC5-D7282CB3E870"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:_nil_:windows:*:*:*:*:*","matchCriteriaId":"69135166-4E5A-4D22-9EB7-B052D5B5D751"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5_nil_:linux:*:*:*:*:*:*","matchCriteriaId":"585DAE6C-4516-4D00-987F-4BCE3D68190C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5_nil_:windows:*:*:*:*:*:*","matchCriteriaId":"1CC0D532-65D5-491A-A0F3-1FFA1C95F0A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r12.0_nil_:windows:*:*:*:*:*:*","matchCriteriaId":"1CBFEC61-C17D-4A3F-A7EA-1F45E729172A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"29FEABEE-DC17-4620-B088-B24249865931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D10B864B-AA39-4702-A42B-F33BAF2D8059"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_2007:3:*:*:*:*:*:*:*","matchCriteriaId":"636F7EE3-22C6-4400-AE70-E8AFA0B9E2F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"0281F80B-CF9C-482D-B7A9-3B2651BD0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"33F7E184-EA23-487C-83ED-65CF8DD2DB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*","matchCriteriaId":"47C10BA4-B241-4F65-8FA1-AD88266C03B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*","matchCriteriaId":"253A8082-9AE4-4049-A1D0-B7ACB5C2E8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"CC845898-3D77-4793-971E-5E1555ED9CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager_for_the_enterprise:8.1:*:*:*:*:*:*:*","matchCriteriaId":"B7FA3811-B3C7-4CD5-A399-EB427BDB50DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager_for_the_enterprise:r8:*:*:*:*:*:*:*","matchCriteriaId":"7E7E12A7-F92F-47E3-B810-4019FD885B60"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500417/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33464","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021639","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0270","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48261","source":"cve@mitre.org"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500417/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0043","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors."},{"lang":"es","value":"El servicio smmsnmpd en CA Service Metric Analysis r11.0 hasta r11.1 SP1 y Service Level Management v3.5 no restringe el acceso adecuadamente, lo cual permite a atacantes remotos ejecutar comandos de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_level_management:3.5:*:*:*:*:*:*:*","matchCriteriaId":"8EDC9EFE-8401-4A6C-9C7F-0E6945839406"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_metric_analysis:r11.0:*:*:*:*:*:*:*","matchCriteriaId":"84F66415-014D-4F3B-97AD-87189E100CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_metric_analysis:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"07202650-A1D8-4235-9C2B-9EB480205E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_metric_analysis:r11.1:sp1:*:*:*:*:*:*","matchCriteriaId":"291902E2-F337-41C5-B570-4E8C959002BE"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499857/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33161","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0053","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499857/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0046","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Sun GridEngine versión 5.3 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:grid_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"2A4ACBF8-8D20-43CA-84FA-6E30EFBAF0AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:grid_engine:5.3:beta1:*:*:*:*:*:*","matchCriteriaId":"61B5F93D-E636-401A-8341-05565E7F798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:grid_engine:5.3:beta2:*:*:*:*:*:*","matchCriteriaId":"DBB37AF4-2262-431F-B36A-31F96E0FCA83"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0045","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0047","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:13.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Gale versión 0.99 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99","matchCriteriaId":"B7E884BE-3B56-4CC1-BE9B-2F4604AB8150"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.15:*:*:*:*:*:*:*","matchCriteriaId":"1287BEFC-BF7E-4C5C-AC50-22F3301C2DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.15b:*:*:*:*:*:*:*","matchCriteriaId":"88DD905A-4DFF-4EA1-96F2-894145916197"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.15c:*:*:*:*:*:*:*","matchCriteriaId":"E14E9CB4-55A5-4914-AA0B-79938149590A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.16:*:*:*:*:*:*:*","matchCriteriaId":"407DE223-5C67-4F10-8B98-750D1FBE4F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.16a:*:*:*:*:*:*:*","matchCriteriaId":"F93715E6-9528-4922-A049-119418DC7254"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.17:*:*:*:*:*:*:*","matchCriteriaId":"38BA200F-0BD1-48B1-A91F-26F0128FF4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.17a:*:*:*:*:*:*:*","matchCriteriaId":"A5DCE57E-D944-4329-977B-12A76853D3F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.18:*:*:*:*:*:*:*","matchCriteriaId":"7A76AC49-2A31-404D-BE12-4B795B388116"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.18b:*:*:*:*:*:*:*","matchCriteriaId":"469CB01B-318D-407E-BB38-6B2F6AB4D3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.18c:*:*:*:*:*:*:*","matchCriteriaId":"0D9EC778-2D17-4F1C-9DBE-74461A379EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.19:*:*:*:*:*:*:*","matchCriteriaId":"B351A3DE-3D31-4B94-A1EA-04AFA98D00C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.19a:*:*:*:*:*:*:*","matchCriteriaId":"165C0D9D-D0A4-4ECF-B4F7-5A3E621F6B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.19b:*:*:*:*:*:*:*","matchCriteriaId":"921BA5E1-2469-42D3-8228-BC122C8CED39"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.20a:*:*:*:*:*:*:*","matchCriteriaId":"53F8F572-DE5A-45ED-8A90-B6C888026100"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.21:*:*:*:*:*:*:*","matchCriteriaId":"314A3314-5968-4F24-9958-E1997C20EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.90a:*:*:*:*:*:*:*","matchCriteriaId":"B1A84B5B-8864-4E1C-95C1-18BCCCC8CFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.90b:*:*:*:*:*:*:*","matchCriteriaId":"FCB50FB6-E388-4735-B0D5-0875479281E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.90c:*:*:*:*:*:*:*","matchCriteriaId":"F1090853-1367-4B94-BC3C-4CCFB5A43CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.91:*:*:*:*:*:*:*","matchCriteriaId":"028853B7-2544-4010-A71F-D8CF78B01AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"3C8B4AE9-0142-4405-8201-039A332A0EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"8C319A57-C69D-4786-9232-8E5278C03AD4"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0048","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"OpenEvidence versión 1.0.6 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openevidence:openevidence:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"B42046E9-EE96-4144-AF85-56D3F7DA9067"},{"vulnerable":true,"criteria":"cpe:2.3:a:openevidence:openevidence:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"38B2F54F-A344-4E6B-9404-76E50F047EAB"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0049","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Belgian eID middleware (eidlib) versión 2.6.0 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eid:eidlib:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"97B6B61D-A6E5-4586-A799-66581D1E5109"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34029","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0050","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Lasso versión 2.2.1 y anteriores, no comprueba apropiadamente el valor devuelto de la función DSA_verify de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entrouvert:lasso:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1-0","matchCriteriaId":"47688EC4-E2DC-407D-8F2F-EDCFA685C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:entrouvert:lasso:1.9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"4249DB70-1CB9-45F6-9E2B-476BF8DA3E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:entrouvert:lasso:2.0.0-1:*:*:*:*:*:*:*","matchCriteriaId":"62798EAF-07A6-49F3-8C9A-D90694AE32FD"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0051","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"ZXID versión 0.29 y anteriores, no comprueba apropiadamente el valor devuelto de la función DSA_verify de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:*:*:*:*:*:*:*:*","versionEndIncluding":"0.29","matchCriteriaId":"5FBF13B6-C08F-4B37-852A-CFA68C2493FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BEB522C-2349-4297-AF71-2263968BAEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.2:*:*:*:*:*:*:*","matchCriteriaId":"25720EAB-8656-45CB-983F-458782A44B6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.3:*:*:*:*:*:*:*","matchCriteriaId":"764ACFF4-BFD6-4FFE-81F3-30092E4023D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4F8198CC-A1C6-49CB-B473-6C5CEF92BB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.5:*:*:*:*:*:*:*","matchCriteriaId":"20660655-9FD4-4264-A689-4D722B16661D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E75A1370-596D-45A2-A4E2-218717498F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.7:*:*:*:*:*:*:*","matchCriteriaId":"255CCFCC-98B5-466F-9463-0E386C5B8FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.8:*:*:*:*:*:*:*","matchCriteriaId":"D3821FD3-3F2B-43F3-A089-94EE7F60BCFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83DF2771-1B0E-4AB4-8F1C-32D6365B7A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.10:*:*:*:*:*:*:*","matchCriteriaId":"00C538E3-BF56-41A8-BD71-6988CF935505"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.11:*:*:*:*:*:*:*","matchCriteriaId":"47A7E3CA-8AC2-4382-8D77-325B1B12418C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.12:*:*:*:*:*:*:*","matchCriteriaId":"850DE94C-34DF-4C46-8383-2A544B71C5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.13:*:*:*:*:*:*:*","matchCriteriaId":"F9D00FA7-822A-4743-84C2-7FA4F120F865"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.14:*:*:*:*:*:*:*","matchCriteriaId":"6AAC7BD0-7771-4511-BC69-7A9EB43A8139"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.15:*:*:*:*:*:*:*","matchCriteriaId":"14410832-E77B-4644-B561-B1158DD3BE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.16:*:*:*:*:*:*:*","matchCriteriaId":"037D3B59-2688-4A4E-A328-426B12F97684"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.17:*:*:*:*:*:*:*","matchCriteriaId":"F6A0E88B-09C6-4533-9409-9498E170C10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.18:*:*:*:*:*:*:*","matchCriteriaId":"A6CAB4BF-2D00-461A-B906-547560CFA965"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.19:*:*:*:*:*:*:*","matchCriteriaId":"133EDD59-49D9-4FDC-8833-420F3E6B8211"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.20:*:*:*:*:*:*:*","matchCriteriaId":"11DD6C71-8661-44B4-98B9-71E5181D999D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.21:*:*:*:*:*:*:*","matchCriteriaId":"2596C783-B061-45A1-9C75-4A02FDF5D004"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.22:*:*:*:*:*:*:*","matchCriteriaId":"2590DB77-E5C0-4C5A-B1B3-6488F2EEC8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.25:*:*:*:*:*:*:*","matchCriteriaId":"CA74ED53-DF05-46A6-9B76-80A9BB40CC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.26:*:*:*:*:*:*:*","matchCriteriaId":"C90A5D7D-A08B-46BF-A9A8-18EEADE63284"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.27:*:*:*:*:*:*:*","matchCriteriaId":"70E439D0-A0A9-417F-9DC4-C02BC52589C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.28:*:*:*:*:*:*:*","matchCriteriaId":"39FD0D74-FC99-4E2A-BF8B-59B0A485575D"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0052","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T23:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (device reboot or hang) and possibly execute arbitrary code via a truncated reserved management frame."},{"lang":"es","value":"El driver inalámbrico Atheros, tal como es usado en el punto de acceso Wi-Fi Netgear WNDAP330 con firmware 2.1.11 y otras versiones anteriores a la 3.0.3 en el chipset Atheros AR9160-BC1A, y otros productos, permite a usuarios remotos autenticados provocar una denagación de servicio (reinicio del dispositivo o cuelgue) y posiblemente ejecutar código de su elección mediante una trama reservada de gestión truncada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:S/C:N/I:N/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":5.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netgear:wndap330_firmware:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"C3343171-6991-47F6-8BC0-B0CFBFE595C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:atheros:ar9160-bc1a_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"13D645AD-22A4-4DC6-BC81-1A06E8C61DCB"},{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wndap330:*:*:*:*:*:*:*:*","matchCriteriaId":"93A730EC-5444-4AFF-8173-061CBFFF4368"}]}]}],"references":[{"url":"http://secunia.com/advisories/37344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59880","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507777/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36991","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507777/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0053","sourceIdentifier":"psirt@cisco.com","published":"2009-01-16T21:30:03.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to obtain the decryption key via unspecified vectors, related to a \"logic error.\""},{"lang":"es","value":"Cifrado PXE en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos obtener la clave de descifrado mediante vectores no especificados, relacionados con un \"error lógico\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6539D9D7-E3DF-475C-B53D-CF11220FBA27"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1262F096-DB00-4D52-894D-3BA812AEF570"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"097FCF52-65CF-4AF5-97BC-8B310610DFB9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"F8A0A514-959C-4017-B0AB-AFC9D0A979E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A06BEC91-C3A6-4590-94A7-EA783A12ABF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"90A1B821-0FDD-40C8-93FA-06BB895E83D1"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*","matchCriteriaId":"E081B0DF-DBD9-4640-92CC-29920E2A50BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56BC79D-E974-4881-81E5-335FF216DFA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4686D0A4-85B4-4236-B09A-DA8B554A0523"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4CF6D489-B7EA-4705-B136-6B96CC179046"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"391503D9-FE43-4A34-A67D-AB3B52996FA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BACB1F5F-542E-44B2-AF54-6D61294E57A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA0DB42-01D6-4B14-934B-23C11CB8D062"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A66E714E-6414-4B3F-ABFB-8DE44F3E7065"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"}]}]}],"references":[{"url":"http://osvdb.org/51395","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33479","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1021593","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"psirt@cisco.com"},{"url":"http://osvdb.org/51395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0054","sourceIdentifier":"psirt@cisco.com","published":"2009-01-16T21:30:03.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user into reading a modified or crafted e-mail message."},{"lang":"es","value":"Cifrado PXE en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos capturar credenciales engañando al usuario para leer un mensaje de correo electrónico modificado o manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6539D9D7-E3DF-475C-B53D-CF11220FBA27"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1262F096-DB00-4D52-894D-3BA812AEF570"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"097FCF52-65CF-4AF5-97BC-8B310610DFB9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"F8A0A514-959C-4017-B0AB-AFC9D0A979E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A06BEC91-C3A6-4590-94A7-EA783A12ABF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"90A1B821-0FDD-40C8-93FA-06BB895E83D1"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*","matchCriteriaId":"E081B0DF-DBD9-4640-92CC-29920E2A50BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56BC79D-E974-4881-81E5-335FF216DFA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4686D0A4-85B4-4236-B09A-DA8B554A0523"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4CF6D489-B7EA-4705-B136-6B96CC179046"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"391503D9-FE43-4A34-A67D-AB3B52996FA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BACB1F5F-542E-44B2-AF54-6D61294E57A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA0DB42-01D6-4B14-934B-23C11CB8D062"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A66E714E-6414-4B3F-ABFB-8DE44F3E7065"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"}]}]}],"references":[{"url":"http://osvdb.org/51396","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33479","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1021593","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"psirt@cisco.com"},{"url":"http://osvdb.org/51396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0055","sourceIdentifier":"psirt@cisco.com","published":"2009-01-16T21:30:03.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el interfaz de administración en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos modificar preferencias del dispositivo como usuarios de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6539D9D7-E3DF-475C-B53D-CF11220FBA27"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1262F096-DB00-4D52-894D-3BA812AEF570"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"097FCF52-65CF-4AF5-97BC-8B310610DFB9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"F8A0A514-959C-4017-B0AB-AFC9D0A979E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A06BEC91-C3A6-4590-94A7-EA783A12ABF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"90A1B821-0FDD-40C8-93FA-06BB895E83D1"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*","matchCriteriaId":"E081B0DF-DBD9-4640-92CC-29920E2A50BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56BC79D-E974-4881-81E5-335FF216DFA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4686D0A4-85B4-4236-B09A-DA8B554A0523"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4CF6D489-B7EA-4705-B136-6B96CC179046"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"391503D9-FE43-4A34-A67D-AB3B52996FA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BACB1F5F-542E-44B2-AF54-6D61294E57A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA0DB42-01D6-4B14-934B-23C11CB8D062"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A66E714E-6414-4B3F-ABFB-8DE44F3E7065"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"}]}]}],"references":[{"url":"http://osvdb.org/51397","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33479","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1021594","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"psirt@cisco.com"},{"url":"http://osvdb.org/51397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0056","sourceIdentifier":"psirt@cisco.com","published":"2009-01-16T21:30:03.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to execute commands and modify appliance preferences as arbitrary users via a logout action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el interfaz de administración en Cisco IronPort Encryption Appliance v6.2.4 anterior a v6.2.4.1.1, v6.2.5, v6.2.6, v6.2.7 anterior a v6.2.7.7, v6.3 anterior a v6.3.0.4, y v6.5 anterior a v6.5.0.2; y Cisco IronPort PostX v6.2.1 anterior a v6.2.1.1 y v6.2.2 anterior a v6.2.2.3; permite a atacantes remotos ejecutar comandos y modificar preferencias del dispositivo como usuarios de su elección mediante una acción logout."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"41DF7FFA-66B5-45E8-B57E-FB307E4DB8CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E3CAA06A-C849-49B9-B6B7-7E3BF41F705C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6539D9D7-E3DF-475C-B53D-CF11220FBA27"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7486F8C6-F2E5-4790-BA3A-FA36CF7A8704"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1262F096-DB00-4D52-894D-3BA812AEF570"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"097FCF52-65CF-4AF5-97BC-8B310610DFB9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"F8A0A514-959C-4017-B0AB-AFC9D0A979E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A06BEC91-C3A6-4590-94A7-EA783A12ABF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"FF9BCDE5-CEF8-4D25-AE6A-D4AF2B2DFBD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"90A1B821-0FDD-40C8-93FA-06BB895E83D1"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E9EF0B9B-B5D9-4F2D-A4E9-24349747435A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3:*:*:*:*:*:*:*","matchCriteriaId":"E081B0DF-DBD9-4640-92CC-29920E2A50BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56BC79D-E974-4881-81E5-335FF216DFA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C7E4C7E-DECE-40B5-AAA4-15964F4EC762"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4686D0A4-85B4-4236-B09A-DA8B554A0523"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4CF6D489-B7EA-4705-B136-6B96CC179046"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"391503D9-FE43-4A34-A67D-AB3B52996FA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BACB1F5F-542E-44B2-AF54-6D61294E57A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5EA0DB42-01D6-4B14-934B-23C11CB8D062"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A66E714E-6414-4B3F-ABFB-8DE44F3E7065"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B0BE0FF-376B-4BA4-8CEF-EFCF3BDC1D4C"}]}]}],"references":[{"url":"http://osvdb.org/51398","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33479","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1021594","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"psirt@cisco.com"},{"url":"http://osvdb.org/51398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0057","sourceIdentifier":"psirt@cisco.com","published":"2009-01-22T18:30:03.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the \"client terminates prematurely.\""},{"lang":"es","value":"El servicio Certificate Authority Proxy Function (CAPF) en Cisco Unified Communications Manager 5.x antes de 5.1(3e) y 6.x antes de 6.1(3) permite a atacantes remotos provocar una denegación de servicio (parada del servicio de voz) mediante el envío de entradas malformadas sobre una sesión TCP en la que el \"cliente termina prematuramente.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AF68FA-433F-46F2-B309-B60A108BECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:*","matchCriteriaId":"CFE62DB5-943D-43B5-BD13-D74DAA122578"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:*","matchCriteriaId":"D2D76BC6-1A59-4D74-A7C9-8C05D96E01F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:*","matchCriteriaId":"788BDB54-0970-468F-9713-14B097E1A863"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:*","matchCriteriaId":"3CAE1371-F46C-4DFD-A4A4-D609E93C4740"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_4:*:*:*:*:*:*:*","matchCriteriaId":"E7AC2F39-C029-4FAB-A963-0C7F1D5A8067"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_4a:*:*:*:*:*:*:*","matchCriteriaId":"62781360-15FC-4E40-AEF8-BF01606A671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0_4a_su1:*:*:*:*:*:*:*","matchCriteriaId":"08E03DCC-4DCB-4830-943F-05F7E3BB49EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"640BFEE2-B364-411E-B641-7471B88ED7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"B860F1E1-E295-4B71-B396-14286611EA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2\\):*:*:*:*:*:*","matchCriteriaId":"E194E6EC-282D-4C8E-96E3-00D64FCD8C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2a\\):*:*:*:*:*:*","matchCriteriaId":"5B2EA451-EE18-440A-924A-556A2EC74300"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(2b\\):*:*:*:*:*:*","matchCriteriaId":"8950C510-38F3-4040-8871-C085DDECF5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:\\(3a\\):*:*:*:*:*:*","matchCriteriaId":"7101A008-3F3C-4ABB-B4FC-25BDA8809C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:5.1\\(1\\):*:*:*:*:*:*","matchCriteriaId":"CDEF7B2B-66CB-4C92-B678-859693C8C890"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1:5.1_\\(2a\\):*:*:*:*:*:*","matchCriteriaId":"8AA0378D-5EE0-4BD6-BB33-7DF01F830DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1B9FDFF3-2E60-4E41-9251-93283D945D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"239510AD-8BB0-4515-B1DA-80DE696D25DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3c\\):*:*:*:*:*:*:*","matchCriteriaId":"84A49932-1E22-4BE0-8195-926D44F65AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9E51D8BF-12BB-4DD1-9232-1D066889B30F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"AD2935E2-7340-4B49-8B5D-C7801FD605C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_1:*:*:*:*:*:*:*","matchCriteriaId":"2740B5E5-E8D2-491E-B174-A1A9DF812418"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_2:*:*:*:*:*:*:*","matchCriteriaId":"60D93DAA-0ED6-4DA5-B7A5-50D5567A6178"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_2a:*:*:*:*:*:*:*","matchCriteriaId":"DEA1ABD3-D076-4CA6-A12D-3C3BB5080B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_2b:*:*:*:*:*:*:*","matchCriteriaId":"54B14EC5-4391-4698-BF6F-2726FD28D318"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1_3a:*:*:*:*:*:*:*","matchCriteriaId":"B5F1270F-DBF6-4938-A1A0-732EE52C83E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1\\):*:*:*:*:*:*","matchCriteriaId":"156F822A-08CB-4EE2-9054-18F649D96C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"53CBD1E5-46C6-4F31-867A-118227EB0473"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"05F443F9-B454-42B3-8464-ACEA40066DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0_1a:*:*:*:*:*:*:*","matchCriteriaId":"1FBF1FDC-7096-4EE6-B9A2-0C9971F407D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:\\(1a\\):*:*:*:*:*:*","matchCriteriaId":"8E8F77F9-05C3-4B66-9022-7B227F97978C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"597D9674-F44D-4A31-A2F2-2790ED698A91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"42F3870B-5DE9-4E3E-BEA7-863916DD45DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1_1a:*:*:*:*:*:*:*","matchCriteriaId":"047E45A0-C0F0-4900-B5FB-8F0A5852732D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33588","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33379","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021620","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0213","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48139","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0058","sourceIdentifier":"psirt@cisco.com","published":"2009-02-05T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service (web authentication outage or device reload) via unspecified network traffic, as demonstrated by a vulnerability scanner."},{"lang":"es","value":"Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.x antes de v4.2.176.0 y v5.x antes de v5.2, permiten a atacantes remotos provocar una denegación de servicio (caída del servicio de autenticación web) mediante tráfico de red no especificado, como ha demostrado un escáner de vulnerabilidades."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.1},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FB886E18-A1F0-4A05-AFBF-FFC4FA72373C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E5561784-ACF8-4CCD-94FA-AAA17AC8363E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5830E746-BD5C-43A6-914F-1D8411E235E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"49DECEDD-4D87-455B-BC28-6227ABC49714"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D797EE92-8C85-4C83-A96A-DF1922712742"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"BA1C016C-30FA-4F76-883B-12712316F750"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A8FFC9F3-8342-4A71-9731-14EF90C8E678"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E82E205F-2FA0-4030-8BC9-D622FCF015BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"54A95FA8-80E7-4995-ABE8-86326E698017"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB9B9EF-1ADF-4C04-A9C4-EF87EF999D7E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C59B5CEE-8756-4A42-B9BA-489CE0DE5AA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"21F21CDB-2DFE-4781-8FC6-DF449FB6FA64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3A8DBB-9E82-4428-9034-391F662DFA0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC1E1F40-ECB6-42FB-838E-998B1893D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1511CA9-B471-49D6-9BEE-1BADE6EC61E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33749","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021679","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0059","sourceIdentifier":"psirt@cisco.com","published":"2009-02-05T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service (device reload) via a web authentication (aka WebAuth) session that includes a malformed POST request to login.html."},{"lang":"es","value":"El Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.x anterior a v4.2.176.0 y v5.2.x anterior a 5.2.157.0; permiten a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una sesión de autenticación Web (también conocido WebAuth) que incluye una solicitud POST mal formada a login.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FB886E18-A1F0-4A05-AFBF-FFC4FA72373C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E5561784-ACF8-4CCD-94FA-AAA17AC8363E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5830E746-BD5C-43A6-914F-1D8411E235E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"49DECEDD-4D87-455B-BC28-6227ABC49714"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D797EE92-8C85-4C83-A96A-DF1922712742"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"BA1C016C-30FA-4F76-883B-12712316F750"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A8FFC9F3-8342-4A71-9731-14EF90C8E678"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E82E205F-2FA0-4030-8BC9-D622FCF015BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"54A95FA8-80E7-4995-ABE8-86326E698017"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB9B9EF-1ADF-4C04-A9C4-EF87EF999D7E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C59B5CEE-8756-4A42-B9BA-489CE0DE5AA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"21F21CDB-2DFE-4781-8FC6-DF449FB6FA64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3A8DBB-9E82-4428-9034-391F662DFA0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC1E1F40-ECB6-42FB-838E-998B1893D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A1511CA9-B471-49D6-9BEE-1BADE6EC61E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/33749","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021679","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0061","sourceIdentifier":"psirt@cisco.com","published":"2009-02-05T00:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to cause a denial of service (device crash or hang) via unknown IP packets."},{"lang":"es","value":"Vulnerabilidad no especificada en el dispositivo Wireless LAN Controller (WLC) TSEC en Cisco 4400 WLC, Cisco Catalyst 6500 y 7600 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software 4.x versiones anteriores a 4.2.176.0 y 5.x versiones anteriores a 5.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue o caída del servicio) a través de paquetes IPs desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FB886E18-A1F0-4A05-AFBF-FFC4FA72373C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E5561784-ACF8-4CCD-94FA-AAA17AC8363E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"555E98AF-5A93-461B-AE99-40E49089BFF2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"49DECEDD-4D87-455B-BC28-6227ABC49714"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D797EE92-8C85-4C83-A96A-DF1922712742"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C8A48A9-1D3C-4A17-A438-7A133ED332A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A8FFC9F3-8342-4A71-9731-14EF90C8E678"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E82E205F-2FA0-4030-8BC9-D622FCF015BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_series_integrated_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"311E5C0C-B065-48EB-B9F8-DD85EA958E4D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB9B9EF-1ADF-4C04-A9C4-EF87EF999D7E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C59B5CEE-8756-4A42-B9BA-489CE0DE5AA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_series_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D59C908A-C6B0-471A-88EA-DA28CCBE19B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3A8DBB-9E82-4428-9034-391F662DFA0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC1E1F40-ECB6-42FB-838E-998B1893D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DA75092-5306-45F5-AEB5-67A2224FFDCE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33749","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021679","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0062","sourceIdentifier":"psirt@cisco.com","published":"2009-02-05T00:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.2.173.0, permite a usuarios remotos autenticados obtener privilegios mediante vectores desconocidos, como es demostrado por la escalada de privilegios desde los niveles (1) Lobby Admin y (2) Local Management User."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D797EE92-8C85-4C83-A96A-DF1922712742"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"7116274D-F131-42CC-99DA-F22CC39E4525"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_wireless_services_modules:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8E96B28A-CF63-48C9-8B8E-8BC432A6A5EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_wireless_services_modules:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"75E04EA5-F134-4930-97CB-BD68484403FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC1E1F40-ECB6-42FB-838E-998B1893D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"57C6B8CB-9277-463B-84EB-AEF36EE40E7B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33749","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021678","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/33749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0063","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T15:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el Centro de Control en Symantec Brightmail Gateway Appliance antes de 8.0.1 permite a usuarios remotos autenticados inyectar HTML o scripts web arbitrarios a través de vectores no especificados.\r\n\t\t"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"142AC359-363A-4B84-8154-2E6D178E33EB"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:7.5:*:*:*:*:*:*:*","matchCriteriaId":"DC321D15-6374-4D17-A7A7-05257692AA87"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:7.6:*:*:*:*:*:*:*","matchCriteriaId":"F74170B9-18E6-4275-BD5C-7223EAA08AD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:7.7:*:*:*:*:*:*:*","matchCriteriaId":"DDCFFB37-7043-47BB-9906-6D1EFA7B8FC0"}]}]}],"references":[{"url":"http://osvdb.org/53944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34885","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022116","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34641","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1155","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50074","source":"cve@mitre.org"},{"url":"http://osvdb.org/53944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0064","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el Centro de Control de Symantec Brightmail Gateway Appliance antes de v8.0.1 permiten a los usuarios remotos autenticados obtener privilegios, y posiblemente obtener información sensible o el secuestro arbitrario de sesiones de los usuarios, a través de vectores relacionados con (1) secuencias de comandos administrativos o (2) funciones de la consola."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"142AC359-363A-4B84-8154-2E6D178E33EB"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:7.5:*:*:*:*:*:*:*","matchCriteriaId":"DC321D15-6374-4D17-A7A7-05257692AA87"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:7.6:*:*:*:*:*:*:*","matchCriteriaId":"F74170B9-18E6-4275-BD5C-7223EAA08AD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:brightmail_gateway_appliance:7.7:*:*:*:*:*:*:*","matchCriteriaId":"DDCFFB37-7043-47BB-9906-6D1EFA7B8FC0"}]}]}],"references":[{"url":"http://osvdb.org/53945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34885","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022117","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34639","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1155","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50075","source":"cve@mitre.org"},{"url":"http://osvdb.org/53945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0065","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID."},{"lang":"es","value":"Desbordamiento de búfer en net/sctp/sm_statefuns.c en la implementación del \"Stream Control Transmission Protocol (sctp)\" (Protocolo de Tansmisión de Control de Flujo) en el kernel de Linux antes de v2.6.28-git8 permite a atacantes remotos tener un impacto desconocido mediante un fragmento WD-TSN (también conocido como FORWARD-TSN) con un flujo ID grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27","matchCriteriaId":"518BA987-F4B1-44F3-B329-D17E5A9B0D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://patchwork.ozlabs.org/patch/15024/","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33854","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34252","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34680","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34762","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35174","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36191","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/05/1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1055.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33113","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022698","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0029","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2193","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=478800","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.ozlabs.org/patch/15024/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/05/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=478800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0066","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot.  NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Intel system software para Trusted Execution Technology (TXT) permite a atacantes remotos evitar las protecciones de integridad del cargador previstas, como se demostró con la explotación de tboot. NOTA: a fecha de 07-01-2009, la única revelación es un pre-aviso impreciso sin información de uso inmediato. De todos modos, ya que viene de un investigador bien conocido, se le ha asignado un identificador CVE por motivos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:trusted_execution_technology:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"AB11A019-9ACB-41CB-8236-8B56D7E9C4DB"}]}]}],"references":[{"url":"http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk","source":"cve@mitre.org"},{"url":"http://invisiblethingslab.com/press/itl-press-2009-01.pdf","source":"cve@mitre.org"},{"url":"http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33119","source":"cve@mitre.org"},{"url":"http://blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Wojtczuk","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://invisiblethingslab.com/press/itl-press-2009-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theinvisiblethings.blogspot.com/2009/01/attacking-intel-trusted-execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0068","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file."},{"lang":"es","value":"Error de interacción en xdg-open permite a atacantes remotos ejecutar código de su elección enviando un archivo con un tipo MIME peligroso pero utilizando un tipo seguro que Firefox envía a xdg-open, lo que provoca que xdg-open procese el archivo de tipo peligroso mediante una detección de tipo automática, como se demostró sobrescribiendo el archivo .desktop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:xdg-utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5C9BD904-E0D0-4B42-A654-DB7C620C33DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2009/01/06/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33137","source":"secalert@redhat.com"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=19377","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=19377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0069","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T20:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local users to cause a denial of service (recursive mutex_enter and panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la función nfs4rename_persistent_fh en el cliente NFS 4 (también conocido como NFSv4) en el kernel en Sun Solaris 10 y OpenSolaris antes de snv_102 permite a usuarios locales provocar una denegación de servicio (mutex_enter recursivo y panic) mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_101","matchCriteriaId":"9A105714-2EC3-4DB8-9F2D-4013FBAC1EE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_101","matchCriteriaId":"E42FF239-1E5F-4AF0-92FD-0AE90B00133D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://mail.opensolaris.org/pipermail/onnv-notify/2008-October/015342.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139466-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-248566-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33128","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021519","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47750","source":"cve@mitre.org"},{"url":"http://mail.opensolaris.org/pipermail/onnv-notify/2008-October/015342.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139466-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-248566-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0070","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307."},{"lang":"es","value":"Error de presencia de signo en entero en Apple Safari permite a atacantes remotos leer los contenidos de localizaciones de memoria de su elección, provocar una denegación de servicio (caída de aplicación), y posiblemente tener otro impacto desconocido a través del índice del array del array de los argumentos en una función JavaScript, posiblemente relacionado con la cuestión CVE-2008-2307."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48214","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7673","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0071","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a certain (a) replaceChild or (b) removeChild call, followed by a (1) queryCommandValue, (2) queryCommandState, or (3) queryCommandIndeterm call.  NOTE: it was later reported that 3.0.6 and 3.0.7 are also affected."},{"lang":"es","value":"Mozilla Firefox versión 3.0.5 y anteriores de 3.0.x, cuando designMode está habilitado, permite a atacantes remotos causar una denegación de servicio (desreferencia de un puntero NULL y bloqueo de aplicación) por medio de cierta llamada de (a) replaceChild o (b) removeChild, seguida por una llamada de (1) queryCommandValue, (2) queryCommandState, o (3) queryCommandIndeterm. NOTA: más tarde se informó que las versiones 3.0.6 y 3.0.7 también están afectadas."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider a crash of a client application such as Firefox to be a security issue.","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448329","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=456727","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472507","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8091","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8219","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0223.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-01/0224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=448329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=456727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0072","sourceIdentifier":"cve@mitre.org","published":"2009-01-08T19:30:11.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[\"\"] attribute value in a BODY element."},{"lang":"es","value":"Microsoft Internet Explorer 6.0 hasta 8.0 beta2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través del valor del atributo onload=screen[\"\"] en un elemento \"BODY\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta1:*:*:*:*:*:*","matchCriteriaId":"06E95EE4-23D8-40F7-9DFF-6C835AB62AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*","matchCriteriaId":"C4AC575C-3505-460F-8BB5-3ADA1F149E8D"}]}]}],"references":[{"url":"http://skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details/","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33149","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47788","source":"cve@mitre.org"},{"url":"http://skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0075","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 7 no maneja adecuadamente los errores durante un intento de acceso a los objetos eliminados, esto permite a atacantes remotos ejecutar código de su elección a través de un documento HTML manipulado; está relacionado con CFunctionPointer y la inclusión de objetos de documentos. También se conoce como \"Vulnerabilidad de Corrupción de Memoria no Iniciada\"\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*","matchCriteriaId":"E3527F41-A6ED-437D-9833-458A2C60C2A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*","matchCriteriaId":"43D64F8D-975A-4A5B-BEDF-D27D65C96A29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:itanium:*:*:*:*:*","matchCriteriaId":"9012FF99-B2F1-42F5-8366-D5071B66F42D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*","matchCriteriaId":"DBE4A4EA-A0DE-4FDE-B9EC-D8729E17A1F1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7211B5C5-6B6E-4A33-88BC-1D64CD684204"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:professional:*:*:*:x64:*","matchCriteriaId":"39DC2489-8FB9-4301-A966-268DE7D0A503"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:professional:*:*:*:x64:*","matchCriteriaId":"C551BCF9-358A-46F5-8592-E309D3EBC5F3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/51839","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33627","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0389","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-011/","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8077","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8079","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8080","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8082","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/51839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-011/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0076","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a crafted HTML document, aka \"CSS Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 7, cuando usamos  XHTML en modo estricto, permite a atacantes remotos ejecutar código de su elección a través de la directiva \"zoom style\" en conjunción con otras directivas no especificadas en una hoja de estilo en cascada (CSS)en un documento HTML manipulado, también conocido como \"Vulnerabilidad de Corrupción de Memoria CSS\". \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*","matchCriteriaId":"E0BBA081-24D5-4990-882F-69CB05CC28CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0389","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-012/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6081","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-012/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0077","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka \"Web Proxy TCP State Limited Denial of Service Vulnerability.\""},{"lang":"es","value":"El motor del cortafuegos en Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); e Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, y 2006 SP1; no gestiona adecuadamente el estado de sesión de los oyentes web, lo que permite a atacantes remotos provocar una denegación de servicio (muchas sesiones caducadas)a través de paquetes manipulados, también conocido como \"Vulnerabilidad de denegación de servicio de limitada por el estado TCP del Web Proxy\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_threat_management_gateway:-:-:medium_business:*:*:*:*:*","matchCriteriaId":"034CCD4A-9B8D-466F-AEE7-82D25613BA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"234D43DB-0FC3-4B94-8883-EEE99A427E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:standard:*:*:*:*:*","matchCriteriaId":"64ACA6AB-44C3-4B33-BEA1-04DFF004FA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:*:*:*:*:*:*","matchCriteriaId":"62CDCE9A-440C-4268-9430-BCD5E79D6ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:supportability:*:*:*:*:*:*","matchCriteriaId":"9171409D-53E1-472B-A8E8-A3471C4F3BC5"}]}]}],"references":[{"url":"http://osvdb.org/53636","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34687","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022045","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1030","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6068","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0078","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka \"Windows WMI Service Isolation Vulnerability.\""},{"lang":"es","value":"El proveedor Windows Management Instrumentation (WMI) en Microsoft Windows XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no implementa adecuadamente el aislamiento entre un conjunto de procesos distintos que (1) se ejecutan bajo la cuenta NetworkService o (2) se ejecutan bajo la cuenta LocalService, lo cual permite a usuarios locales conseguir privilegios accediendo a recursos de uno de los procesos, también conocido como \"Vulnerabilidad de aislamiento de Windows WMI Service\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*","matchCriteriaId":"A74985B6-BCA5-49E3-878B-77D7FA43070C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"}]}]}],"references":[{"url":"http://osvdb.org/53666","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022044","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6193","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0079","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka \"Windows RPCSS Service Isolation Vulnerability.\""},{"lang":"es","value":"El servicio RPCSS en Microsoft Windows XP SP2 y SP3 y Server 2003 SP1 y SP2 no implementa adecuadamente el aislamiento entre los distintos procesos que (1) todo se ejecuta bajo la cuenta NetworkService o (2) todo se ejecuta bajo la cuenta LocalService, lo que permite a usuarios locales obtener privilegios para acceder a los recursos de uno de los procesos, también conocido como \"Vulnerabilidad de aislamiento de servicios RPCSS Windows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/53667","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022044","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0080","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by leveraging incorrect thread ACLs to access the resources of one of the processes, aka \"Windows Thread Pool ACL Weakness Vulnerability.\""},{"lang":"es","value":"La clase ThreadPool en Windows Vista Gold y SP1, y Server 2008, no implementa adecuadamente el aislamiento entre un conjunto de procesos distintos que (1) se ejecutan bajo la cuenta NetworkService o (2) se ejecutan bajo la cuenta LocalService, lo cual permite a usuarios locales conseguir privilegios aprovechando hilos incorrectos ACLs para acceder a los recursos de uno de los procesos, también conocido como \"Vulnerabilidad Windows Thread Pool ACL Weakness\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*","matchCriteriaId":"7211B5C5-6B6E-4A33-88BC-1D64CD684204"}]}]}],"references":[{"url":"http://osvdb.org/53668","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022044","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"secure@microsoft.com","tags":["Permissions Required"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6177","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/53668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0081","sourceIdentifier":"secure@microsoft.com","published":"2009-03-10T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which allows remote attackers to execute arbitrary code via a crafted (1) Windows Metafile (aka WMF) or (2) Enhanced Metafile (aka EMF) image file, aka \"Windows Kernel Input Validation Vulnerability.\""},{"lang":"es","value":"La implementación de la interfaz gráfica de dispositivos (GDI) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no valida adecuadamente las entradas recibidas desde el modo de usuario, lo que permite a atacantes remotos ejecutar código arbitrariamente a través de (1) un fichero Windows Metafile (también conocido como WMF) o (2)un fichero Enhanced Metafile (también conocido como EMF) ficheros de imagen manipulados, también conocida como \"Vulnerabilidad del Kernel de Windows en la Validación de Entradas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/52522","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34117","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34012","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021826","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0659","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0082","sourceIdentifier":"secure@microsoft.com","published":"2009-03-10T20:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified \"actions,\" aka \"Windows Kernel Handle Validation Vulnerability.\""},{"lang":"es","value":"El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 no maneja adecuadamente la validación, lo que permite a usuarios locales ganar privilegios a través de una aplicación manipulada que inicia acciones inespecíficas, también conocida como \"Vulnerabilidad del Kernel de Windows en el manejo de validaciones\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/52523","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34117","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34027","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021827","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0659","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6036","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0083","sourceIdentifier":"secure@microsoft.com","published":"2009-03-10T20:30:06.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka \"Windows Kernel Invalid Pointer Vulnerability.\""},{"lang":"es","value":"El kernel en Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 no gestiona adecuadamente los punteros inválidos, lo que permite a usuarios locales ganar privilegios a través de una aplicación que inicia el uso de un puntero manipulado, también conocida como \"Vulnerabilidad del Kernel de Windows de puntero invalido\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/52524","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34117","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34025","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021827","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0659","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0084","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka \"MJPEG Decompression Vulnerability.\""},{"lang":"es","value":"DirectShow en Microsoft DirectX v8.1 y v9.0 no descomprime adecuadamente ficheros multimedia, lo cual permite a atacantes remotos ejecutar código de su elección a través de un (1) fichero MJPEG manipulado o (2) cadena video, también conocido como \"Vulnerabilidad de Descompresión MJPEG\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*","matchCriteriaId":"B2F096A3-DD19-4D54-94F4-027DBDF1A705"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*","matchCriteriaId":"70A8E96E-F752-43D2-83C3-877DE1042B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*","matchCriteriaId":"44C68B75-2B7A-450B-BA1B-03E77E03B59B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/53632","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34665","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm","source":"secure@microsoft.com"},{"url":"http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34460","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022040","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1025","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-011","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5618","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0085","sourceIdentifier":"secure@microsoft.com","published":"2009-03-10T20:30:06.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka \"SChannel Spoofing Vulnerability.\""},{"lang":"es","value":"El componente de autenticación Secure Channel (también conocido como SChannel) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008, cuando el certificado de autenticación es utilizado, no valida adecuadamente el intercambio de claves con el cliente en la capa de seguridad del transporte (TLS), lo que permite a atacantes remotos falsificar la autenticación mediante la manipulación de un paquete TLS basándose en el cocimiento del certificado pero no de la clave privada, también conocido como \"Vulnerabilidad de falsificación de SChannel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/52521","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34215","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021828","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0660","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0086","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka \"Windows HTTP Services Integer Underflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento inferior de entero en Windows HTTP Services (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008 permite a servidores HTTP remotos ejecutar código de su elección a través de valores del parámetros manipulados en una respuesta, relacionado con un manejador de error, también conocido como \"Vulnerabilidad de desbordamiento inferior de entero en Windows HTTP Services\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/53620","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34677","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34435","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022041","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1027","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6149","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0087","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data, aka \"WordPad and Office Text Converter Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el conversor de texto Word 6 en WordPad en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP1 y SP2; y el conversor de texto Word 6 en Microsoft Office Word 2000 SP3 y 2002 SP3; permite a atacantes remotos ejecutar código de su elección a través de ficheros Word 6 manipulados que contienen datos mal formados, también conocido como \"Vulnerabilidad de corrupción de memoria en WordPad y Conversor de Texto Office\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:x64:*","matchCriteriaId":"91D15A98-9ABC-4D79-9550-364A6F52B2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:itanium:*","matchCriteriaId":"5A5D4DFE-2F35-4A07-AA7F-7F545C61E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:itanium:*","matchCriteriaId":"39F303CD-DB64-4FE6-AB4F-461E5E8AFB83"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"17804445-2C63-4381-A721-7F3BB3DC645F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*","matchCriteriaId":"70C62E91-94D3-4534-985C-8236D71CC10D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"ABBA5D64-4184-4420-B7D0-A4E41359AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/53662","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022043","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5799","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0088","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an unspecified string, which allows remote attackers to execute arbitrary code via a crafted WordPerfect 6.x file, related to an unspecified counter and control structures on the stack, aka \"Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability.\""},{"lang":"es","value":"El conversor WordPerfect 6.x en Microsoft Office Word 2000 SP3 y Microsoft Office Converter Pack no valida adecuadamente la longitud de una cadena no especificada, lo cual permite a atacantes remotos ejecutar código de su elección a través de un fichero WordPerfect 6.x manipulado, también conocido como \"Vulnerabilidad de corrupción de pila en el conversor Word 2000 WordPerfect 6.x\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:2003:*:*:*:*:*:*:*","matchCriteriaId":"C6150F14-FF1A-4A2B-8114-B539520E585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53663","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022043","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0089","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to \"forward a connection\" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka \"Windows HTTP Services Certificate Name Mismatch Vulnerability.\""},{"lang":"es","value":"Servicios Windows HTTP (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, y Vista Gold permite a servidores web remotos suplantar sitios web https de su elección utilizando envenenamiento de DNS \"reenvío de conexión\" a  un sitio web https diferente que tiene un certificado válido coincidiendo con su propio nombre de dominio, pero un certificado no coincide con el nombre de dominio del host solicitado por el usuario, también conocido como \"Vulnerabilidad de desajuste de nombre de certificado en servicios Windows HTTP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*","matchCriteriaId":"D34A558F-A656-43EB-AC52-C3710F77CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://secunia.com/advisories/34677","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34437","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022041","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1027","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6027","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0090","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"Microsoft .NET Framework Pointer Verification Vulnerability.\""},{"lang":"es","value":"Microsoft .NET Framework v1.0 SP3, v1.1 SP1, y v2.0 SP1 no valida adecuadamente el código de .NET, lo que permite a atacantes remotos obtener accesos no previstos a la memoria de la pila y ejecutar código arbitrario a través de (1) una aplicación de navegador XAML (XBAP), (2) una aplicación ASP.NET manipulada, o (3) una aplicación .NET Framework manipulada, también conocido como \"Vulnerabilidad de verificación de puntero de Microsoft .NET Framework\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A419F50E-F32C-461C-95D0-978C5351FBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5716","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0091","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"Microsoft .NET Framework Type Verification Vulnerability.\""},{"lang":"es","value":"Microsoft .NET Framework v2.0, v2.0 SP1, y v3.5 no cumple adecuadamente con la limitación de igualdad de tipos en un código .NET, lo que permite a atacantes remotos ejecutar código arbitrario a traves de (1) una aplicación XAML del navegador (XABP), (2) una aplicación ASP.NET manipulada o (3) una aplicación .NET Framework manipulada, también conocido como \"Vulnerabilidad de verificación de tipos de .NET\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A419F50E-F32C-461C-95D0-978C5351FBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6451","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0093","sourceIdentifier":"secure@microsoft.com","published":"2009-03-11T14:19:15.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the \"wpad\" hostname, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature, and conduct man-in-the-middle attacks by spoofing a proxy server, via a Dynamic Update request for this hostname, aka \"DNS Server Vulnerability in WPAD Registration Vulnerability,\" a related issue to CVE-2007-1692."},{"lang":"es","value":"Servidor DNS en Microsoft Windows 2000 SP4, Server 2003 SP1 y SP2, y Server 2008, cuando las actualizaciones dinámicas están activadas, no limita el registro del nombre de host \"wpad\", lo que permite a usuarios autenticados remotamente secuestrar la funcionalidad Proxy Auto-Discovery (WPAD), y llevar a cabo ataques del tipo \"man in the middle (hombre en el medio)\" mediante la suplantación del servidor proxy a través de una petición de \"Actualización dinámica\" para ese nombre de hots. También conocida como \"Vulnerabilidad DNS Server Vulnerability in WPAD Registration\". Relacionada con el CVE-2007-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"}]}]}],"references":[{"url":"http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52519","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34217","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/33989","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021830","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138","source":"secure@microsoft.com"},{"url":"http://blog.ncircle.com/blogs/vert/archives/2009/03/successful_exploit_renders_mic.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0094","sourceIdentifier":"secure@microsoft.com","published":"2009-03-11T14:19:15.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://www.microsoft.com/technet/security/Bulletin/MS09-008.mspx\r\n\r\nMitigating Factors for WPAD WINS Server Registration Vulnerability - CVE-2009-0094\r\n\r\nMitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation.\t\r\n\r\nIf WINS server already has WPAD and ISATAP registered than an attacker will not be able to register these as well.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) \"wpad\" and (2) \"isatap\" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features, and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route, by registering one of these names in the WINS database, aka \"WPAD WINS Server Registration Vulnerability,\" a related issue to CVE-2007-1692."},{"lang":"es","value":"El servidor WINS en Microsoft Windows 2000 SP4  y Server 2003 SP1 y SP2 no limita el registro de los nombres NetBIOS (1) \"wpad\" y (2) \"isatap\", lo que permite a usuarios autenticados remotamente secuestrar las características Web Proxy Auto-Discovery (WPAD) y Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), y llevar a cabo ataques del tipo \"Man in The Middle (hombre en el medio)\" mediante la suplantación de un servidor proxy o ruta ISATAP registrando uno de esos nombres en la base de datos del WINS. También conocida como \"Vulnerabilidad WPAD WINS Server Registration\", cuestión relacionada con el CVE-2007-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52520","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34217","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34013","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021829","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6117","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0095","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Memory Validation Vulnerability.\""},{"lang":"es","value":"Microsoft Office Visio 2002 SP2, 2003 SP3 y 2007 SP1 no valida adecuadamente los datos Object de los ficheros Visio, esto permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado. También se conoce como \"Vulnerabilidad de Validación de Memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"553ADEFC-11EC-4E29-8A95-4AF59DB6CEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"6C98FD6E-B9EA-4231-8127-31A8D2D25040"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0391","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0096","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Visio 2002 SP2, 2003 SP3, y 2007 SP1 no realiza correctamente la copia de memoria para los datos de objetos, lo que permite a atacantes remotos ejecutar código a su elección a través de un documento de Visio manipulado, también conocido como \"Vulnerabilidad de corrupción de memoria\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"553ADEFC-11EC-4E29-8A95-4AF59DB6CEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"6C98FD6E-B9EA-4231-8127-31A8D2D25040"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0391","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0097","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Visio v2002 SP2 and v2003 SP3 no valida de forma adecuada el posicionamiento en memoria de los ficheros Visio, lo que permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado, también conocido como  \"Memory Corruption Vulerability\"\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"553ADEFC-11EC-4E29-8A95-4AF59DB6CEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"6C98FD6E-B9EA-4231-8127-31A8D2D25040"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0391","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6188","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0098","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2 y Exchange Server 2007 SP1; no interpreta adecuadamente las propiedades de Transport Neutral Encapsulation (TNEF), esto permite a atacantes remotos ejecutar código de su elección a través de un mensaje TNEF manipulado. También se conoce como \"Vulnerabilidad de Corrupción de Memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"E88E31D4-1120-4A18-BA65-E2C96B35E599"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"71A2E549-5F21-4842-BEB3-380CD4029C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"9C218952-1BB8-4915-B31F-9D23543FC83E"}]}]}],"references":[{"url":"http://osvdb.org/51837","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33838","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114","source":"secure@microsoft.com"},{"url":"http://osvdb.org/51837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0099","sourceIdentifier":"secure@microsoft.com","published":"2009-02-10T22:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka \"Literal Processing Vulnerability.\""},{"lang":"es","value":"El proveedor Electronic Messaging System Microsoft Data Base (EMSMDB32) en Microsoft Exchange 2000 Server SP3 y Exchange Server 2003 SP2, utilizado como Exchange System Attendant, permite a atacantes remotos producir una denegación de servicio (caída de la aplicación) a través de una comando MAPI malformado, también conocido como \"vulnerabilidad de procesado literal\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"E88E31D4-1120-4A18-BA65-E2C96B35E599"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"71A2E549-5F21-4842-BEB3-380CD4029C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"9C218952-1BB8-4915-B31F-9D23543FC83E"}]}]}],"references":[{"url":"http://osvdb.org/51838","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/33838","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159","source":"secure@microsoft.com"},{"url":"http://osvdb.org/51838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0100","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 do not properly parse the Excel spreadsheet file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that contains a malformed object with \"an offset and a two-byte value\" that trigger a memory calculation error, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, y 2007 SP1; Excel en Microsoft Office 2004 y 2008 para Mac; Microsoft Office Excel Viewer y Excel Viewer 2003 SP3; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 no parsea adecuadamente el fichero con formato de hoja de cálculo Excel, lo cual permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo manipulada que contiene un objeto mal formado, también conocido como \"Vulnerabilidad de corrupción de memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"ECDF1C1D-EF63-4A3E-AEE2-2D2D9FDBF368"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"}]}]}],"references":[{"url":"http://osvdb.org/53665","source":"secure@microsoft.com"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-16.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/502696/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022039","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1023","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6043","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-16.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502696/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0102","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka \"Project Memory Validation Vulnerability.\""},{"lang":"es","value":"Microsoft Project 2000 SR1 y 2002 SP1 y Office Project 2003 SP3 no maneja de manera apropiada la reserva de memoria para ficheros Project, lo que permite a atacantes remotos ejecutar código de su elección mediante un fichero manipulado. También conocido como \"Vulnerabilidad Project Memory Validation\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_project:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"2849085E-2340-4B66-A37A-2C673DC257C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_project:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"7709A711-DAB4-41D6-B6D0-9E535F33CFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_portfolio_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"349DD10D-6BA9-4AF0-9BE2-B8F29E826C25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_portfolio_server:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"1D4EBB7F-ECE8-4333-8C97-15443FC17B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_server:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"D52BBD51-F67B-4AC7-8C96-7E97A85BBC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"AB1D7F2D-FE9F-4BFB-9708-18D1DF8C2F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project_server:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"DF94CD56-427C-4898-BF05-DCEFEF4AE776"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-074","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6298","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0103","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.php, the (2) apps_path[themes] parameter to plugin/themes/default/init.php, and the (3) apps_path[libs] parameter to lib/function.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos en PHP en playSMS v0.9.3 permiten a atacantes remotos ejecutar código PHP de su elección a través una URL en el parámetro (1) apps_path[plug] de plugin/gateway/gnokii/init.php, el parámetro (2) apps_path[themes] de plugin/themes/default/init.php, y el parámetro (3) apps_path[libs] de lib/function.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:playsms:playsms:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"27627EBF-A5E7-4E93-9267-10A01792485C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33138","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0104","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en EZpack v4.2b2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"qType\" en una acción \"webboard prog\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:se-ed:ezpack:4.2:beta2:*:*:*:*:*:*","matchCriteriaId":"C4160650-0CD2-4371-8587-B45519FACB18"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33131","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7680","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0105","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web script or HTML via the mdfd parameter in a prog action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en EZpack v4.2b2 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"mdfd\" en una acción \"prog\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:se-ed:ezpack:4.2:beta2:*:*:*:*:*:*","matchCriteriaId":"C4160650-0CD2-4371-8587-B45519FACB18"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33131","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7680","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0106","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the user_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en profile.php en PHPAuctions (también conocido como PHPAuctionSystem) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"user_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauctions:phpauctions:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C9F1BCB1-F069-48FA-8EFA-FC4BA2CA4703"}]}]}],"references":[{"url":"http://osvdb.org/51144","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43264","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7672","source":"cve@mitre.org"},{"url":"http://osvdb.org/51144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0107","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script or HTML via the user_id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profile.php en PHPAuctions (también conocido como PHPAuctionSystem) permite a atacantes remotos inyectar web script o HTML a través del parámetro \"user_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauctions:phpauctions:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C9F1BCB1-F069-48FA-8EFA-FC4BA2CA4703"}]}]}],"references":[{"url":"http://osvdb.org/51145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7672","source":"cve@mitre.org"},{"url":"http://osvdb.org/51145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0108","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAME, and (4) PHPAUCTION_RM_EMAIL cookies."},{"lang":"es","value":"PHPAuctions (también conocido como PHPAuctionSystem) permite a atacantes remotos evitar la autenticación y conseguir acceso de administrador a través de las cookies modificadas (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAME, y (4) PHPAUCTION_RM_EMAIL"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpauctions:phpauctions:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C9F1BCB1-F069-48FA-8EFA-FC4BA2CA4703"}]}]}],"references":[{"url":"http://osvdb.org/51146","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33120","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7674","source":"cve@mitre.org"},{"url":"http://osvdb.org/51146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0109","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en RiotPix v0.61 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\".\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*","versionEndIncluding":"0.61","matchCriteriaId":"579A8B17-A387-456B-B69B-E61C8AF494A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:.05:*:*:*:*:*:*:*","matchCriteriaId":"37D890AB-C2E9-4EB8-B93B-8049268AF18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.5:*:*:*:*:*:*:*","matchCriteriaId":"5E2F6D77-C16A-41D3-A310-8F791DEE374B"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.51:beta:*:*:*:*:*:*","matchCriteriaId":"E1D5D5F6-955C-4B13-85DA-430CCB3F9B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.52:*:*:*:*:*:*:*","matchCriteriaId":"B9D4B3E4-FFA6-4113-91D1-3A7AB06BB4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.60:*:*:*:*:*:*:*","matchCriteriaId":"364B2C1A-621D-402F-9C95-C6102D5DBC9F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33132","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7682","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0110","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en read.php en RiotPix v0.61 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"forumid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:*:*:*:*:*:*:*:*","versionEndIncluding":"0.61","matchCriteriaId":"579A8B17-A387-456B-B69B-E61C8AF494A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:.05:*:*:*:*:*:*:*","matchCriteriaId":"37D890AB-C2E9-4EB8-B93B-8049268AF18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.5:*:*:*:*:*:*:*","matchCriteriaId":"5E2F6D77-C16A-41D3-A310-8F791DEE374B"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.51:beta:*:*:*:*:*:*","matchCriteriaId":"E1D5D5F6-955C-4B13-85DA-430CCB3F9B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.52:*:*:*:*:*:*:*","matchCriteriaId":"B9D4B3E4-FFA6-4113-91D1-3A7AB06BB4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:riotpix:riotpix:0.60:*:*:*:*:*:*:*","matchCriteriaId":"364B2C1A-621D-402F-9C95-C6102D5DBC9F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0111","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en frontpage.php en Goople CMS v1.8.2 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goople_cms:goople_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.2","matchCriteriaId":"A7031286-EAF1-42D9-87D2-F5BECF7E6ADA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4894","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33135","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0112","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to create or modify accounts as administrators via the username, password, and name parameters."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en admin/agent_edit.asp en PollPro v3.0 permite a atacantes remotos crear o modificar cuentas de aministrador a través del nombre de usuario, contraseña y parámetros \"name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:expinion:poll_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"08751AE7-FE07-498F-8562-2A9F9A030533"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123117044713213&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4895","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47754","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123117044713213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0113","sourceIdentifier":"cve@mitre.org","published":"2009-01-09T18:30:03.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_CMS_LIBRARY_PATH HTTP header."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en attachmentlibrary.php en el componente XStandard para Joomla! v1.5.8 y versiones anteriores permite a atacantes remotos listar directorios de su elección a través de .. (punto punto) en la cabecera HTTP X_CMS_LIBRARY_PATH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:xstandard:*:*:*:*:*:*:*:*","matchCriteriaId":"E79D9A84-FC8C-41EB-80EF-FC08108FF518"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.8","matchCriteriaId":"0BC66D33-2642-464D-B7B4-4809F09B33A9"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B2D9FB89-D522-410F-8E68-763E9931E955"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D548B3C9-483F-492C-A6BB-694B7217FEE8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9813E813-2983-4471-9E56-6F254810A66B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A4F4F9E7-BA44-4235-A246-DB6C432C3873"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"495BD724-45BE-4214-B120-3A83BD9AD11B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"}]}]}],"references":[{"url":"http://secunia.com/advisories/33377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4896","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33143","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7691","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0114","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to \"a potential Clickjacking issue variant.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en Administrador de configuración de Adobe Flash Player 9.x antes de 9.0.159.0, 10.x antes de 10.0.22.87 y, posiblemente otras versiones, permite a atacantes remotos engañar a un usuario para que visite una URL arbitraria a través de vectores desconocidos, relacionados con \"una posible variante del problema de Clickjacking.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.12.36","matchCriteriaId":"67971799-2A4E-4FD2-BF8B-5E0B82032E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*","matchCriteriaId":"A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*","matchCriteriaId":"9E1093EF-0A76-4757-9D8D-6808A5D95C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.15.3","matchCriteriaId":"A72D07B5-1311-4653-8E84-7414E11A797C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021751","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0743","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48902","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16419","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6662","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0115","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon."},{"lang":"es","value":"multipath-tools en SUSE openSUSE v10.3 hasta v11.0 y SUSE Linux Enterprise Server (SLES) v10 utiliza permisos de escritura a todos para el fichero del socket (también conocido como /var/run/multipathd.sock), permitiendo a usuarios locales enviar comandos de su elección al demonio \"multipath\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:christophe.varoqui:multipath-tools:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5D1B5821-FF7F-41DB-807D-EF28B3C4ADF0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix_lx:2.0:-:*:*:*:*:*:*","matchCriteriaId":"BE386B55-B9FA-41BD-AD00-EB6A6552C34E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix_lx:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"965928CF-FDE4-42F7-9486-CB4D2F011225"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix_lx:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"1E61EBAF-F034-4070-BFD5-68AD1239CD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:message_networking:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E871348D-8FA1-4C77-BB8E-BECF9CF2FFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"34E42226-4F91-4EEB-8151-71BA15E8B7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90E377-B821-4508-B1AB-B10F47975E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"FBA21139-B8E2-42A8-AC1D-8DA00F230D8B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:open_enterprise_server:-:*:*:*:*:*:*:*","matchCriteriaId":"C5C0C136-E406-4628-994A-682E8E729B50"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.0","matchCriteriaId":"9A8362BB-5717-4714-BD92-220DDB646D07"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"68B14008-5E0A-4187-AF93-DE2FF5BA5921"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*","matchCriteriaId":"38C3AEB0-59E2-400A-8943-60C0A223B680"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:ctpview:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"A2953793-3D79-4128-A841-EDAF50095FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:ctpview:7.1:-:*:*:*:*:*:*","matchCriteriaId":"D6B30D89-FF23-4818-A63D-7DE5C3328165"}]}]}],"references":[{"url":"http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://launchpad.net/bugs/cve/2009-0115","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34694","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34710","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34759","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-128.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1767","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9214","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://launchpad.net/bugs/cve/2009-0115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-128.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-0119","sourceIdentifier":"cve@mitre.org","published":"2009-01-14T23:30:04.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file."},{"lang":"es","value":"Desbordamiento de búfer en Microsoft Windows XP SP3 , permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución de código de su elección a través de un archivo .chm manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4912","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33204","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7720","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0120","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\\r\\n\\r\\n string data."},{"lang":"es","value":"El IBM WebSphere DataPower XML Security Gateway XS40 con firmware 3.6.1.5, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) mediante el envío de información sobre una conexión SSL, como se ha demostrado mediante la cadena de datos abc\\r\\n\\r\\n."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5E365BA2-946C-429E-A732-A9E13EED79E0"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4911","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499870/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33169","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021547","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0111","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499870/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0121","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T00:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en frontpage.php en Goople CMS CMS v1.8.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"password\". NOTA: el origen de esta información es desconocido; los detalles se han obtenido únicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goople_cms:goople_cms:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B30CEFA6-0167-4BDC-8326-90BD57A104B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0122","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"hplip.postinst in HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership of its configuration files within home directories."},{"lang":"es","value":"hplip.postinst en HP Linux Imaging and Printing (HPLIP) v2.7.7 y v2.8.2 en Ubuntu permite a usuarios locales cambiar la propiedad de ficheros a su elección a través de manipulaciones inespecificadas de manera previa a la instalación o mejora del HPLIP por parte del administrador, relacionado con los intentos de corrección de propietario en sus ficheros de configuración en los directorios locales."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of hplip as shipped with Red Hat Enterprise Linux 5.\n","lastModified":"2009-01-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hplip:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"ED2C0484-7995-488C-BF9D-61A4EC318F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hplip:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"205AA0F1-796F-49EA-933F-245B558F4C3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33539","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33249","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-708-1","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/191299","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-708-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/191299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0123","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to read arbitrary files on a client machine via vectors related to the association of Safari with the (1) feed, (2) feeds, and (3) feedsearch URL types for RSS feeds.  NOTE: as of 20090114, the only disclosure is a vague pre-advisory. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad inespecífica en Apple Safari en Mac OS X v10.5 y Windows permitiría a atacantes remotos leer ficheros de su elección en un cliente a través de vectores relacionados con la asociación de Safari con (1) suscripción (2) suscripciones y (3) búsqueda de suscripciones de tipo URL para suscripción de RSS. NOTA: Hasta el 14-01-2009 solo se ha revelado un preaviso vago. Sin embargo, debido a que proviene de un conocido desarrollador se le esta asignando un identificador CVE con la finalidad de su seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://brian.mastenbrook.net/display/27","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=5689","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33458","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33234","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021581","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47917","source":"cve@mitre.org"},{"url":"http://brian.mastenbrook.net/display/27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=5689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0124","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL) tqsllib 2.0 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"La función tqsl_verifyDataBlock en American Radio Relay League (ARRL) tqsllib v2.0 no comprueba adecuadamente el valor de retorno de la función OpenSSL EVP_VerifyFinal, lo que permitiría a atacantes remotos evitar la cadena de validación de certificado a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arrl:tqsllib:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C502AE9C-127A-4E16-A442-306C4FE00796"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33543","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479650","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00557.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00557.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0125","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the upstream vendor. nasl/nasl_crypto2.c in the Nessus Attack Scripting Language library (aka libnasl) 2.2.11 does not properly check the return value from the OpenSSL DSA_do_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: the upstream vendor has disputed this issue, stating \"while we do misuse this function (this is a bug), it has absolutely no security ramification."},{"lang":"es","value":"** DISPUTADA ** NOTA: este problema ha sido disputado por el proveedor de origen. nasl/nasl_crypto2.c en la librería Nessus Attack Scripting Language (también conocida como libnasl) 2.2.11 no comprueba correctamente el valor de retorno de la función DSA_do_verify function de OpenSSL, lo que permite a atacantes remotos evadir la validación de una cadena de certificados a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077. NOTA: el proveedor de origen ha disputado este problema, diciendo que 'aunque hacemos un uso indebido de esta función (se trata de un bug), no tiene ninguna ramificación de seguridad.'"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:finkproject:libnasl:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E21F62BE-A2DD-4FAB-9745-8BB7B6AF255D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2009-January/002133.html","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2009-January/002133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0126","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC) 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSA_public_decrypt function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"La función decrypt_public en lib/crypt.cpp en el cliente Berkeley Open Infrastructure for Network Computing (BOINC) v6.2.14 y v6.4.5, no comprueba adecuadamente el valor de retorno de la función OpenSSL RSA_public_decrypt, lo que permitiría a atacantes remotos evitar la validación en cadena de los certificados a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley:boinc_client:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"53F44CB8-229D-4295-AA10-818D4039B259"},{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley:boinc_client:6.4.5:*:*:*:*:*:*:*","matchCriteriaId":"43504B16-DE5D-4D14-8B69-CDDD3125134C"}]}]}],"references":[{"url":"http://boinc.berkeley.edu/trac/changeset/16883","source":"cve@mitre.org"},{"url":"http://boinc.berkeley.edu/trac/ticket/823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33828","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479664","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00034.html","source":"cve@mitre.org"},{"url":"http://boinc.berkeley.edu/trac/changeset/16883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://boinc.berkeley.edu/trac/ticket/823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0127","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because \"these functions are not used anywhere in m2crypto."},{"lang":"es","value":"** CUESTIONADA ** M2Crypto no comprueba adecuadamente el valor de retorno de las funciones OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify y ECDSA_do_verify, lo que permitiria a atacantes remotos evitar la validacion del certificado en cadena a traves de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077. NOTE: Un fabricante de Linux cuestiona la relevancia de este informe en el producto M2Crypto debido a que \"esas funciones no se utilizan en ningun sitio de m2crypto\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  M2Crypto provides python interfaces to multiple OpenSSL functions.  Neither of those interfaces is further used by M2Crypto in an insecure way.  Additionally, no application shipped in Red Hat Enterprise Linux is known to use affected interfaces provided by M2Crypto.\n\nFurther details can be found in the following bug report: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0127#c1","lastModified":"2009-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heikkitoivonen:m2crypto:-:*:*:*:*:*:*:*","matchCriteriaId":"0FDB41E1-9DB5-4F02-AAA3-8CB475EE073F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479676","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]}]}},{"cve":{"id":"CVE-2009-0128","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"plugins/crypto/openssl/crypto_openssl.c en Simple Linux Utility for Resource Management (anteriormente conocido como SLURM o slurm-llnl) no comprueba adecuadamente los valores de retorno de la funcion OpenSSL EVP_VerifyFinal, lo que permite a atacantes remotos evitar la validacion de la cadena de certificados a traves de una firma SSL/TLS malformada, una vulneribilidad similar a CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"0C7A3D60-1294-43AF-87BC-42885726B9B7"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0129","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"libcrypt-openssl-dsa-perl no comprueba adecuadamente el valor de retorno de las funciones OpenSSL_DSA_verify y DSA_do_verify, lo que permitiria a atacantes remotos evitar la validacion de la cadena de certificados a traves de una firma SSL/TLS malformada, similar a la vulnerabilidad CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl-openssl:libcrypt-openssl-dsa-perl:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C330D871-2AA0-4722-93D0-D7010AF81701"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0130","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a package maintainer disputes this issue, reporting that there is a proper check within the only code that uses the applicable part of crypto_drv.c, and thus \"this report is invalid."},{"lang":"es","value":"** CUESTIONADA ** lib/crypto/c_src/crypto_drv.c  en erlang no comprueba adecuadamente el retorno del valor de la función OpenSSL DSA_do_verify, esto permitiría a atacantes remotos eludir la validación de la cadena de certificados a través de una firma SSL/TLS, una vulnerabilidad similar a CVE-2008-5077. NOTA: Un desarrollador del paquete cuestiona los hechos, reportando que existe una comprobación adecuada dentro del unico codigo que utiliza la parte aplicable de crypto_drv.c, por lo que \"este informe es invalido\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"37E9C67B-2EFC-457D-B426-92A10165C55F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0131","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of service (panic) via the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call."},{"lang":"es","value":"La implementacion UFS en el Kernel de Sun OpenSolaris snv_29 hasta la snv_90 permite a usuarios locales producir una denegacion de servicio (produciendo un panic) a traves de la prueba unica posix_fallocate en el conjunto de pruebas SUSv3 POSIX, relacionado con una llamada F_ALLOCSP fcntl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"}]}]}],"references":[{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6711995","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33267","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021600","source":"cve@mitre.org"},{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6711995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0132","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument)."},{"lang":"es","value":"Desbordamiento de entero en la función aio_suspend en Sun Solaris v8 hasta la v10 y OpenSolaris cuando el modo 32-bit esta activado, permitiendo a usuarios locales causar una denegación de servicio (causando un panic) a través de un valor de entero largo en el segundo argumento (anteriormente conocido como argumento \"nent\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","matchCriteriaId":"097D3A0C-8C75-4951-94C7-4C444DE2B0D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33516","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-59-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247986-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33188","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021553","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2009-001.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0099","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-59-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-247986-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2009-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0133","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long \"Index file\" field, possibly a related issue to CVE-2006-0564."},{"lang":"es","value":"Desbordamiento de búfer en Microsoft HTML Help Workshop v4.74 y anteriores permite a atacantes dependientes del contexto ejecutar codigo a su elección a través del un fichero .hhp con un campo \"Index file\" largo, posiblemente relacionado con CVE-2006-0564."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:html_help_workshop:4.74:*:*:*:*:*:*:*","matchCriteriaId":"DA210410-9163-457A-A792-E64D905E817B"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4914","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7727","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0134","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the (1) DoSaveFile or (2) DoSaveHtmlFile method.  NOTE: vector 1 could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el Control ActiveX EasyGrid.SGCtrl.32 en EasyGrid.ocx v1.0.0.1 en AAA EasyGrid ActiveX v3.51, permite a atacantes remotos crear y sobrescribir ficheros de su elección a través del método (1) DoSaveFile o (2) DoSaveHtmlFile. Nota: vector 1 esto se podrá utilizar para ejecución de código creando archivos ejecutables en carpetas Startup o accediendo a archivos utilizando URLs hcp://. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:share2:easy_grid_control:3.51:*:*:*:*:*:*:*","matchCriteriaId":"1C432689-B2FA-42E4-B7F9-5C1C7E640E22"}]}]}],"references":[{"url":"http://secunia.com/advisories/33537","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4913","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33272","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47946","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0135","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a large (1) nlen or (2) vlen Tag value, each of which triggers a heap-based buffer overflow."},{"lang":"es","value":"Múltiples desbordamientos de entero en la función Audible::Tag::readTag en metadata/audible/audibletag.cpp en Amarok v1.4.10 hasta v2.0.1 permite a atacantes remotos ejecutar código de su elección mediante el fichero Audible Audio (.aa) con un valor largo (1) nlen o (2) vlen Tag, cada uno de los cuales provoca un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"7C802191-CC41-4E8A-BC22-EC3F278610C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DF11E67A-C23B-402E-9FB5-86CED4A40749"},{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D526340C-ED92-4A12-BCAC-2FEADBC8900A"}]}]}],"references":[{"url":"http://amarok.kde.org/en/releases/2.0.1.1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=254896","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/14/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34407","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-34.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4915","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2009-002.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websvn.kde.org/?view=rev&revision=908391","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=908401","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=908415","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1706","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499984/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33210","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021558","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-739-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0100","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479560","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479946","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html","source":"cve@mitre.org"},{"url":"http://amarok.kde.org/en/releases/2.0.1.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=254896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-34.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2009-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websvn.kde.org/?view=rev&revision=908391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=908401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=908415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499984/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0136","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tag value, each of which can lead to an invalid pointer dereference, or the writing of a 0x00 byte to an arbitrary memory location, after an allocation failure."},{"lang":"es","value":"Múltiples errores de índice de array en la función Audible::Tag::readTag en metadata/audible/audibletag.cpp en Amarok v1.4.10 hasta v2.0.1, permiten a los atacantes remotos causar una denegación de servicios (caída de la aplicación) o ejecutar código de su elección mediante un archivo Audible Audio (.aa) con un valor (1) nlen o (2) vlen Tag manipulado, cda uno de los cuales puede provocar un puntero de referencia inválido, o la escritura de un byte 0x00 a una localización de memoria de su elección, tras un fallo de asignación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"7C802191-CC41-4E8A-BC22-EC3F278610C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DF11E67A-C23B-402E-9FB5-86CED4A40749"},{"vulnerable":true,"criteria":"cpe:2.3:a:amarok:amarok:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D526340C-ED92-4A12-BCAC-2FEADBC8900A"}]}]}],"references":[{"url":"http://amarok.kde.org/en/releases/2.0.1.1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=254896","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/14/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34407","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-34.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4915","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2009-002.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websvn.kde.org/?view=rev&revision=908391","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=908401","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=908415","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1706","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499984/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33210","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021558","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-739-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0100","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479560","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479946","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html","source":"cve@mitre.org"},{"url":"http://amarok.kde.org/en/releases/2.0.1.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=254896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-34.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2009-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websvn.kde.org/?view=rev&revision=908391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=908401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=908415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499984/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00708.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0137","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:05.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to \"input validation issues.\""},{"lang":"es","value":"Vulnerabilidades múltiples no especificadas en Safari RSS en Apple Mac OS X v10.4.11 y v10.5.6, y Windows XP y Vista, que permite a los atacantes remotos ejecutar arbitrariamente JavaScript en la zona de seguridad local a través de una suscripción manipulada: URL, relativa a \"asunto de validación de entrada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0138","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:05.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration."},{"lang":"es","value":"servermgrd (Server Manager) en Apple Mac OS X v10.5.6 no valida apropiadamente la autenticación de credenciales, el cual permite a los atacantes remotos modificar el sistema de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33813","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0139","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:05.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause a denial of service (system shutdown) or execute arbitrary code via a crafted SMB file system that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en el componente SMB en Apple Mac OS X v10.5.6 que permite a los servidores remotos SMB causar una denegación de servicios (caída del sistema) o ejecutar arbitrariamente código a través de archivos de sistemas SMB manipulados que lanzan un un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0140","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:05.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service (memory exhaustion and system shutdown) via a crafted file system name."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente SMB en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los servidores SMB remotos causar una denegación de servicios (agotamiento de memoria y caída del sistema) a través de nombres de ficheros del sistema manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0141","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T00:30:05.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user."},{"lang":"es","value":"XTerm en Apple Mac OS X v10.4.11 y v10.5.6, cuando usado con luit, crea dispositivos tty con permisos inseguros de escritura, el cual permite a los usuarios locales escribir a el Xterm de otro usuario."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/alerts/2009/Feb/1021729.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33798","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48727","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/alerts/2009/Feb/1021729.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0142","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T23:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to \"file enumeration logic.\""},{"lang":"es","value":"Condición de carrera en AFP Server de Apple Mac OS X v10.5.6, permite a usuarios locales provocar una denegación de servicio (bucle infinito) a través de vectores no especificados relacionados con \"lógica en la enumeración de ficheros\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33812","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0143","sourceIdentifier":"cve@mitre.org","published":"2009-03-14T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast."},{"lang":"es","value":"Apple iTunes antes de la versión 8.1 no informa adecuadamente al usuario sobre el origen de una solicitud de autenticación, lo que facilita a los servidores podcast remotos a engañar a un usuario para que proporcione su nombre de usuario y contraseña al suscribirse a un podcast debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*","versionEndExcluding":"8.1","matchCriteriaId":"2318C358-C51B-40E8-BD3B-8520FE5517B3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52579","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34254","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021843","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3487","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34094","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0702","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49201","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0144","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for \"secure cookies\" that are sent over unencrypted HTTP connections."},{"lang":"es","value":"CFNetwork en Apple Mac OS X v10.5 antes de v10.5.7 no analiza adecuadamente las cabeceras Set-Cookie no válidas, lo cual permite a atacantes remotos obtener información sensible mediante la captura de trafico de la red de \"cookies seguras\" que son enviados a través de conexiones HTTP sin encriptar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022214","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50479","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0145","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers memory corruption."},{"lang":"es","value":"CoreGraphics en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo PDF manipulado que provoca la corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022209","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50481","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0146","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg."},{"lang":"es","value":"Múltiples desbordamientos del búfer en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, y otros productos permiten a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado, relacionado a (1) JBIG2SymbolDict::setBitmap y (2) JBIG2Stream::readSymbolDictSeg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34568","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022073","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490612","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0147","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap."},{"lang":"es","value":"Múltiples desbordamientos enteros en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anterior, y otros productos permiten a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado, relacionado a (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg y (3) JBIG2Stream::readGenericBitmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34568","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022073","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490614","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0148","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Cscope anterior a versión 15.7a, permiten a los atacantes remotos ejecutar código arbitrario por medio de cadenas largas en entradas como (1) tokens de código fuente y (2) nombres de ruta, relacionados con desbordamiento de enteros en algunos casos. NOTA: este problema se presenta debido a una corrección incompleta del CVE-2004-2541."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:13.0:*:*:*:*:*:*:*","matchCriteriaId":"27476BD2-FC3B-46A1-8810-DB3DB29106C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.0bl2:*:*:*:*:*:*:*","matchCriteriaId":"17C00B4F-D84A-4CF6-B4BF-D0F574CBFD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.1:*:*:*:*:*:*:*","matchCriteriaId":"78590FBB-C9CE-42B7-83C9-1F5FAD11A2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.3:*:*:*:*:*:*:*","matchCriteriaId":"E821D0F7-D928-4C2F-89DE-7B46968A2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*","matchCriteriaId":"0837A120-86AE-4ABB-AB38-F3D573C5064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.5:*:*:*:*:*:*:*","matchCriteriaId":"E2F1D020-6884-4D6D-AB04-88119CB53F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.6:*:*:*:*:*:*:*","matchCriteriaId":"16BA0384-4466-467D-80E4-44DAE2B70038"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.7:*:*:*:*:*:*:*","matchCriteriaId":"10D85508-318A-43F5-B6C8-E090FB678DAC"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-02.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=947983","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1806","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/9","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1102.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34805","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022218","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490667","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=947983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0149","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption."},{"lang":"es","value":"Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (cuelgue de aplicación) por tratar de montar una imagen de disco (disperso) elaborado lo cual provoca la corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34942","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022217","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50484","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0150","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Apple Mac OS X v10.5 antes de v10.5.7 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (cuelgue de aplicación) por tratar de montar una imagen de disco dispersa elaborada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022217","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50483","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0151","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and \"manage applications or use Expose\" via unspecified vectors."},{"lang":"es","value":"El protector de pantalla en el Dock en Apple Mac OS X v10.5 anterior a v10.5.8 no previene gestos multi-tactiles cuatro-dedos (four-finger Multi-Touch), lo cual permite a atacantes próximos físicamente eludir el bloqueo y \"gestionar aplicaciones o exposición al uso\" a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56847","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52421","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0152","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"iChat en Apple Mac OS X v10.5 antes de v10.5.7 desactiva SSL para la comunicación de AOL Instant Messenger (AIM) en determinadas circunstancias que sean incompatibles con la configuración \"Require SSL\", lo cual permite a atacantes remotos obtener información sensible capturando el tráfico de la red."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.7","matchCriteriaId":"14EDAEBB-D669-4439-A088-7A7AB31C98FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.7","matchCriteriaId":"7F269296-49E2-41A2-893B-7A03B0008C4C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022212","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50487","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0153","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks."},{"lang":"es","value":"International Components para Unicode (ICU) en Apple Mac OS X v10.5 antes de v10.5.7 no maneja correctamente las secuencias de bytes no válidos durante la conversión a Unicode, lo cual podría permitir a atacantes remotos realizar ataques de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://bugs.icu-project.org/trac/ticket/5691","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35498","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35584","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1122.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34974","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50488","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11366","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html","source":"cve@mitre.org"},{"url":"http://bugs.icu-project.org/trac/ticket/5691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0154","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Apple Type Services (ATS) en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario a través de una fuente Compact Font Format (CFF) elaborada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503597/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022218","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50478","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503597/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0155","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento inferior de enteros en CoreGraphics en Apple Mac OS X v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo PDF elaborado creado que desencadena un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022209","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50482","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0156","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable that triggers an out-of-bounds memory read."},{"lang":"es","value":"Launch Services en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos provocar una denegación de servicio (cuelgue persistente de Finder) a través de un ejecutable elaborado \"Mach-O\" que desencadena una lectura fuera de los límites de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34932","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022215","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50490","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0157","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers."},{"lang":"es","value":"Desbordamiento de búfer basado pila en CFNetwork en Apple Mac OS X v10.5 antes de v10.5.7 permite a servidores web remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de cabeceras HTTP largas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022211","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50480","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0158","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet server."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en telnet en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un nombre de host largo para un servidor telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0159","sourceIdentifier":"cve@mitre.org","published":"2009-04-14T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función cookedprint en ntpq/ntpq.c en ntpq en NTP versiones anteriores a v4.2.4p7-RC2 permite a servidores NTP remotos ejecutar código de su elección a través de respuestas manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:rc1:*:*:*:*:*:*","versionEndIncluding":"4.2.4p7","matchCriteriaId":"E94AD088-AEF8-4708-9EAE-1A46F7C4DC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.72:*:*:*:*:*:*:*","matchCriteriaId":"25AB2D70-2807-4970-ACD3-9B4751A1F9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.73:*:*:*:*:*:*:*","matchCriteriaId":"06C78C19-5A09-4883-8144-AE861A244FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.90:*:*:*:*:*:*:*","matchCriteriaId":"437C8BA8-F437-4166-838D-EDC64E7A67DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.91:*:*:*:*:*:*:*","matchCriteriaId":"104AEC97-3C2A-48D2-BA63-08502F88F8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.92:*:*:*:*:*:*:*","matchCriteriaId":"87D67E30-E303-4F79-9929-4A5B587FCDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.93:*:*:*:*:*:*:*","matchCriteriaId":"B9BD95B5-322C-4CDC-A2DB-A06D4DA3B104"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.94:*:*:*:*:*:*:*","matchCriteriaId":"0BD63969-D18D-41AF-9814-DA1A207BDE80"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.95:*:*:*:*:*:*:*","matchCriteriaId":"7EAD8958-173A-4FCC-9420-A148BA5F73E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.96:*:*:*:*:*:*:*","matchCriteriaId":"B271F6AD-D829-4671-8FA7-7D921364B426"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.97:*:*:*:*:*:*:*","matchCriteriaId":"C25E03A8-46B5-4AC7-8506-4C255D7CC400"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.98:*:*:*:*:*:*:*","matchCriteriaId":"2C76CD53-CC9F-491A-952F-9A82D6E20058"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E749D64E-5C47-4A34-9F3C-1D34F8348058"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"EE0C9CBB-D52F-4F7C-B343-E685A3996BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CB90A3FB-B107-46CF-A846-48EE0EDF637A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"088BFFA4-1AAB-4699-9793-F731A81B296A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B3475779-383A-4128-9145-474EC08030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"782BAA3D-A639-4B25-83F0-741074C88D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p2:*:*:*:*:*:*:*","matchCriteriaId":"EF367FA4-2C7F-4040-89DE-8A97A069A802"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p3:*:*:*:*:*:*:*","matchCriteriaId":"01D11498-3FC4-4890-9B10-BBA74A01C9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p4:*:*:*:*:*:*:*","matchCriteriaId":"9D085796-5574-4EF3-8CD4-3CCEF2867823"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5E0D2303-95BD-4260-86FC-3DFED8532092"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:*","matchCriteriaId":"AA843BCD-372A-42F5-A8C0-1AD32FA9E94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*","matchCriteriaId":"B980A178-2958-4B36-8AD8-3932B12C5A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*","matchCriteriaId":"5D65210A-F80E-4019-91DA-49838369E03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*","matchCriteriaId":"29FAB224-3493-4273-A655-10BE44F5B5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:*","matchCriteriaId":"093F0DD2-9E88-4138-AFF5-69105E7F2C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*","matchCriteriaId":"B3590927-E242-411D-822A-33337D6B8A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:*","matchCriteriaId":"20FCD55C-D4A8-4544-81AF-C920B3B48A2F"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc","source":"cve@mitre.org"},{"url":"http://bugs.pardus.org.tr/show_bug.cgi?id=9532","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"cve@mitre.org"},{"url":"http://ntp.bkbits.net:8080/ntp-stable/?PAGE=gnupatch&REV=1.1565","source":"cve@mitre.org"},{"url":"http://osvdb.org/53593","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1039.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1040.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35137","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35138","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35166","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35308","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1801","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:092","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34481","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022033","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490617","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49838","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19392","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5411","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8386","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8665","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1651.html","source":"cve@mitre.org"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1144","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://usn.ubuntu.com/777-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.pardus.org.tr/show_bug.cgi?id=9532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ntp.bkbits.net:8080/ntp-stable/?PAGE=gnupatch&REV=1.1565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1651.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://usn.ubuntu.com/777-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0160","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image that triggers memory corruption."},{"lang":"es","value":"QuickDraw Manager en Apple Mac OS X v10.4.11 y v10.5 antes de v10.5.7 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen PICT elaborado lo que provoca la corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34937","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022209","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0161","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate."},{"lang":"es","value":"El módulo OpenSSL::OCSP de Ruby en Apple Mac OS X v10.5 anterior a v10.5.7 malinterpreta una respuesta no válida no especificada como un certificado de validación OCSP válido, lo que podría permitir a atacantes remotos falsear certificados de autenticación a través de un certificado revocados"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50592","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0162","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Safari v3.2.3 y v4 Beta Pública, en el Apple Mac OS X v10.5 y anteriores a v10.5.7 y Windows permite a atacantes remotos inyectar script web arbitrario o HTML a través de una suscripción manipulada: URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35056","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34925","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022206","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1298","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50476","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0163","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow."},{"lang":"es","value":"El desbordamiento de enteros en las rutinas de decodificación de imágenes TIFF en CUPS versiones 1.3.9 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) y posiblemente ejecutar código arbitrario por medio de una imagen TIFF diseñada, que no es manejado apropiadamente por la función _cupsImageReadTIFF (1) en el filtro imagetops y (2) el filtro imagetoraster, lo que conduce a un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34747","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"cve@mitre.org"},{"url":"http://www.cups.org/articles.php?L582","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L3031","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1773","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0428.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34571","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022070","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-760-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490596","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/articles.php?L582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L3031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0428.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-760-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0164","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks."},{"lang":"es","value":"La interfaz web de CUPS antes de v1.3.10 no valida la cabecera HTTP Host en una solicitud de un cliente, lo que facilita para realizar ataques de revinculación de DNS a atacantes remotos."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0164\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n","lastModified":"2009-04-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*","matchCriteriaId":"AFB34629-DB13-4164-8A18-BD818E50528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*","matchCriteriaId":"2D432471-B5FD-4B1D-82DF-6F3152752071"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"960DE41E-63DB-45EB-9B19-6349BDA05086"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A57D2299-3409-4907-9FC0-5C3C715CDB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"C7EB92FA-3669-4530-BE69-84CF01D98FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*","matchCriteriaId":"690C4DEC-1467-4D7D-8E73-6EE1758439D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"FB5CA96B-411E-47BE-81A1-1C2E240A25F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"AA5A29C9-1913-4B8F-B162-66E71BEABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263070","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"cve@mitre.org"},{"url":"http://www.cups.org/articles.php?L582","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cups.org/str.php?L3118","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34665","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490597","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/articles.php?L582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cups.org/str.php?L3118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0165","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to \"g*allocn.\""},{"lang":"es","value":"Desbordamiento de entero en el decodificador JBIG2 en Xpdf v3.02p12 y anteriores, como se utiliza en Poppler y otros productos, cuando corre en Mac OS X, tiene un impacto desconocido, relacionado con \"g*allocn.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52D79ABD-202F-464F-B6C3-B225FD37DD3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","matchCriteriaId":"9A63FAB9-7E4D-4D2D-808B-F96F2015BF63"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34959","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35037","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34568","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50377","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0166","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory."},{"lang":"es","value":"El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, y otros productos permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado que desencadena una liberación de memoria no inicializada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34568","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022073","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490625","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/502750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0167","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of \"wrong printers,\" aka a \"Temporary file vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en lpadmin en Sun Solaris v10 y OpenSolaris snv_61 hasta snv_106, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados, relacionados con enumeración de  \"impresiones erróneas\", también llamado \"Vulnerabilidad de ficheros temporales\".\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33705","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33269","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021601","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0155","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6175","source":"cve@mitre.org"},{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0168","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a failure to \"include all cache files,\" and improper handling of temporary files."},{"lang":"es","value":"Vulnerabilidad no especificada en ppdmgr en Sun Solaris v10 y OpenSolaris snv_61 hasta snv_106, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados, relacionados con el fallo \"incluir todos los ficheros cache\", y un inapropiado manejo de ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33488","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33705","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33269","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021601","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0155","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48143","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5503","source":"cve@mitre.org"},{"url":"http://opensolaris.org/os/bug_reports/request_sponsor/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0169","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm."},{"lang":"es","value":"Sun Java System Access Manager v7.1 permite a administradores autenticados sub-realm obtener privilegios, como se ha demostrado mediante la creación de una cuenta amadmin en el sub-realm, y entonces entran como amadmin en la raíz realm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"4CCDA95C-0EFF-4CF4-8CC6-EF110F0DAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_sparc:*:*:*:*:*","matchCriteriaId":"F73D1848-D765-46B8-9B61-4A7A351CA6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_x86:*:*:*:*:*","matchCriteriaId":"51834E30-6780-433E-9146-C4B8DEFF7CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*","matchCriteriaId":"36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33266","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021604","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0157","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47944","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249106-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0170","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other \"access to resources,\" by visiting the Configuration Items component in the console."},{"lang":"es","value":"Sun Java System Access Manager v6.3 2005Q1, v7 2005Q4, y v7.1 permite a atacantes remotos autenticar usuarios con privilegios de consola para descubrir contraseñas, y obtener otros \"accesos a recursos\" no especificados, visitando el componente Configuration Items en la consola."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3:*:*:*:*:*:*:*","matchCriteriaId":"31DEED4B-0AFF-49A2-9DDA-B4D74E3B29A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:*:*:*:*:*:*","matchCriteriaId":"26AB4CE2-6C95-4969-A989-F38C7129F22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0B5B089E-62AC-44E5-9462-DC439C7AA8A5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33265","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021605","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0156","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47942","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-242166-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0171","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact."},{"lang":"es","value":"Los servidores Sun SPARC Enterprise M4000 y M5000, dentro de un cierto rango de números de serie, permite a los atacantes remotos utilizar la contraseña root de fabricación, realizar un inicio de sesión root en eXtended System Control Facility Unit (también se conoce como XSCFU o procesador de servicios), y tener otro impacto no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server:m4000:*:*:*:*:*:*:*","matchCriteriaId":"B468360C-95CA-4352-85A7-01C1C305A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc_enterprise_server:m5000:*:*:*:*:*:*:*","matchCriteriaId":"C2C3786A-174C-408A-A2C6-0EE7515BCF30"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249126-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33280","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021602","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249126-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0172","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM DB2 v9.1 anterior a FP6a y 9.5 anterior a FP3a permite a atacantes remotos causar denegación de servicio a través de una secuencia de datos CONNECT manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"A96437C6-D2C6-46BC-BC2D-078F6131E8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"06EA7251-AF53-4A63-B469-97A1316FCFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"6E9595EC-7222-4737-96B8-80847399CFF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"74479A15-2388-4FBA-AE83-1692F22122E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*","matchCriteriaId":"7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*","matchCriteriaId":"240239CD-9E05-46E0-A42C-13DB5EE8F436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*","matchCriteriaId":"77828856-BFE6-4D31-90C1-CDB189BA95AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:ga:*:*:*:*:*:*","matchCriteriaId":"E3422821-0C01-4502-AD99-0AFE73751B3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F01421A6-B4B4-4F86-87D3-B11AEC1258CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*","matchCriteriaId":"55D8F159-5A2D-4CB6-A7B9-7DCF8A9B82C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"F7E8AA7B-4E40-41B9-8940-95B5F00E11DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*","matchCriteriaId":"C91A9870-C75D-4B49-B1F5-E9CF054D3CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*","matchCriteriaId":"B7C7E16D-AC11-4FC0-9534-799926E525EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*","matchCriteriaId":"C1B953D1-0B8F-4C6F-8485-E5E942593015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:aix:*:*:*:*:*","matchCriteriaId":"2098CCDC-1F4B-44AC-976E-E31FED8AD976"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:hp-ux:*:*:*:*:*","matchCriteriaId":"87FFA2D9-8544-4B12-B02E-8B2198CB3621"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:linux:*:*:*:*:*","matchCriteriaId":"BDDEF993-94F0-431F-AC23-86EE3089F61B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:solaris:*:*:*:*:*","matchCriteriaId":"652E829C-0886-4FD6-9513-C1AD844E30AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:windows:*:*:*:*:*","matchCriteriaId":"99A3B7D1-8467-4B9B-ACAC-2D265386F2D9"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021591","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21363936","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33258","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47931","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21363936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0173","sourceIdentifier":"cve@mitre.org","published":"2009-01-16T21:30:03.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream."},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor en IBM DB2 v9.1 anterior  a FP6 y v9.5 anterior a FP3a permite a atacantes remotos causar denegación de servicio (trampa) a través de una secuencia de datos manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*","matchCriteriaId":"0D925911-6225-4B31-9C19-EF40360A9FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"A96437C6-D2C6-46BC-BC2D-078F6131E8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*","matchCriteriaId":"806CC0EE-9779-4676-A1FB-13878BAE42F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C31FA827-1D6D-471A-8246-D39AF6AD0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*","matchCriteriaId":"9446F75C-BE15-4DAE-9B96-E80F0EF24C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"06EA7251-AF53-4A63-B469-97A1316FCFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*","matchCriteriaId":"640F9988-7F33-4440-AB63-2743237BF2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*","matchCriteriaId":"C6F52E0B-24A2-4942-9256-ADBBEE3C1BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*","matchCriteriaId":"627E56A7-98F1-4A94-9F76-4C6A9365616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*","matchCriteriaId":"9DBCE5C1-CE78-4DEA-A6E7-35B2525052E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*","matchCriteriaId":"CC92F759-749C-4E6A-83B3-C8ADB333054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*","matchCriteriaId":"30FD4DEA-CB8C-4E90-BE9E-B5C6225371A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*","matchCriteriaId":"24FE6316-E7FB-474B-B61B-38F72D6EE632"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*","matchCriteriaId":"D16FC5E6-87A6-4594-8E1F-8DEBA7A7326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"6E9595EC-7222-4737-96B8-80847399CFF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*","matchCriteriaId":"3F54309A-BA0E-447A-A115-DDBC20F6B2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*","matchCriteriaId":"55F55D9D-3016-4AB1-84B3-20FEE3CD0A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*","matchCriteriaId":"C518666C-29DE-45C0-A68D-74B5E2CEBBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*","matchCriteriaId":"A3BD177C-6CF6-463D-8999-830DA1BF3E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"74479A15-2388-4FBA-AE83-1692F22122E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*","matchCriteriaId":"7D21AED3-42E7-4C07-8DD3-4DFCC40E1460"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*","matchCriteriaId":"240239CD-9E05-46E0-A42C-13DB5EE8F436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*","matchCriteriaId":"77828856-BFE6-4D31-90C1-CDB189BA95AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.1:ga:*:*:*:*:*:*","matchCriteriaId":"E3422821-0C01-4502-AD99-0AFE73751B3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F01421A6-B4B4-4F86-87D3-B11AEC1258CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*","matchCriteriaId":"55D8F159-5A2D-4CB6-A7B9-7DCF8A9B82C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"F7E8AA7B-4E40-41B9-8940-95B5F00E11DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*","matchCriteriaId":"C91A9870-C75D-4B49-B1F5-E9CF054D3CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*","matchCriteriaId":"B7C7E16D-AC11-4FC0-9534-799926E525EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*","matchCriteriaId":"C1B953D1-0B8F-4C6F-8485-E5E942593015"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:aix:*:*:*:*:*","matchCriteriaId":"2098CCDC-1F4B-44AC-976E-E31FED8AD976"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:hp-ux:*:*:*:*:*","matchCriteriaId":"87FFA2D9-8544-4B12-B02E-8B2198CB3621"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:linux:*:*:*:*:*","matchCriteriaId":"BDDEF993-94F0-431F-AC23-86EE3089F61B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:solaris:*:*:*:*:*","matchCriteriaId":"652E829C-0886-4FD6-9513-C1AD844E30AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:windows:*:*:*:*:*","matchCriteriaId":"99A3B7D1-8467-4B9B-ACAC-2D265386F2D9"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021591","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ39652","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21363936","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39373","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39653","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33258","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47934","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ39652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21363936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ39653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0174","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:00:08.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en VUPlayer v2.49 permite a atacantes remotos ejecutar código de su elección a través de un URI largo .asf en el atributo HREF del elemento REF en un fichero .asx"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vuplayer:vuplayer:2.49:*:*:*:*:*:*:*","matchCriteriaId":"B82C2B0E-D985-4C48-90F7-91C3D3C14888"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4918","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33185","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47851","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7709","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7713","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7714","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7715","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0175","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:00:08.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an invalid .mp3 file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Heathco Software MP3 TrackMaker v1.5 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección a través de una cadena larga en un fichero .mp3 inválido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heathcosoft:mp3_trackmaker:1.5:*:*:*:*:*:*:*","matchCriteriaId":"75FD990A-7129-4F91-9901-6516AD333333"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33183","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47852","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7708","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0176","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:00:09.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to \"symWidths\"; or (2) a crafted data stream in a .pdf file, related to \"bitmaps.\""},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en montículo en PDF distiller en el Servicio de Adjuntar en Research in Motion (RIM) Blackberry Enterprise Server (BES) v4.1.3 hasta 4.1.6, Blackberry Professional Software v4.1.4, y blackberry Unite! anteriores a v1.0.3 bundle 28, permite a atacantes remotos asistidos por usuarios, ejecutar código de su elección a a través (1)cadena manípulada en un fichero .PDF, relativo a \"symWidths\"; o (2) a cadenas de datos manipulada en un fichero .PDF, relativo a \"bitmaps\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4DDE9EAC-D9FF-47C2-A830-0316F74D822E"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F3B71789-C43D-4D75-9C49-71D9347EF321"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"59C67945-B4C6-4159-8FF0-05227D46E282"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D2FE657D-6988-4A19-B0EC-8D9413AB7A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E3AB6DC-0733-4683-B495-2FF85923ACB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"9DC011EA-0F76-4554-B19D-3B93F7C1D774"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D4FFD7E-241B-458A-AB88-C4C06E47C017"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3C6120B4-CEE1-412B-9EE3-9F2B0BE690A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5A748FD0-2FED-4C8F-9693-ED16095E917A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33224","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0177","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:00:09.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command."},{"lang":"es","value":"En la biblioteca vmwarebase.dll, tal y como es usado en el servicio vmware-authd (también se conoce como vmware-authd.exe), en VMware Workstation versión  6.5.1 build 126130, versión 6.5.1 y anteriores; VMware Player versión  2.5.1 build 126130, versión 2.5.1 y anteriores; VMware ACE versión 2.5.1 y anteriores; VMware Server versiones 2.0.x anteriores a 2.0.1 build 156745; y VMware Fusion anterior a versión 2.0.2 build 147997, permite a atacantes remotos causar una denegación de servicio (bloqueo del demonio) por medio de un comando largo (1) USUARIO o (2) PASS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"8D249F86-E463-4AB1-BEEE-0828D5A2D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"4004A38A-01A6-41BE-84EB-1D7C7FAD0214"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2543D5-AE09-4E90-B27E-95075BE4ACBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"318D5F4B-48C5-4214-B60C-9A2EEEF44835"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3771AFCF-E247-427A-8076-9E36EA457658"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17C124AC-C421-459E-8251-E7B3BD33874B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"65DD6966-72EA-4C4D-BC90-B0D534834BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EBFC9B7A-8A40-467B-9102-EE5259EC4D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E684965-43F7-4A51-850F-4C88F42940E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"357B60EC-C5F1-4FA4-B4AF-F81298479D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"933562E3-B6D5-4250-A07B-AB8437ED4D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F23F68-6853-4862-99CB-4F214816358F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AAFBF6B0-5E0A-4F62-82C7-D9861D0F5F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:1.05:*:*:*:*:*:*:*","matchCriteriaId":"43282BF6-665C-4F77-8E95-487523863965"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B4FFF490-8AA9-4296-99F0-DC57E5D4F56C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC850AB-7728-4EE3-9EB5-E1E4D7338202"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4B1CA212-4114-4D45-B746-9C2AAF60CFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5085E31D-7472-408B-A85D-90337407A24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1D57F024-3484-4EEA-8F9E-08A1AE5E3D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"13D82E91-181E-4E7D-943D-6FC74D40CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"21C496BC-404A-4C23-A0CB-DEE8BB8550A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:*:*:*:*:*:*:*:*","versionEndIncluding":"6.51","matchCriteriaId":"A8EF66E7-ECDA-40F9-9070-5857D2DEF818"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0790DFEB-3ADE-4057-BA9D-025BD5F5B477"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"433C05BD-1CAC-4F40-9F69-D0333C5F0E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"270D5FAD-A226-4F6F-BF0B-2C6D91C525D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6811B662-07E0-4B95-BFC6-C87C02110C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"504CD24F-2EC6-45C0-8E46-69BAE8483521"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B0EAB3D2-79EE-43A3-8A08-3E8140C1B1A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BE15637B-FAE4-4FC7-8F45-B3B1554F8F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"2EBD26B9-60A6-4D6B-B031-0DA8A9F3323F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"6B32C157-020F-400B-970C-B93CF573EB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D2E1F0A2-8791-4627-8583-55B2A67D2F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3767CDDC-DF72-4AAE-B544-D2DFE02A199D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"640130AA-C905-4DD6-97BD-ABA90705F0B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7632A4-D120-434D-B35A-303640DB37AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6DFFE01E-BD0A-432E-B47C-D68DAADDD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02EBBFDD-AC46-481A-8DA7-64619B447637"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CC0B1FF0-80DC-433B-9298-346225060808"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0ECA0396-CBCA-4D21-BD9A-EFCE24D616D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"94533C3D-8767-44DB-ABF7-B991C3E47858"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/51180","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021512","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6433","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7647","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/51180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0178","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM Hardware Management Console (HMC) 7 release v3.2.0 SP1 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B0B7A7BA-455F-4956-9C70-68EC338626FD"}]}]}],"references":[{"url":"http://osvdb.org/51432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33293","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0158","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4521","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48010","source":"cve@mitre.org"},{"url":"http://osvdb.org/51432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB02834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0179","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file."},{"lang":"es","value":"libmikmod v3.1.11 hasta v3.2.0, como el utilizado por MikMod y posiblemente otros productos, permite a atacantes ayudados por el usuario provocar una denegación de servicio (caida de aplicación) cargando un fichero XM."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0179\n\nThe Red Hat Security Response Team has rated this issue as having low security\nimpact, a future update may address this flaw. More information regarding\nissue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/","lastModified":"2009-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"436CE81E-616B-40E4-825A-961EC9672896"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-2:*:*:*:*:*:*:*","matchCriteriaId":"D1C4E395-10DE-42A4-830C-803CE1F79F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-3:*:*:*:*:*:*:*","matchCriteriaId":"4593CEA9-5661-4F3C-B38B-369FD2043D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-4:*:*:*:*:*:*:*","matchCriteriaId":"D05D8EDA-FE5E-483A-AC78-DAFE129705C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-5:*:*:*:*:*:*:*","matchCriteriaId":"8CA7EDD1-5C30-41E8-B93A-F2C5FA754F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.9-6:*:*:*:*:*:*:*","matchCriteriaId":"A0F92EE1-D5F8-47A3-B674-A593A7829DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"3F1448EB-FDFC-434A-ACE9-F6CC52B523E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-2:*:*:*:*:*:*:*","matchCriteriaId":"C6B9F0C8-15C0-47BF-AE69-2216A65D1D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-3:*:*:*:*:*:*:*","matchCriteriaId":"B0524F58-BC45-4A81-BB99-F09F03047665"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-4:*:*:*:*:*:*:*","matchCriteriaId":"CA48214A-CF42-4378-A422-803EDE5632CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.10-5:*:*:*:*:*:*:*","matchCriteriaId":"5F08B9B6-0CCD-4388-B33A-98F6A65FAEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-1:*:*:*:*:*:*:*","matchCriteriaId":"8A0D92BE-E4F7-42CF-AA61-71CD46319E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-2:*:*:*:*:*:*:*","matchCriteriaId":"563D3D39-DAFB-4F0C-BCBB-917C5082137F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-3:*:*:*:*:*:*:*","matchCriteriaId":"BA98B82C-B0BD-4546-8047-63ECDCA27B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-4:*:*:*:*:*:*:*","matchCriteriaId":"FE994EED-EA67-4A52-9AAD-30259DCD8C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-5:*:*:*:*:*:*:*","matchCriteriaId":"EB091C37-6020-4202-AC51-B597C2890E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.11-6:*:*:*:*:*:*:*","matchCriteriaId":"F88BF46A-B01D-4D8E-8BFF-6E864EBA5FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"31AA2232-8FB5-4BA3-BBB1-B54443C2D57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igno_saitz:libmikmod:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5B88DA6E-D815-4904-AE07-5C54E72057AA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476339","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/13/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33240","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479833","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01312.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0180","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376."},{"lang":"es","value":"Algunos Fedora crean secuencias de comando para nfs-utils anteriores a v1.1.2-9.fc9 en Fedora 9, y anteriores a v1.1.4-6.fc10 en Fedora 10, no da soporte a TCP Wrapper, lo que podría permitir a atacantes remotos evitar \r\nlas restricciones de acceso previstas, posiblemente esté relacionado con el caso CVE-2008-1376."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"45AEA724-343E-4806-ACCE-2AA5F8F8BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*","matchCriteriaId":"025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"474B82D5-5D48-41ED-B2C1-68907A27491F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"813B76CA-5083-4697-A484-435113B7FF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0964EDA2-D86C-4189-9B03-61A292601649"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F83865C7-D7A1-4357-8C15-9865BDECD98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2EFD8CFB-A24A-49F0-856C-4B985E203C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4645DF7-A5C2-4E8D-A07F-22F77670D68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8616115-30AC-4160-B196-D417AF32C7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1234E468-8DC6-4474-8B3D-DB550AA801B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*","matchCriteriaId":"58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*","matchCriteriaId":"63515439-6FCC-43D7-B8DD-D14DD4D7878E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"38E96A1E-5A28-4177-A26F-F19573A17775"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*","matchCriteriaId":"8A54F7D1-A1CD-4804-B962-BC536602F6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*","matchCriteriaId":"2D1E56AB-B263-42AF-9034-D20AD604E50D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*","matchCriteriaId":"0D76C312-3E5D-4176-8691-DD8C21C6A5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*","matchCriteriaId":"D39D0EDE-8D14-42F7-BAEF-A64D559DE495"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9BDF2DB8-0570-43C1-9206-14CDD027EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D18EC9F4-50E7-4974-906E-09533BC7722C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4A1D1B-639F-467E-BE62-1BDDDCC9671A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8A54C8D7-D142-4DB5-8453-57E8612BFFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A4CED17F-B9CE-46D2-8F00-8419451E51FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"D0571302-7EC5-41D3-BBAE-821657A56BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E6F15C5-4D7E-499C-84F3-777F8C4C0B49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"D32A30CD-EA21-4AA6-868F-3448AA50B70D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"6D7165E8-FC10-4A4F-9B58-49CA830D2DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*","matchCriteriaId":"025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"474B82D5-5D48-41ED-B2C1-68907A27491F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"813B76CA-5083-4697-A484-435113B7FF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0964EDA2-D86C-4189-9B03-61A292601649"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F83865C7-D7A1-4357-8C15-9865BDECD98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2EFD8CFB-A24A-49F0-856C-4B985E203C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4645DF7-A5C2-4E8D-A07F-22F77670D68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8616115-30AC-4160-B196-D417AF32C7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1234E468-8DC6-4474-8B3D-DB550AA801B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*","matchCriteriaId":"58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*","matchCriteriaId":"63515439-6FCC-43D7-B8DD-D14DD4D7878E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"38E96A1E-5A28-4177-A26F-F19573A17775"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*","matchCriteriaId":"8A54F7D1-A1CD-4804-B962-BC536602F6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*","matchCriteriaId":"2D1E56AB-B263-42AF-9034-D20AD604E50D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*","matchCriteriaId":"0D76C312-3E5D-4176-8691-DD8C21C6A5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*","matchCriteriaId":"D39D0EDE-8D14-42F7-BAEF-A64D559DE495"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9BDF2DB8-0570-43C1-9206-14CDD027EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D18EC9F4-50E7-4974-906E-09533BC7722C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4A1D1B-639F-467E-BE62-1BDDDCC9671A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"8A54C8D7-D142-4DB5-8453-57E8612BFFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A4CED17F-B9CE-46D2-8F00-8419451E51FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"D0571302-7EC5-41D3-BBAE-821657A56BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2E6F15C5-4D7E-499C-84F3-777F8C4C0B49"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F202B0A0-9EDE-4311-88E5-DC4411034457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F632663-FAAF-4780-9225-DEF175B803FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"BA70E035-8475-4046-ABD7-5AE59F874EBA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33294","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477864","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48058","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0181","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters."},{"lang":"es","value":"Desbordamiento de búfer en VUPlayer permite a atacantes ayudados por el usuario tener un impacto desconocido mediante un archivo largo, como se demostró con un archivo compuesto completamente por caracteres 'A'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vuplayer:vuplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"8A2C57D5-AF2F-4971-A05C-386EBF527D18"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4921","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499810/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48169","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499810/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0182","sourceIdentifier":"cve@mitre.org","published":"2009-01-20T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line."},{"lang":"es","value":"Desbordamiento de búfer en VUPlayer v2.49 y anteriores permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de una URL larga en una línea File en un fichero .pls, como se ha demostrado mediante una URL http sobre una línea File1."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vuplayer:vuplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.49","matchCriteriaId":"8FAC3BA1-0315-4312-98F9-A5E019187818"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/4923","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48170","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7695","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/165489/VUPlayer-2.49-Buffer-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://securityreason.com/securityalert/4923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/7695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0183","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-02-03T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request."},{"lang":"es","value":"Desbordamiento del búfer basado en pila en Remote Control Server de Free Download Manager (FDM) v2.5 Build 758 y v3.0 Build 844; permite a atacantes remotos ejecutar código de su elección a través de una cabecera larga Authorization en una petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_download_manager:free_download_manager:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C7336EE4-8DA5-4BE6-8190-75D937D15585"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_download_manager:free_download_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F378BC9-CFC7-4A01-AAF2-3A37EC62ED9C"}]}]}],"references":[{"url":"http://osvdb.org/51745","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33524","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-3/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500604/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33554","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0302","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.exploit-db.com/exploits/7986","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/51745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500604/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0184","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-02-03T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file."},{"lang":"es","value":"Múltiple desbordamiento de búfer en la implementación del torrent parsing en Free Download Manager (FDM) v2.5 Build 758 y v3.0 Build 844 permite a atacantes remotos ejecutar código de su elección  a través de (1) un nombre de fichero largo sin un fichero torrent, (2) una dirección de tracker URL larga en un fichero torrent, o (3) un comentario largo en un fichero torrent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_download_manager:free_download_manager:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C7336EE4-8DA5-4BE6-8190-75D937D15585"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_download_manager:free_download_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F378BC9-CFC7-4A01-AAF2-3A37EC62ED9C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33524","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-5/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500605/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33555","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0302","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-5/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500605/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0185","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-06-02T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Apple QuickTime anterior a la v7.6.2 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de datos de audio codificados como MS ADPCM en un fichero de película AVI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54879","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35091","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-6/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504006/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35163","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022314","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50894","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15727","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0186","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-03-05T02:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en libsndfile v1,0,18, usado en Winamp y otros productos, permite a atacantes dependientes de contexto la ejecución de código de su elección a través de un trozo de descripción manipulada en un archivo de audio CAF, permitiendo  un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.18","matchCriteriaId":"30C97108-A0D5-41AE-9D66-548A679ECD91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"BC3B1750-4CC0-44EA-A029-B42B8D341191"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:0.0.28:*:*:*:*:*:*:*","matchCriteriaId":"98620203-42FE-4C3F-AD03-CC477712A38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4CD8A661-B9F9-46C0-AFE0-F4B0ADE25CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3FE94C03-86CE-4FF7-B2A2-3BC3D6F18810"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"22C7A5B0-6D12-46D3-8474-133C936D4788"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"93CC8970-3901-46B7-9BBA-323F0B600A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EA68E7AA-BD78-4AA8-A09C-61DDF3AD7B6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"73D48F80-6625-49CC-816F-C71EAB6C3FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A30F54A9-501A-48C4-98DF-36A58CC0EC74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3A89E2CE-793A-4040-A611-759CC060FEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3A4D8112-A8A3-4803-BB37-93956770FDE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9F96730-512A-4B12-B365-2E7DFC5D401D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"01ADE6F4-21F6-4CA1-BA9C-B7A73173981D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"263665FB-C27E-4BA4-A41C-90DB0286A58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6A37DA09-D58A-4B3B-86D7-6447CF11B869"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"0080125E-B49E-4A39-8CEB-A309D8F35074"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6A03E3DF-F506-4476-BB3B-7ACE69717632"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CAD0D6ED-4C26-4278-929D-CC874B4A974E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"860DAC59-7CB7-4FCA-9198-B2E0E2C313D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"570D85F0-F757-488A-A059-54BF0810F1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"E28BC682-E6B1-4A63-9734-FDB6019B9AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"8823A84B-4694-4838-A877-AE66400B26BD"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33980","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33981","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34316","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34526","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34642","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34791","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-7/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-8/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-16.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2009/dsa-1742","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mega-nerd.com/libsndfile/NEWS","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/501399/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/501413/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33963","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021784","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.ubuntu.com/usn/USN-749-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0584","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0585","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49038","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-7/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mega-nerd.com/libsndfile/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501399/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501413/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-749-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0187","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-02-26T16:17:19.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a \"Connecting\" log message."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Orbit Downloader v2.8.2 y v2.8.3 y posiblemente otras versiones anteriores a v2.6.5, permiten a los atacantes remotos ejecutar código de su elección a través de una URL HTTP modificada con un nombre de host largo, el cual no es manejado de forma adecuada cunado construye un mensaje de registro \"Connecting\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"95DD46C6-9D07-4A0E-801C-2EBFDB02E418"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A412B9B8-3011-4683-AD6B-1FC33E7C151C"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F3471391-3784-420B-A5D2-4D1BE9AFC0E7"}]}]}],"references":[{"url":"http://osvdb.org/52294","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/33843","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-9/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501220/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/33894","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0521","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48932","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/52294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-9/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501220/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0188","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-06-02T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file."},{"lang":"es","value":"Apple QuickTime anterior a v7.6.2 permite a atacantes remotos ejecutar código de forma arbitraria o producir una denegación de servicio (corrupción de la memoria o caída de aplicación) a través de un una película manipulada compuesta de un fichero de vídeo de Sorenson 3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35091","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-10/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504007/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35159","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022314","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50886","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16085","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-10/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504007/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0191","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-03-10T20:30:06.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location."},{"lang":"es","value":"Foxit Reader v2.3 anterior a Build 3902 y v3.0 anterior a Build 1506, ademas de  v3.0.2009.1301, no maneja adecuadamente un segmento del símbolo JBIG2 del diccionario sin nuevos símbolos, lo que permite atacantes remotos ejecutar código arbitrariamente a través de un fichero PDF manipulado que inicia una desreferencia y una localización de memoria no inicializada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C133A953-B2F9-4168-8E00-91254ADC5C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"30CB7169-357B-42FB-B680-044883A8D9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:*:*:*:*:*:*:*","matchCriteriaId":"913B8A86-09E0-4213-9111-6645064879C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34036","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-11/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#Processing","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501590/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34035","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1021822","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0634","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49135","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-11/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#Processing","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501590/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0192","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-07-14T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow."},{"lang":"es","value":"Error de superación de límite en el componente iMonitor en Novell eDirectory v8.8 SP3, v8.8 SP3 FTF3, y posiblemente otras versiones permite a atacantes remotos ejecutar código de su elección a través de una petición HTTP con una cabecera Accept-Language manipulada, que provoca un desbordamiento de búfer basado en la pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*","matchCriteriaId":"FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*","matchCriteriaId":"E263D9A0-CAC3-4009-9F5B-8EA7365B28AE"}]}]}],"references":[{"url":"http://osvdb.org/55847","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34160","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-13/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/504924/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35666","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/1883","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51703","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/55847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-13/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504924/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0193","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-03-25T01:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062."},{"lang":"es","value":"Hay una vulnerabilidad en el desbordamiento del búfer en la región heap de la memoria en el programa de Adobe Acrobat Reader versión 9 anterior a  9.1, versión 8 anterior a  8.1.4, y versión 7 anterior a  7.1.1, permite a los atacantes remotos ejecutar códigos arbitrarios por medio  de un archivo PDF con un segmento de diccionario de símbolos JBIG2 malformados, una vulnerabilidad diferente de los CVE- 2009-1061 y CVE-2009-1062."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.1.1","matchCriteriaId":"FE671D4C-9BAC-4E77-A983-12F6BFD70562"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.1.4","matchCriteriaId":"4D5C20FC-C257-4523-BF20-74DF2F9B328A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.1","matchCriteriaId":"BDBEDB79-859B-4EC6-8AFB-81FC20EB52B1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34392","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/secunia_research/2009-14/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502155/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34229","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021892","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/secunia_research/2009-14/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502155/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0194","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-05-11T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug-In 2.6.4.0 does not properly enforce the restrictions that (1) download and (2) upload requests come from a web site specified by the user, which allows remote attackers to obtain sensitive information or reconfigure Garmin GPS devices via unspecified vectors related to a \"synchronisation error.\""},{"lang":"es","value":"La implementación del bloqueo de dominio en el control ActiveX GARMINAXCONTROL.GarminAxControl_t.1 de npGarmin.dll en Garmin Communicator Plug-In v2.6.4.0 no aplica adecuadamente las restricciones para peticiones de (1) descarga (2) subida que proceden de un sitio web especificado por el usuario, lo que permite a atacantes remotos obtener información sensible o reconfigurar los dispositivos Garmin GPS a través de vectores no especificados relacionados con un \"error de sincronización\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:garmin:garmin_communicator_plugin:2.6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B771DDAB-4FD0-4BD2-9057-DD2CE1C7B580"}]}]}],"references":[{"url":"http://osvdb.org/54258","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34326","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-16/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022173","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/503319/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34858","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50360","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/54258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-16/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503319/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0195","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-23T17:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Xpdf v3.02p12 y anteriores, CUPS v1.3.9 y probablemente otros productos, permite a atacantes remotos ejecutar código de forma arbitraria a través de un fichero PDF con segmentos JBIG2 de diccionario simbólico manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"7C671B95-8892-4D71-87FE-BABF5CBEC144"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52D79ABD-202F-464F-B6C3-B225FD37DD3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34291","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34481","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34756","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34963","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35064","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-17/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-18/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/502759/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/502762/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34791","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-17/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-18/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502759/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502762/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0196","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-16T15:12:57.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value."},{"lang":"es","value":"Desbordamiento de entero en la función big2_decode_symbol_dict (jbig2_symbol_dict.c) en la librería de decodificación JBIG2 (jbig2dec) en Ghostscript 8.64 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar código de su elección mediante un fichero PDF que contenga un segmento de diccionario de símbolos JBIG2 con un valor grande de longitud de repetición(run length)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"8.64","matchCriteriaId":"06B00D31-6A9C-44C2-AF0F-36F91CADCF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:0:*:*:*:*:*:*:*","matchCriteriaId":"6E68242D-465A-443F-9D25-BE57F9080394"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*","matchCriteriaId":"A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*","matchCriteriaId":"E63082C3-15B6-4DD8-8818-BFD61B054B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9877DC36-5151-43C9-864D-BE7939A0304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*","matchCriteriaId":"1F9F0F0A-E413-42CC-B67D-434EC6A92543"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*","matchCriteriaId":"491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*","matchCriteriaId":"9DA7298B-2552-45DF-AE6B-FC71ACF623E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*","matchCriteriaId":"87A234A3-5FF9-4567-A731-3FFCD1965C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*","matchCriteriaId":"B2916811-2ABD-4CC4-829B-AE805BA1BC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.60:*:*:*:*:*:*:*","matchCriteriaId":"7B283683-D924-4C69-87F3-355ECC0DBA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*","matchCriteriaId":"265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*","matchCriteriaId":"755FCEC1-E1DD-42BC-9606-17217DB69128"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.63:*:*:*:*:*:*:*","matchCriteriaId":"C8C3057C-9207-4BCD-88D4-625BE0EFAE85"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://osvdb.org/53492","source":"PSIRT-CNA@flexerasoftware.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34292","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34667","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34729","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34732","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35416","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35559","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35569","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-21/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201412-17.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/502586/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34445","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022029","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0983","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=337747","source":"PSIRT-CNA@flexerasoftware.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10533","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://usn.ubuntu.com/757-1/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-21/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201412-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=337747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/757-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0197","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-04-09T15:08:35.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en el Plugin FORMATS anteriores a v4.23 para IrfanView permite atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de un fichero XPM grande, que provoca un desbordamiento de búfer basado en montículo.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:formats:*:*:*:*:*:*:*:*","versionEndIncluding":"4.22","matchCriteriaId":"2D04A63B-B5B4-4FF9-9B76-681295BED7C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:formats:4.00:*:*:*:*:*:*:*","matchCriteriaId":"101D6BDF-3702-4F18-A696-86B4D815B4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:formats:4.10:*:*:*:*:*:*:*","matchCriteriaId":"D11961A1-8F88-472D-9C96-E97F31F804BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:formats:4.20:*:*:*:*:*:*:*","matchCriteriaId":"6F2ACEE0-483A-4227-8611-3D19FA962A1A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34525","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-20/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.irfanview.com/plugins.htm","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.osvdb.org/53323","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/502516/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/34402","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/0953","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49717","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-20/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.irfanview.com/plugins.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/53323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502516/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0198","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-06-11T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF file that contains JBIG2 text region segments with Huffman encoding."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente, la ejecución de código de su elección a través de un archivo PDF manipulado que contiene unos segmentos de una región de texto JBIG2 codificado en Huffman."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/34580","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35655","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35685","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35734","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-24/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://securitytracker.com/id?1022361","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/504217/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35274","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35302","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51015","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-24/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504217/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0199","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-09-08T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attackers to execute arbitrary code via a video file with crafted dimensions (aka framebuffer parameters)."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el VMnc media codec en VMware Movie Decoder anteriores a v6.5.3 build 185404, VMware Workstation v6.5.x anteriores a v6.5.3 build 185404, VMware Player v2.5.x anteriores a v2.5.3 build 185404, y VMware ACE v2.5.x anteriores a v2.5.3 build 185404 para Windows podría permitir a atacantes remotos ejecutar código de su elección mediante un fichero de video con una dimensión modificada (también conocido como parámetros framebuffer)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E62960B2-91AE-4DD7-8085-9BA6BCB84473"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CE79F3F7-A21A-4CAA-BB0D-2955299EE8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"62DA49FA-6657-45B5-BF69-D3A03BA62A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.2_build_156735:*:*:*:*:*:*:*","matchCriteriaId":"D0075432-4410-41D7-BF36-C3C56A7CA2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFC6B629-30B3-4C45-B5E9-1B4310F186FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"541D77A2-99C5-4CDB-877F-7E83E1E3369E"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000065.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34938","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-25/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506286/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/36290","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0012.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2553","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-25/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506286/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0200","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-09-02T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en en OpenOffice.org (OOo)anteriores v3.1.1 permite a atacantes remotos ejecutar código de su elección a través de registros manipulados en la tabla de documentos de un documento Word, desencadenando un desbordamiento basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"9CD78E51-0BF4-463C-8A16-C55974B6D419"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.0-ru:*:*:*:*:*:*:*","matchCriteriaId":"55E740A1-6BF3-4AAF-904F-96A4EE2C0620"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"48652F8C-2CC8-4A71-B21D-FA322B443F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9E28599C-D1DD-457E-96AF-148F767BAF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F3C9680C-1292-441E-BE3F-F2E8DA61EEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1B207A9D-9C22-47FA-AEED-9BEBD399B72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DCBC7AB3-1C64-4EC3-AA05-C75AE3886B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"F3C12EF2-3946-4468-B3D8-FFFCB3480C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1:beta2:*:*:*:*:*:*","matchCriteriaId":"A7292C24-BEF1-4D3C-872D-E1F0C4D85FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E63C5EC4-C870-4498-99EB-B3498EB76DD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"A33E7146-7BB6-4C50-9FC4-2EA1207FAC28"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D519A561-5B82-4485-89F5-B448777D4B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B3CA2D68-D190-43B7-93CD-266EEAA9E5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A1204A-BA46-46BF-9E1F-BACFA84D3761"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"738D5F15-A9D2-4CB3-8D78-685AB805DD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E697B8A3-447B-4D7B-A02B-191119453CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.84:*:*:*:*:*:*:*","matchCriteriaId":"4BCAC00A-4A0D-4220-8C81-644F5FEE7FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.87:*:*:*:*:*:*:*","matchCriteriaId":"515605F8-168D-4364-B986-06EB751DAEFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.91:*:*:*:*:*:*:*","matchCriteriaId":"0F74D363-A6E4-4913-8966-2DB49D329FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.93:*:*:*:*:*:*:*","matchCriteriaId":"19769E9A-17CE-4D74-B43F-9EB5FF388454"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.95:*:*:*:*:*:*:*","matchCriteriaId":"0839CC56-0C66-4143-8B98-38CE94314458"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.100:*:*:*:*:*:*:*","matchCriteriaId":"FE0C9A7D-CA5D-4D36-9A5D-611ACF78D328"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.104:*:*:*:*:*:*:*","matchCriteriaId":"063368CB-679D-408D-BE54-EB7244CBE573"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.113:*:*:*:*:*:*:*","matchCriteriaId":"59BFADAF-0A5C-40EF-B6F0-716A4937B81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.118:*:*:*:*:*:*:*","matchCriteriaId":"833EFDA8-165D-4224-9A3A-CD8DE9BDA17B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.122:*:*:*:*:*:*:*","matchCriteriaId":"8E3C9B5C-722C-42A0-BFE8-B8575CA01682"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.130:*:*:*:*:*:*:*","matchCriteriaId":"F93A102A-A73B-4324-A7DD-7E31EC74AE1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.156:*:*:*:*:*:*:*","matchCriteriaId":"75B93365-B4F3-407B-8302-C97CF1127201"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.9.680:*:*:*:*:*:*:*","matchCriteriaId":"2BC39728-FC54-4E12-9BB3-6EBB7228C96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45DD57AC-8CA4-48DB-90F9-2D7260AB7650"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"746D96DA-2292-4264-BCEA-153C3AA8FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24EFAF1D-6A29-4718-A875-7CFC2C9753A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C065AAB-58E3-4312-AD74-A3E103AC73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:rc1:*:*:*:*:*:*","matchCriteriaId":"36C501B2-4947-445E-9AA5-62BD5E642584"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:rc2:*:*:*:*:*:*","matchCriteriaId":"FEFD553D-2522-4CBA-AAF6-747FEB586212"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4B493F3-833A-47E9-AB60-BE2D635EF8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1.152:*:*:*:*:*:*:*","matchCriteriaId":"63531F85-93DC-4DC6-ACA7-04A46DDC580F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1.154:*:*:*:*:*:*:*","matchCriteriaId":"5573DAEB-1D0D-4549-87E4-22EFDD62F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"54678E59-299F-4236-86C4-95F5B68C11D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BC884B82-CEF3-47B7-A578-B502AD52DBF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*","matchCriteriaId":"E51167FA-13DD-46DE-AC16-A2AB2A315110"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"437E06E4-019B-4AFF-9D66-AE0A635B9A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:*","matchCriteriaId":"F8F3702B-7F00-48A2-90A7-7FADF083A523"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:3.01:*:*:*:*:*:*:*","matchCriteriaId":"607C9D74-188D-4356-A16D-FAA440A2E951"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:605b:*:*:*:*:*:*:*","matchCriteriaId":"BDC1EEFE-F5FF-42AA-9286-83D61E428733"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:609:*:*:*:*:*:*:*","matchCriteriaId":"D5ADAEDA-5EDC-4A75-9B85-4BF955165E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:614:*:*:*:*:*:*:*","matchCriteriaId":"CA26C74A-C5D0-4D73-ADDE-A3F0B072D3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:619:*:*:*:*:*:*:*","matchCriteriaId":"4FB979FC-3722-4E96-AF69-0FECA7D7AB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:627:*:*:*:*:*:*:*","matchCriteriaId":"21DD2151-F5E2-49D7-80D8-B3967DE1054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:633:*:*:*:*:*:*:*","matchCriteriaId":"91938F63-3F7C-4CCC-95D5-F4BC5E25555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:638:*:*:*:*:*:*:*","matchCriteriaId":"6C1AAB61-1476-4058-9268-718D272D8130"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:638c:*:*:*:*:*:*:*","matchCriteriaId":"98C3311B-CFB8-4397-9524-58D81BCBBF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:641b:*:*:*:*:*:*:*","matchCriteriaId":"B61A6A83-6B46-4BF4-84E5-0E715056A20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:641d:*:*:*:*:*:*:*","matchCriteriaId":"3D186B89-CA3B-4566-9734-602055BAE5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:643:*:*:*:*:*:*:*","matchCriteriaId":"9C2A53AE-6901-4939-B712-79B17F3C5477"}]}]}],"references":[{"url":"http://development.openoffice.org/releases/3.1.1.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35036","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36750","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/60799","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-26/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2009/dsa-1880","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/506194/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/36200","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/2490","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10881","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://development.openoffice.org/releases/3.1.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-26/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506194/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0201","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-09-02T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to \"table parsing.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en OpenOffice.org (OOo) en versiones anteriores a la 3.1.1 puede permitir atacantes remotos ejecutar código de su elección mediante registros no especificados en un documento de Word manipulado, en relación con \"table parsing.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"9CD78E51-0BF4-463C-8A16-C55974B6D419"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B3CA2D68-D190-43B7-93CD-266EEAA9E5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A1204A-BA46-46BF-9E1F-BACFA84D3761"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"738D5F15-A9D2-4CB3-8D78-685AB805DD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E697B8A3-447B-4D7B-A02B-191119453CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45DD57AC-8CA4-48DB-90F9-2D7260AB7650"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C065AAB-58E3-4312-AD74-A3E103AC73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9487A325-308D-442A-89A9-E8650925F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4B493F3-833A-47E9-AB60-BE2D635EF8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.1:*:*:*:*:*:*:*","matchCriteriaId":"66D86258-594A-4843-9B7E-6C25B3881BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2:*:*:*:*:*:*:*","matchCriteriaId":"84F14135-C9B1-481E-8A2F-5010F8174ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"54678E59-299F-4236-86C4-95F5B68C11D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3:*:*:*:*:*:*:*","matchCriteriaId":"443F587C-2D08-45F8-80AC-60F288D2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"BC884B82-CEF3-47B7-A578-B502AD52DBF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4:*:*:*:*:*:*:*","matchCriteriaId":"E51167FA-13DD-46DE-AC16-A2AB2A315110"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"437E06E4-019B-4AFF-9D66-AE0A635B9A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:2.4.1:*:64-bit:*:*:*:*:*","matchCriteriaId":"F8F3702B-7F00-48A2-90A7-7FADF083A523"}]}]}],"references":[{"url":"http://development.openoffice.org/releases/3.1.1.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35036","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36750","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/60799","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-27/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.debian.org/security/2009/dsa-1880","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/506195/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/36200","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securitytracker.com/id?1022798","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/2490","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10726","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://development.openoffice.org/releases/3.1.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-27/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263508-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020715.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2009-0200-0201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506195/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0202","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-06-11T21:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified \"layout information\" that triggers a heap-based buffer overflow."},{"lang":"es","value":"Error de índice de array en FL21WIN.DLL en el PowerPoint Freelance Windows v2.1 Translator en Microsoft PowerPoint 2000 y 2002, permite a los atacantes remotos ejecutar arbitrariamente código a través de un archivo Freelance con \"información de diseño\" que lanza un desbordamiento de búfer dinámico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:*:*:*:*:*:*:*","matchCriteriaId":"E90939C1-ED11-4035-BD98-B1D9DCF50E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:*:*:*:*:*:*:*","matchCriteriaId":"2A610824-B284-421E-A908-F3826DA78F7D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35184","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-29/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022369","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.osvdb.org/54961","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/504215/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/35275","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51034","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/35184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-29/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504215/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0204","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Select Access de HP v6.1 y v6.2 que permite a atacantes remotos inyectar scripts web o código HTML de su elección a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_access:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3B4E2F7A-6EE0-4057-994D-002E627DA4DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:select_access:6.2:*:*:*:*:*:*:*","matchCriteriaId":"5A992571-8730-413F-9EBC-5EF07FCB5CAC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123324765514459&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123324765514459&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021641","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33505","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48334","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123324765514459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123324765514459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0206","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:09.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in NFS in HP ONCplus B.11.31.05 and earlier for HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en NFS en HP ONCplus B.11.31.05 y anteriores para HP-UX B.11.31, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:*:*:*:*:*:*:*:*","versionEndIncluding":"b.11.31_05","matchCriteriaId":"F2354EA2-3F33-4FA8-BEF7-1203A6B53D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_01:*:*:*:*:*:*:*","matchCriteriaId":"8AFB6E25-120A-473B-9ECD-0B1F18E88947"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_02:*:*:*:*:*:*:*","matchCriteriaId":"D1F3FE14-EC1C-40CB-881B-D435AEA9D975"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_03:*:*:*:*:*:*:*","matchCriteriaId":"6965559A-0400-4B74-B867-9DAA639D339B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_04:*:*:*:*:*:*:*","matchCriteriaId":"F2F966DA-FBC8-4708-8806-F44910BEFCB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123394068325944&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123394068325944&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33653","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0350","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48556","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123394068325944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123394068325944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0207","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecifica en HP-UX vB.11.11 corriendo VERITAS Oracle Disk Manager (VRTSodm) v3.5, vB.11.23 version VRTSodm v4.1 o VERITAS File System (VRTSvxfs) v4.1, vB.11.23 corriendo VRTSodm v5.0 o VRTSvxfs v5.0, y vB.11.31 corriendo VRTSodm v5.0 permite a usuarios locales conseguir privilegios de root a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:vrtsodm:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E4C55364-6E56-4638-ACAE-EAFE8AAE3B22"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:vrtsodm:4.1:*:*:*:*:*:*:*","matchCriteriaId":"223E04E3-8BD1-4FAE-B0B2-0D31B186DE97"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:vrtsodm:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F9D0EBC-7CD9-4F24-97AB-79FE788EDED4"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:vrtsvxfs:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D3143959-9791-4EBC-B02A-870211DD6EDF"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:vrtsvxfs:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9A2BB361-9948-40D7-ACF9-04F139B86BBC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123792744311063&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=123792744311063&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34419","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34226","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021891","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0823","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49403","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123792744311063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=123792744311063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0208","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP Virtual Rooms Client anterior a v7.0.1, cuando se ejecuta en Windows, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtual_rooms:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"082EF78B-F0CC-4114-B92D-5A04D377F1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtual_rooms:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3E04D0F5-4EC3-425F-BF4E-7C0F21AD0026"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123567121722181&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123567121722181&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123567121722181&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123567121722181&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0209","sourceIdentifier":"cret@cert.org","published":"2009-10-01T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors."},{"lang":"es","value":"PI Server en OSIsoft PI System anterior a v 3.4.380.x no usa adecuadamente el cifrado en el proceso de autenticación por defecto, lo que permite a atacantes remotos leer o modificar información en bases de datos a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_server:*:sp2:32bit_windows:*:*:*:*:*","versionEndIncluding":"3.4.375.99","matchCriteriaId":"E537E3DE-CF27-43A7-8429-A668D6A98568"},{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_server:2.4:*:*:*:*:*:*:*","matchCriteriaId":"5184AEE5-6726-459D-A9A1-DB50BE60D4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_server:2.6:*:*:*:*:*:*:*","matchCriteriaId":"929EB927-9953-466A-80EC-9D849A620AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_server:3.4.363.97:*:*:*:*:*:*:*","matchCriteriaId":"FBE5B6CB-6D07-4B8C-BAE9-E9F153301209"},{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_server:3.4.370:*:*:*:*:*:*:*","matchCriteriaId":"D00D4FA3-9531-4030-B492-C1F51E12AE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osisoft:pi_server:3.4.375.99:sp2:64bit_windows:*:*:*:*:*","matchCriteriaId":"E37BC8ED-73BC-4E5A-B4C9-68995D1D2BBD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506826/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/506826/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0210","sourceIdentifier":"cret@cert.org","published":"2009-02-08T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution \r\n\r\nApply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service (system crash) via unspecified vectors, aka PD28578."},{"lang":"es","value":"Desbordamiento de búfer en la aplicación MLF en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos ejecutar comandos de su elección o provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD28578."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"81433ED5-61A7-406A-BCEA-C0FB80B4B374"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*","matchCriteriaId":"00DA6AF7-707F-476F-B204-B6BD870762D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33837","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/33637","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0211","sourceIdentifier":"cret@cert.org","published":"2009-02-08T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32018."},{"lang":"es","value":"Vulnerabilidad sin especificar en la aplicación WebFGServer en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD32018."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"81433ED5-61A7-406A-BCEA-C0FB80B4B374"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*","matchCriteriaId":"00DA6AF7-707F-476F-B204-B6BD870762D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33837","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/33637","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0212","sourceIdentifier":"cret@cert.org","published":"2009-02-08T22:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution\r\n\r\n Apply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32020."},{"lang":"es","value":"Vulnerabilidad sin especificar en la aplicación WebFGServer en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD32020."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"81433ED5-61A7-406A-BCEA-C0FB80B4B374"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*","matchCriteriaId":"00DA6AF7-707F-476F-B204-B6BD870762D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33837","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/33637","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0213","sourceIdentifier":"cret@cert.org","published":"2009-02-08T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.kb.cert.org/vuls/id/337569\r\n\r\n\r\n\"III. Solution\r\nApply Patch\r\n\r\n\r\nUsers of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NETIO application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to cause a denial of service (system crash) via unknown vectors, aka PD32021."},{"lang":"es","value":"Vulnerabilidad sin especificar en la aplicación NETIO en AREVA e-terrahabitat v5.7 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de vectores no especificados. También conocidos como PD32021."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"81433ED5-61A7-406A-BCEA-C0FB80B4B374"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*","matchCriteriaId":"00DA6AF7-707F-476F-B204-B6BD870762D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33837","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/33637","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0214","sourceIdentifier":"cret@cert.org","published":"2009-02-08T22:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.kb.cert.org/vuls/id/337569 \r\n\r\n\"III. Solution \r\n\r\nApply Patch Users of e-terrahabitat version 5.5, 5.6, and 5.7 should apply the e-terrahabitat_560_P20081030_SEC patch immediately.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebFGServer application in AREVA e-terrahabitat 5.7 and earlier allows remote authenticated users to gain privileges via unknown vectors, aka PD32022."},{"lang":"es","value":"Vulnerabilidad sin especificar en la aplicación WebFGServer en AREVA e-terrahabitat v5.7 y anteriores, permite a usuarios autenticados remotamente obtener privilegios a través de vectores no especificados. También conocidos como PD32022."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"81433ED5-61A7-406A-BCEA-C0FB80B4B374"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A8C5CBA7-E0D6-4C2B-AD9F-16707B084C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:areva:e-terrahabitat:5.6:*:*:*:*:*:*:*","matchCriteriaId":"00DA6AF7-707F-476F-B204-B6BD870762D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33837","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"cret@cert.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/33637","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/33837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/337569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.scada-security.com/vulnerabilities/areva1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500689/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0215","sourceIdentifier":"cret@cert.org","published":"2009-03-25T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método GetXMLValue del control ActiveX en IBM Access Support en IbmEgath.dll, como el distribuido en los ordenadores IBM y Lenovo, permite a atacantes remotos ejecutar código arbitrario a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:access_support_activex_control:3.20.284.0:*:*:*:*:*:*:*","matchCriteriaId":"9AE3A9DF-C502-4C74-8FD6-A5FC152BB317"}]}]}],"references":[{"url":"http://osvdb.org/52958","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/34470","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/340420","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34228","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/0824","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49409","source":"cret@cert.org"},{"url":"http://osvdb.org/52958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/340420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0216","sourceIdentifier":"cret@cert.org","published":"2009-02-13T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module."},{"lang":"es","value":"GE Fanuc iFIX v5.0 y versiones anteriores utiliza una autenticación en el lado del cliente que involucra a un fichero de contraseña local con un cifrado débil, permite a atacantes remotos saltarse las restricciones de acceso implementadas e iniciar sesiones de inicio en servidores privilegiados al recuperar una contraseña o usando un módulo de programa modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"C381F126-9E7B-49B1-8A2B-E340CC7EE476"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1706147A-C9BA-4A94-ACBB-E98D2CDB8F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:2.2:*:*:*:*:*:*:*","matchCriteriaId":"2C407081-C7C5-4E74-AE2C-F743E4765DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:2.5:*:*:*:*:*:*:*","matchCriteriaId":"2B464E4D-30F5-43D8-9F3B-D56ECE9AB77A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:2.6:*:*:*:*:*:*:*","matchCriteriaId":"ADCE493A-5938-44F9-BC8A-3EB5F1046EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:2.21:*:*:*:*:*:*:*","matchCriteriaId":"BE6924D7-7D1F-4DE1-83CE-6547DB48D02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD7A791B-8966-492B-8E28-6EADCCB45924"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:3.5:*:*:*:*:*:*:*","matchCriteriaId":"22011323-85E8-43D8-AD8F-3132862E1AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2DB61FC7-6BA4-42F0-BC20-C7A49E51B793"},{"vulnerable":true,"criteria":"cpe:2.3:a:ge_fanuc:ifix:4.5:*:*:*:*:*:*:*","matchCriteriaId":"B053BA0C-9BA3-46B3-B178-55D495137A06"}]}]}],"references":[{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=search","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/310355","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/33739","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48691","source":"cret@cert.org"},{"url":"http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=search","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/310355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0217","sourceIdentifier":"cret@cert.org","published":"2009-07-14T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits."},{"lang":"es","value":"El diseño de la recomendación de W3C XML Signature Syntax and Processing (XMLDsig), tal y como es implementado en productos que incluyen (1) el componente Oracle Security Developer Tools de Application Server de Oracle en versiones 10.1.2.3, 10.1.3.4 y 10.1.4.3IM; (2) el componente WebLogic Server de Product Suite de BEA en las versiones 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0 y 8.1 SP6; (3) Mono anterior a versión 2.4.2.2; (4) XML Security Library anterior a versión 1.2.12; (5) WebSphere Application Server de IBM versiones 6.0 hasta 6.0.2.33, versiones 6.1 hasta 6.1.0.23 y versiones 7.0 hasta 7.0.0.1; (6) JDK y JRE de Sun Update 14 y versiones anteriores; (7) .NET Framework de Microsoft versiones 3.0 hasta 3.0 SP2, versiones 3.5 y 4.0; y otros productos utilizan un parámetro que define una longitud de truncamiento HMAC (HMACOutputLength) pero no requiere un mínimo para esta longitud, lo que permite a los atacantes suplantar firmas basadas en HMAC y omitir la autenticación mediante la especificación de una longitud de truncamiento con un pequeño número de bits."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01F45BA3-6504-47AF-B757-7B6D3526FBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F5EE7744-4584-4AE4-9F27-11EFAA002E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE0C501-4062-49D0-8983-5E92765C7181"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D40DEF90-CE7F-46BB-A6FF-50C1797866B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C43D3515-D9F5-4DC8-A030-9F97593495F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1968803-FF03-477C-81FE-87528FC6DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"62C1CA3B-E575-4531-A336-8BFC9F5DEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6C130982-8C6E-413E-8296-C9C277FCBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5E1790E4-073A-4666-80CB-4D967928A0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"6239EEAE-5852-4DF7-8627-87139BBB03B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*","matchCriteriaId":"D592217D-3489-40AE-8338-BF5AA5BBA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*","matchCriteriaId":"05BC8C52-DA95-4BF2-AD47-9922741CAAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"403E554C-FD1B-42CE-82C2-43CC191905DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"78278FE6-26EA-4E89-9423-EABA6C4D8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"15E1695E-FD6E-4602-9BD9-9CFFF20574CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"691B3AF1-7F3F-4A7D-9F16-FE6044E33482"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2DE3739-A2ED-47D7-9AE9-442A95ACFC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDAB5331-AD2E-483C-93C3-8095BBBA0572"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:1.9:*:*:*:*:*:*:*","matchCriteriaId":"E3CC03DC-14A6-4C45-9511-7CE8E7F727BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mono_project:mono:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C71A1398-8AA5-4AB3-89C8-E2E2B36FA5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.3im:*:*:*:*:*:*:*","matchCriteriaId":"25672ED0-9830-48B3-899A-405B97E2229A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"B3B986B9-A82B-4087-808E-854EC443AC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6AF95249-8970-406B-B874-4B9925471C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:9.1:*:*:*:*:*:*:*","matchCriteriaId":"DD536DD6-AF76-4075-8B28-322FB65793AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"9BDA1940-A3F4-4CEC-BDD0-B098B2E27CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"3BB8A45D-95E5-4F14-A51A-29B5A6E45F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server_component:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E3D253B-73D7-4916-B5E4-9D553741E98C"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161","source":"cret@cert.org"},{"url":"http://git.gnome.org/cgit/xmlsec/commit/?id=34b349675af9f72eb822837a8772cc1ead7115c7","source":"cret@cert.org"},{"url":"http://git.gnome.org/cgit/xmlsec/patch/?id=34b349675af9f72eb822837a8772cc1ead7115c7","source":"cret@cert.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cret@cert.org"},{"url":"http://osvdb.org/55895","source":"cret@cert.org"},{"url":"http://osvdb.org/55907","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/34461","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35776","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35852","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35853","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35854","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35855","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35858","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36162","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36494","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/37671","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/37841","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38567","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38568","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38695","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38921","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/41818","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60799","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263429-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020710.1-1","source":"cret@cert.org"},{"url":"http://svn.apache.org/viewvc?revision=794013&view=revision","source":"cret@cert.org"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg21384925","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.aleksey.com/xmlsec/","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2010/dsa-1995","source":"cret@cert.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/466161","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7TSKXQ","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/WDON-7TY529","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cret@cert.org"},{"url":"http://www.mono-project.com/Vulnerabilities","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-0217.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/35671","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022561","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022567","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022661","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/USN-903-1","source":"cret@cert.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-159B.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1908","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1909","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1911","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/3122","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2010/0366","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2010/0635","source":"cret@cert.org"},{"url":"http://www.w3.org/2008/06/xmldsigcore-errata.html#e03","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511915","source":"cret@cert.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041","source":"cret@cert.org"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=47526","source":"cret@cert.org"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=47527","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10186","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8717","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1428.html","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/826-1/","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00505.html","source":"cret@cert.org"},{"url":"http://blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.gnome.org/cgit/xmlsec/commit/?id=34b349675af9f72eb822837a8772cc1ead7115c7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.gnome.org/cgit/xmlsec/patch/?id=34b349675af9f72eb822837a8772cc1ead7115c7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263429-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020710.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?revision=794013&view=revision","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023723&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg21384925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.aleksey.com/xmlsec/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-1995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/466161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7TSKXQ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/WDON-7TY529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mono-project.com/Vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-0217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-903-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-159B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.w3.org/2008/06/xmldsigcore-errata.html#e03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.w3.org/QA/2009/07/hmac_truncation_in_xml_signatu.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=47526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=47527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1428.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/826-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00494.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00505.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0218","sourceIdentifier":"cret@cert.org","published":"2009-04-13T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in Particle Software IntraLaunch Application Launcher ActiveX control in IntraLaunch.ocx, as used in LDRA TBbrowse and possibly other products, allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de método inseguro en el control ActiveX Particle Software IntraLaunch Application Launcher en IntraLaunch.ocx, tal como se utiliza en LDRA TBbrowse y posiblemente otros productos, permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ldra:tbbrowse:*:*:*:*:*:*:*:*","matchCriteriaId":"895AFA6E-E2D0-4B53-8AF5-E282B1A92372"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:particlesoftware:intralaunch:-:*:*:*:*:*:*:*","matchCriteriaId":"0874C9E8-F91A-4F58-BBD9-CE1B30BD01A0"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/908801","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7PYRP4","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/WDON-7Q4RZN","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34395","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49684","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/908801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7PYRP4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/WDON-7Q4RZN","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0219","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T01:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file."},{"lang":"es","value":"El PDF distiller en el servicio Attachment en Research in Motion (RIM) BlackBerry Enterprise Server (BES) v4.1.3 hasta v4.1.6, BlackBerry Professional Software v4.1.4, y BlackBerry Unite! anteriores a v1.0.3 bundle 28 realiza operaciones de borrado en punteros sin inicializar, lo que permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de una secuencia de datos manipulada en un fichero .pdf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4DDE9EAC-D9FF-47C2-A830-0316F74D822E"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F3B71789-C43D-4D75-9C49-71D9347EF321"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"59C67945-B4C6-4159-8FF0-05227D46E282"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D2FE657D-6988-4A19-B0EC-8D9413AB7A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E3AB6DC-0733-4683-B495-2FF85923ACB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"9DC011EA-0F76-4554-B19D-3B93F7C1D774"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D4FFD7E-241B-458A-AB88-C4C06E47C017"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3C6120B4-CEE1-412B-9EE3-9F2B0BE690A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_unite:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5A748FD0-2FED-4C8F-9693-ED16095E917A"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33250","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021559","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0220","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via crafted formatting data for paragraphs in a file that uses a PowerPoint 4.0 native file format, related to (1) an incorrect calculation from a record header, or (2) an interget that is used to specify the number of bytes to copy, aka \"Legacy File Format Vulnerability.\""},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en el importador de PowerPoint versión 4.0 (biblioteca PP4X32. DLL) en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de datos de formato diseñados para párrafos en un archivo que utiliza un formato de archivo nativo de PowerPoint versión 4.0 , relacionado con (1) un cálculo incorrecto a partir de un encabezado record, o (2) un interget que se utiliza para especificar el número de bytes a copiar, también se conoce como \"Legacy File Format Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54386","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34833","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0221","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for \"collaboration information for different slides\" that contains a field that specifies a large number of records, which triggers an under-allocated buffer and a heap-based buffer overflow, aka \"Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en Microsoft Office PowerPoint 2002 SP3 y 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través un tipo de registro inválido en un fichero PowerPoint que lanza una corrupción de memoria, también conocido como \"Vulnerabilidad de desbordamiento de entero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54394","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34835","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0222","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a \"pointer overwrite\" and memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137."},{"lang":"es","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 4.0, que lleva a \"sobreescritura de puntero\" y corrupción de memoria, también conocido como \"Vulnerabilidad de formato de fichero legado\", una vulnerabilidad diferente a CVE-2009-0223, CVE-2009-0226, CVE-2009-0227, y CVE-2009-1137."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://osvdb.org/54382","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34831","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/exploits/Microsoft_PowerPoint_Memory_Corruption_Code_Execution_Exploit_MS09_017_1290124.php","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Microsoft_PowerPoint_Pointer_Overwrite_Code_Execution_Exploit_MS09_017_1290123.php","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6143","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/exploits/Microsoft_PowerPoint_Memory_Corruption_Code_Execution_Exploit_MS09_017_1290124.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Microsoft_PowerPoint_Pointer_Overwrite_Code_Execution_Exploit_MS09_017_1290123.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0223","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, and CVE-2009-1137."},{"lang":"es","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, ay 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 4.0, que lleva a  una corrupción de memoria, también conocido como \"Vulnerabilidad de formato de fichero legado\" una vulnerabilidad diferente a CVE-2009-0222, CVE-2009-0226, CVE-2009-0227, y CVE-2009-1137."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34834","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6269","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0224","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly validate PowerPoint files, which allows remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers, which triggers memory corruption, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, y 2007 SP1 y SP2; PowerPoint Viewer 2003 y 2007 SP1 y SP2; PowerPoint en Microsoft Office 2004 para Mac y 2008 para Mac; Open XML File Format Converter para Mac; Microsoft Works 8.5 y 9.0; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2 no valida adecuadamente la lista de registros en ficheros PowerPoint, lo que permite a atantes remotos ejecutar código de su elección a través de ficheros manipulados que lanzan una corrupción de memoria relacionada con un tipo de registro inválido, también conocido como \"Vulnerabilidad de corrupción de memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:*:*:*:*:*:*:*","matchCriteriaId":"AB5FE646-2516-4E38-BE3F-9F987CBBB70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*","matchCriteriaId":"CD97FF64-64A5-467C-B352-45B89B4A6536"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:sp1:*:*:*:*:*","matchCriteriaId":"5E8B5977-31FA-4018-80E1-908016F3C224"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"995D5C53-7C55-4BD9-859D-F4573AA6D238"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"A5440EF5-462B-4BAC-AF60-44C5D649D0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2004:*:mac:*:*:*:*:*","matchCriteriaId":"794FCFBF-2D55-4ECE-825E-180616DB35FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2008:*:mac:*:*:*:*:*","matchCriteriaId":"DBF95693-8941-4F28-8860-87F038724823"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0579650D-24E9-46FF-8876-5164D4397E10"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34879","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6023","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0225","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper \"array indexing\" and memory corruption, aka \"PP7 Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office PowerPoint 2002 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 95, que lleva a un \"indexado del array\" y una corrupción de memoria inadecuados, también conocido como \"Vulnerabilidad de corrupción de memoria PP7\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"}]}]}],"references":[{"url":"http://osvdb.org/54388","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34880","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0226","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0227, and CVE-2009-1137."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el filtro de conversión de PowerPoint versión 4.2 en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena larga en datos de sonido en un archivo que utiliza un formato de archivo nativo de PowerPoint versión 4.0, conllevando a una corrupción de memoria, también se conoce como \"Legacy File Format Vulnerability\", una vulnerabilidad diferente de los CVE-2009-0222, CVE-2009-0223, CVE-2009-0227 y CVE-2009-1137."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=789","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34881","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6106","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0227","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-1137."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el filtro de conversión de PowerPoint versión 4.2 (biblioteca PP4X32. DLL) en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un gran número de estructuras en datos de sonido en un archivo que utiliza un formato de archivo nativo de PowerPoint versión 4.0, conllevando a una corrupción de memoria, también se conoce como \"Legacy File Format Vulnerability\", una vulnerabilidad diferente a los CVE-2009-0222, CVE-2009-0223, CVE-2009-0226 y CVE-2009-1137."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=787","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54384","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34882","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6239","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0228","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to \"printing data structures,\" aka \"Buffer Overflow in Print Spooler Vulnerability.\""},{"lang":"es","value":"Desbordamiento de buffer basado en pila en la función EnumeratePrintShares en Windows Print Spooler Service (win32spl.dll) en Microsoft Windows 2000 SP4 permite a servidores de impresión remotos ejecutar código arbitrario a través de un ShareName manipulado en respuesta a una petición RPC, relacionado con \"estructuras de datos impresos\", también conocido como \"Buffer Overflow in Print Spooler Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=806","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54932","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35365","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35206","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022352","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1541","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6317","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0229","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka \"Print Spooler Read File Vulnerability.\""},{"lang":"es","value":"Servicio de impresión de Windows en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1 y SP2, y Server 2008 SP2 permite a usuarios locales leer archivos arbitrarios a través de un separador de página elaborado, alias \"Vulnerabilidad de lectura de archivo en cola de impresión\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*","matchCriteriaId":"11AFB73A-1C61-40F1-8415-E4D40BB2699B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*","matchCriteriaId":"D21D1DFE-F61B-407E-A945-4F42F86947B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:x32:*:*:*:*:*:*","matchCriteriaId":"33331586-245C-4C11-9869-DD00578F9725"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*","matchCriteriaId":"9F916C0D-3B99-46F3-A7AE-BAF067361499"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"E69F8C21-5996-4083-A02A-F04AE948CEA9"}]}]}],"references":[{"url":"http://osvdb.org/54933","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35365","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35208","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022352","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1541","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5815","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0230","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka \"Print Spooler Load Library Vulnerability.\""},{"lang":"es","value":"La cola de impresión de Windows en Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 permite a usuraio autenticados remotamente obtener privilegios a través de un mensaje RCP manipulado que lanza la carga de un archivo DLL desde un directorio de su elección, también conocido como \"Vulnerabilidad en la  carga librería de la cola de impresión\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:itanium:*","matchCriteriaId":"39F303CD-DB64-4FE6-AB4F-461E5E8AFB83"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"17804445-2C63-4381-A721-7F3BB3DC645F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server:2008:*:*:*:*:*:itanium:*","matchCriteriaId":"EF19CAA4-DAF7-4237-9F1F-153E28E19A01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server:2008:*:sp2:*:*:*:itanium:*","matchCriteriaId":"E8C46066-5DDF-4FB1-8EEC-CDFA8D588DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*","matchCriteriaId":"BAB70FD5-09F3-4215-99C4-299EDE8D26DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"2127D10C-B6F3-4C1D-B9AA-5D78513CC996"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*","matchCriteriaId":"06E7E0F7-AA6F-477C-AAA7-C0419CD2F3BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"ABBA5D64-4184-4420-B7D0-A4E41359AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/54934","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35365","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35209","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022352","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1541","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/54934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0231","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in a data record that triggers an integer truncation and a heap-based buffer overflow, aka \"Embedded OpenType Font Heap Overflow Vulnerability.\""},{"lang":"es","value":"El Motor de Fuente de Embedded OpenType (EOT) (T2EMBED. DLL) en Microsoft Windows versiones 2000 SP4, XP SP2 y SP3, Server 2003 SP2, vista Gold, SP1 y SP2, y Server 2008 Gold y SP2, permiten a los atacantes remotos ejecutar código arbitrario por medio de una tabla de nombres creada en un registro de datos que desencadena un truncamiento de enteros y un desbordamiento del búfer en la región heap de la memoria, también se conoce como \"Embedded OpenType Font Heap Overflow Vulnerability\""}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-681"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C9FE4961-58EE-4DB2-B712-790CC2FA7996"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=811","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://osvdb.org/55842","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022543","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1887","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5457","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/55842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-0232","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table, aka \"Embedded OpenType Font Integer Overflow Vulnerability.\""},{"lang":"es","value":"Embedded OpenType (EOT) Font Engine en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, permite a atacantes remotos ejecutar código de su elección a través de un nombre de tabla manipulado, también conocido como \"Vulnerabilidad Embedded OpenType Font Integer Overflow\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1022543","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1887","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5678","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0233","sourceIdentifier":"secure@microsoft.com","published":"2009-03-11T14:19:15.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not reuse cached DNS responses in all applicable situations, which makes it easier for remote attackers to predict transaction IDs and poison caches by simultaneously sending crafted DNS queries and responses, aka \"DNS Server Query Validation Vulnerability.\""},{"lang":"es","value":"El DNS Resolver Cache Service (también conocido como DNSCache) en Windows DNS Server en Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, y Server 2008, cuando las actualizaciones dinámicas están activadas, no rechaza las respuestas en caché en todas las situaciones aplicables, lo que facilita a atacantes remotos predecir los IDs de las transacción y envenenar la caché mediante el envío simultáneo peticiones y respuestas DNS envenenadas , también conocida como \"vulnerabilidad DNS Server Query Validation \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52517","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34217","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/33982","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021831","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6228","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0234","sourceIdentifier":"secure@microsoft.com","published":"2009-03-11T14:19:15.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted DNS queries that trigger \"unnecessary lookups,\" aka \"DNS Server Response Validation Vulnerability.\""},{"lang":"es","value":"El DNS Resolver Cache Service (también conocido como DNSCache) en Windows DNS Server en Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, y Server 2008, no cachea adecuadamente las respuestas DNS manipuladas, lo que facilita a atacantes remotos el predecir los IDs de las transacción y envenenar la caché mediante el envío de varias peticiones DNS manipuladas lo que provoca \"lookups innecesarios\", también conocida como \"vulnerabilidad DNS Server Response Validation \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"secure@microsoft.com"},{"url":"http://osvdb.org/52518","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34217","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"secure@microsoft.com"},{"url":"http://www.kb.cert.org/vuls/id/319331","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33988","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021831","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5715","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/03/13/ms09-008-dns-and-wins-server-security-update-in-more-detail.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-083.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/319331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-069A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0235","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka \"WordPad Word 97 Text Converter Stack Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el conversor de texto Word 97 en WordPad en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de ficheros Word 97 manipulados que disparan corrupción de memoria, también conocido como \"Vulnerabilidad de desbordamiento de pila en el conversor de texto WordPad Word 97\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*","matchCriteriaId":"FE8F4276-4D97-480D-A542-FE9982FFD765"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=783","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53664","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34470","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022043","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5893","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0237","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote attackers to inject arbitrary web script or HTML via \"authentication input\" to this component, aka \"Cross-Site Scripting Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cookieauth.dll en el componente HTML forms authentication en Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); e Internet Security and Acceleration (ISA) Server 2006, 2006 Supportability Update, y 2006 SP1; permite a atacantes remotos inyectar código web script o HTML de su elección a través de \"entrada de autenticación\" a este componente, también conocido como \"Vulnerabilidad de secuencias de comandos en sitios cruzados\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_threat_management_gateway:-:-:medium_business:*:*:*:*:*","matchCriteriaId":"034CCD4A-9B8D-466F-AEE7-82D25613BA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"234D43DB-0FC3-4B94-8883-EEE99A427E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:standard:*:*:*:*:*","matchCriteriaId":"64ACA6AB-44C3-4B33-BEA1-04DFF004FA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:*:*:*:*:*:*","matchCriteriaId":"62CDCE9A-440C-4268-9430-BCD5E79D6ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:supportability:*:*:*:*:*:*","matchCriteriaId":"9171409D-53E1-472B-A8E8-A3471C4F3BC5"}]}]}],"references":[{"url":"http://osvdb.org/53637","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34687","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022046","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1030","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5771","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0238","sourceIdentifier":"secure@microsoft.com","published":"2009-02-25T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC."},{"lang":"es","value":"Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3 y 2007 SP1; Excel Viewer 2003 Gold y SP3; Excel Viewer; Compatibility Pack para Word, Excel y PowerPoint 2007 File Formats SP1; y Excel de Microsoft Office 2004 y 2008 para Mac; permiten a atacantes remotos ejecutar código de su elección a través de un documento Excel manipulado que provoca un intento de acceso a un objeto no válido, tal y como se ha explotado libremente en Febrero 2009 por MDropper.XR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2004:*:mac:*:*:*:*:*","matchCriteriaId":"CE1A1218-8033-4F3C-B8D7-7D1D61A273E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"971EC323-267F-4DAF-BA3B-10A47A9F1ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"ECDF1C1D-EF63-4A3E-AEE2-2D2D9FDBF368"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:gold:*:*:*:*:*:*","matchCriteriaId":"D2289060-BDF3-4F45-B256-FE3DBA8181E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=2658","source":"secure@microsoft.com"},{"url":"http://isc.sans.org/diary.html?storyid=5923","source":"secure@microsoft.com"},{"url":"http://securitytracker.com/id?1021744","source":"secure@microsoft.com"},{"url":"http://www.microsoft.com/technet/security/advisory/968272.mspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33870","source":"secure@microsoft.com"},{"url":"http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1023","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48875","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968","source":"secure@microsoft.com"},{"url":"http://blogs.zdnet.com/security/?p=2658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=5923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/security/advisory/968272.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0239","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka \"Script Execution in Windows Search Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Windows Search v4.0 para Microsoft Windows XP SP2 y SP3 y Server 2003 SP2, permite a atacantes remotos asistidos por usuarios inyectar secuencias de comandos web o HTML de su elección a través un fichero manipulado que aparece en una vita previa como  resultado de una búsqueda, también conocido como \"Vulnerabilidad de Ejecución de secuencia de comandos en Búsqueda en Windows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_search:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EE057D58-FD03-4AC8-8000-0690961D9458"}]}]}],"references":[{"url":"http://osvdb.org/54935","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35366","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022353","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1542","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-023","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5428","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0240","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T02:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter."},{"lang":"es","value":"listing.php en WebSVN 2.0 y posiblemente 1.7 beta, cuando utilizan un fichero SVN authz, permite a usuarios autenticados remotamente leer changelogs o diffs para proyectos restringidos a través del parámetro modificado \"repname\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigris:websvn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F686556C-9E63-48A6-A497-FC0103FFEA27"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34191","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1725","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/18/2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48171","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/18/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0241","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname."},{"lang":"es","value":"desbordamiento de búfer basado en pila en la función process_path en gmetad/server.c en Ganglia v3.1.1 permite a atacantes remotos provocar una denegación de servicio (caida) a través de un petición al servicio gmetad con un nombre de ruta largo."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0241\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update of Red Hat HPC Solution may address this flaw.  More information regarding\nissue severity can be found here: http://www.redhat.com/security/updates/classification/\n","lastModified":"2009-01-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ganglia:ganglia:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1B92DC96-8FD2-463A-A7AA-6B570249C588"}]}]}],"references":[{"url":"http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=223","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33506","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34228","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-22.xml","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/ganglia-developers%40lists.sourceforge.net/msg04929.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33299","source":"cve@mitre.org"},{"url":"http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/ganglia-developers%40lists.sourceforge.net/msg04929.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0242","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T11:30:04.233","lastModified":"2023-11-07T02:03:36.253","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to (1) perform excessive CPU computation and (2) send the entire tree, which consumes network bandwidth.  NOTE: the vendor and original researcher have disputed this issue, since legitimate requests can generate the same amount of resource consumption.  CVE concurs with the dispute, so this identifier should not be used"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  For more information, please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0242","lastModified":"2009-01-22T00:00:00.000"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0243","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) inserting CD-ROM media, (2) inserting DVD media, (3) connecting a USB device, and (4) connecting a Firewire device; (5) allows user-assisted remote attackers to execute arbitrary code by mapping a network drive; and allows user-assisted attackers to execute arbitrary code by clicking on (6) an icon under My Computer\\Devices with Removable Storage and (7) an option in an AutoPlay dialog, related to the Autorun.inf file.  NOTE: vectors 1 and 3 on Vista are already covered by CVE-2008-0951."},{"lang":"es","value":"Microsoft Windows no respeta correctamente los valores del registro Autorun y NoDriveTypeAutoRun, lo que permite a atacantes físicamente próximos ejecutar código de su elección (1) introduciendo un CD-ROM, (2) introduciendo un DVD, (3) conectando un dispositivo USB y (4) conectando un dispositivo Firewire; (5) permite a atacantes remotos ayudados por el usuario ejecutar código de su elección mapeando un dispositivo de red; y permite a atacantes ayudados por el usuario ejecutar código de su elección haciendo click en (6) un icono en Mi PC\\Dispositivos con almacenamiento extraíble  y (7) una opción en un diálogo AutoPlay, relacionado con el archivo Autorun.inf.  NOTA: los vectores 1 y 3 en Vista ya están cubiertos por CVE-2008-0951."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*","matchCriteriaId":"E0BBA081-24D5-4990-882F-69CB05CC28CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5695","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021629","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-020A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://isc.sans.org/diary.html?storyid=5695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-020A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0244","sourceIdentifier":"cve@mitre.org","published":"2009-01-21T20:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"per: http://www.seguridadmobile.com/windows-mobile/windows-mobile-security/Microsoft-Bluetooth-Stack-Directory-Traversal.html\n\n\"Non vulnerable products: Windows Mobile devices 5.0 and 6 not using Microsoft Bluetooth Stack (for example: ASUS P525, ASUS P535, ... using Widcomm/Broadcom Bluetooth Stack)\"","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el Servicio OBEX FTP en la pila de Microsoft Bluetooth en Windows Mobile 6 Professional, y probablemente Windows Mobile 5.0 para Pocket PC y 5.0 para Pocket PC Phone Edition, permite a usuarios remotamente autentificados listar directorios de su elección y crear o leer archivos de su elección mediante .. (punto punto) en un nombre de ruta. NOTA: esto se puede utilizar para ejecución de código escribiendo en una carpeta de Inicio (Startup)."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"188596B9-7646-4841-B684-B224B48B3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:5.0:*:pocket_pc:*:*:*:*:*","matchCriteriaId":"923D7E31-E220-41C5-A8CE-2E9B5D1592A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:5.0:*:smartphone:*:*:*:*:*","matchCriteriaId":"92EDBE39-3281-4CD0-9D33-1588C5D0A8A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"54F2E86B-81CA-45D7-94B4-048F0A01650C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:6.0:*:pro:*:*:*:*:*","matchCriteriaId":"CFEFCF17-883B-4BCC-B507-389D1C58F454"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_mobile:6.0:*:standard:*:*:*:*:*","matchCriteriaId":"E8239CB3-919E-4EEE-A694-DED5CCBA1F5A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33598","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/4938","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500199/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33359","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seguridadmobile.com/windows-mobile/windows-mobile-security/Microsoft-Bluetooth-Stack-Directory-Traversal.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48124","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/33598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securityreason.com/securityalert/4938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500199/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seguridadmobile.com/windows-mobile/windows-mobile-security/Microsoft-Bluetooth-Stack-Directory-Traversal.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0245","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T02:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Usagi Project MyNETS v1.2.0.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar, un caso diferente a CVE-2008-4629."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0.1","matchCriteriaId":"53FC7B73-A129-419D-902F-FECF98A30BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"001A5E27-2F13-41C0-8769-C1262DE3CB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EDF429A-B5AF-4B0B-887B-7009B310AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"41627062-FB62-47E2-8C1E-F0CFAE97504F"},{"vulnerable":true,"criteria":"cpe:2.3:a:usagi:mynets:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"96F0C4E8-02E8-469A-B50A-E3B922AB440A"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN36802959/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://usagi-project.org/PRESS/archives/57","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33145","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN36802959/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://usagi-project.org/PRESS/archives/57","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0246","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en easyHDR PRO v1.60.2 permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero Radiance RGBE (también conocido como .hdr)no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyhdr:easyhdr:1.60.2:*:pro:*:*:*:*:*","matchCriteriaId":"496F7608-C065-4033-99B3-74EB14D07D5F"}]}]}],"references":[{"url":"http://easyhdr.com/version.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-61/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4941","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500192/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33363","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0190","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48119","source":"cve@mitre.org"},{"url":"http://easyhdr.com/version.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-61/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500192/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0247","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting (XSS), which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable."},{"lang":"es","value":"El servidor para ediciones 53KF Web IM 2009 Home, Professional, y Enterprise se basa en mecanismos de protección en sitios de cliente a través de secuencias de comandos en sitios cruzados (XSS), lo cual permite a atacantes remotos llevar a cabo ataques XSS utilizando un cliente modificado para enviar un mensaje IM manipulado, relacionado con la variabl \"msg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:53kf:web_im_2009:_nil_:enterprise:*:*:*:*:*:*","matchCriteriaId":"95D5DAB0-C3DD-47C0-9E7F-12DE6848AC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:53kf:web_im_2009:_nil_:home:*:*:*:*:*:*","matchCriteriaId":"5512CEBE-777E-479F-B949-B99CA42386CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:53kf:web_im_2009:_nil_:professional:*:*:*:*:*:*","matchCriteriaId":"632F457F-EFE1-41BE-993C-A2BDB2265F44"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500169/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33341","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48096","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0248","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en rankup.asp in Katy Whitton RankEm permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro siteID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*","matchCriteriaId":"EDDD735F-165E-43E7-B227-3BEC885654B2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33324","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48072","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7805","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0249","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for database/topsites.mdb."},{"lang":"es","value":"Katy Whitton RankEm almacena información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar una base de datos que contiene credenciales mediante una petición directa a database/topsites.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:rankem:*:*:*:*:*:*:*:*","matchCriteriaId":"EDDD735F-165E-43E7-B227-3BEC885654B2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48070","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7805","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0250","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password."},{"lang":"es","value":"Ryneezy phoSheezy v0.2 almace información sensible en la raíz web con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el fichero que contiene el hash de la contraseña de administrador a través de una petición a config/password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ryneezy:phosheezy:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8F8DE0D9-CDC3-4447-8897-5C74247CC6FF"}]}]}],"references":[{"url":"http://osvdb.org/51411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4935","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48056","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7780","source":"cve@mitre.org"},{"url":"http://osvdb.org/51411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0251","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin.php en Ryneezy phoSheezy v0.2 permite a administradores remotos autenticados inyectar código PHP de su elección en config/footer a través del parámetro footer.\r\nNOTA: esto puede ser explotado por atacantes sin autenticación utilizando CVE-2009-0250.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ryneezy:phosheezy:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8F8DE0D9-CDC3-4447-8897-5C74247CC6FF"}]}]}],"references":[{"url":"http://osvdb.org/51412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4935","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7780","source":"cve@mitre.org"},{"url":"http://osvdb.org/51412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/4935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0252","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en default.asp en Enthrallweb eReservations, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"Login\" (alias campo username) o el parámetro (2) \"Password\" (alias campo password). NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enthrallweb:ereservations:*:*:*:*:*:*:*:*","matchCriteriaId":"7999D016-295C-4A8C-A4D3-202862F4390C"}]}]}],"references":[{"url":"http://osvdb.org/51456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33321","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48062","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7801","source":"cve@mitre.org"},{"url":"http://osvdb.org/51456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0253","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T18:30:03.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Status Bar Obfuscation\" and \"Clickjacking\" attack."},{"lang":"es","value":"Mozilla Firefox v3.0.5 permite a atacantes remotos inducir a un usuario a visitar una URL de su elección a través de una acción onclick que mueve un elemento manipulado a la posición actual del ratón, en relación con un ataque de \"Ofuscación de la barra de estado\" y \"Clickjacking\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4936","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48212","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7842","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0254","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T18:30:03.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en easyHDR PRO v1.60.2 permite a atacantes remotos ayudados por el usuario ejecutar código de su elección a través de un fichero Flexible Image Transport System (FITS) inválido. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyhdr:easyhdr:1.60.2:*:pro:*:*:*:*:*","matchCriteriaId":"496F7608-C065-4033-99B3-74EB14D07D5F"}]}]}],"references":[{"url":"http://easyhdr.com/version.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33363","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0190","source":"cve@mitre.org"},{"url":"http://easyhdr.com/version.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0255","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key."},{"lang":"es","value":"La herramienta de instalación de extensiones del sistema en TYPO3 v4.0.9 a v4.0.0, v4.1.0 a v4.1.7, v4.2.0 y v4.2.3 crea la clave de encriptación con una insuficiente aleatoriedad en la semilla, lo que facilita craquear la clave a los atacantes."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"4.0.10","matchCriteriaId":"FCD45EC2-1866-4CFC-B841-8B0B879B5565"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndExcluding":"4.1.8","matchCriteriaId":"EB66C8C2-1FAE-4C54-9284-A940CBEDBC00"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.4","matchCriteriaId":"BBFEC718-5811-4B4D-96CF-A37488974D4A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33617","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33376","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48132","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/33617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0256","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T23:30:04.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en la librería de autenticación en TYPO3 v4.0.0 a v4.0.9, v4.1.0 a v4.1.7 y v4.2.0 a v4.2.3, permite a atacantes remotos secuestrar sesiones web mediante vectores no especificados, en relación con (1) el interfaz externo y (2) la autenticación del interfaz interno."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33376","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0257","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T23:30:04.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TYPO3 v4.0.0 a v4.0.9, v4.1.0 a 4.1.7 y v4.2.0 a v4.2.3, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el (1) nombre y (2) el contenido de ficheros indexados para (a) la extensión del sistema Indexed Search Engine (indexed_search), (b) comandos de prueba no especificados en la extensión del sistema ADOb y (c) vectores no especificados en el módulo Workspace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33376","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48135","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0258","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T23:30:04.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión del sistema de la Indexed Search Engine (indexed_search) en TYPO3 v4.0.0 a v4.0.9, v4.1.0 a 4.1.7 y v4.2.0 a v4.2.3 permite a atacantes remotos ejecutar comandos de su elección mediante vectores desconocidos relacionados con la la línea de comandos indexer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/23/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33376","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/23/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0259","sourceIdentifier":"cve@mitre.org","published":"2009-01-22T23:30:04.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated by 2008-crash.doc.rar, and a similar issue to CVE-2008-4841."},{"lang":"es","value":"El procesador de textos en OpenOffice.org v1.1.2 a v1.1.5 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un fichero (1).doc, (2).wri, o (3) .rtf de Word 97 manipulado que provoca una corrupción de memoria, como se ha explotado libremente en diciembre de 2008 y como ha sido demostrado por 2008-crash.doc.rar y una cuestión similar a CVE-2008-4841."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue can only result in an OpenOffice.org crash, not allowing arbitrary code execution.  Red Hat does not consider a crash of a client application such as OpenOffice.org to be a security issue.","lastModified":"2009-01-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B3CA2D68-D190-43B7-93CD-266EEAA9E5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A1204A-BA46-46BF-9E1F-BACFA84D3761"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"738D5F15-A9D2-4CB3-8D78-685AB805DD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E697B8A3-447B-4D7B-A02B-191119453CCB"}]}]}],"references":[{"url":"http://milw0rm.com/sploits/2008-crash.doc.rar","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/21/9","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48213","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6560","source":"cve@mitre.org"},{"url":"http://milw0rm.com/sploits/2008-crash.doc.rar","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/21/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0260","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka the basename variable)."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py en MoinMoin antes de v1.8.1, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una acción AttachFile a el componente WikiSandBox con los parámetros (1) rename o (2) drawing (alias la variable basename)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.0","matchCriteriaId":"9CF9B689-609F-4BDA-AD95-BB43EA4A436C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D2866E-A684-4EB7-A127-5FEC934945E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BDC4AB6-39BF-4444-9CFE-B654A19814C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD78CAE-9A9D-40AA-AD1F-C124A8315714"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8673FFE8-349E-4412-9913-1145DFA1EC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"24271A6D-21D9-4E8D-997F-0EC132518FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3072B82-3D5C-46DF-8869-08FAAC5C70DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*","matchCriteriaId":"93508FCF-7852-4CB9-AD91-AB0FCD61BE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83ACA6-5C3C-46E3-805C-EE1E759B7331"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2354B8-9A1A-4E75-92AC-F16CFDF91761"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6B44C24B-013E-4769-A200-D59752E0A041"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB8DB90E-BEE5-447E-9F78-A96634343815"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"84317439-A287-4897-9608-65095860AB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2FB70477-B0F2-44D6-92A8-0F42F890CF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"013FBB75-8B01-4249-9C6C-5E27964ED2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"361C37DC-CB43-4E6A-A198-313A9D62CD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3D66C-3D24-41D0-9E4B-BB458DD5517D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"0A4C9F85-C5EF-4991-A005-5839951B9843"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"690F09A1-6195-404D-BDC3-5F02A4A201C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*","matchCriteriaId":"F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57003BFE-8FB2-480A-AFA1-63817B608F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B0FD9248-1E4B-46DC-9F78-20787F56D50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"23539FCA-FF83-46E5-A9E2-5051D975DC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6:*:*:*:*:*:*:*","matchCriteriaId":"10CFA717-B536-46CF-8D96-B850EB4C6F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03FBCD1B-2D05-4C17-B41C-CF8DA75BB05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"51DF4CAC-EDD8-4C71-BC77-0F516692B5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB1CAAA6-8D33-4901-88E2-120AB7B4CD53"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1F89B87E-70F6-4B3C-B684-BE2666342F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"33BA7179-8A11-41C1-8F54-AC9316E8330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"59C423EE-D9F5-4570-A5E8-1AA34F05E0EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4B12CADC-8939-462C-8D40-DD56B13773AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A19C0F96-9054-4DE9-92AD-A9DAF03B4960"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1","source":"cve@mitre.org"},{"url":"http://moinmo.in/SecurityFixes#moin1.8.1","source":"cve@mitre.org"},{"url":"http://osvdb.org/51485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500197/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33365","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0195","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48126","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2009/dsa-1715","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moinmo.in/SecurityFixes#moin1.8.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500197/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2009/dsa-1715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0261","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\\DefaultSkin\\DefaultSkin.ini file with a large ColumnHeaderSpan value."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en EffectMatrix Total Video Player 1.31 permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero Skins\\DefaultSkin\\DefaultSkin.ini con un valor ColumnHeaderSpan largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:effectmatrix:total_video_player:1.31:*:*:*:*:*:*:*","matchCriteriaId":"C890FFCA-620F-4097-BA6F-5041D5E1C2C9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48140","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0262","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Triologic Media Player v7 y v8.0.0.0 permite a atacantes asistidos por el usuario la ejecución de código de su elección a través de un fichero .m3u con una cadena larga. NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trilogic:media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"1B45648D-0823-44B1-A376-79562441BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:trilogic:media_player:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"017AFB30-3D7A-42BE-9095-81794D2F9F91"}]}]}],"references":[{"url":"http://secunia.com/advisories/33496","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33221","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0097","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0263","sourceIdentifier":"cve@mitre.org","published":"2009-01-23T19:00:05.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Winamp v5.541 y anteriores, permiten a atacantes remotos provocar una denegación de servicio y posiblemente ejecución código de su eledcción a través de (1) un valor de cabecera Common Chunk (COMM) largo en un fichero AIFF y (2) un valor inválido largo en un fichero MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.541","matchCriteriaId":"9872304B-8AEB-4EF5-A0C8-73722CEE0368"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*","matchCriteriaId":"5785692F-D8FA-4D49-8872-CB8B2F173557"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*","matchCriteriaId":"A6E85C52-1974-4F83-89AE-BB29FC897E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*","matchCriteriaId":"CB082F8B-A052-4D82-9D73-2BB35FBA19F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33478","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33226","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0113","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7742","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0264","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors."},{"lang":"es","value":"Desbordamiento de búfer en Registry Setting Tool en Fujitsu SystemcastWizard Lite v2.0A, v2.0, v1.9, y anteriores tienen, tanto vectores de ataque como impactos no determinados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0a","matchCriteriaId":"11D8AB23-D9AD-4CA8-97E6-356AEBF265EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EB61C15C-E8E1-4CAF-AA3A-15324CDB40C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8:*:*:*:*:*:*:*","matchCriteriaId":"480C0061-C897-48BD-88E0-1924CB5CD702"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"D83F23D0-E114-4D28-9FDC-9F7E5567A697"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.9:*:*:*:*:*:*:*","matchCriteriaId":"81ED3CA6-9635-432B-8001-41AB64A1CD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B81C753-B760-415C-8F7C-2770DED8285F"}]}]}],"references":[{"url":"http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33644","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48315","source":"cve@mitre.org"},{"url":"http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0265","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025."},{"lang":"es","value":"Internet Systems Consortium (ISC) BIND en versiones 9.6.0 y anteriores no comprueba adecuadamente el valor de retorno de la función EVP_VerifyFinal de OpenSSL, lo cual permite a atacantes remotos eludir la validación del certificado a través de una firma SSL/TLS malformada, se trata de una vulnerabilidad similar a CVE-2008-5077 y CVE-2009-0025."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of BIND as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-01-26T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-252"},{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionEndIncluding":"9.6.0","matchCriteriaId":"3EFE1A82-B875-4840-A5C0-5A2189D73606"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33559","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:037","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.isc.org/node/373","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.isc.org/node/373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0266","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Un desbordamiento de pila basado en búfer en  Triologic Media Player 8.0.0.0 permite a atacantes remotos con la ayuda de usuarios locales ejecutar código arbitrario a través de una cadena larga en un archivo .m3l de lista de reproduccion. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trilogic:media_player:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"017AFB30-3D7A-42BE-9095-81794D2F9F91"}]}]}],"references":[{"url":"http://secunia.com/advisories/33496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0267","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989."},{"lang":"es","value":"libike en Sun Solaris v9 y v10, y OpenSolaris anteriores a snv_100, no chequean los paquetes de forma apropiada, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio in.iked) a través de paquetes IKE no especificados, es una vulnerabilidad distinta a CVE-2007-2989"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_99","matchCriteriaId":"CA715852-C3CF-4BC5-B4F8-E4C07AA4E920"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_99","matchCriteriaId":"E15C0530-3DB0-437D-8503-531125CF219F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33702","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113451-15-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-247406-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-032.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33407","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48178","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113451-15-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-247406-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-032.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0268","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of \"properly sequenced code\" in ptc and ptsl."},{"lang":"es","value":"Una condición de carrera en el pseudo-terminal (alias PTY) en el módulo controlador de Sun Solaris 8 a 10, y OpenSolaris en versiones anteriores a la snv_103, permite a usuarios locales provocar una denegación de servicio (con un panic del kernel) a través de vectores no especificados relacionados con la falta de \"código correctamente secuenciado\" en PTC y PTSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_102","matchCriteriaId":"8E0AC41F-C2F5-47DA-AF64-2960CFD265F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_102","matchCriteriaId":"EF6D0E27-D990-423C-98D2-920BD3BDB43F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33708","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113685-07-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-249586-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-034.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33406","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021640","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48179","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6061","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113685-07-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-249586-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-034.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0269","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index."},{"lang":"es","value":"El codigo fuente del fichero fs/ecryptfs/inode.c en el subsistema eCryptfs de versiones del kernel de Linux anteriores a la 2.6.28.1 permite a usuarios locales provocar una denegación de servicio (con fallo o corrupción de memoria), o posiblemente tener algún otro impacto no especificado, a través de una llamada a readlink que resulta en un error que provoca un valor de retorno -1 en el indice de un array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.28.1","matchCriteriaId":"284B0272-0D61-492A-8899-1A3BED5D2E35"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33758","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34502","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33412","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48188","source":"cve@mitre.org","tags":["Broken Link","VDB Entry"]},{"url":"https://lists.launchpad.net/ecryptfs-devel/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.launchpad.net/ecryptfs-devel/msg00011.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]},{"url":"https://lists.launchpad.net/ecryptfs-devel/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.launchpad.net/ecryptfs-devel/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-0270","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet."},{"lang":"es","value":"Un desbordamiento de pila basado en búfer en la ejecución de PXEService.exe en Fujitsu SystemcastWizard Lite 2.0a, 2.0, 1.9, y anteriores permite a atacantes remotos ejecutar código arbitrario a través de una petición de protocolo PXE demasiado larga en un paquete UDP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0a","matchCriteriaId":"11D8AB23-D9AD-4CA8-97E6-356AEBF265EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EB61C15C-E8E1-4CAF-AA3A-15324CDB40C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8:*:*:*:*:*:*:*","matchCriteriaId":"480C0061-C897-48BD-88E0-1924CB5CD702"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"D83F23D0-E114-4D28-9FDC-9F7E5567A697"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.9:*:*:*:*:*:*:*","matchCriteriaId":"81ED3CA6-9635-432B-8001-41AB64A1CD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B81C753-B760-415C-8F7C-2770DED8285F"}]}]}],"references":[{"url":"http://osvdb.org/51486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33594","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500172/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33342","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0176","source":"cve@mitre.org"},{"url":"http://www.wintercore.com/advisories/advisory_W010109.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500172/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wintercore.com/advisories/advisory_W010109.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0271","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en el servicio TFTP de Fujitsu SystemcastWizard Lite 2.0a, 2.0, 1.9, y anteriores permite a atacantes remotos leer ficheros arbitrarios a través de secuencias de salto de directorio en vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.7:*:*:*:*:*:*:*","matchCriteriaId":"EB61C15C-E8E1-4CAF-AA3A-15324CDB40C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8:*:*:*:*:*:*:*","matchCriteriaId":"480C0061-C897-48BD-88E0-1924CB5CD702"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"D83F23D0-E114-4D28-9FDC-9F7E5567A697"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:1.9:*:*:*:*:*:*:*","matchCriteriaId":"81ED3CA6-9635-432B-8001-41AB64A1CD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B81C753-B760-415C-8F7C-2770DED8285F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:systemcastwizard_lite:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"F05F0BEA-6B33-423A-AD85-00C93CAA8FD7"}]}]}],"references":[{"url":"http://osvdb.org/51487","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33594","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0176","source":"cve@mitre.org"},{"url":"http://osvdb.org/51487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0272","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Novell GroupWise WebAccess 6.5X, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, y 8.0 permite a atacantes remotos insertar reglas de correo y modificar otros ajustes de configuración de usuarios aleatorios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*","matchCriteriaId":"D861C5BE-825C-4EED-994A-9DE38AB6EA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*","matchCriteriaId":"1D75C8A8-8162-4160-9295-2DA4D710AD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C52E2ABC-20AE-437A-83B0-2E0753787FB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33744","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500569/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500569/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0273","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) User.id and (2) Library.queryText parameters to gw/webacc, and other vectors involving (3) HTML e-mail and (4) HTML attachments."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en WebAccess de GroupWise de Novell v6.5x, v7.0, v7.01, v7.02x, v7.03, v7.03HP1a y v8.0. Permite a atacantes remotos inyectar web script o HTML de su elección a través de los parámetros \"User.id\" y \"Library.queryText\" de gw/webacc y a través de otros vectores de ataque relacionados con el e-mail HTML y adjuntos HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*","matchCriteriaId":"D861C5BE-825C-4EED-994A-9DE38AB6EA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*","matchCriteriaId":"1D75C8A8-8162-4160-9295-2DA4D710AD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C52E2ABC-20AE-437A-83B0-2E0753787FB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33744","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002320","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-22","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-23","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500572/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500575/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33537","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33541","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500572/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0274","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests."},{"lang":"es","value":"Vulnerabilidad no especificada en WebAccess en Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, y 8.0 debería permitir a los atacantes remotos obtener información confidencial a través de una URL manipulada, en relación a la conversión de la petición POST a GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*","matchCriteriaId":"D861C5BE-825C-4EED-994A-9DE38AB6EA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*","matchCriteriaId":"1D75C8A8-8162-4160-9295-2DA4D710AD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C52E2ABC-20AE-437A-83B0-2E0753787FB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7002322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33559","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7002322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0275","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección de código estático en admin.php en Ryneezy phoSheezy 0.2 permite a los administradores remotos autenticados inyectar código PHP arbitrario en config/header a través del parámetro header. NOTA: esto puede ser explotado por atacantes no autenticados utilizando CVE-2009-0250. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de información aportada por terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ryneezy:phosheezy:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8F8DE0D9-CDC3-4447-8897-5C74247CC6FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33531","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/51412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/51412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0276","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame."},{"lang":"es","value":"Vulnerabilidad de dominio cruzado en la V8 del motor JavaScript en Google Chrome anterior a 1.0.154.46, permite a atacantes remotos evitar la Política del Mismo Origen (Same Origin Policy) a través de una secuencia de comandos que accede a otro marco (frame) y lee su URL completa y probablemente otra información sensible, o modifica la URL de ese marco (frame)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.43","matchCriteriaId":"F3D8C988-6C80-4627-BE11-72304CDE0AC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"}]}]}],"references":[{"url":"http://codereview.chromium.org/18531","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=8524","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/18531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=8524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0277","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T02:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v platforms allows local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en el núcleo del kernel de OpenSolaris snv_100 a snv_102 en las plataformas Sun UltraSPARC T2 y T2 + sun4v , permite a usuarios locales provocar una denegación de servicio (con un panic del sistema) a través de vectores desconocidos.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sun:ultrasparc:t2:*:*:*:*:*:*:*","matchCriteriaId":"31CB5927-7D1E-4960-A8F1-F8CCE14908FA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:ultrasparc:t2_plus:*:*:*:*:*:*:*","matchCriteriaId":"22C6D951-AA5D-490B-963D-13E0E9F00711"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250066-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33398","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48164","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250066-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0278","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T02:30:04.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request."},{"lang":"es","value":"Sun Java System Application Server (AS) 8.1 y 8.2 permite a atacantes remotos leer los ficheros de configuración de las aplicaciones Web en los directorios (1) WEB-INF o (2) META-INF mediante una solicitud mal formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.1:*:linux:*:*:*:*:*","matchCriteriaId":"B916CF5C-CF2C-48FA-B00B-7453DED400B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.1:*:sparc:*:*:*:*:*","matchCriteriaId":"E30D3A0A-BE19-422D-B3AE-11521EB479C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.1:*:windows:*:*:*:*:*","matchCriteriaId":"07CAE8DE-6AC0-4119-AAEA-2B8C073E2FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.1:*:x86:*:*:*:*:*","matchCriteriaId":"6CB78C86-84B2-4893-ACFF-05A9FE5D14DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.2:*:linux:*:*:*:*:*","matchCriteriaId":"A44CDE82-4AAF-4259-903D-A6284C79913D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.2:*:sparc:*:*:*:*:*","matchCriteriaId":"04B3EDF3-B8C8-4F5D-AB34-F940B91062B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.2:*:windows:*:*:*:*:*","matchCriteriaId":"71A68D2D-0DC4-49DA-A082-1919752061AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:8.2:*:x86:*:*:*:*:*","matchCriteriaId":"D061EE51-08EF-4CB5-8916-8196560458FD"}]}]}],"references":[{"url":"http://osvdb.org/51604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33725","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33397","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0208","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48161","source":"cve@mitre.org"},{"url":"http://osvdb.org/51604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0279","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en comentar.php en Pardal CMS v0.2.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0","matchCriteriaId":"E656CEFE-1DF6-4101-8D7B-93279612682D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"88907AEB-36C0-490F-8E32-4F19421ED189"},{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3A4B22AB-19BA-4868-A511-9EDA0C488B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DAC2DC07-04A1-4739-8A8C-803889323D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:0.1a:*:*:*:*:*:*:*","matchCriteriaId":"8FFC34AE-C12F-4C4E-954C-38D856D1AAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:0.01b:*:*:*:*:*:*:*","matchCriteriaId":"2D4C4F7E-A8FD-48B8-9453-958B59CB8DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pardalcms:pardalcms:0.01c:*:*:*:*:*:*:*","matchCriteriaId":"3E5BE298-B0F5-41DA-B5E9-55538764DAE8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33404","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48175","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7851","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0280","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1."},{"lang":"es","value":"Asp Project Management 1.0 permite a los atacantes remotos eludir la autenticación y obtener acceso administrativos, estableciendo la cookie crypt a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-project:asp-project:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1E92DEF1-4F29-4BF4-9545-C1ED32E7E853"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500292/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33401","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48172","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7850","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500292/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0281","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.aspx en WarHound Walking Club, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"username\" y (2) \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:warhound:walking_club:*:*:*:*:*:*:*:*","matchCriteriaId":"D8DFF15A-09E9-4915-8813-DCCD9AD08432"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48061","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7802","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0282","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error."},{"lang":"es","value":"Desbordamiento de enteros en el adaptador inalámbrico USB (RT73) de Ralink Technology versión 3.08 para Windows, y otros controladores de tarjetas inalámbricas como rt2400, rt2500, rt2570 y rt61, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de un paquete Probe Request  con un SSID largo, posiblemente relacionado con un error en la propiedad signedness de un entero."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, and Red Hat Enterprise MRG.","lastModified":"2009-02-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ralinktech:rt73:3.08:*:*:*:*:*:*:*","matchCriteriaId":"BE68EA94-42A4-4C44-AF1B-D5ECB3BAC76A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-08.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1712","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1713","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500168/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33340","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500168/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0283","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or HTML via the message parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en err.asp en Oblog, permite a atacantes remotos injectar secuencias de comandos web o HTML de su elección a través del parámetro \"message\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aobosoft:oblog:*:*:*:*:*:*:*:*","matchCriteriaId":"C7F47662-3862-4216-A86E-EBCC59C11293"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500349/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33416","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500349/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0284","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en Flax Article Manager v1.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flaxweb:flax_article_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C33BEFD-DAD1-4AEF-9945-0317BB651804"}]}]}],"references":[{"url":"http://secunia.com/advisories/33625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.flaxweb.com/products/articles","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33422","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7862","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.flaxweb.com/products/articles","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0285","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo error.asp en BBSXP 5.13 y versiones anteriores que permites a los atacantes remotos, inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bbsxp:bbsxp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.13","matchCriteriaId":"BD5B5C2E-970B-4735-869E-0D33410283B8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500336/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33411","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48187","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500336/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0286","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the form_data[script_class] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en upgrade/index.php en OpenGoo v1.1, cuando \"register_globals\" está activado y \"magic_quotes_gpc\" está desactivado, permite a atacantes remotos leer ficheros de su elección a través de ..(punto punto) en el parámetro form_data[script_class]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7DC6587D-86F4-441A-B6CA-9603956C9B74"}]}]}],"references":[{"url":"http://osvdb.org/51635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33421","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7863","source":"cve@mitre.org"},{"url":"http://osvdb.org/51635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0287","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lib/patUser.php de KEEP Toolkit anterior a 2.5.1; permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1)nombre de usuario y (2) contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keep_toolkit:keep_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"2F2ECC92-743E-4254-BA83-3B3C7DD6F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:keep_toolkit:keep_toolkit:2.1:*:*:*:*:*:*:*","matchCriteriaId":"834CDFE1-945C-4D3D-84AF-FA4F92A4E678"}]}]}],"references":[{"url":"http://keeptoolkit.svn.sourceforge.net/viewvc/keeptoolkit?view=rev&revision=56","source":"cve@mitre.org"},{"url":"http://osvdb.org/51623","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=655845&group_id=227492","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33425","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://keeptoolkit.svn.sourceforge.net/viewvc/keeptoolkit?view=rev&revision=56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=655845&group_id=227492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0288","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en k23productions TFTPUtil GUI 1.2.0 y 1.3.0, que permite a los atacantes remotos leer arbitrariamente archivos fuera del directorio raíz TFTP a través de una secuencia de salto de directorio en una petición GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windows_tftp_utility:tftputil:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DF86969A-769C-4E7C-A022-3FFAD262E183"},{"vulnerable":true,"criteria":"cpe:2.3:a:windows_tftp_utility:tftputil:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"71B12A3E-5F44-4AAE-9AFC-9520010249F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33561","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=894598","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-directory-traversal","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500106/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33287","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48019","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=894598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-directory-traversal","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500106/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0289","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T19:30:02.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service (service crash) via a long filename in a crafted request."},{"lang":"es","value":"k23productions TFTPUtil GUI v1.2.0 y v1.3.0; permite a atacantes remotos provocar una denegación de servicio (caída del servicio) a través de un nombre de fichero largo en una solicitud manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windows_tftp_utility:tftputil:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DF86969A-769C-4E7C-A022-3FFAD262E183"},{"vulnerable":true,"criteria":"cpe:2.3:a:windows_tftp_utility:tftputil:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"71B12A3E-5F44-4AAE-9AFC-9520010249F4"}]}]}],"references":[{"url":"http://sourceforge.net/forum/forum.php?forum_id=894598","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500107/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33289","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=894598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/500107/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0290","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T19:30:02.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the g4_path parameter.  NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathname."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en common.php en SIR GNUBoard v4.31.03, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de ..(punto punto) en el parámetro g4_path. NOTA: en algunos entorno, esto puede ser aprovechado para ejecutar código remotamente a través de datos como una URI o un UNC con nombre de ruta compartido (share pathname)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:4.31.03:*:*:*:*:*:*:*","matchCriteriaId":"35CB85DC-978C-430A-8BD7-4E770E177853"}]}]}],"references":[{"url":"http://secunia.com/advisories/33564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33304","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48015","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7792","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0291","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:04.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the MAX_type parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo fc.php en OpenX 2.6.3, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos a través de .. (punto punto) en el parámetro MAX_type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"39E8AB7C-CCC8-4C5E-8E42-C57C81C5EE16"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500411/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7883","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500411/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0292","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:04.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo show_cat2.php en SHOP-INET 4, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro grid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shop-inet:shop-inet:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3EBE474C-8665-46D1-9D42-AC0E57675961"}]}]}],"references":[{"url":"http://osvdb.org/51615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7874","source":"cve@mitre.org"},{"url":"http://osvdb.org/51615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0293","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo profile_view.php en Wazzum Dating Software, posiblemente 2.0, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro userid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wazzum:wazzum_dating_software:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"4F05F57A-22F6-4D79-998F-63CB7712AEF1"}]}]}],"references":[{"url":"http://osvdb.org/51625","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33461","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7877","source":"cve@mitre.org"},{"url":"http://osvdb.org/51625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0294","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the config[installdir] parameter to (1) search.php, (2) archive.php, (3) comments.php, and (4) news.php; (5) News.php, (6) SendFriend.php, (7) Archive.php, and (8) Comments.php in base/; and possibly other components, different vectors than CVE-2007-1288."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en WB News v2.0.1, cuando \"register_globals\" está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro config[installdir] a (1) search.php, (2) archive.php, (3) comments.php, y (4) news.php; (5) News.php, (6) SendFriend.php, (7) Archive.php, y (8) Comments.php en base/; y posiblemente otros componentes. Vector distinto del CVE-2007-1288."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmobo:wbnews:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B6EEDA7-058F-4C0E-9005-21E325B5641E"}]}]}],"references":[{"url":"http://secunia.com/advisories/33691","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500398/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33434","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500398/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0295","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo index.php en Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, cuando magic_quotes_gpc es deshabilitada, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itlpoll:itpoll:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1AA528EA-F662-4F86-BA7A-010CA149D090"}]}]}],"references":[{"url":"http://osvdb.org/51616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33666","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33452","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7867","source":"cve@mitre.org"},{"url":"http://osvdb.org/51616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0296","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en shop_display_products.php en Script Toko Online v5.01 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gempar:script_toko_online:5.01:*:*:*:*:*:*:*","matchCriteriaId":"20326DB0-4FD6-4E70-B0CC-109358B9A0D6"}]}]}],"references":[{"url":"http://osvdb.org/51630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7873","source":"cve@mitre.org"},{"url":"http://osvdb.org/51630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0297","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidades de inyección SQL en login_check.asp en ClickAuction permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) txtEmail y (2) txtPassword. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clicktech:clickauction:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"ADFA22E3-C1C8-48F0-9D19-59D7F7DAE2AA"}]}]}],"references":[{"url":"http://osvdb.org/51626","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7880","source":"cve@mitre.org"},{"url":"http://osvdb.org/51626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0298","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control ActiveX MW6 Technologies Barcode (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 que permite a los atacantes remotos ejecutar arbitrariamente código a través de la propiedad larga Supplement."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mw6_technologies:barcode_activex:3.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E6E6501-48A3-405A-805B-92F7626C45D5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33451","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0299","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ndex.php en Groone GLinks v2.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:groonesworld:glinks:2.1:*:*:*:*:*:*:*","matchCriteriaId":"56D96758-FA87-4E9B-9F38-05EDD93CAB3B"}]}]}],"references":[{"url":"http://osvdb.org/51628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33460","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7878","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9236","source":"cve@mitre.org"},{"url":"http://osvdb.org/51628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0300","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.140","lastModified":"2023-11-07T02:03:36.840","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2636.  Reason: This candidate is a duplicate of CVE-2006-2636.  Notes: All CVE users should reference CVE-2006-2636 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0301","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en el control ActiveX FlexCell.Grid (FlexCell.ocx) en FlexCell Grid Control v5.6.9, permite a atacantes remotos crear y sobrescribir archivos de su elección a través de los métodos (1) SaveFile y (2) ExportToXML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grid2000:flexcell_grid_control:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"8ED66658-42A9-4EB2-A7FE-4E7A594B4F2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33453","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7868","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0302","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Downloads 8.0 para PHP-Nuke, cuando \"register_globals\" está activado y \"magic_quotes\" está desactivado, permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro \"url\" en una operación Add (Añadir) a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-nuke:downloads_module:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C07D2A85-87B9-4993-83C9-A70394A10129"}]}]}],"references":[{"url":"http://1337day.com/exploits/15481","source":"cve@mitre.org"},{"url":"http://osvdb.org/51633","source":"cve@mitre.org"},{"url":"http://osvdb.org/77349","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/18148","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33410","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/50770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48186","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71475","source":"cve@mitre.org"},{"url":"http://1337day.com/exploits/15481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/77349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/18148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/50770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/71475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0303","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"encoded JavaScript\" and Helpdesk.woa."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Web Help Desk anterior a v9.1.18; permite a atacantes remotos inyectar secuencias de comandos Web o HTML mediante vectores relacionados con \"JavaScript codificado\" y Helpdesk.woa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.17","matchCriteriaId":"C28473A9-ACE1-49A8-814A-E00DE0EC944E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"E1328847-67FB-44F4-80AE-865248B1DE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"5DA1161E-4B40-4E1C-9318-BC7E31B7F827"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"CAE68630-39F6-4B3B-93A0-45A71CF585C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F44BB6D9-4D13-4F92-B8BB-89950F1E2C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AE519283-C41C-420C-A48F-D197E6C80BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7D0BB5F2-0DBE-4292-A324-D6158C8C9271"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CAEA6AD6-8CC5-4141-9F40-214D64848E50"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A71EC4-7BC3-43E8-A128-5F0E31426040"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1B3939FA-2F84-4EB2-B4A1-E3A0FC326DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"690B68E2-3C4D-4CB5-8C14-FC18A17FDE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E0AC7529-8D6B-4EC4-82C5-8E9352BBED4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A565DD83-8B04-4F28-8916-7C7301E6ED83"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EA7E0886-E234-4A66-B481-330A5A15BF26"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"DB8D3489-C243-43B2-A261-D91EC6BFFD2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B8714786-45EA-4216-BB2A-D15A813407D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E9CB3E8F-AACA-4E60-827E-0DDACAC0A3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"96A3026C-A534-4480-AD8A-F8838727870D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CCFC1CC0-D11C-4FE3-B4D8-09230C4B51C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F78FF029-AB4B-4723-80B8-ABF925FF1FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BD413A14-48CE-464A-8A42-D20DAE909FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E2A1759B-0FDD-467C-B7CE-E13C4305F335"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"724E7052-C656-44C0-B6D5-B19405710D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F48EBF3F-25FD-4949-A99E-01908197A9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"387B28B3-9695-4187-9CE7-4FE0128FD480"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B7E45F4F-C94F-4C96-90E8-E7D4506FA931"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F5DC16F1-3623-490E-859B-E78498D6F213"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BB053A8-5D3D-4AC1-BBA1-B97CE544EFC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8292D500-D7D9-42E9-8192-B68940DE89CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E2971936-5362-4FBB-94E6-16751D0C965F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A9BAEB95-44FD-4E20-AD17-189CA9C85BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EE71C538-DCD4-4462-8F57-9B37576BAB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E08B6CE0-548D-4AD0-A688-79D8A4B93B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"46B38145-C30F-425C-8F05-A294C4CF9596"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"11A08DB3-E88E-49E3-A078-223B744C03AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E69332CF-B1CE-402B-9B4B-E700832B7C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C97DCEC9-FCBB-4F49-ADB6-991AE07C5B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D7BAE16C-250E-4113-8CC1-85EE50861EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2994C680-51DF-40A7-BD55-F46A88177682"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C70389C9-29BE-4280-BAA2-11CE92963182"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8F52A9A4-BBB7-4DBE-9C42-75E40C93B1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"313BBAB8-9FEC-4E4B-9A7F-7BED6C66826C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5485F714-8DC3-4A08-A3C7-B1DD39343541"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"13197CC1-A0EC-4F69-BD8A-D166E6EDC057"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"8AE092D2-803A-4526-B105-490C403C6DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1A2C50FE-0CF1-440D-A1FD-DB2BD0035B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"08D79DEC-9D35-45F5-AE63-2C082743313F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9F6E1F3F-F9CC-41C5-B299-717F282B702C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3C9C3D52-5877-4056-8E43-F1440AFC6548"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"32E7DE30-F5BF-4EB0-A4A9-34AC3D23368D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9D4F5121-75D2-44BD-8A02-EF6B4CB79D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3C4D8F40-2385-4A79-A974-38570446AB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"09113E7F-813A-41BE-98AE-F4AD52FA71C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"7E0152F2-8D61-46AB-86E7-5F8017D19760"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.6:*:*:*:*:*:*:*","matchCriteriaId":"2787D92B-E999-448E-8DAD-C2AEF441D53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F31B5536-17E3-458B-ACFD-5D13AD3F4048"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F4F87D05-191E-47E6-9F18-D99E8021AD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E1A48E-EA5E-448A-B10B-1B38581F035F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1CDF10F8-736D-4DA0-AF27-51A4DEC17C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"30905135-2195-43B3-A1CC-C5A0AA49B36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"302BD2F7-E5B2-4829-B8CC-B56F117E3B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3A564289-47F8-4734-AA7D-A5BE8D823483"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"32385AAC-1DE8-4C42-915E-1079AAC24EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"1931031C-FEE1-4DBE-88F5-A1EBA8903FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"753DFAFF-5A88-45FB-8FFE-C69162AB277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"B345B2CE-A7EB-4FA5-98F7-860AD7A123B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4EE8893D-5C41-424C-AF9A-5902105E27CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"15632ED5-E61D-4CDB-ADF3-B1A001E1D9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"68081CD9-61CF-413D-A65A-46F62B0DDC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4CC5D7EA-D910-4696-8ADF-2B2FBC6099A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A45C916-E6FE-46F3-801E-AAD11FE8AE67"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2D412765-1A93-4671-981B-F1581637E9AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D5A2CAC5-1A06-45CB-A1CD-22695ECCD890"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"08B2B873-BCB9-4E67-B8D6-FD3EA5843E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4BCBDA84-3A4F-43B6-A537-12245A5457FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"40B1973F-2B37-4AC6-94AA-09DDAD2ADC9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"2E23538F-AD1C-40FE-B470-07421C3EE0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"8B8F06C4-2146-4DA0-95B2-128DFBE5F46D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4942C9C8-8F3C-4358-BEA3-BF4448F0FA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"2620D16D-A5B7-4F64-A281-7DA2CEEB8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2B6CAF14-C14E-49F1-9896-C44AEEB636F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0BA41D09-CC32-4F40-AA0E-68842E0150C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"693964C9-7426-4E64-894F-8C52A8B0E457"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A159266A-AB40-4234-9B2A-9CAD2BA389CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6D8B9E06-EB6B-4474-B6F5-3E8517746D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0D863419-963F-4F77-B04B-99300AA46A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"02B543E5-F27A-4F16-A1BE-72EEB04F4436"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"5FC40A17-D7BA-4E40-BB45-5A359B9A32B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"8E673C67-4229-4EA7-B385-18EA52902E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B17EBBD4-07E9-443E-8A61-15EFF9B3D5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"F370C4B6-8FE8-461D-BBF7-AE0B34E91178"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:8.4.6.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAE7066-7BE3-4114-B226-59F22DC2F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1550F286-842E-4333-89CE-8F2669D46C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"060CF412-6108-49AA-8C1F-0ECECB57D3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"381E431B-A680-4E43-83E8-014D37B6E999"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7A1DB6CD-9ECF-48DB-B429-E81ACC5BF169"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BA0A376F-E5AA-408D-A50D-CB455DA3478C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3C320685-7824-49E9-8CB6-D915A1EFA6DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2A83B6C4-163D-4823-BA0A-EA989588257A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C17E29EF-F14A-4805-8F24-DB9FD3778DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9887BA24-DD3D-4A96-8C67-7C72A2DBC408"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.10:*:*:*:*:*:*:*","matchCriteriaId":"4EB770E9-8F78-4645-9CD6-AA6AC8DF8D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.11:*:*:*:*:*:*:*","matchCriteriaId":"A03065A8-EFA9-4D87-A276-583E01258339"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.12:*:*:*:*:*:*:*","matchCriteriaId":"313EB62B-D7B3-4830-A33E-5A6907B0D277"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.13:*:*:*:*:*:*:*","matchCriteriaId":"C8394894-8625-42EF-91DA-3A8472ADDC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.14:*:*:*:*:*:*:*","matchCriteriaId":"CAF90AF5-F4FC-49FE-B5AA-7FF51FD59418"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.15:*:*:*:*:*:*:*","matchCriteriaId":"DC0A4F7C-E39A-4F3A-9F37-90BC92CC2D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.16:*:*:*:*:*:*:*","matchCriteriaId":"3E762A08-C30B-4257-91ED-DA4BED018B62"}]}]}],"references":[{"url":"http://secunia.com/advisories/33651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0304","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T20:30:05.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related to an \"insufficient validation security vulnerability,\" as demonstrated by SunOSipv6.c."},{"lang":"es","value":"El kernel en Sun Solaris versiones 10 y 11 snv_101b, y OpenSolaris anterior a snv_108, permite a los atacantes remotos causar una denegación de servicio (bloqueo del sistema) por medio de un paquete IPv6 diseñado, relacionado con una \"insufficient validation security vulnerability,\" como es demostrado mediante el archivo SunOSipv6.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_107","matchCriteriaId":"193ABD0A-63E6-40C2-83B8-28DD57578CFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_107","matchCriteriaId":"2828BBD2-339D-4EBC-9C91-DAB0D78BD3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*","matchCriteriaId":"86931B59-DAD2-474B-B030-3B1389278C49"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/067709.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021635","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-251006-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33435","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48208","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7865","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/067709.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-251006-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0305","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en el control ActiveX de Research in Motion RIM AxLoader en el archivo AxLoader.ocx y la biblioteca AxLoader.dll en BlackBerry Application Web Loader versión 1.0 permiten a los atacantes remotos ejecutar código arbitrario mediante el uso no especificado de la (1) carga o (2) loadJad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_application_web_loader:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E3018F34-2088-4F41-B83E-C80D5912CC40"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://blackberry.com/btsc/KB16248","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/131100","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/960715.mspx","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33663","source":"cve@mitre.org"},{"url":"http://blackberry.com/btsc/KB16248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/131100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/960715.mspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0306","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX Intellisync en lnresobject.dll in BlackBerry Desktop Manager en Research In Motion (RIM) BlackBerry Desktop Software anterior a v5.0.1, permite a atacantes remotos ejecutar código de su elección a través de una página web manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_desktop_software:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"47D9027A-74CC-4A39-8D62-2C545F6DB6E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes_intellisync:*:*:*:*:*:*:*:*","matchCriteriaId":"6CDBB123-E92F-43D7-9F9C-442D66216D1A"}]}]}],"references":[{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36903","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3133","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0307","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T18:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the \"Customize Statistics Page\" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, and (11) referenceTime parameters."},{"lang":"es","value":"Una Vulnerabilidad de tipo Cross-Site Scripting (XSS) en la \"Customize Statistics Page\"  (admin/statistics/ConfigureStatistics) en el servicio de conexión MDS en Research in Motion (RIM) BlackBerry Enterprise Server (BES) anterior a versión 4.1.6 MR5 permite a atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, y (11) referenceTime."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:*:mr4:*:*:*:*:*:*","versionEndIncluding":"4.1.6","matchCriteriaId":"1200C916-4168-49E6-A0F4-665F6A5954F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0B7A2FFD-C840-459C-95C2-92FEDF341D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"8E297652-3533-4B2B-BA9E-FDC452BAE650"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B51FB6C5-1EA2-451E-A89B-9CE5EE3F8626"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C4ACEF3E-E394-45E2-B20F-8575C92A490F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9F71618E-5CB6-41A7-9705-6AD4344CDEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B1694E42-9AA5-4503-9714-CBDE388481A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"265D8F90-96C3-4627-ABA5-994C25F70A45"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0170.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53772","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/dynamickc.do?externalId=KB17969&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB17969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34573","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022081","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1090","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/dynamickc.do?externalId=KB17969&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB17969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0310","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Following information confirms LOCAL Access Vector reported in Hyperlink Record 1058524:\r\n\r\nhttp://xforce.iss.net/xforce/xfdb/48797\r\n\r\nThe SUSE blinux (sbl) package is vulnerable to a buffer overflow. By sending a specially-crafted request, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to \"incoming data and authentication-strings.\""},{"lang":"es","value":"Desbordamiento de búfer en SUSE blinux (alias sbl) en SUSE openSUSE 10.3 a 11.0 tiene un impacto desconocido y proporciona vectores de ataque realacionados con \"datos entrantes y cadenas de autenticación\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33794","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48797","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0311","sourceIdentifier":"cve@mitre.org","published":"2009-01-27T22:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer."},{"lang":"es","value":"El servicio Backbone (ftbackbone.exe) en EMC AutoStart en versiones anteriores a 5.3 SP2, permite a los atacantes remotos ejecutar arbitrariamente código a través de un paquete con un valor manipulado que está desreferenciado como puntero a una función."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:autostart:*:sp1:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"FD8ED01E-0450-42C5-867C-EAD2848DAD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:autostart:5.3:*:*:*:*:*:*:*","matchCriteriaId":"24D7410C-E530-48F5-8C72-AE0822F233E8"}]}]}],"references":[{"url":"http://osvdb.org/51566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500350/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33415","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021636","source":"cve@mitre.org"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-009/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48197","source":"cve@mitre.org"},{"url":"http://osvdb.org/51566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500350/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-009/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0312","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T01:30:03.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica antispam (security/antispam.py) en MoinMoin 1.7 y 1.8.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de un contenido rechazado, manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"33BA7179-8A11-41C1-8F54-AC9316E8330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"E706F537-8473-4E45-9165-CA502263DC2B"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad","source":"cve@mitre.org"},{"url":"http://moinmo.in/SecurityFixes#moin1.8.1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33755","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/27/4","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48306","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/716-1/","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2009/dsa-1715","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moinmo.in/SecurityFixes#moin1.8.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/27/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/716-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2009/dsa-1715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0313","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T02:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file."},{"lang":"es","value":"winetricks, versiones anteriores a 20081223 que permite a los usuarios locales, sobrescribir arbitrariamente ficheros a través de un ataque de enlace simbólico en el fichero temporal x_showmenu.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kegel:winetricks:20081127:*:*:*:*:*:*:*","matchCriteriaId":"CA29237E-D8F1-4DAC-A87E-70ADF52FCFF2"}]}]}],"references":[{"url":"http://code.google.com/p/winezeug/source/detail?r=253","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33474","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48320","source":"cve@mitre.org"},{"url":"http://code.google.com/p/winezeug/source/detail?r=253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0314","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en el módulo Python en gedit; permite a usuarios locales ejecutar código de su elección a través de un fichero Python caballo de troya en el directorio de trabajo actual. Está relacionado con la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libpeas:*:*:*:*:*:*:*:*","versionEndExcluding":"0.5.3","matchCriteriaId":"D0F316A0-65A7-451F-A688-CD4AD23401A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=569214","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33759","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33769","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34522","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-41.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:039","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33445","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481556","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48271","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01195.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=569214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-41.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0315","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en el módulo Python en xchat permite a usuarios locales ejecutar código arbitrario a través de un troyano en un fichero Python en el directorio de trabajo activo, relativo a la vulnerabilidad de la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*","matchCriteriaId":"5BA25432-EBEC-42F3-A220-C830A13A3971"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:059","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33444","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481560","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0316","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no confiable en el archivo src/if_python.c en la interfaz de Python en Vim en versiones anteriores a 7.2.045, permite a los usuarios locales ejecutar código arbitrario por medio de un archivo Python de tipo caballo de Troya en el directorio de trabajo actual, relacionado con una vulnerabilidad en la función PySys_SetArgv (CVE- 2008-5983), como es demostrado por una ruta de búsqueda errónea para el archivo plugin/bike.vim en bicyclerepair."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"DC771166-EF16-4755-ABD4-9390F366FE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CEC67AF-3A8F-421E-BC74-16DA592DAC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:1.22:*:*:*:*:*:*:*","matchCriteriaId":"1E7C9C8A-CA6F-4781-98EE-03B78A91D860"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1B91822-8DC4-471C-B6D4-EC7F114914B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:4.0:*:*:*:*:*:*:*","matchCriteriaId":"12B90731-2B67-4859-A873-EFEFE4A66CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F325C23E-BFBC-4371-AF74-E189FC2515F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.1:*:*:*:*:*:*:*","matchCriteriaId":"2527B955-E25A-4A33-A6F4-27DEDA99C7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.2:*:*:*:*:*:*:*","matchCriteriaId":"BEA82FC2-F2A3-4BE2-8EE2-5A3BC3555401"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.3:*:*:*:*:*:*:*","matchCriteriaId":"808C36C4-0523-4FBC-B3B7-3E6E29FF24EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.4:*:*:*:*:*:*:*","matchCriteriaId":"404E256E-B823-4BC4-8F29-C3724604F474"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.5:*:*:*:*:*:*:*","matchCriteriaId":"75F0563C-7156-4166-87AA-4C122F26CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.6:*:*:*:*:*:*:*","matchCriteriaId":"0CDFBFEB-D79E-4CEB-905E-FA89A0F0D494"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.7:*:*:*:*:*:*:*","matchCriteriaId":"AAEC13F6-0526-47FB-BF98-D864CE297D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:5.8:*:*:*:*:*:*:*","matchCriteriaId":"477A2C0C-5229-4A08-8AB1-B9C8C2D4F3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D9FE70D0-5931-49D1-A750-7D03C8C28228"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.1:*:*:*:*:*:*:*","matchCriteriaId":"8A08C510-8774-4FEB-BCA3-1868F692BF94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.2:*:*:*:*:*:*:*","matchCriteriaId":"464D5E9A-EB5A-47AB-8657-15A68AD30D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4F51CA-18C1-4043-B4E6-F1AD9D3C1346"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D2BAA6B0-4956-4D98-872A-BCCBD0D4CE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97CCAA40-55CE-4AB9-9268-AADA06E29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim:vim:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A8C5B265-A7DD-4D24-864C-BF1FEEF8F138"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:047","source":"cve@mitre.org"},{"url":"http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33447","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48275","source":"cve@mitre.org"},{"url":"https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0317","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en la vinculación del lenguaje Python con Nautilus (nautilus-python) permite a usuarios locales ejecutar código arbitrario a través de un troyano en un fichero Python en el directorio de trabajo actual, relativo a la vulnerabilidad en la función PySys_SetArgv (CVE-2008-5983)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:nautilus-python:*:*:*:*:*:*:*:*","matchCriteriaId":"95B383B9-D771-47E6-AD23-20682D8E7A59"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33442","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481570","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0318","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T11:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983)."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en el intérprete rapper de GObject Python en Gnumeric permite a usuarios locales ejecutar código de su elección a través de un troyano en un fichero Python en el directorio de trabajo actual, relativo a la vulnerabilidad cve-2008-5983 en la función PySys_SetArgv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:*","matchCriteriaId":"E5FF4623-A5E0-41C8-BE1B-2F0F291BFC46"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=569648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33823","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-03.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:043","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33438","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481572","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=569648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0319","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause a denial of service (autofs mount outage) or possibly gain privileges via vectors related to \"xdr processing problems.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el módulo autofs en el kernel en Sun Solaris 8 a la 10, y OpenSolaris anterior a snv_108, permite a usuarios locales provocar una denegación de servicio (parada del montaje autofs) o posiblemente la obtención de privilegios a través de vectores relacionados con \"problemas de procesado xdr (xdr processing problems).\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_107","matchCriteriaId":"193ABD0A-63E6-40C2-83B8-28DD57578CFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_107","matchCriteriaId":"2828BBD2-339D-4EBC-9C91-DAB0D78BD3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33665","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-128624-09-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-249966-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-041.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33459","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021644","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0256","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0363","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48234","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5977","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-128624-09-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-249966-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-041.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0320","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a \"benchmarking attack.\""},{"lang":"es","value":"Microsoft Windows XP, Server 2003 y 2008, y Vista expone las mediciones de la actividad de I/O (entrada/salida) de todos los procesos, lo que permite a usuarios locales obtener información sensible, como se ha demostrado mediante la lectura de las I/O en la columna Other Bytes en el Administrador de tareas (Task Manager) para estimar el número de caracteres que ha introducido (en el runas.exe - ejecutar como) un usuario (distinto del de la sesion actual) en la ventana que solicita la contraseña, relacionado con un \"benchmarking attack\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500393/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33440","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500393/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0321","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence."},{"lang":"es","value":"Apple Safari v3.2.1 (también conocido como AppVer 3.525.27.1) sobre Windows, permite a atacantes remotos provocar una denegación de servicio (bucle infinito o violación de acceso) a través de un enlace a una URI http en la que la \"porción de autoridad\" (también conocido como hostname) es cualquier secuencia (1) . (punto) o (2) .. (punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48284","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6091","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0322","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/."},{"lang":"es","value":"drivers/firmware/dell_rbu.c en el Kernel  Linux anterior a v2.6.27.13 y v2.6.28.x anterior a v2.6.28.2, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una llamada al sistema de lectura que especifica cero bytes desde el archivo (1) image_type o (2) packet_size en /sys/devices/platform/dell_rbu/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.27.13","matchCriteriaId":"A20015B1-9C8E-4789-94AC-6CFAC0D50654"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"2.6.28.2","matchCriteriaId":"91F889A5-9C20-4495-91F7-A0EADC48E736"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=81156928f8fe31621e467490b9d441c0285998c3","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.13","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33656","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34252","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34502","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34680","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34762","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33428","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10163","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7734","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=81156928f8fe31621e467490b9d441c0285998c3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0331.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0323","sourceIdentifier":"cve@mitre.org","published":"2009-01-28T20:30:03.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an \"HTML GI\" in a start tag, which is not properly handled by the ProcessStartGI function; and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable.  NOTE: these are different vectors than CVE-2008-6005."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en W3C Amaya Web Browser v10.0 y 11.0,  permite a atacantes remotos la ejecución de código de su elección a través de  (1)un parámetro \"type\" largo en una etiqueta \"input\" que no está manejado adecuadamente por la función EndOfXmlAttributeValue; (2) un \"HTML GI\" en una etiqueta  \"start\" que no está manejada adecuadamente por la función  ProcessStartGI; y vectores sin especificar en (3) html2thot.c y (4) xml2thot.c, relacionados con la variable msgBuffer. NOTA: estos son vectores distintos del CVE-2008-6005."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:*:*:*:*:*:*:*:*","versionEndIncluding":"11.0","matchCriteriaId":"10F5498C-E640-415B-A030-1698AACAC550"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2F0076E2-ACB6-4D43-8F87-0D47F30F0FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:0.95b:*:*:*:*:*:*:*","matchCriteriaId":"EE2E2CAC-B42A-42F3-808A-F308B07446AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.0:*:*:*:*:*:*:*","matchCriteriaId":"26102C9D-C33A-4B03-B589-3403A2CD71C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"9D5DCB81-1A30-41C3-88B8-ADF2EF03170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8BD1E8-F3B1-43BB-9D32-BF75070A53C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"74397EFA-DD02-47E0-BEFB-252BC877254C"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.1c:*:*:*:*:*:*:*","matchCriteriaId":"C40B64C3-1125-4B6D-8420-5ED9497C7516"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E4C60E70-625E-4FAE-A569-E806675E5FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"21DDB2BA-96A2-4C79-BDE1-132C42FB66B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F385316-397E-4BFC-AAD7-7B118AA63395"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.3a:*:*:*:*:*:*:*","matchCriteriaId":"D1AD6ADA-23CA-4C3E-8D25-DCBE5B102554"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"24332794-9A8C-466A-B048-83F67D8FEB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.4:*:*:*:*:*:*:*","matchCriteriaId":"0D497951-AA71-4850-8798-EF6371B9B2C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:1.4a:*:*:*:*:*:*:*","matchCriteriaId":"FE4485E4-591A-451C-9FD1-70511C80193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DC0A3F2D-F1F0-4FAE-9A5F-F8EF3CB341C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3A2F97D4-55E7-4453-BD63-080A289E5C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:2.2:*:*:*:*:*:*:*","matchCriteriaId":"769C175F-E485-4DE0-8117-A6C3A895BCAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:2.3:*:*:*:*:*:*:*","matchCriteriaId":"297C2EA2-D79B-40B7-8CA3-501013ECDF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:2.4:*:*:*:*:*:*:*","matchCriteriaId":"F5724EBC-50EA-482C-95F1-42A92432146C"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:3.0:*:*:*:*:*:*:*","matchCriteriaId":"779B0489-3AC7-445F-BB39-AFAEF1455725"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BC794402-F101-4EF0-8689-B7D66FCC5156"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2D02AD8-AFF9-4064-B0E8-B038211DAA77"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E3E48DB-B0E1-4905-8D5B-B65FAAFC9783"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B7582E16-CAEF-4502-8CB3-DBACE070E018"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.1:*:*:*:*:*:*:*","matchCriteriaId":"99B4F310-3837-4AC6-8482-38FF60112E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.2:*:*:*:*:*:*:*","matchCriteriaId":"78CF3CDD-AB7B-4BAF-B9FC-39CCA259036E"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"348FE1BD-7ABB-44DB-8658-18130EFDF01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.3:*:*:*:*:*:*:*","matchCriteriaId":"5EE152FE-3E04-45AA-B9A9-BE1CFBDEA81B"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D4DCC7-8F75-4851-9CCA-A05994EDADD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"48F25D02-AEED-42F1-A4DC-ADF8F8B407A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7216EC40-6279-4334-8B72-F9267F141A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BB3531DE-02F3-43B9-BCBC-42E18F3863FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:5.2:*:*:*:*:*:*:*","matchCriteriaId":"367E0B6D-0413-4A39-8A44-CF70C2E74C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:5.3:*:*:*:*:*:*:*","matchCriteriaId":"791D4C0F-A609-4222-BB45-E1D985DA0267"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:6.0:*:*:*:*:*:*:*","matchCriteriaId":"73EF84E2-528B-4656-8513-3FEC78BEB891"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4FAA349F-96B1-4CA0-99E1-3F03BB2053E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0D1D46D2-DB03-463E-908A-4F70AB08ABF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:6.3:*:*:*:*:*:*:*","matchCriteriaId":"17A45CB9-22BA-417A-80BD-8B958393F25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:6.4:*:*:*:*:*:*:*","matchCriteriaId":"E0523C9B-9F37-46DA-8618-922D689BD3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1148A4A4-456B-42B8-8755-0476F562EC95"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:7.1:*:*:*:*:*:*:*","matchCriteriaId":"54D48084-7C8C-4D29-85F4-FA6916C9CBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:7.2:*:*:*:*:*:*:*","matchCriteriaId":"02066018-3831-47A7-AA14-236E6563B6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B7B5160E-14DF-4E70-B3D7-D67A24A7EB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.1:*:*:*:*:*:*:*","matchCriteriaId":"42857F17-C2EF-4DC9-A8B8-4ACA1A93F2F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.1a:*:*:*:*:*:*:*","matchCriteriaId":"6477EF95-78B3-4F93-8EE4-4E094C053B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.1b:*:*:*:*:*:*:*","matchCriteriaId":"133C3E0A-7503-4B68-B4F0-68AA06A9301B"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4A2152F-F0F4-4F3E-953B-68D482A77477"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.3:*:*:*:*:*:*:*","matchCriteriaId":"77B551D8-CFD1-4384-BF7A-6B836E0A014D"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.4:*:*:*:*:*:*:*","matchCriteriaId":"7CC10B72-FD6D-41C0-BEF3-540EC32B0936"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.5:*:*:*:*:*:*:*","matchCriteriaId":"41C0BCCE-6B68-468D-A560-37B347D6B953"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.6:*:*:*:*:*:*:*","matchCriteriaId":"8A9AAE22-8A80-4E8F-A504-75E2685442A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.7:*:*:*:*:*:*:*","matchCriteriaId":"7991719B-1FBC-4635-AB99-0C895D3300D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"65942C27-C185-4255-90BE-32DAC4B51A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.7.2:*:*:*:*:*:*:*","matchCriteriaId":"B6CB09AB-D704-4DF6-89A4-1D61BF6A09BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A6696ACD-755E-4B89-BAB8-3548460CA447"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.8.3:*:*:*:*:*:*:*","matchCriteriaId":"74A01925-D5E8-487B-88DE-A50FE33424B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.8.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB97BA7-1C6E-4EB1-9D2F-7A7923153B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F2181216-E954-431B-9503-FFAF8A6E12BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:8.52:*:*:*:*:*:*:*","matchCriteriaId":"BAA624B7-D7F5-4828-A514-A974616F15C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3D18DBAC-B24D-4B14-AABE-B0885D17E063"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.1:*:*:*:*:*:*:*","matchCriteriaId":"65D0B1D5-1045-4308-A3E3-57B94266CBBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE83CCFD-4909-4708-9FB4-37C1D8A0F8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.3:*:*:*:*:*:*:*","matchCriteriaId":"61387B05-F417-46F3-8D6B-A86526C31632"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.4:*:*:*:*:*:*:*","matchCriteriaId":"1BA9E3A2-E76F-444C-ABA8-9A3213C0BA0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.5:*:*:*:*:*:*:*","matchCriteriaId":"C569CD7D-A80D-4318-9DB6-4D30F7F2B667"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F4A1C8E7-EB1B-42FF-921E-3C87D5BDB874"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.53:*:*:*:*:*:*:*","matchCriteriaId":"F2A5E886-00CF-40CF-B1A2-50611F16D90B"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.54:*:*:*:*:*:*:*","matchCriteriaId":"02F0B08E-F2C0-496B-A665-9D431ED1CB29"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:9.55:*:*:*:*:*:*:*","matchCriteriaId":"AFC15E2C-CF4F-4F50-9C6B-A4A53E36B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:10.0:*:*:*:*:*:*:*","matchCriteriaId":"E6EAE8C2-F544-436E-AD9E-AE873CBCFA67"}]}]}],"references":[{"url":"http://www.coresecurity.com/content/amaya-buffer-overflows","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500492/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48325","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7902","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/amaya-buffer-overflows","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500492/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0324","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) idp parameter to reports/projects.php, the (2) idc parameter to reports/contacts.php, and the (3) idu parameter to reports/users.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en BibCiter v1.4 que permitiría a atacantes remotos ejecutar comandos SQL a través (1) del parámetro \"idp\" en reports/projects.php y (2) el parametro \"idc\" a reports/contacts.php y el parametro \"idu\" a reports/users.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bibciter:bibciter:1.4:*:*:*:*:*:*:*","matchCriteriaId":"6667ECA9-E01F-43E9-81D0-FE0FC58650AF"}]}]}],"references":[{"url":"http://bibciter.sourceforge.net/?p=35","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33555","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48080","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7814","source":"cve@mitre.org"},{"url":"http://bibciter.sourceforge.net/?p=35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0325","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en entries/index.php en Ninja Blog v4.8, cuando magic_quotes esta desactivado, lo que permitiría a atacantes remotos leer ficheros a su elección a través de ..(punto punto) en el parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ninjadesigns:ninja_blog:4.8:*:*:*:*:*:*:*","matchCriteriaId":"C0B03256-6FAF-4396-837F-FA08C05B3686"}]}]}],"references":[{"url":"http://secunia.com/advisories/33573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.push55.co.uk/index.php?s=ad&id=6","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33351","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7831","source":"cve@mitre.org"},{"url":"https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/33573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.push55.co.uk/index.php?s=ad&id=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-0326","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Dark Age CMS v0.2c beta permitiría a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1) username and (2) password. NOTA: La procedencia de esta información es desconocida, lo detalles fueron obtenidos unicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dark_age_cms:dark_age_cms:0.2c:beta:*:*:*:*:*:*","matchCriteriaId":"12ED8129-8206-4498-8122-DEE9BDE56F4F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33271","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48095","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0327","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the version parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en readbible.php en Free Bible Search PHP Script v1.0 que permitiría a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"version\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seraphimtech:free_bible_search_php_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"32867C99-F9D6-44DE-A248-EC112F0D2D97"}]}]}],"references":[{"url":"http://freshmeat.net/projects/freebiblesearch/?branch_id=77256&release_id=292446","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33301","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.seraphimtech.net/repository/Changes.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://www.exploit-db.com/exploits/7798","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/freebiblesearch/?branch_id=77256&release_id=292446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.seraphimtech.net/repository/Changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://www.exploit-db.com/exploits/7798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0328","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb."},{"lang":"es","value":"ROBS-PROJECTS Digital Sales IPN (también conocido como DS-IPN.NET o DS-IPN Paypal Shop) guarda información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permitiría atacantes remotos descargar el fichero de la base de datos que contienen las credenciales de usuario a través de una petición directa a Database/Sales.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robs-projects:digital_sales_ipn:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"FE0B64FF-1C1B-4DFE-A3AB-BEB06078EDDC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48082","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7816","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0329","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente para Joomla! PcCookBook (com_pccookbook) que permitiría a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro \"recipe_id\" en una acción viewrecipe en index.php, un vector diferente que CVE-2008-0844."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_pccookbook:*:*:*:*:*:*:*:*","matchCriteriaId":"41AF98B2-364F-436D-B299-172E324C150B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33346","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48088","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7824","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0330","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Simple Content Management System (SCMS) permitiría a atacantes remotos incluir y ejecutar ficheros locales a través de secuencias de salto de directorio en el parámetro \"p\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wss-pro:scms:1:*:*:*:*:*:*:*","matchCriteriaId":"B1412723-601A-43EC-A4B0-F3007CF9B72F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33330","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48081","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7818","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0331","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.  NOTE: the vulnerability may be in my little homepage Comment script. If so, then this should not be treated as a vulnerability in ESPG."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en gallery/comment.php en Enhanced Simple PHP Gallery (ESPG) v1.72 permitiria a atacantes remotos leer ficheros de su eleccion a traves de ..(punto punto) en el parametro \"file\". NOTA: La vulnerabilidad podria estar en la secuencia de comandos del comentario de mi pequeña pagina web. Si es asi no deberia ser tratada como una vulnerabilidad en ESPG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quirm:espg:1.72:*:*:*:*:*:*:*","matchCriteriaId":"928D1FF8-96FE-4985-BEFB-BBC7BC1E923F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48087","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0332","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php, and possibly other components."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en AV Book Library anteriores a v1.1 permitiría a atacantes remotos ejecutar comandos SQL a su elección a través de parámetros sin especificar a (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php y posiblemente otros componentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avbooklibrary:avbooklibrary:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"08AECA27-DC93-4E67-87A3-435B999B6565"},{"vulnerable":true,"criteria":"cpe:2.3:a:avbooklibrary:avbooklibrary:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7932F779-3A59-493C-8D95-7671E6E52990"},{"vulnerable":true,"criteria":"cpe:2.3:a:avbooklibrary:avbooklibrary:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"21FF569D-CD6A-47A7-BE96-F389049AA0F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/33583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=654214","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48084","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=654214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0333","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente WebAmoeba (WA) Ticket System (com_waticketsystem) para Joomla! que permitiría atacantes remotos ejecutar comandos SQL a través del parámetro \"catid\" en la acción category a index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_waticketsystem:*:*:*:*:*:*:*:*","matchCriteriaId":"882DEC2A-F32F-4033-9C3D-169948673401"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33353","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0334","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.asp en Katy Whitton BlogIt! que permite a atacantes remotos ejecutar comandos SQL a traves del parametro \"day\" en la accion archive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"6E9F41AB-5E33-4785-8869-0FCF9E991776"}]}]}],"references":[{"url":"http://secunia.com/advisories/33572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33325","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48074","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0335","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.asp en Katy Whitton BlogIt! permitiría a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"view\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"6E9F41AB-5E33-4785-8869-0FCF9E991776"}]}]}],"references":[{"url":"http://secunia.com/advisories/33572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33325","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48073","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0336","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Katy Whitton BlogIt! almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permitiría a atacantes remotos descargar el fichero de la base de datos que contiene las credenciales de usuario a traves de una petición para database/Blog.mdb. NOTA: Algunos de los detalles se obtuvieron a través de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"6E9F41AB-5E33-4785-8869-0FCF9E991776"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48075","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7806","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0337","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyeccion SQL en index.asp en Katy Whitton BlogIt! permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves de los parametros (1) \"month\" y (2) \"year\". NOTA: Se desconoce la procedencia de la informacion; los detalles fueron obtenidos unicamente de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:katywhitton:blogit\\!:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"6E9F41AB-5E33-4785-8869-0FCF9E991776"}]}]}],"references":[{"url":"http://secunia.com/advisories/33572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0338","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en inc_webblogmanager.asp en DMXReady Blog Manager permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"CategoryID\" en una acción refer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:blog_manager:_nil:*:*:*:*:*:*:*","matchCriteriaId":"F08BD2AC-475B-4C9E-947E-30897ECB45B1"}]}]}],"references":[{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500146/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33314","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48053","source":"cve@mitre.org"},{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500146/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0339","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc_webblogmanager.asp en DMXReady Blog Manager permite a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro \"itemID\" en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:blog_manager:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"E327EB16-FF96-4653-9B8A-79AD132EBF0F"}]}]}],"references":[{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500146/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33314","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48054","source":"cve@mitre.org"},{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500146/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0340","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T18:30:02.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the olang parameter to (1) mail.php and (2) mailbar.php."},{"lang":"es","value":"Multiples vulnerabilidades de salto de directorio en Simple PHP Newsletter v1.5 que permitiria a atacantes remotos leer ficheros a traves de ..(punto punto) en el parametro \"olang\" en (1)mail.php y (2) mailbar.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quirm:simple_php_newsletter:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EFBEE988-83B6-4AC5-90EB-DBE4202574DE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33327","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48089","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7813","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0341","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability."},{"lang":"es","value":"El módulo shell32 en Microsoft Internet Explorer v7.0 en Windows XP SP3 permitiría a atacantes remotos ejecutar código a su elección a través de un atributo largo VALUE en un elemento INPUT, relacionado posiblemente con la vulnerabilidad de vaciado de pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500472/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33494","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500472/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0342","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall."},{"lang":"es","value":"Niels Provos Systrace anteriores a v1.6f en las plataformas Linux x86_64 permite a usuarios locales evitar las restricciones de acceso previstas mediante una syscal de 64 bit  con un número de llamada correspondiente a una llamada de 32 bit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6e","matchCriteriaId":"01CBABB4-4603-447B-A036-22926AA4CC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DF23E751-38C8-4B5F-8527-D20E3ADEB723"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2D036342-98D8-460F-B9B9-1434BF85A961"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C991DB0D-062B-4FBF-A65C-2490F0056767"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CBCBB458-F90F-4914-944C-4BD3EAAA9935"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.5:*:*:*:*:*:*:*","matchCriteriaId":"D5B1E4B1-7B7D-40D8-9069-F58FED95CFB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.6:*:*:*:*:*:*:*","matchCriteriaId":"83E3362A-01FA-4574-AF91-DD5D3272F703"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.6a:*:*:*:*:*:*:*","matchCriteriaId":"272209F6-64EE-408D-9F14-5CDBD36758D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.6b:*:*:*:*:*:*:*","matchCriteriaId":"A0FB4779-B9F2-4667-8551-90C092FDE668"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.6c:*:*:*:*:*:*:*","matchCriteriaId":"1EE7BAF1-E06E-4B77-B71E-9EFE7D48D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:provos:systrace:1.6d:*:*:*:*:*:*:*","matchCriteriaId":"A139ACF1-554C-40D1-A68B-D1A278F706A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:_nil_:_nil_:x86_64:*:*:*:*:*","matchCriteriaId":"FA8AA941-3B59-458D-8C3F-EBB79B754F8C"}]}]}],"references":[{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html","source":"cve@mitre.org"},{"url":"http://www.citi.umich.edu/u/provos/systrace/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500377/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33417","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.citi.umich.edu/u/provos/systrace/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500377/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0343","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes."},{"lang":"es","value":"Niels Provos Systrace v1.6f y anteriores en las plataformas Linux x86_64 permite a usuarios locales evitar las restricciones de acceso previstas, mediante una syscal de 32 bit, con un número correspondiente a una llamada de 64 bit. Relacionada con las condiciones de carrera en la monitorización de procesos de 64 bit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6e","matchCriteriaId":"8C778AF1-B380-4456-8C6B-BDBFD7C31860"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.1:*:*:*:*:*:*:*","matchCriteriaId":"38A786ED-B9C9-41EE-99E6-30BFA0DD984A"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.2:*:*:*:*:*:*:*","matchCriteriaId":"56D872DA-238E-4DA5-8187-4FEE1A63AC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.3:*:*:*:*:*:*:*","matchCriteriaId":"66D4199A-72A3-4EBE-919D-4366520E7848"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DCE73152-5620-44A2-B09B-66CDBBAD1F41"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B210A03B-A13E-4F48-B5DA-D8D4EA3A2C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.6:*:*:*:*:*:*:*","matchCriteriaId":"DDF7BA51-FD3D-4FFF-B5AC-DB2CE6EDF5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.6a:*:*:*:*:*:*:*","matchCriteriaId":"F5300D33-C8AF-4389-8309-B375C36FC794"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.6b:*:*:*:*:*:*:*","matchCriteriaId":"F316742F-6281-4749-AAA3-338B64042714"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.6c:*:*:*:*:*:*:*","matchCriteriaId":"6DBB4B24-0570-47F4-ABF6-73C83BCD710F"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:systrace:1.6d:*:*:*:*:*:*:*","matchCriteriaId":"A484409A-8DD4-4CDE-A179-CAFDCB20AF3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:_nil_:_nil_:x86_64:*:*:*:*:*","matchCriteriaId":"FA8AA941-3B59-458D-8C3F-EBB79B754F8C"}]}]}],"references":[{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html","source":"cve@mitre.org"},{"url":"http://www.citi.umich.edu/u/provos/systrace/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500377/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33417","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/01/bypassing-syscall-filtering.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.citi.umich.edu/u/provos/systrace/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500377/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0344","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors, aka Bug ID 6633175, a different vulnerability than CVE-2007-5717."},{"lang":"es","value":"Vulnerabilidad inespecífica en Embedded Lights Out Manager (ELOM) en las plataformas Sun Fire X2100 M2 y X2200 M2 x86 anteriores al firmware SP/BMC v3.20 permitiría a atacantes remotos obtener acceso con privilegios o ejecutar comandos a su elección en el procesador de servicios (SP) a través de vectores desconocidos, también conocido como el fallo ID 6633175, una vulnerabilidad diferente de CVE-2007-5717."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x2100_m2:*:-:x86:*:*:*:*:*","versionEndIncluding":"3.19","matchCriteriaId":"1FEDF8B3-8BF5-477F-B98D-2551620F80C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x2200_m2:*:-:x86:*:*:*:*:*","versionEndIncluding":"2.19","matchCriteriaId":"B3FC7B9D-8410-4A13-8AF0-8AE786EA3A37"}]}]}],"references":[{"url":"http://secunia.com/advisories/33726","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33506","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021646","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0281","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0345","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors, aka Bug ID 6648082, a different vulnerability than CVE-2007-5717."},{"lang":"es","value":"Vulnerabilidad inespecifica en Embedded Lights Out Manager (ELOM) en las plataformas Sun Fire X2100 M2 y X2200 M2 x86 anteriores a el firmware SP/BMC v3.20 permitiría a atacantes remotos conseguir acceso con privilegios a ELOM o ejecutar comandos a su elección en el procesador de servicios (SP) a través de vectores desconocidos, también conocido como el fallo con ID 6648082, una vulnerabilidad diferente de CVE-2007-5717."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x2100_m2:*:-:x86:*:*:*:*:*","versionEndIncluding":"3.19","matchCriteriaId":"1FEDF8B3-8BF5-477F-B98D-2551620F80C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:fire_x2200_m2:*:-:x86:*:*:*:*:*","versionEndIncluding":"2.19","matchCriteriaId":"B3FC7B9D-8410-4A13-8AF0-8AE786EA3A37"}]}]}],"references":[{"url":"http://secunia.com/advisories/33726","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33506","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021646","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0281","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-239886-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0346","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv_01 though snv_85, allows local users to cause a denial of service (panic) via a self-encapsulated packet that lacks IPsec protection."},{"lang":"es","value":"La implementacion del procesado del paquete IP-en-IP en la pila de IPsec e IP en Sun Solaris v9 y v10, y OpenSolaris desde snv_01 hasta snv_85, permite a usuarios locales producir una denegacion de servicio (panic) a traves de un paquete autoencapsulado que carece de proteccion IPsec."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33727","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-114344-38-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-240086-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-043.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33504","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0365","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48328","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6088","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-114344-38-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-240086-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-043.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0347","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en cs.html en el motor de busqueda Autonomy (anteriormente Verity) Ultraseek que permite a atacantes remotos redirigir a los usuarios a páginas web de su elección y producir ataques de phising a través del parámetro \"url\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"CB6CE359-BDFF-4BA3-8D5C-C44BD522CE74"}]}]}],"references":[{"url":"http://sunbeltblog.blogspot.com/2009/01/constant-stream-of-ultraseek-redirects.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/202753","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33500","source":"cve@mitre.org"},{"url":"http://www.ultraseek.com/forums/thread.jspa?messageID=9818","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48336","source":"cve@mitre.org"},{"url":"http://sunbeltblog.blogspot.com/2009/01/constant-stream-of-ultraseek-redirects.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/202753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ultraseek.com/forums/thread.jspa?messageID=9818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0348","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"El módulo de ingreso en Sun Java System Access Manager v6 2005Q1 (antes conocido como v6.3), v7 2005Q4 (antes conocido como v7.0), y v7.1. responde de manera diferente dependiendo de si la cuenta existe o no, lo que permite a atacantes remotos averiguar nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"B9D7AA3C-6565-4291-A76F-3BE9311B77F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"8ED84EE5-2C53-4A8E-98B7-4F9181D4E192"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_windows:*:*:*:*:*","matchCriteriaId":"FB62C071-74F8-4642-938A-E529CBB2396B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"B0617E1B-FE70-442E-AEE6-BACC8515F005"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"95ADB790-EF2D-4613-9F69-F37401518511"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"BF718ABC-42C7-4FE1-82A0-00F3506F1D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_windows:*:*:*:*:*","matchCriteriaId":"11EEDFB5-CDB0-4A7F-A14B-FFF37FBFB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"D2BC5828-0EF1-4640-91BF-9CC1E5FC6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"9E64CD07-4AF7-49C4-A3C0-EE2BF9E067A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"F590A1DC-7E1B-44CF-83D2-3FEDA91765C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_windows:*:*:*:*:*","matchCriteriaId":"56368A15-6067-4041-B949-50B856B93D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"9096D748-9527-4061-8106-526741831F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"D8C9CC43-EFB5-4192-81F2-0373961A7078"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"28F24915-078C-4E4B-B173-671F0ABF9656"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_windows:*:*:*:*:*","matchCriteriaId":"48131043-49E3-495E-8868-38D3ACC0D402"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"AD06B92E-C23C-4648-A585-14FC54538FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"479657F1-8950-4C6C-9CD2-5FE3DF235E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_windows:*:*:*:*:*","matchCriteriaId":"1C311222-6DD5-4C31-BCB9-4ED895281831"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"4930E838-993A-4DA1-B504-4675EE20CF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"6F238642-873A-4A50-BF14-6B173A20A36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"2A857F82-4146-48E9-8568-19393AC3856B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_windows:*:*:*:*:*","matchCriteriaId":"77DFF3D0-BBD2-4B06-9B4E-CA8FCA1BAC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"2D28C8EF-7525-48A0-A13A-EA95479A3B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"3DA96674-2050-4686-A592-F450655073E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"B56B9BD3-2708-46C3-850D-865599F88BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_windows:*:*:*:*:*","matchCriteriaId":"22C1CF79-9D5D-4AF6-96C3-F029522D3DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"207157F9-0AE4-45FB-A3DC-90C1F6E5376E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"5382933D-E32D-47F5-8892-65B94E06BD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"B6391170-5831-4303-85E5-A51BB431E788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_windows:*:*:*:*:*","matchCriteriaId":"8FB6B9F1-EBE4-4820-98F3-E6F41A99B504"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"9E8B1333-125A-44F7-A6C3-4B04D3FC9A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"644C3EA4-607C-42E7-805B-8F2EF6AF694E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"745D8651-B97C-48A9-AE4F-603A34516919"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_windows:*:*:*:*:*","matchCriteriaId":"BBC9D038-3428-440F-8BD7-06B103019BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"92BC8B61-3F58-43B3-9756-616376D4D2DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33688","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-15-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-242026-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33489","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48283","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-15-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-242026-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0349","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (aka .key) file."},{"lang":"es","value":"Un desbordamiento de pila basado en búfer en FTPShell Server v4.3 permite a atacantes remotos asistidos por un usuario producir una denegación de servicio (caída persistente de demonio) y la posibilidad de ejecutar código a su elección a través de una cadena larga en un fichero de clave de licencia (antes conocido como .key)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftpshell:ftpshell_server:4.3:*:*:*:*:*:*:*","matchCriteriaId":"723443E5-049F-49D4-A52C-D2A300D6EC3E"}]}]}],"references":[{"url":"http://osvdb.org/51510","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33597","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7852","source":"cve@mitre.org"},{"url":"http://osvdb.org/51510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0350","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un desbordamiento de pila basado en búfer en Merak Media Player v3.2 permite a atacantes remotos ejecutar codigo de su eleccion a traves de una cadena larga en un fichero de lista de reproduccion .m3u, relacionado con el icono de ayuda de la barra de estado. NOTA: Algunos de estos detalles han sido obtenidos mediante informacion de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merak:media_player:3.2:*:*:*:*:*:*:*","matchCriteriaId":"52E82838-522C-4594-A514-E3D9F3D2DC8B"}]}]}],"references":[{"url":"http://osvdb.org/51565","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7857","source":"cve@mitre.org"},{"url":"http://osvdb.org/51565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0351","sourceIdentifier":"cve@mitre.org","published":"2009-01-29T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code via a long LIST argument beginning with an * (asterisk) character."},{"lang":"es","value":"Desbordamiento de pila basado en búfer en WFTPSRV.exe en WinFTP 2.3.0 permite a usuarios remotos autenticados ejecutar codigo a su eleccion a traves del argumento LIST largo iniciandolo con un caracter * (asterisco)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wftpserver:winftp_ftp_server:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9874136D-8345-49BD-AC8D-86E50DF4C023"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33454","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48263","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0352","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Mozilla Firefox 3.x antes de  3.0.6, Thunderbird antes de 2.0.0.21, y SeaMonkey antes de 1.1.15, permiten a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código de su elección mediante vectores relacionados con el diseño del motor y la destrucción arbitraria de objetos de diseño por la función nsViewManager::Composite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33802","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33816","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33869","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-01.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021663","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=331088","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=401042","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=416461","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=420697","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=421839","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=422283","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=422301","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431705","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=437142","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=449006","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461027","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/741-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=331088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=401042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=416461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=420697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=421839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=422283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=422301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=437142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=449006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/741-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0353","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine."},{"lang":"es","value":"Vulnerabilidad sin especificar en Mozilla Firefox v3.x anterior a v3.0.6, Thunderbird anterior a v2.0.0.21, y SeaMonkey anterior a v1.1.15 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación)o posiblemente ejecutar código de su elección a través de vectores relacionados con el motor JavaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33802","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33816","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33869","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-01.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021663","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=452913","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=452913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0354","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function."},{"lang":"es","value":"Vulnerabilidad de dominio cruzado en js/src/jsobj.cpp en Mozilla Firefox v3.x anterior a v3.0.6 permite a atacantes remotos evitar la Política de Mismo Origen (Same Origin Policy) , acceder a las propiedades de cualquier ventana de su elección y llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores que involucran al método Chrome XBL y a la función window.eval."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33869","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-02.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021664","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=468581","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9796","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=468581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0355","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type=\"file\" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element."},{"lang":"es","value":"components/sessionstore/src/nsSessionStore.js en Mozilla Firefox anterior a v3.0.6 no bloquea los cambios de los elementos INPUT al tyoe=\"file\" durante la restauración de pestañas, lo que permite a atacantes asistidos por el usuario leer archivos de su elección en un ordenador cliente mediante elementos INPUT manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"EAF11F35-A1E8-452C-8EC8-58C7B41617D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33808","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33816","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33869","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-03.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021665","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466937","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0356","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs.  NOTE: this issue exists because of an incomplete fix for CVE-2008-4582."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a v3.0.6 y SeaMonkey no bloquean enlaces a las URIs (1) about:plugins y (2) about:config desde ficheros .desktop, lo que permite a atacantes remotos eludir la Same Origin Policy y ejecutar código de su elección con privilegios chrome mediante vectores relacionados con el campo URL en una sección Desktop Entry de un fichero .desktop, en relación con una representación de: URIs como jar:file:// URIs. NOTA: este problema existe debido a una resolución incompleta de CVE-2008-4582."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"EAF11F35-A1E8-452C-8EC8-58C7B41617D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-04.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021666","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460425","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9922","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0357","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism."},{"lang":"es","value":"Mozilla Firefox  anterior a v3.06 y SeaMonkey anterior a v1.1.15 no restringe adecuadamente el acceso desde las páginas web a las cabeceras de respuesta HTTP (1) Set-Cookie y (2) Set-Cookie2, lo que permite a atacantes remotos obtener información sensible de las cookies a través de llamadas XMLHttpRequest, relacionado con el mecanismo de protección HTTPOnly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5","matchCriteriaId":"EAF11F35-A1E8-452C-8EC8-58C7B41617D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"}]}]}],"references":[{"url":"http://ha.ckers.org/blog/20070511/bluehat-errata/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33816","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33869","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-05.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021668","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380418","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9459","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://ha.ckers.org/blog/20070511/bluehat-errata/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0358","sourceIdentifier":"secalert@redhat.com","published":"2009-02-04T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request."},{"lang":"es","value":"Mozilla Firefox 3.x anterior a 3.0.6 no implementa adecuadamente las directivas de (1) no-store y (2) no-cache Cache-Control, lo que permite a usuarios locales obtener información sensible usando el (1) botón volver o el (2) historial del navegador de la víctima, como se ha demostrado mediante la lectura de la página de respuesta de una petición http POST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"}]}]}],"references":[{"url":"http://blogs.imeta.co.uk/JDeabill/archive/2008/07/14/303.aspx","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33809","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33831","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33846","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33869","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-06.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33598","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021667","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441751","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10610","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"secalert@redhat.com"},{"url":"http://blogs.imeta.co.uk/JDeabill/archive/2008/07/14/303.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-717-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0359","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or (2) user full name."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Samizdat anterior a v0.6.2 permite a usuarios autenticados remotamente inyectar secuencias de comando web o HTML de su elección a través del (1) título del mensaje o (2) nombre completo de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nongnu:samizdat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.1","matchCriteriaId":"0A20C9BD-1BA7-46AB-AEF5-7BC14DD9FA11"}]}]}],"references":[{"url":"http://osvdb.org/52022","source":"cve@mitre.org"},{"url":"http://samizdat.nongnu.org/release-notes/samizdat-0.6.1-xss-escape-title.patch","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00171.html","source":"cve@mitre.org"},{"url":"http://www.nongnu.org/samizdat/release-notes/samizdat-0.6.2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500961/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33768","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/52022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://samizdat.nongnu.org/release-notes/samizdat-0.6.1-xss-escape-title.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00171.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nongnu.org/samizdat/release-notes/samizdat-0.6.2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500961/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0360","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per vendor advisory:\r\n http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html\r\n\r\n\"This advisory is only for my pam-krb5 module, as distributed from my web site and packaged by Debian, Ubuntu, and Gentoo.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid application."},{"lang":"es","value":"Russ Allbery pam-krb5 versiones anteriores a v3.13, cuando es enlazado a través de MIT Kerberos, no inicializa correctamente las librerías Kerberos al usarlas en la fijación de propietario, permitiendo a usuarios locales obtener privilegios al apuntar una variable de entorno a un fichero de configuración de Kerberos modificado, y después llamando a una aplicación de fijación de propietario basada en PAM."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the pam_krb5 package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-02-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"989241C8-BC2F-4DE2-BF9E-9CC64198AF5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D4E491A2-9478-4462-8BCD-6DD79954C418"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4837527C-9618-412F-A8CB-87122CF35B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.2:*:*:*:*:*:*:*","matchCriteriaId":"F20698B7-B13B-488C-A49F-90A4490DA0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.3:*:*:*:*:*:*:*","matchCriteriaId":"81821DD4-343A-4CDE-A7A6-CA606662971C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.4:*:*:*:*:*:*:*","matchCriteriaId":"D7A629B4-55FA-418E-97FC-935B022A4F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8B5451CD-CDCC-4D9D-A076-45E7B14EEF76"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F7761042-9FFB-4235-9A34-22B91CE2CA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.0:*:*:*:*:*:*:*","matchCriteriaId":"633EE1E7-1B5D-4D10-BA4B-D13A15BA68B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4B6844EE-3552-429A-A3D8-9A6B6C3B2785"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D9619E40-83AA-46D6-AECF-CC7FF6B1ED1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF1D6C7-15E6-4DAA-92C1-C216905866B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.4:*:*:*:*:*:*:*","matchCriteriaId":"BB0342E5-B622-4A5E-A57F-6EAF85E268C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.5:*:*:*:*:*:*:*","matchCriteriaId":"B2684C7D-B266-4460-9DAD-945B4DECF57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.6:*:*:*:*:*:*:*","matchCriteriaId":"FDC110CB-253F-44E6-8515-FC9025EBF57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.7:*:*:*:*:*:*:*","matchCriteriaId":"D78AEED8-34AB-41B7-926F-6F7995253E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.8:*:*:*:*:*:*:*","matchCriteriaId":"FB53833E-EB9E-4ED8-8BC5-B681BE0B2897"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.9:*:*:*:*:*:*:*","matchCriteriaId":"0FE72618-6BE5-45F3-A782-991A73C09389"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.10:*:*:*:*:*:*:*","matchCriteriaId":"315E2FB7-EEE5-48AA-B058-F53AEA210807"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.11:*:*:*:*:*:*:*","matchCriteriaId":"A4421B50-CC46-4EA6-AACF-DBE0EE76A389"}]}]}],"references":[{"url":"http://secunia.com/advisories/33914","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34260","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34449","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-39.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021711","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1721","source":"cve@mitre.org"},{"url":"http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500892/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33740","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-719-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0410","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0979","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5669","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500892/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-719-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0361","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_setcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, and then launching a setuid application that performs certain pam_setcred operations."},{"lang":"es","value":"Russ Allbery pam-krb5 versiones anteriores a v3.13, como el usado por libpam-heimdal, el comando \"su\" en Solaris 10, y otros programas, no gestiona correctamente las peticiones a \"pam_setcred\" al ejecutar \"setuid\", permitiendo a usuarios locales sobreescribir y cambiar los propietarios de los ficheros que elijan al asignarle un valor a la variable de entorno \"KRB5CCNAME\", y después invocar la aplicación setuid que efectúa ciertas operaciones \"pam_setcred\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the pam_krb5 package, as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-02-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"989241C8-BC2F-4DE2-BF9E-9CC64198AF5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.0:*:*:*:*:*:*:*","matchCriteriaId":"633EE1E7-1B5D-4D10-BA4B-D13A15BA68B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4B6844EE-3552-429A-A3D8-9A6B6C3B2785"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D9619E40-83AA-46D6-AECF-CC7FF6B1ED1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF1D6C7-15E6-4DAA-92C1-C216905866B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.4:*:*:*:*:*:*:*","matchCriteriaId":"BB0342E5-B622-4A5E-A57F-6EAF85E268C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.5:*:*:*:*:*:*:*","matchCriteriaId":"B2684C7D-B266-4460-9DAD-945B4DECF57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.6:*:*:*:*:*:*:*","matchCriteriaId":"FDC110CB-253F-44E6-8515-FC9025EBF57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.7:*:*:*:*:*:*:*","matchCriteriaId":"D78AEED8-34AB-41B7-926F-6F7995253E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.8:*:*:*:*:*:*:*","matchCriteriaId":"FB53833E-EB9E-4ED8-8BC5-B681BE0B2897"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.9:*:*:*:*:*:*:*","matchCriteriaId":"0FE72618-6BE5-45F3-A782-991A73C09389"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.10:*:*:*:*:*:*:*","matchCriteriaId":"315E2FB7-EEE5-48AA-B058-F53AEA210807"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:3.11:*:*:*:*:*:*:*","matchCriteriaId":"A4421B50-CC46-4EA6-AACF-DBE0EE76A389"}]}]}],"references":[{"url":"http://secunia.com/advisories/33914","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33918","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34260","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34449","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-39.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021711","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1721","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1722","source":"cve@mitre.org"},{"url":"http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500892/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33741","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-719-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0410","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0979","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5403","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252767-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-070.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eyrie.org/~eagle/software/pam-krb5/security/2009-02-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500892/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-719-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0362","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T01:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (forced authentication failures) via a crafted reverse-resolved DNS name (rhost) entry that contains a substring that is interpreted as an IP address, a different vulnerability than CVE-2007-4321."},{"lang":"es","value":"el archivo filter.d/wuftpd.conf en Fail2ban v0.8.3 utiliza una expresión regular incorrecta que permite a los atacantes remotos causar una denegación de servicio (fallos de autenticación forzados) a través de una entrada de nombre DNS de resolución reversa (rhost) manipulada que contiene una subcadena que es interpretada como una dirección IP, diferente vulnerabilidad que CVE-2007-4321."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fail2ban:fail2ban:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BE8CF239-5E91-4708-B594-FA825C69DFE9"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33734","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0363","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products."},{"lang":"es","value":"Múltiples desbordamientos de búfer en (a) BarnOwl anterior a v1.0.5 y(b) owl v2.1.11 permiten a atacantes remotos ejecutar código de su elección a través de vectores que implican (1) un mensaje zcrypt manipulado, relacionado con zcrypt.c; (2) un comando reply en un mensaje con una lista Cc: Zephyr, relacionado con zwrite.c; y  otros usos sin especificar de los productos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4.1","matchCriteriaId":"E8B5153B-49DF-492F-B5B0-FA1F02D47FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CB114CBB-A7D7-424E-A8BC-56F4BCAECEE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"171619E8-3E32-4929-8944-2EC4A84CA988"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"684E559B-F7D9-471A-909C-2C40D301D0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9E30BFA-5340-4FFA-AA0F-B4AE2F3AF366"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0843A975-D31A-4EB0-8864-8F06298F2AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9BA91149-6A01-4F7A-9488-DA340A46F1FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktools:owl:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"33155A72-9F11-41E4-B494-8FAFFC6042E0"}]}]}],"references":[{"url":"http://barnowl.mit.edu/browser/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/515118","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48824","source":"cve@mitre.org"},{"url":"http://barnowl.mit.edu/browser/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://barnowl.mit.edu/wiki/barnowl-1.0.5-announce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/515118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/debian-testing-security-announce%40lists.debian.org/msg00173.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/owl/+bug/329165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0364","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:50:27.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de formato de cadena en en componente mini_calendar en Citadel.org WebCit v7.22, y otras versiones anteriores a v7.39 permite a usuarios remotos ejecutar código de su elección a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:*:*:*:*:*:*:*:*","versionEndIncluding":"7.38","matchCriteriaId":"C6634D04-1ED1-43A5-B42F-0635DCD4413F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:7.02:*:*:*:*:*:*:*","matchCriteriaId":"F783DAF6-1FF0-4227-A0B1-C9D103FC2619"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:7.10:*:*:*:*:*:*:*","matchCriteriaId":"95C30CB6-CFB0-4911-9427-58D25470DC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:7.11:*:*:*:*:*:*:*","matchCriteriaId":"5AD3E3CF-FBE4-467C-BC80-0A92CB5A5B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:7.12:*:*:*:*:*:*:*","matchCriteriaId":"5CC46E39-07E7-4E35-B4F3-193A4F5AA821"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:7.22:*:*:*:*:*:*:*","matchCriteriaId":"F5473C0C-1864-4E84-BFED-50CC5AFD47FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:webcit:7.37:*:*:*:*:*:*:*","matchCriteriaId":"827EECFC-3926-42C7-9917-3D7DA58F8A2D"}]}]}],"references":[{"url":"http://osvdb.org/52915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34457","source":"cve@mitre.org"},{"url":"http://www.citadel.org/doku.php/news:webcit.security.advisory.-.2009-march-23","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1752","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34206","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/52915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.citadel.org/doku.php/news:webcit.security.advisory.-.2009-march-23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0365","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler."},{"lang":"es","value":"El manipulador de peticiones dbus en (1) network-manager-applet y (2) NetworkManager en Ubuntu v6.06 LTS, v7.10, v8.04 LTS, and v8.10 no verifica adecuadamente los privilegios, lo que permite a usuarios locales descubrir (a)las contraseñas de la conexión de red y (b)Las claves pre-compartidas a través de peticiones sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06:-:lts:*:*:*:*:*","matchCriteriaId":"678EC327-EAC6-4923-9987-A9B78111B5C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"06FD8602-7069-41C6-B65C-84928EDCE2D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.04:-:lts:*:*:*:*:*","matchCriteriaId":"12DD761F-EA6F-4139-94ED-94EBC0F6A87D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"ED67B852-4B37-4B79-8F4D-23B2FEACA4ED"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34067","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34177","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34473","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021910","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021911","source":"cve@mitre.org"},{"url":"http://svn.gnome.org/viewvc/network-manager-applet/trunk/nm-applet.conf?r1=1133&r2=1207&pathrev=1207","source":"cve@mitre.org"},{"url":"http://svn.gnome.org/viewvc/network-manager-applet?view=revision&revision=1207","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1955","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0361.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0362.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33966","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021908","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-727-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-727-2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487722","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487752","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49062","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10828","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gnome.org/viewvc/network-manager-applet/trunk/nm-applet.conf?r1=1133&r2=1207&pathrev=1207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gnome.org/viewvc/network-manager-applet?view=revision&revision=1207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0362.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-727-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-727-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0366","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document."},{"lang":"es","value":"La función uncompress_buffer en src/server/simple_wml.cpp en Wesnoth anterior a r33069 permite a atacantes remoto provocar una denegación de servicio a través de un documento WML de gran tamaño comprimido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.11","matchCriteriaId":"7FBEEB73-9922-4A87-9EE6-A712D58B831A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.0:rc:*:*:*:*:*:*","matchCriteriaId":"E0BD9EF4-531F-42FC-B6FB-2EFE9D1DBF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB817AC-44E4-41CD-BD03-7B5907243FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BBDC2E2D-581C-4B8C-8DB1-2B34A22C1788"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"BDB9B969-9AEA-47B8-A2C1-D951DA5A6D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B3ECAC12-E14D-47F6-853C-758584EB4E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"EF2E47D5-D0F1-4FC4-BC1C-9964BE85741D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CAFC79CA-F9B0-45FD-904C-B11760E11CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"54937870-186F-4342-8658-6F3DA155A53D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9488E868-BFC2-4084-802C-874E41E0AE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"A15CBB13-9B93-4C87-A19E-56FFE900D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"63E587C8-E7D8-4FD8-A826-D7BFAE7F270D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"0ED754F0-F2DB-445C-BE11-8525521C7B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"1B0FF72F-A313-4BF1-8E7A-BF7EAA2C5EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B219D98C-B08A-4BB6-8C5B-E8978823A4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"18D98006-438D-4DF9-A40A-2B94CE8760EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"07FD8E16-22EC-43BF-8ED3-09236F1C3BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6F4D957E-7C2A-4062-A3DF-BD02E9CA5D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D02358E6-E408-4A1C-A391-9F870625C5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"383AD5F9-7691-4DA8-9DD6-AAB110F54B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"51AF2340-3914-4411-BDC0-6B84548384B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95688481-AC1B-4A58-90D3-E6E76D9E0011"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E3FF4FDE-AF17-4BCE-AFEC-CDA138B76231"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"30C116EF-BD41-4820-8243-A680EEB70055"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"C55CF49F-7678-41A9-8A4B-012A5B9EC78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"952B7487-A920-40B0-BE80-8FA710149E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2794D70A-2180-424E-BFC7-848413BBA6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"31232ECA-2AF2-46EF-A9CA-BC692BFE4BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"17A4E7EF-F4AD-4A96-BD79-664AFDF5AC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B57DCD88-7731-49A5-AFCB-5C6104025CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"41728562-611D-4F58-AB89-D1887B3564B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"76D1E17F-BC30-4F01-94D5-A64E07B9B03A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"CC3AF888-E2B1-4130-992C-4B7CF6CF4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"EF25A9ED-8349-4DB0-B719-770E3AE30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"E4989C0D-A6E6-4317-9640-15E50C62A54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"A9D8C3FF-41EC-4C98-BC7A-5C419559CBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"CF780D9D-2D07-42BF-A4AB-97F60C73A7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"A820E98A-D26D-4C9A-B476-8406C88437B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB71E24E-1A08-491F-8379-FE41AF012E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F0B57803-62E1-4F50-92DD-6796C6D60758"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C5D83E56-BE05-4DF7-88AD-BC0AD5098415"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"621115C3-5AF6-4709-BB0B-A0FE481C5C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EE1549F8-FE6A-49E5-BC19-585C4957E061"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"3FD5F86E-F65D-4114-9057-A81B360BE143"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"256B2C75-47E5-4A8F-9672-B56D17086764"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"ECD02FB1-72CD-42A3-8E7C-910490467A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"15627E66-D852-4F68-9C9A-3EAF5B805BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"415FE737-8F89-463D-9F1D-EF5EDACFCD6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1941BB00-8039-4DD8-815A-1AE0CA986C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"5D091DF5-3229-43E0-BEC4-754992B8DD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"77F8C56F-1F74-4F40-85D8-DA861DE4DB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E1E58D08-F602-4BE6-978D-34B58E9188B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"51001322-B437-4A1C-83BA-C8E3C3BCE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A991E343-0C44-4F37-80EE-5C0E45EDA909"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3C4223A3-6F43-4774-8579-59868FB5074B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"CA5792D1-F342-41F2-B056-D8BA99F5C80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"8EDB1AAF-2513-4511-9E28-E0E9ACF74C19"}]}]}],"references":[{"url":"http://launchpad.net/bugs/335089","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/336396","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/cve/2009-0366","source":"cve@mitre.org"},{"url":"http://osvdb.org/52672","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34236","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34253","source":"cve@mitre.org"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&r1=32990&r2=33069","source":"cve@mitre.org"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&view=log","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1737","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34085","source":"cve@mitre.org"},{"url":"https://gna.org/bugs/index.php?13037","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/335089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://launchpad.net/bugs/336396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://launchpad.net/bugs/cve/2009-0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&r1=32990&r2=33069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gna.org/bugs/index.php?13037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0367","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module."},{"lang":"es","value":"El módulo Python AI de Wesnoth v1.4.x y v1.5 anterior a v1.5.11, permite a atacantes remotos escapar del sandbox -cajón de arena- y ejecutar código de su elección utilizando un módulo de lista blanca que importa un módulo no seguro, después la usar el nombre de un módulo jerárquico para acceder a un módulo no seguro a través del módulo de lista blanca."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB71E24E-1A08-491F-8379-FE41AF012E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F0B57803-62E1-4F50-92DD-6796C6D60758"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C5D83E56-BE05-4DF7-88AD-BC0AD5098415"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"621115C3-5AF6-4709-BB0B-A0FE481C5C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EE1549F8-FE6A-49E5-BC19-585C4957E061"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"3FD5F86E-F65D-4114-9057-A81B360BE143"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"256B2C75-47E5-4A8F-9672-B56D17086764"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"ECD02FB1-72CD-42A3-8E7C-910490467A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"15627E66-D852-4F68-9C9A-3EAF5B805BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"415FE737-8F89-463D-9F1D-EF5EDACFCD6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1941BB00-8039-4DD8-815A-1AE0CA986C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"5D091DF5-3229-43E0-BEC4-754992B8DD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"77F8C56F-1F74-4F40-85D8-DA861DE4DB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E1E58D08-F602-4BE6-978D-34B58E9188B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"51001322-B437-4A1C-83BA-C8E3C3BCE7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A991E343-0C44-4F37-80EE-5C0E45EDA909"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3C4223A3-6F43-4774-8579-59868FB5074B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"CA5792D1-F342-41F2-B056-D8BA99F5C80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"8EDB1AAF-2513-4511-9E28-E0E9ACF74C19"}]}]}],"references":[{"url":"http://launchpad.net/bugs/335089","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/336396","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/cve/2009-0367","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34236","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1737","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0595","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wesnoth.org/forum/viewtopic.php?t=24247","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wesnoth.org/forum/viewtopic.php?t=24340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49058","source":"cve@mitre.org"},{"url":"https://gna.org/bugs/index.php?13048","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/335089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://launchpad.net/bugs/336396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://launchpad.net/bugs/cve/2009-0367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wesnoth.org/forum/viewtopic.php?t=24247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wesnoth.org/forum/viewtopic.php?t=24340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gna.org/bugs/index.php?13048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0368","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program."},{"lang":"es","value":"Vulnerabilidad en OpenSC en versiones anteriores a v0.11.7 que permite a atacantes próximos físicamente evitar los requisitos de autenticación/validación de PIN a través de (1) el comando APDU de bajo nivel o (2) una herramienta de depuración de errores, como se ha demostrado leyendo el fichero 4601 o 4701 con el programa opensc-explorer o opensc-tool."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.6","matchCriteriaId":"BEA45D6B-A77B-46F1-89E1-7E42F017D412"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7D734B35-BA7F-4219-98DA-FCD55E5A37C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"349D5BCA-885C-4948-838E-E3904E49598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"471DBF4E-54B8-4776-A0BA-0F65FE02192E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC7891E-1898-442A-96BB-5B8EE5A5B400"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EA4321E6-1D08-489C-948F-2673C30D762C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8498096A-19A9-4C09-99C3-CC1C45D6BA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"5028CF13-2807-4813-A542-A1CD6E735CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8FD4CB51-068C-4AD2-94AC-59DE20A2AB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CE75F1ED-E653-482C-B960-42DA2854E974"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2D8CA0B8-AC3B-4D0F-854D-EDF285EC01CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"931CE287-97AF-4B73-BA57-FB9B9AAA7016"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2BA979A3-A34F-4813-8489-C1985E22A398"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"04701B8B-523A-4148-805C-419336D91CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"2194636B-7F74-4EC2-A02F-CE0F29914D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"E1D617E6-4EEC-4024-92D7-930F9A90F6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"428986EC-328E-49F8-AAE7-EECD97F6B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6A64E85D-B1A7-48FB-8438-8173249ED817"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"940151B8-6466-43D7-A7EB-A28F13DA5B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.7:b:*:*:*:*:*:*","matchCriteriaId":"0BE84E1D-F765-49E6-84E2-6831A535B67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.7:d:*:*:*:*:*:*","matchCriteriaId":"CE85FABD-20F0-4308-B240-0E460E85CA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"3752BA88-CA7A-4B79-96C4-A5EC9A6C2AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"13234C4B-7598-46B1-A8F0-7C0C863DE4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"FFC7C1A0-83AA-4989-A023-0B22B95133B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"B093D7C9-242E-4CC7-9971-71D9AE19A7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"353AFA23-88C0-45AA-B9EF-EF7A4DC6AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"EA2024C5-238A-4734-B8C6-D4F99EEFBC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"DF611D89-FA24-4421-A8A8-5290629C81D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.3:pre3:*:*:*:*:*:*","matchCriteriaId":"0ECCFF79-6515-42F8-B986-4C06BE1F79D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.4:*:*:*:*:*:*:*","matchCriteriaId":"A74B19CB-8AFB-4A07-9A84-063BFF47E089"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D8F0F04-489E-41A6-B77B-133AC9FC64A3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/02/26/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34377","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-01.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1734","source":"cve@mitre.org"},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33922","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48958","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/02/26/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0369","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Clickjacking\" vulnerability."},{"lang":"es","value":"Microsoft Internet Explorer 7 permite a los atacantes remotos engañar a los usuarios que visitan arbitrariamente una URL a través de una acción onclick que mueva un elemento manipulado a la posición actual del ratón, en relación a una vulnerabilidad \"Clickjacking\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48542","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7912","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0370","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating \"secure log files.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en IBM AIX v5.2.0 hasta v6.1.2; permiten a usuarios locales incluir datos en ficheros arbitrarios. Está relacionado con (1) rmsock y (2) rmsock64 que no crean \"ficheros de log seguros.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBD01F19-4B30-4147-AC48-7F5C64EE80CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*","matchCriteriaId":"104E5C14-6D87-494B-8D60-0443ADDCD31A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"57B11497-5622-4759-906A-A93A3E815584"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1F9CD013-D904-45DF-AD43-493A22D5744B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"307B47F5-D903-4763-A353-2538AFD6C9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*","matchCriteriaId":"435340B0-AD02-4174-BC7F-6A7C222A7F6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory.asc","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ40386","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ41510","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ41593","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ41599","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42785","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42786","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42787","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42788","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33522","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6028","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ40386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ41510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ41593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ41599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ42788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0371","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the type parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en post.php en SiteXS CMS v0.1.1 y anteriores permite a atacantes remotos incluir y ejecutar ficheros de su elección mediante un .. (punto punto) en el parámetro type.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitexs_cms:sitexs_cms:*:pre-alpha:*:*:*:*:*:*","versionEndIncluding":"0.1.1","matchCriteriaId":"69AE8D93-D48A-4E74-8A1E-D895C73F2F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitexs_cms:sitexs_cms:0.1:pre-alpha:*:*:*:*:*:*","matchCriteriaId":"D38D4A9B-9E4D-4C6B-8E9C-FF3E9B025EF0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33457","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0247","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48236","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0372","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo en index.php en Miltenovik Manojlo MemHT Portal v4.0.1 y versiones anteriores permite a usuarios remotos autenticados ejecutar código de su elección subiendo un fichero con una extensión ejecutable y un tipo de contenido imagen a través de usuarios con una acción \"editProfile\", entonces accede a este fichero a través de una petición directa al fichero images/avatar/uploaded/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"752F46CE-C02E-46E0-8836-47057FA618A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:1.0:final:*:*:*:*:*:*","matchCriteriaId":"52701B65-E8C2-47B0-83B7-B283A019FBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:1.5:full:*:*:*:*:*:*","matchCriteriaId":"281AF81D-989F-4C69-9E41-F8B4C66E3584"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:1.5:update:*:*:*:*:*:*","matchCriteriaId":"BD4DC033-7838-4FF5-914C-6691EB0D32F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.0:full:*:*:*:*:*:*","matchCriteriaId":"249573E7-7C14-4CAF-AE2B-A09392E143D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.0:update:*:*:*:*:*:*","matchCriteriaId":"093E3EE8-8524-4709-BC67-EFBFFD8D2EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.5:full:*:*:*:*:*:*","matchCriteriaId":"54141E05-C819-4AF7-A31A-01C78AE24CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.5:update:*:*:*:*:*:*","matchCriteriaId":"8DA8EE80-FBF3-48E3-B08A-D4DA95FFB866"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.9:full:*:*:*:*:*:*","matchCriteriaId":"214C8095-C406-464E-8CA8-7929BF04CE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:2.9:update:*:*:*:*:*:*","matchCriteriaId":"9FE3B714-5407-4B46-94AD-A05B4F86C51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.0:full:*:*:*:*:*:*","matchCriteriaId":"263FB9C1-20F0-48EA-B6C3-2D9237114609"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.0:update:*:*:*:*:*:*","matchCriteriaId":"94E57AFB-F4CE-4107-92FC-4860B90479B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.1:*:*:*:*:*:*:*","matchCriteriaId":"68C9DAD4-3EC1-4EAF-9615-12D74D8B2249"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.1:full:*:*:*:*:*:*","matchCriteriaId":"7BF2D662-CDDA-40E2-A7B9-C2492279263E"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.1:update:*:*:*:*:*:*","matchCriteriaId":"74CFAFEB-90A3-4091-A35A-3BA9E8A04AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.2:update:*:*:*:*:*:*","matchCriteriaId":"99B71D89-51E2-43F2-94C0-A7701A279C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.3:full:*:*:*:*:*:*","matchCriteriaId":"4C6816A8-7785-4727-859A-60A913028D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.3:update:*:*:*:*:*:*","matchCriteriaId":"74679D05-32CF-45B3-8ACC-284B13D4A894"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4:*:*:*:*:*:*:*","matchCriteriaId":"90EC849C-194B-4F34-BAC8-448E0BF9AB1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4:full:*:*:*:*:*:*","matchCriteriaId":"DE18ED97-FF4B-4815-B530-7070C3051A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4:update:*:*:*:*:*:*","matchCriteriaId":"DAB926F8-8C1D-40B2-919A-BB6A5315FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4563E7A1-66B4-425B-8AEC-3F7C222BCA50"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4.5:full:*:*:*:*:*:*","matchCriteriaId":"6C148B4A-6160-4922-BE7A-622AEA5F9A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.4.5:update:*:*:*:*:*:*","matchCriteriaId":"8BB51BE2-50DC-45E5-A745-7D077C0D0674"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.5.0:full:*:*:*:*:*:*","matchCriteriaId":"4C7FF087-80B1-467B-B85D-F89ED702A504"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FB08C1CB-F9AB-456D-981D-23F1EC87030C"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"D1D84840-5F56-4608-8CFF-295E8D24D67F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"EE033096-92CA-4116-9CFE-DF76E77CC8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"2DD8EF5F-79DE-4050-A04A-DE113E54916F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CD347869-E32D-45D1-997A-724FDD72A046"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6A6B772F-CE04-44D4-876A-7DC0C7C23294"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"85F80D85-2857-4653-97B7-0DA5127364AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:memht:memht_portal:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"D72D56EB-39D7-42C5-B838-0CC99D9FD016"}]}]}],"references":[{"url":"http://secunia.com/advisories/33626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33424","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48199","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7859","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0373","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mag_id parameter in a magazine action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente componente ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) de Joomla!. Permite a los usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"mag_id\" en una acción de tipo \"magazine action \" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elearningforce:flash_magazine_deluxe:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"4004BC5E-4138-42F9-A40C-437B7A98D2BA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33455","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0249","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48226","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0374","sourceIdentifier":"cve@mitre.org","published":"2009-01-30T21:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Clickjacking\" vulnerability.  NOTE: a third party disputes the relevance of this issue, stating that \"every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking,\" and adding that the exploit code \"is not a valid demonstration of the issue."},{"lang":"es","value":"** IMPUGNADA **  Google Chrome v1.0.154.43 permite a atacantes remotos engañar a un usuario para que visite una URL de su elección mediante una acción \"onclick\" que mueve un elemento modificado a la posición actual del ratón, relacionado con la vulnerabilidad \"Clickjacking\". NOTA: una tercera parte cuestiona la relevancia de este asunto, exponiendo que \"cualquier navegador suficientemente expuesto es y probablemente continuará siendo susceptible del comportamiento conocido como clickjacking\", y añade que el código que explota esta vulnerabilidad no es una demostración válida de la misma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"}]}]}],"references":[{"url":"http://www.secniche.org/gcr_clkj/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500499/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500533/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7903","source":"cve@mitre.org"},{"url":"http://www.secniche.org/gcr_clkj/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500499/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500533/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0375","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:09.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://www.fortiguardcenter.com/advisory/FGA-2009-04.html:\r\n\r\n\"It should be noted that the victim does not necessarily have to open the malicious file for exploitation to occur: the vulnerabilities lie in a DLL that is also used as a plugin for the Windows Explorer shell. A successful attack could take place by merely previewing the IVR file through Windows Explorer. \"","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a filename length field containing a large integer, which triggers overwrite of an arbitrary memory location with a 0x00 byte value, related to use of RealPlayer through a Windows Explorer plugin."},{"lang":"es","value":"Archivo dll en RealNetworks RealPlayer 11, permite a atacantes remotos ejecutar código de su elección a través de un archivo Internet Video Recording (IVR) manipulado con un campo con un nombre de archivo largo que contiene un entero largo, lo que provoca la sobreescritura de una región de memoria con un valor en bytes de 0x00, relacionado con el uso de RealPlayer a través del componente de Windows Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*","matchCriteriaId":"72A94395-4F1A-4310-85A8-F46A76EE3A12"}]}]}],"references":[{"url":"http://secunia.com/advisories/33810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38218","source":"cve@mitre.org"},{"url":"http://service.real.com/realplayer/security/01192010_player/en/","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-04.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500722/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33652","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0178","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48567","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/realplayer/security/01192010_player/en/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500722/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0376","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:09.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plugin."},{"lang":"es","value":"Archivo dll en RealNetworks RealPlayer 11, permite a atacantes remotos ejecutar código de su elección a través de un archivo Internet Video Recording (IVR) manipulado con un campo modificado que controla el tamaño de una estructura sin especificar y lanza una corrupción en el montículo (heap), relacionado con el uso de RealPlayer a través del componente de Windows Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:11:*:*:*:*:*:*:*","matchCriteriaId":"72A94395-4F1A-4310-85A8-F46A76EE3A12"}]}]}],"references":[{"url":"http://secunia.com/advisories/33810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38218","source":"cve@mitre.org"},{"url":"http://service.real.com/realplayer/security/01192010_player/en/","source":"cve@mitre.org"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-04.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500722/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/509097/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33652","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0178","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-009/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/realplayer/security/01192010_player/en/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500722/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/509097/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-009/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0377","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mpid parameter in a sign action to index.php, a different vector than CVE-2008-3132."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente beamospetition (com_beamospetition) v1.0.12 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"mpid\" en una acción \"sign\" de index.php, un vector diferente a CVE-2008-3132."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_beamospetition:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"FD2D98D3-5A32-4C1E-9329-EF36A6E3AFAB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500250/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33391","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500250/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0378","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the pet parameter in a sign action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo index.php en el componente beamospetition (com_beamospetition) 1.0.12 para Joomla! que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro pet en una acción sign."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_beamospetition:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"FD2D98D3-5A32-4C1E-9329-EF36A6E3AFAB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500250/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33391","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500250/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0379","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a showgame action to index.php, a different vector than CVE-2008-0761."},{"lang":"es","value":"Vulnerabilidad de Inyección SQL en Prince Clan Chess Club (com_pcchess), componente para Joomla!, permite a atacantes remotos ejecutar código de su elección a través del parámetro \"game_id\" en una acción showgame sobre index.php, es un vector diferente a CVE-2008-0761."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_pcchess:*:*:*:*:*:*:*:*","matchCriteriaId":"F200A0D1-9020-4817-8A90-29D74AF70CF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33394","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48144","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7846","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0380","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607.  NOTE: CVE disputes this issue, since neither \"showbiz\" nor \"bid\" appears in the source code for SOBI2"},{"lang":"es","value":"** CUESTIONADA ** Una vulnerabilidad de inyección de SQL en el componente de Joomla! y Mambo Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de parámetro bid en una acción showbiz a index.php, un vector diferente que CVE-2008-0607. NOTA: CVE discute de este problema, ya que ni \"showbiz\" ni \"bid\" aparece en el código fuente de SOBI2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sigsiu.net:sobi2:2.8.2:rc:*:*:*:*:*:*","matchCriteriaId":"9F5745C6-DD84-413D-A4A2-72F298FE21A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2009-January/002136.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33378","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48131","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7841","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2009-January/002136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0381","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente BazaarBuilder Ecommerce Shopping Cart (com_prod) v5.0 del gestor de contenidos Joomla!. Permite a los usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\" en una acción de tipo \"products action\" (acción de producto) en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bazaarbuilder:ecommerce_shopping_cart:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B78F87EF-A586-4902-8BDC-F5EDA87D7F74"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48141","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0382","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with \"translate node\" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Internationalization (i18n) Translation 5.x versiones anteriores a 5.x-2.5, un módulo de Drupal, permite a atacantes remotos con permisos \"traducir nodo\" evitar restricciones de acceso y leer nodos no públicos a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:internationalization:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-2.3","matchCriteriaId":"531C796C-EC39-4619-8E5A-2F08B85772B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:internationalization:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"D842B791-E9F1-4F9E-81B2-D3A370E8BEDE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/358958","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33283","source":"cve@mitre.org"},{"url":"http://drupal.org/node/358958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0383","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request."},{"lang":"es","value":"El fichero delete.php de Max.Blog 1.0.6 no restringe apropiadamente el acceso, lo cual permite a atacantes remotos borrar entradas arbitrarias del blog a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mzbservices:max.blog:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EC29ECF9-9353-49F6-A1F5-6255E8ECEA20"}]}]}],"references":[{"url":"http://osvdb.org/51482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33590","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mzbservices.com/show_post.php?id=72","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33368","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48125","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7835","source":"cve@mitre.org"},{"url":"http://osvdb.org/51482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mzbservices.com/show_post.php?id=72","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0384","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL in el archivo autor.php en OwnRS CMS 1.2 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adam_tomecek:ownrs:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0DFC5EE-20AE-47CC-959B-48576FC63782"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/7849","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0385","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference."},{"lang":"es","value":"Error de presencia de signo en entero en la función fourxm_read_header en libavformat/4xm.c en FFmpeg versiones anteriores a revision 16846 permite a atacantes remotos ejecutar código de su elección a través de un fichero de vídeo 4X malformado con un valor largo current_track, lo cual dispara un puntero de referencia NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","versionEndExcluding":"0.6.3","matchCriteriaId":"B10E38AD-49F8-4667-9104-A25CC0E9BA8C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://git.ffmpeg.org/?p=ffmpeg%3Ba=commitdiff%3Bh=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17","source":"cve@mitre.org"},{"url":"http://osvdb.org/51643","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33711","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34296","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34385","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34712","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34845","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34905","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1781","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1782","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:297","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500514/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33502","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trapkit.de/advisories/TKADV2009-004.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0277","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48330","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.ffmpeg.org/?p=ffmpeg%3Ba=commitdiff%3Bh=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500514/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trapkit.de/advisories/TKADV2009-004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-734-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0386","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file."},{"lang":"es","value":"Desbordamiento de búfer basado en montón en la función qtdemux_parse_samples de gst/qtdemux/qtdemux.c de GStreamer Good Plug-ins (conocido como gst-plugins-good) v0.10.9 hasta v0.10.11 podría permitir a atacantes remotos ejecutar código de su elección mediante un dato básico Composition Time To Sample (ctts) manipulado, en un fichero .mov de QuickTime deformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"762FB2B0-CC29-4422-A675-CC2555A2B314"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"14C8ECF4-F1BE-44D2-BB20-2EE557DEDF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"69917C72-DD63-48D8-A268-6452F50484DA"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53","source":"cve@mitre.org"},{"url":"http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35777","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2009-003.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:035","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0271.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33405","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-736-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0225","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481267","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10306","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2009-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-736-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0387","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to \"mark keyframes.\""},{"lang":"es","value":"Un error de indice en vector en la funcion qtdemux_parse_samples de gst/qtdemux/qtdemux.c en GStreamer Good Plug-ins (también conocido como gst-plugins-good) en sus versiones 0.10.9 a 0.10.11 permite a atacantes remotos provocar una denegación de servicio (que genera un fallo en la aplicación) y posiblemente ejecutar código arbitrario a través de los datos modificados de una Sync Sample (también conocido como STSS) en un fichero .mov de vídeo/audio de Quicktime debidamente modificado en relación  con los \"mark keyframes\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"762FB2B0-CC29-4422-A675-CC2555A2B314"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"14C8ECF4-F1BE-44D2-BB20-2EE557DEDF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"69917C72-DD63-48D8-A268-6452F50484DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:plug-ins:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"541159E6-630D-4A63-8FC3-A10816B1B4C9"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53","source":"cve@mitre.org"},{"url":"http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35777","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2009-003.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:035","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0271.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33405","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-736-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0225","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481267","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10611","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2009-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-736-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0388","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp."},{"lang":"es","value":"Errores múltiples de signo de entero en (1) UltraVNC v1.0.2 y v1.0.5 y (2) TightVnc v1.3.9 permiten a atacantes remotos provocar una denegación de servicio (corrupción de la cabecera y caída de la aplicación) o posiblemente ejecutar codigo de su elección mediante un valor de gran longitud en un mensaje, en relación con las funciones (a) ClientConnection::CheckBufferSize y (b) ClientConnection::CheckFileZipBufferSize en ClientConnection.cpp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6E472222-224B-41BD-A788-F6D6AF96430B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C556A1A6-30ED-4988-B66B-CF823B297CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultravnc:ultravnc:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"835FD162-1BE0-43C6-93A5-1E450505D2A9"}]}]}],"references":[{"url":"http://forum.ultravnc.info/viewtopic.php?t=14654","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33807","source":"cve@mitre.org"},{"url":"http://vnc-tight.svn.sourceforge.net/viewvc/vnc-tight?view=rev&revision=3564","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/vnc-integer-overflows","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500632/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33568","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0321","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0322","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7990","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8024","source":"cve@mitre.org"},{"url":"http://forum.ultravnc.info/viewtopic.php?t=14654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vnc-tight.svn.sourceforge.net/viewvc/vnc-tight?view=rev&revision=3564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/vnc-integer-overflows","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500632/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0389","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors.  NOTE: vectors 1 and 2 can be used together to execute arbitrary code."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en el control ActiveX Web On Windows (WOW) en WOW ActiveX 2 permiten a atacantes remotos (1) crear y sobreescribir archivos arbitrarios a través del método WriteIniFileString, (2) ejecutar programas a través del método ShellExecute, (3) leer el registro a través de vectores no especificados, y (4) escribir en el registro a través de vectores no especificados. NOTA: los vectores de 1 y 2 se pueden utilizar juntos para ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eztools-software:web_on_windows_activex:2:*:*:*:*:*:*:*","matchCriteriaId":"31E01EAC-8BD1-4F83-8811-4A5182851171"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33515","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48337","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7910","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0390","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to send signals to arbitrary processes by populating the /tmp/enomalism2.pid file with command-line arguments for the kill program."},{"lang":"es","value":"Una vulnerabilidad de inyección de argumento en Enomaly Elastic Computing Platform (ECP), anteriormente Enomalism, en versiones anteriores a la 2.1.1 permite a los usuarios locales a enviar señales arbitrarias a los procesos en ejecución rellenando el fichero /tmp/enomalism2.pid con argumentos de línea de comandos para el kill."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enomaly:elastic_computing_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"43350655-1196-4654-B78E-56C571571F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:enomaly:elastic_computing_platform:2.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"39B772C3-E0CC-4DE4-B028-445B4F29F36C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500573/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500573/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0391","sourceIdentifier":"cve@mitre.org","published":"2009-02-02T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad sin especificar en el IBM WebSphere Application Server (WAS) 6.0.1 en z/OS permite a los atacantes leer ficheros arbitrarios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:zos:*:*:*:*:*:*:*:*","matchCriteriaId":"E8D60057-94B9-40DB-927D-953703552B2A"}]}]}],"references":[{"url":"http://osvdb.org/51663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK72036","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK79232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33533","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021658","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0423","source":"cve@mitre.org"},{"url":"http://osvdb.org/51663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK72036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK79232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0392","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T01:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en sysconf.cgi en los drivers del módem Motorola Wimax CPEi300 permite a los usuarios remotos autenticados leer archivos arbitrarios a través de un .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:cpei300:*:*:*:*:*:*:*:*","matchCriteriaId":"0148A0D3-68D5-4476-8775-C28E8CD3D816"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500545/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7915","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500545/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0393","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T01:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en sysconf.cgi en los driver del módem Motorola CPEi300 Wimax permite a los usuarios remotos autenticados inyectar HTML o scripts web arbitrarios a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:cpei300:*:*:*:*:*:*:*:*","matchCriteriaId":"0148A0D3-68D5-4476-8775-C28E8CD3D816"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500545/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7915","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500545/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0394","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T01:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 permite a atacantes remotos ejecutar secuencias SQL a través del parámetro school."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ple_cms:ple_cms:1.0:beta_4.2:*:*:*:*:*:*","matchCriteriaId":"83E9F828-8525-48D5-A937-D0E0F0F4D52C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7917","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0395","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T01:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el \"login\" (autenticación) del portal de automóviles v1.0 de netArtMedia, que permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros \"username\" (nombre de usuario) y \"password\" (contraseña)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netartmedia:car_portal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFF8DBCB-1AD8-41DD-93C3-71B2A11E04AD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7916","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0396","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948."},{"lang":"es","value":"Los teléfonos Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, y K530i permite a los atacantes remotos causar una denegación de servicios (el dispositivo se reinicia o cuelgue) a través de paquetes mal formados WAP Push para (1) SMS o (2) puerto UDP 2948."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:k530i:*:*:*:*:*:*:*:*","matchCriteriaId":"A3BC04A9-3C41-46F3-AEE6-7D6B044DD39D"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:k610i:*:*:*:*:*:*:*:*","matchCriteriaId":"21053C01-D59F-4828-959E-8F361C8A93F0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:k618i:*:*:*:*:*:*:*:*","matchCriteriaId":"2F964C80-4E77-4CFA-AD90-B9A5DB03C10E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:k660i:*:*:*:*:*:*:*:*","matchCriteriaId":"7A90D412-AE46-4309-8C4C-AECB0CC006B5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:k810i:*:*:*:*:*:*:*:*","matchCriteriaId":"D4AFD064-4E66-422E-AB68-EE0156C48472"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:w660i:*:*:*:*:*:*:*:*","matchCriteriaId":"17B4356D-9FD2-4F13-8D9E-6A23889F383F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:w880i:*:*:*:*:*:*:*:*","matchCriteriaId":"B7DABE12-6BC4-444B-A9DE-D0EBE88F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:w910i:*:*:*:*:*:*:*:*","matchCriteriaId":"095FA09A-1FC5-4583-94B9-C3FD558889C1"},{"vulnerable":true,"criteria":"cpe:2.3:h:sony_ericsson:z610i:*:*:*:*:*:*:*:*","matchCriteriaId":"C32A769A-6737-4CFC-BE1D-2AE368FF3D53"}]}]}],"references":[{"url":"http://secunia.com/advisories/33616","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mseclab.com/index.php?page_id=123","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500382/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33433","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021634","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mseclab.com/index.php?page_id=123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500382/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0397","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer basado en montículo en la función qtdemux_parse_samples de gst/qtdemux/qtdemux.c de los \"Plug-ins\" (complementos) Good de GStreamer (también conocido como gst-plugins-good) en las versiones desde v0.10.9 a v0.10.11 y en los \"Plug-ins\" (complementos) (también conocido como gstreamer-plugins)  de GStremaer v0.8.5. Permite a atacantes remotos la ejecución de código de su elección a través de la modificación del \"atom data\" (unidad básica de información en QuickTime) Time-to-sample (también conocido como stts) en un archivo mal formado de QuickTime media de extensión \".mov\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"762FB2B0-CC29-4422-A675-CC2555A2B314"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"14C8ECF4-F1BE-44D2-BB20-2EE557DEDF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"69917C72-DD63-48D8-A268-6452F50484DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:plug-ins:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"541159E6-630D-4A63-8FC3-A10816B1B4C9"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53","source":"cve@mitre.org"},{"url":"http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35777","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-052.htm","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2009-003.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:035","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0270.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0271.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500317/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33405","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-736-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0225","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481267","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48555","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-052.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2009-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500317/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-736-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0398","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T11:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file."},{"lang":"es","value":"Error de indice de selección en la función gst_qtp_trak_handler en gst/qtdemux/qtdemux.c en GStreamer Plug-ins (conocido como gstreamer-plugins) v0.6.0 permite a atacantes remotos provocar un impacto desconocido mediante un fichero multimedia de QuickTime manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:plug-ins:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F2CD7A95-2365-43AF-B6CE-FC315BF32899"}]}]}],"references":[{"url":"http://secunia.com/advisories/33830","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0269.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0269.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0399","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php.  NOTE: this is only a vulnerability when the administrator does not properly follow installation directions."},{"lang":"es","value":"Chipmunk Blogger Script permite a atacantes remotos obtener privilegios de administrador a través de una petición directa a admin/reguser.php. NOTA: esto es sólo una vulnerabilidad cuando el administrador no sigue las directivas de instalación adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk_scripts:chipmunk_blogger:*:*:*:*:*:*:*:*","matchCriteriaId":"93C6D65E-3C20-4CBD-B78D-B35687505763"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/7894","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0400","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyeccción SQL en blog.php en SocialEngine v3.06 trial, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"category_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socialengine:socialengine:3.06:*:trial:*:*:*:*:*","matchCriteriaId":"D3BBFA9E-9D22-43A3-92F4-6EA0AC4DE36E"}]}]}],"references":[{"url":"http://osvdb.org/51644","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33495","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7900","source":"cve@mitre.org"},{"url":"http://osvdb.org/51644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0401","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browsecats.php de E-Php CMS; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ephpscripts:e-php_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"675A49D6-6B77-455F-88C7-2A86032CBD3F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0901-exploits/ephpcmscid-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31923","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33470","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48297","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0901-exploits/ephpcmscid-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0402","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, and (15) vat_num parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo client/new_account.php en Domain Technologie Control (DTC) anteriores a v0.29.16 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, y (15) vat_num."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:*","versionEndIncluding":"0.29.8","matchCriteriaId":"DFB07760-4780-40D5-94F8-A7E323AC05B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:*","matchCriteriaId":"48453D15-9383-453A-80DE-CBA330DF43EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:*","matchCriteriaId":"6ECDD453-4477-4567-85EC-9FBB777577C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:*","matchCriteriaId":"3F470F49-27DE-49D8-95B6-0BF562A5AFC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:*","matchCriteriaId":"9623CC23-64B9-408E-9BFD-E5A6A2498D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:*","matchCriteriaId":"E9E38991-255F-4590-9D1B-EDC9965D4745"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:*","matchCriteriaId":"25BAB9EE-D86A-4AC7-85D0-711B755F63DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:*","matchCriteriaId":"3722E5B8-F002-4E81-A7A1-370D53EBFDC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:*","matchCriteriaId":"F2A5B9D8-5268-4C34-943E-AEA918855EDF"}]}]}],"references":[{"url":"http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973","source":"cve@mitre.org"},{"url":"http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=056e1d1849ff3aa183a410e2aab1c1c3e969247d","source":"cve@mitre.org"},{"url":"http://osvdb.org/51631","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33698","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33496","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48292","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=056e1d1849ff3aa183a410e2aab1c1c3e969247d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0403","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/authenticate.php de Chipmunk Blogger Script; permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetro (1)username -nombre de usuario- y (2) password -contraseña-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chipmunk_scripts:chipmunk_blogger:*:*:*:*:*:*:*:*","matchCriteriaId":"93C6D65E-3C20-4CBD-B78D-B35687505763"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/0267","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7894","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0404","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) expressions in the style attribute, which is processed by Internet Explorer 7."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bioinformatics htmLawed v1.1.3 y v1.1.4, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de expresiones incorrectas en el atributo \"style\" en hojas de estilo en cascada (CSS), como ha sido procesado por el Internet Explorer 7."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"F8345A3E-5371-49B8-A3B1-24BAF4F6533A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF4355C5-3B19-4D13-9BF6-CE518AE3B0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC72F66-5FFB-4A3E-B9F7-9F532D6AEBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"03FB256C-001B-447E-9645-95152210209C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B9603EFF-1817-4D94-8E7D-D0FEA53DC331"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7EB0A491-5A67-4631-8DFB-77B5DA0F2D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7CADAB-1F7D-46EE-BB7E-4B7C6356A8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E83C0099-9CC6-4877-82B9-028277560A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"8414F133-251F-4782-9FFC-0E034D86D140"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5350C55C-17F0-4CC2-9928-01A7C9F55DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B0E68938-9392-4CD0-AC81-310E0F6DE02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BD6D86A1-0371-49B8-BACC-A1932104F82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1A7EC86-7120-4865-BB3C-C7F6ED743B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:bioinformatics:htmlawed:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF5441EA-9AF1-4C98-A06D-A16B1E0C3F0B"}]}]}],"references":[{"url":"http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293026","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293090","source":"cve@mitre.org"},{"url":"http://osvdb.org/51650","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33655","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s4.3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33507","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48333","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s4.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0405","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en articles.php de smartSite CMS v1.0; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro var."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartsitecms:smartsitecms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6BDE7DB3-099C-4940-8A46-F15FBC171624"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48321","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0406","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Community CMS v0.4 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:community_cms:community_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"22100159-038A-4778-97A6-46A721B800D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:community_cms:community_cms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"779F3959-D36D-4A2E-8946-0E2C41028ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:community_cms:community_cms:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AEF82DC4-9DDB-4BBC-BDFB-02CC66137428"},{"vulnerable":true,"criteria":"cpe:2.3:a:community_cms:community_cms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E01821B1-2063-4D30-B455-DA5F04A5A6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:community_cms:community_cms:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5CB7DD47-13B0-417A-898F-0E7337FCCF32"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33484","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0407","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/login.php de PHP-CMS Project 1; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:humayun_shabbir:php-cms_project:1:*:*:*:*:*:*:*","matchCriteriaId":"86C13D08-6FC9-41E9-84A4-C1694211C4C8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33473","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48267","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7876","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0408","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site request forgery (CSRF) en osCommerce versión 2.2 RC 2a, permite a los atacantes remotos secuestrar la autenticación de los administradores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*","matchCriteriaId":"FF757944-C09B-4B03-9453-72ACB917E124"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/97/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/51605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33446","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48289","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/97/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0409","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en offline_auth.php de Max.Blog v1.0.6 y anteriores, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mzbservices:max.blog:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EC29ECF9-9353-49F6-A1F5-6255E8ECEA20"}]}]}],"references":[{"url":"http://osvdb.org/51645","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500470/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33493","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7899","source":"cve@mitre.org"},{"url":"http://osvdb.org/51645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500470/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0410","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow."},{"lang":"es","value":"Error Off-by-one en el demonio SMTP en GroupWise Internet Agent (GWIA) en Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, y 8.0 que permite a los atacantes remotos ejecutar arbitrariamente código a través de una dirección larga de e-mail en un comando malformado RCPT, conduciendo a un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*","matchCriteriaId":"D861C5BE-825C-4EED-994A-9DE38AB6EA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*","matchCriteriaId":"1D75C8A8-8162-4160-9295-2DA4D710AD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C52E2ABC-20AE-437A-83B0-2E0753787FB5"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=GjZRRdqCFW0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7002502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500609/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33560","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-010/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.novell.com/Download?buildid=GjZRRdqCFW0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7002502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500609/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0411","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T19:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script."},{"lang":"es","value":"Google Chrome anterior a v1.0.154.46 no restringe adecuadamente el acceso de las páginas Web a las cabeceras de respuesta HTTP (1) Set-Cookie y (2) Set-Cookie2. Esto permite a atacantes remotos obtener información sensible de la cookies a través de llamadas XMLHttpRequest y otras secuencias de comandos web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.43","matchCriteriaId":"F3D8C988-6C80-4627-BE11-72304CDE0AC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"}]}]}],"references":[{"url":"http://codereview.chromium.org/11264","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/18533","source":"cve@mitre.org"},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=8529","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48554","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/11264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/18533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=8529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0412","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt."},{"lang":"es","value":"La función ProcessLogin en el archivo class.auth.php en Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition que permite a los atacantes remotos evitar la autenticación y obtener acceso administrativo reutilizando la cookie RememberToken depués de un fallo en el intento del login admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interspire:shopping_cart:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7378C7C8-F612-4CDD-8E27-99A525FAA3AE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499967/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33212","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021557","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499967/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0413","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T23:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en RoundCube Webmail (roundcubemail) v0.2 stable, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de un atributo oculto incrustado en un correo electrónico HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"83FF6973-9BAC-4DF2-BACE-42F0D9340A27"}]}]}],"references":[{"url":"http://secunia.com/advisories/33622","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33827","source":"cve@mitre.org"},{"url":"http://trac.roundcube.net/changeset/2245","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33372","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48129","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.roundcube.net/changeset/2245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0414","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T23:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption."},{"lang":"es","value":"Vulnerabilidad sin especificar en Tor anterior a v0.2.0.33 tiene un impacto y vectores de ataque desconocidos que lanzan una corrupción de montículo (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","matchCriteriaId":"C30E2B05-BD01-4F0B-9EDF-7701B6A14848"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:alpha:*:*:*:*:*:*","versionEndIncluding":"0.2.0.32","matchCriteriaId":"821649FD-593C-47B8-874E-C3F8F6BC6E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*","matchCriteriaId":"4490AC9B-E8D8-4C97-866B-AB76AB2536F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*","matchCriteriaId":"0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*","matchCriteriaId":"9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*","matchCriteriaId":"2A2A2B60-8D31-4B59-8407-9CE62709906A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*","matchCriteriaId":"CDE02B1D-AA25-4364-8E54-583A0304FA69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*","matchCriteriaId":"DE3AB095-3F57-4922-BC12-0842FA158555"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*","matchCriteriaId":"F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*","matchCriteriaId":"811FD436-8BD2-463A-8072-A915FFCA33C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*","matchCriteriaId":"83F107CD-7334-4D9D-AEFF-FA5F8DE72576"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*","matchCriteriaId":"07EB2211-D97D-47EF-94D1-01E7A3879BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*","matchCriteriaId":"28DC8889-4E65-46D0-AA68-6390757862D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*","matchCriteriaId":"4E4C7373-82F1-49E6-90D6-7A02AC52F255"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*","matchCriteriaId":"7F3D847A-D8F1-40CE-AE33-A397654C55B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*","matchCriteriaId":"8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*","matchCriteriaId":"D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7301BA35-2522-4144-83C2-6A3A6D329A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"37993416-D81F-4F6B-AB2C-16F351BE68D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"295C826F-CBEB-4BA2-A760-22D58D231BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D230B213-4A35-488F-A4B5-87F77BD65E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF88062-8726-4C1D-8F93-ABA0B1654656"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1A710565-6960-4D46-A1EB-86FE0927A66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"81F6C954-7C0A-41E5-9719-26082E40C5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"43784D06-2D2A-46D1-ADE2-B947B3F10F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"196BF37C-CD62-4D4C-A716-827B0E6A5065"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"20076B65-48E6-4DA2-BDA1-AC4F904B449D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"48A2CCAD-397B-4037-B99B-F0A622FAF8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"50E74056-DD32-49E6-808A-5A9B755F1DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E2103A8-0F3F-4226-A5D8-4BF239FD6636"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"0490AB18-A839-400D-88E2-D918B1EEFA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"DBED980F-A8B9-4C44-957C-FD18867B1799"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3E033E0C-C7F6-4910-A795-28BA60E9431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5AAAACA5-F431-4D83-B04D-EC9A81C96184"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A1D5B46C-E7D3-495F-861C-12324F09EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"639E3063-34CC-4AE2-B055-92D36ECAADF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C5305AF8-E26C-44A1-B546-AAC5D1C2D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"48DCAB29-4EF2-4A50-A941-DA5D89E27D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"33928D26-39DF-4E15-9979-F9484913C219"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48B8A291-E1F7-444F-8C5B-C3C38541B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24581D9F-02AF-42E6-A3D7-9CAD43E26477"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3B978E3E-69D7-46BD-BD88-1409A546FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E7FED829-128A-4F87-9838-AD0C9C11E458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3A39B543-5978-46FC-AF85-D635D87E3B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"803498D9-C750-4D16-8ADF-2F98E71888A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C04309D4-FEA8-47EA-BB9A-8CBD341B475F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"8607F3C9-F185-4B87-8A1B-B9495A4F244D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"667201BB-5FDA-4E51-B865-0AF8507DBCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"3C7D396C-36CA-4579-BCA0-672440CB5CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6AE716BE-10CE-49EB-9CC4-068584CD3357"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"811CE708-CEE6-4B0F-98E5-E138C06EA382"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0F837E-12E5-4332-9823-8B1F764042E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"6860F802-FEC2-449A-A5FC-AFACCA8633CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF80379-BD68-4E3B-A7CC-57B51619A0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*","matchCriteriaId":"A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"57DAA48C-4B3B-4665-87AB-38ACFD6C757C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4D9E677-01D2-4800-82AA-F5585475D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"37CF2822-88B6-41F2-B10A-A8B09B27245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*","matchCriteriaId":"9C589D4F-60B3-450B-860A-9975BB47BBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B300C56E-7DF5-4B24-84D1-A4732515325E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*","matchCriteriaId":"DA331167-6A2F-402F-A28F-9EE7B6F20207"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"13846571-C84A-43D6-9970-444E6B4DB0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*","matchCriteriaId":"F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4740B10-EFB8-4F79-88C1-9B6F5897A71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"B4D881C4-0302-44E9-A3C5-A23EFD681B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*","matchCriteriaId":"31CA7556-D132-4E81-8E13-C7E025AF20AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A8219F1A-D6F5-4D6E-B10D-4C455073520C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D224FA8D-4C5A-48BE-92F2-1EC57782046D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB701014-7980-4BBE-8BD9-3FD2A0AF6941"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D68C31D4-9478-4EB6-B160-E9970ADA785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"872F7B10-30EA-4945-99BC-9EC1C09D6D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5BBC3EFD-7F03-4DC1-988C-22007216F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"2F7898C5-9450-41FD-B45D-7504D97B4CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"B3A247E8-F22B-4639-96D2-9BC01C904D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"B1233504-041A-454E-9F2E-6E2A4207879D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"342D2B8A-A832-4CAB-9389-93764B0DE241"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"7D44F099-7BC3-45C4-9DB3-03A7E40BC548"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1A79A0CD-7B81-417E-8DE3-0D61006003FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"4F0A70AA-931A-4906-B4AD-D56E90683716"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*","matchCriteriaId":"3BD4450F-6E15-40CD-94CA-63F70A3EC354"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"BB51EE46-D720-4C1F-8992-67F4422E43CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*","matchCriteriaId":"197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.3:alpha:*:*:*:*:*:*","matchCriteriaId":"4340AB16-25B5-4371-B490-6F2563268358"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EA145B1E-674C-4C79-93C0-BC24EC5F8CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FCD8B5C4-C680-4DE2-9245-0A8F380C15E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*","matchCriteriaId":"9B671031-08A4-4B9D-B3DA-7D074D8BFAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.6:alpha:*:*:*:*:*:*","matchCriteriaId":"1A2098AF-763E-4F62-BBD9-A4C9AC411C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*","matchCriteriaId":"1F3C6BA8-9ED9-42F8-9054-F94840E653E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.8:beta:*:*:*:*:*:*","matchCriteriaId":"27D917E6-7E71-4B14-8881-C22755C6899B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F22F7D60-BBAE-4951-B84C-C70BEB88B6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"72B2E210-F46F-4A86-A923-82599D0CFF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"2C0372D0-8181-4812-9741-70DC4C0AEA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"62E983BF-8D3F-4B20-A89A-BC324C5AD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EF4EC417-80F8-4B04-9176-3B9199662D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"EFC7477A-5DDA-42A6-828E-A818CCF208B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"963FD695-512A-45A8-A60D-887D93FBBD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"A3A38CD7-4201-4E41-8C11-51A4DEEDDB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"65ABF89E-4814-44D3-A1AD-3B7A4F876A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"96F69A35-225C-41FF-A32B-AE53096516EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"2B218F1A-C04D-40B3-A6BE-86DA04E47D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"B6D575EF-37BA-4E69-BDD2-B99680D2CEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"E600CF30-7D23-4F41-BCB7-26631B33A1F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*","matchCriteriaId":"7B173DF1-D506-47F4-8F13-18026BF7A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*","matchCriteriaId":"4462DB3B-BF33-4BFA-A9C9-CF674A18D24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*","matchCriteriaId":"5E666EDB-F72C-4B14-8FF4-95B082BB38EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*","matchCriteriaId":"C538F301-D9A9-48CC-AB77-AD073935D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"67AF751E-3C14-4B67-9E24-DBD14E00D72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"02525A8C-2384-409C-8D94-13D8E30904EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.3:alpha:*:*:*:*:*:*","matchCriteriaId":"04955D07-0755-473C-AD6A-1AC5B158E387"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"810D53DA-CACC-4432-B8E5-C42464B316C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.5:alpha:*:*:*:*:*:*","matchCriteriaId":"334049F0-332B-4736-B0C9-45B0C1289F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.6:alpha:*:*:*:*:*:*","matchCriteriaId":"9F8D1841-FDBB-4507-B092-F41C49285B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"02937401-0114-4D9C-9FDE-E299CC55FC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.8:alpha:*:*:*:*:*:*","matchCriteriaId":"59C66307-DB75-40C2-8AB6-538C9E35E141"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.9:alpha:*:*:*:*:*:*","matchCriteriaId":"1BBF6A17-43CC-4E14-AC2F-DC6C46B98A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.10:alpha:*:*:*:*:*:*","matchCriteriaId":"E511EB2D-7E75-45BC-B446-4CD0FFB7016E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.11:alpha:*:*:*:*:*:*","matchCriteriaId":"8BC7FC78-6BD8-427E-937D-BD6B4ED7FADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.1.1.12:alpha:*:*:*:*:*:*","matchCriteriaId":"0B9D629C-8D14-490B-A7FA-E765F51226EE"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Jan-2009/msg00000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://blog.torproject.org/blog/tor-0.2.0.33-stable-released","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33635","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33399","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021633","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0210","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00902.html","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Jan-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://blog.torproject.org/blog/tor-0.2.0.33-stable-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00902.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0415","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T23:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LD_PRELOAD path."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en trickle v1.07, permite a usuarios locales ejecutar código de su elección a través de un caballo de troya trickle-overload.so en el directorio de trabajo actual, que se referencia  en la ruta LD_PRELOAD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monkey:trickle:1.07:*:*:*:*:*:*:*","matchCriteriaId":"E8D337AC-A414-4781-83E5-FE95A3C971AB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513456","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33516","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/01/29/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0416","sourceIdentifier":"cve@mitre.org","published":"2009-02-03T23:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf temporary files."},{"lang":"es","value":"El programa de instalación de certificados SSL (genSslCert.sh) en Standards Based Linux Instrumentation for Manageability (SBLIM)sblim-sfcb v1.3.2 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre los ficheros temporales 1) /var/tmp/key.pem, (2) /var/tmp/cert.pem, and (3) /var/tmp/ssl.cnf"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:standards_based_linux_instrumentation:sblim-sfcb:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1AFBBE04-40EA-4117-A01F-CE98D4B3447E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51783","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33795","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=874261","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33583","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=874261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2561165&group_id=128809&atid=712784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0417","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:20.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not strictly follow RFC 3986, such as Internet Explorer 6 and 7."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el método AgaviWebRouting::gen(null) en Agavi 0.11 anterior a v0.11.6  y v1.0 anterior v1.0.0 beta 8, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una URL manipulada con ciertos caracteres que no son manejados adecuadamente por navegadores web que no siguen estrictamente el RFC 3986, como Internet Explorer 6 y 7."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"D5632C8D-6BE4-4EA1-A195-75B65D6CCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"5298F6FA-FFB1-44F1-AA53-526A0A46AD3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0920DDAB-14CE-482E-BE51-4CBC9A2FC5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc3:*:*:*:*:*:*","matchCriteriaId":"AE9D3982-0B46-4D99-8B3C-61174EE1CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc4:*:*:*:*:*:*","matchCriteriaId":"AF58F03B-C62D-4173-815B-39FCBF3A6364"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc5:*:*:*:*:*:*","matchCriteriaId":"355EE49E-DD95-4EE9-A988-7161C4F79738"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D9410CE4-5BB2-49F1-A996-9FBE4326D9B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.0:rc7:*:*:*:*:*:*","matchCriteriaId":"D9E18D45-843B-4BB8-9BF7-5C2FC67B0CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"A2CED3C5-8A5D-4FA3-BE30-CAEDB8BB1029"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.1:rc1:*:*:*:*:*:*","matchCriteriaId":"C6D4127B-31C7-43E5-83F7-B2857CB7EA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1F1800B4-62E0-4B2E-99D7-F1A6C4E68D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.1:rc3:*:*:*:*:*:*","matchCriteriaId":"7B5BCA3D-7642-4D3D-8FAB-980CCC23D199"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0DE90C4D-F2A8-4317-BB92-F7885A125672"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.2:rc1:*:*:*:*:*:*","matchCriteriaId":"1D60E305-C39C-4982-9E9A-52E6DA872BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.2:rc2:*:*:*:*:*:*","matchCriteriaId":"F465C91A-EDEB-4F81-8564-415041FAEB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"EBD6A720-337D-4AD7-BB51-3F02124BF2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.3:rc1:*:*:*:*:*:*","matchCriteriaId":"C9C8B70F-B03C-4F6D-ACCA-F7C5D716C202"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.3:rc2:*:*:*:*:*:*","matchCriteriaId":"DA3B4E76-BF86-45BD-8EC6-B5614FACF3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.4:*:*:*:*:*:*:*","matchCriteriaId":"FAD7CE36-8319-432A-98F5-CA014C577023"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"04A8EBEF-1312-487B-B90E-75967FD011DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.5:*:*:*:*:*:*:*","matchCriteriaId":"376968EF-1EBE-406D-8D59-CE280A39CF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.5:rc1:*:*:*:*:*:*","matchCriteriaId":"8D8294A9-32C1-4234-BE11-6C06C8C4E885"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.6:*:*:*:*:*:*:*","matchCriteriaId":"BC2DA0DA-0424-41E8-B999-FDE8034A2443"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.6:rc1:*:*:*:*:*:*","matchCriteriaId":"DEFF8A61-0ADC-499C-968A-154F38904D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:0.11.6:rc2:*:*:*:*:*:*","matchCriteriaId":"25C9BC9D-8FB5-460F-8C9E-472B7AB2F57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3525B59A-F7B3-4D56-B2C0-5FE8AAA8F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F8CBA3F9-043B-4F8C-89C6-834179ECBD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"E3D141D7-4714-4E86-AE15-12331BF50DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"2B9937A6-37EF-43D4-877E-FBDDF3AF8BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"C162718B-8F33-49F6-B0E2-C1A2561C239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"E5D29B16-C1EF-46C9-8C1E-0A76D62849D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:agavi:agavi:1.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"B8769C6D-3C4F-4DC1-8A9D-B9430FA46F77"}]}]}],"references":[{"url":"http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://trac.agavi.org/ticket/1019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33826","source":"cve@mitre.org"},{"url":"http://blog.agavi.org/post/75829956/agavi-0-11-6-released-fixes-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://blog.agavi.org/post/75830918/agavi-1-0-0-beta-8-released-fixes-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://trac.agavi.org/ticket/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0418","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476."},{"lang":"es","value":"La implementación IPv6 Neighbor Discovery Protocol (NDP) en HP HP-UX B.11.11, B.11.23 y B.11.31, no valida el origen de los mensajes Neighbor Discovery -Descubrimiento de Vecinos-, esto permite a atacantes remotos provocar una denegación de servicio (pérdida de conectividad), leer el tráfico privado de redes  y puede que ejecutar código de su elección a través de un mensaje falso que modifica el FIB (Forward Information Base). Está relacionado con la vulnerabilidad CVE-2008-2476."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123368621330334&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123368621330334&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33787","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021660","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0312","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5943","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123368621330334&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123368621330334&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0419","sourceIdentifier":"cve@mitre.org","published":"2009-02-04T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-4033."},{"lang":"es","value":"Microsoft XML Core Services, como el utilizado en Microsoft Expression Web, Office, Internet Explorer 6 y 7 y otros productos; no restringe adecuadamente el acceso de las páginas Web a las cabeceras de respuesta HTTP Set-Cookie2; esto permite a atacantes remotos obtener información sensible de las cookies a través de llamadas XMLHttpRequest. Relacionado con el mecanismo de protección HTTPOnly. NOTA: este problema existe debido a una modificación inicial incompleta de CVE-2008-4033."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:*:*:*:*:*:*:*:*","matchCriteriaId":"F692D96C-E46C-4731-AE2D-359CBEA67B03"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48815","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0420","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente RD-Autos (com_rdautos) v1.5.5 Stable para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rd-media:rd-autos:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A750E26F-AE7E-4453-9BDE-AEAFD23266C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33562","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33297","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7795","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0421","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente para Joomla! Eventing (com_eventing) v1.6.x; permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_eventing:1.6:*:*:*:*:*:*:*","matchCriteriaId":"7218E008-3683-462F-8C78-1801E760AF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_eventing:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4D5C57BB-4B30-4D68-9883-AF05293A915E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_eventing:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D2F30303-6BF7-434C-9523-CF86A9667E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_eventing:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"8C8644DE-A709-4B8A-9342-A1308252BB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_eventing:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"44D3D750-53E0-4873-9CB7-0FF6D0808724"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_eventing:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"C57FD836-1A66-47BE-BC7B-BEB59843E899"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/33563","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33296","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48016","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7793","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0422","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Register Globals are disabled by default, so this will not increase access complexity.","cveTags":[],"descriptions":[{"lang":"en","value":"Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php."},{"lang":"es","value":"Vulnerabilidad de evaluación de variable dinámica en lists/admin.php en phpList v2.10.8 y versiones anteriores, cuando register_globals no está activa, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro \"_SERVER[ConfigFile]\" de admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.8","matchCriteriaId":"8052E3D1-2F21-4C5D-894F-03BAB03887B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5FC454AF-1B16-4448-9F5A-80D656F9551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2F08591B-A066-40F4-97A4-F7EF1FE40FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.2b:*:*:*:*:*:*:*","matchCriteriaId":"994CBD86-E713-458E-AD7B-5357BD747319"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.3b:*:*:*:*:*:*:*","matchCriteriaId":"0394F819-8734-4418-A5D9-081B0ABED9AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.4b:*:*:*:*:*:*:*","matchCriteriaId":"42F1E692-B80F-4F45-A694-F620B928F2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"53EF60DE-FA1D-4F0E-80D8-EE87041741C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.5b:*:*:*:*:*:*:*","matchCriteriaId":"DC9F1619-4300-4674-AB7F-3B6C182C1A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0B923032-FB9C-42EB-AAF3-0AFC40690121"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F5CEA44B-B45D-46E6-9740-7AFCAD676C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"F0B52E71-CB78-438F-913B-3B49BA135F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"46BE05C7-CFB0-48E8-999B-5B4B39D0E16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"648BE81A-7987-491C-8ED6-E737D83D3D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DE9D9D96-AB9E-4938-80AD-4F012894067F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DE7F2489-59E1-4676-A46B-FC94DBA011D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"09EDB2B3-985E-4B26-95E8-5B179810AB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AFCDC95D-E5CC-4A62-B0CA-85252F880005"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"B80875CA-261C-4B66-8A8B-5007CD645230"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"93584A2D-F093-4691-9A56-0B7CF9B82D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"1AF7994C-A3BF-4846-A598-69E5FAA410E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D20C18F5-0D20-488E-A685-95537825F631"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"2DAFAD62-46AE-4C2B-8338-9F01468C4D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"571DA919-BEA6-4033-B1A6-5B0305281135"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7825E3FF-BD5C-466B-9D68-ABC269229DC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"84DF3E96-8035-4290-9B29-5C3795A04852"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"CBE1716C-536C-426C-BF26-55CBEC445485"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A661DEE-0AF7-4CA1-9BDD-A8E3C34D293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B2D6C9F-9700-4C81-B3D5-0FCAC1E6CA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"22D86B15-1F3A-4EFA-8D7F-7ECD8F26C2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DE1CA9D6-E9C5-4C61-AB58-850A785C58EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B5358C-53BA-4A63-8EB4-72F86B67F023"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"154AECE5-DC59-49B9-A756-36B0049A0C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0755ABE4-C9A4-477F-AC0C-03655F4A2505"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3FC17BA8-6FEA-40B2-8734-9DD873E6FC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F8D1B20B-7120-4F12-AA3F-775952F9F315"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8434A23C-F4EB-4F3B-BE55-BBC599E3FC67"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A63F9ADB-90D7-49E3-ABDF-C75B218486C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"42CDBD10-EE7A-4185-BCCB-85AB0D9BDD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"4F52B116-6306-4620-B3DE-C77129DEBC75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA9A72F-C975-4CAC-B63B-BD74CCF97640"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2B355BF6-DDAB-4643-8480-9B850418121D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"EA8F9F34-7F4B-4B08-80A0-7495AE30F8F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"23D04A86-5992-469E-BECB-341BB659EB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"55656478-6680-4FD2-B322-0C73DD2380BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"34F3DD54-BCEC-433B-9434-2129A967B234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"3ABABD5C-624A-4ABC-9265-C2BBC6435BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2381905B-8532-4E67-ADAB-78321D153AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"CD67705B-7589-4E4E-85BF-1C1EC7001052"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6:*:*:*:*:*:*:*","matchCriteriaId":"CBE10CFB-A604-4C6E-ACE6-FD441C47D296"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F1EC7F51-B790-4333-9A2F-44693B3A7E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"784C97D4-740E-4C65-98ED-FA03EC3EFAA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F94101A7-419E-4ACF-AB75-F0B0DA6E7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D6F52B3C-7925-4970-AA84-732B34DD2FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5140DBAC-6AF0-41D0-972C-4F97BA06F488"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"CC2A6FB5-0CE1-4952-9763-7AA0E605A7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"665AC8D2-D3E6-470C-800B-0FD5AACE77BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"FA2FFBB2-E4C0-4F16-90D6-9D3FB2105C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"15C06CBF-3F4B-4D10-9FF4-21985354ED3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"018BA2DC-D1F7-4995-9D72-C38A2B087F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.8.12:*:*:*:*:*:*:*","matchCriteriaId":"516EB08E-F724-4638-8174-1FB527CE8E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.9.3:*:*:*:*:*:*:*","matchCriteriaId":"C4B0EA29-302E-4FFB-88E2-5A4CDF195BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"048787BE-1E97-40B1-94F3-ADA674207396"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"2DB56F18-A63B-4557-AB5E-E83BFEDED0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5BAFF48D-67A7-40DA-9762-DB416E1442C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"86D12DE2-9CCA-4670-B119-8BF02A48453D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"A56C8952-210A-4B93-8EC9-E0FDA9D606C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"37308B67-FA64-4858-AC66-EBC339180E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C8B089E7-A9E4-4184-8AE3-3FE7D0E1A92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.6:*:*:*:*:*:*:*","matchCriteriaId":"8685E03D-8377-4B30-9D41-DB6B926DC14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tincan:phplist:2.10.7:*:*:*:*:*:*:*","matchCriteriaId":"CDD34671-A2FF-4CCD-AE77-23FF323520E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_60.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500057/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47945","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_60.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500057/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0423","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the preview parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Php Photo Album (PHPPA) v0.8 BETA, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro preview -vista previa-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_walker:php_photo_album:0.8:beta:*:*:*:*:*:*","matchCriteriaId":"5D30FBF7-6B73-46C7-909F-D9BF7E6C5D1A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48017","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7786","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0424","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in sign1.php in AN Guestbook (ANG) before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in (1) administrator/manage.php or (2) administrator/trash.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en AN Guestbook (ANG) antes de v0.7.7, permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro country, el cual no se maneja adecuadamente en (1) administrator/manage.php o (2) administrator/trash.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.6","matchCriteriaId":"549A87F8-85AB-4118-B2D1-FBA0EF7C99AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"22AB4055-8383-4BAF-9838-DC8D8BCD19A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B44B5986-126D-4902-AD57-9BAA50278E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E4C9527B-EF66-42A1-AFD0-35C2CFFD14A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"457BA8EF-64AD-477C-A4A8-A1F3961C2339"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"E0158BE8-54E0-4AB7-8BA4-0E95A2B22C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.4:*:*:*:*:*:*:*","matchCriteriaId":"56A587CA-564F-4CDB-B65B-F1DB3B40EEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1CA1FCA7-E6D2-44F4-AF35-AC6EFB1ACA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"B21E8D94-04BE-4F76-BB55-9F398197F2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.5:*:*:*:*:*:*:*","matchCriteriaId":"31423D65-B142-4F18-BAFB-2D097A2D8967"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.6:*:*:*:*:*:*:*","matchCriteriaId":"3FE5DFC6-8B2E-44B9-9A0C-27E3BBE5E488"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B468B2A9-464F-4ACF-BB9F-909E4F136245"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A5D7B247-8322-4787-BE94-6F55C4937F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"FA474D78-8749-4801-933F-94240CC2CED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9AA55F57-50D1-45E7-90DF-947C683C675D"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6E094E87-1B17-4AEB-B23D-984818533B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E91A8A0F-0B59-44B1-9243-3BE07C453359"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BDCC557F-2686-4F2C-AF12-E6EA0B17148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D85DF228-FE7B-4108-A71C-F557FF1630C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:2.1:*:*:*:*:*:*:*","matchCriteriaId":"7A304300-3065-4D10-8E7B-8D9634A8C5E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C4C1D17E-AB2D-4C27-A17D-8D4761A7E4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"F6A7A68B-EDD3-4883-9E5F-5B6166F2AED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:3.0:*:*:*:*:*:*:*","matchCriteriaId":"97953D86-46EE-45FD-B41F-330B65BB88FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=907703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=653720","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33292","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48018","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=907703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=653720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0425","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the clanek parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Blue Eye CMS v1.0.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"clanek\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blue_eye_cms:blue_eye_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"0FF9E578-17C6-4F95-BD94-2C69051C946C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33303","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7797","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0426","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CategoryManager/upload_image_category.asp en DMXReady Classified Listings Manager v1.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:classified_listings_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C326D635-5B8A-41C2-A069-E27C04195968"}]}]}],"references":[{"url":"http://secunia.com/advisories/33482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33253","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47959","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7767","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0427","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en iCategoryManager/upload_image_category.asp en DMXReady Member Directory Manager v1.1 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:member_directory_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F16C8BC6-9AB3-4EF9-8202-B51A7953463E"}]}]}],"references":[{"url":"http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93","source":"cve@mitre.org"},{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33253","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47960","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7773","source":"cve@mitre.org"},{"url":"http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0428","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CategoryManager/upload_image_category.asp en DMXReady Secure Document Library v1.1 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:secure_document_library:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"626DE60F-97A9-473E-8138-53D4A532D70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:secure_document_library:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC18A51C-94A3-4B39-822E-842E175088A6"}]}]}],"references":[{"url":"http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93","source":"cve@mitre.org"},{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33253","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48013","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7787","source":"cve@mitre.org"},{"url":"http://dmxready.helpserve.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=93","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0429","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Active Bids, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"search\" a search.asp, (2) \"SortDir\" a auctionsended.asp y el parámetro (3) \"catid\" a wishlist.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_bids:*:*:*:*:*:*:*:*","matchCriteriaId":"A5FB492B-4A43-4727-A6D1-601C312B14BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500144/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33306","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500144/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0430","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Active Bids permiten a atacantes remotos inyectar web script o HTML a través de (1) el parámetro \"search\" de search.asp y el(2) parámetro \"URL\" de tellafriend.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_bids:*:*:*:*:*:*:*:*","matchCriteriaId":"A5FB492B-4A43-4727-A6D1-601C312B14BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500144/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33306","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500144/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0431","sourceIdentifier":"cve@mitre.org","published":"2009-02-05T00:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Default.asp en LinksPro Standard Edition, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"OrderDirection\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codefixer:linkspro:_nil_:_nil_:standard:*:*:*:*:*","matchCriteriaId":"FB5DB7F7-B9BF-48D2-AEDE-62FF22255F60"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0901-exploits/linkspro-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33305","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0901-exploits/linkspro-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0432","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El proceso de instalación en File Transfer servlet en el componente System Management/Repository en IBM WebSphere Application Server (WAS) v6.1.x anteriores a v6.1.0.19 no activa la versión segura, lo que permite a atacantes remotos obtener información sensible a través de vectores inespecificos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48522","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK59108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0433","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM WebSphere Aplication Server (WAS) v5.1.x anteriores a v5.1.1.19, v6.1.0.19, cuando el pluging buffering_content de Web Server está activo está disponible, permite a atacantes provocar una denegación de servicio (caída de demonio) a través de vectores no definidos, relativo a un mal manejo o fallos en la lectura del cliente, en los cuales un cliente recibe muchas respuestas error 500 de HTTP y los servidores bacjend son etiquetados como caídos de forma errónea.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80A7DAA3-2FFC-4AA3-AEB9-9ADF4A10AC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6453897-CA51-4143-B58D-689E0B69CE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"72DB3E62-C18C-440D-B2C8-E14122D2EEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C6B95B55-7A5E-4504-B5B5-B7B03403E3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"31419896-89F7-43A2-8B7C-3B92744BBC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA0FE3E-2FB7-415D-BC64-4B5157EABB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"8D8219D5-94D7-4E1B-BFA9-EF786FFD2C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"EA0C57F6-D011-47C1-B9DC-B1C3083FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7F8AFDEA-237C-40CA-AFC1-ED8D212FF867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"3067F0B0-2DCD-49EB-9727-7C3C7C99A11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"2F215B48-7ED5-45EB-BD26-3D3EAD01506F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C47D1C56-238B-414B-B2D2-D7069E42D001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"625B5901-B0AF-4D00-BC56-525A6F72943D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"BA32E836-172D-45BF-B911-9EA2B026E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"79307DAB-2195-4324-AA40-A4AE98D01513"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"A580AA9B-CE1A-4F21-9FAB-5DFC4FCB34E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01F45BA3-6504-47AF-B757-7B6D3526FBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F5EE7744-4584-4AE4-9F27-11EFAA002E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE0C501-4062-49D0-8983-5E92765C7181"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D40DEF90-CE7F-46BB-A6FF-50C1797866B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C43D3515-D9F5-4DC8-A030-9F97593495F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1968803-FF03-477C-81FE-87528FC6DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"62C1CA3B-E575-4531-A336-8BFC9F5DEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6C130982-8C6E-413E-8296-C9C277FCBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5E1790E4-073A-4666-80CB-4D967928A0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"6239EEAE-5852-4DF7-8627-87139BBB03B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006879","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007033","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48523","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0434","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files.  NOTE: this is probably a duplicate of CVE-2008-5413."},{"lang":"es","value":"PerfServlet en el componente PMI/Performance Tools de IBM WebSphere Application Server (WAS) v6.0.x anterior a v6.0.2.31, v6.1.x anterior a v6.1.0.21 y v7.0.x anterior a v7.0.0.1, cuando está habilitado Performance Monitoring Infrastructure (PMI), permite a usuarios locales obtener información sensible leyendo los ficheros (1) systemout.log y (2) ffdc. NOTA: Puede que esta vulnerabilidad sea la misma que CVE-2008-5413."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01F45BA3-6504-47AF-B757-7B6D3526FBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F5EE7744-4584-4AE4-9F27-11EFAA002E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE0C501-4062-49D0-8983-5E92765C7181"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D40DEF90-CE7F-46BB-A6FF-50C1797866B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C43D3515-D9F5-4DC8-A030-9F97593495F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1968803-FF03-477C-81FE-87528FC6DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"62C1CA3B-E575-4531-A336-8BFC9F5DEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6C130982-8C6E-413E-8296-C9C277FCBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5E1790E4-073A-4666-80CB-4D967928A0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"6239EEAE-5852-4DF7-8627-87139BBB03B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0423","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48524","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK63886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK79230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0435","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods."},{"lang":"es","value":"Vulnerabilidad inespecifica en la libreria IBM Asynchronous I/O (tambien conocido como AIO o libibmaio) en el componente Java Message Service (JMS) en IBM WebSphere Application Server (WAS) v6.1.x anteriores a v6.1.0.7 en AIX v5.3 permite a los atacantes producir una denegacion de servicio (caida de demonio) a traves de vectores relacionados con los metodos \"aio_getioev2\" y \"getEvent\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFCD0A1-64B4-4AE7-8161-D8A71F9D6904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C086B402-55AC-4913-A929-380EBC438988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D4FC14C3-5BFF-4F56-BBD2-3219E7151BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"40D5CB7D-BD01-4EF3-AF8B-100C200A4C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"736A02C8-784F-4CEE-BACF-C5C37E8930C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"200B6A88-EFBD-4935-9596-D8EF3BC24D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"20131F92-09B2-41D8-B5D9-38EFE6883EC0"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48525","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24019205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0436","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors."},{"lang":"es","value":"Los módulos (1) mod_ibm_ssl y (2) mod_cgid en IBM HTTP Server v6.0.x anteriores a v6.0.2.31 y v6.1.x anteriores a v6.1.0.19, tal y como se utiliza en WebSphere Application Server (WAS), ajusta incorrectamente los permisos para los sockets AF_UNIX, lo que tiene un impacto desconocido y vectores de ataque locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01F45BA3-6504-47AF-B757-7B6D3526FBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E6D6AF-0D69-4605-B871-6DAE01CF08EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F5EE7744-4584-4AE4-9F27-11EFAA002E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE0C501-4062-49D0-8983-5E92765C7181"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE27E903-6D65-4D29-9583-43FB4CB473B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A754DD5-585B-4E89-9C01-2B47D2F5F6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D40DEF90-CE7F-46BB-A6FF-50C1797866B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A5AAA544-D3F8-4AE2-BB2D-A64CB86EC988"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D4ECD-8787-4F9B-B81C-C0DFD8DD20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C43D3515-D9F5-4DC8-A030-9F97593495F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1968803-FF03-477C-81FE-87528FC6DF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"62C1CA3B-E575-4531-A336-8BFC9F5DEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6C130982-8C6E-413E-8296-C9C277FCBE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5E1790E4-073A-4666-80CB-4D967928A0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"6239EEAE-5852-4DF7-8627-87139BBB03B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"200B6A88-EFBD-4935-9596-D8EF3BC24D32"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007033","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27008517","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48526","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27008517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK66154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0437","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file."},{"lang":"es","value":"El proceso de instalación de The Installation Factory en WebSphere Aplication Server (WAS) v6.0.2 en Windows, cuando WAS se registra como un servicio, permite a usuarios locales obtener información sensitiva leyendo los ficheros de registro logs/instconfigifwas6.log.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33849","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48527","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0438","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T22:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass \"Authorization checking\" and obtain sensitive information from JSP pages via a crafted request.  NOTE: this is probably a duplicate of CVE-2008-5412."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) 7 anterior a v7.0.0.1 para Windows; permite a atacantes remotos evitar las \"comprobaciones de Autenticación\" y obtener información sensible de páginas JSP a través de una solicitud manipulada. NOTA: Puede que esta vulnerabilidad sea la misma que CVE-2008-5412."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48528","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0439","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands."},{"lang":"es","value":"Vulnerabilidad no especificada en el gestor de cola de IBM WebSphere MQ (WMQ) v5.3, v6.0 anterior a v6.0.2.6 y v7.0 anterior a v7.0.0.2; permite a usuarios locales obtener privilegios a través de vectores relacionados con los comandos de autorización (1) setmqaut, (2) dmpmqaut y (3) dspmqaut."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.3:*:*:*:*:*:*:*","matchCriteriaId":"36650BB9-861B-42B5-BCC1-492F84A64951"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.3:-:express:*:*:*:*:*","matchCriteriaId":"428C853E-4F29-487B-805A-17AC769E1D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"465D718A-ACA5-444B-99EE-67876B8D3687"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9728448F-E295-4C33-B2F4-17FAAFCDF169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0F36C644-664C-4758-9762-E808C80AE904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9C670A3F-7BBB-4115-A037-B5E732ABB6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CCD33A5-6567-43CB-909D-D1851ACF4AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D3664585-D0B4-467C-9B6D-4F8E239F7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2216808-BAE9-4034-9618-5EC4CCB80E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0:*:*:*:*:*:*:*","matchCriteriaId":"594287A4-AF30-4872-A5B8-1421FAB5C674"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"896273C9-11F9-45A0-BA46-66F37DFACCC7"}]}]}],"references":[{"url":"http://osvdb.org/52297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34034","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33857","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48529","source":"cve@mitre.org"},{"url":"http://osvdb.org/52297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0440","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) \"altered service content\" and (2) \"digital signature foot-print.\""},{"lang":"es","value":"IBM WebSphere Partner Gateway (WPG) v6.0.0 hasta v6.0.0.7 no gestiona adecuadamente los fallos de verificación de firma, lo que permite a usuarios remotos autenticados enviar un documento RosettaNet (también conocido como RNIF) manipulado a una aplicación de administración, relacionado con (1) \"contenido de servicio alterado\" y (2) \"foot-print de firma digital\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B68684-EB29-4FC1-9CCF-559EE3E5885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E5CD8555-DD04-4D12-8A99-62786588FC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3042B79-F460-4F94-8371-EEA0247F8DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23933DBA-A861-4EA3-85CB-C4C644651771"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"80A79AA1-1791-4EC7-8155-4FC5EA9C8D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8C7B6512-CBED-443E-A059-5B0591FCA60B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A40E40C8-FEF8-464A-BA09-5223E4375999"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9ECAF146-F575-4CAD-A1F5-2FE9F04BE51C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21330341","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48530","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21330341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0441","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:22.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto PHP en skin_shop/standard/2_view_body/body_default.php en TECHNOTE 7.2, cuando está habilitado register_globals, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro shop_this_skin_path, un vector diferente a CVE-2008-4138."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:technote:technote:7.2:*:*:*:*:*:*:*","matchCriteriaId":"37A2DED9-58F5-4239-8931-D61A0B2CBDB8"}]}]}],"references":[{"url":"http://osvdb.org/51740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7965","source":"cve@mitre.org"},{"url":"http://osvdb.org/51740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0442","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:22.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo bbcode.php en PHPbbBook 1.3 y 1.3h que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de ..(punto punto) en el parámetro l."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbbbook:phpbbbook:1.3:*:*:*:*:*:*:*","matchCriteriaId":"139CAF78-EF69-45C7-A122-681F3477A589"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbbbook:phpbbbook:1.3h:*:*:*:*:*:*:*","matchCriteriaId":"091ECD0F-BE6C-45F0-992D-70010C39D69A"}]}]}],"references":[{"url":"http://osvdb.org/51737","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0317","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7980","source":"cve@mitre.org"},{"url":"http://osvdb.org/51737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0443","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:22.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Elecard AVC HD PLAYER v5.5.90116, permite a atacantes remotos ejecutar código de su elección a través de un fichero M3U que contiene una cadena larga en una URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elecard:elecard_avc_hd_player:5.5.90116:*:*:*:*:*:*:*","matchCriteriaId":"C150976A-D90B-4485-AB87-DBF5F1B8AD28"}]}]}],"references":[{"url":"http://osvdb.org/51717","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33089","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7942","source":"cve@mitre.org"},{"url":"http://osvdb.org/51717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0444","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:22.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) theme parameter to (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; the (2) path parameter to (o) latest/sirini_gallery_latest/list.php; and the (3) grboard parameter to (p) include.php and (q) form_mail.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en GRBoard v1.8, cuando reguister_globals está activado y magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros: (1) \"theme\" en (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; (2) \"path\" en (o) latest/sirini_gallery_latest/list.php; y (3) \"grboard\" a (p) include.php y (q) form_mail.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sirini:grboard:1.8:*:*:*:*:*:*:*","matchCriteriaId":"51DADED1-3A3E-456B-BD01-1B7B46A30601"}]}]}],"references":[{"url":"http://secunia.com/advisories/33812","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33602","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7979","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0445","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibition_id parameter in a gallery.viewPhotos action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Dreampics Gallery Builder permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"exhibition_id\" en una acción gallery.viewPhotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dreampics:gallery_builder:-:*:*:*:*:*:*:*","matchCriteriaId":"4BA47D07-227A-44F4-A3AA-B1D9D006433D"}]}]}],"references":[{"url":"http://osvdb.org/51741","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33596","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48468","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7968","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9451","source":"cve@mitre.org"},{"url":"http://osvdb.org/51741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0446","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo photo.php en WEBalbum 2.4b que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web-album:webalbum:2.4b:*:*:*:*:*:*:*","matchCriteriaId":"A1389DDF-FE4C-4D41-A1F0-94FC873B846E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33590","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7961","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0447","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass field) to (a) admin/admin.asp or (b) the default URI under admin/.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en default.asp en MyDesign Sayac v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"user\" parameter (también conocido como campo UserName) o (2) \"pass\" (también conocido como campo Pass) a (a) admin/admin.asp o(b) la URI por defecto bajo admin/. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspindir:mydesign_sayac:2.0:*:*:*:*:*:*:*","matchCriteriaId":"37A40275-D28F-4F51-ACEC-5DD05D9BD3A5"}]}]}],"references":[{"url":"http://osvdb.org/51754","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33593","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7963","source":"cve@mitre.org"},{"url":"http://osvdb.org/51754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0448","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the synTarget parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/modules/aa/preview.php de Syntax Desktop v2.7, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro synTarget."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:syntax_desktop:syntax_desktop:2.7:*:*:*:*:*:*:*","matchCriteriaId":"AB0B3FF8-8BA5-4AF8-A4DD-BB2D2BAC29EA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33601","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0319","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48496","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7977","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0449","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call."},{"lang":"es","value":"Desbordamiento de búfer en klim5.sys de Kaspersky Anti-Virus for Workstations v6.0 y Anti-Virus 2008, permite a usuarios locales obtener privilegios a través de una llamada IOCTL 0x80052110."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0:*:workstations:*:*:*:*:*","matchCriteriaId":"53049BB1-486B-4C01-A3F5-F900FAD33024"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"D0D2326C-7F5E-42DC-9C2C-216726D85924"}]}]}],"references":[{"url":"http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33788","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500606/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33561","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021661","source":"cve@mitre.org"},{"url":"http://www.wintercore.com/advisories/advisory_W020209.html","source":"cve@mitre.org"},{"url":"http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500606/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wintercore.com/advisories/advisory_W020209.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0450","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file."},{"lang":"es","value":"Desbordamiento del búfer basado en pila en BlazeVideo HDTV Player v3.5 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en el fichero playlist (también conocido como .plf)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blazevideo:hdtv_player:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"2D889D80-CA48-47F8-A8D9-1CE62CDC19B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:blazevideo:hdtv_player:2.1:*:*:*:*:*:*:*","matchCriteriaId":"278E480C-A195-497E-BCE3-9ABC43B76AA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48498","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7975","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0451","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Skalfa SkaLinks 1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo Admin en la dirección URI que está en admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skalinks:skalinks:1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC66BBC4-52DD-464A-AF57-456A7A0DC96F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33546","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0452","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en parents/login.php de Online Grades v3.2.4, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) uname o (2) pass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C7852F48-E340-4582-A818-44179F683A65"}]}]}],"references":[{"url":"http://osvdb.org/51712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33576","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7956","source":"cve@mitre.org"},{"url":"http://osvdb.org/51712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0453","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"CVE-2009-0453 v3.2.4, permite a atacantes remotos obtener información de la configuración a través de una petición directa a phpinfo.php, que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C7852F48-E340-4582-A818-44179F683A65"}]}]}],"references":[{"url":"http://osvdb.org/51713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7956","source":"cve@mitre.org"},{"url":"http://osvdb.org/51713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0454","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.  NOTE: some third parties report inability to verify this issue."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en DMXReady Online Notebook Manager v1.1, permite a atacantes remos ejecutar comandos SQL de su elección a través de los campos (1)username o (2) password. NOTA: terceras partes han reportado la incapacidad para verificar esta cuestión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:online_notebook_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4EEBAFD8-3E33-4078-B5E1-894893E1BEE3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33600","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48503","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0455","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:02.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de sitios cruzados (XSS) en la característica de comentarios anónimos en lib-comment.php de glFusion v1.1.0, v1.1.1 y versiones anteriores; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro username -nombre de usuario- de comment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"CA26CDD6-B5CF-4B20-A2F9-3BD4CE718E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D80EE971-44CA-478F-88CB-A13CBDD628CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33878","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf","source":"cve@mitre.org"},{"url":"http://www.glfusion.org/article.php/xsscomments","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33683","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.glfusion.org/article.php/xsscomments","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0456","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFiles[patForms] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en examples/example_clientside_javascript.php de patForms, como se utiliza en Sourdough v0.3.5; permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro neededFiles[patForms]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourdough:sourdough:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"CEF579E3-A19F-4760-ADF1-14AB925A5900"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7946","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0457","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:23.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the (1) Contact_Plus and (2) Reviews modules, and (3) the module_name parameter to admin/includes/FANCYNLOptions.php in the Fancy_NewsLetter module."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en AJA Portal 1.2 que permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales a través de una secuencia de salto de directorio en el parámetro currentlang para el archivo admin/case.php en los módulos (1) Contact_Plus y (2) Reviews, y (3) el parámetro module_name para el archivo admin/includes/FANCYNLOptions.php en el módulo Fancy_NewsLetter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magtrb:aja_portal:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AEEDBCE4-55BD-4C18-9951-840B1622AAC7"}]}]}],"references":[{"url":"http://osvdb.org/51708","source":"cve@mitre.org"},{"url":"http://osvdb.org/51709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33565","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7939","source":"cve@mitre.org"},{"url":"http://osvdb.org/51708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0458","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades SQL en admin/login_submit.php de Whole Hog Ware Support v1.x, permite a atacantes remotos la ejecución de comandos SQL de su elección a través de los parámetros (1)\"uid\" (también conocido como campo nombre de usuario) o(2)\"pwd\" (también conocido como campo password). NOTA: Algunos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wholehogsoftware:ware_support:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1BC1693-6008-46BA-A13B-E5FAECA7C94D"}]}]}],"references":[{"url":"http://osvdb.org/51733","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33564","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7940","source":"cve@mitre.org"},{"url":"http://osvdb.org/51733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0459","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el archivo admin/login_submit.php en Whole Hog Password Protect: Enhanced 1.x, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del (1) parámetro uid (alias campo Username) o (2) el parámetro pwd (alias campo Password). NOTA: algunos de estos detalles ha sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wholehogsoftware:password_protect:1.0:*:*:*:*:*:*:*","matchCriteriaId":"68FB3BB5-35A5-4424-A2FA-C387559A5A0F"}]}]}],"references":[{"url":"http://osvdb.org/51733","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33564","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7941","source":"cve@mitre.org"},{"url":"http://osvdb.org/51733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0460","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie."},{"lang":"es","value":"Whole Hog Ware Support v1.x, permite a atacantes remotos evitar la autenticación y obtener acceso de administrador a través de un valor entero en la cookie adminid -identificador de administrador-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wholehogsoftware:ware_support:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1BC1693-6008-46BA-A13B-E5FAECA7C94D"}]}]}],"references":[{"url":"http://osvdb.org/51734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33577","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7951","source":"cve@mitre.org"},{"url":"http://osvdb.org/51734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0461","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie."},{"lang":"es","value":"Whole Hog Password Protect: Enhanced v1.x permite a atacantes remotos, saltarse la autenticación y obtener acceso administrativo a través de un valor entero en la cookie \"adminid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wholehogsoftware:password_protect:1.0:*:*:*:*:*:*:*","matchCriteriaId":"68FB3BB5-35A5-4424-A2FA-C387559A5A0F"}]}]}],"references":[{"url":"http://osvdb.org/51734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33577","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7952","source":"cve@mitre.org"},{"url":"http://osvdb.org/51734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0462","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassword parameter (aka password field) to customer_login.asp. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el archivo customer_login_check.asp en ClickTech ClickCart 6.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del (1) parámetro txtEmail (alias campo E-MAIL) o (2) el parámetro txtPassword (alias campo password) para el archivo customer_login.asp. NOTA: algunos de estos detalles han sido obtenidos de información de terceros"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clicktech:clickcart:6.0:*:*:*:*:*:*:*","matchCriteriaId":"70A190DD-F722-421D-80B3-69B1ABCDAC3A"}]}]}],"references":[{"url":"http://osvdb.org/51718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33575","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7953","source":"cve@mitre.org"},{"url":"http://osvdb.org/51718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0463","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos PHP en includes/header.php de Groone GLinks v2.1 permite a atacantes remotos ejecutar código PHP de su elección a través de una direccion URL en el parámetro \"abspath \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:groonesworld:glinks:2.1:*:*:*:*:*:*:*","matchCriteriaId":"56D96758-FA87-4E9B-9F38-05EDD93CAB3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7954","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0464","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en includes/header.php de Groone GBook v2.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro abspath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:groonesworld:gbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EFAC59B9-33E7-4524-A8C7-F3EDF89527DD"}]}]}],"references":[{"url":"http://osvdb.org/51716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33578","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7955","source":"cve@mitre.org"},{"url":"http://osvdb.org/51716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0465","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\\0' character, which bypasses the intended .box filename extension, as demonstrated by a C:\\boot.ini\\0 argument."},{"lang":"es","value":"El método SaveDoc en el control ActiveX  the All_In_The_Box.AllBox en ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3, permite a atacantes remotos crear y sobrescribir archivos de su elección a través de un argumento con un carácter final '\\0', lo que evita los nombres de archivo con extensiones .box, como se ha demostrado con el argumento C:\\boot.ini\\0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synactis:all_in_the_box.ocx:3:*:*:*:*:*:*:*","matchCriteriaId":"6632DAA2-39AF-4B87-90C3-9360DF3651F9"}]}]}],"references":[{"url":"http://osvdb.org/51693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33728","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=62","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33535","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0298","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7928","source":"cve@mitre.org"},{"url":"http://osvdb.org/51693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=62","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0466","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Vivvo CMSanterior a v4.1.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una URI que lanza un error 404 de página no encontrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.0","matchCriteriaId":"2A334F2D-7DED-4C9D-965C-7351868F234E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"629A0AD1-3F22-4491-A97C-D55BC77A29F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1B456221-5438-4008-9B0B-9EBC7E429461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7A98FF1A-EDD8-49F3-A268-DE559C74F6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E2FB6FA-B889-416F-BBF8-80F07A0F125F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33582","source":"cve@mitre.org"},{"url":"http://www.vivvo.net/changelog.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vivvo.net/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0467","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Profense Web Application Firewall v2.6.2 y v2.6.3 permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"proxy\" en una acción de gestión \"deny_log\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AF7652A0-5B0C-481B-95E5-577D26590D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"A8D2FE52-2198-4F06-A733-C9157501BDA9"}]}]}],"references":[{"url":"http://osvdb.org/51659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33523","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7919","source":"cve@mitre.org"},{"url":"http://osvdb.org/51659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0468","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en el archivo ajax.html en Profense Web Application Firewall versiones 2.6.2 y 2.6.3, permiten a los atacantes remotos secuestrar la autenticación de administradores para peticiones que (1) apagan el servidor, (2) envían paquetes de ping, (3) habilitan servicios de red, (4) configuran un servidor proxy y (5) modifican otras configuraciones por medio de parámetros en la cadena de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AF7652A0-5B0C-481B-95E5-577D26590D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"A8D2FE52-2198-4F06-A733-C9157501BDA9"}]}]}],"references":[{"url":"http://osvdb.org/51660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33523","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7919","source":"cve@mitre.org"},{"url":"http://osvdb.org/51660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0469","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T07:00:24.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en futomi's CGI Cafe Fulltext search CGI, permite a atacantes remotos obtener privilegios de administrador a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:futomis_cgi_cafe:fulltext_search_cgi:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DFA4126D-3EDB-49B5-A674-6F06E0FAE7D2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN80771386/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000008.html","source":"cve@mitre.org"},{"url":"http://www.futomi.com/library/info/2009/20090123.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33409","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN80771386/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.futomi.com/library/info/2009/20090123.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0470","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) level/15/exec/-/ or (2) exec/, a different vulnerability than CVE-2008-3821."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el servidor HTTP en Cisco IOS v12.4(23) permite a atacantes remotos inyectar secuencias de comando web o HTML de su elección a través de PATH_INFO a la URI por defecto bajo (1)level/15/exec/-/ o (2)una vulnerabilidad diferente de CVE-2008-3821."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*","matchCriteriaId":"6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33625","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0471","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el servidor HTTP en in Cisco IOS v12.4(23) permite a atacantes remotos ejecutar comandos de su elección, como se demostró ejecutando el comando hostname con una petición level/15/configure/-/hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*","matchCriteriaId":"6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/33844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500674/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500674/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0472","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en el interfaz web en el módulo Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rockwellautomation:controllogix_1756-enbt\\/a_ethernet\\/_ip_bridge:-:*:*:*:*:*:*:*","matchCriteriaId":"F8CFDA18-F8F0-4FD9-B1C3-45832E897DAC"}]}]}],"references":[{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33783","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/882619","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33638","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0347","source":"cve@mitre.org"},{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/882619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0473","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en el interfaz web en el módulo Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge permite a atacantes remotos redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rockwellautomation:controllogix_1756-enbt\\/a_ethernet\\/_ip_bridge:-:*:*:*:*:*:*:*","matchCriteriaId":"F8CFDA18-F8F0-4FD9-B1C3-45832E897DAC"}]}]}],"references":[{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33783","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/619499","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33636","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0347","source":"cve@mitre.org"},{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/619499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0474","sourceIdentifier":"cve@mitre.org","published":"2009-02-06T19:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain \"internal web page information\" and \"internal information about the module\" via unspecified vectors.  NOTE: this may overlap CVE-2002-1603."},{"lang":"es","value":"El interfaz web en el módulo Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge permite a atacantes remotos obtener \"información de la pagina web interna\" y \"información interna del módulo\" a través de vectores desconocidos. NOTA: esta vulnerabilidad puede solaparse con CVE-2002-1603."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rockwellautomation:controllogix_1756-enbt\\/a_ethernet\\/_ip_bridge:-:*:*:*:*:*:*:*","matchCriteriaId":"F8CFDA18-F8F0-4FD9-B1C3-45832E897DAC"}]}]}],"references":[{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33783","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/124059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7MWKZ3","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0347","source":"cve@mitre.org"},{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/124059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7MWKZ3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0475","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:02.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption."},{"lang":"es","value":"Desbordamiento inferior de entero en la funcionalidad de decodificacion Huffman (pvmp3_huffman_parsing.cpp) en OpenCORE v2.0 y anteriores permite a atacantes remotos producir una denegacion de servicio (caida de proceso) y posiblemente la ejecucion de codigo a su eleccion a traves de un fichero mp3 manipulado que inicia una corrupcion de pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:android:opencore:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1889B66-0819-473B-9711-4C114EF5713E"}]}]}],"references":[{"url":"http://android.git.kernel.org/?p=platform/external/opencore.git%3Ba=commit%3Bh=7b466cd0ecfdba72c4cbd0f3a8c2001141376b0f","source":"cve@mitre.org"},{"url":"http://review.source.android.com/Gerrit#change%2C8815","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500750/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33673","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/external/opencore.git%3Ba=commit%3Bh=7b466cd0ecfdba72c4cbd0f3a8c2001141376b0f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://review.source.android.com/Gerrit#change%2C8815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500750/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0476","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:09.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AdjMmsEng.dll v7.11.1.0 y v7.11.2.7 distribuido para múltiples componentes de audio  de MultiMedia Soft para .NET, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un archivo de \"lista de reproducción\" (.pls), reportado inicialmente por Euphonics Audio Player v1.0.NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:multimediasoft:audio_dj_studio_for_.net:-:*:*:*:*:*:*:*","matchCriteriaId":"DF5636AC-D0E1-4390-93B2-E3ADCC471A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:multimediasoft:audio_sound_editer_for_.net:-:*:*:*:*:*:*:*","matchCriteriaId":"1D4D4B16-2810-48EA-B8EB-A1359AD1BD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:multimediasoft:audio_sound_recorder_for_.net:-:*:*:*:*:*:*:*","matchCriteriaId":"E3BA5495-6851-4CD6-A4E3-EB37B0B7E246"},{"vulnerable":true,"criteria":"cpe:2.3:a:multimediasoft:audio_sound_studio_for_.net:-:*:*:*:*:*:*:*","matchCriteriaId":"CF14BA0A-66B3-4DA2-8989-D7F988DAD4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:multimediasoft:audio_sound_suite_for_.net:-:*:*:*:*:*:*:*","matchCriteriaId":"06B49DAC-FE92-491A-998F-B3A75B4EAC6D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500652/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33589","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7958","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7973","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500652/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0477","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T21:30:09.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via vectors related to the contract filesystem."},{"lang":"es","value":"Vulnerabilidad sin especificar en \"process filesystem\" (también conocido como proc) en Sun OpenSolaris de la v.snv_85 a la v.snv_100, permite a usuarios locales obtener privilegios a través de vectores relacionados con el \"contract filesystem\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33654","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0352","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0478","sourceIdentifier":"cve@mitre.org","published":"2009-02-08T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c."},{"lang":"es","value":"Squid versiones 2.7 hasta 2.7.STABLE5, versiones 3.0 hasta 3.0.STABLE12 y versiones 3.1 hasta 3.1.0.4, permiten a los atacantes remotos causar una denegación de servicio por medio de una petición HTTP con un número de versión no válido, lo que desencadena una aserción accesible en los archivos (1) HttpMsg.c y (2) HttpStatusLine.c."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of Squid as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-02-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.7.stable1:*:*:*:*:*:*:*","matchCriteriaId":"1CDD4129-3F89-4833-8789-4568CAE3B646"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.7.stable2:*:*:*:*:*:*:*","matchCriteriaId":"FFF2ED3A-B88A-49EE-9565-56C726447882"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.7.stable3:*:*:*:*:*:*:*","matchCriteriaId":"42579A3F-EDD8-44F7-9436-1B386FDC604E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.7.stable4:*:*:*:*:*:*:*","matchCriteriaId":"C689CFA4-A9F3-4B8B-80CB-F948E8C32C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.7.stable5:*:*:*:*:*:*:*","matchCriteriaId":"E503C019-4E96-4D4F-B9BD-327E3C22DE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable1:*:*:*:*:*:*:*","matchCriteriaId":"9D53774A-4523-4C9F-8FDF-BF39C4F32C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable2:*:*:*:*:*:*:*","matchCriteriaId":"CBA0CA70-79A0-4AC6-ADE3-99DCE8FB09BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable3:*:*:*:*:*:*:*","matchCriteriaId":"E4048B18-219C-4D23-979B-C32A4F84E088"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable4:*:*:*:*:*:*:*","matchCriteriaId":"4CBD6F80-63F1-4B6D-BBCD-240D8A18C429"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable5:*:*:*:*:*:*:*","matchCriteriaId":"60A83314-4628-4352-BE10-89ED4B228E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable6:*:*:*:*:*:*:*","matchCriteriaId":"81FD6F1C-ECE2-4ADA-8230-49500AE0AB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable7:*:*:*:*:*:*:*","matchCriteriaId":"0B7A5792-DAD0-4E84-90EB-E92873DB763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable8:*:*:*:*:*:*:*","matchCriteriaId":"7F2786AA-F9B6-4825-9C2E-9548D6D2A3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable9:*:*:*:*:*:*:*","matchCriteriaId":"2BB49168-03B3-43D5-9076-6FE206EF42A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable10:*:*:*:*:*:*:*","matchCriteriaId":"D6CF222F-1A8E-4351-BBD4-5BC39B5BF2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable11:*:*:*:*:*:*:*","matchCriteriaId":"38092277-47D4-4B83-BF32-DE595CDE7B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.0.stable12:*:*:*:*:*:*:*","matchCriteriaId":"C6ED346B-D762-481D-92FA-260C2C5A915A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.1:*:*:*:*:*:*:*","matchCriteriaId":"73060F28-ABCE-4428-8F12-772E4D312DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A006818-7901-4391-BFF7-9AD1AF8DAFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4BF28EA4-2847-4176-81C1-C7A2007D14E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FAD9B4B-0856-458B-AB21-15D0420A7F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:3.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"54E9F64C-363B-4702-996F-14F66450D6B2"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-38.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:034","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500653/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33604","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021684","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2009_1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.7/changesets/12432.patch","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484246","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8021","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-38.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500653/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2009_1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.7/changesets/12432.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0479","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T01:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades SQL en admin/admin_login.php en Online Grades v3.2.4, permite a atacantes remotos la ejecución de comandos SQL de su elección a través de los parámetros (1)\"uname\" o(2)\"pword\". NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C7852F48-E340-4582-A818-44179F683A65"}]}]}],"references":[{"url":"http://osvdb.org/51711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0480","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service (32-bit application failure and login outage) by opening a large number of sockets."},{"lang":"es","value":"La  implementación IP en Sun Solaris v8 a la v10 y OpenSolaris anterior a snv_82, emplea una arena inadecuada cuando al asignar números secundarios para sockets, lo que permite a usuarios locales provocar una denegación de servicio (fallo en la aplicación 32-bit o parada de login) mediante la apertura de un gran número de sockets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_81","matchCriteriaId":"BCD3ED13-F6CB-49D7-8A6D-5DEE4F3E6E7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_81","matchCriteriaId":"82C626F1-9D96-48BE-BF2B-8F146EFE6118"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://mail.opensolaris.org/pipermail/onnv-notify/2008-January/013262.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021653","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-248026-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33550","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0364","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6038","source":"cve@mitre.org"},{"url":"http://mail.opensolaris.org/pipermail/onnv-notify/2008-January/013262.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-248026-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0481","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers."},{"lang":"es","value":"Bugzilla v2.x anterior a v2.22.7, v3.0 anterior a v3.0.7, v3.2 anterior a v3.2.1 y v3.3 anterior a v3.3.2 ; permite a usuarios autenticados en remoto provocar una secuencia de comandos en sitios cruzados (XSS) y ataques relacionados al subir adjuntos HTML y JavaScript que son interpretados por los navegadores Web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*","matchCriteriaId":"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*","matchCriteriaId":"64434BFC-DDC0-4C7D-B578-472B0610C89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*","matchCriteriaId":"A30F28D9-B000-4C26-A911-5E1B8A867BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*","matchCriteriaId":"4A123F78-A671-4FB5-AE78-83762E9323C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*","matchCriteriaId":"28C34288-A326-4B71-99B0-DA9FFD28160F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*","matchCriteriaId":"73648879-BB08-4BE4-A7FF-1E8DF4E264B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*","matchCriteriaId":"1B4CC7E4-617D-498E-A367-374478158FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*","matchCriteriaId":"930AF809-CA52-41CB-985A-066B8239C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*","matchCriteriaId":"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*","matchCriteriaId":"E9130B6B-764B-4B83-A2BD-E16013682875"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*","matchCriteriaId":"7C7A5111-8729-48DF-B308-7A489BEFA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*","matchCriteriaId":"15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*","matchCriteriaId":"725BD7BE-1769-4032-ADA8-9ED15528C770"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A749C7AB-6F60-469C-BD95-759205DDA345"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*","matchCriteriaId":"2053CFB4-602E-4141-BB3D-A440E2A31D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9EC243-3E25-4234-A88A-FDD5B594BFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*","matchCriteriaId":"D569A750-C649-4D40-89AB-D29773E66F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*","matchCriteriaId":"95B69FA8-1182-46F1-952F-4610288ED409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"45C36666-518F-4956-816A-940930425955"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33580","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0482","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Bugzilla v3.2 anteriores a v3.2.1, v3.3 anteriores a 3.3.2 y otras versiones anteriores a v3.2 que permite a los atacantes remotos desarrollar un fallo actualizando actividades como otros usuarios a través de un enlace o etiqueta IMG a process_bug.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*","matchCriteriaId":"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*","matchCriteriaId":"64434BFC-DDC0-4C7D-B578-472B0610C89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*","matchCriteriaId":"A30F28D9-B000-4C26-A911-5E1B8A867BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*","matchCriteriaId":"4A123F78-A671-4FB5-AE78-83762E9323C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*","matchCriteriaId":"28C34288-A326-4B71-99B0-DA9FFD28160F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*","matchCriteriaId":"73648879-BB08-4BE4-A7FF-1E8DF4E264B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*","matchCriteriaId":"1B4CC7E4-617D-498E-A367-374478158FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*","matchCriteriaId":"930AF809-CA52-41CB-985A-066B8239C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*","matchCriteriaId":"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*","matchCriteriaId":"E9130B6B-764B-4B83-A2BD-E16013682875"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*","matchCriteriaId":"7C7A5111-8729-48DF-B308-7A489BEFA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*","matchCriteriaId":"15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*","matchCriteriaId":"725BD7BE-1769-4032-ADA8-9ED15528C770"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A749C7AB-6F60-469C-BD95-759205DDA345"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*","matchCriteriaId":"2053CFB4-602E-4141-BB3D-A440E2A31D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9EC243-3E25-4234-A88A-FDD5B594BFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*","matchCriteriaId":"D569A750-C649-4D40-89AB-D29773E66F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*","matchCriteriaId":"95B69FA8-1182-46F1-952F-4610288ED409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"45C36666-518F-4956-816A-940930425955"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33580","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0483","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to (1) editkeywords.cgi or (2) userprefs.cgi."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Bugzilla v2.22 antes de v2.22.7, v3.0 antes de v3.0.7, 3.2 antes de v3.2.1 y v3.3 antes de v3.3.2, permite a atacantes remotos borrar las palabras clave y las preferencias de usuario mediante un enlace o una etiqueta IMG a (1) editkeywords.cgi o (2) userprefs.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*","matchCriteriaId":"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*","matchCriteriaId":"64434BFC-DDC0-4C7D-B578-472B0610C89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*","matchCriteriaId":"A30F28D9-B000-4C26-A911-5E1B8A867BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*","matchCriteriaId":"4A123F78-A671-4FB5-AE78-83762E9323C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*","matchCriteriaId":"28C34288-A326-4B71-99B0-DA9FFD28160F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*","matchCriteriaId":"73648879-BB08-4BE4-A7FF-1E8DF4E264B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16_rc2:*:*:*:*:*:*:*","matchCriteriaId":"1B4CC7E4-617D-498E-A367-374478158FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.2:*:*:*:*:*:*:*","matchCriteriaId":"930AF809-CA52-41CB-985A-066B8239C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*","matchCriteriaId":"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*","matchCriteriaId":"E9130B6B-764B-4B83-A2BD-E16013682875"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*","matchCriteriaId":"7C7A5111-8729-48DF-B308-7A489BEFA6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*","matchCriteriaId":"15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*","matchCriteriaId":"725BD7BE-1769-4032-ADA8-9ED15528C770"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A749C7AB-6F60-469C-BD95-759205DDA345"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*","matchCriteriaId":"2053CFB4-602E-4141-BB3D-A440E2A31D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9EC243-3E25-4234-A88A-FDD5B594BFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*","matchCriteriaId":"D569A750-C649-4D40-89AB-D29773E66F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*","matchCriteriaId":"95B69FA8-1182-46F1-952F-4610288ED409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"45C36666-518F-4956-816A-940930425955"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33580","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466692","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472362","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0484","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete shared or saved searches via a link or IMG tag to buglist.cgi."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en versiones de Bugzilla 3.0 anteriores a 3.0.7, 3.2 antes de 3.2.1, y 3.3 antes de 3.3.2 permite a atacantes remotos eliminar búsquedas guardadas o compartidas a través de un enlace o una etiqueta IMG a buglist.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"45C36666-518F-4956-816A-940930425955"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33580","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466748","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0485","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete unused flag types via a link or IMG tag to editflagtypes.cgi."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Bugzilla v2.17 hasta v2.22.7, v3.0 anterior a v3.0.7, v3.2 anterior a v3.2.1, y v3.3 anterior a v3.3.2 permite a atacantes remotos eliminar tipos de banderas no utilizadas a través de un enlace o una etiqueta IMG a editflagtypes.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*","matchCriteriaId":"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*","matchCriteriaId":"EAC72143-27C3-498F-AFAB-98AE043C0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5E8E72-D493-460D-B5A0-F90C291398A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"04885D31-09F3-455F-A1A9-815E182ABCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*","matchCriteriaId":"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*","matchCriteriaId":"92BCD546-2A50-4F43-935C-B68459EE894E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*","matchCriteriaId":"C535BAB7-6146-440B-ADBD-51007585CFC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18.6\\+:*:*:*:*:*:*:*","matchCriteriaId":"15E6F17A-7292-4640-A5E6-59865D1CDD7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*","matchCriteriaId":"725BD7BE-1769-4032-ADA8-9ED15528C770"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"239D70F4-7D86-4A57-ACEF-440F68994FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEE2C94-DA69-4A78-A15F-538383A7460E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7CD64E-7FAA-40DC-B36E-8B7EB9D620FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A749C7AB-6F60-469C-BD95-759205DDA345"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"196B7CD8-D721-4CFB-B126-78758128E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA9DE63-9951-4FE0-80BE-0F6F197303D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*","matchCriteriaId":"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*","matchCriteriaId":"8E27101B-7985-4412-A14F-9ED11E4C874C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*","matchCriteriaId":"8A74E8A2-223E-4877-989E-494362B513E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*","matchCriteriaId":"E0CAFB45-B115-4492-9919-60223304BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*","matchCriteriaId":"DC3F7C44-C734-419B-AB62-3AD52554FC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.20.7:*:*:*:*:*:*:*","matchCriteriaId":"695036D1-994C-451E-8D53-0A345702E4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*","matchCriteriaId":"2053CFB4-602E-4141-BB3D-A440E2A31D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"31ACBA13-AC13-4469-862F-B3DD2327B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F2969731-8256-431B-9356-4BC873D98F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1C166E42-9B36-4883-B738-EEBEF3056D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*","matchCriteriaId":"E5177876-0FEC-481B-815F-84AF53968644"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*","matchCriteriaId":"BC38566A-07F1-4F21-BAC1-259F844DC15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1684B8-3060-4139-BC06-707F27A05958"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*","matchCriteriaId":"FF32C74C-3EA3-4E1F-BADA-BB4A92068266"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*","matchCriteriaId":"D569A750-C649-4D40-89AB-D29773E66F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*","matchCriteriaId":"95B69FA8-1182-46F1-952F-4610288ED409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D4D9F54A-15A7-4899-B695-D9D8B96C4A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BD56D9C0-38C6-4679-8104-1A0B88B71C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"170EB43B-9488-4E25-9401-B84DE838247B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:rc2:*:*:*:*:*:*","matchCriteriaId":"B1ED7682-A315-4F92-9F9F-38290BCC058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33580","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466692","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/2.22.6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0486","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod_perl, calls the srand function at startup time, which causes Apache children to have the same seed and produce insufficiently random numbers for random tokens, which allows remote attackers to bypass cross-site request forgery (CSRF) protection mechanisms and conduct unauthorized activities as other users."},{"lang":"es","value":"Bugzilla v3.2.1, v3.0.7 y v3.3.2, cuando se ejecuta bajo mod_perl, llama a la función srand en momento de iniciarse, lo que provoca que los hijos de Apache tengan la misma \"semilla\"  y produzca insuficientes números aleatorios para los elementos aleatorios, lo que permite a atacantes remotos saltarse el mecanismo de protección \"cross-site request forgery\" (CSRF) y realizar actividades no autorizadas como si fuéramos otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"14B5A433-526F-436E-9FCD-B71E661180FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF288A74-070E-4EB4-BB92-7D4D41635DD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/34361","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/3.0.7/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33581","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/3.0.7/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0487","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mahara anterior a v1.0.9, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de un mensaje manipulado en el foro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"4837AA98-82C6-4F5A-B02E-B89B1E08ADE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"D6D7FB07-E62A-40FE-A7BE-C809E6460585"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"62BA0A1B-26BB-47B0-AA9E-5730E433675A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"3362126C-F6CB-4AB8-9490-C19E43D509D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8B49D797-AF1B-4F7E-A71D-AABD0F802912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68167317-977B-48EE-9320-2A4539A93B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB25DF09-D88F-4633-9956-D64E3497153F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E32430EE-5F2B-4936-A297-2DF55CC22937"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1CC0259C-E628-4BBA-9D97-41A130B1E741"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"974F2D63-488C-41D7-A627-BF9B085A8D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E26420D4-20D8-4D6D-88B5-C74F39B88720"}]}]}],"references":[{"url":"http://mahara.org/interaction/forum/topic.php?id=198","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33813","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33619","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48518","source":"cve@mitre.org"},{"url":"http://mahara.org/interaction/forum/topic.php?id=198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0488","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T20:30:02.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Phorum anterior a v5.2.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:*:rc1:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"2536ED84-80A0-44D3-B16C-DBF47B901C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*","matchCriteriaId":"32D7E47E-10F5-4F50-8940-951B2C0011CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16042FAE-7370-425C-8810-4F9363B7CAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*","matchCriteriaId":"B4A25A6F-62CA-4C76-9D4C-821B1E15FB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6247DB0C-37B6-44EF-8B92-8CFCDA537039"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C46298C-2492-4102-A264-E2A1D45AD423"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1A2AD59F-42DF-407A-8FCA-E6E0067A2B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"17E1044B-2101-4719-8749-17DD22F46055"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B7E17261-A010-4929-99E5-A2511F205B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A461E2EB-9964-44DE-9C25-562D239201F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"9CB6A4EC-D351-4EF8-8C6A-294A47DDCCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*","matchCriteriaId":"2B10230A-7D72-418E-8A29-E9F20762C43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"368C8142-836A-4FDB-9CD8-385FE06B9A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1470761E-DA6E-4D2A-B226-1ED782FB3654"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB3ED23-821D-42FA-A24F-F2EDDA43D7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"88BA8736-5998-42E0-81E4-76E3669F8112"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DC9811C9-EE92-4115-B81F-7A3030390BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5A196AD2-7E48-40F4-923E-437FA76C97D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*","matchCriteriaId":"91D147F0-FF83-4FF4-AEF1-71366E874876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C6D87C46-D9EC-418B-9C8C-71E7149C72D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*","matchCriteriaId":"C990B390-4768-41B0-BB8B-A56C2524623F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*","matchCriteriaId":"6650BE9D-5F4B-4B22-BD7E-ABCC067D5455"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8E0CA9-F6D4-4DD3-A3EA-F3A40965261B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7F67B233-3087-43E6-94F2-5DF39FAA36B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7725AEF3-1C47-46B4-A35E-97152A84E731"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"F3F6C52C-F602-4C2A-8C8F-4A19DA41186F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"45F290E5-6508-4F62-8572-31B33750D341"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"6D941B5F-B704-4596-8739-BFE34225DBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"FF13359B-162A-41DF-BB4F-DDD6CA2752F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"7D1AE057-A85C-49D9-981A-3314BD945D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.8a:*:*:*:*:*:*:*","matchCriteriaId":"EAC1F375-34EF-4FEC-B0F4-6A081B6A3B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1E532A66-A12D-48DD-B405-2345E5B715C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"26E2C5A7-8B52-4BDF-80F1-5D45AEBE6E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"0E8DF602-0A22-45A9-A286-C237180701C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"AB109C36-BF0F-41E3-A1F4-0DB264BD4A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"9A31EA2D-2B01-4928-9B3E-9D666FD2758B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"E87DE16C-7C68-4DA8-9BD9-C61D74E61D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*","matchCriteriaId":"5001527E-FE93-4BE7-BF79-7717D64CAF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"D15ED599-6B84-4E03-8BA4-36E1D55F1F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"D491A2B9-949A-4A56-A41F-23A222C03BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"01CFDB0B-6FBD-49F3-8238-81E92661297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*","matchCriteriaId":"EC73A23F-2399-41B0-B6BD-289DF63F2C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*","matchCriteriaId":"AD59DD99-1FC7-498B-9EA1-1AA8FE132EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1655572D-7D56-4D9D-9E0F-A67DF23FC934"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"387E0B83-B240-4922-8C57-CE0CDB000888"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D02321D7-2F3E-40F9-9A76-CFF339C93199"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3B908D49-F64A-488F-95F3-163AB9DAB02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*","matchCriteriaId":"1A26F8E5-0FFE-473D-BDA1-2D5340B5A4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0FF0655C-7C83-4363-A444-993B35D7A7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"B3D0F7C4-902D-4186-8EFF-3876D6D6633E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"6F87C476-6A55-4B19-97B0-24204E96A63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.15a:*:*:*:*:*:*:*","matchCriteriaId":"83F8F544-1B09-4B22-B1F3-2CD1E8D7AECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"8ACC6DD4-384B-44DE-9BC7-6F1DD374E6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"17D0AC3E-97F7-4A13-8E65-7E424D055E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.17a:*:*:*:*:*:*:*","matchCriteriaId":"D184385A-763A-4971-8051-20564D020787"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"04B508F8-CFCC-4841-BF70-1ABB28EB1ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"C365D62D-ACB1-44D3-935D-F79A79642684"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F4B45305-FF8B-42F8-A726-F8604BADC323"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"70F4AB87-2D63-4208-8982-BBF978392285"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"149A6B5A-84FC-4B6F-B053-0AC881BC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"375346D4-CEA4-4BAE-83DF-639E86C3DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"3C6E0429-3241-47B0-B853-66D3167CE4F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"121F0F96-F901-479F-A64F-3DAE1AC0AFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"F837829B-28E5-41B3-9A23-C4D4A7FE636A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"700B9165-B956-4CAB-B980-42885FFA418F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A4C4E79D-EBE6-456C-A74F-B94F32736383"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D3596808-8399-4EA9-B885-5443CA91C3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.2:beta:*:*:*:*:*:*","matchCriteriaId":"B5409C8A-8B57-48FB-B01E-411C00153E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"74DB422C-E79C-46B2-BB52-8C457822A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"37881B2C-0CD0-4E2A-A11D-9758772640E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"66BE61C7-E1DD-4DA9-B433-0C698C482C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FB5E063A-F59F-4CEB-9950-2FE8D25FF9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F0A35F3F-6BBF-4B84-AE19-870F03C1E9DC"}]}]}],"references":[{"url":"http://www.phorum.org/phorum5/read.php?64%2C136129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33657","source":"cve@mitre.org"},{"url":"http://www.phorum.org/phorum5/read.php?64%2C136129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0489","sourceIdentifier":"cve@mitre.org","published":"2009-02-09T20:30:02.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials."},{"lang":"es","value":"El fichero de configuración DBus de Wicd anteriores a v1.5.9 permite a cualquier usuario tomar posesión del fichero org.wicd.daemon, lo que permite a usuarios locales recibir mensajes que estaban destinados al demonio Wicd, posiblemente incluso credenciales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.8","matchCriteriaId":"DA9F8B78-6C51-4F0C-965E-831C81977BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"06AFC460-E683-4047-8C2A-1E9AC377917B"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2D411ED-67BF-45A0-BE8A-E981CAB0F4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"45632B83-B5C7-42AC-9B8B-031AB0D6417A"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"52DCBA8B-FD94-4184-985A-E054DEC04671"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9F48E42D-AEEA-41EC-BCFB-5581CEA05B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"288E7A59-D1BA-45D7-A30A-9F5F56E5A192"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2265EFEA-CEF9-42E0-A538-8D8FAE5F351C"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7769F3E0-EF1A-480C-845E-7178F2939ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"22A39899-C5D7-47D0-9B9C-6ADD1F756B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"27ED667E-BD1E-4352-A5F0-DB70B86D600D"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"84B74048-746F-4DF7-913D-3F0163FC8FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F9E268AD-D2A5-48DD-A311-6C2CD8A67149"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_paleino:wicd:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D5FE6B55-58EA-403E-AA60-2079A559D2CB"}]}]}],"references":[{"url":"http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34685","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-12.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/4","source":"cve@mitre.org"},{"url":"http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/06/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0490","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string."},{"lang":"es","value":"Un desbordamiento de pila basado en búfer en la función String_parse::get_nonspace_quoted en lib-src/allegro/strparse.cpp en Audacity 1.2.6 y otras versiones anteriores a 1.3.6 permite a atacantes remotos provocar una denegación de servicio (provocando una caída de la aplicación) y, posiblemente, ejecutar código arbitrario a través de un archivo .GRO que contenga una cadena excesivamente larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:audacityteam:audacity:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.6","matchCriteriaId":"926F0875-225C-4BCA-BB60-23914F145448"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=253493","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted%28%29%22-Buffer-Overflow-td2139537.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51070","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33356","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33090","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0008","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/7634","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=253493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted%28%29%22-Buffer-Overflow-td2139537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/33090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/7634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0491","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing a long URL."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Elecard MPEG Player v5.5 Build 15884.081218; permite a atacantes remotos ejecutar código de su elección a través de un fichero M3U que contiene una URL larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elecard:elecard_mpeg_player:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"E001E11B-B481-41FD-A0B5-B23367346AC6"}]}]}],"references":[{"url":"http://osvdb.org/51075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0007","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7637","source":"cve@mitre.org"},{"url":"http://osvdb.org/51075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0492","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an \"auth vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en SimpleIrcBot anterior a v1.0 Stable, tiene un impacto y vectores de ataques desconocidos relacionados con una \"auth vulnerability\" (vulnerabilidad de autenticación)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simpleircbot:simpleircbot:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3861C62C-4FC0-4ECC-85F5-7C9A6FBCBA0F"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=249202&release_id=650796","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33127","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0020","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=249202&release_id=650796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0493","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en IT!CMS v2.1a y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de Username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_unzner:it\\!cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.21-alpha","matchCriteriaId":"5B8F714F-03F2-4D83-B927-0098EF3D478A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33139","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47791","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7686","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0494","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the vcatid parameter in a viewcategory action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Portfol (com_portfol) v1.2 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro vcatid en una acción viewcategory en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mivaco:com_portfol:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D32AD197-0B74-4CC2-9195-D1924E89AC65"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7734","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0495","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INC_DIR parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos PHP en include/define.php en REALTOR 747 v4.11 permite a atacantes remotos ejecutar código PHP de su elección a través de una dirección URL en el parámetro \"INC_DIR\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:it747:realtor_747:4.11:*:*:*:*:*:*:*","matchCriteriaId":"DCE734A9-586F-4E74-A615-14FECCC0B23F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33227","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0496","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp.  NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos cruzados en Ignite Realtime Openfire  v3.6.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"log\" a (a) logviewer.jsp y (b) log.jsp; (2) \"search\" a (c) group-summary.jsp; (3) \"username\" a (d) user-properties.jsp; (4) \"logDir\", (5) \"maxTotalSize\", (6) \"maxFileSize\", (7) \"maxDays\", y (8) \"logTimeout\" a (e) audit-policy.jsp; (9) \"propName\" a (f) server-properties.jsp; y (10) \"roomconfig_roomname\" y (11) \"roomconfig_roomdesc\" a (g) muc-room-edit-form.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ignite_realtime:openfire:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0E1D3E68-2F5C-4706-9677-8AD9FD964EC1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/openfire-multiple-vulnerabilities","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499880/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32935","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32937","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32938","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32939","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32940","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32944","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=254309","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47834","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47835","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47845","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/openfire-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499880/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/32943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=254309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0497","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\\ (dot dot backslash) in the log parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en log.jsp en Ignite Realtime Openfire v3.6.2, permite a atacantes remotos leer ficheros de su elección a través de \"..\\\" en el parámetro \"log\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8691783F-7F3C-4264-9030-F89B607C35A4"}]}]}],"references":[{"url":"http://secunia.com/advisories/33452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsp","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/openfire-multiple-vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499880/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32945","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=257585","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/openfire-multiple-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499880/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=257585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0498","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T01:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to guestbook.mdb."},{"lang":"es","value":"Virtual GuestBook (vgbook) v2.1 almacena información sensible bajo el directorio raíz con un control de acceso insuficiente, lo que permite a atacantes remotos descargar el archivo de base de datos a través de una petición directa a guestbook.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minitdesign:virtual_guestbook:2.1:*:*:*:*:*:*:*","matchCriteriaId":"642EC70B-04D9-41E7-9DEF-AF610B0220C6"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/7744","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0499","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T02:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el código del foro de Moodle v1.7 anterior a v1.7.7, v1.8 anterior a v1.8.8 y v1.9 anterior a v1.9.4; permite a atacantes remotos eliminar los mensajes del foro no autorizados a través de un enlace o etiqueta IMG en post.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"92E97539-A7CC-48D3-A897-ADE4BC194B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D19C1954-6330-449D-9101-378D5DBD122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"A3B70465-F734-4C65-9790-0D83D03B7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"}]}]}],"references":[{"url":"http://cvs.moodle.org/moodle/mod/forum/post.php?r1=1.154.2.14&r2=1.154.2.15","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://moodle.org/security/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"cve@mitre.org"},{"url":"http://cvs.moodle.org/moodle/mod/forum/post.php?r1=1.154.2.14&r2=1.154.2.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0500","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T02:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el archivo course/lib.php en Moodle v1.6 anteriores a la v1.6.9, v1.7 anteriores a v1.7.7, v1.8 anteriores a v1.8.8, y v1.9 anteriores a v1.9.4, que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de una tabla de información log manipulada que no está manejada adecuadamente cuando es mostrada en un informe log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"680CE396-5F61-409C-A152-4D1E1CB44EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"98CA6482-0B84-463D-9C81-A92FFC06C9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0794B997-0793-4465-B9BA-5BFF254D600A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DCFEA024-4CA7-4975-802C-1BB9C099C164"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D1E5E19D-BC58-478E-A584-6D260A5C5265"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"CD6C092A-2871-475E-AE53-DC02EB9C3FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"92E97539-A7CC-48D3-A897-ADE4BC194B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D19C1954-6330-449D-9101-378D5DBD122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"A3B70465-F734-4C65-9790-0D83D03B7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://moodle.org/security/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1724","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0501","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T02:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct \"brute force attacks on user accounts\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica de exportar el Calendario (Calendar) de Moodle v1.8 anterior a v1.8.8 y v1.9 anterior a v1.9.4; permite a atacantes obtener información sensible y provocar \"ataques por fuerza bruta en las cuentas de los usuarios\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"A3B70465-F734-4C65-9790-0D83D03B7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://moodle.org/security/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0502","sourceIdentifier":"cve@mitre.org","published":"2009-02-10T02:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the \"Login as\" feature is used to visit a MyMoodle or Blog page."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en blocks/html/block_html.php en Snoopy v1.2.3, como la utilizada en el Moodle v1.6 anterior a v1.6.9, v1.7 anterior a v1.7.7, v1.8 anterior a v1.8.8, y v1.9 anterior a v1.9.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un bloqueo HTML que no es manejado correctamente cuando la característica \"Login as\" es utilizada para visitar una página MyMoodle o Blog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snoopy:snoopy:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4635C311-F808-474C-BD91-36F1C1C7D3E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CDC97F31-15F5-48D9-8768-D3FE5C0BD6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"92E97539-A7CC-48D3-A897-ADE4BC194B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D19C1954-6330-449D-9101-378D5DBD122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"A3B70465-F734-4C65-9790-0D83D03B7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://moodle.org/security/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1724","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0503","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs."},{"lang":"es","value":"IBM WebSphere Message Broker v6.1.x anteriores a v6.1.0.2 escribe la contraseña de conexión a la base de datos en el registro de eventos y en el registro del sistema cuando maneja una excepción por un error JDBC, permitiendo a usuarios locales obtener información sensible al leer estos ficheros de registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.0.1","matchCriteriaId":"21216BC9-AB23-42FB-8FC8-290AD72CF1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*","matchCriteriaId":"69C3EE89-7F3F-4578-9EC8-7E03621D0273"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27011431","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33819","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021735","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0460","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48642","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27011431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC55298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0504","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed binding property, which allows local users to discover a password by reading a SOAP message."},{"lang":"es","value":"WSPolicy en el componente Web Services en IBM WebSphere Application Server (WAS) v7.0.x anterior a v7.0.0.1 no reconoce adecuadamente la propiedad de vínculo IDAssertion.isUsed, lo que permite a usuarios locales descubrir una contraseña leyendo un mensaje SOAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"231A9A45-E2FE-423E-BE5D-AA9E3AFB5982"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48700","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0505","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement."},{"lang":"es","value":"El listener CICS en IBM TXSeries para Multiplatforms 6.2 GA espera por un acuse de recibo \"forcepurge\" desde CICS Application Server (CICSAS) después de la finalización del tiempo de respuesta eci, lo que debería permitir a los usuarios remotos autenticados causar una denegación de servicios (demora en la manipulación de \"forcepurge\"), o tener otro impacto no especificado, a través de vectores que implican un lento o no existente acuse de recibo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:txseries:6.2:-:aix:*:*:*:*:*","matchCriteriaId":"35A53AA4-11A3-4274-9C7C-1AEB1C903E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:txseries:6.2:-:ga:*:*:*:*:*","matchCriteriaId":"3D4715FA-08F2-41BA-B5D3-D77BB8153E4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:txseries:6.2:-:hp-ia:*:*:*:*:*","matchCriteriaId":"546BE6B7-EEF7-4F3B-8829-19954C03BBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:txseries:6.2:-:hp-ux:*:*:*:*:*","matchCriteriaId":"FA4F1282-DD92-4ADA-AB93-55E7A8E513BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:txseries:6.2:-:solaris:*:*:*:*:*","matchCriteriaId":"875CC6DB-B368-4E02-8316-C8090A099960"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:txseries:6.2:-:windows:*:*:*:*:*","matchCriteriaId":"E5227061-2047-4655-A868-6F87B6DBC0EC"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24019725","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33883","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0911","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48885","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24019725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0506","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www-01.ibm.com/support/docview.wss?uid=swg27006876#60223:\r\n\r\n\"Note: WebSphere Application Server V6.0.2 Fix Pack 2 (6.0.2.2), Fix Pack 4 (6.0.2.4), Fix Pack 6 (6.0.2.6), Fix Pack 8 (6.0.2.8), Fix Pack 10 (6.0.2.10), Fix Pack 12 (6.0.2.12), Fix Pack 14 (6.0.2.14), Fix Pack 16 (6.0.2.16), Fix Pack 18 (6.0.2.18), Fix Pack 20 (6.0.2.20), Fix Pack 22 (6.0.2.22) and Fix Pack 24 (6.0.2.24) were only published for the z/OS® platform.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks."},{"lang":"es","value":"Vulnerabilidad sin especificar en IBM WebSphere Application Server (WAS) v5.1 y v6.0.2 anterior a v6.0.2.33 sobre z/OS, cuando  está activado CSIv2 Identity Assertion y la interacción de  Enterprise JavaBeans (EJB) ocurre entre una instancia de  WAS v6.1 y WAS pre-6.1, permite a usuarios locales tener un impacto desconocido a través de vectores relacionados con (1) un uso del sujeto erróneo y (2)múltiples comprobaciones CBIND."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:z\\/os:*:*:*:*:*:*:*:*","matchCriteriaId":"28A9DB7F-187D-42BA-B271-1C302E529BFB"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK71143","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33884","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48886","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK71143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0507","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative console, which allows remote authenticated users to obtain the (1) JMSAPI, (2) ESCALATION, and (3) MAILSESSION (aka mail session) cleartext passwords via vectors involving access to a cluster member."},{"lang":"es","value":"IBM WebSphere Process Server (WPS) v6.1.2 anteriores v6.1.2.3 y v6.2 anteriores a v6.2.1.0 no restringen apropiadamente los datos de configuración durante una exportación del archivo de configuración en cluster desde la consola de administración, lo que permite a usuarios remotos autenticados obtener (1) información JMSAPI y (2) información de sesión del correo a través de vectores que implica el acceso a un componente del cluster."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.2.2","matchCriteriaId":"6B6EE919-5BD1-4F77-9869-A3B7EC38B220"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"2BD7097A-FBE2-432C-8A76-426181C8F6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"07586269-73DA-4189-B0BD-95D4B0091FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_process_server:6.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D43CB11-E506-4014-899E-417BDF7E0929"}]}]}],"references":[{"url":"http://secunia.com/advisories/34249","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27015580","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0670","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27015580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0508","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://xforce.iss.net/xforce/xfdb/49085\r\n\r\nCVSS score based on information provided by ISS.","cveTags":[],"descriptions":[{"lang":"en","value":"The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console."},{"lang":"es","value":"El componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v5.1.0, v5.1.1.19, v6.0.2 anteriores a v6.0.2.35, v6.1 anteriores a v6.1.0.23, y v7.0 anteriores a v7.0.0.3 permite a atacantes remotos leer ficheros de su elección contenidos en los fichero \"war\" de (1) el directorio web-inf, (2) el directorio \"meta-inf\", y otros directorios no especificados mediante vectores desconocidos, relacionados con (a) aplicaciones web y (b) la consola de administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DB2053-6DFD-4FF6-A6E9-444281531E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"A580AA9B-CE1A-4F21-9FAB-5DFC4FCB34E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*","matchCriteriaId":"05BC8C52-DA95-4BF2-AD47-9922741CAAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"}]}]}],"references":[{"url":"http://secunia.com/advisories/34283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21380233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21380376","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34104","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0704","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1188","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21380233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21380376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0509","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader 8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes remotos ejecutar código de su elección a través de fichero manipulado que provoque una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49239","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0510","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader 8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes remotos ejecutar código de su elección a través de vectores no especificados, es una vulnerabilidad dsitinta a CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0511","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados. Vulnerabilidad distinta de  CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, y CVE-2009-0889."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0512","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados. Vulnerabilidad distinta de  CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35293","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0513","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:02.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to (1) admin/doc/index.php, (2) index.php, and (3) base/menu.php in mod/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en WebFrame v0.76 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"classFiles\" a (1) admin/doc/index.php (2) index.php y (3) base/menu.php in mod/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webframe:webframe:0.76:*:*:*:*:*:*:*","matchCriteriaId":"B5C39BEE-3BAF-44EB-BE3A-679CAAD8A461"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0514","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:02.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) currentmod and (2) LANG parameters to mod/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en WebFrame v0.76 permite a atacantes remotos incluir y ejecutar ficheros locales a través de secuencias de salto de directorio en los parametros (1) \"currentmod\" y (2) \"LANG\" en mod/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webframe:webframe:0.76:*:*:*:*:*:*:*","matchCriteriaId":"B5C39BEE-3BAF-44EB-BE3A-679CAAD8A461"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0515","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:02.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en check_lang.php en Yet Another NOCC (YANOCC) v0.1.0 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales a su elección a través de ..(punto punto) en el parámetro \"lang\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yanocc:yanocc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0","matchCriteriaId":"EA1DEC30-3589-4193-82C9-A65367F6CC2D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33704","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48608","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8020","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0516","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:02.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la pagina de clasificación (classified.php) en BusinessSpace v1.2 y anteriores permite a atacantes remotos ejecutar comandos SQl a su elección a través del parámetro \"id\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessspace:businessspace:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"2C483A37-D53A-4D42-8D30-E1911CFA276F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33875","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500787/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33692","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48606","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500787/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0517","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T00:30:03.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tz_env.class.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección Eval en phpSlash v0.8.1.1 y anteriores permite a atacantes remotos ejecutar código PHP de su elección, a través del parámetro \"fields\", el cual en enviado a una llamada a la función eval sin la función genérica en include/class/tz_env.class. NOTA: Algunos de estos detalles han sido obtenidos de información de terceras personas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:*:*:*:*:*:*:*:*","matchCriteriaId":"385ABF67-157E-4592-80E7-8399C4D72879"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.1.1","matchCriteriaId":"9CA61227-D278-4502-92ED-24C3E900FEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"DC8FB8A1-BE41-4E62-88E9-AB15246AB0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.6:*:*:*:*:*:*:*","matchCriteriaId":"68D5F330-5C61-4627-B925-272A357E1338"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C9493398-C12A-439A-9836-0D62F6510D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"506762E9-EAA6-4AFE-8F78-3FA6491C27F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"31BDD3F6-789D-48AB-AD5C-137BB5D53BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"0292084B-B04A-4465-936B-51FFFE5328C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0B370B91-6B3C-4423-ABE5-840999099D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"703FD7D9-5D17-4C57-882A-8EF33CDE44F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.61:*:*:*:*:*:*:*","matchCriteriaId":"BF4822EC-378F-44B5-90E3-5B3F82247C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:065:*:*:*:*:*:*:*","matchCriteriaId":"1BCF8850-3160-45C9-AA16-C785AFDB246C"}]}]}],"references":[{"url":"http://osvdb.org/51727","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33717","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500664/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48441","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7948","source":"cve@mitre.org"},{"url":"http://osvdb.org/51727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500664/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0518","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:04.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password."},{"lang":"es","value":"VI Client de VMware VirtualCenter en versiones anteriores a la v2.5 Update 4, VMware ESXi 3.5 en sus versiones anteriores a Update 4, and VMware ESX 3.5 en sus versiones anteriores a Update 4 retienen la contraseña de VirtualCenter Server en la memoria de proceso, lo que puede permitir a los usuarios locales obtener esta contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"93F8BE4D-EF33-4CC8-B66B-16ADE1CCBB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C25C336B-B4BC-4FDF-8FD2-F90783841EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_virtualcenter:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6314167B-74F5-465B-8082-51CDCBCC24CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_virtualcenter:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0FF04F98-E574-4A18-B89C-5AA2A8C67226"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_virtualcenter:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0CC4B360-6460-4327-8A88-6CE5463BC8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_virtualcenter:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"41671F9F-C0FA-4D7F-9E31-EE114DB4F5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_virtualcenter:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5A5CB5CB-B259-4081-9358-2A48AF82860D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vmware_virtualcenter:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A0C57B5A-1175-4F6E-8138-915B3DDBB91C"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34585","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0519","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockwave Flash (aka .swf) file."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Flash Player 9.x anteriores a v9.0.159.0 y v10.x anteriores a v10.0.22.87, permiten a atacantes remotos provocar una denegación de servicio (caída del navegador) o posiblemente ejecutar código de su elección a través de un fichero Shockwave Flash (también conocido como .swf)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.12.36","matchCriteriaId":"67971799-2A4E-4FD2-BF8B-5E0B82032E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*","matchCriteriaId":"A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*","matchCriteriaId":"9E1093EF-0A76-4757-9D8D-6808A5D95C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.15.3","matchCriteriaId":"A72D07B5-1311-4653-8E84-7414E11A797C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0332.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0334.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0743","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487141","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48900","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15837","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6470","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0334.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0520","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a \"buffer overflow issue.\""},{"lang":"es","value":"Adobe Flash Player v9.x anteriores a v9.0.159.0 y 10.x before 10.0.22.87 no elimina apropiadamente referencias a objetos destruidos durante el procesado de un archivo Shockwave Flash, lo que permite a los atacantes remotos ejecutar arbitrariamente código a través de un fichero manipulado, en relación a un \"asunto de desbordamiento de búfer\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.12.36","matchCriteriaId":"67971799-2A4E-4FD2-BF8B-5E0B82032E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*","matchCriteriaId":"A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*","matchCriteriaId":"9E1093EF-0A76-4757-9D8D-6808A5D95C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.15.3","matchCriteriaId":"A72D07B5-1311-4653-8E84-7414E11A797C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0332.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0334.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34012","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021750","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33880","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0743","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48887","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16057","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6593","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0334.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0521","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"http://www.adobe.com/support/security/bulletins/apsb09-01.html\n\n\"This update prevents a potential Linux-only information disclosure issue in the Flash Player binary that could lead to privilege escalation. (CVE-2009-0521)\"","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en Adobe Flash Player 9v.x anteriores a v9.0.159.0 y v10.x anteriores a 10.0.22.87 en Linux que permite a los usuarios locales obtener información sensible o obtener privilegios a través de una librería manipulada en un directorio contenido en RPATH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.15.3","matchCriteriaId":"A72D07B5-1311-4653-8E84-7414E11A797C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"FE94BCCA-F6B2-48C9-8FBD-36CC3194B00E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0332.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34012","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487144","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48904","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0522","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-01.html\r\n\r\n\"This update resolves a Windows-only issue with mouse pointer display that could potentially contribute to a Clickjacking attack. (CVE-2009-0522)\"","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the \"mouse pointer display,\" related to a \"Clickjacking attack.\""},{"lang":"es","value":"Adobe Flash Player 9.x antes de la 9.0.159.0 y 10.x antes de la 10.0.22.87 sobre Windows permite a atacantes remotos engañar a un usuario para que visite una URL arbitraria a través de una manipulación no especificada de la \"pantalla el puntero del ratón\", relacionada con un \"ataque de Clickjacking \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.12.36","matchCriteriaId":"67971799-2A4E-4FD2-BF8B-5E0B82032E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:*","matchCriteriaId":"A3618623-8C9F-47CA-BBF6-B0DA98CB41FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*","matchCriteriaId":"9E1093EF-0A76-4757-9D8D-6808A5D95C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.15.3","matchCriteriaId":"A72D07B5-1311-4653-8E84-7414E11A797C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021752","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48903","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6674","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=5929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0523","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en Adobe RoboHelp Server 6 y 7 que permite a los atacantes remoto inyectar arbitrariamente una secuencia de comandos web o HTML a través de URL manipuladas, lo que es manejado apropiadamente cuando se muestra el registro de errores de la ayuda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*","matchCriteriaId":"3817D773-F9A8-4738-B159-93CCA297348D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*","matchCriteriaId":"113EFB69-D3FD-43DC-8AE9-300443F4FEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*","matchCriteriaId":"462BB435-3230-4045-BDA6-3B51FC6E76F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*","matchCriteriaId":"AE4FAB57-4AE3-492A-9404-F7B925795D9E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021755","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-02.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33887","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0512","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48890","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0524","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:19.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Adobe RoboHelp v6 y v7, y RoboHelp Server v6 y v7, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores que implican ficheros creados con robohelp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp:6:*:*:*:*:*:*:*","matchCriteriaId":"3817D773-F9A8-4738-B159-93CCA297348D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp:7:*:*:*:*:*:*:*","matchCriteriaId":"113EFB69-D3FD-43DC-8AE9-300443F4FEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:6:*:*:*:*:*:*:*","matchCriteriaId":"462BB435-3230-4045-BDA6-3B51FC6E76F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:7:*:*:*:*:*:*:*","matchCriteriaId":"AE4FAB57-4AE3-492A-9404-F7B925795D9E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34032","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021755","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-02.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33888","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48889","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0525","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the sajax_get_common_js function in php/Sajax.php in Sajax 0.12 allows remote attackers to inject arbitrary web script or HTML via the URL parameter, which is not properly handled when using browsers that do not URL-encode requests, such as Internet Explorer 6.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la función sajax_get_common_js en php/Sajax.php in Sajax v0.12, permite a atacantes remotos ejecutar secuencias de comandos web o HTML  de su elección a través del parámetro URL que no está manejado correctamente cuando es usado con navegadores que no codifica las peticiones URL, como es el caso de Internet Explorer 6. NOTA: el origen de esta información es desconocido. Los detalles se han obtenido a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modernmethod:sajax:0.12:*:*:*:*:*:*:*","matchCriteriaId":"F0C5388F-83FD-4BB6-83D0-2A74BE2E09CE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0526","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php in AdaptCMS Lite v1.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"url\", (2)\"acuparam\" y (3) \"URI\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adaptcms:adaptcms:1.4:unknown:lite:*:*:*:*:*","matchCriteriaId":"C54A354F-9494-46D2-89A7-8884F41D4173"}]}]}],"references":[{"url":"http://secunia.com/advisories/33866","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33698","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0527","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en plugins/rss_importer_functions.php en AdaptCMS Lite v1.4, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro \"sitepath\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adaptcms:adaptcms:1.4:unknown:lite:*:*:*:*:*","matchCriteriaId":"C54A354F-9494-46D2-89A7-8884F41D4173"}]}]}],"references":[{"url":"http://secunia.com/advisories/33866","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33698","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48610","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0528","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en frame.php en Rhadrix If-CMS v2.07 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rhadrix:if-cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.07","matchCriteriaId":"7B234B46-B489-4230-93E1-4DCD35D0D641"}]}]}],"references":[{"url":"http://secunia.com/advisories/33883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33697","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0529","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en SnippetMaster Webpage Editor v2.2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"languaje\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electrictoad:snippetmaster_webpage_editor:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1F96FCE9-6039-47C3-8D1B-2DEEEF583639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33705","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0530","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SCRIPT_PATH] parameter to includes/vars.inc.php and the (2) g_pcltar_lib_dir parameter to includes/tar_lib/pcltar.lib.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en SnippetMaster v2.2.2, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) _SESSION[SCRIPT_PATH] a includes/vars.inc.php y (2) g_pcltar_lib_dir a includes/tar_lib/pcltar.lib.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electrictoad:snippetmaster_webpage_editor:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1F96FCE9-6039-47C3-8D1B-2DEEEF583639"}]}]}],"references":[{"url":"http://secunia.com/advisories/33865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33705","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0531","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Version 1.2 released which fixed the SQL injection bug. It also properly deletes thumbnails for invalid filetypes (invalid files were removed but the thumbnails remained).\r\n\r\nhttp://www.ontarioabandonedplaces.com/ipguardian/","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote attackers to execute arbitrary SQL commands via the entry parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gallery/view.asp en A Better Member-Based ASP Photo Gallery anterior a v1.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"entry\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ontarioabandonedplaces:a_better_member-based_asp_photo_gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"0BF9FEDC-035D-4A18-8542-7C363F31C37A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48612","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8012","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0532","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el  archivo password.php en Scripts For Sites (SFS) EZ Baby, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados, posiblemente involucrando el parámetro u2. NOTA: la procedencia de esta información es desconocida; Los detalles son obtenidos únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_baby:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1B6FC8-7B5B-41B0-AC73-94F4567A19BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33989","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33635","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48547","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0533","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo password.php en EZ Reminder de Scripts For Sites, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados, posiblemente con el parámetro u2. NOTA: la procedencia de esta información es desconocida; Los detalles son obtenidos únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts-for-sites:ez_reminder:-:*:*:*:*:*:*:*","matchCriteriaId":"6A46FE64-BC99-4ACD-B049-F5798E24EEBC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33989","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33641","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48548","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0534","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en FlexCMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catId\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flexcms:flexcms:*:*:*:*:*:*:*:*","matchCriteriaId":"81C06590-841E-41F1-A062-DFB13B3F7302"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33696","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48609","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8018","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0535","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the export_to parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en export.php en Thyme v1.3 y anteriores, cuando register_globals está desactivado, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"export_to\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extrosoft:thyme:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3FD11855-78B8-4138-AB8E-C261AB93B63D"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8029","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0536","sourceIdentifier":"cve@mitre.org","published":"2009-02-11T20:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges."},{"lang":"es","value":"at en bos.rte.cron sobre IBM AIX v5.2.0, v5.3.0 a la v 5.3.9 y de la v6.1.0 a la 6.1.2, permite a usuarios locales leer ficheros de su elección a través de vectores sin especificar, relacionado con el fallo al quitar privilegios de root (administrador)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A7DBFF-B11B-47EC-9E52-C12B156739D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DE57C2-E728-4016-9774-28FB4B0509AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"57B11497-5622-4759-906A-A93A3E815584"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1F9CD013-D904-45DF-AD43-493A22D5744B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"307B47F5-D903-4763-A353-2538AFD6C9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF417123-CCB6-48AF-A21B-1974173D516B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/at_advisory.asc","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51952","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33915","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43454","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43457","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43459","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33730","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021704","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0405","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48660","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/at_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ43459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0537","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise."},{"lang":"es","value":"Desbordamiento de entero en la función fts_build en fts.c de libc sobre (1) OpenBSD v4.4 y anteriores y (2) Microsoft Interix v6.0 build 10.0.6030.0, permiten a atacantes, dependiendo del contexto, provocar una denegación de servicio (caída de la aplicación) a través de un arbol de directorio profundo, relativo al miembro de la estructura fts_level, como se ha demostrado por (a) du, (b) rm, (c) chmod, y (d) chgrp en OpenBSD; y (e)SearchIndexer.exe en Vista Enterprise."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:interix:6.0:*:10.0.6030.0:*:*:*:*:*","matchCriteriaId":"83ACC103-E369-4067-8387-8FDF89D90AD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"FAB41EFD-70AF-41E5-B17E-44DF68D5A6B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AEAE2873-0028-4744-B64E-8E2EA30447F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.8:*:*:*:*:*:*:*","matchCriteriaId":"783973F9-2A6E-4DDF-A64C-7794FFD0B7B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*","matchCriteriaId":"F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77812C-D84E-493E-9D21-1BA6C2129E70"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"16C117F3-3684-4683-9F9E-CEDD5B88F9CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"}]}]}],"references":[{"url":"http://securityreason.com/achievement_securityalert/60","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501505/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021818","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8163","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/60","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501505/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0538","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file)."},{"lang":"es","value":"Una vulnerabilidad de formato de cadena en Symantec pcAnywhere antes de 12.5 SP1 permite a atacantes remotos leer y modificar localizaciones de memoria de su elección y producir una denegación de servicio (caída de la aplicación) o posiblemente tener otro efecto no especificado mediante especificadores de cadena de formato en el nombre de ruta de fichero de un fichero de control remoto (alias fichero .CHF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:*:*:*:*:*:*:*:*","versionEndIncluding":"12.5","matchCriteriaId":"3B5D2349-8330-4DE8-8040-6FDD368EFD32"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:10.0:*:*:*:*:*:*:*","matchCriteriaId":"5DAB70F5-1B1B-426B-A1F9-6D91D0A160B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:10.5:*:*:*:*:*:*:*","matchCriteriaId":"9F0A6A97-1EFF-41C0-AAAA-B357C4C801F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:11.0:*:*:*:*:*:*:*","matchCriteriaId":"014AA70B-942F-4ADE-9EEF-4F5204438268"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D0BF0A19-0AAD-44B2-9B51-85A985CC40A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:11.5:*:*:*:*:*:*:*","matchCriteriaId":"A496D973-4BC8-4377-8C84-8F2CB281AEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3FF752E6-45B4-4D6D-90F8-AA69DB5C2775"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:12.0:*:*:*:*:*:*:*","matchCriteriaId":"B13E1710-1723-4A52-ACDC-7FC511467152"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:12.1:*:*:*:*:*:*:*","matchCriteriaId":"ECE0E3DD-23F9-4ACD-BF9D-986CE5232D4E"}]}]}],"references":[{"url":"http://osvdb.org/52797","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34305","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021855","source":"cve@mitre.org"},{"url":"http://www.layereddefense.com/pcanywhere17mar.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501930/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33845","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0755","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49291","source":"cve@mitre.org"},{"url":"http://osvdb.org/52797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.layereddefense.com/pcanywhere17mar.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501930/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0540","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote attackers to inject arbitrary web script or HTML via the search term field."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en Libero v5.3 SP5, y posiblemente otras versiones anteriores a v5.5 SP1, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del campo búsqueda term."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insightinformatics:libero:5.3:sp5:*:*:*:*:*:*","matchCriteriaId":"68000F3A-13AE-4956-AAF7-3B48E2A2CA1E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0243.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/52263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33856","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0493","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48870","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/52263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0541","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the app/code/core/Mage/Admin/Model/Session.php login function; (2) the email address field in an admin/index/forgotpassword/ request to index.php, possibly related to the email parameter and the app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction function; or (3) the return parameter to the default URI under downloader/."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Magento v1.2.0 y v1.2.1.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el campo \"username\" en una petición  admin/ a index.php, posiblemente relacionado con el parámetro \"login[username]\" y la función de login app/code/core/Mage/Admin/Model/Session.php; (2) al campo \"email address\" en una petición admin/index/forgotpassword/ a index.php, posiblemente relacionado con el parámetro \"email\" y la función app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction; o (3) el parámetro \"return\" a la URI por defecto bajo downloader/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magentocommerc:magento:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"11B2C132-022B-4A55-9A99-FE02665D2520"},{"vulnerable":true,"criteria":"cpe:2.3:a:magentocommerc:magento:1.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8D75CA6-B651-4EBD-9B60-E0CF06D81BAE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0257.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34000","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33872","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48877","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48878","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0257.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0542","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a \"%\" (percent) character in the username, which introduces a \"'\" (single quote) character during variable substitution by mod_sql."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el ProFTPD Server v1.3.1 hasta v1.3.2rc2, permite a atacantes remotos ejecutar comandos SQL de su elección a través de un carácter \"%\" (porcentaje) en el nombre de usuario, esto introduce un carácter \"'\" (comilla simple) durante la sustitución de variable por mod_sql."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"71965620-399A-450C-95A5-5B327438768A"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8A80BB64-A714-40D6-80E1-D4AAC5498289"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.3.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EBCEA1CC-B662-4B36-8AC3-4C3A3CE3E54C"}]}]}],"references":[{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34268","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-27.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1730","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:061","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500823/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500833/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500851/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500852/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8037","source":"cve@mitre.org"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500823/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500833/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500851/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500852/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0543","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres."},{"lang":"es","value":"ProFTPD Server v1.3.1, con soporte NLS habilitado, permite a atacantes remotos evitar los mecanismos de protección de inyección SQL a través de caracteres multibyte inválidos y codificados, que no son correctamente manejados en (1) mod_sql_mysql y (2) mod_sql_postgres."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0629F25F-B9C6-4FC7-B67E-E6B38E59E60B"}]}]}],"references":[{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34268","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-27.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1730","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:061","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/5","source":"cve@mitre.org"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/11/5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0544","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length."},{"lang":"es","value":"Desbordamiento del búfer en el módulo PyCrypto ARC2 v2.0.1, permite a atacantes remotos provocar una denegación de servicio y puede que ejecutar código de su elección a través de una longitud larga de clave ARC2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pycrypto:arc2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C278C3C0-967F-4700-9D73-B6DFF1A92382"}]}]}],"references":[{"url":"http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=d1c4875e1f220652fe7ff8358f56dee3b2aba31b","source":"cve@mitre.org"},{"url":"http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=fd73731dfad451a81056fbb01e09aa78ab82eb5d","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-11.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:049","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:050","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/07/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48617","source":"cve@mitre.org"},{"url":"http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=d1c4875e1f220652fe7ff8358f56dee3b2aba31b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=fd73731dfad451a81056fbb01e09aa78ab82eb5d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0545","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T23:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action."},{"lang":"es","value":"cgi-bin/kerbynet de ZeroShell 1.0beta11 y anteriores, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de línea de comandos en el parámetro type -tipo- de una acción NoAuthREQ x509List."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3C7B176B-F51B-408F-B2A4-7E8E5BE5EC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta10:*:*:*:*:*:*","matchCriteriaId":"B3B0BACE-C7A5-4682-AF8D-831695AAB59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta11:*:*:*:*:*:*","matchCriteriaId":"AD769FAD-12CE-4BFD-BF00-6E9CD9543DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"687172D7-8322-435B-9DD2-93C4B06D89D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"15488672-B1D0-41CC-8A4D-5EDC8BC94818"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7B9F5A68-47C4-404D-9FFC-45EF70D3A4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta5:*:*:*:*:*:*","matchCriteriaId":"A57C0323-FBBF-4C7B-92C9-613594FC5726"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta6:*:*:*:*:*:*","matchCriteriaId":"AE92FEE0-E89D-481F-A818-529FF6BF1AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"B3889F21-107B-4256-9329-EF327BBBED26"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta8:*:*:*:*:*:*","matchCriteriaId":"6F56A258-4F0F-4335-94B2-893448B3F254"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroshell:zeroshell:1.0:beta9:*:*:*:*:*:*","matchCriteriaId":"176A49E5-D367-4581-9D60-DD304FE38FBC"}]}]}],"references":[{"url":"http://www.ikkisoft.com/stuff/LC-2009-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500763/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0385","source":"cve@mitre.org"},{"url":"http://www.zeroshell.net/eng/announcements/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zeroshell.net/eng/patch-details/#C100","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/8023","source":"cve@mitre.org"},{"url":"http://www.ikkisoft.com/stuff/LC-2009-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500763/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zeroshell.net/eng/announcements/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zeroshell.net/eng/patch-details/#C100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/8023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0546","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T23:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en NewsGator FeedDemon v2.7 y anteriores que permiten a los atacantes remotos asistidos por el usuario ejecutar arbitrariamente código a través de un atributo de texto largo en un elemento outline en un archivo .opml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsgator:feeddemon:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"A7E1AF5F-3CEC-469C-AEF0-C06C9C83CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsgator:feeddemon:2.0.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8631919E-6C04-435A-B09E-15B075B49C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsgator:feeddemon:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F7C646B9-6C0F-4D8F-8F11-B037F493F33A"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsgator:feeddemon:2.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3DCF7D23-9C4A-4DE2-A24F-633E3C433723"},{"vulnerable":true,"criteria":"cpe:2.3:a:newsgator:feeddemon:2.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E2A586F3-6116-454E-9E64-360F74729BA5"}]}]}],"references":[{"url":"http://osvdb.org/51753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500686/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33630","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7995","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8010","source":"cve@mitre.org"},{"url":"http://osvdb.org/51753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500686/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0547","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T23:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077."},{"lang":"es","value":"Evolution v2.22.3.1, comprueba las firmas S/MIME contra una copia del texto del correo electrónico con un campo de datos firmados, la copia del texto del correo no se muestra al usuario, esto permite a atacantes remotos falsificar la firma modificando la copia posterior. Se trata de una vulnerabilidad diferente de CVE-2008-5077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolution:evolution:2.22.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8A5378B-3F80-4007-9284-08A790C47CFB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=564465","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/02/10/7","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34338","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34339","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34363","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35357","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38915","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1813","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:078","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0354.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0355.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33720","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484925","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9619","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=564465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/02/10/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0354.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0355.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0548","sourceIdentifier":"cve@mitre.org","published":"2009-02-12T23:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de Secuencias de Comandos en Sitios Cruzados (XSS) en la interfaz Additional Report Settings de ESET Remote Administrator anterior a v3.0.105; permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de vectores no especificados. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eset:remote_administrator:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.35","matchCriteriaId":"C27358BB-4D99-4A19-8391-7ECE77B524DB"}]}]}],"references":[{"url":"http://osvdb.org/51804","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33805","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.eset.eu/support/changelog-eset-remote-administrator-3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0339","source":"cve@mitre.org"},{"url":"http://osvdb.org/51804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.eset.eu/support/changelog-eset-remote-administrator-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0549","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Record Pointer Corruption Vulnerability.\""},{"lang":"es","value":"Excel en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, y Office 2004 y 2008 para Mac; Open XML File Format Converter para Mac; y Microsoft Office Excel Viewer 2003 SP3 permite a atacantes remotos ejecutar codigo de forma arbitraria a través de un fichero Excel con un objeto \"record\" deformado, también conocido como \"Vulnerabilidad de Corrupción de Puntero \"Record\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"F03E302A-83DE-46FF-9044-09230841BD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*","matchCriteriaId":"91A3E58F-E2FE-4346-9083-58C963171A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*","matchCriteriaId":"6BE07062-6299-4371-BD74-BA7F7840DBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://osvdb.org/54952","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35215","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5830","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0550","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008; allows remote web servers to capture and replay NTLM credentials, and execute arbitrary code, via vectors related to absence of a \"credential-reflection protections\" opt-in step, aka \"Windows HTTP Services Credential Reflection Vulnerability\" and \"WinINet Credential Reflection Vulnerability.\""},{"lang":"es","value":"Windows HTTP Services (también conocido como WinHTTP) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP1 y SP2, Vista Gold y SP1, y Server 2008; y WinINet en Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 y 7 en Windows XP SP2 y SP3, 6 y 7 en Windows Server 2003 SP1 y SP2, 7 en Windows Vista Gold y SP1, y 7 en Windows Server 2008; permite a servidores web remotos capturar y reproducir credenciales NTLM, y ejecutar código de su elección, a través de vectores relacionados con la falta de \"protecciones credencial-reflexión\" paso opt-in, también conocido como \"Vulnerabilidad de Reflexión de Credencial en Servicios HTTP de Windows\" y \"Vulnerablidad de Reflexión de Credencial WinINet\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53619","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34677","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34678","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34439","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022041","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1027","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5320","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7569","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/04/14/ntlm-credential-reflection-updates-for-http-clients.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0551","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka \"Page Transition Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v6 SP1, v6 y v7 en Windows XP SP2 y SP3, v6 y v7 en Windows Server 2003 SP1 y SP2, v7 en Windows Vista Gold y SP1, y v7 en Windows Server 2008 no maneja adecuadamente errores de transición en una petición a un documento HTTP seguido de una petición a un segundo documento HTTP, lo que permite a atacantes remotos ejecutar código de su elección a través de vectores relacionados (1) múltiples páginas manipuladas en un sitio Web (2) una página Web con líneas de contenido manipulado como publicidad en forma de banner, también conocido como \"Vulnerabilidad de Corrupción de Memoria en transición de página\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://osvdb.org/53624","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34678","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022042","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6164","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0552","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 en Windows XP SP2 y SP3, y 6 en Windows Server 2003 SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de una página web que dispara la presencia de un objeto en memoria que (1) no fue inicializado adecuadamente o (2) borrado, también conocido como \"Vulnerabilidad de corrupción de memoria sin inicializar\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/53625","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34678","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022042","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0553","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 6 SP1, 6 y 7 en Windows XP SP2 y SP3, 6 y 7 en Windows Server 2003 SP1 y SP2, 7 en Windows Vista Gold y SP1, y 7 en Windows Server 2008 permite a atacantes remotos ejecutar código de su elección a través de una página web que dispara la presencia de un objeto en memoria que (1) no fue inicializado adecuadamente o (2) borrado, también conocido como \"Vulnerabilidad de corrupción de memoria no inicializada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://osvdb.org/53626","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34678","source":"secure@microsoft.com"},{"url":"http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/","source":"secure@microsoft.com","tags":["URL Repurposed"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34424","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022042","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6069","source":"secure@microsoft.com"},{"url":"http://osvdb.org/53626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0554","sourceIdentifier":"secure@microsoft.com","published":"2009-04-15T08:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v5.01 SP4, v6 SP1, v6 y v7 en Windows XP SP2 y SP3, v6 y v7 en Windows Server 2003 SP1 y SP2, v7 en Windows Vista Gold y SP1, y v7 en Windows Server 2008 permite a atacantes remotos ejecutar código de su elección a través de una página web que lanza la presencia de un objeto en memoria que (1) no había sido iniciado adecuadamente o (2) eliminado, también conocido como \"Vulnerabilidad de Corrupción de Memoria no Iniciada\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://secunia.com/advisories/34678","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022042","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5723","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0555","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses the Windows Media Speech codec, aka \"Windows Media Runtime Voice Sample Rate Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Media Runtime, como se utiliza en DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, y Audio Compression Manager (ACM), no accede correctamente a los ficheros ASF, lo que permite a atacantes remotos ejecutar código arbitrario a través de un fichero de audio manipulado que utiliza el codec Windows Media Speech, también conocido como \"Vulnerabilidad de Windows Media Runtime Voice Sample Rate\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"ABBA5D64-4184-4420-B7D0-A4E41359AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*","matchCriteriaId":"BAB70FD5-09F3-4215-99C4-299EDE8D26DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x86:*","matchCriteriaId":"283F5DF4-B68A-4C1D-822A-1C0EB67C2C35"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"F8216946-5F76-48B9-91CC-207F657D7D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x86:*","matchCriteriaId":"B36BFDA7-596B-45EA-AACE-F8A796CECDBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*","matchCriteriaId":"06E7E0F7-AA6F-477C-AAA7-C0419CD2F3BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:x64:*","matchCriteriaId":"687E66DB-E5CC-4B13-B9B7-89CC6B49B693"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"0161C884-70A5-4AD0-BD80-F0F7B3D8579E"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0556","sourceIdentifier":"secure@microsoft.com","published":"2009-04-03T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP3, y PowerPoint en Microsoft Office 2004 para Mac, permite a atacantes remotos ejecutar código arbitrario a través de un fichero PowerPoint que inicia un acceso a un \"objeto no valido en memoria\", Esta siendo explotado desde Abril 2009 mediante un exploit; Win32/Apptom.gen"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2004:*:*:*:*:*:*:*","matchCriteriaId":"A192BD93-8778-4CA9-BC32-18F8290BF197"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"16844C40-F012-4C19-9028-D05014EBF7D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"34C63AE5-4584-4A51-B20D-36FA6DE01C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"1778A4FF-FF69-403C-A607-6777AE685A13"}]}]}],"references":[{"url":"http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/53182","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/34572","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/627331","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/969136.mspx","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503453/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34351","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1021967","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0915","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-019","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49632","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/53182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/627331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/969136.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503453/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0557","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.203","lastModified":"2025-10-22T01:15:33.617","vulnStatus":"Deferred","cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Office Object Record Corruption Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Object Record Corruption Vulnerability.\""},{"lang":"es","value":"Excel en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, y Office 2004 y 2008 para Mac; Excel en  Microsoft Office 2007 System SP1 y SP2; Open XML File Format Converter para Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2 permiten a atacantes remotos ejecutar código de su elección a través de un fichero manipulado con un objeto grabado de forma incorrecta, también conocida como \"Vulnerabilidad de corrupción de objeto grabado\""}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*","matchCriteriaId":"0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*","matchCriteriaId":"421ACF1B-1B21-4416-98ED-BAA5C210EAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:-:*:*:*:*:*:*:*","matchCriteriaId":"940DEFD7-4281-46A9-9962-4E15048EB22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F007E987-9CCF-4786-AB23-C5F4AE51D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"875D8BED-E54F-4C54-9071-A3BAAF4493A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*","matchCriteriaId":"4BC69733-551E-4535-B851-4A3EF71E98CD"}]}]}],"references":[{"url":"http://osvdb.org/54953","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35241","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://osvdb.org/54953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0557","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-0558","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Array Indexing Memory Corruption Vulnerability.\""},{"lang":"es","value":"Error de índice de matriz en Excel en Office 2000 SP3 y Office 2004 y 2008 para Mac, y Open XML File Format Converter para Mac, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel diseñado con un objeto de registro malformado, también se conoce como \"Array Indexing Memory Corruption Vulnerability”."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"F03E302A-83DE-46FF-9044-09230841BD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*","matchCriteriaId":"91A3E58F-E2FE-4346-9083-58C963171A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*","matchCriteriaId":"6BE07062-6299-4371-BD74-BA7F7840DBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://osvdb.org/54954","source":"secure@microsoft.com"},{"url":"http://secunia.com/secunia_research/2009-1/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504188/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35242","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504188/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0559","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"String Copy Stack-Based Overrun Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Excel en Microsoft Office 2000 SP3 y Office XP SP3, permite a atacantes remotos ejecutar código de su elección a través de un archivo Excel con un objeto de registro mal formado, también conocido como \"Vulnerabilidad String Copy Stack-Based Overrun\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"F03E302A-83DE-46FF-9044-09230841BD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*","matchCriteriaId":"91A3E58F-E2FE-4346-9083-58C963171A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*","matchCriteriaId":"6BE07062-6299-4371-BD74-BA7F7840DBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35243","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6273","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0560","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka \"Field Sanitization Memory Corruption Vulnerability.\""},{"lang":"es","value":"Excel en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, y Office 2004 y 2008 para Mac; Excel en 2007 Microsoft Office System SP1 y SP2; Open XML File Format Converter para Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de un archivo Excel manipulado con un objeto record mal formado, también conocido como \"Vulnerabilidad de corrupción de memoria en la limpieza de campos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"F03E302A-83DE-46FF-9044-09230841BD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*","matchCriteriaId":"91A3E58F-E2FE-4346-9083-58C963171A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*","matchCriteriaId":"6BE07062-6299-4371-BD74-BA7F7840DBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://osvdb.org/54956","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35244","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0561","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Microsoft Office SharePoint Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record with a numeric field that specifies an invalid number of unique strings, which triggers a heap-based buffer overflow, aka \"Record Integer Overflow Vulnerability.\""},{"lang":"es","value":"Un desbordamiento enteros en Excel en Office 2000 SP3, Office XP SP3, Office 2003 SP3 y Office 2004 y 2008 para Mac de Microsoft; Excel en 2007 Office System SP1 y SP2 de Microsoft; Open XML File Format Converter para Mac; Office Excel Viewer 2003 SP3 de Microsoft; Office Excel Viewer de Microsoft; Office Compatibility Pack para formatos de archivo de Word, Excel y PowerPoint 2007 SP1 y SP2 de Microsoft; y Office SharePoint Server 2007 SP1 y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo de Excel con un registro de tabla de cadenas compartidas (SST) con un campo numérico que especifica un número no válido de cadenas únicas, lo que desencadena un desbordamiento de búfer en la región heap de la memoria, también se conoce como \"Record Integer Overflow Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"F03E302A-83DE-46FF-9044-09230841BD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*","matchCriteriaId":"91A3E58F-E2FE-4346-9083-58C963171A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*","matchCriteriaId":"6BE07062-6299-4371-BD74-BA7F7840DBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54957","source":"secure@microsoft.com"},{"url":"http://secunia.com/secunia_research/2009-12/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504190/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35245","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5925","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-12/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504190/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0562","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger \"system state\" corruption, aka \"Office Web Components Memory Allocation Vulnerability.\""},{"lang":"es","value":"El control Office Web Components ActiveX en Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para el  2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 y 2006 SP1, y Office Small Business Accounting 2006, no asignan memoria adecuadamente, lo que permite a atacantes remotos la ejecución de código de su elección a través de vectores no especificados que lanzan una corrupción en el estado del sistema (System state), también conocida como \"Vulnerabilidad de asignación de memoria en Office Web Components\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"12FAB1BC-F8FB-4A14-8E38-703CF8E67B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*","matchCriteriaId":"BB4F1038-F652-4A76-874F-3FFAAF30AB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"64E8FCC6-B44E-4FA3-AE9E-9FB196D7CD7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:sp1:standard:*:*:*:*:*","matchCriteriaId":"91E957DC-91B8-470A-808C-9B2EA687B2A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*","matchCriteriaId":"F27860CB-929A-47F3-801E-3E69C53FA353"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"D86088BB-C81D-4CCE-B7D1-1280818D99A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*","matchCriteriaId":"7B654504-9098-4F7F-8CE7-696CF15BCA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"B07BEA1E-F032-4E63-8548-C98DD6E05AAA"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1022708","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6337","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0563","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.313","lastModified":"2025-10-22T01:15:33.790","vulnStatus":"Deferred","cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Office Buffer Overflow Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka \"Word Buffer Overflow Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Office Word 2002 SP3, 2003 SP3 y 2007 SP1 y SP2 de Microsoft; Office para Mac 2004 y 2008 de Microsoft; Open XML File Format Converter para Mac; Office Word Viewer 2003 SP3 de Microsoft; Office Word Viewer de Microsoft; y Office Compatibility Pack para formatos de archivo de Word, Excel y PowerPoint 2007 SP1 y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un documento de Word con una etiqueta diseñada que contiene un campo de longitud no válido, también se conoce como \"Word Buffer Overflow Vulnerability\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*","matchCriteriaId":"0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*","matchCriteriaId":"421ACF1B-1B21-4416-98ED-BAA5C210EAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*","matchCriteriaId":"C64B2636-8F96-48BA-921F-A8FA0E62DE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*","matchCriteriaId":"4BC69733-551E-4535-B851-4A3EF71E98CD"}]}]}],"references":[{"url":"http://osvdb.org/54959","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504204/100/0/threaded","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35188","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022356","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1546","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-035","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://osvdb.org/54959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504204/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0563","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-0565","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka \"Word Buffer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer en Microsoft Office Word 2000 SP3, 2002 SP3, y 2007 SP1 y SP2; Microsoft Office para Mac 2004 y 2008; Conversor de formato de archivo Open XML para Mac; y Microsoft Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, permite a los atacantes remotos ejecutar arbitrariamente código a través de un documento Word con un registro malformado que lanza una corrupción de memoria, también conocido como \"Vulnerabilidad de desbordamiento de búfer Word\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"C1B2B207-751F-4596-B805-B4622E312B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"413DBB72-E807-46EC-AD7B-4D62C6217CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"0B3ECA7D-1B9B-44EF-B76C-01CB36CCC33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://osvdb.org/54960","source":"secure@microsoft.com"},{"url":"http://securityreason.com/securityalert/8206","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35190","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022356","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1546","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/8206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0566","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka \"Pointer Dereference Vulnerability.\""},{"lang":"es","value":"Microsoft Office Publisher 2007 SP1 no calcula adecuadamente los datos de manejo del objeto (object handler data) para los archivos de Publisher, lo que permite a atacantes remotos ejecutar código de su elección a través de un archivo manipulado en un formato heredado que provoca una corrupción de memoria. También concido como \"Vulnerabilidad de Deferencia de Puntero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_publisher:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"0A55D8BE-20CA-4FA2-8F66-574029E3E004"}]}]}],"references":[{"url":"http://osvdb.org/55838","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35599","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022546","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1888","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285","source":"secure@microsoft.com"},{"url":"http://osvdb.org/55838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0568","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to \"IDL interfaces containing a non-conformant varying array\" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka \"RPC Marshalling Engine Vulnerability.\""},{"lang":"es","value":"El motor RPC Marshalling (también conocido como NDR) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 no mantiene de forma adecuada su estado interno, lo que permite a atacantes remotos sobrescribir posiciones de memoria de su elección a través de un mensaje RPC manipulado que provoca una lectura de puntero incorrecta, relativo a \"Interfaces IDL que contienen una tabla variable no conforme\" y FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, y FC_VARIABLE_OFFSET, tambien conocido como \"Vulnerabilidad dl motor RPC Marshalling\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:itanium:*","matchCriteriaId":"39F303CD-DB64-4FE6-AB4F-461E5E8AFB83"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"17804445-2C63-4381-A721-7F3BB3DC645F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server:2008:*:*:*:*:*:itanium:*","matchCriteriaId":"EF19CAA4-DAF7-4237-9F1F-153E28E19A01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server:2008:*:sp2:*:*:*:itanium:*","matchCriteriaId":"E8C46066-5DDF-4FB1-8EEC-CDFA8D588DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x64:*","matchCriteriaId":"BAB70FD5-09F3-4215-99C4-299EDE8D26DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:x86:*","matchCriteriaId":"283F5DF4-B68A-4C1D-822A-1C0EB67C2C35"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"F8216946-5F76-48B9-91CC-207F657D7D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x86:*","matchCriteriaId":"B36BFDA7-596B-45EA-AACE-F8A796CECDBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:x64:*","matchCriteriaId":"06E7E0F7-AA6F-477C-AAA7-C0419CD2F3BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:x64:*","matchCriteriaId":"ABBA5D64-4184-4420-B7D0-A4E41359AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54936","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35219","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022357","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1545","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0569","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Becky! Internet Mail 2.48.02 and earlier allows remote attackers to execute arbitrary code via a mail message with a crafted return receipt request."},{"lang":"es","value":"Desbordamiento de búfer en Becky!! Internet Mail v2.48.02 y anteriores, que permite a los atacantes remotos ejecutar arbitrariamente código a través de mensajes de correo electrónico con una retorno manipulado de recepción de petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.48.02","matchCriteriaId":"35441657-9A1E-4A77-9536-81F367C47DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:1.26.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDF43FF-5C93-40EA-A5BD-128E1BC7BA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:1.26.4:*:*:*:*:*:*:*","matchCriteriaId":"1A62CEDC-A2A6-4FF6-98B4-5DD9D62CE998"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:1.26.5:*:*:*:*:*:*:*","matchCriteriaId":"80DC7CF9-2FB1-4F0F-82C0-A6A7AE375823"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.0:*:*:*:*:*:*:*","matchCriteriaId":"C7BB83AC-D0DD-4482-A1A5-6C86C7B6714D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.01:*:*:*:*:*:*:*","matchCriteriaId":"645DB3EB-FE95-4FB3-8763-553ACB7E7F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.02:*:*:*:*:*:*:*","matchCriteriaId":"ECB7CEFD-6E32-4335-9121-D406312A9B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.03:*:*:*:*:*:*:*","matchCriteriaId":"7382D4FC-706A-4AE2-A05C-1D0B118EEB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BF1880ED-7933-49F8-B343-C1C67B8A8FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.04:*:*:*:*:*:*:*","matchCriteriaId":"A72B3497-5E28-4AD6-A862-6444DA8D6009"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F959DE4F-1340-473D-8D66-D5A5FAE5A149"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.05:*:*:*:*:*:*:*","matchCriteriaId":"6A822625-04C7-426B-84D9-0980E9FCE3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.06:*:*:*:*:*:*:*","matchCriteriaId":"C638FBED-D830-4DC2-BE43-7CD7FE27BBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.07:*:*:*:*:*:*:*","matchCriteriaId":"0B0EF9A6-BB23-4C45-94E1-24B5D4505CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.08:*:*:*:*:*:*:*","matchCriteriaId":"809F7EC5-A7FE-47E2-8681-EF8DF204770B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.09:*:*:*:*:*:*:*","matchCriteriaId":"4060C6A3-DE96-4EF8-87BB-65B0BE2E87AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.10:*:*:*:*:*:*:*","matchCriteriaId":"11A74E8D-8938-4963-A514-928FCF8A06C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.00.11:*:*:*:*:*:*:*","matchCriteriaId":"21896C1E-9F29-4B27-A6E7-ACAFA53694A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.00:*:*:*:*:*:*:*","matchCriteriaId":"29AAF319-B2B9-4CEF-ABAE-B8FE51723EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.01:*:*:*:*:*:*:*","matchCriteriaId":"9055C591-40DE-429C-8F53-F1F6A1E421B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.02:*:*:*:*:*:*:*","matchCriteriaId":"D805188D-6F89-4E4F-845E-FFED2D979E50"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.03:*:*:*:*:*:*:*","matchCriteriaId":"675A7B36-A89F-4FB7-A5A9-16C510BF267D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.04:*:*:*:*:*:*:*","matchCriteriaId":"06615A8C-819F-43D8-913C-27B9EAE10F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.05:*:*:*:*:*:*:*","matchCriteriaId":"3CCFA543-A594-4D80-9EF5-EE4D3B918E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.06:*:*:*:*:*:*:*","matchCriteriaId":"D98208DF-E941-4016-A2A3-75EE4B94BF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.07:*:*:*:*:*:*:*","matchCriteriaId":"DA356BFC-31FF-4D69-A945-774E39EAD8FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.08:*:*:*:*:*:*:*","matchCriteriaId":"0415269F-2CDB-4E5D-8882-E8E90FCEF207"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.09:*:*:*:*:*:*:*","matchCriteriaId":"AE2D14C1-C391-4C56-BDAC-09D0ED95F223"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.10:*:*:*:*:*:*:*","matchCriteriaId":"AB6BD2D2-2AD7-4401-B7A4-D963408AF286"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.05.11:*:*:*:*:*:*:*","matchCriteriaId":"3D313111-5218-4EE9-8D23-B6C769CB2F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.06:*:*:*:*:*:*:*","matchCriteriaId":"FE2F96BC-96B9-4996-AA37-724FD9166642"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.06.02:*:*:*:*:*:*:*","matchCriteriaId":"B5476F50-5D15-4DC3-9385-FEA4977A2C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07:*:*:*:*:*:*:*","matchCriteriaId":"AF3D8D78-A47E-4E38-A64B-0FBAFBBFEF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.01:*:*:*:*:*:*:*","matchCriteriaId":"4F435683-AD92-4A93-8348-788DCCF3F31D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.02:*:*:*:*:*:*:*","matchCriteriaId":"B063DBDD-6DB1-4997-B026-3296A845A668"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.03:*:*:*:*:*:*:*","matchCriteriaId":"8184A401-D0F6-46DC-9A90-88F161DC9035"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.07.04:*:*:*:*:*:*:*","matchCriteriaId":"00E06240-6F6F-48B3-8BDA-1B472714C851"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.08:*:*:*:*:*:*:*","matchCriteriaId":"D847B935-0A83-4B69-954C-F96AE9561FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.08.01:*:*:*:*:*:*:*","matchCriteriaId":"7F777BC3-020F-4FA5-8C5B-AF9A3B97E829"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.09:*:*:*:*:*:*:*","matchCriteriaId":"0802E75B-0AA7-4292-AF8C-B33B0FD370B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.09.01:*:*:*:*:*:*:*","matchCriteriaId":"1E1AD4FC-7ABD-49A4-96E4-0EFD05D0BDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10:*:*:*:*:*:*:*","matchCriteriaId":"7C0F5B41-293D-4B7F-A0EA-F010DF3F56FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"49633DD2-0CB2-40F4-B142-40FDB48E75E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.02:*:*:*:*:*:*:*","matchCriteriaId":"01852229-2482-4643-ACB0-5FAC5B5EAF62"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.03:*:*:*:*:*:*:*","matchCriteriaId":"C9D63EEF-89F4-41AF-973B-2B7C6FB71D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.10.04:*:*:*:*:*:*:*","matchCriteriaId":"6EAAA6ED-F4D1-4D99-A5DA-CCA2CB67E2FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.11:*:*:*:*:*:*:*","matchCriteriaId":"7BA5444C-0145-4A83-876A-37E078FF3690"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.11.01:*:*:*:*:*:*:*","matchCriteriaId":"E053257F-987A-46C7-86EB-5AB7DDF625D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.11.02:*:*:*:*:*:*:*","matchCriteriaId":"EC95A4DB-9A6B-4655-B3C2-CFD661D860D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.12:*:*:*:*:*:*:*","matchCriteriaId":"77A44287-7780-4F7E-A42A-8C84651B8318"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.12.01:*:*:*:*:*:*:*","matchCriteriaId":"A4898613-F821-4775-B6D0-3D6B74498B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20:*:*:*:*:*:*:*","matchCriteriaId":"5903530F-DD3A-408F-8849-7B99C62C7E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.01:*:*:*:*:*:*:*","matchCriteriaId":"01B57218-DD5E-4C71-8FFB-2089C4EE0CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.02:*:*:*:*:*:*:*","matchCriteriaId":"BE465630-5DA4-4060-BFFA-C0041270861F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.03:*:*:*:*:*:*:*","matchCriteriaId":"FDD9D9AA-45F7-4D5B-8492-357B7AFA84FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.04:*:*:*:*:*:*:*","matchCriteriaId":"C99317BC-2B79-46EA-8CD5-75FA8F4876B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.05:*:*:*:*:*:*:*","matchCriteriaId":"E74BB72E-1FD5-4C8F-A444-1FAE385F46DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.06:*:*:*:*:*:*:*","matchCriteriaId":"ACC52F17-5084-4B32-801F-89E1D2CA3109"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.20.07:*:*:*:*:*:*:*","matchCriteriaId":"114AFAE6-5736-4264-89C6-2DE0B0EBDDB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21:*:*:*:*:*:*:*","matchCriteriaId":"19C8F2E3-577C-4A57-B70A-AF3B6F42745E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.01:*:*:*:*:*:*:*","matchCriteriaId":"2A2B9909-67E2-496A-BA72-8A52C9A28CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.02:*:*:*:*:*:*:*","matchCriteriaId":"CEBB8734-733D-4B63-9C99-FDBD681CBA94"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.03:*:*:*:*:*:*:*","matchCriteriaId":"477567A2-3C3F-46A2-865C-36DE7E7B8E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.21.04:*:*:*:*:*:*:*","matchCriteriaId":"08CDB46B-ABC0-4ABA-8D0A-9CFF0139359D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.22:*:*:*:*:*:*:*","matchCriteriaId":"4054A3EE-8D3F-47B5-A92C-58D49B7C4DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.22.01:*:*:*:*:*:*:*","matchCriteriaId":"8552BACC-B0D4-4BF2-82EF-241A7A1725CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.22.02:*:*:*:*:*:*:*","matchCriteriaId":"A6D76CB5-C808-40B2-AD9B-4F62412B4EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.23:*:*:*:*:*:*:*","matchCriteriaId":"23FDEC56-D1A9-46FF-9819-38E1264EC706"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.24:*:*:*:*:*:*:*","matchCriteriaId":"C766094E-99A3-4844-86C0-FE24748FEB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.24.01:*:*:*:*:*:*:*","matchCriteriaId":"3D9AE3D9-9744-472F-8269-6467A1E51986"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.24.02:*:*:*:*:*:*:*","matchCriteriaId":"908A9307-2020-4984-BD90-B202B462B388"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.25:*:*:*:*:*:*:*","matchCriteriaId":"8C613B75-DF83-4E98-9D34-9B0CEE40C5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.25.01:*:*:*:*:*:*:*","matchCriteriaId":"5B1154A2-F41D-4BDC-9ED8-0FD1FBCBFD5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.25.02:*:*:*:*:*:*:*","matchCriteriaId":"D29E0FBF-F6E1-4352-8EE3-7772AFBC1FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.26:*:*:*:*:*:*:*","matchCriteriaId":"E4175B57-4513-4AFC-9E01-49EB99811188"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.27:*:*:*:*:*:*:*","matchCriteriaId":"E5AE8FC0-BC89-4615-A45B-40697BA82884"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.28:*:*:*:*:*:*:*","matchCriteriaId":"591C04BC-A493-49A5-B50D-0028323F9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.28.01:*:*:*:*:*:*:*","matchCriteriaId":"1128DB6B-E007-4EC5-980D-2EB57FFA2207"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.29:*:*:*:*:*:*:*","matchCriteriaId":"AFBC1EAA-D3BB-42C6-A46B-97EAA12035D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30:*:*:*:*:*:*:*","matchCriteriaId":"522FBEA4-456D-48B8-8F57-D0E0C7F64A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.01:*:*:*:*:*:*:*","matchCriteriaId":"A5D0B203-4E36-4B44-B3DC-6C8297D5A219"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.02:*:*:*:*:*:*:*","matchCriteriaId":"23ACE386-34BC-487C-AED2-98205D533466"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.03:*:*:*:*:*:*:*","matchCriteriaId":"6096EF9A-D8B9-4EA7-A8C0-B31212FD0222"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.30.04:*:*:*:*:*:*:*","matchCriteriaId":"6BE4A278-AF8B-4838-9B30-B17E61D4C4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.31.00:*:*:*:*:*:*:*","matchCriteriaId":"B050938B-092F-4D65-A0E4-DEC3984D7D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.00:*:*:*:*:*:*:*","matchCriteriaId":"F69BD985-3861-4ABB-91EE-F712BF045D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.01:*:*:*:*:*:*:*","matchCriteriaId":"A0480A36-1D98-4B84-AED7-0F325CAD9B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.02:*:*:*:*:*:*:*","matchCriteriaId":"75438538-6D0A-44C1-B6C5-BF592104B5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.03:*:*:*:*:*:*:*","matchCriteriaId":"6EEF4651-3E29-404C-808A-B4446C5F14E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.40.04:*:*:*:*:*:*:*","matchCriteriaId":"F5E9811A-E845-4241-A1D4-B0AF5A299DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.41.00:*:*:*:*:*:*:*","matchCriteriaId":"4C1B5D17-0CAC-45DE-BD74-3A34F765A609"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.42.00:*:*:*:*:*:*:*","matchCriteriaId":"BF3F133A-8118-44F8-A2BA-0CE0437B8460"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.43.00:*:*:*:*:*:*:*","matchCriteriaId":"D9147D46-80A5-4284-A219-52F59A2B8512"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.44.00:*:*:*:*:*:*:*","matchCriteriaId":"CF39DB9E-D32D-4905-A135-2D5038007F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.45.00:*:*:*:*:*:*:*","matchCriteriaId":"C03F7772-3FAC-4C11-8A81-248D0556E7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.45.01:*:*:*:*:*:*:*","matchCriteriaId":"9D7C828B-625A-4CF5-A3F9-209D7B1DD896"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.45.02:*:*:*:*:*:*:*","matchCriteriaId":"9FFD231B-8057-4FA3-BE48-84D6EA8DF72C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.46:*:*:*:*:*:*:*","matchCriteriaId":"5FEC070C-B2A4-4D10-90C1-89F8C1576C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.47:*:*:*:*:*:*:*","matchCriteriaId":"E4D57C3E-F2AF-47C6-836F-19761D55BD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.47.01:*:*:*:*:*:*:*","matchCriteriaId":"53F66197-CD50-4794-B200-532C23BC7732"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.48:*:*:*:*:*:*:*","matchCriteriaId":"8B421DA1-3C58-4224-AC1B-685DC0AB1368"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts:becky\\!_internet_mail:2.48.01:*:*:*:*:*:*:*","matchCriteriaId":"768CB429-EE2E-4E3C-9051-3C6528A60BE8"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN29641290/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000011.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rimarts.jp/downloads/B2/Readme-e.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33756","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48684","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN29641290/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rimarts.jp/downloads/B2/Readme-e.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0570","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en send.php en Ninja Designs Mailist v3.0, cuando está habilitado register_globals y deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar código de su elección utilizando los caracteres .. (punto punto) en el parámetro \"load\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ninjadesigns:mailist:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0A0BB590-4E8A-473F-95BE-0DEFE323630A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33648","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8001","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0571","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory."},{"lang":"es","value":"admin.php en Ninja Designs Mailist v3.0 almacena copias de seguridad de maillist.php en el directorio de publicación web con control de acceso insuficiente, permitiendo a atacantes remotos obtener información sensible mediante una petición directa al directorio de copia de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ninjadesigns:mailist:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0A0BB590-4E8A-473F-95BE-0DEFE323630A"}]}]}],"references":[{"url":"http://secunia.com/advisories/33682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8001","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0572","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the _FNROOTPATH parameter to (1) index.php and (2) filemanager.php."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en include/flatnux.php en FlatnuX CMS (conocido como Flatnuke3) v2009-01-27 y v2009-02-04, cuando está habilitado register_globals y deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"_FNROOTPATH\" en (1) index.php y en (2) filemanager.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flatnux:flatnux:2009-01-27:*:*:*:*:*:*:*","matchCriteriaId":"D31E7EEA-BA49-49F3-A5E9-4A69F6CB4824"},{"vulnerable":true,"criteria":"cpe:2.3:a:flatnux:flatnux:2009-02-04:*:*:*:*:*:*:*","matchCriteriaId":"7F0C2E60-399C-4B40-87DB-E4E7869D9BA5"}]}]}],"references":[{"url":"http://osvdb.org/51728","source":"cve@mitre.org"},{"url":"http://osvdb.org/51729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500663/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33599","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48491","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7969","source":"cve@mitre.org"},{"url":"http://osvdb.org/51728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500663/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0573","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FotoWeb 6.0 (Build 273) allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to cmdrequest/Login.fwx and the (2) search parameter to Grid.fwx."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en FotoWeb v6.0 (Build 273) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) \"cmdrequest/Login.fwx\" y el parámetro de búsqueda \"Grid.fwx\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fotoware:fotoweb:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6D34C83B-7C28-46A1-9030-C605C45B735D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fortconsult.net/images/pdf/advisories/FotoWebXSS_final.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33677","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fortconsult.net/images/pdf/advisories/FotoWebXSS_final.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0574","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Easy CafeEngine permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"catid\", siendo un vector diferente a CVE-2008-4604."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafeengine:easycafeengine:-:*:*:*:*:*:*:*","matchCriteriaId":"EAE289FD-2FEB-4009-8FDB-38E578FBB162"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0359","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0575","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función theme_views_bulk_operations_confirmation en views_bulk_operations.module en Views Bulk Operations v5.x anteriores a v5.x-1.3 y v6.x anteriores a v6.x-1.4, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados relacionados con los títulos de nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.2","matchCriteriaId":"C7F0262C-63AD-4DAA-B503-0CB6AA45F5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.3","matchCriteriaId":"2A585CB1-6A1E-4971-AB23-9D95F01824D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"035F7FAA-B762-4286-8C3A-C58BD8F6D1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"FD496BAC-CF8D-4912-81EA-7D36D63A2C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta3:*:*:*:*:*:*:*","matchCriteriaId":"3EBE086D-AC0D-4481-9C70-D7C267B06BDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta4:*:*:*:*:*:*:*","matchCriteriaId":"CECE38B8-F35F-4441-8755-6EA82312D539"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"CABEE05D-8BFC-4F2A-8799-730BCA68B9D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D635943-C525-437E-B8AB-BC33CC9651C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"17E73FE3-70F4-4C3C-BF4A-D0EDDE8466C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"B776606C-475E-48C6-9412-178CF6C1BA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"E68E59D7-F580-40F9-8F21-4E8E49C0A254"}]}]}],"references":[{"url":"http://drupal.org/node/369223","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51751","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33836","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33622","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48516","source":"cve@mitre.org"},{"url":"http://drupal.org/node/369223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/51751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0576","sourceIdentifier":"cve@mitre.org","published":"2009-02-13T17:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java System Directory Server 5.2 p6 and earlier, and Enterprise Edition 5, allows remote attackers to cause a denial of service (daemon crash) via crafted LDAP requests."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java System Directory Server v5.2 p6 y versiones anteriores, y Enterprise Edition v5, permite a atacantes remotos provocar una denegación de servicio (parada de demonio) mediante peticiones LDAP manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"FFB0BDAA-9E8F-46EA-AE76-25E10CA55490"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:5.0:-:enterprise:*:*:*:*:*","matchCriteriaId":"8EA36B7D-1506-4B50-B371-8CF16879A62D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116837-04-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250086-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33732","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0409","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116837-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250086-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0577","sourceIdentifier":"secalert@redhat.com","published":"2009-02-20T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2008-3640."},{"lang":"es","value":"Desbordamiento de entero en la funcion WriteProlog en texttops en CUPS v1.1.17 en Red Hat Enterprise Linux (RHEL) v3 lo que permite atacantes remotos ejecutar codigo a su eleccion a traves de un fichero PostScript manipulado que dispara un desbordamiento de bufer basado en monticulo. NOTA: Esto existe debido a un arreglo incompleto de CVE-2008-3640."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3:*:*:*:*:*:*:*","matchCriteriaId":"444EBE64-D3C8-41E9-8E02-22C6BDA2876B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33995","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-064.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0308.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=486052","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48977","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9968","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-064.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0308.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=486052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0578","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console."},{"lang":"es","value":"network-manager-applet en Ubuntu 8.10 no verifica adecuadamente los privilegios para las peticiones dbus(1) \"modify\" y (2) \"delete\", lo que permite a usuarios locales modificar o eliminar las conexiones de red de usuarios de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"ED67B852-4B37-4B79-8F4D-23B2FEACA4ED"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34067","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34473","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0361.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33966","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021909","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-727-1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487752","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49063","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-727-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0579","sourceIdentifier":"secalert@redhat.com","published":"2009-04-16T15:12:57.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified."},{"lang":"es","value":"Linux-PAM antes de v1.0.4 no aplica la edad mínima de la contraseña (MINDAYS), tal como se especifica en /etc/shadow, lo que permite a usuarios locales eludir la política de seguridad y cambiar sus contraseñas antes de lo especificado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of pam as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.  Only PAM versions 1.x were affected.","lastModified":"2009-04-16T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"6B4EF54C-CE7D-4CCE-ACF2-3810C7ABFEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B59C70C7-FABE-4A45-A45D-2C7276D698DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DBA50D8F-D5A8-4123-93CF-E7714571F411"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DB8820C0-1ECB-45AD-A573-5667F0D09776"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D416053-0010-4B25-9F7C-6054C51C1685"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B97AB578-0E9E-4370-8379-0CD455F2D740"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.5.0:*:*:*:*:*:*:*","matchCriteriaId":"22A6147C-CC0A-4C9F-B9A9-E144F2133592"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6DEF8EC8-0E0A-4C0A-95BE-FB7C23732083"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C9A9AB1C-FDF8-4E98-8773-387E03CD93E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8F94AA92-5854-46B9-8B3C-08FCC5B071CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.3:*:*:*:*:*:*:*","matchCriteriaId":"FD5C0039-827C-45CD-99BE-95459006CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F4256C34-DBCA-4FE0-96A5-874D7F00869A"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1B2613D2-33C1-4132-AD9A-68190A59C0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.8.0:*:*:*:*:*:*:*","matchCriteriaId":"08FDE78F-119B-4FC8-BBFA-8048F2CF1227"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C4A75789-F7EC-4D9C-942A-243DF92E5CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.9.0:*:*:*:*:*:*:*","matchCriteriaId":"3753027E-D3A4-45D4-A3A3-2320C48AF6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.10.0:*:*:*:*:*:*:*","matchCriteriaId":"6533A629-6351-4831-BBF7-44718262FAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"516F23F9-25B3-40DB-A3CA-2F1DE0678934"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3ACA7F-D247-439C-8B5E-287EC5D236AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6A30E5C3-501D-4DAA-B7F7-E42F98DEDBF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AEC8C86C-9FC7-4838-BFD8-90431DEC4946"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514437","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34728","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34733","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487216","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/pam-list/2009-March/msg00006.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/pam-list/2009-March/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0580","sourceIdentifier":"secalert@redhat.com","published":"2009-06-05T16:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter."},{"lang":"es","value":"Apache Tomcat v4.1.0 hasta v4.1.39, v5.5.0 hasta v5.5.27, y v6.0.0 hasta v6.0.18, cuando se utiliza autenticación FORM, permite a atacantes remotos enumerar nombres de usuarios válidos a través de una solicitud a /j_security_check con codificación malformada de URL de contraseñas. Está relacionado con una comprobación de errores incorrecta en los entornos de autenticación (1) MemoryRealm, (2) DataSourceRealm y (3) JDBCRealm; como se ha demostrado con un valor % (porcentaje) en el parámetro j_password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*","matchCriteriaId":"6EF54C08-5FF1-4D02-AA16-B13096BD566C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*","matchCriteriaId":"D8F3B31D-8974-4016-ACAF-E7A917C99F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35326","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35344","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35788","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42368","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022332","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?rev=747840&view=rev","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=781379&view=rev","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=781382&view=rev","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504045/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504108/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504125/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35196","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1496","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50930","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18915","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6628","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9101","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?rev=747840&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=781379&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=781382&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504108/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504125/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0581","sourceIdentifier":"secalert@redhat.com","published":"2009-03-23T14:19:12.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file."},{"lang":"es","value":"Fuga de memoria en versiones de LittleCMS (alias LCMS o liblcms) anteriores a la 1.18beta2, tal como se utiliza en Firefox 3.1beta, OpenJDK, y el GIMP, permite causar, a atacantes dependientes de contexto, una denegación de servicio (mediante consumo de memoria y caida de la aplicación) a través de un archivo de imagen debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.17","matchCriteriaId":"5DAF1951-51CA-4FCC-94EE-3713860D6598"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.2","matchCriteriaId":"28CB30F0-E3AF-490A-B05B-0947A2BF717B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*","matchCriteriaId":"0F72BFD4-000D-4B07-8261-C9F6839AD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*","versionEndIncluding":"7","matchCriteriaId":"3FEAB217-572E-4BBB-8C01-C2517DCD99F9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-003.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34367","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34382","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34400","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34408","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34442","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34450","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34454","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34463","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34632","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34675","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34782","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1745","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2009-003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0339.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502018/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502031/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34185","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021870","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-744-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0775","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487509","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49328","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10023","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502031/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-744-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0582","sourceIdentifier":"secalert@redhat.com","published":"2009-03-14T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data."},{"lang":"es","value":"La función ntlm_challenge en el mecanismo de autenticación NTLM SASL de camel/camel-sasl-ntlm.c en Camel en Evolution Data Server (alias evolution-data-server) 2.24.5 y anteriores, and 2.25.92 and earlier 2.25.x , no valida si cierto valor de longitud es coherente con la cantidad de datos almacenados en el paquete del desafío, lo cual permite leer, a los servidores de correo remotos, información de la memoria del proceso de un cliente, o provocar una denegación de servicio (con caida del cliente), a través de una autenticación NTLM autenticación de tipo 2 con un valor de longitud del paquete que supera la cantidad de paquetes de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution-data-server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.24.5","matchCriteriaId":"51DF09C1-FDF2-4994-819B-5A8F860D8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution-data-server:2.25.92:*:*:*:*:*:*:*","matchCriteriaId":"3F72D458-22D6-48FF-8E65-0131EC962FD5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://mail.gnome.org/archives/release-team/2009-March/msg00096.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/52673","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34286","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34338","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34339","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34348","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34363","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35357","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021845","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1813","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:078","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0354.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0355.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0358.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34109","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0716","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487685","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49233","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10081","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.gnome.org/archives/release-team/2009-March/msg00096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0354.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0355.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0583","sourceIdentifier":"secalert@redhat.com","published":"2009-03-23T20:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain \"native color space,\" related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images."},{"lang":"es","value":"Múltiples desbordamientos de enteros en icc.c en la libreria de formatos (alias icclib) del International Color Consortium (ICC), tal como se utiliza en Ghostscript 8.64 y anteriores y Argyll Color Management System (CMS) 1.0.3 y anteriores, permiten causar una denegación de servicio (con desbordamiento de búfer basado en pila y caída de la aplicación) a atacantes dependientes de contexto y posiblemente ejecutar código arbitrario por medio de un fichero de dispositivo para una solicitud de traducción que opera en un archivo de imagen creado y se dirige a un determinado \"espacio de color nativo\", en relación con un perfil ICC en un (1) PostScript o (2) archivo PDF con imágenes incrustadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"8.64","matchCriteriaId":"06B00D31-6A9C-44C2-AF0F-36F91CADCF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*","matchCriteriaId":"A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.05:*:*:*:*:*:*:*","matchCriteriaId":"A9ECC8F7-93FD-427D-8395-F1B025CA4322"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*","matchCriteriaId":"E63082C3-15B6-4DD8-8818-BFD61B054B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9877DC36-5151-43C9-864D-BE7939A0304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*","matchCriteriaId":"1F9F0F0A-E413-42CC-B67D-434EC6A92543"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*","matchCriteriaId":"491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*","matchCriteriaId":"9DA7298B-2552-45DF-AE6B-FC71ACF623E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*","matchCriteriaId":"87A234A3-5FF9-4567-A731-3FFCD1965C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*","matchCriteriaId":"B2916811-2ABD-4CC4-829B-AE805BA1BC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*","matchCriteriaId":"265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*","matchCriteriaId":"755FCEC1-E1DD-42BC-9606-17217DB69128"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.63:*:*:*:*:*:*:*","matchCriteriaId":"C8C3057C-9207-4BCD-88D4-625BE0EFAE85"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"E0589F5F-9A14-4664-96E2-D3AD5B1C4907"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87EEDC44-2DEB-4C76-9B28-322093F2F8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"ECC777BB-79B6-41F4-8756-E53630198D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8E685ACA-3C9C-4A65-BCE4-3D4F663C938E"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56941499-5BD0-4222-AD6C-D36DA165A02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"746233CB-AC91-404E-9763-797AD1DCAF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"787A9326-05FB-4766-A8F5-06C31763D2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*","matchCriteriaId":"90A92F2B-E055-4FBF-BE3F-E115590F2685"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0E228BF5-1FD4-4507-8451-82975E209FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6D1C3135-314E-48F7-A2A3-FC7FF071D1F1"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=261087","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34266","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34373","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34381","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34393","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34398","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34437","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34443","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34469","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35559","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35569","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021868","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=10666","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2009/dsa-1746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0345.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501994/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34184","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-743-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0776","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0777","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0816","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487742","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49329","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2991","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10795","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/757-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=261087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=10666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2009/dsa-1746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0345.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501994/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-743-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/757-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0584","sourceIdentifier":"secalert@redhat.com","published":"2009-03-23T20:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images."},{"lang":"es","value":"icc.c, perteneciente a la librería de formatos del International Color Consortium (ICC) (alias icclib), tal y como se utiliza en Ghostscript 8.64 y anteriores y Argyll Color Management System (CMS) 1.0.3 y anteriores, permite causar una denegación de servicio (con caída de la aplicación) a atacantes dependientes de contexto, o posiblemente ejecutar código arbitrario por medio de un fichero de dispositivo diseñado para procesar archivos de imagen con modificaciones relacionadas con valores enteros grandes para  determinados tamaños, en relación con un perfil ICC en un (1) PostScript o (2) un archivo PDF con imágenes incrustadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"E37C8B4A-24A1-420A-A82F-190B3D343C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"8.64","matchCriteriaId":"06B00D31-6A9C-44C2-AF0F-36F91CADCF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:0:*:*:*:*:*:*:*","matchCriteriaId":"6E68242D-465A-443F-9D25-BE57F9080394"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*","matchCriteriaId":"A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.05:*:*:*:*:*:*:*","matchCriteriaId":"A9ECC8F7-93FD-427D-8395-F1B025CA4322"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*","matchCriteriaId":"E63082C3-15B6-4DD8-8818-BFD61B054B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9877DC36-5151-43C9-864D-BE7939A0304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*","matchCriteriaId":"1F9F0F0A-E413-42CC-B67D-434EC6A92543"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*","matchCriteriaId":"491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*","matchCriteriaId":"9DA7298B-2552-45DF-AE6B-FC71ACF623E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*","matchCriteriaId":"87A234A3-5FF9-4567-A731-3FFCD1965C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*","matchCriteriaId":"B2916811-2ABD-4CC4-829B-AE805BA1BC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.60:*:*:*:*:*:*:*","matchCriteriaId":"7B283683-D924-4C69-87F3-355ECC0DBA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*","matchCriteriaId":"265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=261087","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/52988","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34266","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34373","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34381","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34393","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34398","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34437","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34443","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34469","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35559","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35569","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021868","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050","source":"secalert@redhat.com"},{"url":"http://www.auscert.org.au/render.html?it=10666","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2009/dsa-1746","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0345.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501994/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34184","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-743-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0776","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0777","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0816","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487744","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49327","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2991","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10544","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/757-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=261087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=10666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2009/dsa-1746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0345.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501994/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-743-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/757-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0585","sourceIdentifier":"secalert@redhat.com","published":"2009-03-14T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation."},{"lang":"es","value":"Un desbordamiento de entero en la función soup_base64_encode en sopa-misc.c en libsoup 2.x.x antes de 2.2.x, y 2.x antes de 2.24, permite a atacantes dependientes del contexto ejecutar código arbitrario a través de una cadena demasiado larga que se convierte en una representación en base64."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_shaw:libsoup:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2012D764-04DA-4E15-930C-9DAB867E0F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_shaw:libsoup:2.23.1:*:*:*:*:*:*:*","matchCriteriaId":"54B733A8-F7B9-4E49-9FA0-14F1B7E56446"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_shaw:libsoup:2.23.6:*:*:*:*:*:*:*","matchCriteriaId":"6723F3C8-8FD9-4F55-9022-32F577E847EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_shaw:libsoup:2.23.91:*:*:*:*:*:*:*","matchCriteriaId":"AD389C2E-BDD2-4502-A2A7-C0984E6958A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_shaw:libsoup:2.23.92:*:*:*:*:*:*:*","matchCriteriaId":"D7873F3C-043A-4699-B00A-5224CAD0A509"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34310","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34337","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34401","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1748","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:081","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0344.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34100","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-737-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49273","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9599","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0344.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-737-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0586","sourceIdentifier":"secalert@redhat.com","published":"2009-03-14T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en la función gst_vorbis_tag_add_coverart (archivo gst-libs/gst/tag/gstvorbistag.c) en vorbistag en gst-plugins-base (se conoce como gstreamer-plugins-base) anterior a versión 0.10.23 en GStreamer, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de una etiqueta COVERART diseñada que es convertida desde una representación base64, lo que desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.23","matchCriteriaId":"7E210088-EDDF-414A-80D6-3F59E90C85BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34335","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34350","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35777","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:085","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34100","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-735-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49274","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-735-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0587","sourceIdentifier":"secalert@redhat.com","published":"2009-03-14T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel."},{"lang":"es","value":"Múltiples desbordamientos de enteros en Evolution Data Server (alias Evolution-Data-Server) antes de la version 2.24.5 permiten a atacantes dependientes de contexto ejecutar código arbitrario a través de una cadena demasiado larga que es convertida en una representación en base64 en (1)  addressbook/libebook/e-vcard.c en evc o (2) camel/camel-mime-utils.c en libcamel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:go-evolution:evolution-data-server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.24.4","matchCriteriaId":"9B278F29-E26D-4C8C-9C79-A2820F6F1E45"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"secalert@redhat.com"},{"url":"http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://osvdb.org/52702","source":"secalert@redhat.com"},{"url":"http://osvdb.org/52703","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34338","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34339","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34348","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34351","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35357","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1813","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:078","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0354.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0355.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0358.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34100","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-733-1","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11385","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://openwall.com/lists/oss-security/2009/03/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/52702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0354.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0355.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501712/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-733-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0588","sourceIdentifier":"secalert@redhat.com","published":"2009-05-27T16:30:01.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field."},{"lang":"es","value":"agent/request/op.cgi en el componente Registration Authority (RA) en Red Hat Certificate System (RHCS) 7.3 y Dogtag Certificate System permiten a atacantes remotos autenticados aprobar peticiones de certificado en cola para grupos de agentes de su elección mediante una petición de campo ID modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*","matchCriteriaId":"E2654E6A-190C-4D5C-ABC0-89011DD8E293"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*","matchCriteriaId":"06D606EF-447B-42C5-ADBE-14515257262B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35242","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35263","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1065.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35104","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022278","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484828","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488706","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=484828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0589","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:11.360","lastModified":"2023-11-07T02:03:40.640","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0590","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T16:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length."},{"lang":"es","value":"La función ASN1_STRING_print_ex en OpenSSL versiones anteriores a v0.9.8k permite a atacantes remotos provocar una denegación de servicio (acceso inválido a memoria y caída de la aplicación) mediante vectores que provocan la impresión de (1) BMPString o (2) UniversalString con una longitud de codificación inválida."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was fixed in openssl packages in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nThis issue was fixed in openssl packages in Red Hat Enterprise Linux 3 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0163.html","lastModified":"2010-03-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8k","matchCriteriaId":"B334F9E9-BA5E-48D3-8461-A417DCF24E46"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34411","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34509","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34561","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34896","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34960","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35181","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021905","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0057","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1763","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:087","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52864","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502429/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34256","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-750-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1220","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49431","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502429/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-750-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0591","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T16:30:01.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid."},{"lang":"es","value":"La función CMS_verify en OpenSSL v0.9.8h hasta v0.9.8j, cuando se ha habilitado CMS, no maneja adecuadamente los errores asociados con atributos firmados malformados, permitiendo a atacantes remotos rechazar una firma que originalmente aparentaba ser válida pero que realmente será inválida."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue affected OpenSSL CMS functionality which is not present in the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.","lastModified":"2009-03-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34411","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35380","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021907","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52865","source":"secalert@redhat.com"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34256","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49432","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0592","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ModName parameter to (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, and (6) admin_users.php in admin/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en PNphpBB2 1.2i y anteriores permiten a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro ModName de (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, y (6) admin_users.php en admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2i","matchCriteriaId":"2D6E1E24-71C9-48E1-B656-DB49BBF6A887"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2E55E0-6CDD-4FB2-9ADB-3A43628FF702"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"992AA511-3570-4748-82A6-EAAA3731238D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"45054E12-C43A-4AB6-AB67-BE35476AAC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E540782B-0470-4C67-92A5-7B86BA76028C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"983A4BDA-616F-4951-A3C6-6B82F1BEAE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2d:*:*:*:*:*:*:*","matchCriteriaId":"721E2C38-55B7-44B1-AA66-BCE5CFB73003"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2e:*:*:*:*:*:*:*","matchCriteriaId":"3167741F-40E9-47FE-860A-A5DB2FEA8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2f:*:*:*:*:*:*:*","matchCriteriaId":"FE7CFBC2-13AF-4CE6-9736-4ED74008277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2g:*:*:*:*:*:*:*","matchCriteriaId":"346F29D0-8F6B-4263-91E5-60E8B3AF76A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pnphpbb:pnphpbb2:1.2h:rc3b:*:*:*:*:*:*","matchCriteriaId":"16F3AFD4-0E91-4AC1-9C9A-1D4754704BAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/33365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33103","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7658","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0593","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en members.php de plx Auto Reminder v3.7 permite a atacantes autenticados remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"newar\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plxwebdev:plx_auto_reminder:3.7:*:*:*:*:*:*:*","matchCriteriaId":"B7107BCB-6980-45B2-981D-4A980CA74306"}]}]}],"references":[{"url":"http://secunia.com/advisories/33283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33106","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0594","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:04.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Una vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en phpSkelSite 1.4 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del campo PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apmuthu:phpskelsite:1.4:*:*:*:*:*:*:*","matchCriteriaId":"64D6923A-045E-4DCC-BF50-E168A1F1EFDF"}]}]}],"references":[{"url":"http://secunia.com/advisories/33382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0595","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:05.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en skysilver/login.tpl.php de phpSkelSite v1.4, cuando \r\nestá habilitado register_globals y deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"theme\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpskelsite:phpskelsite:1.4:*:*:*:*:*:*:*","matchCriteriaId":"196FCA34-C7EE-4285-9A17-A2E57D15504B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0596","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:05.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en skysilver/login.tpl.php en phpSkelSite 1.4, cuando register_globals está activado, permite a atacantes remotos incluir y ejecutar archivos locales a través de secuencias de salto de directorio en el parámetro TplSuffix."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpskelsite:phpskelsite:1.4:*:*:*:*:*:*:*","matchCriteriaId":"196FCA34-C7EE-4285-9A17-A2E57D15504B"}]}]}],"references":[{"url":"http://secunia.com/advisories/33382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7648","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0597","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:05.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in w3b>cms (aka w3blabor CMS) before 3.4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter (aka Username field) in a login action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en admin/index.php en w3b>cms (alias w3blabor CMS) en las versiones anteriores a la 3.4.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro Benutzername (alias campo Nombre de usuario) en una acción de inicio de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3b_cms:aka_w3blabor_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.0","matchCriteriaId":"CD417EFE-155B-4163-B6E9-8D4BF03CCF80"}]}]}],"references":[{"url":"http://forum.w3bcms.de/viewtopic.php?f=5&t=256","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51108","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33082","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/7640","source":"cve@mitre.org"},{"url":"http://forum.w3bcms.de/viewtopic.php?f=5&t=256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/7640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0598","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T17:30:05.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en PhpMesFilms 1.0 y 1.8 permite a atacantes remotos ejecutar comandos SQL a través del parámetro Id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmesfilms:phpmesfilms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"814A1EA2-3A1B-4484-BB55-90C195F5F905"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmesfilms:phpmesfilms:1.8:*:*:*:*:*:*:*","matchCriteriaId":"C3967282-DD50-42AF-998F-40347F792DE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33105","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0599","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file."},{"lang":"es","value":"Desbordamiento de búfer en wiretap/netscreen.c en Wireshark v0.99.7 hasta v1.0.5 permite a usuarios remotos asistidos por usuarios locales, provocar una denegación de servicio (caída de la aplicación) a través de un fichero snoop NetScreen mal formado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34264","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34344","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0040","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501763/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33690","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021697","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0370","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2984","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501763/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0600","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T20:30:03.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame."},{"lang":"es","value":"Wireshark 0.99.6 a 1.0.5 permite causar, a atacantes remotos con la ayuda de usuarios, una denegación de servicio (con cuelgue de la aplicación) a través de un fichero de captura Tektronix K12 debidamente modificado, como lo demuestra un archivo con un solo marco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34264","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34344","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0040","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501763/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33690","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021697","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0370","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2984","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501763/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0601","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T20:30:03.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per http://www.vupen.com/english/advisories/2009/0370:\n\n\"Multiple vulnerabilities have been identified in Wireshark, which could be exploited by local or remote attackers to cause a denial of service or compromise a vulnerable system.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable."},{"lang":"es","value":"Una vulnerabilidad de formato de cadena en Wireshark 0.99.8 a 1.0.5 sobre plataformas No-Windows permite a usuarios locales provocar una denegación de servicio (con cuelgue de la aplicacion) a través de especificadores de formato de cadena en la variable de entorno HOME."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0601#c3","lastModified":"2009-02-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","matchCriteriaId":"D9EC02F3-3905-460D-8949-3B26394215CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34264","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0040","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501763/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33690","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021697","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0370","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2984","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501763/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0602","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T20:30:03.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/."},{"lang":"es","value":"Vulnerabilidad de actualización de archivo  en upload.php de WikkiTikkiTavi v1.11, permite a atacantes ejecutar código de su elección subiendo un fichero con una extención ejecutable, entonces puede acceder a él a través de una petición directa al fichero en img/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikkitikkitavi:wikkitikkitavi:1.11:*:*:*:*:*:*:*","matchCriteriaId":"EF62676F-9541-49EE-B84B-5729B6A74508"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33647","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48571","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0603","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T20:30:03.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with \"administer content types\" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en index.php en el módulo Link 5.x-2.5 para Drupal 5.10 permite inyectar, a los usuarios remotos autenticados (con privilegios para \"administrar los tipos de contenido\"), HTML o scripts Web arbitrarios a través del parámetro descripción (alias el campo Help). NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:link_module:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"57D8F935-7197-4E70-884B-DD7021DF3EB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0036.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/51780","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33835","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33642","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48553","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/51780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0604","sourceIdentifier":"cve@mitre.org","published":"2009-02-16T20:30:03.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en PHP Director 0.21 y anteriores permite a atacantes remotos ejecutar comandos SQL a través del parámetro de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_director:php_director:*:*:*:*:*:*:*:*","versionEndIncluding":"0.21","matchCriteriaId":"A27E0102-ACFA-404A-ADD2-F80469ED5B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_director:php_director:0.2:*:*:*:*:*:*:*","matchCriteriaId":"267D9358-5381-4B6B-9CB6-3F3DA277E5BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33694","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0379","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0605","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.5 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via unspecified vectors that trigger page faults on a machine that has a registered Kprobes probe."},{"lang":"es","value":"Vulnerabilidad de agotamiento de pila en la función do_page_fault en arch/x86/mm/fault.c en el kernel de Linux anterior a v2.6.28.5 permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) o posiblemente obtener privilegios a través de vectores no especificados que lanza fallos de página en la máquina que ha registrado una prueba Kprobes."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5, or Red Hat Enterprise MRG.","lastModified":"2009-02-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.4","matchCriteriaId":"8326D9A2-64BB-4386-997C-17DC46C7242D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=9be260a646bf76fa418ee519afa10196b3164681","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33758","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=9be260a646bf76fa418ee519afa10196b3164681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0606","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The link_image function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone does not properly handle file descriptors 0, 1, and 2 for a setgid program, which allows local users to create arbitrary files owned by certain groups, possibly a related issue to CVE-2002-0820."},{"lang":"es","value":"La función link_image en linker/linker.c en the dynamic linker en Bionic en Open Handset Alliance Android v1.0 en el teléfono T-Mobile G1 no maneja adecuadamente los descriptores de fichero 0,1 y 2 para un programa setgid, lo que permite a usuarios locales crear ficheros de su elección que pertenecen a ciertos grupos, posiblemente es un caso relacionado con CVE-2002-0820."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openhandsetalliance:android_sdk:1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B47286-20C6-4580-B6B4-45A61E395D47"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500753/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33695","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48840","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500753/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0607","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and attack vectors, related to the (1) chk_calloc and (2) leak_calloc functions."},{"lang":"es","value":"Múltiples desbordamientos de entero en malloc_leak.c en Bionic en Open Handset Alliance Android v1.0 tienen un impacto y vectores de ataque desconocidos, relacionado con las funciones (1)chk_calloc y (2)leak_calloc,"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openhandsetalliance:android_sdk:1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B47286-20C6-4580-B6B4-45A61E395D47"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500753/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33695","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500753/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0608","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:05.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines."},{"lang":"es","value":"Desbordamiento de entero en la función showLog en fake_log_device.c en liblog en Open Handset Alliance Android v1.0 permite a atacantes provocar un desbordamiento de búfer y posiblemente tener otro impacto no especificado mediante el envío de de un gran número de líneas de entrada.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:android:android_sdk:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8E446CC-9C57-430D-A1B0-B6DC7E1D9635"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500753/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33695","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500753/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0609","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:06.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests."},{"lang":"es","value":"Sun Java System Directory Proxy Server en Sun Java System Directory Server Enterprise Edition v6.0 hasta v6.3, cuando una fuente de datos JDBC es utilizado, no se maneja adecuadamente (1) un valor largo en un ADD o (2) atributos de cadena largos, lo que permite a atacantes remotos provocar una denegación de servicio (JDBC backend outage) a través de peticiones manipulada LDAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.0:enterprise:*:*:*:*:*:*","matchCriteriaId":"3F302F27-68F5-4B92-8579-8568B13D849C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*","matchCriteriaId":"C8490D6F-42B3-4602-84A5-BBDD4315F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*","matchCriteriaId":"1FE986BB-D278-4B34-9DC1-5D3102F94AF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0610","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:06.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the (1) title or (2) date parameter, and then execute the code via a direct request to display.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de inyección de código estático en post.php en Simple PHP News v1.0 final permite a atacantes remotos inyectar código PHP de su elección dentro de news.txt a través de (1) title o (2) parámetro \"date\". y entonces ejecutar el código a través de una petición directa a display.php. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dminnich:simple_php_news:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43ECAF21-1F05-4D68-A261-12A1B578F51C"}]}]}],"references":[{"url":"http://osvdb.org/51816","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0611","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:06.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite action, the site parameter in a (2) generalproperties or (3) clusterserviceproperties action, (4) the adminurl parameter in a global action, or (5) the print-list parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en qfsearch/AdminServlet en QuickFinder Server en Novell Open Enterprise Server v1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro \"siteloc\" en un acción displayaddsite, el parámetro \"site\" en (2)generalproperties o (3)acción clusterserviceproperties, (4) el parámetro \"adminurl\" en una acción global, o (5) el parámetro \"print-list\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:open_enterprise_server:1.x:*:*:*:*:*:*:*","matchCriteriaId":"244685A2-31AA-4833-B57F-665A6F4142E8"}]}]}],"references":[{"url":"http://osvdb.org/51941","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0902-exploits/nqfs-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33886","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33708","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021695","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0421","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48619","source":"cve@mitre.org"},{"url":"http://osvdb.org/51941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0902-exploits/nqfs-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0612","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:06.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header."},{"lang":"es","value":"Trend Micro InterScan Web Security Virtual Appliance (IWSVA) v3.x e InterScan Web Security Suite (IWSS) v3.x, cuando la autorización básica está habilitada sobre el proxy independiente, reenvía la cabecera de autorización del proxy desde Windows Media Player, lo que permite a servidores Web remotos obtener credenciales ofreciendo una secuencia \"media\" y capturando esta cabecera."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:interscan_web_security_suite:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8BC79C75-0540-491C-BD74-DE305CB32EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:interscan_web_security_suite:3.1:*:*:*:*:*:*:*","matchCriteriaId":"02441701-20A1-4600-8E02-71069147BB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D189E876-B64F-4C33-978C-AE502CD9F675"}]}]}],"references":[{"url":"http://secunia.com/advisories/33891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500760/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33687","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021716","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48681","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500760/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0613","sourceIdentifier":"cve@mitre.org","published":"2009-02-17T17:30:06.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify the system configuration, via requests to unspecified JSP pages."},{"lang":"es","value":"Trend Micro InterScan Web Security Suite (IWSS) v3.1 anterior a build v1237 permite a usuarios  Auditor and Report Only autenticados remotamente evitar las configuraciones de permisos previstas, y modificar la configuración del sistema, a través de peticiones a páginas JSP sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:interscan_web_security_suite:3.1:*:*:*:*:*:*:*","matchCriteriaId":"02441701-20A1-4600-8E02-71069147BB1F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33867","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021694","source":"cve@mitre.org"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0369","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trendmicro.com/ftp/documentation/readme/iwss_31_win_en_readme_CP_1237_EN.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0614","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL."},{"lang":"es","value":"Una vulnerabilidad no especificada en Cisco Unified MeetingPlace Web Conferencing Web 6.0 antes de 6.0(517.0) (alias 6.0 MR4) y 7.0 antes de 7.0 (2) (alias 7.0 MR1) permite a atacantes remotos eludir la autenticación y obtener acceso administrativo a través de una URL modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0\\(171\\)","versionEndExcluding":"6.0\\(517.0\\)","matchCriteriaId":"0F3658DA-A276-44AD-A3CB-E1CB86ED7F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_meetingplace_web_conferencing:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0\\(1\\)","versionEndExcluding":"7.0\\(2\\)","matchCriteriaId":"81EA2062-D903-4A88-B8D3-899221F69924"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33901","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48888","source":"psirt@cisco.com","tags":["VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0615","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to \"invalid directory permissions.\""},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Cisco Application Networking Manager (ANM) anterior a v2.0 y Application Control Engine (ACE) Device Manager anterior a vA3(2.1) permite a usuarios atenticados remotamente leer o modificar ficheros de su elección a através de vectores sin especificar relacionados con \"permisos de directorio inválido\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_control_engine_device_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"5D4DDB47-1E38-47B5-A77E-B967A0C11ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_control_engine_device_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9A02EE9C-8E93-409E-823A-08C8C9ADE002"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"2E917E6B-F744-49D3-8516-132C8684F3D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E427057-56BC-4E7C-8DBA-0388A6C81C87"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021770","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0616","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to \"default user credentials during installation.\""},{"lang":"es","value":"Cisco Application Networking Manager (ANM) en versiones anteriores a la 2.0 utiliza nombres de usuario y contraseñas por defecto, lo que facilita el acceso a los atacantes remotos a la aplicacion, o causar una denegación de servicio a través de cambios de configuración. Se trata de un asunto relacionado con \"las credenciales de usuario por defecto durante la instalación.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"2E917E6B-F744-49D3-8516-132C8684F3D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E427057-56BC-4E7C-8DBA-0388A6C81C87"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021771","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0617","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files."},{"lang":"es","value":"Cisco Application Networking Manager (ANM) anteriores a v2.0 utiliza una contraseña por defecto para el directorio raíz MySQL, el cual hace más fácil para atacantes remotos ejecutar arbitrariamente comandos del sistema operativo o cambiar archivos del sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"2E917E6B-F744-49D3-8516-132C8684F3D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E427057-56BC-4E7C-8DBA-0388A6C81C87"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021771","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0618","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service (service outage) by stopping processes, or obtain sensitive information by reading configuration files."},{"lang":"es","value":"Vulnerabilidad no especificada en el agente Java de Cisco Application Networking Manager (ANM) anterior a 2.0 Actualización A, permite a atacantes remotos obtener privilegios y provocar una denegación de servicio -parada del servicio- deteniendo procesos, u obteniendo información sensible leyendo los ficheros de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"35411333-C72A-47B8-8109-5BA29795C1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E427057-56BC-4E7C-8DBA-0388A6C81C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_networking_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"888608EE-2818-4F72-8690-E8595B320872"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021772","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0619","sourceIdentifier":"psirt@cisco.com","published":"2009-03-05T02:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600 series routers allows remote attackers to cause a denial of service (SBC card reload) via crafted packets to TCP port 2000."},{"lang":"es","value":"Vulnerabilidad sin especificar en Session Border Controller (SBC) anterior a v3.0(2) para el router Cisco serie 7600, permite a atacantes remotos provocar una denegación de servicio (recarga de tarjeta SBC) a través de paquetes TCP manipulados dirigidos al puerto 2000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:session_border_controller:3.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"EF30BB8E-6697-4B6C-9BC8-A2019C3AC8BB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:session_border_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"E73F34D9-ECD9-46AE-B3FE-681990A9EE25"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a80faa.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33975","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021787","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49055","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a80faa.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0620","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the administrator and (b) web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access."},{"lang":"es","value":"El módulo Cisco ACE Application Control Engine para los Switches Catalyst 6500 y Routers 7600 en versiones anteriores a la A2 (1.1) utiliza  (1) nombres de usuario por defecto y (2) contraseñas por defecto para (a) el administrador y (b) la gestión de la web, lo que facilita a los atacantes remotos realizar cambios de configuración u obtener acceso al sistema operativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst:6500:*:*:*:*:*:*:*","matchCriteriaId":"712DA93A-13CE-4E27-84FC-D2ECEEFFD568"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst:7600:*:*:*:*:*:*:*","matchCriteriaId":"521A4FD3-18E3-4937-A6AD-F7BDB3DB08ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_control_engine_module:*:*:*:*:*:*:*:*","versionEndIncluding":"0","matchCriteriaId":"D85B8F79-9113-4AEB-8536-FEFAB06ADF2F"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0621","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access."},{"lang":"es","value":"Cisco ACE 4710 Application Control Engine Appliance anterior a vA1(8a) utiliza por defecto (1) nombre de usuario y (2) contraseñas para (a) el administrador (b) gestión Web y (c) gestión de dispositivos, lo que permite fácilmente a los atacantes remotos realizar cambios de configuración, la gestión de los dispositivos y otros componentes, o obtener acceso al sistema operativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","matchCriteriaId":"DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0622","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml\r\n\r\nCisco ACE module software can be downloaded from:\r\n\r\nhttp://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=280557289\r\n\r\nCisco ACE 4710 Application Control Engine appliance software can be downloaded from:\r\n\r\nhttp://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=281222179","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8a) allows remote authenticated users to execute arbitrary operating-system commands through a command line interface (CLI)."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco ACE Application Control Engine Module para Catalyst 6500 Switches y 7600 Routers anterior a A2(1.2) y Cisco ACE 4710 Application Control Engine Appliance anterior a A1(8a), permite a usuarios autenticados en remoto ejecutar comandos de su elección del sistema-operativo a través de una interfaz de línea de comandos (CLI)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"F61AD2BC-FAE6-40F3-B872-964FD4CEE39E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2258512F-36CD-48FF-AAB3-32D6A63959D7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D63186-5834-448C-98F2-0C189A11D25D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","matchCriteriaId":"DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0623","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a crafted SSH packet."},{"lang":"es","value":"Vulnerabilidad no especificada en \"Cisco ACE Application Control Engine Module\" para Catalyst 6500 Switches y 7600 Routers anteriores A2(1.3) y Cisco ACE 4710 Application Control Engine Appliance anteriores a A3(2.1) que permite a los atacantes remotos causar una denegación de servicio (reinicio del dispositivo) a través de un paquete SSH manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","versionEndIncluding":"a3\\(2.0\\)","matchCriteriaId":"EE398278-79E8-4043-9ED3-735775213587"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:a3\\(1.0\\):*:*:*:*:*:*:*","matchCriteriaId":"8F3BDA08-1786-46AD-93B3-C374BE1AC949"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*","versionEndIncluding":"a2\\(1.2\\)","matchCriteriaId":"19E93539-6D77-4D1E-BF77-C35EE2170D4B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:a2\\(1.1\\):*:*:*:*:*:*:*","matchCriteriaId":"C5EDC4AB-2D1B-4233-A260-9D5521057F09"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst:6500:*:*:*:*:*:*:*","matchCriteriaId":"712DA93A-13CE-4E27-84FC-D2ECEEFFD568"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst:7600:*:*:*:*:*:*:*","matchCriteriaId":"521A4FD3-18E3-4937-A6AD-F7BDB3DB08ED"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0624","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml\r\n\r\n\"Note: SNMPv2c must be explicitly configured in an affected device in order to process any SNMPv2c transactions. SNMPv2c is not enabled by default.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a crafted SNMPv1 packet."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación SNMPv2c en Cisco ACE Application Control Engine Module para Catalyst 6500 Switches y 7600 Routers anteriores a A2(1.3) y Cisco ACE 4710 Application Control Engine Appliance anteior a A3(2.1); permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de un paquete SNMPv1 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"1B8CC891-D31C-44D2-BB76-F5ADE15D767C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2258512F-36CD-48FF-AAB3-32D6A63959D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A1331F98-6AB3-4285-BF6E-4DEAADE069D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D63186-5834-448C-98F2-0C189A11D25D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","versionEndIncluding":"a3\\(2.0\\)","matchCriteriaId":"EE398278-79E8-4043-9ED3-735775213587"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:a1\\(2.0\\):*:*:*:*:*:*:*","matchCriteriaId":"142B1472-4694-436F-85C0-52B6A9CFCA64"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:a1\\(8.0\\):*:*:*:*:*:*:*","matchCriteriaId":"A421567F-1772-46DC-9FBA-E0072DC6B7C6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:a3\\(1.0\\):*:*:*:*:*:*:*","matchCriteriaId":"8F3BDA08-1786-46AD-93B3-C374BE1AC949"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021769","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0625","sourceIdentifier":"psirt@cisco.com","published":"2009-02-26T16:17:20.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8.0) allows remote attackers to cause a denial of service (device reload) via a crafted SNMPv3 packet."},{"lang":"es","value":"Vulnerabilidad no especificada en \"Cisco ACE  Application Control Engine Module\" para Switches Catalyst 6500 y routers anteriores A1(v1.2) y Cisco ACE 4710 \"Application Control Engine Appliance\" anteriores A1(8.0), permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un paquete SNMPv3 manipulada. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","versionEndIncluding":"a1\\(2.0\\)","matchCriteriaId":"6F0D8DA3-2B73-4DE7-933B-23C199B50BD9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*","versionEndIncluding":"a2\\(1.1\\)","matchCriteriaId":"8AF3BB9E-7AAE-4B04-B5A5-B61FE82AA94F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst:6500:*:*:*:*:*:*:*","matchCriteriaId":"712DA93A-13CE-4E27-84FC-D2ECEEFFD568"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst:7600:*:*:*:*:*:*:*","matchCriteriaId":"521A4FD3-18E3-4937-A6AD-F7BDB3DB08ED"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021769","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0626","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:01.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet."},{"lang":"es","value":"La funcionalidad SSLVPN en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (reinicio o cuelgue del dispositivo) mediante paquetes HTTPS manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021896","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34239","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49425","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0627","sourceIdentifier":"psirt@cisco.com","published":"2009-09-08T23:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service (crash) via an unspecified \"sequence of TCP packets\" related to \"TCP State manipulation,\" possibly related to separate attacks against CVE-2008-4609."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco NX-OS anterior a v4.0(1a)N2(1), cuando se ejecuta sobre plataformas Nexus 5000, permite a atacantes remotos provocar una denegación de servicio (caída) a través de \"una secuencia no especificada de paquetes TCP\", relacionadas con la \"manipulación del estado TCP\". Posiblemente relacionado con ataques distintos contra el CVE-2008-4609."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"1788D9DF-BA68-45B7-B669-A621C221485E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:nexus_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"FFB04F2B-04E2-4EB1-83BA-4F7537AF1099"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:nexus_7000:*:*:*:*:*:*:*:*","matchCriteriaId":"16DE0FB3-1DC2-4BA4-BD26-FF6E7C06EC11"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022847","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0628","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:01.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak."},{"lang":"es","value":"Fuga de memoria en la funcionalidad SSLVPN en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del dispositivo) mediante la conexión de una sesión SSL de forma anormal, precedida de una pérdida de bloque de control de transmisión (TCB)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*","matchCriteriaId":"95418AD2-FB85-4E20-B874-D82DDF88BC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*","matchCriteriaId":"D8FC7948-B922-486E-9E5F-069B930EB1E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*","matchCriteriaId":"475EABCF-7404-4B65-9B29-E35C7D673B47"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*","matchCriteriaId":"7D99C07D-4EE3-4057-8E76-3468C45B4A4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*","matchCriteriaId":"14D1B81D-95E4-4945-94F2-C36FD7C0DC55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*","matchCriteriaId":"372582DB-DAB8-4B57-A778-5E2BC35B8233"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*","matchCriteriaId":"452FF154-F6C0-4BC4-969E-1D49AA3CCE49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*","matchCriteriaId":"36CF94C8-D6FE-4229-86F4-AF503F950151"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*","matchCriteriaId":"3AB6C57C-8805-443F-8ACE-83DAA48878CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*","matchCriteriaId":"554C9611-55F1-40AF-9862-7E902D5CE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*","matchCriteriaId":"F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*","matchCriteriaId":"EEB0B55E-3579-4929-862F-C5FF9F796AE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*","matchCriteriaId":"A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*","matchCriteriaId":"CBC11203-84FD-4F6C-8597-573FD784C68E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*","matchCriteriaId":"8E8E34D3-0BCB-4D19-A41C-0375941E1B21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*","matchCriteriaId":"0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*","matchCriteriaId":"39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*","matchCriteriaId":"5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*","matchCriteriaId":"A0515E7C-E3A5-44F4-866F-283E43AE8654"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*","matchCriteriaId":"1A74B4D0-939B-4FF1-9163-86FF64DB368E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*","matchCriteriaId":"09CBD68E-2A5C-43DF-9AD6-DE07815821B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*","matchCriteriaId":"463C3A96-F8B7-4117-8CB3-D15B44119AB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*","matchCriteriaId":"01393D91-ED1D-460D-8621-10260F0CBDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*","matchCriteriaId":"48ABA40D-DE49-4B20-AFA1-302EB93719FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*","matchCriteriaId":"8AB2FF53-5991-4264-B5CC-D1E45460BFCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*","matchCriteriaId":"0B0B18B6-FF50-48BE-8250-14E57FB73AE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*","matchCriteriaId":"1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*","matchCriteriaId":"0ED386B6-3C75-41C3-8206-9CBA14E20B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*","matchCriteriaId":"989581B0-FC28-457B-BDD2-72ED65BBE51E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*","matchCriteriaId":"EF8A8C95-2DC3-47AB-BED3-7D33902440C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*","matchCriteriaId":"B8920235-87C6-41D6-9497-CC12D18A6536"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*","matchCriteriaId":"9752CFFC-F1DA-4122-ACD8-79CB963F485F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*","matchCriteriaId":"7012F8E0-2256-448A-9C4D-E2DB5AB9852B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*","matchCriteriaId":"1BE94EA2-E0CC-4760-94A8-DE56C8181F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*","matchCriteriaId":"5B44691F-A47B-4953-BAC9-B2D43F4BCC06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*","matchCriteriaId":"8910F02B-DF61-443B-A4B5-2C0C04484519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*","matchCriteriaId":"929836AD-8128-4174-872D-B9638B54611C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*","matchCriteriaId":"045B4782-6CE2-40DD-A9F0-16E0C25768FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*","matchCriteriaId":"9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*","matchCriteriaId":"5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*","matchCriteriaId":"9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*","matchCriteriaId":"416B8D2F-0B11-4074-B6BD-2E97F79B5520"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*","matchCriteriaId":"5ED5B53D-930D-477E-A0F6-76167AE67641"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*","matchCriteriaId":"29B39978-3BD0-40A8-93AE-EF40042EB7CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*","matchCriteriaId":"84983F6A-64F6-4720-9291-FC84CA10EE25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*","matchCriteriaId":"4A2784C6-588A-4CAC-9362-515FB070D21E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*","matchCriteriaId":"93580300-6B1F-4D21-A51E-B781E234217D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*","matchCriteriaId":"28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*","matchCriteriaId":"DB3BA487-727D-416C-80C6-C2F90D52E149"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*","matchCriteriaId":"A73738DE-E81B-4226-ABA3-B54A5AD96389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*","matchCriteriaId":"F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*","matchCriteriaId":"EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*","matchCriteriaId":"8E2376E9-D7F4-4483-AB13-8840EA9A63E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*","matchCriteriaId":"473A31DD-A0DC-4716-B98E-D2926A26DAF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*","matchCriteriaId":"C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*","matchCriteriaId":"156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*","matchCriteriaId":"C9E90E83-1732-4BEF-BC5B-401769DC8880"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*","matchCriteriaId":"68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*","matchCriteriaId":"51679B26-DF28-4E41-9801-E1599F250FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*","matchCriteriaId":"E989900F-BE66-47E4-9A1B-11B9785F89BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*","matchCriteriaId":"95A01B7E-8231-4001-A340-31CE66474FDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*","matchCriteriaId":"3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*","matchCriteriaId":"B7368529-518E-4DB2-B291-1F0009445D01"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*","matchCriteriaId":"3CC62D3B-A287-4DED-A44D-3351452D4A55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*","matchCriteriaId":"EA2F5D70-6790-4756-9A6A-F1865DCD4D10"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021896","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34239","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49427","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0629","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:01.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets."},{"lang":"es","value":"Las funcionalidades (1) Airline Product Set (conocido como ALPS), (2) Serial Tunnel Code (conocido como STUN), (3) Block Serial Tunnel Code (conocido como BSTUN), (4) soporte para Native Client Interface Architecture (NCIA), (5) Data-link switching (conocido como DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 para Record Boundary Preservation (RBP), (9) X.25 sobre TCP (XOT), y (10) X.25 Routing en Cisco IOS v12.2 hasta 12.4 permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante una serie de paquetes TCP manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*","matchCriteriaId":"22D57BED-1D99-4077-941C-E60BEA65324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2l:*:*:*:*:*:*:*","matchCriteriaId":"6FEFEFF0-65E0-4F68-8C9E-03DAC585CA5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2rc:*:*:*:*:*:*:*","matchCriteriaId":"A4577947-7960-4627-9A74-9C3BB6477DDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sr:*:*:*:*:*:*:*","matchCriteriaId":"BDE7C923-7CBB-4990-905B-9DD9D7D5946A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*","matchCriteriaId":"7F5B9BAF-59BA-4282-B387-489264D44429"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"65B65738-134F-4C1A-916B-D6CD6365CB43"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"D5331586-8380-4F77-8735-17EC0D0E503A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*","matchCriteriaId":"AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*","matchCriteriaId":"35536E91-A58D-40F7-A256-34128E64B920"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"0F69329B-4D37-428E-B467-E3B9314A4D61"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"9615B275-5748-46CC-8A77-4A9550A39050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"421CD923-6282-4404-A642-C04E1F57F12F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"AD4411CB-5EE9-455C-AE90-1770320EFD86"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"593D1680-4883-43FE-A925-B87ED1D2E785"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xb2:*:*:*:*:*:*:*","matchCriteriaId":"90769378-BBD1-48D0-921C-A79413B99CE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"6C6DF704-8CC8-42C3-83F1-4D38734DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E636DC68-59FE-4BA0-BCFC-4DA97EE17B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"7E0D6801-E9A8-416B-830B-7682A9AF65BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*","matchCriteriaId":"E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"23265E4D-855C-4CCC-A875-DFCBA55B3CB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)mr:*:*:*:*:*:*:*","matchCriteriaId":"2EB86291-EB40-4CFD-A424-898EFB3D518B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"A10AADAC-4687-4308-8E4F-B7F9549556DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"1A747987-5218-4C1E-87C4-0675CD4F7A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"7B6483CB-7838-45F7-AE28-824AD71172A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(5b\\):*:*:*:*:*:*:*","matchCriteriaId":"04759B1E-8B40-460F-B33F-4E6332CFC31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(6\\)t:*:*:*:*:*:*:*","matchCriteriaId":"08AF3694-9686-444B-8D92-E41D262F74E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(6\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"C5595E7D-3CFD-4FF2-A6BE-59645058C54F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"F4235428-5E2E-4BCB-98B7-8844B19C7AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"9A1E17AB-F645-4636-9337-3158556E85A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"86150D11-94D7-43F9-9D19-33778558255F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(9\\)t:*:*:*:*:*:*:*","matchCriteriaId":"EDC43701-8A3A-42FB-B4F5-566DE59E542E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*","matchCriteriaId":"6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4s:*:*:*:*:*:*:*","matchCriteriaId":"85A4F6A3-1806-489A-85CF-7CA107513336"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:12.4:*:*:*:*:*:*:*","matchCriteriaId":"0859B147-5D40-43FD-BA55-002DB292FDC6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021903","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904cb.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34238","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49420","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904cb.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0630","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:02.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect for EAPoUDP, Dot1x, and MAC Authentication Bypass; (7) Distributed Director with HTTP Redirects; and (8) TCP DNS features in Cisco IOS 12.0 through 12.4 do not properly handle IP sockets, which allows remote attackers to cause a denial of service (outage or resource consumption) via a series of crafted TCP packets."},{"lang":"es","value":"Las funcionalidades (1) Cisco Unified Communications Manager Express; (2) el soporte de Transport Layer Security (TLS) para SIP Gateway Signaling; (3) Secure Signaling y Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication Proxy; (6) Per-user URL Redirect para EAPoUDP, Dot1x, y la integración de autenticación MAC; (7) Distributed Director con HTTP Redirects; y (8) TCP DNS en Cisco IOS v12.0 hasta 12.4 no maneja adecuadamente los \"sockets\", permitiendo a atacantes remotos provocar una denegación de servicio (apagado o consumo de recursos) mediante una serie de paquetes TCP manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*","matchCriteriaId":"23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*","matchCriteriaId":"C6333F9A-2605-41EE-9AB4-1D04C5825BAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*","matchCriteriaId":"D3B31AFC-9C72-4737-B6B7-E938C13695BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*","matchCriteriaId":"896A71EC-9508-406F-8DE8-58953D9A30FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*","matchCriteriaId":"E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*","matchCriteriaId":"8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*","matchCriteriaId":"D681CC0E-CD68-4252-B243-C043754954DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*","matchCriteriaId":"AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021897","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c6.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34242","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49418","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0631","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T15:16:24.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco IOS v12.0 hasta v12.4, cuando se ha configurado con (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, o (4) Media Gateway Control Protocol (MGCP) permite a atacantes remotos provocar una denegación de servicio (bloqueo de entrada a la cola en el interfaz de entrada) mediante un paquete UDP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*","matchCriteriaId":"23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*","matchCriteriaId":"C6333F9A-2605-41EE-9AB4-1D04C5825BAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*","matchCriteriaId":"D3B31AFC-9C72-4737-B6B7-E938C13695BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*","matchCriteriaId":"896A71EC-9508-406F-8DE8-58953D9A30FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*","matchCriteriaId":"E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*","matchCriteriaId":"8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*","matchCriteriaId":"D681CC0E-CD68-4252-B243-C043754954DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*","matchCriteriaId":"AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90426.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34245","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021904","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49419","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6720","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90426.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0632","sourceIdentifier":"psirt@cisco.com","published":"2009-03-12T15:20:49.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml\r\n\r\n\"Impact\r\n\r\nSuccessful exploitation of this vulnerability may allow an attacker to intercept user credentials that allow the attacker to escalate their privilege level and obtain complete administrative access to a vulnerable Cisco Unified Communications Manager system. If integrated with an external directory service, the intercepted user credentials may allow an attacker to gain access to additional systems configured to use the directory service for authentication.\"","cveTags":[],"descriptions":[{"lang":"en","value":"The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged directory-service account credentials to the client in cleartext, which allows remote attackers to modify the CUCM configuration and perform other privileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x."},{"lang":"es","value":"La funcionalidad IP Phone Personal Address Book (PAB) Synchronizer en Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) v4.1, v4.2 anteriores v4.2(3)SR4b, v4.3 anteriores v4.3(2)SR1b, v5.x anteriores v5.1(3e), v6.x anteriores v6.1(3), y v7.0 anteriores v7.0(2) envía credenciales de cuentas privilegiadas del servicio directorio a el cliente en texto plano, lo que permite a los atacantes remotos modificar la configuración CUCM y desarrollar otros acciones privilegiadas interceptando estas credenciales, y usándola en peticiones no relativas a las tareas de sincronización establecidas, como se ha demostrado a través de (1) credenciales de la cuenta DC Directory en CUCM v4.x y (2) credenciales de cuenta TabSyncSysUser en CUCM v5.x hasta v7.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E29A61E-334B-4F95-9B47-8F53A4DB3EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E6C20851-DC17-4E89-A6C1-D1B52D47608F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"0B9DCB59-F6AD-4CBD-B746-8FBA4BF733CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr2b:*:*:*:*:*:*:*","matchCriteriaId":"F3E094AB-5F10-4238-BBE3-236B7306C995"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr3:*:*:*:*:*:*:*","matchCriteriaId":"2496F01D-E387-48CD-B586-826D284BBC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.2\\(3\\)sr4:*:*:*:*:*:*:*","matchCriteriaId":"B5955E35-E200-4054-8757-39BD04F13220"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*","matchCriteriaId":"577571D6-AC59-4A43-B9A5-7B6FC6D2046C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3\\(1\\)sr.1:*:*:*:*:*:*:*","matchCriteriaId":"A459F3A2-817B-4F7F-AF9B-4EACB90B7DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0BB09252-6C59-4E1C-93C8-0AC3ED54A294"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:4.3\\(2\\)sr1:*:*:*:*:*:*:*","matchCriteriaId":"CA0F270A-F953-43C7-9358-3B237B355BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B2AF68FA-433F-46F2-B309-B60A108BECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1B9FDFF3-2E60-4E41-9251-93283D945D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"239510AD-8BB0-4515-B1DA-80DE696D25DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"26277C4A-4E27-492C-B18C-AC68D86ADF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2b\\):*:*:*:*:*:*:*","matchCriteriaId":"9003EC1A-6E85-41F1-BB5D-B841C9C28105"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"0318CF61-B892-4D44-B41A-D630B4AB808C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"9CDA8A78-BA6C-4451-8EAA-B83C3A6C6BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3c\\):*:*:*:*:*:*:*","matchCriteriaId":"84A49932-1E22-4BE0-8195-926D44F65AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"4DE1B0DD-EA64-493B-86B7-9057EE5033C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"819AE879-5BF9-494E-8905-1E1E867EB5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C2DF1139-A161-48DD-9929-F6939D626461"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.0\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"FF99088E-1330-4E15-8BD3-2A5172FBA460"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6BC6EF34-D23D-45CA-A907-A47993CC061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"6CC94003-72B6-45C3-A07E-0A08F1562B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"958A2707-0F1A-4719-BB9F-DC9ED129105A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"597D9674-F44D-4A31-A2F2-2790ED698A91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\)su1:*:*:*:*:*:*:*","matchCriteriaId":"3C2B7439-8547-41A6-AE6C-6ABCD167890E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"BE122F76-ECDB-4446-825C-EF02257D8C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6F2564A8-5805-46E0-B6EC-F4967D67C566"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:7.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D0907FAF-8334-42C1-B35A-EC6ED89AC110"}]}]}],"references":[{"url":"http://osvdb.org/52589","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34238","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34082","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021839","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0675","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49196","source":"psirt@cisco.com"},{"url":"http://osvdb.org/52589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0633","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:02.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via MIPv6 packets, aka Bug ID CSCsm97220."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en (1) la funcionalidad Mobile IP NAT Traversal y (2) el subsistema Mobile IPv6 en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (presión en la cola de entrada y parada del interfaz) mediante paquetes MIPv6, conocido como Bug ID CSCsm97220."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*","matchCriteriaId":"95418AD2-FB85-4E20-B874-D82DDF88BC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*","matchCriteriaId":"D8FC7948-B922-486E-9E5F-069B930EB1E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*","matchCriteriaId":"475EABCF-7404-4B65-9B29-E35C7D673B47"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*","matchCriteriaId":"7D99C07D-4EE3-4057-8E76-3468C45B4A4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*","matchCriteriaId":"14D1B81D-95E4-4945-94F2-C36FD7C0DC55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*","matchCriteriaId":"372582DB-DAB8-4B57-A778-5E2BC35B8233"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*","matchCriteriaId":"452FF154-F6C0-4BC4-969E-1D49AA3CCE49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*","matchCriteriaId":"36CF94C8-D6FE-4229-86F4-AF503F950151"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*","matchCriteriaId":"3AB6C57C-8805-443F-8ACE-83DAA48878CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*","matchCriteriaId":"554C9611-55F1-40AF-9862-7E902D5CE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*","matchCriteriaId":"F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*","matchCriteriaId":"EEB0B55E-3579-4929-862F-C5FF9F796AE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*","matchCriteriaId":"A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*","matchCriteriaId":"CBC11203-84FD-4F6C-8597-573FD784C68E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*","matchCriteriaId":"8E8E34D3-0BCB-4D19-A41C-0375941E1B21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*","matchCriteriaId":"0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*","matchCriteriaId":"39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*","matchCriteriaId":"5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*","matchCriteriaId":"A0515E7C-E3A5-44F4-866F-283E43AE8654"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*","matchCriteriaId":"1A74B4D0-939B-4FF1-9163-86FF64DB368E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*","matchCriteriaId":"09CBD68E-2A5C-43DF-9AD6-DE07815821B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*","matchCriteriaId":"463C3A96-F8B7-4117-8CB3-D15B44119AB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*","matchCriteriaId":"01393D91-ED1D-460D-8621-10260F0CBDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*","matchCriteriaId":"48ABA40D-DE49-4B20-AFA1-302EB93719FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*","matchCriteriaId":"8AB2FF53-5991-4264-B5CC-D1E45460BFCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*","matchCriteriaId":"0B0B18B6-FF50-48BE-8250-14E57FB73AE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*","matchCriteriaId":"1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*","matchCriteriaId":"0ED386B6-3C75-41C3-8206-9CBA14E20B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*","matchCriteriaId":"989581B0-FC28-457B-BDD2-72ED65BBE51E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*","matchCriteriaId":"EF8A8C95-2DC3-47AB-BED3-7D33902440C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*","matchCriteriaId":"B8920235-87C6-41D6-9497-CC12D18A6536"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*","matchCriteriaId":"9752CFFC-F1DA-4122-ACD8-79CB963F485F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*","matchCriteriaId":"7012F8E0-2256-448A-9C4D-E2DB5AB9852B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*","matchCriteriaId":"1BE94EA2-E0CC-4760-94A8-DE56C8181F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*","matchCriteriaId":"5B44691F-A47B-4953-BAC9-B2D43F4BCC06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*","matchCriteriaId":"8910F02B-DF61-443B-A4B5-2C0C04484519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*","matchCriteriaId":"929836AD-8128-4174-872D-B9638B54611C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*","matchCriteriaId":"045B4782-6CE2-40DD-A9F0-16E0C25768FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*","matchCriteriaId":"9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*","matchCriteriaId":"5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*","matchCriteriaId":"9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*","matchCriteriaId":"416B8D2F-0B11-4074-B6BD-2E97F79B5520"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*","matchCriteriaId":"5ED5B53D-930D-477E-A0F6-76167AE67641"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*","matchCriteriaId":"29B39978-3BD0-40A8-93AE-EF40042EB7CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*","matchCriteriaId":"84983F6A-64F6-4720-9291-FC84CA10EE25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*","matchCriteriaId":"4A2784C6-588A-4CAC-9362-515FB070D21E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*","matchCriteriaId":"93580300-6B1F-4D21-A51E-B781E234217D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*","matchCriteriaId":"28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*","matchCriteriaId":"DB3BA487-727D-416C-80C6-C2F90D52E149"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*","matchCriteriaId":"A73738DE-E81B-4226-ABA3-B54A5AD96389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*","matchCriteriaId":"F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*","matchCriteriaId":"EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*","matchCriteriaId":"8E2376E9-D7F4-4483-AB13-8840EA9A63E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*","matchCriteriaId":"473A31DD-A0DC-4716-B98E-D2926A26DAF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*","matchCriteriaId":"C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*","matchCriteriaId":"156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*","matchCriteriaId":"C9E90E83-1732-4BEF-BC5B-401769DC8880"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*","matchCriteriaId":"68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*","matchCriteriaId":"51679B26-DF28-4E41-9801-E1599F250FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*","matchCriteriaId":"E989900F-BE66-47E4-9A1B-11B9785F89BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*","matchCriteriaId":"95A01B7E-8231-4001-A340-31CE66474FDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*","matchCriteriaId":"3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*","matchCriteriaId":"B7368529-518E-4DB2-B291-1F0009445D01"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*","matchCriteriaId":"3CC62D3B-A287-4DED-A44D-3351452D4A55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*","matchCriteriaId":"EA2F5D70-6790-4756-9A6A-F1865DCD4D10"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021898","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34241","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49424","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12290","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0634","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:02.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an ICMP packet, aka Bug ID CSCso05337."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en la implementación del agente \"home\" (HA) en  (1) la funcionalida de Mobile IP NAT Traversal y (2) el subsistema Mobile IPv6 en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (presión en la cola de entrada y parada del interfaz) mediante un paquete ICMP, conocido como Bug ID CSCso05337."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8D0F64-5DE1-4A6F-91F0-8A8509BF077F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*","matchCriteriaId":"95418AD2-FB85-4E20-B874-D82DDF88BC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*","matchCriteriaId":"D8FC7948-B922-486E-9E5F-069B930EB1E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*","matchCriteriaId":"475EABCF-7404-4B65-9B29-E35C7D673B47"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*","matchCriteriaId":"7D99C07D-4EE3-4057-8E76-3468C45B4A4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*","matchCriteriaId":"14D1B81D-95E4-4945-94F2-C36FD7C0DC55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*","matchCriteriaId":"372582DB-DAB8-4B57-A778-5E2BC35B8233"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*","matchCriteriaId":"452FF154-F6C0-4BC4-969E-1D49AA3CCE49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*","matchCriteriaId":"36CF94C8-D6FE-4229-86F4-AF503F950151"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*","matchCriteriaId":"3AB6C57C-8805-443F-8ACE-83DAA48878CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*","matchCriteriaId":"554C9611-55F1-40AF-9862-7E902D5CE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*","matchCriteriaId":"F89C185A-D3B3-4F5F-9249-F8EE89E8DD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*","matchCriteriaId":"EEB0B55E-3579-4929-862F-C5FF9F796AE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*","matchCriteriaId":"A19FD313-0AF6-43E1-9FCB-5D27A18C8C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*","matchCriteriaId":"CBC11203-84FD-4F6C-8597-573FD784C68E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*","matchCriteriaId":"8E8E34D3-0BCB-4D19-A41C-0375941E1B21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*","matchCriteriaId":"0F894B6F-9061-4D5B-A7F9-C9DDF2DD35D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*","matchCriteriaId":"39BB1F5B-9D53-4DEC-8FC7-C9FC7B51C862"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*","matchCriteriaId":"5A124BB0-EFC3-430E-89F9-FF49B4BF9A28"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*","matchCriteriaId":"A0515E7C-E3A5-44F4-866F-283E43AE8654"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*","matchCriteriaId":"1A74B4D0-939B-4FF1-9163-86FF64DB368E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*","matchCriteriaId":"09CBD68E-2A5C-43DF-9AD6-DE07815821B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*","matchCriteriaId":"463C3A96-F8B7-4117-8CB3-D15B44119AB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*","matchCriteriaId":"01393D91-ED1D-460D-8621-10260F0CBDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*","matchCriteriaId":"48ABA40D-DE49-4B20-AFA1-302EB93719FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*","matchCriteriaId":"8AB2FF53-5991-4264-B5CC-D1E45460BFCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*","matchCriteriaId":"0B0B18B6-FF50-48BE-8250-14E57FB73AE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*","matchCriteriaId":"1A1FAF42-B7B1-40B0-A0F7-5DF821E6193F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*","matchCriteriaId":"0ED386B6-3C75-41C3-8206-9CBA14E20B00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*","matchCriteriaId":"989581B0-FC28-457B-BDD2-72ED65BBE51E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*","matchCriteriaId":"EF8A8C95-2DC3-47AB-BED3-7D33902440C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*","matchCriteriaId":"B8920235-87C6-41D6-9497-CC12D18A6536"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*","matchCriteriaId":"9752CFFC-F1DA-4122-ACD8-79CB963F485F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*","matchCriteriaId":"7012F8E0-2256-448A-9C4D-E2DB5AB9852B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*","matchCriteriaId":"1BE94EA2-E0CC-4760-94A8-DE56C8181F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*","matchCriteriaId":"5B44691F-A47B-4953-BAC9-B2D43F4BCC06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*","matchCriteriaId":"8910F02B-DF61-443B-A4B5-2C0C04484519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*","matchCriteriaId":"929836AD-8128-4174-872D-B9638B54611C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*","matchCriteriaId":"045B4782-6CE2-40DD-A9F0-16E0C25768FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*","matchCriteriaId":"9009E0C3-8BBC-4928-8528-62DA1ADC8BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ym:*:*:*:*:*:*","matchCriteriaId":"5FE4985F-2C87-4532-9D11-9BA37B7D6A9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yq:*:*:*:*:*:*","matchCriteriaId":"9A80C51F-C69A-4780-8AE9-BEBC8EBFA115"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:ys:*:*:*:*:*:*","matchCriteriaId":"416B8D2F-0B11-4074-B6BD-2E97F79B5520"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yt:*:*:*:*:*:*","matchCriteriaId":"5ED5B53D-930D-477E-A0F6-76167AE67641"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yu:*:*:*:*:*:*","matchCriteriaId":"29B39978-3BD0-40A8-93AE-EF40042EB7CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yx:*:*:*:*:*:*","matchCriteriaId":"84983F6A-64F6-4720-9291-FC84CA10EE25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.3:yz:*:*:*:*:*:*","matchCriteriaId":"4A2784C6-588A-4CAC-9362-515FB070D21E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"E6A60117-E4D1-4741-98A2-E643A26616A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:ja:*:*:*:*:*:*","matchCriteriaId":"93580300-6B1F-4D21-A51E-B781E234217D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jk:*:*:*:*:*:*","matchCriteriaId":"28E2C53A-51B0-4BD6-869E-1554B0BD3A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jma:*:*:*:*:*:*","matchCriteriaId":"DB3BA487-727D-416C-80C6-C2F90D52E149"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmb:*:*:*:*:*:*","matchCriteriaId":"A73738DE-E81B-4226-ABA3-B54A5AD96389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jmc:*:*:*:*:*:*","matchCriteriaId":"F2DA9F41-FBD0-404A-8C6B-E827C3FACE81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:jx:*:*:*:*:*:*","matchCriteriaId":"EFB1DA86-E0C2-4EDF-B82C-6677516CF1CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:md:*:*:*:*:*:*","matchCriteriaId":"8E2376E9-D7F4-4483-AB13-8840EA9A63E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:mr:*:*:*:*:*:*","matchCriteriaId":"473A31DD-A0DC-4716-B98E-D2926A26DAF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:sw:*:*:*:*:*:*","matchCriteriaId":"C9569DC5-9803-4B17-9FF1-5BDA8194FE2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:t:*:*:*:*:*:*","matchCriteriaId":"156B91B9-1F5B-4E83-A2B7-A5B7F272D5B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xa:*:*:*:*:*:*","matchCriteriaId":"C9E90E83-1732-4BEF-BC5B-401769DC8880"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xb:*:*:*:*:*:*","matchCriteriaId":"68C9DDEB-EDE8-4B0D-A347-32621CCEDE42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xc:*:*:*:*:*:*","matchCriteriaId":"51679B26-DF28-4E41-9801-E1599F250FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xd:*:*:*:*:*:*","matchCriteriaId":"E989900F-BE66-47E4-9A1B-11B9785F89BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xe:*:*:*:*:*:*","matchCriteriaId":"95A01B7E-8231-4001-A340-31CE66474FDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xf:*:*:*:*:*:*","matchCriteriaId":"3EB012E7-E2E0-4F9D-ADF9-827816E3E6D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xg:*:*:*:*:*:*","matchCriteriaId":"B7368529-518E-4DB2-B291-1F0009445D01"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xj:*:*:*:*:*:*","matchCriteriaId":"3CC62D3B-A287-4DED-A44D-3351452D4A55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cisco_ios:12.4:xk:*:*:*:*:*:*","matchCriteriaId":"EA2F5D70-6790-4756-9A6A-F1865DCD4D10"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021898","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34241","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49424","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49585","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0635","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:02.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml\r\n\r\n\r\nObtaining Fixed Software\r\n\r\nCisco has released free software updates that address these vulnerabilities. Prior to deploying software, customers should consult their maintenance provider or check the software for feature set compatibility and known issues specific to their environment.\r\n\r\nCustomers may only install and expect support for the feature sets they have purchased. By installing, downloading, accessing or otherwise using such software upgrades, customers agree to be bound by the terms of Cisco's software license terms found at http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html , or as otherwise set forth at Cisco.com Downloads at http://www.cisco.com/public/sw-center/sw-usingswc.shtml .","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets."},{"lang":"es","value":"Perdida de memoria en la funcionalidad de encapsulado de Cisco Tunneling Control Protocol (cTCP) en Cisco IOS v12.4, cuando se ha habilitado un servidor Easy VPN (conocido como EZVPN), permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del dispositivo) mediante una secuencia de paquetes TCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34246","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1021895","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49417","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0636","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:02.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco IOS v12.0 hasta v12.4, cuando están habilitados los servicios de voz SIP, permite a atacantes remotos provocar una denegación de servicio (caída del dispositivo) mediante un mensaje SIP válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*","matchCriteriaId":"23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*","matchCriteriaId":"C6333F9A-2605-41EE-9AB4-1D04C5825BAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*","matchCriteriaId":"D3B31AFC-9C72-4737-B6B7-E938C13695BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*","matchCriteriaId":"896A71EC-9508-406F-8DE8-58953D9A30FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*","matchCriteriaId":"E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*","matchCriteriaId":"8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*","matchCriteriaId":"D681CC0E-CD68-4252-B243-C043754954DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*","matchCriteriaId":"AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021902","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34243","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49421","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0637","sourceIdentifier":"psirt@cisco.com","published":"2009-03-27T16:30:02.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command."},{"lang":"es","value":"El servidor SCP en Cisco IOS v12.2 hasta la versión v12.4, cuando se ha habilitado el acceso CLI basado en roles, no refuerza la configuración de la visualización CLI para transferencias de ficheros, permitiendo a atacantes remotos autenticados con una vista CLI adjunta (1) leer o (2) sobreescribir ficheros de su elección mediante un  comando SCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*","matchCriteriaId":"22D57BED-1D99-4077-941C-E60BEA65324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2l:*:*:*:*:*:*:*","matchCriteriaId":"6FEFEFF0-65E0-4F68-8C9E-03DAC585CA5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2rc:*:*:*:*:*:*:*","matchCriteriaId":"A4577947-7960-4627-9A74-9C3BB6477DDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sr:*:*:*:*:*:*:*","matchCriteriaId":"BDE7C923-7CBB-4990-905B-9DD9D7D5946A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ys:*:*:*:*:*:*:*","matchCriteriaId":"7F5B9BAF-59BA-4282-B387-489264D44429"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"65B65738-134F-4C1A-916B-D6CD6365CB43"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"D5331586-8380-4F77-8735-17EC0D0E503A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"93024CE7-DBA3-4C25-B7D4-4D2DA6AB880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)mr:*:*:*:*:*:*:*","matchCriteriaId":"AA5769F6-8C69-4AC7-A3E3-75D275B2AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)mr1:*:*:*:*:*:*:*","matchCriteriaId":"35536E91-A58D-40F7-A256-34128E64B920"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"0F69329B-4D37-428E-B467-E3B9314A4D61"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"9615B275-5748-46CC-8A77-4A9550A39050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"421CD923-6282-4404-A642-C04E1F57F12F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"AD4411CB-5EE9-455C-AE90-1770320EFD86"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"593D1680-4883-43FE-A925-B87ED1D2E785"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"FADF72EC-43B4-4FC0-9BA0-7CC91D4745B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"EBDB772E-F9A9-4EBA-958F-CDFCB2DA6BFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(2\\)xb2:*:*:*:*:*:*:*","matchCriteriaId":"90769378-BBD1-48D0-921C-A79413B99CE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"6C6DF704-8CC8-42C3-83F1-4D38734DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E636DC68-59FE-4BA0-BCFC-4DA97EE17B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"7E0D6801-E9A8-416B-830B-7682A9AF65BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3b\\):*:*:*:*:*:*:*","matchCriteriaId":"E4B2F9E0-E5FF-42D7-8CEF-359FDDFB4059"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"23265E4D-855C-4CCC-A875-DFCBA55B3CB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)mr:*:*:*:*:*:*:*","matchCriteriaId":"2EB86291-EB40-4CFD-A424-898EFB3D518B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"A10AADAC-4687-4308-8E4F-B7F9549556DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(4\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"1A747987-5218-4C1E-87C4-0675CD4F7A2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"7B6483CB-7838-45F7-AE28-824AD71172A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(5b\\):*:*:*:*:*:*:*","matchCriteriaId":"04759B1E-8B40-460F-B33F-4E6332CFC31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(6\\)t:*:*:*:*:*:*:*","matchCriteriaId":"08AF3694-9686-444B-8D92-E41D262F74E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(6\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"C5595E7D-3CFD-4FF2-A6BE-59645058C54F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"F4235428-5E2E-4BCB-98B7-8844B19C7AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"9A1E17AB-F645-4636-9337-3158556E85A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"86150D11-94D7-43F9-9D19-33778558255F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(9\\)t:*:*:*:*:*:*:*","matchCriteriaId":"EDC43701-8A3A-42FB-B4F5-566DE59E542E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(23\\):*:*:*:*:*:*:*","matchCriteriaId":"6A3B5CC3-A83E-4241-ACE1-0FFEE8A5EFE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4s:*:*:*:*:*:*:*","matchCriteriaId":"85A4F6A3-1806-489A-85CF-7CA107513336"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:12.4:*:*:*:*:*:*:*","matchCriteriaId":"0859B147-5D40-43FD-BA55-002DB292FDC6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34438","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021899","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34247","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"psirt@cisco.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49423","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/34438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0638","sourceIdentifier":"psirt@cisco.com","published":"2009-08-21T11:02:41.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages."},{"lang":"es","value":"Cisco Firewall Services Module (FWSM) 2.x, 3.1 antes de 3.1(16), 3.2 antes de 3.2(13)y 4.0 antes de 4.0(6) para los switches Cisco Catalyst 6500 y los routers Cisco 7600 permite a atacantes remotos provocar una denegación de servicio (parada de la gestión del tráfico) mediante una serie de mensajes ICMP malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9AEE8A6C-2922-42DB-8C26-3A516F751F59"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"17A5D865-1A69-4563-9D2B-B7458C0D24EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E9A8528D-DF6A-4493-A77E-CBF08359F2E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B55C6770-7C6A-4684-A474-5C9D9902FDBB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F90E9070-781D-4D3D-98EB-5B6DB9D3C75E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"DE4BC31D-86C0-4E13-BA69-B35752298169"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.1\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"27EF8892-389E-4F9E-B672-A5F1C05B1E38"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.2:*:*:*:*:*:*:*","matchCriteriaId":"69D799FD-6274-499B-8108-5093CE1482AB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"0E49D8E9-7D46-4519-9A6B-B6F01D8DBAC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"205ECBCE-6D91-44C2-8E00-DB7C20967704"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:3.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5D03FB87-63DE-45D0-ABB5-5209547F7166"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:4.0:*:*:*:*:*:*:*","matchCriteriaId":"26535762-EE50-4C4F-831E-A0ABFF4ADAF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"ADDB8F07-38B4-498D-9455-9414B69A0626"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D63186-5834-448C-98F2-0C189A11D25D"}]}]}],"references":[{"url":"http://secunia.com/advisories/36373","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022747","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36085","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2329","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52591","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/36373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0639","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en moduli/libri/index.php en phpyabs v0.1.2, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"Azione\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpyabs:phpyabs:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"028ECEB1-875C-466C-A0E8-092E614F0601"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33670","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0361","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0640","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:47:48.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by reading the vy_netman.cfg file that contains passwords."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servidor web administrativo en Swann DVR4-SecuraNet permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en la URI, como lo demostrado leyendo el fichero vy_netman.cfg que contiene contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:swannsecurity:dvr4-securanet:-:*:*:*:*:*:*:*","matchCriteriaId":"44955928-E58F-446A-9E7E-7DDF56B6E449"}]}]}],"references":[{"url":"http://osvdb.org/51897","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500789/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33716","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/51897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500789/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0641","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:47:48.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library."},{"lang":"es","value":"sys_term.c en telnetd en FreeBSD v7.0-RELEASE y otras v7.x borra variables de entorno peligrosas con un método que solo fue valido en distribuciones antiguas de FreeBSD, lo que permite a atacantes remotos ejecutar código de su elección a través de un cliente de telnet de una variable de entorno manipulada, como se demuestra mediante el valor LD_PRELOAD que hace referencia a una librería maliciosa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"CDFA5AA9-E73F-448D-9754-41AF9AECB93A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:*","matchCriteriaId":"C4E775BA-6DC1-4006-83A4-D30EA57417FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0-release:*:*:*:*:*:*:*","matchCriteriaId":"EC290462-4364-464F-8CE9-6F5E5BE6F246"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F06B831E-D8F2-4380-B279-559CE103210F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0_releng:*:*:*:*:*:*:*","matchCriteriaId":"3ACC9072-4A33-4F1F-B790-2F9D5A52F71B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52DBF406-9C77-4DDA-AB7D-40FAE40023D0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067954.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33777","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48780","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8055","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067954.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:05.telnetd.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0642","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:47:48.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate."},{"lang":"es","value":"ext/openssl/ossl_ocsp.c en Ruby v1.8 y v1.9 no comprueba adecuadamente el valor de retorno de la funcion OCSP_basic_verify, lo cual permitiria a atacantes remotos tener exito en la presentacion de un certificado X.509 invalido, posiblemente utilizando un certificado revocado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8:*:*:*:*:*:*:*","matchCriteriaId":"3EA01D6F-3B61-44EC-A6EA-9E878A0D5B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*","matchCriteriaId":"D9237145-35F8-4E05-B730-77C0F386E5B2"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513528","source":"cve@mitre.org"},{"url":"http://redmine.ruby-lang.org/issues/show/1091","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33750","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35699","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35937","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:193","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1140.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33769","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022505","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-805-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48761","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11450","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://redmine.ruby-lang.org/issues/show/1091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-805-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0643","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T06:47:48.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.txt via the post parameter, and then execute the code via a direct request to display.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en post.php en Simple PHP News v1.0 final permite a atacantes remotos inyectar código PHP a su elección en news.txt a traves del parámetro \"post\" y ejecutar el código a través de una petición directa a display.php. NOTA: Algunos detalles fueron obtenidos de una información de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dminnich:simple_php_news:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43ECAF21-1F05-4D68-A261-12A1B578F51C"}]}]}],"references":[{"url":"http://osvdb.org/51816","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48829","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7999","source":"cve@mitre.org"},{"url":"http://osvdb.org/51816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0644","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access."},{"lang":"es","value":"La interfaz HTTP en Swann DVR4-SecuraNet tiene un cierto nombre de usuario y contraseña por defecto, lo que facilita a los atacantes remotos obtener acceso privilegiado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:swannsecurity:dvr4-securanet:-:*:*:*:*:*:*:*","matchCriteriaId":"44955928-E58F-446A-9E7E-7DDF56B6E449"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500789/100/0/threaded","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/cctv-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/500789/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0645","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Reference links indicate file inclusion and script or code execution in addition to information exposure.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) language, (2) Introduction_complete, and (3) use_log parameters, different vectors than CVE-2004-2445."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php in Jaws 0.8.8, permite a atacantes remotos autenticados leer ficheros de su elección mediante un .. (punto punto) en los parámetros (1) language, (2) Introduction_complete, y (3) use_log, vectores diferentes a los de CVE-2004-2445."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"635A0626-C1B2-4C92-B69E-E3A8F3155889"}]}]}],"references":[{"url":"http://www.jaws-project.com/blog/show/jaws-089-released","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33607","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48476","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7976","source":"cve@mitre.org"},{"url":"http://www.jaws-project.com/blog/show/jaws-089-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0646","sourceIdentifier":"cve@mitre.org","published":"2009-02-18T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) password parameters to pcgi/4site.pl, (3) page parameter to print/print.shtml, (4) s and (5) i parameters to portfolio/index.shtml, (6) h parameter to hotel/index.php, (7) id parameter to news/news1.shtml, and the (8) th parameter to faq/index.shtml."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en 4Site CMS 2.6 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"login\" y (2) \"password\" a pcgi/4site.pl, (3) \"page\" a print/print.shtml, (4) \"s\" y (5) \"i\" a portfolio/index.shtml, (6) \"h\" a hotel/index.php, (7) \"id\" a news/news1.shtml y (8) \"th\" a faq/index.shtml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4site:4site_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"510AA641-9C6C-4EA3-AB3B-4524B8AAC958"}]}]}],"references":[{"url":"http://secunia.com/advisories/33733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/","source":"cve@mitre.org"},{"url":"http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51806","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51807","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51808","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51809","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/514376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33594","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48483","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48486","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48487","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48488","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wsec.ru/wsec-09-002-4site-cms-26-multiple-sql-injections/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/51806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/51807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/51808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/51809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/514376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0647","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header line.  NOTE: this has been reported as a format string vulnerability by some sources, but the provenance of that information is unknown."},{"lang":"es","value":"El archivo msnmsgr.exe en Windows Live Messenger (WLM) 2009, build 14.0.8064.206, y otras builds 14.0.8064.x, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un encabezado modificado en un paquete, como posiblemente sea demostrado mediante un valor UTF-8.0 del campo charset en la línea de encabezado Content-Type. NOTA: esto ha sido reportado como una vulnerabilidad de cadena de formato por algunas fuentes, pero la procedencia de esa información es desconocida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:2009:*:*:*:*:*:*:*","matchCriteriaId":"9B6D95AB-30CF-471F-9432-4623590DA603"}]}]}],"references":[{"url":"http://secunia.com/advisories/33985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501043/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33825","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0648","sourceIdentifier":"cve@mitre.org","published":"2009-02-19T16:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) RC4 allow remote attackers to hijack the authentication of administrators for requests that change passwords via the (1) edit and (2) edit_now actions."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición de sitios cruzados en el manipulador manage_users en admin/index.php en Falt4 CMS (también conocido como Falt4 Extreme) RC4 permite a atacantes remotos cambiar los administradores y las contraseñas a través de las acciones (1) \"edit\" y (2) \"edit_now\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:falt4:falt4_extreme:rc4:*:*:*:*:*:*:*","matchCriteriaId":"533679DC-C772-4848-ACAD-3EE40EFDA9DB"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48786","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/falt4-cms-xsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0649","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) via JavaScript code that calls the setAttributeNode method."},{"lang":"es","value":"El navegador web en Symbian OS en el telefono movil Nokia N95 permite a atacantes remotos producir una denegacion de servicio (caida) a traves de codigo JavaScript que llama al metodo setAttributeNode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:n95:*:*:*:*:*:*:*:*","matchCriteriaId":"49212645-371B-4B59-9456-12226083E83F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nokia:symbian_s60_browser:*:*:*:*:*:*:*:*","matchCriteriaId":"368AB714-3DFF-4748-97B7-FFCF652C8DBA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/500954/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33767","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48763","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500954/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0650","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a STATS line with a long pwd field.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la funcion GetStatsFromLine en TPTEST v3.1.7 y anteriores, y posiblemente v5.02, lo que permite a atacantes remotos producir una denegacion de servicio (caida de aplicacion) y posiblemente ejecutar codigo a su eleccion a traves de la linea STATS con un campo largo \"pwd\". NOTA: Algunos de los detalles fueron obtenidos de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tptest:tptest:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.7","matchCriteriaId":"FA3D5FA8-C3C1-4F04-9446-6A5D3E9DF3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tptest:tptest:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"16C10F30-986C-4C8E-9865-63C845A1007F"}]}]}],"references":[{"url":"http://secunia.com/advisories/33972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33785","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48781","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8058","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0651","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Veritas network daemon (aka vnetd) in Symantec Veritas NetBackup Server / Enterprise Server 5.x, 6.0 before MP7 SP1, and 6.5 before 6.5.3.1 allows remote attackers to execute arbitrary code via unknown vectors related to \"initial communications setup.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el demonido de red Veritas (tambien conocido como vnetd) en Symantec Veritas NetBackup Server / Enterprise Server v5.x, v6.0 anterior a MP7 SP1, y v6.5 anterior a v6.5.3.1 lo que permite a atacantes remotos ejecutar codigo a su elecciona traves de vectores desconocidos relacionados con el \"ajuste incial de comunicaciones\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1mp7","matchCriteriaId":"14E0B342-8B4E-4E5F-842D-920C4548F20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0mp7","matchCriteriaId":"10A86601-C514-4704-AB13-4FE761D31F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.2","matchCriteriaId":"4AF64488-A905-4B3C-AAB2-48286D49B98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A665E030-ACF2-46F3-8C91-DEC109BEF062"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F3C740C-0C65-4E83-B5F0-CB9A6A74E2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_server_\\/enterprise_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"F574AF2F-7336-4BA4-946D-C58DD225DA72"}]}]}],"references":[{"url":"http://osvdb.org/52269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html","source":"cve@mitre.org"},{"url":"http://seer.entsupport.symantec.com/docs/317828.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33772","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021734","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0461","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1097","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48795","source":"cve@mitre.org"},{"url":"http://osvdb.org/52269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.entsupport.symantec.com/docs/317828.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0652","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233.  NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected."},{"lang":"es","value":"La lista negra de Internationalized Domain Names (IDN) en Mozilla Firefox versión 3.0.6 y otras versiones anteriores a 3.0.9; Thunderbird anterior a versión 2.0.0.21; y SeaMonkey anterior a versión 1.1.15, no incluye caracteres box-drawing, lo que permite a los atacantes remotos falsificar URL y conducir ataques de phishing, como es demostrado por homoglifos de / (barra lateral) y caracteres ? (signo de interrogación) en un subdominio de un nombre de dominio .cn, una vulnerabilidad diferente de CVE-2005-0233. NOTA: algunos terceros afirman que la versión 3.0.6 no está afectada, pero las versiones mucho más antiguas tal vez estén afectadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html","source":"cve@mitre.org"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34843","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-15.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33837","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48974","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11396","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/764-1/","source":"cve@mitre.org"},{"url":"https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"cve@mitre.org"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0653","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970."},{"lang":"es","value":"OpenSSL, probablemente v0.9.6, no verifica las limitacion basicas para un certificado de autoridad certificadora intermedia, lo que permite a atacantes remotos falsificar lo certificados de sitios de confianza, a traves de un ataque de hombre en el medio, relacionada con CVE-2002-0970."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue was addressed in upstream OpenSSL prior to 0.9.6 and therefore does not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-03-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"}]}]}],"references":[{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike","source":"cve@mitre.org"},{"url":"https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0654","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit router, to confirm that a sender and receiver are communicating via vectors involving (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, and then observing cell recognition errors at the exit router.  NOTE: the vendor disputes the significance of this issue, noting that the product's design \"accepted end-to-end correlation as an attack that is too expensive to solve.\""},{"lang":"es","value":"Tor v0.2.0.28, y posiblemente v0.2.0.34 y anteriores, permite a atacantes remotos, con el control de un enrutador de salida y otro de entrada, confirmar que un receptor y un remitente estan comunicandose a traves de los vectores (1) replaying, (2) modifying, (3) inserting, or (4) deleting a single cell, y despues observar los errores de reconocimiento de celula en el enrutador de salida. NOTA: El vendedor no esta de acuerda con la importancia de este hecho."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:alpha:*:*:*:*:*:*","versionEndIncluding":"0.2.0.34","matchCriteriaId":"95A5691B-621A-4B7D-8F83-2C95DF30EF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*","matchCriteriaId":"7B173DF1-D506-47F4-8F13-18026BF7A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*","matchCriteriaId":"4462DB3B-BF33-4BFA-A9C9-CF674A18D24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*","matchCriteriaId":"5E666EDB-F72C-4B14-8FF4-95B082BB38EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*","matchCriteriaId":"C538F301-D9A9-48CC-AB77-AD073935D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*","matchCriteriaId":"95E17189-F12A-4914-AEDC-52345D097A9A"}]}]}],"references":[{"url":"http://blog.torproject.org/blog/one-cell-enough","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://blog.torproject.org/blog/one-cell-enough","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Fu","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Fu/BlackHat-DC-09-Fu-Break-Tors-Anonymity.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0655","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lenovo Veriface III allows physically proximate attackers to login to a Windows account by presenting a \"plain image\" of the authorized user."},{"lang":"es","value":"Lenovo Veriface vIII permite a atacantes fisicamente proximos acceder a la cuenta de usuario mediante la presentacion de una \"imagen plana\" del usuario autorizado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:veriface:iii:*:*:*:*:*:*:*","matchCriteriaId":"EBC54C22-C4B9-4FF4-BF2C-1733D2B9754B"}]}]}],"references":[{"url":"http://security.bkis.vn/?p=292","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48961","source":"cve@mitre.org"},{"url":"http://security.bkis.vn/?p=292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0656","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Asus SmartLogon 1.0.0005 allows physically proximate attackers to bypass \"security functions\" by presenting an image with a modified viewpoint that matches the posture of a stored image of the authorized notebook user."},{"lang":"es","value":"Asus SmartLogon v1.0.0005 permite a usuarios fisicamente proximos evitar las \"funciones de seguridad\" mediante la presentacion de una imagen con un punto de vista modificado que coincida con la postura de la imagen autorizada del usuario legitimo almacenada en el equipo,"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asus:smartlogon:1.0.0005:*:*:*:*:*:*:*","matchCriteriaId":"55007B32-6107-4A57-8782-C94683644685"}]}]}],"references":[{"url":"http://security.bkis.vn/?p=292","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48962","source":"cve@mitre.org"},{"url":"http://security.bkis.vn/?p=292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/498997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0657","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of the authorized notebook user."},{"lang":"es","value":"Toshiba Face Recognition v2.0.2.32 permite a atacantes fisicamente proximos obtener acceso al equipo mediante la presentacion de un largo numero de imagenes en las que el punto de vista y la luz ha sido modificada para que coincida con la del usuario legitimo del equipo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:toshiba:face_recognition:2.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"417FF359-7C27-486B-9635-D5C4D96354D2"}]}]}],"references":[{"url":"http://security.bkis.vn/?p=292","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/498997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48963","source":"cve@mitre.org"},{"url":"http://security.bkis.vn/?p=292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/498997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0658","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E."},{"lang":"es","value":"Un desbordamiento del búfer en Adobe Reader versión 9.0 y anteriores, y Acrobat  versión 9.0 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un documento PDF creado, relacionado con una llamada a una función que no sea JavaScript y posiblemente una secuencia de imágenes del componente JBIG2 incrustada, tal como se explotó “in the wild” en febrero de 2009 por Trojan.Pidief.E."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.1.1","matchCriteriaId":"C45837B4-F4F9-45DC-B324-48BD4AB51973"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.1.4","matchCriteriaId":"5C1BEE55-AAE2-4D61-9156-7E34692469C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.1.1","matchCriteriaId":"4BB02266-8184-4A96-A1F0-66C9A3F0A329"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.1.4","matchCriteriaId":"07DD4484-A823-4B8B-8939-44A553E2FD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?n&storyid=5902","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/52073","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33901","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34392","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-01.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/905281","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33751","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021739","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-051A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0472","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48825","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8090","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8099","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://isc.sans.org/diary.html?n&storyid=5902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/52073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/33901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/905281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/33751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-051A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0659","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown impact via a STATS line with a long email field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la funcion GetStatsFromLine en TPTEST v3.1.7 permite a atacantes remotos obtener un impacto desconocido a traves de la linea STATS con un campo \"long email\". NOTA; La procedencia es desconocida; los detalles fueron obtenidos unicamente por una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tptest:tptest:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5850DB42-3355-4E37-B858-B02F3AD61AC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/33972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48781","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48953","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0660","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Mahara v1.0 anterior a v1.0.10 y v1.1 anterior a v1.1.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) profile y (2) blog. Vulnerabilidad distinta de CVE-2009-0487."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8B49D797-AF1B-4F7E-A71D-AABD0F802912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68167317-977B-48EE-9320-2A4539A93B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB25DF09-D88F-4633-9956-D64E3497153F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E32430EE-5F2B-4936-A297-2DF55CC22937"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1CC0259C-E628-4BBA-9D97-41A130B1E741"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"974F2D63-488C-41D7-A627-BF9B085A8D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E26420D4-20D8-4D6D-88B5-C74F39B88720"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"321475F4-1548-4FD1-BED9-12D944388FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F37005DE-BB31-4738-AC49-C3C2022AE8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"831676A2-1A33-4605-A5F4-97FAC8A1BB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"84652E40-1C88-438D-BCA1-4FF4C069F9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"08F53776-5F58-4C20-8FE7-9DF06F1704A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"79228F92-00A8-4B74-A914-11BDF9641F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F7FB1F02-A03F-45E5-8D26-C007C10EE97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A09C63AC-15A8-4722-B18E-98A86EC8A856"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"62452677-EE4C-4E5E-9DD2-D11C4211DA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"}]}]}],"references":[{"url":"http://mahara.org/interaction/forum/topic.php?id=350","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.mahara.org/Release_Notes/1.1.2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1736","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34064","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0665","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49168","source":"cve@mitre.org"},{"url":"http://mahara.org/interaction/forum/topic.php?id=350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.mahara.org/Release_Notes/1.1.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0661","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read."},{"lang":"es","value":"Wee Enhanced Environment for Chat (WeeChat) versión 0.2.6, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un comando PRIVMSG IRC que contiene códigos de color diseñados que desencadenan una lectura fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flashtux:weechat:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DC44B684-89A2-4A6E-8BC1-98C3C7B6A0FA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940","source":"cve@mitre.org"},{"url":"http://osvdb.org/52763","source":"cve@mitre.org"},{"url":"http://savannah.nongnu.org/bugs/index.php?25862","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://weechat.flashtux.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1744","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/17/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34148","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0758","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49295","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://savannah.nongnu.org/bugs/index.php?25862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://weechat.flashtux.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/17/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0662","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors."},{"lang":"es","value":"El producto PlonePAS 3.x anterior a la version 3.9 y 3.2.x en versiones anteriores a la 3.2.2, un producto para Plone, no maneja adecuadamente el formulario de login, lo que permite a atacantes remotos autenticados adquirir la identidad de un usuario de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plonepas:3.0:*:*:*:*:*:*:*","matchCriteriaId":"ACA0C288-C190-41CB-8B86-B5C791D906E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plonepas:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E832934C-0738-47D2-A3DA-16040EA41C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plonepas:3.2:*:*:*:*:*:*:*","matchCriteriaId":"B9535495-6677-49F9-BDE1-F7472899C3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plonepas:3.3:*:*:*:*:*:*:*","matchCriteriaId":"447AB0B6-4016-4DD4-9151-1D90BE8B70D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plonepas:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B7969846-24D4-4AE9-858D-A4292A65AADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:plone:plonepas:3.5:*:*:*:*:*:*:*","matchCriteriaId":"5A230672-0497-45C8-A511-BAD673193C25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*","matchCriteriaId":"0E87B987-557F-49BB-A837-34142D9C3761"}]}]}],"references":[{"url":"http://osvdb.org/53975","source":"cve@mitre.org"},{"url":"http://plone.org/products/plone/security/advisories/cve-2009-0662","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34664","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50061","source":"cve@mitre.org"},{"url":"http://osvdb.org/53975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://plone.org/products/plone/security/advisories/cve-2009-0662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0663","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el módulo DBD::Pg (alias DBD-Pg o libdbd-pg-perl) v1.49 para Perl podría permitir a atacantes, dependiendo del contexto, ejecutar código arbitrario a través de una entrada sin especificar a una aplicación que utiliza las funciones getline y pg_getline para leer filas de la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmu:dbd\\:\\:pg:1.49:*:*:*:*:*:*:*","matchCriteriaId":"0B17A3CD-3BF4-41AE-B755-6C5FA6401DEE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35058","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1780","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0479.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34755","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50467","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-0663","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0479.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-0663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0664","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Mahara la v1.0.x anteriores a v1.0.11 y la v1.1.x anteriores a v1.1.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través (1) el campo \"introduction\" en el perfil de usuario o (2) un bloque de texto arbitrario en la vista de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8B49D797-AF1B-4F7E-A71D-AABD0F802912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68167317-977B-48EE-9320-2A4539A93B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB25DF09-D88F-4633-9956-D64E3497153F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E32430EE-5F2B-4936-A297-2DF55CC22937"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1CC0259C-E628-4BBA-9D97-41A130B1E741"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"974F2D63-488C-41D7-A627-BF9B085A8D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E26420D4-20D8-4D6D-88B5-C74F39B88720"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"321475F4-1548-4FD1-BED9-12D944388FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F37005DE-BB31-4738-AC49-C3C2022AE8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8FA6F03B-F449-424E-A856-5BE5FB98814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"84652E40-1C88-438D-BCA1-4FF4C069F9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"08F53776-5F58-4C20-8FE7-9DF06F1704A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"79228F92-00A8-4B74-A914-11BDF9641F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F7FB1F02-A03F-45E5-8D26-C007C10EE97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A09C63AC-15A8-4722-B18E-98A86EC8A856"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"62452677-EE4C-4E5E-9DD2-D11C4211DA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"92848F08-EBFC-4579-A088-EC15D0B3EE48"}]}]}],"references":[{"url":"http://mahara.org/interaction/forum/topic.php?id=532","source":"cve@mitre.org"},{"url":"http://osvdb.org/53891","source":"cve@mitre.org"},{"url":"http://osvdb.org/53892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34871","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34677","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mahara.org/interaction/forum/topic.php?id=532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0667","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en Agent/Backend.pm en Ocsinventory-Agent anterior a  v0.0.9.3, y v1.x anterior a v1.0.1, en OCS Inventory, permite a usuarios locales obtener privilegios a través de un módulo de pearl que es un troyano en cualquier directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9C9D8DD-6505-4903-9181-26223DA65DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3E915093-BDDA-4A75-A0D0-819246D94249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*","matchCriteriaId":"F8B28BF3-C16C-458A-BC9B-23631D2B7623"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.9.2","matchCriteriaId":"EE80E70E-7BF9-4F74-8B28-130F3B4F2CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.05:*:*:*:*:*:*:*","matchCriteriaId":"8EAE7F8C-F2D3-4FE7-8331-C73CD0A65954"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.08:*:*:*:*:*:*:*","matchCriteriaId":"50959273-4987-402E-B2D6-77D6FD017E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.09:*:*:*:*:*:*:*","matchCriteriaId":"41F504A6-777B-41D0-99C0-FAD3EDD18DAA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506416","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://nana.rulezlan.org/~goneri/ocsinventory-agent/Ocsinventory-Agent-0.0.9.3.tar.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/55718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35727","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35768","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/o/ocsinventory-agent/ocsinventory-agent_0.0.9.2repack1-4lenny1.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1828","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=144","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35593","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1809","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://nana.rulezlan.org/~goneri/ocsinventory-agent/Ocsinventory-Agent-0.0.9.3.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/55718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/o/ocsinventory-agent/ocsinventory-agent_0.0.9.2repack1-4lenny1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0668","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol."},{"lang":"es","value":"Vulnerabilidad no especificada en Zope Object Database (ZODB) anterior a v3.8.2, cuando ciertos Zope Enterprise Objects (ZEO) habilitan compartir base de datos, permite a atacantes remotos ejecutar código Python arbitrario a través de vectores relaccionados con el protocolo de red ZEO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"F9A7E1A6-8B87-43C2-A202-7383687A20B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:2.8.11:*:*:*:*:*:*:*","matchCriteriaId":"AC8B7904-4F44-4641-9275-D995ADDA0ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:2.9.11:*:*:*:*:*:*:*","matchCriteriaId":"E70191DA-A946-495D-A2CA-5DA5735B116F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:2.10.9:*:*:*:*:*:*:*","matchCriteriaId":"4FB7982D-2F76-4237-8BBB-A4E5ADE1D497"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"3A461879-EF34-4817-8EBB-1FE7A73E03C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.1:*:*:*:*:*:*:*","matchCriteriaId":"3BF6448E-3BD4-4A3D-9D58-C39928F4FB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0CB7404-734F-4838-AAEE-A5D5E987EBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.2:*:*:*:*:*:*:*","matchCriteriaId":"64DF8BD4-31DC-44A5-944C-AA9AE57CBB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3D3CB7CF-91FC-4B7F-BD38-2F5033C70B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D05A4183-CCE7-4BE2-B8E5-10FC33ABDEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"02371BD4-F40F-4AA7-9214-E9FFCA80138C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B59CB22D-604D-4D9D-B7A4-E42026C7F3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C35B0E78-B0E7-41F2-B776-B7B4AE937350"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.5:*:*:*:*:*:*:*","matchCriteriaId":"A8B6C5C0-E10B-437D-BF3C-0847B78EFDAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.6:*:*:*:*:*:*:*","matchCriteriaId":"C6EF771A-6AE9-4006-A273-5B04B3EAADDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.7:*:*:*:*:*:*:*","matchCriteriaId":"C38116E1-459C-45A7-A995-20C8ABDCCF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"8568BD1E-839A-4C78-840D-47807D207C6F"}]}]}],"references":[{"url":"http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56827","source":"cve@mitre.org"},{"url":"http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35987","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52377","source":"cve@mitre.org"},{"url":"http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0669","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol."},{"lang":"es","value":"Zope Object Database (ZODB) anterior a v3.8.2, cuando ciertos Zope Enterprise Objects (ZEO) habilitan compartir base de datos, permite a atacantes remotos eludir la autenticación a través de vectores implicados en el protocolo de red ZEO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"F9A7E1A6-8B87-43C2-A202-7383687A20B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8:*:*:*:*:*:*:*","matchCriteriaId":"FF49B253-411F-4E83-93B3-556783B73965"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"8568BD1E-839A-4C78-840D-47807D207C6F"}]}]}],"references":[{"url":"http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56826","source":"cve@mitre.org"},{"url":"http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35987","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52379","source":"cve@mitre.org"},{"url":"http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0671","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.860","lastModified":"2023-11-07T02:03:41.740","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Format string vulnerability in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit imap-2007d and other applications, allows remote attackers to execute arbitrary code via format string specifiers in the initial request to the IMAP port (143/tcp).  NOTE: Red Hat has disputed the vulnerability, stating \"The Red Hat Security Response Team have been unable to confirm the existence of this format string vulnerability in the toolkit, and the sample published exploit is not complete or functional.\"  CVE agrees that the exploit contains syntax errors and uses Unix-only include files while invoking Windows functions"}],"vendorComments":[{"organization":"Red Hat","comment":"Disputed: The Red Hat Security Response Team have been unable to confirm the existence of this format string vulnerability in the toolkit, and the sample published exploit is not complete or functional.","lastModified":"2009-02-24T00:00:00.000"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0672","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the user_prefix parameter to modules.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el modulo Resend_Email en Raven Web Services RavenNuke v2.30 lo que permite a administradores remotos autentificados ejecutar comandos SQL a su elección a través del parámetro \"user_prefix\" a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*","matchCriteriaId":"24561E2B-3481-4E0C-8115-14A7FBB2F176"}]}]}],"references":[{"url":"http://osvdb.org/52298","source":"cve@mitre.org"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33787","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.waraxe.us/advisory-72.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48791","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8068","source":"cve@mitre.org"},{"url":"http://osvdb.org/52298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.waraxe.us/advisory-72.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0673","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php."},{"lang":"es","value":"Vulnerabilidad del inyección \"Eval\" en la característica Custom Fields en el modulo Your Account en Raven Web Services RavenNuke v2.30 lo que permite a administradores remotos autentificados ejecutar codigo PHP a su elección a través de la sección ID Field Name en la acción yaCustomFields a admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*","matchCriteriaId":"24561E2B-3481-4E0C-8115-14A7FBB2F176"}]}]}],"references":[{"url":"http://ravenphpscripts.com/postt17156.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33787","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-72.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48790","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8068","source":"cve@mitre.org"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-72.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0674","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ between existing and nonexistent pathnames."},{"lang":"es","value":"images/captcha.php en Raven Web Services RavenNuke v2.30, cuando register_globals y display_errors estan activados, lo que permite a atacantes remotos determinar la existencia de ficheros locales mediante el envio de peticiones con rutas de directorio completas en el parametro aFonts array, y luego observando las diferencias en los mensajes de error, que es lo que difiere entre las rutas de directorio existentes y las no existentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*","matchCriteriaId":"24561E2B-3481-4E0C-8115-14A7FBB2F176"}]}]}],"references":[{"url":"http://ravenphpscripts.com/postt17156.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33787","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-72.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48792","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48983","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8068","source":"cve@mitre.org"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-72.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0675","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an \"inverted logic\" issue."},{"lang":"es","value":"La funcion skfp_ioctl en drivers/net/skfp/skfddi.c en el kernel de Linux anterior a v2.6.28.6 permite peticiones SKFP_CLR_STATS solo cuando la capacidad CAP_NET_ADMIN esta ausente, en cambio cuando esta capacidad esta presente, lo que permite a usuarios locales borrar las estadísticas de driver, relacionado con el hecho \"lógica inversa\"."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 4 as the affected driver is not enabled in these kernels by default. The affected driver is enabled by default in Red Hat Enterprise Linux 2.1, 3, 5, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2009-0326.html and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-0360.html .\n\nAs Red Hat Enterprise Linux 2.1 and 3 are now in Production 3 of their maintenance life-cycle, http://www.redhat.com/security/updates/errata, and this issue has been rated as having moderate impact, the fix for this issue is not currently planned to be included in the future updates.","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.5","matchCriteriaId":"A8CF3A02-9ED4-40DA-9214-FFCB00A4284A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.openwall.net/netdev/2009/01/28/90","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/02/20/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33938","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34680","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:071","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=486534","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.openwall.net/netdev/2009/01/28/90","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/02/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=486534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0676","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request."},{"lang":"es","value":"La función sock_getsockopt en net/core/sock.c en el kernel de Linux anterior a v2.6.28.6 no inicializa un miembro de cierta estructura, lo que permite a usuarios locales obtener información sensible de la memoria del kernel a través de una petición SO_BSDCOMPAT getsockopt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.5","matchCriteriaId":"A8CF3A02-9ED4-40DA-9214-FFCB00A4284A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df0bca049d01c0ee94afb7cd5dfd959541e6c8da","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/2/12/123","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123540732700371&w=2","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/02/20/1","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/6816/","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34680","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:071","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/24/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/02/6","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33846","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=486305","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48847","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11653","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8618","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df0bca049d01c0ee94afb7cd5dfd959541e6c8da","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/2/12/123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123540732700371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/02/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/6816/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/02/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0360.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=486305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0677","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the preg_replace function with the eval switch, as specified in an element of the patterns array."},{"lang":"es","value":"avatarlist.php en el módulo Your Account, alcanzado a traves de modules.php, en Raven Web Services RavenNuke v2.30  lo que permite a usuarios remotos autentificados ejecutar codigo a su eleccion a traves de secuencias PHP en un elemento del array de reemplazo, lo que es procesado por la funcion preg_replace con el interruptor de evaluacion, como se especifica en un elemento del array de patrones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*","matchCriteriaId":"24561E2B-3481-4E0C-8115-14A7FBB2F176"}]}]}],"references":[{"url":"http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52007","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33787","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-72.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48789","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8068","source":"cve@mitre.org"},{"url":"http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-72.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0678","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message."},{"lang":"es","value":"images/captcha.php en RavenNuke v2.30 permite a atacantes remotos obtener información sensible a través del valor de un parámetro de aFonts array que no corresponde con un fichero de fuentes valido, lo que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*","matchCriteriaId":"24561E2B-3481-4E0C-8115-14A7FBB2F176"}]}]}],"references":[{"url":"http://ravenphpscripts.com/postt17156.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-72.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48792","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8068","source":"cve@mitre.org"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-72.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0679","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en el modulo Your Account en RavenNuke v2.30 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ravenphpscripts:ravennuke:2.30:*:*:*:*:*:*:*","matchCriteriaId":"24561E2B-3481-4E0C-8115-14A7FBB2F176"}]}]}],"references":[{"url":"http://osvdb.org/52299","source":"cve@mitre.org"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48978","source":"cve@mitre.org"},{"url":"http://osvdb.org/52299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ravenphpscripts.com/postt17156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0680","sourceIdentifier":"cve@mitre.org","published":"2009-02-22T22:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences."},{"lang":"es","value":"cgi-bin/welcome/VPN_only en el interfase Web en Netgear SSL312 permite a atacantes remotos provocar una denegación de servicio (caída del servicio) a través de una cadena de petición manipulada., como se ha demostrado utilizando secuencias de directorio transversal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:ssl312:-:*:*:*:*:*:*:*","matchCriteriaId":"098AEEF4-BA19-4041-B5A3-FF6A05D3017E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33896","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.helith.net/txt/netgear_ssl312_remote_dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33675","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48605","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8008","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.helith.net/txt/netgear_ssl312_remote_dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0681","sourceIdentifier":"cve@mitre.org","published":"2009-04-15T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys."},{"lang":"es","value":"PGP Desktop anterior a v9.10 permite a usuarios locales (1) provocar una denegación de servicio (caída) a través de peticiones IOCTL manipuladas en pgpdisk.sys, y (2) provocar una denegación de servicio (caída) y ejecutar código de su elección a través de una petición IOCTL con IRP manipulado en pgpwded.sys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:*:-:home:*:*:*:*:*","versionEndIncluding":"9.9.0","matchCriteriaId":"8A96A401-F0D4-4B5B-A54D-81AF805BEA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:*:-:pro:*:*:*:*:*","versionEndIncluding":"9.9.0","matchCriteriaId":"D13E822C-2401-4BA2-9F58-BA5A65BB5B88"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:8.0:*:home:*:*:*:*:*","matchCriteriaId":"0745A00E-1A44-475D-A39B-6597CDB27AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"EEE891C4-7A40-4FF8-99A6-0CB57653B364"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:9.0:*:home:*:*:*:*:*","matchCriteriaId":"F1A4562F-4959-44F9-AFEC-21D640E7B640"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:9.0:*:professional:*:*:*:*:*","matchCriteriaId":"5B5BCE69-AA38-4321-8B95-A3CFDFCBC9E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:9.0.6:-:home:*:*:*:*:*","matchCriteriaId":"1739BE5D-E639-4835-A080-E7D4B66EEEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop:9.0.6:-:pro:*:*:*:*:*","matchCriteriaId":"FAD65FDF-B51D-4898-8A09-0031BBACE335"}]}]}],"references":[{"url":"http://en.securitylab.ru/lab/PT-2009-01","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/502633/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022034","source":"cve@mitre.org"},{"url":"https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://en.securitylab.ru/lab/PT-2009-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/502633/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0682","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call."},{"lang":"es","value":"vetmonnt.sys en CA Internet Security Suite r3, vetmonnt.sys anteriores a v9.0.0.184 en Internet Security Suite r4, y vetmonnt.sys anteriores a v10.0.0.217 en Internet Security Suite r5 no verifica adecuadamente las llamadas IOCTL, lo que permite a usuarios locales producir una denegación de servicio ( caída de sistema) a través de una llamada manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite:*:r3:*:*:*:*:*:*","matchCriteriaId":"C9C3A838-C3FC-4134-89E3-3AE13078A359"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite:9.0.0.184:r4:32bit:*:*:*:*:*","matchCriteriaId":"80B3EC69-F6F6-45E1-80BB-038C1D9C5FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite:10.0.0.217:r5:32bit:*:*:*:*:*","matchCriteriaId":"E391D3E0-FEBF-4634-BB89-7AFCC04415E9"}]}]}],"references":[{"url":"http://en.securitylab.ru/lab/PT-2009-05","source":"cve@mitre.org"},{"url":"http://osvdb.org/57228","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505880/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506103/100/0/threaded","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://en.securitylab.ru/lab/PT-2009-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505880/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506103/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0686","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \\Device\\tmactmon that overwrites memory."},{"lang":"es","value":"Activity Monitor Module de TrendMicro (tmactmon.sys) versión 2.52.0.1002 en Internet Pro 2008 y 2009, y Security Pro 2008 y 2009 de Trend Micro, permite a los usuarios locales alcanzar privilegios por medio de un IRP diseñado en una petición IOCTL METHOD_NEITHER a \\Device\\tmactmon que sobrescribe la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"871D717F-5282-4445-B786-57910FED8FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:2008:-:pro:*:*:*:*:*","matchCriteriaId":"ADC2E9E8-154C-48AF-A2C4-73FA11D56E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:2009:*:*:*:*:*:*:*","matchCriteriaId":"77C56412-5316-49A1-A2F1-1A8DEFBF3FB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:internet_security:2009:-:pro:*:*:*:*:*","matchCriteriaId":"7C7304ED-62AF-4E7D-B68C-261F6795F97A"}]}]}],"references":[{"url":"http://en.securitylab.ru/lab/PT-2009-09","source":"cve@mitre.org"},{"url":"http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502314/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34304","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021955","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49513","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8322","source":"cve@mitre.org"},{"url":"http://en.securitylab.ru/lab/PT-2009-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502314/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0687","sourceIdentifier":"cret@cert.org","published":"2009-08-11T10:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload."},{"lang":"es","value":"La función pf_test_rule de OpenBSD Packet Filter (PF), tal como es usada en OpenBSD v4.2 hasta v4.5, NetBSD v5.0 anterior a RC3, MirOS v10 y anteriores y MidnightBSD v0.3 hasta la versión actual permite a atacantes remotos causar una denegación de servicio a través de paquetes IP modificados que provocan una \"desreferencia\" de un puntero nulo relacionada con un paquete IPv4 con datos (\"payload\") ICMPv6."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:midnightbsd:midnightbsd:0.3-current:*:*:*:*:*:*:*","matchCriteriaId":"0BB266CE-0E06-4094-AE00-0ADBD2364F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:mirbsd:miros:*:*:*:*:*:*:*:*","versionEndIncluding":"10","matchCriteriaId":"A6A4B5B9-C443-4A85-852D-F3B71732BCDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"00564BAA-066A-4627-B6A8-78724E55D363"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"89CA041B-4153-43C7-BA69-D6052F4EBEEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"B32BB973-60E5-402B-83FE-547786BC7A57"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt","source":"cret@cert.org"},{"url":"http://www.openbsd.org/errata43.html#013_pf","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata44.html#013_pf","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata45.html#002_pf","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/53608","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/502634","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/1015","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49837","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/8406","source":"cret@cert.org"},{"url":"https://www.exploit-db.com/exploits/8581","source":"cret@cert.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata43.html#013_pf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata44.html#013_pf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata45.html#002_pf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/53608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0688","sourceIdentifier":"cret@cert.org","published":"2009-05-15T15:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la librería CMU Cyrus SASL versiones anteriores a v2.1.23 puede permitir a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de cadenas que son utilizadas como entradas en la función sasl_encode64 en lib/saslutil.c."}],"vendorComments":[{"organization":"Red Hat","comment":"The upstream fix for this issue is not backwards compatible and introduces an ABI change not allowed in Red Hat Enterprise Linux.  Therefore, there is no plan to address this problem directly in cyrus-sasl packages.\n\nAll applications shipped in Red Hat Enterprise Linux and using affected sasl_encode64() function were investigated and patched if their use of the function could have security consequences.  See following bug report for further details: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0688#c20","lastModified":"2009-06-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.22","matchCriteriaId":"BE960939-A4EB-48EF-AF34-55594AE7DC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"89BEB28E-8CB4-40D1-8C1C-C9176FF85375"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"FC6C6AED-7F54-4833-AD7A-DBA943D556CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A2480238-1543-41F8-8AE8-8B39C435909F"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA3AD0B1-CA87-4781-859D-817AC36C0E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3420B0EC-C2B5-4391-994D-A379A84375D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C792FC66-0903-4339-9594-286E22A332B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.11:*:*:*:*:*:*:*","matchCriteriaId":"CFFC1662-FC2F-4F0C-9F54-A593D2272728"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.13:*:*:*:*:*:*:*","matchCriteriaId":"9163D050-653D-4E19-8650-C63AAE756A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.15:*:*:*:*:*:*:*","matchCriteriaId":"D1355304-ECEB-465C-B4E4-61F280B93083"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.16:*:*:*:*:*:*:*","matchCriteriaId":"838325C9-9F9F-438C-A3A7-E88C29D0D508"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.20:*:*:*:*:*:*:*","matchCriteriaId":"B64D37E3-5068-4773-A0E4-DF48CB1B5988"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.21:*:*:*:*:*:*:*","matchCriteriaId":"46B91E81-E4DF-402D-AFC9-106F8E7BE280"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.22:*:*:*:*:*:*:*","matchCriteriaId":"86C8037E-E7C5-41F2-8200-6BCF1F4231AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.23:*:*:*:*:*:*:*","matchCriteriaId":"729258B3-E537-4B7D-8C4D-2257B86C746C"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.24:*:*:*:*:*:*:*","matchCriteriaId":"DD2651BC-04DB-4807-95FC-E4DD48A504F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.26:*:*:*:*:*:*:*","matchCriteriaId":"BCE4D1B8-61E1-4862-B014-C3B4306643F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.27:*:*:*:*:*:*:*","matchCriteriaId":"340A8945-CDC4-4C27-829A-526E7ABE8AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.28:*:*:*:*:*:*:*","matchCriteriaId":"A8322F46-565E-4FBE-B42B-A369DB971954"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE6F481C-5209-499F-94CC-D552961AC4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2103985B-3283-4A60-B8E1-54E3243E0CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"33BCA1DC-E392-4BAB-B988-D4EAC2D0762D"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11FCE614-FC84-4533-B40B-F71B4CA9259A"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0E1FB96F-9A6E-4CAB-8D1D-3B980B1BE125"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"33A6FD48-AB9B-49E9-8987-7791E0CB8CDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"041EE0B5-4125-4A93-B91B-DD6A49C34FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"747F34DD-5645-46D1-A256-CFBC5A399B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A81A7CD5-5E03-45BA-9F49-E2A6AEB7C353"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6CB9648A-2393-41D8-8B2E-72A6E1B3FB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"220421BF-64E7-4014-9143-5699FDF41024"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5948936A-076E-48B7-ACE0-C53067780AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"237344AF-AE16-40EF-AECE-F7659193B3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"662552C9-0BE5-42DF-81BA-DE0DDF72F76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"B8E226EA-AD15-4DB9-9599-F7A91FDA879F"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5A09BFB5-E2B0-43EE-AA80-EE2E58A188AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"E838CB52-C13A-45C6-9B21-87A3D8701F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B99BDFC9-2002-4C2A-A3ED-C4FB49A77C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.13:*:*:*:*:*:*:*","matchCriteriaId":"6E18DC9D-A315-4A26-816D-86F90E198660"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.14:*:*:*:*:*:*:*","matchCriteriaId":"AF41DE28-AD62-4591-8541-0CA3D0397F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5F32C986-EAF2-45A1-8DCE-222F422FC3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.16:*:*:*:*:*:*:*","matchCriteriaId":"22094743-3B1A-42CD-B30C-B4E986C0F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.17:*:*:*:*:*:*:*","matchCriteriaId":"2BF7D594-6111-435A-8689-F5B23CB0457B"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.18:*:*:*:*:*:*:*","matchCriteriaId":"413902AD-3EFE-480E-B8EC-C6F28AF84C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.19:*:*:*:*:*:*:*","matchCriteriaId":"A181DAC2-112F-4C6A-8292-7526DD592A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.20:*:*:*:*:*:*:*","matchCriteriaId":"DF8F6313-9CC5-4685-8E26-BD7CF8CBFDE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.21:*:*:*:*:*:*:*","matchCriteriaId":"923C3D5B-A676-40C2-B8BC-C25A1B5FC1E1"}]}]}],"references":[{"url":"ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz","source":"cret@cert.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cret@cert.org"},{"url":"http://osvdb.org/54514","source":"cret@cert.org"},{"url":"http://osvdb.org/54515","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35094","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35097","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35102","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35206","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35239","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35321","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35416","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35497","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35746","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/39428","source":"cret@cert.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-09.xml","source":"cret@cert.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.448834","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259148-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264248-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020755.1-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1","source":"cret@cert.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cret@cert.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm","source":"cret@cert.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2009/dsa-1807","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/238019","source":"cret@cert.org","tags":["Patch","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:113","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1116.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/34961","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022231","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/usn-790-1","source":"cret@cert.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103B.html","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1313","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2012","source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50554","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10687","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6136","source":"cret@cert.org"},{"url":"ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.448834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264248-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020755.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/238019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-790-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0689","sourceIdentifier":"cret@cert.org","published":"2009-07-01T13:00:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number."},{"lang":"es","value":"Error de índice de matriz en la (1) implementación dtoa en archivo dtoa.c (también se conoce como pdtoa.c) y (2) la implementación gdtoa (también se conoce como dtoa new dtoa) en archivo gdtoa/misc.c en libc, tal y como es usado en múltiples sistemas operativos y productos, incluidos FreeBSD versiones 6.4 y 7.2, Net versión 5.0, OpenBSD versión 4.5, Mozilla Firefox versión 3.0.x y anteriores a las versión 3.0.15 y 3.5.x anterior a versión 3.5.4, K-Meleon versión 1.5.3, SeaMonkey versión 1.1.8 y otros productos, permite a los atacantes dependiendo del contexto causar una denegación de servicio (bloqueo de aplicación) y posiblemente ejecutar código arbitrario por medio de un valor de precisión largo en el argumento de formato para una función printf, que desencadena una asignación de memoria inapropiada y un desbordamiento de búfer en la región heap de la memoria durante la conversión a un número de punto flotante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:k-meleon_project:k-meleon:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"34C36C0A-5A73-4E19-A798-7337AF0F353E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*","matchCriteriaId":"53D1AD5E-4007-4AFA-A18B-69D1AC055C00"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*","matchCriteriaId":"06BFEE54-DBF3-4546-AE57-2C25FC9F0F04"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*","matchCriteriaId":"BE1FC1A8-E499-45A0-B89A-5BFA24727DBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*","matchCriteriaId":"8E08DCB9-9064-4DB7-B43A-7B415882EB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*","matchCriteriaId":"E4A5E6FF-617E-4173-A948-F3728454A012"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*","matchCriteriaId":"06FB0EEA-254E-4A1F-99E7-058FCD518E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*","matchCriteriaId":"8B573401-DC6F-4AFE-92F5-D96F785D2107"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*","matchCriteriaId":"60D40129-108B-421B-9990-6C6F381C96AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"00564BAA-066A-4627-B6A8-78724E55D363"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"B32BB973-60E5-402B-83FE-547786BC7A57"}]}]}],"references":[{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h","source":"cret@cert.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0311.html","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0312.html","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/37431","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37682","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37683","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38066","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38977","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39001","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-35/","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/63","source":"cret@cert.org","tags":["Exploit"]},{"url":"http://securityreason.com/achievement_securityalert/69","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/71","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/72","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/73","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/75","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/76","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/77","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/78","source":"cret@cert.org"},{"url":"http://securityreason.com/achievement_securityalert/81","source":"cret@cert.org"},{"url":"http://securitytracker.com/id?1022478","source":"cret@cert.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cret@cert.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cret@cert.org"},{"url":"http://support.apple.com/kb/HT4225","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cret@cert.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-59.html","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/942/","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1601.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/507977/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/507979/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/508417/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/508423/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/35510","source":"cret@cert.org","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/3297","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3299","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0094","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516396","source":"cret@cert.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516862","source":"cret@cert.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541","source":"cret@cert.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0311.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0312.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-35/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/63","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/achievement_securityalert/69","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/71","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/73","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/75","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/76","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/77","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/78","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/81","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-59.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/942/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1601.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507977/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507979/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508417/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508423/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0690","sourceIdentifier":"cret@cert.org","published":"2009-06-23T21:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read."},{"lang":"es","value":"El complemento Foxit JPEG2000/JBIG2 Decoder antes de v2.0.2009.616 para Foxit Reader 3.0 antes de Build1817 no gestiona correctamente un valor negativo para la posición del octeto del stream en un flujo JPEG2000 (alias JPX), lo que permite a atacantes remotos provocar una denegación de servicio (mediante corrupción memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo PDF modificado que provoca una lectura fuera de límite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"30CB7169-357B-42FB-B680-044883A8D9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.0.2009.1301:*:*:*:*:*:*:*","matchCriteriaId":"913B8A86-09E0-4213-9111-6645064879C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:jpeg2000\\/jbig2_decoder_add-on:2.0.2009.303:*:*:*:*:*:*:*","matchCriteriaId":"91BF8C8A-A14F-4566-A0AE-C8D5C8B8D892"}]}]}],"references":[{"url":"http://secunia.com/advisories/35512","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022425","source":"cret@cert.org"},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#0602","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/251793","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35442","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1640","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#0602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/251793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0691","sourceIdentifier":"cret@cert.org","published":"2009-06-23T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access."},{"lang":"es","value":"El complemento Foxit JPEG2000/JBIG2 Decoder antes de v2.0.2009.616 para Foxit Reader 3.0 antes de Build1817 no gestiona correctamente un error fatal durante la decodificación de una cabecera JPEG2000 (alias JPX), lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo PDF modificado que provoca un acceso a memoria no válida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:jpeg2000_jbig2_decoder_add-on:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2009.303","matchCriteriaId":"E502CF3B-1F4E-46A7-902F-8039BB8B590F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"30CB7169-357B-42FB-B680-044883A8D9D5"}]}]}],"references":[{"url":"http://secunia.com/advisories/35512","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022425","source":"cret@cert.org"},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#0602","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/251793","source":"cret@cert.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35443","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1640","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#0602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/251793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0692","sourceIdentifier":"cret@cert.org","published":"2009-07-14T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método script_write_params en client/dhclient.c en ISC DHCP dhclient v4.1 anteriores a  v4.1.0p1, v4.0 anteriores a  v4.0.1p1, v3.1 anteriores a v3.1.2p1, v3.0, y v2.0 permite a servidores DHCP remotos ejecutar código arbitrario a través de una opción manipulada subnet-mask."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue affected the dhcp packages as shipped with Red Hat Enterprise Linux 3 and 4. Updated packages to correct this issue are available via Red Hat Network:\n\nhttps://rhn.redhat.com/errata/CVE-2009-0692.html\n\nThis issue did not affect the dhcp packages as shipped with Red Hat Enterprise Linux 5 due to the use of FORTIFY_SOURCE protection mechanism that changes the exploitability of the issue into a controlled application termination.","lastModified":"2009-07-16T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CC3F60D5-1AC2-4FBD-9CA5-775F082D339D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"648BBC1F-1792-443F-B625-67A05004EB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"EE9B9007-1F13-4991-B44C-47D8EB56FB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"685EB87F-756C-4DBA-A347-171470EA0B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"41B46352-9D4D-4C74-876F-3685016025CC"}]}]}],"references":[{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-010.txt.asc","source":"cret@cert.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"cret@cert.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35785","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35829","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35830","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35831","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35832","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35841","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35849","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35850","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35851","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/35880","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36457","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/37342","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/40551","source":"cret@cert.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-12.xml","source":"cret@cert.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561471","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2009/dsa-1833","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/410676","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:151","source":"cret@cert.org"},{"url":"http://www.osvdb.org/55819","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1136.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1154.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/35668","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022548","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/usn-803-1","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/1891","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2010/1796","source":"cret@cert.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=507717","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5941","source":"cret@cert.org"},{"url":"https://www.isc.org/downloadables/12","source":"cret@cert.org"},{"url":"https://www.isc.org/node/468","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html","source":"cret@cert.org"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-010.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/410676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-803-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=507717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.isc.org/downloadables/12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.isc.org/node/468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0696","sourceIdentifier":"cret@cert.org","published":"2009-07-29T17:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009."},{"lang":"es","value":"La función  dns_db_findrdataset en db.c en \"named\" en ISC BIND v9.4 anterior a v9.4.3-P3, v9.5 anterior a v9.5.1-P3, y v9.6 anterior a v9.6.1-P1, cuando está configurado como un servidor maestro, permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida de demonio) a través de cualquier registro en la sección prerequerida de un mensaje de actualización dinámico manipulado, tal como se ha explotado en julio de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*","matchCriteriaId":"5C8B18D7-4D15-46A7-8013-E6267127A427"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*","matchCriteriaId":"C4B45FE3-307E-4599-B2CF-5203FA606469"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*","matchCriteriaId":"F12E3841-1CF0-4969-A286-50769BAE31EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*","matchCriteriaId":"D8B11586-1274-422D-873A-25DF193FB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*","matchCriteriaId":"87D61CDA-BB78-4957-A502-6D77B567B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*","matchCriteriaId":"5A31533C-BD6E-4EB4-8047-3257BF51F592"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*","matchCriteriaId":"D8537C88-4F73-43DD-9BDC-AF470882EED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"6D7D1A96-0A8E-4E3A-9442-701E3D1A1F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"93C23313-817F-4AB5-9058-31B0C7F954A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*","matchCriteriaId":"FA9F93EC-1AA2-43A6-9869-8974C819370A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*","matchCriteriaId":"726720E2-4B59-4665-A72E-E2E996957EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"32E4FEA8-A654-4E9F-8948-5878E7C427C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"916D4013-27A5-4688-A985-A9B77F90AC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F8583B8D-54A4-4064-810B-34F4F5A33A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*","matchCriteriaId":"932E3F02-DD98-43FC-8077-50506E512989"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*","matchCriteriaId":"63C2A2FD-7AE7-462A-99B2-809BE1F35C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E01A12DF-E94B-426E-8751-96FC56105D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*","matchCriteriaId":"7717B1A2-CAF5-49F3-AC73-273074BBEE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*","matchCriteriaId":"F037EE61-50D6-4C1E-B24B-25A6D212E7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*","matchCriteriaId":"5140F118-BC25-43CB-B19C-0885A44D6646"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:p2:*:*:*:*:*:*","matchCriteriaId":"82B9397F-463E-4F73-86F6-4EF3368E14BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:*","matchCriteriaId":"9A944178-032B-4637-842D-BC6B227043A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"32CEF8AD-9EE7-4ADA-888E-883751962529"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a1:*:*:*:*:*:*","matchCriteriaId":"76B4ED8A-9182-4403-8F66-3EB360E73477"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a2:*:*:*:*:*:*","matchCriteriaId":"84046EF9-AF5F-43FA-8E2C-11C7A01D17F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a3:*:*:*:*:*:*","matchCriteriaId":"7545BB70-5C74-47A7-BB07-765BC8C2A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a4:*:*:*:*:*:*","matchCriteriaId":"AE6BFDBD-DE4D-407F-86A4-FA78F99AA531"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a5:*:*:*:*:*:*","matchCriteriaId":"4337C3FF-C15B-4EFD-AA13-F9CA0542C2FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a6:*:*:*:*:*:*","matchCriteriaId":"AB6534DE-1ACB-4BCE-87A4-901F02F6CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a7:*:*:*:*:*:*","matchCriteriaId":"BE5F1A64-2428-4F85-8B93-3E324E983D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:b1:*:*:*:*:*:*","matchCriteriaId":"5F5D6222-3C1D-42FA-8882-1EE28B94D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:b2:*:*:*:*:*:*","matchCriteriaId":"08899782-3182-46EB-947D-3BA9C371ACA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:b3:*:*:*:*:*:*","matchCriteriaId":"575443B1-1638-497E-BCCF-E725B386ED88"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p1:*:*:*:*:*:*","matchCriteriaId":"30616740-FC69-4B92-B997-B7AF7643656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2:*:*:*:*:*:*","matchCriteriaId":"3E306D3A-11AE-4F35-971E-B47D47628052"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2_w1:*:*:*:*:*:*","matchCriteriaId":"4FF37B1D-04AD-4E37-A238-34BE7C5311E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2_w2:*:*:*:*:*:*","matchCriteriaId":"6AAEE115-8EA0-4E2B-9960-647967B39606"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:*:*:*:esv:*:*:*","matchCriteriaId":"6C8BE53C-2A4A-4959-AA97-5ABC04CC0E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r1:*:*:esv:*:*:*","matchCriteriaId":"2677A691-12FF-40D9-90FD-772CE3C5A9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r2:*:*:esv:*:*:*","matchCriteriaId":"D8A7089F-C797-4024-AFC1-E0E6458DE848"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r3:*:*:esv:*:*:*","matchCriteriaId":"7DD82385-C550-4B18-98EA-D98E3091BB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r4:*:*:esv:*:*:*","matchCriteriaId":"3A33A726-ED5B-45EB-8474-9298AE99DA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r4_p1:*:*:esv:*:*:*","matchCriteriaId":"F87EAE50-93EC-4297-8E05-0E904CC24272"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r5:*:*:esv:*:*:*","matchCriteriaId":"0D2999C4-F1DC-4DD7-9302-C148EB3E9732"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r5_b1:*:*:esv:*:*:*","matchCriteriaId":"275EA814-22C2-4B38-B26A-ACD393414DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:esv:*:*:*","matchCriteriaId":"3E41290E-0F4A-4113-BBE1-BC33EBDB7141"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6:*:*:esv:*:*:*","matchCriteriaId":"EB714DDF-DA52-4E7C-B40F-DE2A85901998"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:esv:*:*:*","matchCriteriaId":"21AE1593-38AC-4345-BD69-6589627A10FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:esv:*:*:*","matchCriteriaId":"9BC239C2-22E1-4E12-888C-C002C2CD1B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:esv:*:*:*","matchCriteriaId":"7C21A765-6EB9-4213-BD35-FBD0E5C6A63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r7:*:*:esv:*:*:*","matchCriteriaId":"9CEDA8E0-A429-4099-96B2-F63EAA9B33FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:esv:*:*:*","matchCriteriaId":"4FEFE357-E5A6-4B22-8A30-25C9100BBCFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:esv:*:*:*","matchCriteriaId":"F846EB9A-DE66-44F9-AEB8-A297D18CFF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r9:*:*:esv:*:*:*","matchCriteriaId":"777724C0-3259-4D40-82F6-4588CA79A819"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:esv:*:*:*","matchCriteriaId":"F0CB9332-22B3-48AC-919A-A4E5F43D9B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F42F7AF7-D37C-4213-B2BC-D2B9FE725BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:a1:*:*:*:*:*:*","matchCriteriaId":"A964450E-7DA8-478B-923E-E8CD1BA0F09C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:b1:*:*:*:*:*:*","matchCriteriaId":"32FAE1EF-3BF0-4B12-8F08-AA061A6D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*","matchCriteriaId":"5ABB3FC8-0A0D-4881-9137-5F6A8CCB9345"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C02A3BC0-78A4-4F4D-AA5B-3C05122137EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"178C7D9F-8699-42A3-8729-0BC6323EBDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1BEF53C6-E555-49D4-B4B2-63BA71CC77E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.1:b1:*:*:*:*:*:*","matchCriteriaId":"2B4565A6-122B-406C-A7BE-A029F92799B5"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc","source":"cret@cert.org"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt","source":"cret@cert.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc","source":"cret@cert.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36035","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36038","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36050","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36053","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36056","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36063","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36086","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36098","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36192","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/37471","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/39334","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1","source":"cret@cert.org"},{"url":"http://up2date.astaro.com/2009/08/up2date_7505_released.html","source":"cret@cert.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0113","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/725188","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata44.html#014_bind","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/505403/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022613","source":"cret@cert.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/usn-808-1","source":"cret@cert.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2036","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2088","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2171","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2247","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806","source":"cret@cert.org"},{"url":"https://www.isc.org/node/474","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html","source":"cret@cert.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2009/08/up2date_7505_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/725188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata44.html#014_bind","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505403/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-808-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.isc.org/node/474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0698","sourceIdentifier":"secalert@redhat.com","published":"2009-02-23T15:30:04.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385."},{"lang":"es","value":"Un desbordamiento de entero en el demuxer 4xm (demuxers/demux_4xm.c) en xine-lib 1.1.16.1 permite a atacantes remotos provocar una denegación de servicio (con caída de la aplicación) y posiblemente ejecutar código arbitrario a través de un archivo de película 4X con un gran valor current_track. Se trata de un problema similar al de CVE-2009-0385."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.16.1:*:*:*:*:*:*:*","matchCriteriaId":"066B88F9-0617-403E-9B7A-B8CAC6E76D5F"}]}]}],"references":[{"url":"http://bugs.xine-project.org/show_bug.cgi?id=205","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=660071","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:298","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:299","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/500514/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.trapkit.de/advisories/TKADV2009-004.txt","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-746-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48954","source":"secalert@redhat.com"},{"url":"http://bugs.xine-project.org/show_bug.cgi?id=205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=660071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500514/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2009-004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-746-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0699","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en pagesUTF8/auftrag_allgemeinauftrag.jsp de Plunet BusinessManager v4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) QUB y (2) \"Bez74\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plunet:business_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"5E192FE6-1BBD-42E0-95A8-6D7B91D8BF4E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html","source":"cve@mitre.org"},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33153","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47795","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0700","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp."},{"lang":"es","value":"Plunet BusinessManager 4.1 y anteriores permiten a usuarios remotos autenticados eludir las restricciones de acceso y (1) leer datos sensibles de Cliente u Ordenes a través de un acceso a pagesUTF8/Sys_DirAnzeige.jsp  con un parámetro Pfad modificado, o (2) listar Trabajos sensibles a través de una solicitud directa a pagesUTF8/auftrag_job.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plunet:business_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"5E192FE6-1BBD-42E0-95A8-6D7B91D8BF4E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html","source":"cve@mitre.org"},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33153","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47794","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0701","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) THEME_header and (2) THEME_footer parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en index.php en Cybershade CMS 0.2b, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en los parámetros (1) THEME_header y (2) THEME_footer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybershade:cybershadecms:0.2b:*:*:*:*:*:*:*","matchCriteriaId":"E6EEE359-6A69-422D-8F54-A4F748993A42"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33101","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47725","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0702","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Phoca Documentation (com_phocadocumentation) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en el componente Phoca Documentation (com_phocadocumentation) de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en una acción sección a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phoca:com_phocadocumentation:-:*:*:*:*:*:*:*","matchCriteriaId":"40335480-875C-4527-AC72-50C0DD82973D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33114","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7670","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0703","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en bview.asp en ASPThai.Net Webboard 6.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspthai.net:aspthai.net_webboard:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0EB871EA-8E05-4065-B291-D8BB093C8E18"}]}]}],"references":[{"url":"http://secunia.com/advisories/34099","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47722","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7635","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0704","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en search.php en WSN Guest 1.23 permite a atacantes remotos ejecutar comandos SQL a través del parámetro Search en una acción avanzada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmastersite:wsn_guest:1.23:*:*:*:*:*:*:*","matchCriteriaId":"92B32F0F-8BB8-4FEF-BA23-AC485A0AA543"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33097","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47723","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0705","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news.php de PowerScripts PowerNews 2.5.4, cuando está desactivado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"newsid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerscripts:powernews:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"56D7144F-0007-4E87-B671-77544E5F4198"}]}]}],"references":[{"url":"http://osvdb.org/51110","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33081","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47701","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7641","source":"cve@mitre.org"},{"url":"http://osvdb.org/51110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0706","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Simple Review (com_simple_review) component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Simple Review (com_simple_review) v1.3.5 para Joomla! y Mambo permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"category\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple-review:com_simple_review:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"891CE0F3-EE97-4BAD-873B-A9F7B5CFE049"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0901-exploits/joomlasimplereview-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33102","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47726","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0901-exploits/joomlasimplereview-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0707","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter (aka login field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php de PowerClan v1.14a permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"loginemail\" (también conocido como campo \"login\"), NOTE: algunos de estos detalles se han obtenido de información de terceras personas.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerscripts:powerclan:1.14a:*:*:*:*:*:*:*","matchCriteriaId":"69157A7B-7D74-4EF1-9BE7-4E49273BC7EC"}]}]}],"references":[{"url":"http://osvdb.org/51112","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33362","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47702","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7642","source":"cve@mitre.org"},{"url":"http://osvdb.org/51112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0708","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1) hijack the authentication of administrators via unknown vectors or (2) hijack the authentication of arbitrary users via vectors involving the profile page."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site request forgery (CSRF) en SemanticScuttle anterior a versión 0.91 permiten a los atacantes remotos (1) secuestrar la autenticación de administradores por medio de vectores desconocidos o (2) secuestrar la autenticación de usuarios arbitrarios por medio de vectores que involucran la página profile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:*:*:*:*:*:*:*:*","versionEndIncluding":"0.90","matchCriteriaId":"BC5A5C27-5BEC-447A-821A-4C3921228C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.85:*:*:*:*:*:*:*","matchCriteriaId":"81115CF0-0DDB-47DE-8B9B-34CBFB7863B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.86:*:*:*:*:*:*:*","matchCriteriaId":"62BF88B6-892F-4144-8EF3-3D1AC7B0A6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.87:*:*:*:*:*:*:*","matchCriteriaId":"999D88B3-1EF0-492A-8A80-93EC031E3766"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.88:*:*:*:*:*:*:*","matchCriteriaId":"FE3B588E-95F5-4018-B6C0-91FA16EF2FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:semanticscuttle:semanticscuttle:0.89:*:*:*:*:*:*:*","matchCriteriaId":"0E445F40-C82B-4B63-A447-7FC9401BB224"}]}]}],"references":[{"url":"http://secunia.com/advisories/33383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=651587","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=651587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0709","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the user parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en PHPForball v1.6 permite a atacantes remotos ejecutar comandos SQL de su elección, a través del parámetro \"user\". NOTA: el origen de esta información es desconocido; los detalles se han obtenido solamente de información de terceras personas.\r\n \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C06D627A-00E6-44B1-B0D2-46DFF5C1A551"}]}]}],"references":[{"url":"http://osvdb.org/51104","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47720","source":"cve@mitre.org"},{"url":"http://osvdb.org/51104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0710","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the user parameter to login.php or (2) the dbfield parameter to filter.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PHPFootball v1.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro \"user\" en login.php, o (2) el parámetro \"dbfield\" en filter.php. NOTE: El origen esta información es desconocido; los detalles se han obtenido solamente de información de terceras partes.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C06D627A-00E6-44B1-B0D2-46DFF5C1A551"}]}]}],"references":[{"url":"http://osvdb.org/51105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33367","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47719","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47721","source":"cve@mitre.org"},{"url":"http://osvdb.org/51105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/51103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0711","sourceIdentifier":"cve@mitre.org","published":"2009-02-23T15:30:04.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter.  NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown."},{"lang":"es","value":"filter.php en PHPFootball v1.6 y anteriores permite a atacantes remotos obtener hashes de contraseñas a través de una petición con un valor Accounts en el parámetro \"dbtable\", en conjunción con el valor Password en el parámetro \"dbfield\": NOTA: Esto ha sido reportado como una inyección SQL por algunas fuentes, pero el origen de esta información es desconocido.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E33B72-3F09-4468-A8E2-6F06D884A167"},{"vulnerable":true,"criteria":"cpe:2.3:a:vlad_alexa_mancini:phpfootball:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C06D627A-00E6-44B1-B0D2-46DFF5C1A551"}]}]}],"references":[{"url":"http://secunia.com/advisories/33367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51102","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0712","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en WMI Mapper para HP Systems Insight Manager anteriores a v2.5.2.0, permite a usuarios locales elevar sus privilegios a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wmi_mapper:*:*:*:*:*:*:*:*","matchCriteriaId":"4E84338C-4517-4877-BF5A-C0A4D8491948"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hp:insight_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"C06F84F7-2636-445F-B907-B4807A955A35"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123688841217193&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/52592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34078","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021835","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0671","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123688841217193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0713","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en WMI Mapper para HP Systems Insight Manager anteriores a v2.5.2.0, permite a atacantes remotos obtener información sensible a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:systems_insight_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"8C203258-F1A8-48C0-A374-42671E49E896"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123688841217193&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/52591","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34078","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021836","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0671","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123688841217193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0714","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo dpwinsup (dpwinsup.dll) para dpwingad (dpwingad.exe) en HP Data Protector Express y Express SSE 3.x en versiones anteriores a build 47065 y Express y Express SSE 4.x en versiones anteriores a build 46537, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o lectura de porciones de memoria a través de uno o más paquetes manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"},{"vulnerable":false,"criteria":"cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*","matchCriteriaId":"BF45C68A-5F83-4090-A0C1-A09EC2987706"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"},{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:-:*:*:*:*:*:*:*","matchCriteriaId":"1FB65EF0-0E6A-4178-8564-3CC96891A072"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:data_protector_express:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0B416366-2680-41E2-ABF9-5CD8D89C7FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3F5B5D2E-4692-4DA5-805E-B449CFD9DA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:sse:*:*:*","matchCriteriaId":"95F46633-43B3-416F-89CC-EA6A03EFAA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"AED70E63-BA67-4A68-A121-C3E80F2D1EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:sse:*:*:*","matchCriteriaId":"4D5B564A-E034-4E65-BCF9-224CBB175F98"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ivizsecurity.com/security-advisory-iviz-sr-09002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35084","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34955","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022220","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/9006","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/9007","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://ivizsecurity.com/security-advisory-iviz-sr-09002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/9006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/9007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0715","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain \"access\" or \"extended privileges\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en Secure NaviCLI en HP Storage Essentials v6.0.2 hasta v6.0.4 permite a usuarios remotos autenticados obtener \"access\" o \"privilegios extendidos\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storage_essentials:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7C7E8AA6-809F-416D-B520-ED55CC8A66B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storage_essentials:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"15E47E96-5BE8-4DC3-936D-7C14A5B52B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storage_essentials:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40EA615A-99F4-4346-82DB-DB6742AAB0F0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025839111157&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025839111157&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/53881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34807","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022084","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1109","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025839111157&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124025839111157&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0716","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service or obtain \"access\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP StorageWorks Storage Mirroring v5 anteriores a v5.1.1.1090.15 permite a atacantes remotos producir una denegación de servicio o conseguir \"access\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:5:*:*:*:*:*:*:*","matchCriteriaId":"47F5C70A-3C84-4082-8B77-F61A3A56F1B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CED9F207-885B-45E4-A8FB-1C9604E7D532"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34808","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022085","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1108","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0717","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP StorageWorks Storage Mirroring v5 anterior a v5.1.1.1090.15 permite a atacantes remotos producir una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:5:*:*:*:*:*:*:*","matchCriteriaId":"47F5C70A-3C84-4082-8B77-F61A3A56F1B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CED9F207-885B-45E4-A8FB-1C9604E7D532"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34808","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022086","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1108","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0718","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP StorageWorks Storage Mirroring v5 anterior a v5.1.1.1090.15 permite a atacantes remotos ejecutar de forma arbitraria a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:5:*:*:*:*:*:*:*","matchCriteriaId":"47F5C70A-3C84-4082-8B77-F61A3A56F1B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_storage_mirroring:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CED9F207-885B-45E4-A8FB-1C9604E7D532"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34808","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022087","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1108","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124025929213175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0719","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T15:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660."},{"lang":"es","value":"Vulnerabilidad no especificada en useradd en HP-UX B.11.11, B.11.23, y B.11.31 permite a usuarios locales acceder a archivos y directorios a su elección a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-1660."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34748","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5791","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0720","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código de forma arbitraria a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*","matchCriteriaId":"E31677CB-1DAC-498C-9372-D442D60A6389"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124146030732511&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124146030732511&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/54222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34942","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022163","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1250","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124146030732511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124146030732511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/54222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0721","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en Easy Login en el módulo Sender de HP Graphics Software (RGS) v4.0.0 a v5.2.4 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D13875F9-8644-49D0-9183-9404E8DEB62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFCEF21E-75F6-4DE2-B425-6DD55ED5DE24"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3E3EE3F1-E170-48E5-8696-D40063D8815D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FFF60515-706F-440F-B15C-463616E92174"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D62BDD91-0C35-4DA9-9EED-28C5F275093C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"247AFF9F-CE1C-4F81-8039-6C53CBB9A372"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A0AAAA26-6AAE-44CD-B174-87F39A8D4493"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"694C4C6D-F626-4432-A71C-0211EF2BD614"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9DFB171-34C4-4E43-A37E-0D54D50864A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1C1A968-7DC0-4343-BF41-9A66B2D4EE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BC75895C-CE1B-412A-9978-F869BE33D745"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.0:*:*:*:*:*:*:*","matchCriteriaId":"74D480B3-8E4C-498A-8F55-EE894A021214"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C10CC058-9DED-49B1-A9A3-F9ACDAA99223"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BD9C41B-6E00-4CF8-B4FC-EBE5293E5F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A1406753-ECC8-4556-AE82-C86D3B58F8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F89D247E-366C-4E94-BA90-B5EF22EB0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8895029D-B8E9-4FA6-915E-CC5C28379ABF"}]}]}],"references":[{"url":"http://secunia.com/advisories/35087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022221","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970","source":"cve@mitre.org"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34980","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1323","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0722","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the user cookie parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin.php en Potato News v1.0.0,permite a atacantes remotos incluir y ejecutar archivos de su elección a través de ..(punto punto) en el parámetro \"user cookie\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:potato-scripts:potato_news:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4E992F02-9AAB-4BC9-AF4D-EC9F54B6280F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33729","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8032","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0723","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de enteros en LittleCMS (también conocido como lcms o liblcms) anteriores a v1.18beta2, como el utilizado en Firefox v3.1beta, OpenJDK, y GIMP, permiten a atacantes dependientes de contexto ejecutar código arbitrario a través de un fichero de imagen manipulado, que provoca un desbordamiento de buffer basada en montículo. NOTA: algunos de estos detalles son obtenidos de información de terceras personas.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.2","matchCriteriaId":"28CB30F0-E3AF-490A-B05B-0947A2BF717B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*","matchCriteriaId":"0F72BFD4-000D-4B07-8261-C9F6839AD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","versionEndIncluding":"7","matchCriteriaId":"3BD10277-3747-438E-BB0F-CC7E71602FC1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.17","matchCriteriaId":"5DAF1951-51CA-4FCC-94EE-3713860D6598"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-003.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34367","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34382","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34400","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34408","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34442","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34450","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34454","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34463","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34782","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1745","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2009-003.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0339.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502018/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502031/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34185","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021869","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-744-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0775","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487508","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49326","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11780","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502031/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-744-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0726","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcal_gigs_id parameter in a details action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente GigCalendar (com_gigcal) v1.0 para Mambo y Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gigcal_gigs_id en una acción details en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gigcalendar:com_gigcalendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF2D1050-B155-470F-8C50-C86DA90F832E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33241","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47919","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0727","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:03.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the jobid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en jobdetails.php en taifajobs v1.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"jobid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tony_iha_kazungu:taifajobs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"3CB9794A-37EC-40F9-8FAB-28656856E9D1"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=126","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/52256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501183/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33864","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8098","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/52256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0728","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:03.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo My-eGallery para MAXdev MDPro (MD-Pro) y Postnuke, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid en una acción showpic de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxdev:my_egallery:-:*:*:*:*:*:*:*","matchCriteriaId":"1943F997-8B2F-49C9-B6E9-6E5331309853"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*","matchCriteriaId":"91B05377-4F3B-46F2-80AA-1175A344F6BD"},{"vulnerable":false,"criteria":"cpe:2.3:a:postnuke:postnuke:*:*:*:*:*:*:*:*","matchCriteriaId":"69ED948F-298A-42DB-A45A-EF5EA0F04B38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33871","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0729","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:03.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Page Engine CMS v2.0 Basic y Pro, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro \"fPrefix\" a (1) modules/recent_poll_include.php, (2) modules/login_include.php, (3) modules/statistics_include.php y (4) configuration.inc.php in includes/. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lingx:page_engine_cms:2.0:-:basic:*:*:*:*:*","matchCriteriaId":"BA8D0B15-AA9F-446E-99E7-29B37B34FB5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lingx:page_engine_cms:2.0:-:pro:*:*:*:*:*","matchCriteriaId":"E2065EC2-EEE9-4DF7-AAEF-A8328A96C8A2"}]}]}],"references":[{"url":"http://osvdb.org/52175","source":"cve@mitre.org"},{"url":"http://osvdb.org/52176","source":"cve@mitre.org"},{"url":"http://osvdb.org/52177","source":"cve@mitre.org"},{"url":"http://osvdb.org/52178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33860","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48856","source":"cve@mitre.org"},{"url":"http://osvdb.org/52175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0730","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:03.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el componente GigCalendar (com_gigcal) v1.0 para Mambo y Joomla!, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro gigcal _venues_id en una acción details para index.php, que no es manejada adecuadamente por venuedetails.php y (2) el parámetro gigcal_bands_id parameter en una acción details para index.php, que no es manejada adecuadamente por banddetails.php. Se trata de vectores diferentes de CVE-2009-0726."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gigcalendar:com_gigcalendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF2D1050-B155-470F-8C50-C86DA90F832E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501174/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501175/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501176/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33859","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33863","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48865","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501174/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501175/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501176/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0731","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:03.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en pages/play.php de Free Arcade Script v1.0, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freearcadescript:free_arcade_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"59E5B02A-8093-4BA7-B9E3-4520C2EA2038"}]}]}],"references":[{"url":"http://secunia.com/advisories/34023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8094","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0732","sourceIdentifier":"cve@mitre.org","published":"2009-02-24T23:30:03.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Downloadcenter 2.1 stores common.h under the web root with insufficient access control, which allows remote attackers to obtain user credentials and other sensitive information via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Downloadcenter v2.1 almacena common.h en la raíz web con control de acceso insuficiente, esto permite a atacantes remotos obtener las credenciales de usuarios y otra información sensible a través de una solicitud directa. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lingx:downloadcenter:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5EC063BB-3CF4-49FB-B981-7078F0EFE93F"}]}]}],"references":[{"url":"http://osvdb.org/52180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48862","source":"cve@mitre.org"},{"url":"http://osvdb.org/52180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0733","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en la función ReadSetOfCurves en LittleCMS (alias LCMS o liblcms) antes de la versión 1.18beta2, tal y como se usa en Firefox 3.1beta, OpenJDK, y GIMP, permiten ejecutar código arbitrario, a atacantes dependientes de contexto, a través de un archivo de imagen modificado con valores de enteros demasiado grandes en el (1) canal de entrada o (2) canal de salida, en relación con las funciones ReadLUT_A2B y ReadLUT_B2A."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*","versionEndExcluding":"2.9.2","matchCriteriaId":"28CB30F0-E3AF-490A-B05B-0947A2BF717B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*","matchCriteriaId":"0F72BFD4-000D-4B07-8261-C9F6839AD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","versionEndIncluding":"7","matchCriteriaId":"3BD10277-3747-438E-BB0F-CC7E71602FC1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.17","matchCriteriaId":"5DAF1951-51CA-4FCC-94EE-3713860D6598"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-003.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34367","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34382","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34400","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34408","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34442","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34450","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34454","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34463","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34782","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1745","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2009-003.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0339.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502018/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502031/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34185","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021869","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-744-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0775","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487512","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49330","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9742","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ocert.org/advisories/ocert-2009-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502018/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502031/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-744-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0734","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el archivo MultimediaPlayer.exe v6.86.240.7 en Nokia PC Suite v6.86.9.3 que permite a los atacantes remotos ejecutar arbitrariamente código a través de una cadena de caracteres larga en un archivo de \"lista de reproducción\" .m3u ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nokia:nokia_pc_suite:6.86.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9DF0BBA4-2167-4ACD-8DB7-E55B1AF79902"}]}]}],"references":[{"url":"http://osvdb.org/51739","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500627/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/51739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500627/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0735","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the pfadhier parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en lib/classes/message_class.php en Papoo CMS v3.6, cuando register_globals es activado y  magic_quotes_gpc es desactivado, permite a atacantes remotos leer y posiblemente ejecutar archivos de su elección a través de ..(punto punto) en el parámetro \"pfadhier\". NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:papoo:papoo:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F6D559C7-89BB-4FE5-A276-D7697BA85374"}]}]}],"references":[{"url":"http://secunia.com/advisories/33911","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33718","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0736","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución  de secuencias de comandos en sitios cruzados en Pebble anterior a v2.3.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"0723613E-3F87-4242-8F04-2DBD85ACA1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.0:*:*:*:*:*:*:*","matchCriteriaId":"21FFAC21-8B75-4475-8277-A1249E615AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7EA0EF40-566D-432D-8C7F-E885821C5575"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1B12E869-D280-4CA4-AE6E-CD01EAA4D447"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0582F1CE-E583-4343-9A85-E776E417E33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4:*:*:*:*:*:*:*","matchCriteriaId":"6C41588C-1E82-442A-B004-F2C9B13D0DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4:beta1:*:*:*:*:*:*","matchCriteriaId":"A2E7FE34-D6DE-4DAD-BC97-7DECDFC3E031"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4:beta2:*:*:*:*:*:*","matchCriteriaId":"F033DCBC-5172-4947-8976-CF1A72D7878C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4:beta3:*:*:*:*:*:*","matchCriteriaId":"FCFA081E-120E-4978-A334-AE86F1FCA9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C9E419C8-6636-4516-93F5-0CFAD815D26D"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4.1_01:*:*:*:*:*:*:*","matchCriteriaId":"6BA04F73-B0B4-4A26-8EC2-8EFF33AF8A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"190A5C14-0B67-416E-B487-1CB385928525"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"56FEC064-05CC-4B5D-94E1-4E840D3CFA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9D64F1AA-50B1-421C-934D-86345B3D0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"1A223112-0903-4CF8-A124-39785082BE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"2EF89C39-A8F1-4D34-B272-DA2ACEBEC1DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.5:beta3:*:*:*:*:*:*","matchCriteriaId":"4A5963C4-D407-4566-9A35-E90D3875A471"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"541B8041-66D6-44B0-B811-C0F9DB68DDF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.6:*:*:*:*:*:*:*","matchCriteriaId":"42197A2A-72EE-4E0F-ADB4-840D71E93F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.6:beta1:*:*:*:*:*:*","matchCriteriaId":"F50D96E4-E32F-459C-B7B9-F9113B247022"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.6:beta2:*:*:*:*:*:*","matchCriteriaId":"556DDA3C-830A-4C52-BACB-23FE113EB37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.6:beta3:*:*:*:*:*:*","matchCriteriaId":"D7BEF5C4-8DD7-4836-A21C-2AAB6A91215B"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5DB5AF94-92D2-468A-9120-F32B276C396C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.7:*:*:*:*:*:*:*","matchCriteriaId":"E7FBA912-9E01-4A84-9FFF-3B2D7393DA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.7:beta1:*:*:*:*:*:*","matchCriteriaId":"92207B85-9E88-4A57-8482-9A83671A7FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3D30AE47-A277-4B77-B6C9-F7C2E1C79121"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"BC29E29D-1915-4598-893B-BAC7404D98B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.8:*:*:*:*:*:*:*","matchCriteriaId":"A2552728-7A9D-441E-B344-D81C4A43BEF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A104C8DD-CB3A-4F2E-A78E-37E49C1633F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D056297D-1E4C-4E90-ACE2-9200B5C89CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0.0:m1:*:*:*:*:*:*","matchCriteriaId":"A45BD51A-3ADC-4271-BF9B-086408885EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0.0:m2:*:*:*:*:*:*","matchCriteriaId":"B58B20D5-5E49-4121-9A9C-99E8AADD3F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0.0:m3:*:*:*:*:*:*","matchCriteriaId":"8AFACAD5-2985-45DD-8163-8B409F5A9DA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"428B2B9C-D5DA-45D7-9E04-798958DAC087"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5961A84D-6AC1-40CC-84C2-2B3EF989C92A"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D359FF9-A9E0-45DB-BA30-7668A25DD624"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.1:*:*:*:*:*:*:*","matchCriteriaId":"54C9C979-7C00-456B-B34B-D9E83CE9BD65"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"AE37BA4F-DF8F-4A17-8C07-51B00DF3598C"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2050DE2-8712-4056-B611-D17A0E578B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_brown:pebble:2.3:*:*:*:*:*:*:*","matchCriteriaId":"31927AAE-4A13-4F6A-8D08-57CF3670D560"}]}]}],"references":[{"url":"http://secunia.com/advisories/33888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=917656","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=660130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33733","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=917656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=660130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0737","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en el instalador basado en web (config/index.php) en MediaWiki v1.6 anteriores a v1.6.12, v1.12 anteriores a v1.12.4, y v1.13 anteriores a v1.13.4, cuando el instalador está activo, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3EAF847-B64C-4C12-8BF2-631F61B0618E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"09EF3827-9C87-4043-B10A-1D6AFCB64F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"08B1EDE8-940E-47C1-9CDA-C6BBE1BB9A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"A4554900-E09D-4D9D-99D4-FE5FDB3CDE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"93EB0312-A147-4307-9491-46AEC2EC727C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"48929086-E08E-472D-A503-4CA803A840D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"A98675FD-C9EA-49AB-BA9F-2CF5898203C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"EB9B4718-DF85-4E77-B720-0EC3E0D318BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"132A745B-0A1B-4186-8BE2-88C24FF4A455"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"E710375D-F5B3-4998-AA7F-F931022CF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3130C952-83B3-4755-99D7-D25C1447670E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9842D148-50D2-4A52-A3E1-529670A25EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"746023B5-2472-4FC9-BEDF-FE6A321F12B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0D18C85B-E82B-46AE-959E-3FD32DB6F294"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"66714539-F1E1-4C16-AA12-059EEB1B9DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"A80044C9-9F76-468E-84F7-D7D529004AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.12.3:*:*:*:*:*:*:*","matchCriteriaId":"C7CD7F5A-F4E4-45B6-9179-BD1BCD75D297"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"79CDE6D3-A26D-4ECD-B949-B9DDB53F67C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D3CC82BE-8DEA-47D7-B6B7-2FFDFB728ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AFD79470-63A7-438B-A3BE-CABDAD7F848C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.1:*:*:*:*:*:*:*","matchCriteriaId":"A26F4C94-E3A5-456E-8E5E-36BA67DD4BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C6D23B-B5C1-4F10-9F62-E81F639FF40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.13.3:*:*:*:*:*:*:*","matchCriteriaId":"13FA8F3C-2B6C-42FB-A6CE-EC2D8614E43D"}]}]}],"references":[{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0368","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0738","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Auth Php v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"username\" y (2)\"passwd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frankmancuso:auth_php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"32936BF8-D326-47D9-B0A7-7400BCCD46E2"}]}]}],"references":[{"url":"http://secunia.com/advisories/33908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33723","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8033","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0739","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo login.php en MyNews 0.10 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) username y(2) passwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frankmancuso:mynews:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6A42D6B3-ED89-4C27-92A4-CEC1B252B8C7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8034","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0740","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en BlueBird Prelease, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros  (1) \"username\" y (2) \"passwd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frankmancuso:bluebird:pre-release:*:*:*:*:*:*:*","matchCriteriaId":"7BF5A050-668D-42F8-B90A-921A86894382"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8035","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0741","sourceIdentifier":"cve@mitre.org","published":"2009-02-25T20:30:02.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo Login.asp en Craft Silicon Banking@Home 2.1 y anteriores que permiten a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro LoginName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craftsilicon:banking\\@home:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"53351588-1998-443E-8BCD-284E1F1B37C7"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067879.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500824/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33721","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/500824/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0742","sourceIdentifier":"cve@mitre.org","published":"2009-02-26T16:17:20.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Note that CVE-2009-0742 is not referenced on the vendor advisory page at:\r\n\r\nhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","cveTags":[],"descriptions":[{"lang":"en","value":"The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information."},{"lang":"es","value":"El comando de nombre de usuario en el modulo Cisco ACE Application Control Engine para los Switches Catalyst 6500 y Routers 7600 y Cisco ACE 4710 Application Control Engine Appliance almacena una contraseña por defecto en texto claro, lo que permite a atacantes (dependiendo del contexto) obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:application_control_engine_module:*:*:*:*:*:*:*:*","matchCriteriaId":"B848A4E7-6D42-40EC-9019-0F65BD2FA8D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D63186-5834-448C-98F2-0C189A11D25D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*","matchCriteriaId":"DBFD21CF-CC38-477F-A78B-10CFEFF81E0A"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0743","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field."},{"lang":"es","value":"Vulnerabilidad Cross-site scripting (XSS), en la página de editar cuentas en el servidor Web de Cisco MeetingPlace Web Conferencing 6.0 anteriores a v6.0(517,0) (también conocido como v6.0 MR4) y v7.0 antes de v7.0(2) (también conocido como 7,0 MR1) permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección a través del campo E-mail Address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*","matchCriteriaId":"52D721B4-C0B8-4B7C-8C18-6B6B699B48E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F1B3B645-4500-4B63-8D1A-1139537DA522"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501251/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33915","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021778","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48965","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501251/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0744","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a feeds: URI beginning with a (1) % (percent), (2) { (open curly bracket), (3) } (close curly bracket), (4) ^ (caret), (5) ` (backquote), or (6) | (pipe) character, followed by an & (ampersand) character."},{"lang":"es","value":"Apple Safari v4 beta Build 528,16 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída de la aplicación) a través de los canales: URI que comienzen con (1)% (por ciento), (2) ((abrir paréntesis), (3) ) (Cerrar paréntesis), (4) ^ (acento doble), (5) '(comilla), o (6) | (entubamiento),  seguido de un & carácter (ampersand)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501229/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33909","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48943","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6066","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501229/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0745","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory."},{"lang":"es","value":"La función ext4_group_add en fs/ext4/resize.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28  anteriores a v2.6.28.7 no inicializa de forma adecuada el descriptor de grupo durante una operación de cambio de tamaño (también conocido como resize2fs), que podría permitir a los usuarios locales, provocar una denegación de servicio (OOPS) organizando valores manipulados, para estar en la memoria disponible."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12433","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0746","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem."},{"lang":"es","value":"La función make_indexed_dir en fs/ext4/namei.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28  anteriores a v2.6.28.7 no valida el campo rec_len, lo que permite a usuarios locales provocar una denegación de servicio (OOPS ) por tratar de montar un sistema de archivos ext4 manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12430","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"cve@mitre.org"},{"url":"http://osvdb.org/52202","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48872","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0747","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem."},{"lang":"es","value":"La función ext4_isize en fs/ext4/ext4.h del kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28 anteriores a v2.6.28.7 utiliza el componente de la estructura i_size_high sobre tipos de ficheros de su elección, lo que permite a usuarios locales provocar una denegación de servicio (consumo de CPU y la inundación de mensajes de error) por tratar de montar un sistema de archivos ext4 manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12375","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06a279d636734da32bb62dd2f7b0ade666f65d7c","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06a279d636734da32bb62dd2f7b0ade666f65d7c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0748","sourceIdentifier":"cve@mitre.org","published":"2009-02-27T17:30:09.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem."},{"lang":"es","value":"La superfunción ext4_fill_super en fs/ext4/super.c del kernel Linux  v2.6.27 anteriores a v2.6.27.19 y v2.6.28 anteriores a v2.6.28.7 no valida la configuración de superbloque, lo que permite a usuarios locales provocar una denegación de servicio (un puntero de referencia NULL y OOPS) mediante el intento de montar un sistema de ficheros ext4 manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12371","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ec110281379826c5cf6ed14735e47027c3c5765","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"cve@mitre.org"},{"url":"http://osvdb.org/52203","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=12371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ec110281379826c5cf6ed14735e47027c3c5765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0749","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the realloc function to return a new pointer, which triggers memory corruption when the old pointer is accessed."},{"lang":"es","value":"Vulnerabilidad del tipo \"use-after-free\" (usar recurso después de haberlo liberado o destruido) en la función GIFReadNextExtension en lib/pngxtern/gif/gifread.c en OptiPNG v.0.6.2 y anteriores. Permite a atacantes dependientes del contexto causar una denegación del servicio (indisponibilidad y caída de la aplicación) a través de una imagen GIF manipulada que provoca que la llamada a la función realloc devuelva un nuevo puntero, que causa una corrupción de memoria cuando se accede al viejo puntero."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:optipng_project:optipng:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.2","matchCriteriaId":"2D9EBBA0-AD72-4BE3-8C7B-932B5996FB19"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:9-11:*:*:*:*:*:*:*","matchCriteriaId":"170FDFDE-DADB-4CBF-9AB8-3A01C7BA94AB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://optipng.sourceforge.net","source":"cve@mitre.org","tags":["Product"]},{"url":"http://secunia.com/advisories/34035","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34201","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2582013&group_id=151404&atid=780913","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-12.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/24/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/25/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33873","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0510","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48879","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://optipng.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://secunia.com/advisories/34035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2582013&group_id=151404&atid=780913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/24/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/25/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0750","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo login.php del script de ejemplo smNews de textSQL v2.2. Permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"username\" (nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:txtsql:txtsql:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4F102A90-5641-4393-904C-F8F3422764FD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tombstone:smnews:-:*:*:*:*:*:*:*","matchCriteriaId":"6FE45B00-6DD4-4EF6-96CC-203BD665B05E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48813","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0751","sourceIdentifier":"cve@mitre.org","published":"2009-03-02T22:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers."},{"lang":"es","value":"Vulnerabilidad en el servidor web Yaws en sus versiones anteriores a v1.30 que permite a atacantes remotos causar una denegación de servicio (agotamiento de la memoria y caída del servicio) a través de peticiones  con un gran número de cabeceras."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:*:*:*:*:*:*:*:*","versionEndIncluding":"1.79","matchCriteriaId":"C46DD252-6005-4E5A-9D11-F3FBF6410453"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.50:*:*:*:*:*:*:*","matchCriteriaId":"992B1D73-29BD-454E-B1A7-62B812D186C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.51:*:*:*:*:*:*:*","matchCriteriaId":"684FE8BF-66B0-4135-958F-E5198DF7CA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.52:*:*:*:*:*:*:*","matchCriteriaId":"4AE18953-7DF2-4E14-9368-F51AE9B300B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.53:*:*:*:*:*:*:*","matchCriteriaId":"399F854C-C07E-42A8-B7E6-EED32DD4061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.54:*:*:*:*:*:*:*","matchCriteriaId":"DEC2C7DD-C87D-4FB5-B3E9-E6BE55D1CDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.55:*:*:*:*:*:*:*","matchCriteriaId":"AAE09563-F7F2-4EE2-B97C-AF75F1884C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.56:*:*:*:*:*:*:*","matchCriteriaId":"BB429B9B-D2E9-4AAA-9EB6-CA9DBC82D64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.57:*:*:*:*:*:*:*","matchCriteriaId":"FBA1F732-E68A-4922-8B5B-D023E96EE21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.58:*:*:*:*:*:*:*","matchCriteriaId":"E1839141-82D5-4E88-8F28-EB26E97F1A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.61:*:*:*:*:*:*:*","matchCriteriaId":"62B3E003-B9F6-4793-BA89-1F3E13B91B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.62:*:*:*:*:*:*:*","matchCriteriaId":"A1828466-3EAA-4B40-946A-B6400177155B"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.63:*:*:*:*:*:*:*","matchCriteriaId":"2C2DF037-3854-48AE-BBF7-087ADE80ED2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.64:*:*:*:*:*:*:*","matchCriteriaId":"4F394C56-A5C1-4616-B0B0-0EEC3AA0C864"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.65:*:*:*:*:*:*:*","matchCriteriaId":"42D1FC96-87A6-4C42-BDED-79DD462DD47A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.66:*:*:*:*:*:*:*","matchCriteriaId":"AC1335E6-D02B-403C-9878-FED0095874AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.67:*:*:*:*:*:*:*","matchCriteriaId":"B5E253A0-BDC9-480B-8C2B-FE9C33F12F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.68:*:*:*:*:*:*:*","matchCriteriaId":"09CFB1DE-D860-438C-A9E7-A7372154925F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.70:*:*:*:*:*:*:*","matchCriteriaId":"EE02B9FE-300B-4191-B623-0883BD69DE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.71:*:*:*:*:*:*:*","matchCriteriaId":"C55AF6B3-800C-4E80-8D2D-EF164C108004"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.72:*:*:*:*:*:*:*","matchCriteriaId":"206F051E-15E7-4CFD-A17A-47BBA4DB7D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.73:*:*:*:*:*:*:*","matchCriteriaId":"704FF671-C530-4000-9C15-B6CDB73EBE0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.74:*:*:*:*:*:*:*","matchCriteriaId":"DF5EBB06-F40A-4349-A6D8-6E43E64473CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.75:*:*:*:*:*:*:*","matchCriteriaId":"150881D1-84FC-4522-978D-FDE49297FE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.76:*:*:*:*:*:*:*","matchCriteriaId":"E60B04D6-6CA3-4D79-AFD3-B6426158A93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.77:*:*:*:*:*:*:*","matchCriteriaId":"D3ABEC8B-A76C-497C-9743-D9F5EE485657"},{"vulnerable":true,"criteria":"cpe:2.3:a:yaws:yaws:1.78:*:*:*:*:*:*:*","matchCriteriaId":"D82781B6-6A56-4CBB-B620-D2FB3AB60558"}]}]}],"references":[{"url":"http://secunia.com/advisories/33979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34239","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1740","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/19/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33834","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0590","source":"cve@mitre.org"},{"url":"http://yaws.hyber.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://yaws.hyber.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0752","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism."},{"lang":"es","value":"Vulnerabilidad sin especificar en Movable Type Pro y Community Solution v4.x anteriores a v4.24 cuyo impacto y vectores de ataque se desconocen, pero que, posiblemente, estén relacionados con el mecanismo de recuperación de contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*","matchCriteriaId":"B4FEB07E-4D70-4A24-822E-E4689CB8C9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*","matchCriteriaId":"59457028-2EA4-472F-A76F-EF867F48937F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*","matchCriteriaId":"ABE24C88-6062-4A36-9852-D9EC818EEA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*","matchCriteriaId":"11C793FA-AE7C-430F-B537-19B788D9BC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*","matchCriteriaId":"F80A607A-66A8-4995-A396-5487B8E3029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*","matchCriteriaId":"C3C21088-A9A5-4CE2-B4D7-8BC48DB84540"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*","matchCriteriaId":"C1DCAD70-9FFF-4950-875D-586937E93473"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*","matchCriteriaId":"395B9CE4-EA3A-42A1-AD37-6487911E10D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*","matchCriteriaId":"448081A9-A8C9-4FEC-879B-7FA11997B4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*","matchCriteriaId":"E7538776-B7B2-4912-BFE3-E7A1033F41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*","matchCriteriaId":"F33F4F69-D670-4698-84C6-EDD9D78F2D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*","matchCriteriaId":"1E481C6C-F6EF-4E7D-8DAF-F68407DE6501"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*","matchCriteriaId":"23B5D056-BC56-4851-8E76-7E22C911EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*","matchCriteriaId":"CA9BC769-BE45-42EC-8E35-02E6B216D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*","matchCriteriaId":"9A1B400B-FEC9-416B-89F2-C96B1BE11BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*","matchCriteriaId":"1458F0E9-6AF1-44C6-B0EC-7BCF314B0038"}]}]}],"references":[{"url":"http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0753","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading \"//\" (double slash) in the filename."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en MLDonkey v2.8.4 hasta v2.9.7 permite a atacantes remotos leer ficheros a su elección a través de una secuencia \"//\" (doble barra) en el nombre de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mldonkey:mldonkey:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"6BD462A8-9413-4F1E-93FB-7112ADCAE047"},{"vulnerable":true,"criteria":"cpe:2.3:a:mldonkey:mldonkey:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"A6E8952D-70A2-4C19-A9E0-7E2A8BE22E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mldonkey:mldonkey:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E14481A6-DEF4-4472-97DB-D3B355B936DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mldonkey:mldonkey:2.9.0-r3:*:*:*:*:*:*:*","matchCriteriaId":"52AD7927-2933-4FEC-B1A7-681BD2A41691"},{"vulnerable":true,"criteria":"cpe:2.3:a:mldonkey:mldonkey:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"281D0380-5585-49C7-B3BB-3957C6D2B914"}]}]}],"references":[{"url":"http://savannah.nongnu.org/bugs/?25667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34008","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34345","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34436","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1739","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-36.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/23/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33865","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8097","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html","source":"cve@mitre.org"},{"url":"http://savannah.nongnu.org/bugs/?25667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200903-36.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/23/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0754","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server."},{"lang":"es","value":"PHP v4.4.4, v5.1.6, y otras versiones, cuando están ejecutando Apache, permite a usuarios locales modificar el comportamiento de otros sitios hospedados en el mismo servidor web mediante la modificación de la característica mbstring.func_overload dentro de .htaccess, lo que produce que esta característica sea aplicada a otros sistemas virtuales alojados en el mismo servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:apache:*:*:*:*:*:*:*:*","matchCriteriaId":"754744AE-2EB5-444F-9701-BA1364ED19A7"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=27421","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/30/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/03/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/25/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021979","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11035","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/761-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://bugs.php.net/bug.php?id=27421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/30/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/03/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/25/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/761-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0755","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file with an invalid Form Opt entry."},{"lang":"es","value":"La funcion FormWidgetChoice::loadDefaults en Poppler anteriores v0.10.4 permite a atacantes remotos producir una denegacion de servicio (caida) a traves de un fichero PDF con una entrada \"Form Opt\" incorrecta."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue did not affect the versions of poppler, xpdf, gpdf and kdegraphics as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-07-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.3","matchCriteriaId":"D94A745A-9BB3-4EE9-AC87-CACA64FB5C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"}]}]}],"references":[{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=19790","source":"cve@mitre.org"},{"url":"http://lists.freedesktop.org/archives/poppler/2009-January/004406.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37114","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/13/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/19/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33749","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"cve@mitre.org"},{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=19790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/poppler/2009-January/004406.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0756","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict and triggers an invalid memory dereference."},{"lang":"es","value":"La función JBIG2Stream::readSymbolDictSeg en Poppler anteriores a v0.10.4 permite a atacantes remotos producir una denegación de servicio (caída) a través de un fichero PDF que dispara un error de parseo, lo cual no adecuadamente manejado por JBIG2SymbolDict::~JBIG2SymbolDict y produce una desreferencia de memoria incorrecta."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue is a duplicate of CVE-2009-0166, which was addressed in affected products via following updates: https://rhn.redhat.com/errata/CVE-2009-0166.html","lastModified":"2009-07-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.3","matchCriteriaId":"D94A745A-9BB3-4EE9-AC87-CACA64FB5C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"}]}]}],"references":[{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=19702","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.freedesktop.org/archives/poppler/2009-January/004403.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/13/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/19/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33749","source":"cve@mitre.org"},{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=19702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.freedesktop.org/archives/poppler/2009-January/004403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0757","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial of service (crash) via the (1) mpfr_snprintf and (2) mpfr_vsnprintf functions."},{"lang":"es","value":"Múltiples desbordamientos de búfer en GNU MPFR v2.4.0 permite a atacantes dependientes de contexto producir una denegación de servicio (caída) a través de las funciones (1) mpfr_snprintf y (2) mpfr_vsnprintf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpfr:gnu_mpfr:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"36519A0F-CBE1-4792-A554-63BD7E4E8175"}]}]}],"references":[{"url":"http://mpfr.loria.fr/mpfr-2.4.1/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35028","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/02/4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33945","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-772-1","source":"cve@mitre.org"},{"url":"http://mpfr.loria.fr/mpfr-2.4.1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/02/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-772-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0758","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm."},{"lang":"es","value":"La función originates_from_local_legacy_unicast_socket en avahi-core/server.c en avahi-daemon v0.6.23 no tiene en cuenta la orden del byte de red de un numero de puerto cuando se esta procesando la llegada de paquetes multidifusión, lo que permite a atacantes remotos producir una denegación de servicio (agotamiento de ancho de banda y CPU) a través de un paquete de petición legada monodifusión mDNS que dispara una tormenta de paquetes multidifusión."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0528.html.","lastModified":"2010-07-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avahi:avahi-daemon:0.6.23:*:*:*:*:*:*:*","matchCriteriaId":"A5282283-E0A7-4D0C-A951-9D8F39E374FA"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38420","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2086","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:076","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/02/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33946","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/02/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0759","sourceIdentifier":"cve@mitre.org","published":"2009-03-03T16:30:05.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de retorno de carro y salto de línea (CRLF) en ZNC antes de v0.066 permite a usuarios remotos autentificados modificar el fichero de configuración znc.conf y conseguir un aumento de privilegios a través de secuencias CRLF en el mensaje \"quit\" y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.062","matchCriteriaId":"B3BC1DA6-B072-4966-9865-2D62B4614206"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.056:*:*:*:*:*:*:*","matchCriteriaId":"1BFE27D3-487B-41A2-A6CE-AA36E07506BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*","matchCriteriaId":"13E7CC41-1923-4295-8AFC-8D295FDD9C5D"}]}]}],"references":[{"url":"http://osvdb.org/52295","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34230","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1735","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/01/2","source":"cve@mitre.org"},{"url":"http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/52295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/01/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0760","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Team Board 1.x and 2.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for data/team.mdb."},{"lang":"es","value":"Team Board 1.x y 2.x almacena información sensible bajo la web raíz con insuficiente control de acceso, lo cual permite a atacantes remotos descargar una base de datos que contiene credenciales a través de una petición directa a data/team.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:team5:team_board:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BC0FAEB-871F-41F8-ADB4-1AB4E150A326"},{"vulnerable":true,"criteria":"cpe:2.3:a:team5:team_board:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"31A60CED-F045-4A59-BF96-4E5E9A7365B3"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/teamboard-ddxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51752","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7982","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0902-exploits/teamboard-ddxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0761","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web script or HTML via the lookname parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en online.asp en Team Board 1.x permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"lookname\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:team5.team_board:1.0:*:*:*:*:*:*:*:*","matchCriteriaId":"A7E4DF04-1931-4607-A9A6-3B104F99E93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:team5.team_board:1.0.1:*:*:*:*:*:*:*:*","matchCriteriaId":"2407C231-CAB0-4CA0-863A-FB31BDC76F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:team5.team_board:1.0.2:*:*:*:*:*:*:*:*","matchCriteriaId":"28241A39-69AF-44F5-9D35-428B34FA5386"},{"vulnerable":true,"criteria":"cpe:2.3:a:team5.team_board:1.0.3:*:*:*:*:*:*:*:*","matchCriteriaId":"194471FA-50EF-4FAB-B3B4-1A1919A47C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:team5.team_board:1.0.4:*:*:*:*:*:*:*:*","matchCriteriaId":"20728CC7-2423-496F-AA57-E52DE2289812"},{"vulnerable":true,"criteria":"cpe:2.3:a:team5.team_board:1.0.5:*:*:*:*:*:*:*:*","matchCriteriaId":"BF3EAF1D-F325-418F-A515-51903A67B8DF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33614","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7982","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0762","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ScriptsEz Ez PHP Comment permite a atacantes remotos inyectar web script o HTML de su elección a través del parámetro \"name\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_php_comment:-:*:*:*:*:*:*:*","matchCriteriaId":"836C8DDF-E662-4439-B627-5DE69B9D8528"}]}]}],"references":[{"url":"http://osvdb.org/51738","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33587","source":"cve@mitre.org"},{"url":"http://osvdb.org/51738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0763","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en default.php en Kipper v2.01 permite a atacantes remotos inyectar web script o HTML a través del parámetro \"charm\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33640","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0764","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web script or HTML via the charm parameter to (1) index.php and (2) kipper.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Kipper v2.01 permiten a atacantes remotos inyectar web script o HTML a través del parámetro \"charm\" de (1) index.php y (2) kipper.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0765","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the configfile parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Kipper v2.01 permite a atacantes remotos incluir y ejecutar ficheros locales a través de .. (punto punto) en el parámetro \"configfile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33640","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49271","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0766","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the configfile parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en default.php en Kipper v2.01 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro \"configfile\".\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0767","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/config.data."},{"lang":"es","value":"Kipper v2.01 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar ficheros que contienen credenciales a través de una petición directa para job/config.data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookelves:kipper:2.01:*:*:*:*:*:*:*","matchCriteriaId":"3EA2ADC0-FF72-4E84-88D6-10C7E7EA03B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/33832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/7993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0768","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forumhop.php en YapBB v1.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"forumID\" en una acción \"next\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yapbb:yapbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"2E707548-B928-4791-9F21-7DF7757F847E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yapbb:yapbb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B83D9A64-D110-4F71-A677-651B24847295"},{"vulnerable":true,"criteria":"cpe:2.3:a:yapbb:yapbb:1.2:beta2:*:*:*:*:*:*","matchCriteriaId":"4FE0E924-AB6D-4CAC-BE45-3D72843288A3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33620","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0769","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a crafted Rich Text Format (RTF) ICQ message, as demonstrated by an {\\rtf\\pict\\&&} message.  NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be treated as a vulnerability in QIP."},{"lang":"es","value":"QIP 2005 build 808 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y cuelgue de aplicación) a través de un mensaje Rich Text Format (RTF) ICQ manipulado, como lo demostrado por un mensaje {\\rtf\\pict\\&&}.\r\nNOTA: la vulnerabilidad puede ser en Sergey Tkachenko TRichView. Si bien, podría ser tratada como una vulnerabilidad en QIP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qip:qip:2005:*:*:*:*:*:*:*","matchCriteriaId":"28C4049F-7FF0-4F9B-9583-A52890B589C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/33851","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51755","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/500656/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33609","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/51755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500656/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0770","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T06:50:20.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dkim-milter 2.6.0 through 2.8.0 allows remote attackers to cause a denial of service (crash) by signing a message with a key that has been revoked in DNS, which triggers an assertion error."},{"lang":"es","value":"dkim-milter v2.6.0 hasta v2.8.0 permite a atacantes remotos provocar una denegación de serivio (caída) firmando un mensaje con una clave que ha sido revocada en DNS, lo cual dispara un error de afirmación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dkim:dkim-milter:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"08955623-8AE9-4974-AC54-93967B0C6525"},{"vulnerable":true,"criteria":"cpe:2.3:a:dkim:dkim-milter:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"062208E3-6997-43E5-A4B3-690697D3926F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dkim:dkim-milter:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8F8AE8E3-1AC5-412D-B8EC-2D5EA0FCADE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dkim:dkim-milter:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C4B6EF2C-BD83-4EB8-B743-CBE60C9BA417"},{"vulnerable":true,"criteria":"cpe:2.3:a:dkim:dkim-milter:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"88968D80-76CA-4C9D-8139-EEF90802163C"}]}]}],"references":[{"url":"http://secunia.com/advisories/33581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34053","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=654247","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2508602&group_id=139420&atid=744358","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1728","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/01/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33337","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48085","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=654247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=2508602&group_id=139420&atid=744358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0771","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures."},{"lang":"es","value":"El motor de diseño en Mozilla Firefox  anterior a v3.0.7, Thunderbird anterior a v2.0.0.21, y SeaMonkey v1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de vectores que provocan una corrupción de memoria y un fallo de aserción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021795","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=424276%2C435209%2C436965%2C460706%2C466057%2C468578%2C471594%2C472502","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11314","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5250","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6163","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6196","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6755","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=424276%2C435209%2C436965%2C460706%2C466057%2C468578%2C471594%2C472502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0772","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption."},{"lang":"es","value":"El motor en Mozilla Firefox 2 y 3 anteriores v3.0.7, Thunderbird anteriores a v2.0.0.21, y SeaMonkey v1.1.15 permite a los atacantes remotos causar una denegación de servicios (caída) y posiblemente ejecutar arbitrariamente código a través de vectores relativos a nsCSSStyleSheet::GetOwnerNode, eventos, y recolección de basura, lo que lanza una corrupción de memoria"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34137","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021795","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475136","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5703","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5945","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6097","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6811","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9609","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/741-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/741-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0773","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains \"some non-set elements,\" which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang."},{"lang":"es","value":"El motor JavaScript de Mozilla Firefox anterior a v3.0.7, Thunderbird anterior a v2.0.0.21 y SeaMonkey v1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de (1) una unión de un array que contiene \"algunos elementos non-set\" que hace que jsarray.cpp pase un argumento incorrecto a la función ResizeSlots lo que lanza una corrupción de memoria; (2) vectores relacionado con js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__ y watch -ver- que lanzan un fallo de aserción o un fallo de segmentación y (3) vectores relacionados con gczeal, __defineSetter__ y watch -ver- que inducen a un cuelgue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021795","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=457521","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=467499","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472787","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=457521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=467499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0774","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773."},{"lang":"es","value":"El motor de diseño en Mozilla Firefox 2 y 3 anterior a v3.0.7, Thunderbird anterior a v2.0.0.21, y SeaMonkey v1.1.15, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de vectores relacionados con \"gczeal\". Vulnerabilidad distinta de CVE-2009-0773."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34137","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021795","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=473709","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/741-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=473709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/741-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0775","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via \"cloned XUL DOM elements which were linked as a parent and child,\" which are not properly handled during garbage collection."},{"lang":"es","value":"Vulnerabilidad de doble liberación en Mozilla Firefox anteriores a v3.0.7, Thunderbird anteriores a v2.0.0.21, y SeaMonkey anteriores a v1.1.15  permite a atacantes remotos ejecutar código a su elección a través de \"elementos XUL DOM clonados lo cuales son enlazados como padre e hijo\", lo cual no es correctamente manejado durante la recolección de basura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34137","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-08.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021796","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=474456","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-08.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=474456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0776","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect."},{"lang":"es","value":"nsIRDFService de Mozilla Firefox anterior a v3.0.7, Thunderbird anterior a v2.0.0.21 y SeaMonkey anterior a v1.1.15; permite a atacantes remotos evitar la política de same-origin -mismo origen- y leer datos XML desde otro dominio a través de una redirección de dominio cruzado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34137","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-09.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021797","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=414540","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5956","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6017","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6191","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7390","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9241","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/741-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=414540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/741-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0777","sourceIdentifier":"secalert@redhat.com","published":"2009-03-05T02:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a 3.0.7, Thunderbird en versiones anteriores 2.0.0.21 y SeaMonkey en versiones anteriores a 1.1.15, decodifican caracteres invisibles cuando son desplegados en la barra de ubicación, lo que causa que se muestre una dirección incorrecta y hace más fácil para los atacantes remotos falsificar URL y realizar ataques de phishing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.6","matchCriteriaId":"63B35DF5-2532-4BB3-9A0B-1388320FD7A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"A757D692-B21F-4768-BB9C-7B2AF2B274FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"28E241C3-B460-44AA-9716-1537ACC1686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2009/Mar/1021799.html","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-11.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=452979","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49087","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2009/Mar/1021799.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=452979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0778","sourceIdentifier":"secalert@redhat.com","published":"2009-03-12T15:20:49.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an \"rt_cache leak.\""},{"lang":"es","value":"La función icmp_send en net/ipv4/icmp.c en el kernel Linux anerior a v2.6.25, cuando se configura como un router con una ruta RECHAZADA, no gestiona apropiadamente el Protocolo Independiente de Caché de Destino (alias DST) en alguna situación que involucra transmisión de un mensaje ICMP Host inalcanzable, el cual permite a los atacantes remotos causar una denegación de servicio (conectividad parada) enviando una larga serie de paquetes a muchos direcciones IP de destino con esta ruta RECHAZADA, RELATIVA a \"rt_cache leak.\""}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-0326.html .","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.24.7","matchCriteriaId":"C4298B94-7040-4CC0-8933-61CE1D967FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59393187-1D1E-45CD-BE0E-385F978E4834"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"D0CCDF6B-0365-4553-B161-3F6D68A58F72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*","matchCriteriaId":"A9B2BB71-0489-40F6-9CB6-A95B96E92106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*","matchCriteriaId":"842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*","matchCriteriaId":"05F0391C-D4CC-4652-A24C-DC47F4C3DC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*","matchCriteriaId":"56340FF9-EE77-4EB3-9720-240FAAEF39F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*","matchCriteriaId":"79EB0E94-6AE8-4703-96BD-B927E0F2893F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*","matchCriteriaId":"8A1F1242-0F07-4D81-9175-3BA5B2C7B564"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*","matchCriteriaId":"3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1CF4EC75-06A2-4BD4-A39A-183F00C46E11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*","matchCriteriaId":"DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*","matchCriteriaId":"A6501752-2595-4412-9140-C78EB9FD41CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*","matchCriteriaId":"0D78F881-DB3A-423A-8DAD-314645B2B3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*","matchCriteriaId":"D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*","matchCriteriaId":"70D1E088-5A9B-4CBF-A4FF-969201942CCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC106BDA-2EA4-41A2-AA01-6352A5C255B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*","matchCriteriaId":"FB515243-7519-4CA4-9267-D9A6798CBC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*","matchCriteriaId":"B672E1B6-E8E9-473F-853F-906EA56D712E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*","matchCriteriaId":"0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*","matchCriteriaId":"9F727CD3-D3C2-4648-9EC5-092DF3F73B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*","matchCriteriaId":"D1765065-ABE5-478C-9ACC-EFFA8E4A7043"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*","matchCriteriaId":"D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*","matchCriteriaId":"95DD4647-564E-4067-A945-F52232C0A33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*","matchCriteriaId":"4F76C298-81DC-43E4-8FC9-DC005A2116EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*","matchCriteriaId":"0AB349B2-3F78-4197-882B-90ADB3BF645A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*","matchCriteriaId":"8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*","matchCriteriaId":"F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*","matchCriteriaId":"31523E67-5E4F-43F7-9410-20CB3F287DAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*","matchCriteriaId":"9B627DE3-2702-4EB2-9733-253D315FB594"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*","matchCriteriaId":"C5B76C21-70C8-4911-A24B-270F876EF7C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*","matchCriteriaId":"A89DC9CD-C06F-4B9B-B376-900E65016296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*","matchCriteriaId":"15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*","matchCriteriaId":"8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*","matchCriteriaId":"707ECC75-65B6-4B02-BE85-A4804549A2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.8:*:*:*:*:*:*:*","matchCriteriaId":"DE04AF35-7A3B-45B0-A00F-2EF31910A2A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.9:*:*:*:*:*:*:*","matchCriteriaId":"D0ADF183-E519-4A99-910D-1F34E61B9EFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.10:*:*:*:*:*:*:*","matchCriteriaId":"4090E02D-1928-4003-91A4-7A422CCDAFFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*","matchCriteriaId":"3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"60B31894-78E7-41A6-857C-D7A0C1C52838"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EDFF5385-64AA-48AD-A5FE-25918E4F07D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D17E8DFD-AC99-45E6-81F9-ED66369FBD0A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2543D5-AE09-4E90-B27E-95075BE4ACBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ECFD8D25-7FDF-48DF-8728-5875C44FFB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c0ecc4c4f8fd90988aab8a95297b9c0038b6160","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2009/03/11/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34084","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021958","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=485163","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49199","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7867","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c0ecc4c4f8fd90988aab8a95297b9c0038b6160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/03/11/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/33758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=485163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0779","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T11:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long \"input string.\""},{"lang":"es","value":"Desbordamiento de búfer en pppdial en IBM AIX v5.3 y v6.1 permite a usuarios locales ganar privilegios a través de una \"cadena de entrada\" larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/34005","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021741","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44199","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44220","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44332","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44388","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/52179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33852","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0487","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ44388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/52179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0780","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS) advertisement containing a long AS path."},{"lang":"es","value":"La función aspath_prepend de rde_attr.c de bgpd de OpenBSD v4.3 y v4.4, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un aviso Autonomous System (AS) que contiene una ruta AS larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"89CA041B-4153-43C7-BA69-D6052F4EBEEB"}]}]}],"references":[{"url":"http://openbsd.org/errata43.html#010_bgpd","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://openbsd.org/errata44.html#010_bgpd","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52271","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33828","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021736","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48812","source":"cve@mitre.org"},{"url":"http://openbsd.org/errata43.html#010_bgpd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://openbsd.org/errata44.html#010_bgpd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0781","sourceIdentifier":"secalert@redhat.com","published":"2009-03-09T21:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to \"invalid HTML.\""},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en jsp/cal/cal2.jsp en la aplicación 'calendar' de los ejemplos de aplicaciones Web de Apache Tomcat 4.1.0 a  4.1.39, 5.5.0 a 5.5.27 y 6.0.0 a 6.0.18 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro 'time', en relación a un \"HTML no válido.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0781\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-03-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D11D6FB7-CBDB-48C1-98CB-1B3CAA36C5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35788","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42368","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/501538/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49213","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501538/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0782","sourceIdentifier":"secalert@redhat.com","published":"2009-03-26T10:12:11.577","lastModified":"2023-11-07T02:03:43.643","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0783","sourceIdentifier":"secalert@redhat.com","published":"2009-06-05T16:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application."},{"lang":"es","value":"Apache Tomcat v4.1.0 hasta la v4.1.39, v5.5.0 hasta la v5.5.27 y v6.0.0 hasta la v6.0.18 permite a las aplicaciones web reemplazar un \"parser\" (extractor de información) XML utilizado por otras aplicaciones web, lo que permite a los usuarios locales leer o modificar los ficheros (1) web.xml, (2) context.xml o (3) ficheros tld de aplicaciones web de su elección a través de una aplicacion manipulada que es cargada antes de la aplicación web objetivo del ataque."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.2,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.39","matchCriteriaId":"FABEAD3F-1066-4802-BDFD-5F42406D2963"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndIncluding":"5.5.27","matchCriteriaId":"88DD2300-F68E-4BD9-A511-7E9F1A6DD43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.18","matchCriteriaId":"7888A749-8246-491C-AF4E-10762170ECE4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35788","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42368","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=652592&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=681156&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=739522&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781542&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781708&view=rev","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://tomcat.apache.org/security-4.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504090/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35416","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022336","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51195","source":"secalert@redhat.com","tags":["VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=29936","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=45933","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129070310906557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?rev=652592&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=681156&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=739522&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781542&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.apache.org/viewvc?rev=781708&view=rev","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504090/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=29936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=45933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0784","sourceIdentifier":"secalert@redhat.com","published":"2009-03-25T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors."},{"lang":"es","value":"Una condición de carrera en la herramienta stap de SystemTap versiones 0.0.20080705 y 0.0.20090314, permite a los usuarios locales del grupo stapusr insertar módulos de kernel de SystemTap arbitrarios y alcanzar privilegios por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:systemtap:systemtap:0.0.20080705:*:*:*:*:*:*:*","matchCriteriaId":"FF696A11-4FC7-4ECE-B5E3-26B258431803"},{"vulnerable":true,"criteria":"cpe:2.3:a:systemtap:systemtap:0.0.20090314:*:*:*:*:*:*:*","matchCriteriaId":"4CC37FD4-A179-45E8-8722-A24C3D32CCAE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://secunia.com/advisories/34441","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34479","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34548","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1755","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0373.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0907","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-110.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0373.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0786","sourceIdentifier":"secalert@redhat.com","published":"2009-05-22T11:53:45.640","lastModified":"2023-11-07T02:03:44.133","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This was originally intended for a report about TCP Wrappers and the hosts_ctl API function, but further investigation showed that this was documented behavior by that function. Notes: Future CVE identifiers might be assigned to applications that mis-use the API in a security-relevant fashion."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0787","sourceIdentifier":"secalert@redhat.com","published":"2009-03-25T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory."},{"lang":"es","value":"La función ecryptfs_write_metadata_to_contents  en la funcionalidad eCryptfs en el kernel Linux v2.6.28 anterior a v2.6.28.9 emplea un tamaño incorrecto cuando escribe de la memoria del kernel a la cabecera del archivo eCryptfs, lo que dispara una lectura fuera de rango y permite a usuarios locales obtener porciones d la memoria del kernel."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-0473.html .","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8faece5f906725c10e7a1f6caf84452abadbdc7b","source":"secalert@redhat.com"},{"url":"http://osvdb.org/52860","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34422","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35015","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34216","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022177","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0802","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49355","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11068","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8319","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8faece5f906725c10e7a1f6caf84452abadbdc7b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0789","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T16:30:02.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key."},{"lang":"es","value":"OpenSSL anterior a v0.9.8k en plataformas WIN64 y otras plataformas no maneja adecuadamente una estructura ASN.1 malformada, permitiendo a atacantes remotos provocar una denegación de servicio (acceso de memoria inválido y caída de la aplicación) al poner esta estructura en la clave pública de un certificado, como la utilizada por una clave pública RSA."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue only affects a small number of operating systems and does not affect the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.","lastModified":"2009-03-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8j","matchCriteriaId":"B2328F75-7F29-4516-B702-5F3AD9B5603D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34411","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35380","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021906","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52866","source":"secalert@redhat.com"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34256","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49433","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0790","sourceIdentifier":"secalert@redhat.com","published":"2009-04-01T10:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD."},{"lang":"es","value":"El demonio IKE pluto de Openswan y Strongswan IPsec v2.6 anterior a v2.6.21 y v2.4 anterior a v2.4.14, y Strongswan v4.2 anterior a v4.2.14 y v2.8 anteior a v2.8.9; permite a atacantes remotos provocar una denegación de servicio (caída del demonio y reinicio) a través de (1) R_U_THERE o (2) R_U_THERE_ACK  Detección de pares muertos (Dead Peer Detection -DPD)  mensaje de Notificación IKE IPsec que provoca una referencia a puntero nulo relacionado con el estado inconsistente ISAKMP y la falta de un estado de asociacion phase2 en DPD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"339E325D-B76C-400C-B332-7CA675C4F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*","matchCriteriaId":"F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C78E4DAD-B255-4666-927F-D82AC7396FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9B602806-1420-4640-AD17-A2FEFDA6A967"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A203ADA7-54C9-4F37-A254-0A5378BB9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3D09EEB6-386C-4A73-BC08-4243BDC49EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBE3B5F4-063F-4AE9-B589-932751182101"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24F75943-1327-4868-88D5-917D06BCF5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4BE9083-EF34-4B1A-A139-E779E9704F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5518A917-D5D1-4985-BF71-B1A34BD3D5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"778D7442-F54A-47DF-B87B-3CFA3CF08799"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16984E6E-7CA8-4DC3-B800-FFE007617FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C85F0BE-7E89-4B79-A036-9238785BE705"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C794994-9367-4BBB-8940-BBB44B7C1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"082272D3-0FE4-4959-978A-FFF795B52CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"8DFEF9B3-C7F7-4588-A174-FAFD39C04116"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7A4D6E89-5313-4016-8A7E-036579330DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95A8E226-FCEC-4545-A628-24F5A8103BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F5267BCC-A51C-4F3B-840C-49EF9C2A15F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8CDCDB4B-2DF5-4394-B33A-08A4B6604D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"66206A52-373C-4DBB-A3D7-2A7569C0181E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F654D3C4-D3A3-41E1-A0D8-3A384319AE08"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C41F9E10-000D-4F3B-BEA6-DEE87405B89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F37DFE8-2996-4904-B733-7BAECA95CB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"155EB8F5-7C3C-4293-91EE-62DA561DA54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F7841F42-1226-43C4-A007-88847925D872"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"77930F86-13FF-4787-A39F-2D00110AFBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7B1ADD64-2503-4EED-9F6F-E425A3406123"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A3067BE9-4314-42BD-8131-89C4899F7D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E00CA6E5-1F63-4D59-BA72-0F8697671718"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C35A2049-8502-41F2-894E-E39AEBEB6816"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD82E956-8C8E-4B38-9E82-4AA9AEFE6891"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2D0F0EA4-A0DF-48CC-9B42-465A36945503"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*","matchCriteriaId":"78325087-599F-448B-8C47-570914FF6C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*","matchCriteriaId":"059CFA5C-B262-47AF-94A6-8E74AFB19204"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*","matchCriteriaId":"12F25627-235B-4312-80A4-4E36DE0E72A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*","matchCriteriaId":"B3E70B88-6348-42BB-AE96-46BDB1F3C6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*","matchCriteriaId":"12A9DF25-48E8-4D52-A267-1BE0437E9000"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*","matchCriteriaId":"C986533F-E320-46FA-A9F7-DAFDB1A0628A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*","matchCriteriaId":"7C77DED4-2696-4172-92B7-43034E61F845"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2EDCCFDA-99A8-4590-99F1-95F3A5AD70B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"BED1BA7D-B603-49D4-9080-4A9FEC056A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"9E8EB86B-2DD9-4C4B-9C9A-E88B2C458C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"207B98DB-5962-4F62-AF5B-D48EF0C0E2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"DFB65639-AE3A-4984-93F9-2A8100DCEE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"B8921D08-FBA3-4C0A-8944-362909C5EB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"3FBD5312-E44F-4996-AA29-AFED53A90E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"E1B24C96-47DF-4FA2-8DF4-8241F4964F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"A5067B83-AB9E-4819-B5A2-B14A96EB54C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"773B9BB2-0F65-4604-AF2C-8AC396DDC094"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"AA892169-0079-48D9-AEF5-641748CE1BF2"}]}]}],"references":[{"url":"http://download.strongswan.org/CHANGES4.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34472","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34483","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34494","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34546","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1759","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1760","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0402.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502270/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34296","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021949","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021950","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0886","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49523","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171","source":"secalert@redhat.com"},{"url":"http://download.strongswan.org/CHANGES4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openswan.org/CVE-2009-0790/CVE-2009-0790.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502270/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0791","sourceIdentifier":"secalert@redhat.com","published":"2009-06-09T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179."},{"lang":"es","value":"Múltiples desbordamientos de entero en el filtro pdftops en CUPS v1.1.17, v1.1.22 y v1.3.7 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código de su elección mediante un fichero PDF manipulado que dispara una desbordamiento de búfer basado en memoria dinámica (heap), posiblemente relacionado con (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx y (5) PSOutputDev.cxx en pdftops/. NOTA: el vector JBIG2Stream.cxx podría solapar CVE-2009-1179."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35340","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37023","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37028","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37037","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37043","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37077","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37079","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022326","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1083.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35195","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1488","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491840","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50941","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0792","sourceIdentifier":"secalert@redhat.com","published":"2009-04-14T16:26:56.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain \"native color space,\" related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.  NOTE: this issue exists because of an incomplete fix for CVE-2009-0583."},{"lang":"es","value":"Múltiples desbordamientos de entero en icc.c en el International Color Consortium (ICC) Format library (también conocido como icclib), como lo utilizado en Ghostscript v8.64 y versiones anteriores y Argyll Color Management System (CMS) v1.0.3 y versiones anteriores, permite a atacantes dependientes de contexto provocar una denegación de servicio (desbordamiento de búfer basado en montículo y caída de aplicación) o posiblemente ejecutar código de su elección utilizado un fichero de dispositivo para una petición de traducción que opera en un fichero de imagen manipulado y tiene como objetivo un determinado \"espacio de color nativo,\" relacionado con un perfil ICC en un (1) PostScript o (2) fichero PDF file with embedded image con imágenes embebidas.\r\nNOTA: esta cuestión existe debido a una modificación inicial imcompleta de CVE-2009-0583."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"8.64","matchCriteriaId":"06B00D31-6A9C-44C2-AF0F-36F91CADCF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:5.50:*:*:*:*:*:*:*","matchCriteriaId":"A46BABB2-C49A-4EF4-9FD7-7E80EE7CF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.05:*:*:*:*:*:*:*","matchCriteriaId":"A9ECC8F7-93FD-427D-8395-F1B025CA4322"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:7.07:*:*:*:*:*:*:*","matchCriteriaId":"E63082C3-15B6-4DD8-8818-BFD61B054B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9877DC36-5151-43C9-864D-BE7939A0304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*","matchCriteriaId":"1F9F0F0A-E413-42CC-B67D-434EC6A92543"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.15.2:*:*:*:*:*:*:*","matchCriteriaId":"491F4BDC-33BD-4EA6-A19B-1066BBC9EBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.54:*:*:*:*:*:*:*","matchCriteriaId":"9DA7298B-2552-45DF-AE6B-FC71ACF623E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.56:*:*:*:*:*:*:*","matchCriteriaId":"87A234A3-5FF9-4567-A731-3FFCD1965C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.57:*:*:*:*:*:*:*","matchCriteriaId":"B2916811-2ABD-4CC4-829B-AE805BA1BC6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.61:*:*:*:*:*:*:*","matchCriteriaId":"265CBC8B-5EF6-4335-B3EC-FF93A1DF8A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.62:*:*:*:*:*:*:*","matchCriteriaId":"755FCEC1-E1DD-42BC-9606-17217DB69128"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.63:*:*:*:*:*:*:*","matchCriteriaId":"C8C3057C-9207-4BCD-88D4-625BE0EFAE85"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"E0589F5F-9A14-4664-96E2-D3AD5B1C4907"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87EEDC44-2DEB-4C76-9B28-322093F2F8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"ECC777BB-79B6-41F4-8756-E53630198D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8E685ACA-3C9C-4A65-BCE4-3D4F663C938E"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56941499-5BD0-4222-AD6C-D36DA165A02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"746233CB-AC91-404E-9763-797AD1DCAF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"787A9326-05FB-4766-A8F5-06C31763D2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*","matchCriteriaId":"90A92F2B-E055-4FBF-BE3F-E115590F2685"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0E228BF5-1FD4-4507-8451-82975E209FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6D1C3135-314E-48F7-A2A3-FC7FF071D1F1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34373","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34667","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34711","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34726","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34732","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35559","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35569","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-17.xml","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0420.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491853","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50381","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11207","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/757-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00211.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00217.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0420.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502757/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/757-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0793","sourceIdentifier":"secalert@redhat.com","published":"2009-04-09T15:08:35.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for \"transformations of monochrome profiles.\""},{"lang":"es","value":"cmsxform.c en LittleCMS (también conocido como lcms o liblcms) v1.18, con el utilizado en OpenJDK y otros productos, permite a atacantes remotos provocar una denegación de servicio (desreferenciación de puntero nulo y caída de aplicación) a través de una imagen manipulada que provoca la ejecución de código incorrecto para \"transformación de perfiles monocromos\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0793\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future lcms packages update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n","lastModified":"2009-04-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:littlecms:lcms:1.18:*:*:*:*:*:*:*","matchCriteriaId":"1E7E7BA9-CC08-4BC0-9328-15F5B38B6AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:6:*:*:*:*:*:*:*","matchCriteriaId":"29F1742B-2BFA-4263-9053-B34EE83D8276"}]}]}],"references":[{"url":"http://secunia.com/advisories/34623","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34632","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34634","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34635","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34782","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35048","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42870","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34411","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34420","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1043-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0964","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0087","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492353","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11340","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00233.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00285.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1043-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00285.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0794","sourceIdentifier":"secalert@redhat.com","published":"2009-04-13T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other products, allows remote attackers to cause a denial of service (applet crash) via a crafted Pulse Audio source data line."},{"lang":"es","value":"Desbordamiento de entero en la clase PulseAudioTargetDataL de src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java de Pulse-Java, cuando es utilizado en OpenJDK v1.6.0.0 y otros productos, permite a usuarios remotos causar una denegación de servicio (caída del applet) a traves de una línea de datos fuente de Pulse Audio modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:1.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F8966567-1525-4738-A47A-2E8BFFECBCAD"}]}]}],"references":[{"url":"http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34623","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0965","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492367","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50383","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html","source":"secalert@redhat.com"},{"url":"http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2009-February/004729.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0795","sourceIdentifier":"secalert@redhat.com","published":"2009-04-08T01:30:00.280","lastModified":"2023-11-07T02:03:44.513","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0796, CVE-2009-1265.  Reason: this candidate was intended for one issue, but a typo caused it to be associated with a different issue.  Notes: All CVE users should consult CVE-2009-0796 and CVE-2009-1265 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0796","sourceIdentifier":"secalert@redhat.com","published":"2009-04-07T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Status.pm en Apache::Status y Apache2::Status en mod_perl1 y mod_perl2 para Apache HTTP Server, cuando /perl-status esta accesible, permite a atacantes remotos inyectar código web o HTML de modo arbitrario a través de la URI."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0796\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future mod_perl package update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-06-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_perl:1:*:*:*:*:*:*:*","matchCriteriaId":"D7612B6F-0CBF-4866-8293-37EF407C7BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_perl:2:*:*:*:*:*:*:*","matchCriteriaId":"B8639339-6C55-43A0-BCF1-56C75A6CA19B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"5A6CD1F4-4C0E-4989-A2B3-DC086E8E80A3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34597","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=761081","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:091","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502709/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34383","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021988","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0943","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494402","source":"secalert@redhat.com"},{"url":"https://launchpad.net/bugs/cve/2009-0796","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021508.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021709.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/perl/modperl/branches/1.x/lib/Apache/Status.pm?r1=177851&r2=761081&pathrev=761081&diff_format=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=761081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gossamer-threads.com/lists/modperl/modperl-cvs/99477#99477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gossamer-threads.com/lists/modperl/modperl/99475#99475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502709/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-0796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0798","sourceIdentifier":"secalert@redhat.com","published":"2009-04-24T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop."},{"lang":"es","value":"El demonio acpid antes de v1.0.10 permite a atacantes remotos provocar una denegación de servicio (provocando un alto consumo de CPU y la pérdida de conectividad) por la apertura de un gran número de sockets UNIX sin cerrar, lo que provoca un bucle infinito."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"56152BA0-9713-4977-A549-AD3F4A868DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"BD49E1BF-56EC-4360-B134-5D8AB62E6920"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"8941F702-1D8E-4248-81F6-552BEA77972E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"6CF312D3-6015-4FFE-8FE8-CDCCA59FF5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"92CEA183-A214-4E82-8788-F353994988C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CF40A7F7-D99C-47DF-8F95-45E3EAD0758B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"31F5A736-A76D-4141-A963-4877BB267E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"15395859-CEEF-4FF1-A764-033E437374A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A178536-8705-40C9-85BE-C69172EF8493"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"519F489B-0D6D-46AD-9834-A9419F504BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:20010510:*:*:*:*:*:*:*","matchCriteriaId":"5DE0C675-67E9-4A6D-87FC-58744A0D3A01"}]}]}],"references":[{"url":"http://secunia.com/advisories/34838","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34914","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35209","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35231","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1786","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:107","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0474.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34692","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022182","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-766-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494443","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502583","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50060","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0474.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-766-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01342.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01365.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0799","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read."},{"lang":"es","value":"El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado que desencadena una vulnerabilidad de lectura fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022072","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=495886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0800","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple \"input validation flaws\" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file."},{"lang":"es","value":"Múltiples \"Input validation flaws\" en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permiten a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022073","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495887","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0801","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T16:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."},{"lang":"es","value":"Squid cuando el modo de interceptación trasparente está habilitado, utiliza la cabecera HTTP Host para determinar el punto final remoto, esto permite a atacantes remotos evitar los controles de acceso para Flash, Java, Silverlight y puede que otras tecnologías y permite que se comunique con sitios de intranet restringidos a través de una página Web manipulada que provoca que un cliente envíe solicitudes HTTP con una cabecera Host modificada."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0801\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-03-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:2.7:*:*:*:*:*:*:*","matchCriteriaId":"59B8B26B-B58B-4A84-95BF-A271FEE36F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:2.7.stable5:*:*:*:*:*:*:*","matchCriteriaId":"47A0A485-9C22-4A1E-9224-F777C8407013"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:2.7.stable6:*:*:*:*:*:*:*","matchCriteriaId":"6CC68017-20A2-4519-94AD-1A720692323C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0:*:*:*:*:*:*:*","matchCriteriaId":"18A99A70-46CE-4F1F-BC50-A9A32DBB511E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"64F8F1B9-A281-47C0-88EB-417A6A5B9F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"0EECA433-3770-4ADE-8962-181FCC3590E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"28613D22-9E8B-4231-9AC9-523D506A200A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable1:*:*:*:*:*:*:*","matchCriteriaId":"5F8DBB70-1047-451D-9853-8FA404A307FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable2:*:*:*:*:*:*:*","matchCriteriaId":"26EBDB74-8847-4FBD-B638-677CFEF6C062"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable3:*:*:*:*:*:*:*","matchCriteriaId":"5B4C1903-AE1A-46E1-9095-4656BEA54754"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable4:*:*:*:*:*:*:*","matchCriteriaId":"5CE8DDCB-0371-4220-A43E-946153EB02FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable5:*:*:*:*:*:*:*","matchCriteriaId":"ED179F50-3DCA-4853-875E-BCB684FF1D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable6:*:*:*:*:*:*:*","matchCriteriaId":"0BE6BD41-C6DB-442B-9844-9792255EB268"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable7:*:*:*:*:*:*:*","matchCriteriaId":"A29F22EA-DFC8-407D-9A08-0981AFA97A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable12:*:*:*:*:*:*:*","matchCriteriaId":"6E1D7E85-BBB6-4D8F-8543-9E0A0068DD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy_cache:3.0_stable13:*:*:*:*:*:*:*","matchCriteriaId":"55F27E45-FD71-46C1-80F9-4A4145DE2A50"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/435052","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33858","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0802","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."},{"lang":"es","value":"Qbik WinGate, cuando el modo de intercepción transparente esta activado, utiliza una cabecera de Host HTTP para determinar un punto final remoto, lo que permite a atacantes remotos evitar el control de acceso para Flash, Java, Silverlight y probablemente otras tecnologías, y posiblemente comunicar con sitios restringidos de redes internas a través de una pagina web manipulada que causa que el cliente envíe peticiones HTTP con una cabecera host modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6F7F7D9-7886-4C2E-8A79-3EAC9DF63474"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.1_build_993:*:*:*:*:*:*:*","matchCriteriaId":"82CD8E2B-37BF-4989-ABF3-9EC8E6F1C079"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.1_build_995:*:*:*:*:*:*:*","matchCriteriaId":"2CCFB397-9F5F-42F8-ABB3-9700F100D43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.2_build_1000:*:*:*:*:*:*:*","matchCriteriaId":"00348CE9-7290-42D8-B727-47B06D98D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.2_build_1001:*:*:*:*:*:*:*","matchCriteriaId":"78495313-FD35-44C9-92B9-65EFAE0F9D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.3_build_1005:*:*:*:*:*:*:*","matchCriteriaId":"60B349F8-DE32-47AF-8110-8509ACB7164E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1:*:*:*:*:*:*:*","matchCriteriaId":"5EC35C61-DF0B-4E37-AB6E-8316BB6D9A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.1.1077:*:*:*:*:*:*:*","matchCriteriaId":"9FDF759C-0AAE-4760-B829-13F055AD290C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"05317F4B-C1D7-435A-BEB3-AD4DF60A05C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B0013128-2173-426A-9E41-1D5DB642BF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1F5F3CDE-1931-4BD9-9ABD-F07543DAC113"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2DB5F0B2-42F0-4FDE-901F-6597E8C67986"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C1E8C06-4E84-4FB8-A513-D8ACC1146BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"87271BFA-34F6-41D6-A92B-F8E1EF49AC80"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A41232E5-3586-4CED-8070-7C004C06E62E"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/435052","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33858","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0803","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."},{"lang":"es","value":"SmoothWall SmoothGuardian, usada en SmoothWall Firewall, NetworkGuardian, y SchoolGuardian 2008, cuando el modo de intercepción trasparente está activado, usa la cabecera HTTP Host para determinar el punto final remoto, lo que permite a los atacantes remotos evitar el control de acceso para Flash, Java, Silverlight y propablemente otras tecnologías, y posiblemente comunicarse con sitios de intranet retringidos, a través de páginas web manipuladas lo que causa que el cliente envíe peticiones HTTP con una cabecera Host modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smoothwall:networkguardian:2008:*:*:*:*:*:*:*","matchCriteriaId":"125A7E97-7498-4F4B-BF57-72216059F299"},{"vulnerable":true,"criteria":"cpe:2.3:a:smoothwall:schoolguardian:2008:*:*:*:*:*:*:*","matchCriteriaId":"056B0BD8-F842-4844-8954-FE1CFC92C6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:smoothwall:smoothguardian:2008:*:*:*:*:*:*:*","matchCriteriaId":"A4285E19-02DA-4A75-BE6F-F46769FD8A0A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/435052","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7M6SM7","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/435052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7M6SM7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/33858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0804","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."},{"lang":"es","value":"Cuando el modo de interceptación transparente está activado en Ziproxy 2.6.0, usa la cabecera Host de HTTP para determinar el destino, lo que permite a atacantes remotos saltarse el control de acceso para Flash, Java y Silverlight, y probablemente otras tecnologías, posiblemente podrían comunicarse con sitios restringidos de la Intranet, a través de una página Web manipulada que provoca que un cliente envíe peticiones con un cabecera Host modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ziproxy:ziproxy:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B9CB5B52-3848-4206-BDAD-3D947DAE7B47"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/435052","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7N9GN8","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33858","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7N9GN8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0805","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en piCal 0.91h y anteriores, un módulo para XOOPS, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro event_id en el archivo index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mihai_bazon:pical:*:*:*:*:*:*:*:*","versionEndIncluding":"0.91h","matchCriteriaId":"BB0840DD-5A92-4952-BDB5-03D6663B72AA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN91591874/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33986","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33896","source":"cve@mitre.org"},{"url":"http://xoops.peak.ne.jp/md/news/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN91591874/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xoops.peak.ne.jp/md/news/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0806","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en OpenGoo anterior a v1.2.1, permite a usuarios autenticados en remoto modificar sus propios permisos a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"DADAA5EA-129C-4D0D-8CC7-BCAEF89D3D0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"E2B9EE25-A6BF-4302-87FA-323FEFF91117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6BA125B0-E18B-4D42-AFC6-B77EC15F90A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"30F9527B-092A-43F5-8D0E-A4F992BDEB0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"EEC65EA3-425F-4351-9038-0923C5EFEFE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.5:beta:*:*:*:*:*:*","matchCriteriaId":"09A10638-8F6E-4CEB-9521-D5D8CEFE9BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.5.1:beta:*:*:*:*:*:*","matchCriteriaId":"AA8AEB76-5E1A-44F7-BB4E-6D9FC076B70C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.5.2:beta:*:*:*:*:*:*","matchCriteriaId":"8652824E-FE62-42CC-A30B-FA92BBAA3840"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A366E561-630C-4C23-93B7-DA3A926FA474"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"41036BEC-ECBD-4966-974F-3D99245D2325"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"31075C8F-BFCD-49AC-81F7-EEB5B04964D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"0C038758-7C32-4C24-8D6D-BF52EEF3209F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.7:*:*:*:*:*:*:*","matchCriteriaId":"2E775DC5-909E-4F3E-97D6-3894FF2F3CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"466AAA19-4C1F-44D5-934A-DE853254E13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.8:*:*:*:*:*:*:*","matchCriteriaId":"17857BBF-BB51-41D0-A5FD-7011108A1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.9:*:*:*:*:*:*:*","matchCriteriaId":"29540269-2D98-4AA0-AC7A-F00B3CA67F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.9:rc2:*:*:*:*:*:*","matchCriteriaId":"E325F5A3-6180-45D6-B4B6-125FE1597EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"32B1BD62-0467-4E14-AC91-E4DAADBC3279"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"71D567F5-6923-4C82-BCBB-5FFB15697137"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EC271E48-FC40-4A84-8660-12572DEFE02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DFD757BE-4DA1-46B0-A899-31CDB1B38D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BA77B2A5-2FDF-4154-A97E-AE10D54BAF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C2CABFDE-DD6A-47A3-A485-CC6204B6D037"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7DC6587D-86F4-441A-B6CA-9603956C9B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"1036853A-BDE7-482A-895C-ACD20A75AE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"BD7A6292-1DAB-4706-BBB0-F37F171ADEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"A3DDCBB7-E133-4D46-965F-B5C335DFA8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"E02268FF-33B7-41C4-9233-D994C730FFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.2:beta_2:*:*:*:*:*:*","matchCriteriaId":"99B3FC64-BB6A-4E06-9C88-15EA2D044745"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"EBF5947A-F624-4544-88E0-2E2D3C72973B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opengoo:opengoo:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"9D124D00-EB61-493A-85F3-9B73F8CCAD87"}]}]}],"references":[{"url":"http://secunia.com/advisories/34044","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=663706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33897","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=663706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0807","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php."},{"lang":"es","value":"zFeeder v1.6, permite a atacantes remotos obtener acceso de administrador a través de una solicitud directa a admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zfeeder:zfeeder:1.6:*:*:*:*:*:*:*","matchCriteriaId":"84DAA6A7-8810-42A7-B7B4-C25CCEE5E533"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48866","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8092","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0808","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in SimpleCMMS before 0.1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en SimpleCMMS anteriores a v0.1.0 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_cmms:simplecmms:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"93ADD7DC-112A-4B07-B35C-1B01DCF6487B"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=661656&group_id=245458","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48883","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=661656&group_id=245458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0809","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332\r\n\r\n\"Scenario:\r\n1. Create a document class and give permissions to joe only.\r\n2. When someone else but joe logs onto Web editor, and does a\r\n   search on this new class no results are returned as expected.\r\n3. Login as joe and search for an object created for this new\r\n   class. click on the email icon, and send the mail to bob.\r\n4. When bob clicks on the link in the email, he can view the\r\n   profile card of the object, but when he clicks on viewer he\r\n   gets an unauthorized operation error. Bob shouldn't be able\r\n   to view the profile card in the first place as he doesn't\r\n   have any access to this class.  This is a security hole in\r\n   the web editor.\"","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object."},{"lang":"es","value":"El editor web en Dassault Systemes ENOVIA SmarTeam V5 anterior a la liberación 18 del Service Pack 8, y posiblemente CATIA y otros productos, permite a usuarios remotos autentificados leer la tarjeta de perfil de un objeto en el documento \"class\" a través de un enlace que es enviado desde el propietario del objeto documento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3ds:enovia_smarteam:*:*:*:*:*:*:*:*","versionEndIncluding":"5.18","matchCriteriaId":"707448B9-31A9-43DE-9FA2-AF23B5D9F479"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:catia:*:*:*:*:*:*:*:*","versionEndIncluding":"5.18","matchCriteriaId":"DBA8D3F2-FF39-481D-B90E-DE09AE61C2EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:catia:5.16:*:*:*:*:*:*:*","matchCriteriaId":"3E3F5AE9-4DCE-4392-BF82-8C856EE69497"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:catia:5.17:*:*:*:*:*:*:*","matchCriteriaId":"E902E409-FB08-4A09-A3F4-8AF113FB3329"}]}]}],"references":[{"url":"http://secunia.com/advisories/34037","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33895","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0810","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo login.php en xGuestbook v2.0 permite a atacantes remotos ejecutar comandos SQL arbitrariamente a través del parámetro \"user\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xatrix:xguestbook:2.0:*:*:*:*:*:*:*","matchCriteriaId":"92B63BAF-7570-4E15-8F9D-EF9782393C4C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33875","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48881","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0811","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX de SopCast SopCore de sopocx.ocx v3.0.3.501, permite a atacantes remotos ejecutar programas de su elección a través de un nombre de fichero ejecutable en el argumento al método SetExternalPlayer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sopcast:sopcore_activex_control:3.0.3.501:*:*:*:*:*:*:*","matchCriteriaId":"BD4876BB-0F7F-41D0-BBE2-9790667C6D88"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_sopcastia.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501252/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48955","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_sopcastia.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501252/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0812","sourceIdentifier":"cve@mitre.org","published":"2009-03-04T17:30:02.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en BreakPoint Software Hex Workshop v4.23, v6.0.1.4603 y otras v6.x y versiones anteriores, permiten a atacantes remotos ejecutar código de su elección a través de un fichero Intel Hex Code (.hex) manipulado. NOTA: algunos de los detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"10DED104-0B96-4AED-ACBA-A8F0D10FFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA15841A-9389-4846-8C1D-18DDC513C50C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1A6BF4ED-54D1-4252-97A7-BD5DAE30A037"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.01:*:*:*:*:*:*:*","matchCriteriaId":"100360DA-9566-411A-968D-EDB58F1A30D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.10:*:*:*:*:*:*:*","matchCriteriaId":"25ECAAA7-CC59-40B7-B800-60E58956A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.20:*:*:*:*:*:*:*","matchCriteriaId":"A9E45C25-7A1E-4FCB-B51C-F9A0A7BA0ECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.50:*:*:*:*:*:*:*","matchCriteriaId":"2916C7C9-FE67-49F4-A937-56530680CD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.52:*:*:*:*:*:*:*","matchCriteriaId":"B9C61A13-C7B2-46F0-814B-8C52599F8CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.53:*:*:*:*:*:*:*","matchCriteriaId":"09B6CA27-D136-4769-AB4E-C40AAC6A4FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:2.54:*:*:*:*:*:*:*","matchCriteriaId":"D2A02F57-8428-4355-BF5F-A11A6BCE1F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:3.00:*:*:*:*:*:*:*","matchCriteriaId":"EBECCF0A-79B0-4C1D-8879-184C78ECAD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:3.02:*:*:*:*:*:*:*","matchCriteriaId":"70FCF22E-5217-4B64-8960-11D65F21E59B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:3.10:*:*:*:*:*:*:*","matchCriteriaId":"20D370D9-6907-4AC2-89CB-D6936728D2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:3.11:*:*:*:*:*:*:*","matchCriteriaId":"9F49B1C6-C892-49E2-AA22-9DE33609696B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E55B2ACC-13C5-4FF0-8BD1-B143F8A7161B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:4.10:*:*:*:*:*:*:*","matchCriteriaId":"C136606A-10DB-424C-A230-0E1640778A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:4.20:*:*:*:*:*:*:*","matchCriteriaId":"A4CD53A9-BC06-4307-8009-4CC3AD194168"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:4.21:*:*:*:*:*:*:*","matchCriteriaId":"46A12319-9479-493A-88E7-2F07485E0059"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:4.22:*:*:*:*:*:*:*","matchCriteriaId":"A7353520-10FF-45A8-8B91-26DA53CAA6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:4.23:*:*:*:*:*:*:*","matchCriteriaId":"7854DC8E-B375-40F9-B057-0CEE9D635C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"6FB64D21-9A73-40AA-98F5-6BF5CA03396F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:5.1:*:*:*:*:*:*:*","matchCriteriaId":"AB87CACB-DC30-4508-839C-7BFF9C56BD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1434BD6A-F2F4-4A1F-ACE9-600E6DB0A878"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BAD8E03A-2B59-4015-8A46-70B8C7494392"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:5.02:*:*:*:*:*:*:*","matchCriteriaId":"3F94FBC7-8643-4F08-902F-55B1EFF6F3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bpsoft:hex_workshop:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E702A091-AC4B-4B83-BFE4-D6494A779CAC"}]}]}],"references":[{"url":"http://secunia.com/advisories/34021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501300/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33932","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48970","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501300/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0813","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX ImeraIEPlugin (ImeraIEPlugin.dll v1.0.2.54) en Imera TeamLinks Client permite a atacantes remotos forzar la descarga y ejecucion de URLs a su eleccion a traves de los parametros \"DownloadProtocol\", \"DownloadHost\", \"DownloadPort\", y \"DownloadURI\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imera:teamlinks:-:*:*:*:*:*:*:*","matchCriteriaId":"E3F6AB34-686D-4EC8-9A9B-FCFE58DF21F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34103","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49028","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8144","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0814","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Widgets.aspx en Blogsa v1.0 Beta 3 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"searchText\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogsa:blogsa:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0beta3","matchCriteriaId":"D7E32DFD-1F29-4AC6-92BB-E7A6904ABA79"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501382/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33957","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49024","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501382/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0815","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request."},{"lang":"es","value":"El mecanismo jumpUrl en la biblioteca class.tslib_fe.php en TYPO3 versión 3.3.x hasta 3.8.x, versión 4.0 anterior a 4.0.12, versión 4.1 anterior a 4.1.10, versión 4.2 anterior a 4.2.6 y versión 4.3alpha1, filtra un hash secreto (juHash) en un mensaje de error, que permite a los atacantes remotos leer archivos arbitrarios mediante la inclusión del hash en una petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F271C6-B5A7-4B06-A3DF-4C7F74090CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*","matchCriteriaId":"884B4418-83A4-4BCB-8019-306285EB418E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1720","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/10/6","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021710","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/02/10/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0816","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site-scripting (XSS) en la interfaz de usuario backend en TYPO3 versión 3.3.x hasta 3.8.x, versión 4.0 anterior a 4.0.12, versión 4.1 anterior a 4.1.10, versión 4.2 anterior a 4.2.6 y versión 4.3alpha1, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de campos no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F271C6-B5A7-4B06-A3DF-4C7F74090CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*","matchCriteriaId":"884B4418-83A4-4BCB-8019-306285EB418E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1720","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/10/6","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021709","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/10/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0817","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users with \"administer site configuration\" permissions to inject arbitrary web script or HTML via the Password page info field, which is not properly handled by the protected_node_enterpassword function in protected_node.module."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Protected Node v5.x anterior v5.x-1.4 y v6.x anterior a  v6.x-1.5 para Drupal, permite a usuarios autenticados remotamente con permisos de \"configuración administrativa del sitio\", la inyección de secuencias de comandos web o HTML de su elección a través del campo Password Page Info, que no está manejado adecuadamente por la función protected_node_enterpassword  en protected_node.module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:5.x:*:*:*:*:*:*:*","matchCriteriaId":"CA409222-79A5-4C9D-8D79-5F634A61E0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"63D34BF7-DDAE-4F29-93CD-503679FAAF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"BEEE7794-247D-4303-A426-C68CD0F934AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"8F817243-DF82-4B24-992C-6FA4CC0038C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A507F00C-8570-4265-86F4-CE13CD59F79D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF91738E-F092-4339-95C1-BA5696C3B935"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"6AE752A2-612D-4E1D-9A6B-3D36CC009245"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"171053F8-66E2-4DA1-A54B-3C6D96488E50"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:protected_node_module:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"9C785797-2B53-4799-9B52-07FCC418ADD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/385950","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://drupal.org/node/386604","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/386606","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/node/28","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/52300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0572","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48980","source":"cve@mitre.org"},{"url":"http://drupal.org/node/385950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://drupal.org/node/386604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/386606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/node/28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/52300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0818","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the \"administer taxonomy\" permission, or the ability to create pages when tagging is enabled, to inject arbitrary web script or HTML via the Vocabulary name (name parameter) to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función taxonomy_theme_admin_table_builder (taxonomy_theme_admin.inc) de Taxonomy Theme módulo anterior a 5.x-1.2, un módulo para Drupal, permite a usuarios autenticados en remoto con los permisos de \"administer taxonomy\", o la capacidad de crear páginas cuando las etiquetas están habilitadas; inyectar secuencias de comandos Web o HTML de su elección a través del nombre Vocabulary (parámetro name) a index.php. NOTA: algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_theme_module:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.1","matchCriteriaId":"800233AE-BE67-492F-975B-E9A2A74D4AA3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/386940","source":"cve@mitre.org"},{"url":"http://drupal.org/node/386942","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52285","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33923","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48979","source":"cve@mitre.org"},{"url":"http://drupal.org/node/386940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/386942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0819","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via \"an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML(),\" which triggers an assertion failure."},{"lang":"es","value":"El archivo sql/item_xmlfunc.cc en MySQL versiones 5.1 anteriores a 5.1.32 y versiones 6.0 anteriores a 6.0.10, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo) por medio de \"an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML(),\" que desencadena un fallo de aserción."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mysql packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5, and Red Hat Application Stack v2.","lastModified":"2009-10-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.32-bzr","matchCriteriaId":"1AE37831-9813-4488-AD83-A23DD5729EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*","matchCriteriaId":"2C56D394-4CE1-4237-A681-1474B5436CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"4E9E9D88-6640-45E8-83AA-7B9C0936D905"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:6.0.10-bzr:*:*:*:*:*:*:*","matchCriteriaId":"4433A47E-0AF5-474B-8C68-E6B470CEBC16"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*","matchCriteriaId":"9D7B68A6-13FA-4EAE-8ED0-5940A72A3D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"64F37486-E91C-47C4-9F53-4CFDBF8C1EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"53A7D87C-E34C-4595-88D5-CD483B3E8CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*","matchCriteriaId":"28103843-D04F-4180-A71D-8DAC4E28C2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*","matchCriteriaId":"5FEAE55E-7330-4A5A-A862-8D7E7621EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*","matchCriteriaId":"848D4621-AFB8-4A12-A20E-4FC9F1774DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*","matchCriteriaId":"5138E55E-58C1-44B5-A296-A46DF2920DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*","matchCriteriaId":"31B9607A-1E58-4471-BEDE-03484A1E9739"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*","matchCriteriaId":"FD25674A-B158-4770-B269-A9A039C79A8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F48E7355-2D9A-454D-AE66-B0AE015E31A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E51BF67A-BAEC-48F8-9290-67C6C5B8442E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5C6A2F-DEAE-470D-8888-0E9076CCA0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1C09231E-8759-4DFB-AA8D-17A1C6D43AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"81592813-78D9-4366-AD2E-94677D93F599"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=42495","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-32.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33972","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021786","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0594","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49050","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7544","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/bug.php?id=42495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0820","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php.  NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección en eval (evaluación directa de código dinámico) en phpScheduleIt anterior a v1.2.11; permiten a atacantes remotos ejecutar código de su elección a través de (1) el parámetro end_date de reserve.php y (2) los parámetro start_date y end_date de check.php. NOTA: el vector start_date/reserve.php ya ha sido tratado en CVE-2008-6132."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.10","matchCriteriaId":"E82FC990-E9AC-4B43-ABBF-5F40ABF1A80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7290BF1C-6FE1-41E4-BDA0-83DE37386E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.0.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"1D62D45B-DA45-433C-925A-1040E21FA522"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"719A1C06-904B-4738-A91F-A10323FB9C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EB0C585D-37C7-4995-942E-93BA744B98E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"FA558DC0-AA3C-4E60-8E83-FAFA700F6B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8713ECF3-9DCD-4497-AFC9-46A5E2BC148F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"461FB24E-23B1-4007-BEC0-F1CB35FA4018"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D030A8C7-D749-4DC6-918C-A1D54CEA2BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"16EDE5F3-3418-42AD-A580-9FD0536A59EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"29C6DA6B-0346-4FB1-A1A9-C54566D0119B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E36FAD8A-FA46-43AB-8409-12D1531FEEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"1D32582C-79F6-4965-AD0C-E3303F3D473C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3B7BC10E-49A1-4F6C-B06E-D51A172C94A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"EDB0AC00-F7E5-4080-99EF-A70ABB67C661"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C6AE62D0-76B5-4E28-B243-DAD69EB0DA24"}]}]}],"references":[{"url":"http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=662749","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0491","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=662749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0821","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T02:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element."},{"lang":"es","value":"Mozilla Firefox v2.0.0.20 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de llamadas anidadas a la función window.print, como se ha demostrado con window.print(window.print()) en el atributo onclick de un elemento INPUT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.20","matchCriteriaId":"0DF851C0-1B3C-4224-B257-C3582F78A69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/33969.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33969","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/33969.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0824","sourceIdentifier":"cve@mitre.org","published":"2009-03-14T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call."},{"lang":"es","value":"Elaborate Bytes ElbyCDIO.sys 6.0.2.0 y anteriores, como se distribuye en SlySoft AnyDVD 6.5.2.6, Virtual CloneDrive 5.4.2.3 y anteriores, CloneDVD 2.9.2.0 y anteriores, y CloneCD 5.3.1.3 y anteriores, utiliza el método de comunicación METHOD_NEITHER para IOCTLs y no valida apropiadamente un buffer asociado con el objeto Irp, lo que permite provocar a usuarios locales una denegación de servicio (con caída del sistema) a través de una llamada a IOCTL modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slysoft:anydvd:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.2.2","matchCriteriaId":"4695B5EB-8A92-4883-B53E-3C8B9812685E"},{"vulnerable":true,"criteria":"cpe:2.3:a:slysoft:clonecd:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.1.3","matchCriteriaId":"88A736A8-1454-4537-A693-229B1C85A0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:slysoft:clonedvd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.2.0","matchCriteriaId":"6C88FE3E-B0A6-41B0-A0A8-C70AACF2A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:slysoft:virtualclonedrive:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.2.3","matchCriteriaId":"C052580C-5779-4262-9532-0DB9810E068B"}]}]}],"references":[{"url":"http://en.securitylab.ru/lab/PT-2009-11","source":"cve@mitre.org"},{"url":"http://osvdb.org/52679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34269","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34287","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34289","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501713/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34103","source":"cve@mitre.org"},{"url":"http://www.slysoft.com/download/changes_anydvd.txt","source":"cve@mitre.org"},{"url":"http://www.slysoft.com/download/changes_clonedvd.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49232","source":"cve@mitre.org"},{"url":"http://en.securitylab.ru/lab/PT-2009-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501713/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slysoft.com/download/changes_anydvd.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slysoft.com/download/changes_clonedvd.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0825","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en system/rss.php de TinX/cms v3.x anteriores a v3.5.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torben_sorensen:tinx\\/cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"E5EF5962-F1F0-4BB9-864F-7BA6C3C53215"},{"vulnerable":true,"criteria":"cpe:2.3:a:torben_sorensen:tinx\\/cms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D37AA22D-AFF3-4F71-89C3-327B51934C11"}]}]}],"references":[{"url":"http://en.securitylab.ru/lab/PT-2009-13","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34178","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/showfiles.php?group_id=133415","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=133415&release_id=658540","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501547/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34021","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49115","source":"cve@mitre.org"},{"url":"http://en.securitylab.ru/lab/PT-2009-13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/showfiles.php?group_id=133415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=133415&release_id=658540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501547/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0826","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request."},{"lang":"es","value":"BlogHelper almacena common_db.inc bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar el fichero de la base de datos que contiene credenciales de usuario a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedville:bloghelper:-:*:*:*:*:*:*:*","matchCriteriaId":"0866FCF0-668D-4B0A-B87B-6D50E8F020D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33384","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47799","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7689","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0827","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request."},{"lang":"es","value":"PollHelper almacena poll.inc bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar el fichero de base de datos que contiene credenciales de usuarios a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedville:pollhelper:-:*:*:*:*:*:*:*","matchCriteriaId":"504F51B5-E1A2-46BC-937D-057EFB3782BE"}]}]}],"references":[{"url":"http://osvdb.org/51185","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47797","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7690","source":"cve@mitre.org"},{"url":"http://osvdb.org/51185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0828","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request."},{"lang":"es","value":"QuoteBook almacena  quotes.inc bajo la web raíz con insuficiente control de acceso, lo cual permite a atacantes remotos obtener información sensible, incluyendo credenciales de usuario, a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedville:quotebook:-:*:*:*:*:*:*:*","matchCriteriaId":"C791A9AF-4396-41F7-A9E2-C6C63B03E687"}]}]}],"references":[{"url":"http://secunia.com/advisories/33420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33166","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7699","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0829","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText parameters to (b) quotesadd.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en QuoteBook permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) MyBox y (2) selectFavorites de (a) quotes.php y los parámetros (3) QuoteName y (4) QuoteText de (b) quotesadd.php. \r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos solamente a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_freed:quotebook:-:*:*:*:*:*:*:*","matchCriteriaId":"02642A47-1C91-4E9A-8F43-D4711057DEE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0830","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en QuoteBook permite a atacantes remotos inyectar web script o HTML a través de los parámetros (1) QuoteName y (2) QuoteText de quotesadd.php.\r\nNOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_freed:quotebook:-:*:*:*:*:*:*:*","matchCriteriaId":"02642A47-1C91-4E9A-8F43-D4711057DEE5"}]}]}],"references":[{"url":"http://secunia.com/advisories/33420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0831","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  members.php en el módulo Members CV (job) v1.0 para PHP-Fusion, cuando magic_quotes_gpc no está activo, permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro \"sortby\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-fusion:members_cv_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"24E11A1E-1EF6-4844-8F96-8BF36536A694"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3E18BD-EA3F-4136-A256-A6A74F7066DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/33424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33156","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0832","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en items.php en el módulo E-Cart v1.3 para PHP-Fusion permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"CA\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ausimods:e-cart:1.3:*:*:*:*:*:*:*","matchCriteriaId":"F7D81481-68A3-4D66-8958-6EAA82B80E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3E18BD-EA3F-4136-A256-A6A74F7066DD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/499835/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499835/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/7698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0833","sourceIdentifier":"cve@mitre.org","published":"2009-03-05T20:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute arbitrary code via a playlist (.pls) file with a long URL in the File1 field.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en  gen_msn.dll en la extensión (plugin) gen_msn v0.31 para Winamp v5.541 permite a atacantes remotos ejecutar código de su eleccion a través de un fichero playlist (.pls) con una URL larga en el campo \"File1\".\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myplugins:gen_msn:0.31:*:*:*:*:*:*:*","matchCriteriaId":"B2661FAA-A987-40DF-9EA7-7BBCD28BBBA9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33159","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15659","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7696","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/7696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0834","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343."},{"lang":"es","value":"La función audit_syscall_entry en el núcleo de Linux v2.6.28.7 y versiones anteriores en la plataforma x86_64 no maneja adecuadamente (1) un proceso de 32-bit haciendo una llamada al sistema (syscall) de 64 bit o (2) un proceso de 64-bit haciendo una llamada al sistema (syscall) de 32-bit, lo cual permite a usuarios locales evitar determinadas configuraciones de auditoría de llamadas al sistema (syscall) a través de llamadas al sistema (syscall) manipuladas, una cuestión diferente a VE-2009-0342 y CVE-2009-0343."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.7","matchCriteriaId":"37C3A423-BCC9-4001-A976-8C8620DD22F4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CA1D49-76E7-4195-98AF-BE916040ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"941713DB-B1DE-4953-9A9C-174EAFDCB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F87B994-28E4-4095-8770-6433DE9C93AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*","matchCriteriaId":"D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=123579056530191&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=123579065130246&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=123597642832637&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34084","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34917","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34962","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35015","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35120","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33951","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022153","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487990","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49061","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8508","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9600","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=123579056530191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=123579065130246&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=123597642832637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0459.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/33951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0835","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T11:30:02.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343."},{"lang":"es","value":"La función __secure_computing en kernel/seccomp.c  en el subsistema seccomp en el núcleo de Linux v2.6.28.7 y versiones anteriores en la plataforma x86_64, cuando CONFIG_SECCOMP está activo, no maneja adecuadamente (1) un proceso de 32-bit haciendo una llamada al sistema (syscall) de 64-bit o (2) un proceso de 64-bit haciendo  una llamada al sistema (syscall) de 32-bit, lo cual permite a usuarios locales evitar restricciones de acceso a través de llamadas al sistema (syscalls) manipuladsa que son malinterpretadas como (a) stat o (b) chmod, una cuestión distinta que CVE-2009-0342 y CVE-2009-0343."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0451.html .","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/2/28/23","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123579056530191&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123579069630311&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=123597627132485&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scary.beasts.org/security/CESA-2009-004.html","source":"cve@mitre.org"},{"url":"http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33948","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487255","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/2/28/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123579056530191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123579069630311&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=123597627132485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scary.beasts.org/security/CESA-2009-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0836","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T20:30:06.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the \"Open/Execute a file\" action."},{"lang":"es","value":"Foxit Reader v2.3 anterior a Build 3902 y v3.0 anterior a Build 1506, incluidas la 1120 y 1301, no requiere la confirmación del usuario antes de realizar acciones peligrosas en un fichero PDF, lo que permite a atacantes remotos ejecutar programas de manera arbitraria y pudiendo producir un impacto sin especificar a través de un fichero manipulado, como se ha demostrado en la acción \"Abrir/Ejecutar fichero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:reader:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3361D697-E620-4FA2-B5BF-17A2D7466F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E20750FF-1750-4DF5-9054-D5A6F0BA3389"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html","source":"cve@mitre.org"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/foxit-reader-vulnerabilities","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#bypass","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501623/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021824","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/foxit-reader-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#bypass","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501623/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0837","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T20:30:06.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the \"Open/Execute a file\" action."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Foxit Reader v3.0 anteriores a Build 1506, incluidas la 1120 y la 1301, permite a atacantes remotos ejecutar código arbitrario a través de (1)una ruta relativa larga o (2)una ruta absoluta larga en el argumento \"filename\" en una acción, como se demostró mediante la acción \"Abrir/Ejecutar un fichero\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxit:reader3.0:*:*:*:*:*:*:*:*","matchCriteriaId":"57E780D1-D8BF-4141-9E33-EE4268BA8980"}]}]}],"references":[{"url":"http://secunia.com/advisories/34036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/foxit-reader-vulnerabilities","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#Stackbased","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501623/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34035","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021824","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/foxit-reader-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.foxitsoftware.com/pdf/reader/security.htm#Stackbased","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501623/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0838","sourceIdentifier":"cve@mitre.org","published":"2009-03-06T18:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function."},{"lang":"es","value":"El controlador crypto pseudo en Sun Solaris v10, y OpenSolaris snv_88 hasta snv_102, no libera memoria adecuadamente, lo cual permite a usuarios locales provocar una denegación de servicio (pánico) a través de vectores no especificados, relacionado con la función vmem_hash_delete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:*:*:*:*:*:*","matchCriteriaId":"E5F33FE6-B2A7-4D20-8425-C545139103A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*","matchCriteriaId":"287C4B1B-FFA8-452E-98BF-8B2EB30F6B6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*","matchCriteriaId":"F666F65E-BFA9-4F06-A84F-844D7E5DEBBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*","matchCriteriaId":"FB134C5D-D0FF-436C-8304-5CED1EC54A7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*","matchCriteriaId":"7B36C324-ADFA-4885-846E-059872C95B25"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:*:*:*:*:*:*","matchCriteriaId":"FB88D92E-A71C-4EA7-8A30-0109E62E9F26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:*:*:*:*:*:*","matchCriteriaId":"CD8801EA-A577-4388-83F7-174F168B66E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:*:*:*:*:*:*","matchCriteriaId":"FFF21371-BC95-4815-AE8D-34361B5FA3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:*:*:*:*:*:*","matchCriteriaId":"E5C02D1A-F957-44AD-B7D0-ECF59695C6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*","matchCriteriaId":"86931B59-DAD2-474B-B030-3B1389278C49"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://secunia.com/advisories/34149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34455","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021810","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34000","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0606","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0815","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49105","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139498-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254088-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-097.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0839","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en mapserv.c en mapserv en MapServer v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2, cuando el servidor  tiene un mapa con un atributo largo IMAGEPATH O NAME, permite a atacantes remotos ejecutar código arbitrario a través de un parámetro \"id\" manipulado en una acción \"query\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2944","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0840","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header."},{"lang":"es","value":"Desbordamiento inferior de búfer  basado en montículo en la función readPostBody en cgiutil.c en mapserv v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2, permite a atacantes remotos tener un impacto desconocido a través de un valor negativo en la cabecera HTTP Content-Length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49545","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0841","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. (dot dot) in the id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en mapserv.c en mapserv en MapServer v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2, cuando se ejecuta sobre Windows con Cygwin, permite a atacantes remotos crear fichero de modo arbitrario a traves de ..(punto punto) en el parametro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2942","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49548","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0842","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink."},{"lang":"es","value":"mapserv en MapServer 4.x versiones anteriores a v4.10.4 y 5.x versiones anteriores a v5.2.2 permite a atacantes remotos leer ficheros .map inválidos de su elección a través de una ruta completa en el parámetro \"map\", lo cual dispara la pantalla del contenido de un fichero parcial dentro de un mensaje de error, como lo demostrado por un symlink /tmp/sekrut.map."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2941","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0843","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists."},{"lang":"es","value":"La función msLoadQuery  mapserv en MapServer v4.x y anteriores, v4.10.4 y v5.x anteriores v5.2.2, permite a atacantes remotos determinar la existencia de ficheros a través de un Path completo en el parámetro queryfile, lo que provoca diferentes mensajes de error dependiendo de si existe la ruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2939","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0844","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read."},{"lang":"es","value":"La función get_input_token en la implementación SPNEGO de MIT Kerberos 5 (también conocido como krb5) v1.5 hasta v1.6.3 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) y posiblemente obtener información sensible a través de un valor length modificado que dispara una sobrescritura del búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:5-1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"032730AE-1E53-4CA2-96FD-AD60CD27F3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:-:*:*:*:*:*:*:*","matchCriteriaId":"589D7E39-A243-49F9-8F67-4B9E92AE87DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4DD315AE-868B-4061-BF01-CDBF59B02499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B639DD5F-71C7-4D9B-BA5C-51CAF64140B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2B904DCE-D59F-45C7-A814-DE42CF02792D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9957FE9E-1E89-4C27-852C-44F866A1834E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2C382DAA-68D2-4DD9-BE29-8EEB0BAF1A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"73BB258E-51CF-4D12-836B-BCEA587A3F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F81DE01C-BA3B-40B4-BD85-17692F0AF8A8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:098","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0408.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502526/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34408","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021867","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0960","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6339","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9474","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502526/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0845","sourceIdentifier":"cve@mitre.org","published":"2009-03-27T16:30:02.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token."},{"lang":"es","value":"La función spnego_gss_accept_sec_context en lib/gssapi/spnego/spnego_mech.c en MIT Kerberos 5 (conocido como krb5) v.1.6.3, cuando se utiliza SPNEGO, permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída de la aplicación) mediante datos \"ContextFlags\" inválidos en el campo \"reqFlags\" en el token negTokenInit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:5-1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"032730AE-1E53-4CA2-96FD-AD60CD27F3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4DD315AE-868B-4061-BF01-CDBF59B02499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B639DD5F-71C7-4D9B-BA5C-51CAF64140B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2B904DCE-D59F-45C7-A814-DE42CF02792D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9957FE9E-1E89-4C27-852C-44F866A1834E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2C382DAA-68D2-4DD9-BE29-8EEB0BAF1A7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"73BB258E-51CF-4D12-836B-BCEA587A3F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F81DE01C-BA3B-40B4-BD85-17692F0AF8A8"}]}]}],"references":[{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=6402","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"cve@mitre.org"},{"url":"http://src.mit.edu/fisheye/browse/krb5/trunk/src/lib/gssapi/spnego/spnego_mech.c?r1=21875&r2=22084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://src.mit.edu/fisheye/changelog/krb5/?cs=22084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:082","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0408.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502526/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34257","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021867","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49448","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10044","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6449","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"cve@mitre.org"},{"url":"http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=6402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.mit.edu/fisheye/browse/krb5/trunk/src/lib/gssapi/spnego/spnego_mech.c?r1=21875&r2=22084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://src.mit.edu/fisheye/changelog/krb5/?cs=22084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502526/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0846","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer."},{"lang":"es","value":"La función asn1_decode_generaltime en lib/krb5/asn.1/asn1_decode.c en el decodificador ASN.1 GeneralizedTime en MIT Kerberos 5 (también conocido como Krb5) anteriores a v1.6.4, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) o posiblemente ejecución de código de su elección a través de vectores que implican una codificación DER inválida, que provocará una liberación del puntero no inicializado.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6.4","matchCriteriaId":"46577766-3490-43FD-8DDB-DDEF8862420D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.7","matchCriteriaId":"EA0E35E1-9181-4A2B-93E5-8833E5AB5FDD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CA1D49-76E7-4195-98AF-BE916040ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0F9EF63F-DDA3-448B-92D7-27ED92C51FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53A61204-33CE-422F-8285-20A5E98ADF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000059.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0409.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0410.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34594","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34598","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34617","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34622","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34628","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34630","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34637","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34640","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34734","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35667","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-002.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:098","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0408.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/502527/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504683/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34409","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021994","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0008.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0960","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2084","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10694","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5483","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6301","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497213107107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0409.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0410.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/502527/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-0847","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic."},{"lang":"es","value":"La función asnbuf_imbed en el decodificador ASN.1 en MIT Kerberos 5 (también conocido como krb5) v1.6.3 cuando se usa PK-INIT, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un valor length modificado que provoca una llamada malloc errónea, relativo a cálculo erróneos con punto aritmético."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of krb5 as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-04-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:5-1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"032730AE-1E53-4CA2-96FD-AD60CD27F3CA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34640","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34734","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:098","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502526/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34408","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021993","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0960","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2084","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6387","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124896429301168&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/662091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502526/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502546/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-755-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0848","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified \"relative search path.\""},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en GTK2 en OpenSUSE v11.0 y v11.1, permite a usuarios locales ejecutar código de su elección a través de un módulo GTK troyanizado en \"una ruta de búsqueda relativa\" sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49228","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0849","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T17:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://secunia.com/advisories/34024\n\nSuccessful exploitation allows to crash the application on a Windows system and reportedly allows to execute arbitrary code on a Linux system.","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linux platforms via a long username field during backup domain authentication, related to libnnlindtb.so; or (2) cause a denial of service (daemon crash) on Windows platforms via a long username field during backup domain authentication, related to nnwindtb.dll.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un desbordamiento de buffer basado en pila en la función DtbClsLogin en NovaStor NovaNet 12 permite a atacantes remotos (1) ejecutar código arbitrario en plataformas Linux a través de un campo de nombre de usuario demasaido largo durante la autenticación al dominio de backup, en relación a libnnlindtb.so, o (2) provocar una denegación de servicio (con caida del demonio) en plataformas Windows, a través de un campo de nombre de usuario demasiado largo durante la autenticación al dominio de backup, en relación con nnwindtb.dll. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novastor:novanet:12:*:*:*:*:*:*:*","matchCriteriaId":"BE53433F-AAC3-4C84-8560-200C7CC0A171"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://osvdb.org/52301","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/52302","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33954","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49074","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://osvdb.org/52301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/52302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/33954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0850","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en BitDefender Internet Security 2009 permite a atacantes remotos, con la ayuda de usuarios locales, inyectar HTML o scripts web arbitrarios a través del nombre de archivo (filename) de un archivo infectado de virus, como lo demuestra el nombre de un archivo dentro de un archivo (1) rar o (2 ) zip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:internet_security:2009:*:*:*:*:*:*:*","matchCriteriaId":"D403FEDE-1CAF-431A-98C2-FA080A01781A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34082","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501277/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501299/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33921","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501277/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501299/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0851","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en CelerBB 0.0.2, cuando magic_quotes_gpc está desactivado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id en (1)viewforum.php y (2)viewtopic.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stewart_howe:celerbb:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"328B6F6E-2E79-470B-AED3-5999401B87FE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34014","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0852","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"showme.php in CelerBB 0.0.2 allows remote attackers to obtain \"reserved information\" via the user parameter."},{"lang":"es","value":"showme.php en CelerBB 0.0.2 permite a atacantes remotos obtener \"información reservada\" a través del parámetro usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stewart_howe:celerbb:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"328B6F6E-2E79-470B-AED3-5999401B87FE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34014","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0853","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value."},{"lang":"es","value":"login.php en CelerBB v0.0.2, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo a través de caracteres especiales en el parámetro \"Username\" como se demostró con un valor admin'# en el parámetro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stewart_howe:celerbb:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"328B6F6E-2E79-470B-AED3-5999401B87FE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34014","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0854","sourceIdentifier":"security@ubuntu.com","published":"2009-03-11T14:19:15.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory."},{"lang":"es","value":"Vulnerabilidad de  ruta de búsqueda no confiable en dash v0.5.4, cuando es usada como un interprete de comandos para hacer login, permite a usuarios locales ejecutar código de su elección a través de un archivo troyanizado .profile en el directorio actual de trabajo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dash:dash:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E20B8CE9-D007-417F-8D4F-ADAB8E725FA8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34205","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/34092","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/USN-732-1","source":"security@ubuntu.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49216","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/34205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-732-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0855","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en la consola administratica en IBM WebSphere Application Server (WAS) v6.1 anteriores v6.1.0.23 en z/OS, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/170073/IBM-Websphere-Application-Server-7.0-Cross-Site-Scripting.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34259","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0854","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/170073/IBM-Websphere-Application-Server-7.0-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0856","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Varias vulnerabilidades de tipo Cross-Site Scripting (XSS) en aplicaciones de muestra en IBM WebSphere Application Server (WAS) versión 6.0.2 anteriores a 6.0.2.35, y versión 6.1 anterior a 6.1.0.23 en z/OS, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:z\\/os:*:*:*:*:*:*:*:*","matchCriteriaId":"28A9DB7F-187D-42BA-B271-1C302E529BFB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1021811","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK76720","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34001","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK76720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0857","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: this can be leveraged for access to the SunMC Web Console."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en /prm/reports en Performance Reporting Module (PRM) para Sun Management Center (SunMC) v3.6.1 y v4.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"msg\". NOTA: esto puede ser aprovechados para el acceso a la Consola Web SunMC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management_center:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"493A8BEB-D27D-4E30-B174-1EBAE8CFB4FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management_center:4.0:*:*:*:*:*:*:*","matchCriteriaId":"865D6035-AA7E-40C1-8ABD-873D20E19F22"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/34146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021809","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33999","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0605","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49076","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0858","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain."},{"lang":"es","value":"La función response_addname en response.c de Daniel J. Bernstein djbdns v1.05 y anteriores no limitan de forma adecuada los desplazamientos en memoria, lo que permite que atacantes remotos, con control sobre subdominios de terceros  servidos por tinydns y axfrdns, provocar respuestas DNS que contengar registros de su elección a través de los datos de la zona manipulados para este subdominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:d.j.bernstein:djbdns:*:*:*:*:*:*:*:*","versionEndIncluding":"1.05","matchCriteriaId":"BFF942A4-4F98-4622-9BBD-8CCFF18293F4"}]}]}],"references":[{"url":"http://it.slashdot.org/article.pl?sid=09/03/05/2014249","source":"cve@mitre.org"},{"url":"http://marc.info/?l=djbdns&m=123554945710038","source":"cve@mitre.org"},{"url":"http://marc.info/?l=djbdns&m=123613000920446&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35820","source":"cve@mitre.org"},{"url":"http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501340/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501479/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33937","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49003","source":"cve@mitre.org"},{"url":"http://it.slashdot.org/article.pl?sid=09/03/05/2014249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=djbdns&m=123554945710038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=djbdns&m=123613000920446&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501340/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501479/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0859","sourceIdentifier":"cve@mitre.org","published":"2009-03-09T21:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program."},{"lang":"es","value":"La función shm_get_stat en ipc/shm.c del subsistema shm en el Kernell de Linux anteriores a v2.6.28.5, cuando CONFIG_SHMEM está desactivado, interpreta de forma errónea el tipo de datos en un inode, lo que permite a usuarios locales provocar una denegación de servicios (cuelgue del sistema) a través de una llamada shmctl SHM_INFO, como se ha demostrado ejecutando el programa ipcs.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.","lastModified":"2009-03-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.4","matchCriteriaId":"8326D9A2-64BB-4386-997C-17DC46C7242D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=git-commits-head&m=123387479500599&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=120428209704324&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123309645625549&w=2","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/03/06/1","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/6554/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34020","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49229","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=git-commits-head&m=123387479500599&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=120428209704324&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123309645625549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/03/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/6554/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0860","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la interfaz de usuario web en la aplicación de registro de usuario en NetMRI v3.0.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar, relacionado con las paginas de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcordia:netmri:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"E7EA052B-9EBE-48FC-A860-768E2F17B0F2"}]}]}],"references":[{"url":"http://connection.netcordia.com/forums/t/731.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501033/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33824","source":"cve@mitre.org"},{"url":"http://connection.netcordia.com/forums/t/731.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501033/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0861","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en phpDenora anteriores a v1.2.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un nombre de IRC channel. NOTA: Algunos de estos detalles fueron obtenidos de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"0D597788-656C-4A30-ADF5-A5D7244AB9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1E063085-D10D-4E6F-8FB5-B450C8CE2064"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"690816F6-D776-44FA-BBFA-DC5896444FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30020BD3-6567-45B4-BF86-CB3506337426"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"758F1024-ACCD-4D93-92C7-B112B81AF1B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"51CD547C-0345-4254-8804-880DDABF3829"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"18D94632-C20F-47D1-8605-4586E7A45C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2DC71B0D-FFDC-4C46-B665-1136BB16AFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9846BC70-9254-4BFA-BF99-F120EE99B20A"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9556D33B-90A7-44B4-91D1-95358B4A2A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D89D60BF-2E21-46D0-AE64-FDF62E4AAE56"},{"vulnerable":true,"criteria":"cpe:2.3:a:denorastats:phpdenora:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"177EA99B-9CE0-4920-AA4B-5F14BA48A25F"}]}]}],"references":[{"url":"http://osvdb.org/51981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33960","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=661189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33822","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48799","source":"cve@mitre.org"},{"url":"http://osvdb.org/51981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=661189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/33822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0862","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función hook_cntrlr_error_output en modules/page/hooks/listeners.php en el componente admincp en TangoCMS v2.2.x (también conocido como Eagle) anteriores a v2.2.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos. NOTA: Algunos de los detalles fueron obtenidos de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"77156518-31EE-49CD-B5B6-C78B72B65706"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DA8000C3-6E19-4CEE-88E1-35F67C807316"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"66D1177D-BD00-4FB4-A43F-385D83942EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:1.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"DD79A8BA-2341-4BCF-AF3B-F100CD137E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"35A0FF1D-220C-4346-8DD6-A32A4EA00F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"45A5005C-03A3-42E9-A00C-6A0620832C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D6B95017-5076-419F-ABB4-33387034F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DA3B5DB5-65F2-46A3-B5CD-087FB214539C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"76E1AECF-7617-412E-A4C2-DFEBB444F0E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"56C0A809-5394-44C4-B58F-61E591A8C542"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6C815DF4-341A-426E-A0B4-AC83DC7B446B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C92559DE-504C-43CD-AC15-E7D94DB553B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"15FA7FEA-2B72-403B-A7AD-3C741318F5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9EB76995-46E6-4584-8EAB-93432284AABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"07E5015A-260B-49B6-84CA-E7BE3AFFA7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9149CAE5-B948-4B6C-B5A3-19BB28FDE512"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1EBE12B8-C83A-44A6-A732-93C549DB6BBC"}]}]}],"references":[{"url":"http://secunia.com/advisories/33967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tangocms.org/article/view/2.2.4-released","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://tangocms.org/changelog","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tangocms.org/article/view/2.2.4-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tangocms.org/changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0863","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/delete_page.php en S-Cms Stable v1.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matteoiammarrone:s-cms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0A5920CA-48BC-488A-A450-17F3E95C6047"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48806","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0864","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie."},{"lang":"es","value":"S-Cms 1.1 Stable permite a atacantes remotos evitar la autenticación y obtener acceso con privilegios de administrador a través de un valor \"OK\" para la cookie \"login\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matteoiammarrone:s-cms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0A5920CA-48BC-488A-A450-17F3E95C6047"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/33799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48805","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0865","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el método SnapShotToFile en el control ActiveX GeoVision LiveX (tambien conocido como LiveX_v8200) v8.1.2 y 8.2.0 en LIVEX_~1.OCX lo que permite a atacantes remotos crear o sobrescribir ficheros arbitrariamente a través de ..(punto punto) en el argumento, posiblemente implicando los métodos PlayX y SnapShotX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geovision:livex_activex_control:8.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"17492C3F-F438-4710-9B18-21EAECDF1CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:geovision:livex_activex_control:8.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53126873-1C44-4EBE-AF23-C3E607AE5597"}]}]}],"references":[{"url":"http://secunia.com/advisories/33969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33782","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48773","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8059","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0866","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php."},{"lang":"es","value":"pHNews Alpha 1 almacena información sensible en la raíz del directorio web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar una base de datos a través de una petición directa para extra/genbackup.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phnews:phnews:1:alpha:*:*:*:*:*:*","matchCriteriaId":"F6B1F5E3-FE82-4200-B286-6C2ED3132CE0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48801","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0867","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html\r\n\r\nFor the Patches, please contact a Fujitsu system engineer or your partner(s).","cveTags":[],"descriptions":[{"lang":"en","value":"The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software information via unspecified requests in a client connection."},{"lang":"es","value":"El servicio HRM-S en Fujitsu Enhanced Support Facility v3.0 y v3.0.1 pemitiria a atacantes remotos conseguir información de (1)hardware y (2)software a través de peticiones sin especificar e una conexión de cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:enhanced_support_facility:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A096F8A-35E7-4CA2-9433-F79375DE7012"},{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:enhanced_support_facility:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BEADCE1B-B73F-491D-89BC-E8C2AAD33FDB"}]}]}],"references":[{"url":"http://secunia.com/advisories/33974","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33831","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48817","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0868","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T14:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en la plantilla de WebLink en Jasmine2000 Enterprise Edition permite a atacantes remotos inyectar cabeceras HTTP de manera arbitraria y dirigir ataques de división de respuesta HTTP a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:jasmine2000:*:enterprise:*:*:*:*:*:*","matchCriteriaId":"A2953A39-EB85-4C68-A9D4-A1B70F95F5AD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:7:*:*:*:*:*:*:*","matchCriteriaId":"95AE6D9D-B3DC-4DA8-916A-51BB56C32074"}]}]}],"references":[{"url":"http://secunia.com/advisories/33971","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33832","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48818","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0869","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T20:30:06.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en el cliente en IBM Tivoli Storage Manager (TSM) HSM desde v5.3.2.0 hasta v5.3.5.0, desde v5.4.0.0 hasta v5.4.2.5, v5.5.0.0 hasta v5.5.1.4 en Windows permite a atacantes remotos producir una denegación de servicio (caída de la aplicación) o posiblemente ejecución arbitraria de código a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A9500486-A77D-4BD1-850F-2DE5A5EC52A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E935FE1F-94C3-4242-90CC-8FA05B6C1D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"88884541-59D2-4EE9-B8E7-43699A419E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0392ECA4-E99D-4BB4-9F38-CA3806D2FC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"968DE378-360C-49C3-8ABD-CB29DA470E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_hsm:5.5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6C1391EC-5753-4790-B4D3-AC00B5527D6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/34189","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021820","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21329223","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34034","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21329223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0870","sourceIdentifier":"cve@mitre.org","published":"2009-03-10T20:30:06.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function."},{"lang":"es","value":"El modulo del servidor NFSv4 en el kernel en Sun Solaris v10, y OpenSolaris anterior a snv_111, permite a usuarios locales producir una denegación de servicio (bucle infinito y colgado de sistema) mediante el acceso a un fichero de sistema hsfs que esta compartido en NFSv4, relacionado con la función rfs4_op_readdir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/34193","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34371","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021819","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252469-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34031","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0635","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0765","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252469-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0871","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions."},{"lang":"es","value":"El controlador de canal SIP en Asterisk Open Source v1.4.22, v1.4.23, y v1.4.23.1; v1.6.0 anterior a v1.6.0.6; v1.6.1 anterior a v1.6.1.0-rc2; y Asterisk Business Edition C.2.3, con la opción \"pedantic\" activada, permite a usuarios autenticados remotamente provocar una denegación de servicio (caída) a travñes de una petición SIP INVITE sin cabecera, lo que dispara una deferencia a puntero NULL en las funciones (1) sip_uri_headers_cmp y(2) sip_uri_params_cmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"D4333904-9D21-4149-965F-F49F0A34BD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*","matchCriteriaId":"5B10AE4B-EC2D-4D5B-B842-50F5097A0650"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*","matchCriteriaId":"080C7089-5662-4A94-9842-C4A26095DA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B8374B5D-DE7A-4C3C-A5FE-579B17006A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C7494CE2-D3CC-404D-BE61-09A2E1FB3E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06E48482-D9AF-4038-80DA-27D9B4907C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9BC3C441-290F-471A-BA19-6B1C4D72A670"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"632ED295-B67D-43CF-BF38-CCE04088BA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"50F3835F-6F2B-4EA7-B111-3B3C26548BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta6:*:*:*:*:*:*","matchCriteriaId":"0DCF7BD2-7903-4DC5-ADDC-EFCDC58736C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta7:*:*:*:*:*:*","matchCriteriaId":"E5BECFE0-286F-4DA1-8CA9-6CEE861C3012"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta7.1:*:*:*:*:*:*","matchCriteriaId":"AFFF3245-2D0F-46E3-A1D6-319086489DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta8:*:*:*:*:*:*","matchCriteriaId":"C91F2524-99D1-4C4B-9A31-21C0FB8B4D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta9:*:*:*:*:*:*","matchCriteriaId":"7B1BC0FF-9DB6-4FCC-A845-053943CF0D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"419D4D16-E790-4872-B9AF-1320978768C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc5:*:*:*:*:*:*","matchCriteriaId":"73D30BA6-1EE0-4C3F-8F69-65C698A1B9A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D39FA25D-AB56-470D-94AB-14446DB7D475"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4225252F-5960-4A42-A575-00C125860E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A65D76A8-BBDD-4BDE-B789-D745C400DCBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A8B0F5A5-4252-4A9C-B830-2419E87AE5A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F9085056-3BE9-4309-9601-9CA0569BC215"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D8432455-9064-479F-B060-BF2A74ECC3EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8EF2D7-371B-4268-989E-25225CC1F7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBFF2686-0F5C-4F20-AA93-6B63C5ADCD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"6D4A9B22-7978-44F3-A30C-65FE7024AB6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:beta2:*:*:*:*:*:*","matchCriteriaId":"06219062-9CAD-49D2-823E-E11E74B131D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:beta3:*:*:*:*:*:*","matchCriteriaId":"91420C0D-C63B-4916-8335-6BE24EB738FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:beta4:*:*:*:*:*:*","matchCriteriaId":"FD1D7D08-AC94-49AC-9F16-A6E91F1F1EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"05FDA8EA-6610-4D49-9825-34EBFAAD2691"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c.2.3:-:business:*:*:*:*:*","matchCriteriaId":"3FA908BA-BEF8-44A5-AC95-E7CF020D0C94"}]}]}],"references":[{"url":"http://bugs.digium.com/view.php?id=13547","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=14417","source":"cve@mitre.org"},{"url":"http://downloads.digium.com/pub/security/AST-2009-002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501656/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34070","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021834","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0667","source":"cve@mitre.org"},{"url":"http://bugs.digium.com/view.php?id=13547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.digium.com/view.php?id=14417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://downloads.digium.com/pub/security/AST-2009-002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501656/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0872","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes."},{"lang":"es","value":"El servidor NFS en Sun Solaris 10 y Opensolaris anterios a svn_111, no implementa adecuadamente el modo de seguridad AUTH_NONE (también conocido como sec=none) en combinación con otros modos de seguridad, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas y leer o modificar archivos, como se ha demostrado mediante la combinación de modos de seguridad AUTH_NONE y AUTH_SYS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_110","matchCriteriaId":"31816AE0-ED0C-42A7-A39C-4C49E267E231"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_110","matchCriteriaId":"4853A432-1302-4C9C-8405-137DF4C1D3D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"}]}]}],"references":[{"url":"http://osvdb.org/52559","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34429","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021833","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253588-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-093.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34063","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49170","source":"cve@mitre.org"},{"url":"http://osvdb.org/52559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253588-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-093.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0873","sourceIdentifier":"cve@mitre.org","published":"2009-03-11T14:19:15.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that \"override each other.\""},{"lang":"es","value":"El demonio NFS (también conocido como nfsd)  en Sun Solaris 10 y OpenSolaris snv_106, cuando NFSv3 es usado, no implementa adecuadamente las combinaciones de nodos de seguridad, lo que permite a atacantes remotos evitar las restricciones de acceso intencionadas y leer o modificar archivos, como se ha demostrado a través de una combinación de los nodos de seguridad sec=sys y sec=krb5, relacionado con nodos que \"sobreescriben el otro\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://osvdb.org/52560","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34435","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021832","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0814","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49171","source":"cve@mitre.org"},{"url":"http://osvdb.org/52560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0874","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones related to (1) an argument handling deadlock in a door server and (2) watchpoint problems in the door_call function."},{"lang":"es","value":"Vulnerabilidades múltiples no especificadas en el subsistema Doors en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anteriores a snv_94, permite a los usuarios locales causar una denegación de servicio (cuelgue del proceso), o posiblemente evitar los permisos del archivo o obtener privilegios kernel-context, a través de vectores incluyendo los relativos a (1) argumento que maneja deadlook en una puerta de servidor (2) problemas watchpoint en la función door_call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_93","matchCriteriaId":"A38B7292-65AC-47DE-B360-6A6A4B145B9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_93","matchCriteriaId":"6E360011-C02E-44A9-B771-EEC0699BFB70"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/34227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34375","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34081","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021840","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0673","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0875","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is transferred from a caller to a door server."},{"lang":"es","value":"Condición de carrera en el subsistema Doors en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anterior a snv_94, permite a los usuarios locales causar una denegación de servicio (cuelgue del proceso) o posiblemente evitar los permisos del archivo o ganar privilegios kernel-context, a través de vectores que implican en el tiempo en que el control transfiere desde un usuario llamador a la puerta de servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_93","matchCriteriaId":"A38B7292-65AC-47DE-B360-6A6A4B145B9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_93","matchCriteriaId":"6E360011-C02E-44A9-B771-EEC0699BFB70"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/52561","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34375","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34081","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021840","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0673","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0766","source":"cve@mitre.org"},{"url":"http://osvdb.org/52561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-117350-61-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-242486-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-095.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0876","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1\r\n\r\n\"5. Resolution\r\n\r\nThis issue is addressed in the following releases:\r\n\r\nLinux\r\n\r\n    * Sun xVM VirtualBox 2.0.6r43001\r\n    * Sun xVM VirtualBox 2.1.4r43001\"","cveTags":[],"descriptions":[{"lang":"en","value":"Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN."},{"lang":"es","value":"Sun xVM VirtualBox versiones 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2 y 2.1.4r42893 en Linux, permite a los usuarios locales alcanzar privilegios por medio de un ataque de enlace físico, que conserva los bits de setuid/setgid en Linux, relacionado con DT_RPATH:$ORIGIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"004F2896-4A98-4385-982D-D75351ABEEE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F96D440E-4639-4DF2-BEB1-BAD33A7E80CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6C930392-136A-4C50-966E-D114C3DFB22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.6r39760:*:*:*:*:*:*:*","matchCriteriaId":"20D125F4-B18B-40EA-8E44-460F0F9587A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5900799-F465-4071-8E84-6126357971D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"87877B75-41B5-4CF4-B3D1-D52EAF957675"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.1.4r42893:*:*:*:*:*:*:*","matchCriteriaId":"64273D51-8F7D-4E79-AF81-8A036D6A8118"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://osvdb.org/52580","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/15/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/17/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34080","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021841","source":"cve@mitre.org"},{"url":"http://www.virtualbox.org/ticket/3444","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0674","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=260331","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49193","source":"cve@mitre.org"},{"url":"http://osvdb.org/52580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254568-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/17/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.virtualbox.org/ticket/3444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=260331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0877","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en Sun Java System Communications Express que permite atacantes remotos inyectar una secuencia de comandos web o HTML a tra´ves del (1) Nombre completo o (2) campo asunto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:*:*:*:*:*:*:*:*","matchCriteriaId":"F6A5BA7A-2B6E-43FC-B09E-F3D1786C047D"}]}]}],"references":[{"url":"http://osvdb.org/52718","source":"cve@mitre.org"},{"url":"http://sosoblood.freehostia.com/SJSC/html_injection.gif","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501672/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/52718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sosoblood.freehostia.com/SJSC/html_injection.gif","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501672/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0878","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height."},{"lang":"es","value":"La función read_game_map en src/terrain_translation.cpp en Wesnoth anterior a r32987, permite a los atacantes remotos causar una denegación de servicio (consumo de memoria y cuelgue de demonio) a través un mapa con una gran (1) anchura o (2) peso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.7","matchCriteriaId":"609F32FF-6F53-4C4B-82FA-9A2E826CB871"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E259B064-C2F5-4F09-B07A-B7765D0EA033"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.3:*:*:*:*:*:*:*","matchCriteriaId":"F5EAE3A3-21AD-40DE-99C7-F5756C1E86E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"950BB8F3-CD18-4EF9-9D62-23FB26ACDD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4987B9D2-193E-4AA6-99B1-DD2698E63B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B05F8A92-DA97-4B1B-8F58-69919C52E312"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"02B29F51-C8BB-4AB9-9CEC-D4E0E21185DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B9422C5B-1D98-437D-871C-DE144B8D5968"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBD6D024-A80D-4A34-ADEC-369500E0B398"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"AE312CA7-1856-400C-A391-B50F75206200"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F6CFECF2-1447-41DA-AEE4-14E70154FA48"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B1215EED-6612-45BC-B51C-A6E4E2BE39EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"36D273E0-A46A-414F-AD0E-0CBE6D8A666D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"C6E777D3-E4B8-44BC-9ECD-D903C9AA1D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2A43ED90-061D-456A-8C7D-89F1A229BAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DA97E3DE-5157-496C-B676-09598EB1ABAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.5:*:*:*:*:*:*:*","matchCriteriaId":"648E0AD0-6E97-4973-8E58-CA9EE883C2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"57B7E333-AC80-4CA7-9D92-B34A17D16CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6:*:*:*:*:*:*:*","matchCriteriaId":"55B877EC-E02B-40D1-9118-0867D5CAF91F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0241E3-6747-4FCF-AD27-A079C0F19DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6.99.1:*:*:*:*:*:*:*","matchCriteriaId":"D0B58DBF-035B-42F7-9B6E-47E2A997DD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6.99.2:*:*:*:*:*:*:*","matchCriteriaId":"87FE42CE-1F4F-4D81-8476-F45081712C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6.99.3:*:*:*:*:*:*:*","matchCriteriaId":"C4CA6870-27A8-4B26-A868-3D962D992332"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6.99.4:*:*:*:*:*:*:*","matchCriteriaId":"E2853429-C12F-4307-97E8-6C38EE70E304"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.6.99.5:*:*:*:*:*:*:*","matchCriteriaId":"34A3D3FE-698A-4C52-AB2A-7E8C1B638051"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7:*:*:*:*:*:*:*","matchCriteriaId":"4058C550-F2A8-4111-8F84-1E9E84A3D7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F728B1C9-E5A9-462B-ADAF-DADE7F46EA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C1B008FA-0450-4F14-8BAC-691B02A3B22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"B4611D18-F34F-45FF-B5BC-905A34910E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"16DFBE2B-D7F5-4B2E-8156-563A66B5E861"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"30008245-2643-44AE-B20A-63D00FE48E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"08B302AF-B0E4-44AD-A26D-F0BBFFE79C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"15528F7F-9927-4A50-9DF8-D40793FCCA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"41E06FBF-1AA7-4B55-AE1C-113D6A3990A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"EBF41356-8F02-495A-B6E2-7E0AA23B89DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"730B766C-8B47-425C-A612-120989BC4E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"4770E27E-893D-4AE1-850B-F5405770233F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8:*:*:*:*:*:*:*","matchCriteriaId":"0C405A91-95C3-479B-96E2-F37A1B4FCC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"7B91CAED-E15B-4CDF-83A7-C31F9CE683E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"D41E8097-6464-4AB5-AB8C-E7936EAB3CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"ABB70E7A-795E-4A7E-91CA-781F98CC9FF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"429500DC-7592-4870-9360-94D3699F8ABE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"CAD8D11F-F24C-4538-AD78-A9D7481C5EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"62B6E6EB-4CDE-439F-9FF3-DF2CA75D17CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"AAA4EF0F-222E-4165-BA39-FC8CC0A61147"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"3F32426F-86F8-44BC-BB0A-DB530372CF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"9E4C50CF-91C8-4990-8405-C7309910A353"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.10:*:*:*:*:*:*:*","matchCriteriaId":"3C90456F-96E6-4B6B-A61A-926E01CC9C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"BE039E74-555F-4F9B-BB9E-05C7709E03E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B157A699-B2A2-4E95-AB0E-A4607EFDAF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"ECE4FB8D-EB9C-43CF-8447-39F528DB841D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"E6838344-84D6-41C7-A875-C915D955E323"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"7407AE95-4ADA-486E-B1FC-3282683F84B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8AAE5D43-38CD-4F0F-89F7-03358D47A23B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"71453BBF-B911-483C-9F44-0D3D9053EA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"04B09BA0-35F2-43E7-8E2B-6EE03844A7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B378A8D9-86F7-4906-8B49-5145F3A31686"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.0:rc:*:*:*:*:*:*","matchCriteriaId":"E0BD9EF4-531F-42FC-B6FB-2EFE9D1DBF27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.0rcl:*:*:*:*:*:*:*","matchCriteriaId":"6056DDDC-A194-4A30-B7E0-8BA912D9A466"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB817AC-44E4-41CD-BD03-7B5907243FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BBDC2E2D-581C-4B8C-8DB1-2B34A22C1788"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"BDB9B969-9AEA-47B8-A2C1-D951DA5A6D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B3ECAC12-E14D-47F6-853C-758584EB4E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"EF2E47D5-D0F1-4FC4-BC1C-9964BE85741D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CAFC79CA-F9B0-45FD-904C-B11760E11CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"54937870-186F-4342-8658-6F3DA155A53D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9488E868-BFC2-4084-802C-874E41E0AE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"A15CBB13-9B93-4C87-A19E-56FFE900D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"63E587C8-E7D8-4FD8-A826-D7BFAE7F270D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"0ED754F0-F2DB-445C-BE11-8525521C7B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"1B0FF72F-A313-4BF1-8E7A-BF7EAA2C5EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B219D98C-B08A-4BB6-8C5B-E8978823A4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"18D98006-438D-4DF9-A40A-2B94CE8760EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"07FD8E16-22EC-43BF-8ED3-09236F1C3BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6F4D957E-7C2A-4062-A3DF-BD02E9CA5D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D02358E6-E408-4A1C-A391-9F870625C5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"383AD5F9-7691-4DA8-9DD6-AAB110F54B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"51AF2340-3914-4411-BDC0-6B84548384B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95688481-AC1B-4A58-90D3-E6E76D9E0011"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E3FF4FDE-AF17-4BCE-AFEC-CDA138B76231"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"30C116EF-BD41-4820-8243-A680EEB70055"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"C55CF49F-7678-41A9-8A4B-012A5B9EC78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"952B7487-A920-40B0-BE80-8FA710149E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FADF53ED-10A0-4F03-8B8B-EE8CB4BDB9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8675995D-8CE9-4A5F-B8AB-E4C33C5EB6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"873FD0CA-4B14-4927-B430-52D24176FC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"61B37AA0-8114-4F1A-B9D5-3DFAF896E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"40A6BB07-3825-412F-9E1D-1C990767157C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E7024803-04D0-476E-B2EB-347D2A4F0CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"F467E7C6-B3A3-4BAC-A377-9CA52A85A669"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2794D70A-2180-424E-BFC7-848413BBA6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"31232ECA-2AF2-46EF-A9CA-BC692BFE4BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"17A4E7EF-F4AD-4A96-BD79-664AFDF5AC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B57DCD88-7731-49A5-AFCB-5C6104025CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"41728562-611D-4F58-AB89-D1887B3564B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"76D1E17F-BC30-4F01-94D5-A64E07B9B03A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"CC3AF888-E2B1-4130-992C-4B7CF6CF4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"EF25A9ED-8349-4DB0-B719-770E3AE30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"E4989C0D-A6E6-4317-9640-15E50C62A54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"A9D8C3FF-41EC-4C98-BC7A-5C419559CBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"CF780D9D-2D07-42BF-A4AB-97F60C73A7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"A820E98A-D26D-4C9A-B476-8406C88437B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB71E24E-1A08-491F-8379-FE41AF012E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F0B57803-62E1-4F50-92DD-6796C6D60758"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C5D83E56-BE05-4DF7-88AD-BC0AD5098415"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"621115C3-5AF6-4709-BB0B-A0FE481C5C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EE1549F8-FE6A-49E5-BC19-585C4957E061"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"3FD5F86E-F65D-4114-9057-A81B360BE143"},{"vulnerable":true,"criteria":"cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"256B2C75-47E5-4A8F-9672-B56D17086764"}]}]}],"references":[{"url":"http://launchpad.net/bugs/335089","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/336396","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog","source":"cve@mitre.org"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200","source":"cve@mitre.org"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?rev=33078&dir_pagestart=200&view=log","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49294","source":"cve@mitre.org"},{"url":"https://gna.org/bugs/index.php?13031","source":"cve@mitre.org"},{"url":"http://launchpad.net/bugs/335089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://launchpad.net/bugs/336396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?rev=33078&dir_pagestart=200&view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gna.org/bugs/index.php?13031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0879","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI."},{"lang":"es","value":"El servidor CIM en IBM Director anterior a v5.20.3 Service Update 2 sobre Windows permite a los atacantes remotos provocar una denegación de servicio (caída del demonio) a través de un nombre largo \"consumer\", como se ha demostrado en una petición M-POST a una URI larga /CIMListener/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:*:service_update_1:*:*:*:*:*:*","versionEndIncluding":"5.20.3","matchCriteriaId":"D525C638-4015-4E45-9A82-1CABAC1DCC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D18E2470-6359-4E0C-83E7-880FA6EC8520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.10:*:*:*:*:*:*:*","matchCriteriaId":"622C9C51-0EB7-449F-96F0-07BC976CADDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.11:*:*:*:*:*:*:*","matchCriteriaId":"3B2A9EE4-B5EA-451E-9A50-0BB901A7BD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.12:*:*:*:*:*:*:*","matchCriteriaId":"05D211F7-9F61-4E93-8C5E-596B782E0BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.20:*:*:*:*:*:*:*","matchCriteriaId":"D5EE0669-1042-4580-8883-793C2F4272C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.21:*:*:*:*:*:*:*","matchCriteriaId":"92C5D77E-60BC-406F-86F6-2F1F0C9C8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.22:*:*:*:*:*:*:*","matchCriteriaId":"E60AE021-6483-4075-B0F5-4DBF49F5332A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"6AA0F5AD-D17D-492B-B463-52C40BA0B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.1:*:*:*:*:*:*:*","matchCriteriaId":"2AD25392-1D9D-47C9-BAE3-7C2B24663A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A2D5A503-C92F-4EB9-8B5F-F59A1C6FAB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.3:*:*:*:*:*:*:*","matchCriteriaId":"824785BD-CA6D-4FDB-ADB3-428360D2F624"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.20.0:*:*:*:*:*:*:*","matchCriteriaId":"8BCA51AD-90E3-4DC5-BA4A-95A8B55C2DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.20.1:*:*:*:*:*:*:*","matchCriteriaId":"C0B3F58B-3D5C-4B3D-BA72-050270D741AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.20.2:*:*:*:*:*:*:*","matchCriteriaId":"EA69558A-697A-4FEC-A8EA-7E71DF9C4764"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://osvdb.org/52615","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501638/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34061","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0656","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49285","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8190","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501638/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0880","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:49.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.securityfocus.com/archive/1/archive/1/501639/100/0/threaded\r\n\r\n\"The vendor has adressed this vulnerability in service update 2 for IBM\r\nDirector agent 5.20.3. Download link:\r\n\r\nhttps://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp\r\n&S_PKG=director_x_520&S_TACT=sms<=en_US&cp=UTF-8\"","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servidor CIM en IBM Director anteriores v5.20.3 Service Update 2 en Windows que permite a los atacantes remotos cargar y ejecutar arbitrariamente código DLL local a través .. (punto punto) en un /CIMListener/ URI en una petición M-POST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:*:service_update_1:*:*:*:*:*:*","versionEndIncluding":"5.20.3","matchCriteriaId":"D525C638-4015-4E45-9A82-1CABAC1DCC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D18E2470-6359-4E0C-83E7-880FA6EC8520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.10:*:*:*:*:*:*:*","matchCriteriaId":"622C9C51-0EB7-449F-96F0-07BC976CADDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.11:*:*:*:*:*:*:*","matchCriteriaId":"3B2A9EE4-B5EA-451E-9A50-0BB901A7BD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.12:*:*:*:*:*:*:*","matchCriteriaId":"05D211F7-9F61-4E93-8C5E-596B782E0BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.20:*:*:*:*:*:*:*","matchCriteriaId":"D5EE0669-1042-4580-8883-793C2F4272C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.21:*:*:*:*:*:*:*","matchCriteriaId":"92C5D77E-60BC-406F-86F6-2F1F0C9C8E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:4.22:*:*:*:*:*:*:*","matchCriteriaId":"E60AE021-6483-4075-B0F5-4DBF49F5332A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"6AA0F5AD-D17D-492B-B463-52C40BA0B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.1:*:*:*:*:*:*:*","matchCriteriaId":"2AD25392-1D9D-47C9-BAE3-7C2B24663A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A2D5A503-C92F-4EB9-8B5F-F59A1C6FAB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.10.3:*:*:*:*:*:*:*","matchCriteriaId":"824785BD-CA6D-4FDB-ADB3-428360D2F624"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.20.0:*:*:*:*:*:*:*","matchCriteriaId":"8BCA51AD-90E3-4DC5-BA4A-95A8B55C2DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.20.1:*:*:*:*:*:*:*","matchCriteriaId":"C0B3F58B-3D5C-4B3D-BA72-050270D741AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director:5.20.2:*:*:*:*:*:*:*","matchCriteriaId":"EA69558A-697A-4FEC-A8EA-7E71DF9C4764"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://osvdb.org/52616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501639/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34065","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0656","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49286","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090305-2_IBM_director_privilege_escalation.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501639/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090305-2_IBM_director_privilege_escalation.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=dmp&S_PKG=director_x_520&S_TACT=sms&lang=en_US&cp=UTF-8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0881","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el archivo ejemplo/paises.php en isiAJAX 1 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:josema_enzo:isiajax:1:*:*:*:*:*:*:*","matchCriteriaId":"2979F260-2147-49B2-B80E-E498C98AD004"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49113","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8167","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0882","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to showtheme.php and the (2) user parameter to userinfo.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en nForum v1.5 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de (1) parámetro id para showtheme.php y el (2) parámetro user para userinfo.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roman_bogorodskiy:nforum:1.5:*:*:*:*:*:*:*","matchCriteriaId":"62243043-27B2-4ACB-BF1C-740EB93CDA3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/501560/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34030","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501560/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0883","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMS_login cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Blue Eye CMS v1.0.0 y anteriores, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro de la cookie BlueEyeCMS_login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amunak:blue_eye_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"2786EA0F-ED0F-47F3-A838-40CD10818249"},{"vulnerable":true,"criteria":"cpe:2.3:a:amunak:blue_eye_cms:1.0.0:prerc:*:*:*:*:*:*","matchCriteriaId":"4ADB8D86-A99F-42F6-8588-92CD62D1C37D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34022","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49104","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0884","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets."},{"lang":"es","value":"Desbordamiento de búfer en FileZilla Server anteriores a v0.9.31 que permite a los atacantes remotos causar una denegación de servicio a través de vectores no especificados relativo a paquetes SSL/TLS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.31","matchCriteriaId":"65B447F9-7981-43C2-8042-44E5CCF223C8"}]}]}],"references":[{"url":"http://filezilla-project.org/index.php","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34089","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=665428","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34006","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021812","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0603","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49107","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://filezilla-project.org/index.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=665428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0885","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a (1) M3U, (2) M3l, (3) TXT, and (4) LRC playlist file."},{"lang":"es","value":"Desbordamiento múltiple de búfer basado en pila en Media Commands v1.0 que permite a los atacantes remoto ejecutar arbitrariamente código o causar una denegación de servicio (caída de la aplicación) a través de una secuencia de comandos larga en ficheros de listas de reproducción (1) M3U, (2) M3l, (3) TXT, y (4) LRC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediacommands:media_commands:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EA774B48-3499-4990-84CB-C41B3C9831F7"}]}]}],"references":[{"url":"http://osvdb.org/52346","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33958","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/33958-2.py","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/33958.py","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/33958.rb","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49035","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8135","source":"cve@mitre.org"},{"url":"http://osvdb.org/52346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/33958-2.py","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/33958.py","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/33958.rb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0886","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the default_language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo login.php en OneOrZero Helpdesk v1.6.5.7 y anteriores que permite a los atacantes remotos leer ficheros arbitrarios a través de .. (punto punto) en el parámetro default_language."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.5.7","matchCriteriaId":"D79A5E3D-7BCE-41A1-99FC-D598A78AB8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.4_rc4:*:*:*:*:*:*:*","matchCriteriaId":"6954D954-0953-434E-9F58-4192552E523B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6:*:*:*:*:*:*:*","matchCriteriaId":"71F48E6F-1E7A-4B5F-9A05-37B2D7D39BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"10E97153-B0A5-4751-B657-79EF676FABD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"52A56240-7E0C-49E9-ACBC-F92D2B326117"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"BC596188-DBD8-4E56-953D-23B865670926"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EB496DA0-547A-4CE9-A18F-4B89B4764FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"4AFF0F1A-84D9-4816-8ECB-8E070E94F70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"251E0D13-FB1E-44A1-8AD3-6CD5EFBF2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneorzero:oneorzero_helpdesk:1.6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F671473D-7DDA-407E-BDB1-586A4E9BCA86"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49114","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8168","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8169","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0887","sourceIdentifier":"cve@mitre.org","published":"2009-03-12T15:20:50.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with a different user's non-ASCII username, via a login attempt."},{"lang":"es","value":"Error de presencia de signo en entero en la función the_pam_StrTok en Linux-PAM (alias pam) 1.0.3 y anteriores, cuando un fichero de configuración contienen nombres de usuario con caracteres non-ASCII, podría permitir a los atacantes remoto causar una denegación de servicios, y podría permitir a usuarios remotos autenticados obtener login de acceso con un nombre de usuario diferente a los usuarios con caracteres non-ASCII, a través de un intento de login."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-0887\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n","lastModified":"2009-03-13T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"5C8DB56B-870D-45E3-8216-ADB47FD07B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B59C70C7-FABE-4A45-A45D-2C7276D698DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DBA50D8F-D5A8-4123-93CF-E7714571F411"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DB8820C0-1ECB-45AD-A573-5667F0D09776"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D416053-0010-4B25-9F7C-6054C51C1685"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B97AB578-0E9E-4370-8379-0CD455F2D740"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.5.0:*:*:*:*:*:*:*","matchCriteriaId":"22A6147C-CC0A-4C9F-B9A9-E144F2133592"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6DEF8EC8-0E0A-4C0A-95BE-FB7C23732083"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C9A9AB1C-FDF8-4E98-8773-387E03CD93E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8F94AA92-5854-46B9-8B3C-08FCC5B071CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.6.3:*:*:*:*:*:*:*","matchCriteriaId":"FD5C0039-827C-45CD-99BE-95459006CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F4256C34-DBCA-4FE0-96A5-874D7F00869A"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1B2613D2-33C1-4132-AD9A-68190A59C0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.8.0:*:*:*:*:*:*:*","matchCriteriaId":"08FDE78F-119B-4FC8-BBFA-8048F2CF1227"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C4A75789-F7EC-4D9C-942A-243DF92E5CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.9.0:*:*:*:*:*:*:*","matchCriteriaId":"3753027E-D3A4-45D4-A3A3-2320C48AF6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:0.99.10.0:*:*:*:*:*:*:*","matchCriteriaId":"6533A629-6351-4831-BBF7-44718262FAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"516F23F9-25B3-40DB-A3CA-2F1DE0678934"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5F3ACA7F-D247-439C-8B5E-287EC5D236AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-pam:linux-pam:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6A30E5C3-501D-4DAA-B7F7-E42F98DEDBF9"}]}]}],"references":[{"url":"http://openwall.com/lists/oss-security/2009/03/05/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?r1=1.9&amp%3Br2=1.10&amp%3Bview=patch","source":"cve@mitre.org"},{"url":"http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?view=log","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34733","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:077","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34010","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49110","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/03/05/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?r1=1.9&amp%3Br2=1.10&amp%3Bview=patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/libpam/pam_misc.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00420.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0888","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0889."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader 8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes remotos ejecutar código de su elección a través de vectores no especificados, es una vulnerabilidad dsitinta a CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, y CVE-2009-0889."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0889","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, and CVE-2009-0888."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el filtro JBIG2 en adobe acrobat 7 reader 7  anterior a v7.1.3, Adobe Reader 8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior v9.1.2, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados. Vulnerabilidad distinta de  CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, y CVE-2009-0888."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0891","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values in WS-Security bindings as stored in the com.ibm.wsspi.wssecurity.core custom property, which allows remote authenticated users to conduct session hijacking attacks."},{"lang":"es","value":"El componente Web Services Security en IBM WebSphere Application Server v7.0 anterior a Fix Pack 1 (v7.0.0.1), v6.1 anterior a Fix Pack 23 (v6.1.0.23),y v6.0.2 anterior Fix Pack 33 (v6.0.2.33) no respeta los valores (1)nonce y (2)timestamp expiration en los vínculos WS-Security tal y como se almacenan en la propiedad com.ibm.wsspi.wssecurity.core, lo que permite a usuarios remotos autenticados dirigir ataques de hijacking de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*","matchCriteriaId":"D592217D-3489-40AE-8338-BF5AA5BBA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34131","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK66676&apar=only","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49391","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PK66676&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0892","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T14:09:53.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in \"specific scenarios\" related to a forced logout."},{"lang":"es","value":"La consola de administración en IBM WebSphere Application Server (WAS) v6.1 versiones anteriores a v6.1.0.23 y v7.0 versiones anteriores a v7.0.0.3 permite a atacantes secuestrar sesiones de usuarios en \"escenarios específicos\" relacionados con cierres de sesión forzadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"}]}]}],"references":[{"url":"http://secunia.com/advisories/34131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK74966","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK74966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0893","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a \"missing resync marker range check\" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions."},{"lang":"es","value":"Múltiples desbordamientos de memoria basados en memoria dinámica en xvidcore/src/decoder.c en la librería xvidcore en Xvid anteriores a v1.2.2, tal y como es utilizado en Windows Media Player y otras aplicaciones, permite a atacantes remotos ejecutar código de forma arbitraria mediante un numero \"macroblock\" (también conocido como MBlock) en una difusión de vídeo en un fichero de película manipulado que inicia la corrupción de la memoria dinámica, relacionado con una \"comprobación de perdida de sincronización de marcador\" y las funciones (1) decoder_iframe, (2) decoder_pframe, y (3) decoder_bframe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"64677D58-FD33-49D1-9CF4-FDDAA276BBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1AB2BD9-FBE3-44E9-85AD-CFDD89036096"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC174AC0-DAC0-4416-8886-57A360426A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7EBF71AE-3B19-45F8-9ED7-ED59885E33B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAF0BE91-717E-45B4-B10D-3B31D8D91305"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"012DC76F-FD6D-4AC8-B0DD-E9613A5B1B3A"}]}]}],"references":[{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c","source":"cve@mitre.org"},{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35156","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7","source":"cve@mitre.org"},{"url":"https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic","source":"cve@mitre.org"},{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0894","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la funcion decoder_create en la inicialización de la funcionalidad en xvidcore/src/decoder.c en Xvid anteriores a v1.2.2, tal y como se utiliza en Windows Media Player y otras aplicaciones, permite a atacantes remotos ejecutar código de forma arbitraria a través de vectores relacionados con el frontend de DirectShow (aka DShow) y el maneja inadecuado del código de retorno de XVID_ERR_MEMORY durante el proceso de manejo de un fichero de película manipulado. NOTA: Algunos de los detalles de esta información fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"64677D58-FD33-49D1-9CF4-FDDAA276BBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1AB2BD9-FBE3-44E9-85AD-CFDD89036096"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC174AC0-DAC0-4416-8886-57A360426A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7EBF71AE-3B19-45F8-9ED7-ED59885E33B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAF0BE91-717E-45B4-B10D-3B31D8D91305"},{"vulnerable":true,"criteria":"cpe:2.3:a:xvid:xvid:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"012DC76F-FD6D-4AC8-B0DD-E9613A5B1B3A"}]}]}],"references":[{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35158","source":"cve@mitre.org"},{"url":"http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7","source":"cve@mitre.org"},{"url":"https://www.it-isac.org/postings/cyber/alertdetail.php?id=4635&selyear=2009&menutype=menupublic","source":"cve@mitre.org"},{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.it-isac.org/postings/cyber/alertdetail.php?id=4635&selyear=2009&menutype=menupublic","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0895","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en Novell eDirectory v8.7.3.x anteriores a v8.7.3.10 ftf2 y v8.8.x  anteriores a v8.8.5.2 permite a atacantes remotos ejecutar código arbitrario a través de la peticion NDS 0x1 conteniendo un valor de entero largo que inicia un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp10:*:*:*:*:*:*","matchCriteriaId":"6F8E26AA-2F13-4E02-967F-5675C402B969"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp10:ftf1:*:*:*:*:*","matchCriteriaId":"50A97C1A-2DCE-4F85-A177-1CEA84C943EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp10_b:*:*:*:*:*:*","matchCriteriaId":"D793787E-2CFB-4822-85ED-0BB79D3FFF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:*:*:*:*:*:*","matchCriteriaId":"9A38C607-73EA-4785-97FC-3D6013DC2981"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:ftf1:*:*:*:*:*","matchCriteriaId":"D5BD6876-7210-4BEB-B7AA-D244135365D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:*:*:*:*:*:*","matchCriteriaId":"05979B3C-5275-43F4-9B45-865D1E22297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:ftf1:*:*:*:*:*","matchCriteriaId":"718BDE90-B390-4CE8-BDB9-9C6FBEFE14CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:*:*:*:*:*:*","matchCriteriaId":"6675EC25-306B-45B1-92C4-9528FA54A215"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:ftf1:*:*:*:*:*","matchCriteriaId":"9D98C9A0-47D5-4999-943C-3505C6FB6F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*","matchCriteriaId":"896C7671-E300-4E6D-86A3-D0DAF4168CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"03D34570-657E-48D5-B778-9510C3D0FF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*","matchCriteriaId":"2EA7ED79-2E4E-4BE0-B167-31BB6311A506"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*","matchCriteriaId":"E263D9A0-CAC3-4009-9F5B-8EA7365B28AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*","matchCriteriaId":"A78EBF3A-4073-41D2-BD52-E598318D4996"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:ftf1:*:*:*:*:*","matchCriteriaId":"029E2F2F-CFC0-4C35-956C-703264AF3E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.5:*:ftf1:*:*:*:*:*","matchCriteriaId":"57A31BFD-F2AA-4FCD-A661-706B5CFE2CDC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/356.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004912","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37184","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3379","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=524344","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=545887","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50616","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/threats/356.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=524344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=545887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0896","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request."},{"lang":"es","value":"Desbordamiento de búfer en el gestor de cola en IBM WebSphere MQ v6.x anterior a v6.0.2.7 y v7.x anterior a v7.0.1.0, permite a atacantes remotos ejecutar código de su elección a través de una petición manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D2279B-482A-4CA6-9EF2-C57A95969BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9728448F-E295-4C33-B2F4-17FAAFCDF169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0F36C644-664C-4758-9762-E808C80AE904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9C670A3F-7BBB-4115-A037-B5E732ABB6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CCD33A5-6567-43CB-909D-D1851ACF4AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D3664585-D0B4-467C-9B6D-4F8E239F7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2216808-BAE9-4034-9618-5EC4CCB80E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6263B9D-A62A-4E41-958A-968F9ACA0CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"19983CDF-4769-4B56-98ED-CE7EE0C1AFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0:*:*:*:*:*:*:*","matchCriteriaId":"594287A4-AF30-4872-A5B8-1421FAB5C674"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"896273C9-11F9-45A0-BA46-66F37DFACCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF396289-8409-4FE2-96DB-99818D5680B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022311","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386826","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ50784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35170","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1463","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ50784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0897","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T15:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Partner Gateway (WPG) 6.1.0 before 6.1.0.1 and 6.1.1 before 6.1.1.1 allows remote authenticated users to obtain sensitive information via vectors related to the \"schema DB2 instance id\" and the bcgarchive (aka the archiver script)."},{"lang":"es","value":"IBM WebSphere Partner Gateway (WPG) v6.1.0 anteriores a v6.1.0.1 y v6.1.1 anterior a v6.1.1.1 permite a usuarios autenticados, obtener información sensible a través de vectores relativos a \"schema DB2 instance id\" y bcgarchive (también conocido como la secuencia de comandos archiver)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"69E55335-9BDD-451B-A610-9389F072279D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC33F02F-2381-4A6F-B322-B22E416B6887"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21366016","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50643","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21366016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0898","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted HTTP request."},{"lang":"es","value":"Desbordamiento de búfer en la pila en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través de peticiones HTTP manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/threats/357.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37294","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/threats/357.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0899","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) v6.1 a la v6.1.0.24 y v7.0 a la v7.0.0.4, IBM WebSphere Portal Server v5.1 a la v6.0, e IBM Integrated Solutions Console (ISC) v6.0.1, no establecen adecuadamente la opción de seguridad IsSecurityEnabled durante la migración de WebSphere Member Manager (WMM) a Virtual Member Manager (VMM) y a Federated Repository, lo que permite a atacantes obtener información sensible de los repositorios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:integrated_solutions_console:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"767F0F9A-B9C9-46DB-855D-1ADA1089C073"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1","versionEndIncluding":"6.1.0.24","matchCriteriaId":"73FB17BC-7C69-4F4F-A343-48FD7E78AA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.0.0.4","matchCriteriaId":"B05A31C2-4115-4398-BBD8-979CF465D340"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1","versionEndExcluding":"6.0.0.0","matchCriteriaId":"612E369F-B0DA-4863-B76B-C3DD6283DAC2"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375859","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35406","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50882","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK78134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0901","sourceIdentifier":"cve@mitre.org","published":"2009-07-29T17:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Please refer to this link http://www.microsoft.com/technet/security/Bulletin/MS09-035.mspx for mitigating factors and additional information.","cveTags":[],"descriptions":[{"lang":"en","value":"The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka \"ATL Uninitialized Object Vulnerability.\""},{"lang":"es","value":"La Active Template Library  (ATL) en Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 y 2008 Gold, y Visual C++ 2005 SP1 y 2008 Gold y SP1, no previene las llamadas VariantClear sobre una VARIAN sin inicializar, lo que permite a atacantes remotos ejecutar código de su elección a través de un (1) componente o (2) control ATL. Relacionado con las cabeceras ATL y manejo de errores. También conocida como \"Vulnerabilidad de objeto ATL sin inicializar\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1_redistribution_pkg:*:*:*:*:*:*","matchCriteriaId":"FA86F8B2-0211-4FF6-BE07-2E2EC06DFC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2008:redistribution_pkg:*:*:*:*:*:*","matchCriteriaId":"9BA98FBB-255F-4AC9-B035-54C60EEE022B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1_redistribution_pkg:*:*:*:*:*:*","matchCriteriaId":"B20EDFCC-8C10-4EBF-BCC6-1A17362E6676"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2005:sp1:64_bit_hosted_visual_c\\+\\+_tools:*:*:*:*:*","matchCriteriaId":"9E35016A-D55F-4607-8716-77AACB7B166C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36187","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36746","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/advisories/apsa09-04.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-11.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35832","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2034","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6311","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6373","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7581","source":"cve@mitre.org"},{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/advisories/apsa09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0903","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T01:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remote attackers to bypass intended access restrictions via a crafted request to a JAX-WS application."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) v7.0 anterior a v7.0.0.3, y el Pack de características para Web Services para WAS v6.1 anterior a v6.1.0.25, cuando una política WS-Security está establecida en el nivel de operación, no maneja adecuadamente peticiones de entrada que carecen de una acción SOAPAction o WS-Addressing, lo que permite a atacantes remotos saltar las restricciones de acceso previstas a través de una petición manipulada para una aplicación JAX-WS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2B009FD6-9352-4329-B67A-8155FB379889"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK72138","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK81944","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK87767","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35594","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51293","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK72138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK81944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK87767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0904","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via \"XML fuzzing attacks\" sent through SOAP requests."},{"lang":"es","value":"IBM Stax XMLStreamWriter en el componente Web Services de IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 , no procesa adecuadamente codificación XML, esto permite a atacantes remotos evitar las restricciones de acceso pretendidas y puede que modificar datos a través de \"ataques difusos XML\" enviados a través de solicitudes SOAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFCD0A1-64B4-4AE7-8161-D8A71F9D6904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.13:*:*:*:*:*:*:*","matchCriteriaId":"200B6A88-EFBD-4935-9596-D8EF3BC24D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"20131F92-09B2-41D8-B5D9-38EFE6883EC0"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35741","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51490","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK84015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0906","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors."},{"lang":"es","value":"El Service Component Architecture (SCA) \"feature pack\" para IBM WebSphere Application Server (WAS)  SCA v1.0 anterior a v1.0.0.3, permite a usuarios autenticados remotamente evitar las restricciones de acceso establecidas por authentication.transport y obtener acceso no especificado a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BDFDC724-24B4-4FC2-9018-C915B4275790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:1.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"538B9F5A-5160-430B-8028-940DEE765D3C"}]}]}],"references":[{"url":"http://secunia.com/advisories/36306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27015429","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27015429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK86047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0907","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.267","lastModified":"2023-11-07T02:03:46.500","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1899.  Reason: This candidate is a duplicate of CVE-2009-1899.  Notes: All CVE users should reference CVE-2009-1899 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-0908","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:04.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación de la carpeta en VMware Host Guest File System (HGFS) característica de carpeta compartida en VMware ACE v2.5.1 y anteriores que permiten a lo atacantes deshabilitar las carpetas compartidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"8D249F86-E463-4AB1-BEEE-0828D5A2D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"700C0BB4-2272-4405-9D9A-A636E3D22461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87291B27-442C-4CAB-94A1-67FC766486EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B04862-4377-422E-931A-B17FE1CA1884"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C35B6730-F05B-4B62-B4DE-07C61A4924F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9D22E40D-C362-49FD-924C-262A64555934"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A48CEB4-5864-4A0F-B14C-CFE4699C3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78957047-FB9F-4D1D-B3D9-91257A6B4D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"280033C5-90EF-4825-A87D-B23650D8C71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021975","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0909","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:04.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-435."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en VNnc Codec en VMware Workstation v6.5.x anteriores a v6.5.2 build 156735, VMware Player v2.5.x anteriores a v2.5.2 build 156735, VMware ACE v2.5.x anteriores a v2.5.2 build 156735, y VMware Server v2.0.x anteriores a v2.0.1 build 156745 permite a los atacantes remotos ejecutar arbitrariamente código a través de páginas web manipuladas o archivos de vídeo, también conocida como ZDI-CVE-435."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021974","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6251","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0910","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:04.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-436."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en  VNnc Codec en VMware Workstation 6.5.x versiones anteriores a v6.5.2 build 156735, VMware Player 2.5.x versiones anteriores a v2.5.2 build 156735, VMware ACE 2.5.x versiones anteriores a v2.5.2 build 156735, y VMware Server 2.0.x versiones anteriores a v2.0.1 build 156745 permite ejecutar código de su elección a través de un página web manipulada o fichero de video, también conocido como ZDI-CVE-436."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021974","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0912","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via \"special characters\" in unspecified vectors."},{"lang":"es","value":"perl-MDK-Common v1.1.11 y v1.1.24, v1.2.9 hasta v1.2.14, y posiblemente otras versiones, en Mandriva Linux no maneja correctamente las cadenas de caracteres cuando las añade a ficheros de configuración, permitiendo a atacantes remotos obtener privilegios mediante \"caracteres especiales\" en vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandriva:multi_network_firewall:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4DCD4AE9-A466-4413-A0C8-5509CBC8DA33"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux:2008.0:*:*:*:*:*:*:*","matchCriteriaId":"107F6BEE-C3CB-460A-B574-16D031D823AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux:2008.0:-:x86_64:*:*:*:*:*","matchCriteriaId":"29197BBD-0C26-41ED-A972-E730216CC742"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux:2008.1:*:*:*:*:*:*:*","matchCriteriaId":"9E024B17-9AEE-40AD-9EDC-3BC0FBB53BE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux:2008.1:-:x86_64:*:*:*:*:*","matchCriteriaId":"E6DCA59C-F054-4726-9A63-CF9419F7DC28"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux:2009.0:*:*:*:*:*:*:*","matchCriteriaId":"7F90D927-CBCD-4432-9C04-A5F040D8F337"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*","matchCriteriaId":"BA4E53C3-30E4-4FA2-8431-AC592966F4B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux_corporate_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3F2E9E33-9EF8-4D35-AC4F-CC371682EB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux_corporate_server:3.0:-:x86_64:*:*:*:*:*","matchCriteriaId":"264BA60D-3B77-424B-907D-0B168C831787"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux_corporate_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6579A7-D98C-406F-B621-7E111EF875B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandriva:linux_corporate_server:4.0:-:x86_64:*:*:*:*:*","matchCriteriaId":"7CE263F7-5E3E-4007-AEDE-E6BDE42B3081"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:072","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34089","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0688","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49220","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0913","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T17:30:07.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo keysock del kernel en Solaris v10 y OpenSolaris versiones vsnv_01 hasta vsnv_108 permite a usuarios locales provocar una denegación de servicio (error irrecuperable del sistema) mediante vectores desconocidos relacionados con el socket PF_KEY, relacionado probablemente con las opciones de configuración del socket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_108","matchCriteriaId":"D4A9DF86-60C3-41C2-8CB7-AD9841676694"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_108","matchCriteriaId":"342DE19C-9923-45C8-A441-5101F117A1CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/52678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34456","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253568-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-099.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34118","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021846","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0717","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0817","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49247","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6203","source":"cve@mitre.org"},{"url":"http://osvdb.org/52678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253568-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-099.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0914","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption."},{"lang":"es","value":"Opera en versiones anteriores a v9.64 permite a atacantes remotos ejecutar código de su elección mediante una imagen JPEG manipulada que provoca una corrupción de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.63","matchCriteriaId":"4DB92A4F-6761-4171-8395-F6A9F8266841"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*","matchCriteriaId":"177B7245-4E8F-44E7-BF34-43939DD75AE8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34135","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34294","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1021782","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/07/1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/964/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/964/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/926/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33961","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=261032","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5955","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6230","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200903-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/07/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/964/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/964/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/926/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=261032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0915","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins."},{"lang":"es","value":"Opera en versiones anteriores a v9.64 permite a atacantes remotos dirigir ataques de ejecución de secuencias de comandos en dominios cruzados mediante vectores no especificados relacionados con sus extensiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"9.64","matchCriteriaId":"52DFB2F5-B90B-4A04-8755-548B149F295D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34135","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33961","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0586","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6220","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-0916","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a \"moderately severe issue.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Opera versión anterior a v9.64 tiene un impacto y vectores de ataque desconocidos, relacionados con un \"asunto moderadamente severo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.63","matchCriteriaId":"4DB92A4F-6761-4171-8395-F6A9F8266841"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*","matchCriteriaId":"177B7245-4E8F-44E7-BF34-43939DD75AE8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34135","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/964/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33961","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/freebsd/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0917","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK.  NOTE: the vendor states that the product is intended for use in a laboratory with \"no contact from / to internet.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en DFLabs PTK v1.0.0 hasta v1.0.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección al proporcionar una imagen forense que contenga documentos HTML, que son visualizados en un navegador web durante la inspección por PTK. NOTA: el vendedor expone que el producto está previsto para su uso en un laboratorio \"sin contacto desde/hacia Internet\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBFB91D9-2A63-4693-B945-6657CBB3C8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C7788956-AF55-4AE2-AD75-1E862ED0DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021F40-6D3C-4577-B0F6-1D53A5836CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C34A4D7-A2DC-4FFC-8F31-A5EB9B297C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7DD0A3FF-7218-4CE9-9F0E-A68D1B3D7A07"}]}]}],"references":[{"url":"http://ptk.dflabs.com/faq.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ptk.dflabs.com/security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34257","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/845747","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34111","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49236","source":"cve@mitre.org"},{"url":"http://ptk.dflabs.com/faq.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ptk.dflabs.com/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/845747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0918","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) \"external tools\" or (2) a crafted forensic image."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en DFLabs PTK v1.0.0 hasta v1.0.4 permite a atacantes remotos ejecutar código de su elección en los procesos lanzados por el Apache HTTP Server de PTK mediante (1) \"herramientas externas\" o (2) una imagen forense manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBFB91D9-2A63-4693-B945-6657CBB3C8CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C7788956-AF55-4AE2-AD75-1E862ED0DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021F40-6D3C-4577-B0F6-1D53A5836CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C34A4D7-A2DC-4FFC-8F31-A5EB9B297C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:dflabs:ptk:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7DD0A3FF-7218-4CE9-9F0E-A68D1B3D7A07"}]}]}],"references":[{"url":"http://ptk.dflabs.com/faq.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ptk.dflabs.com/security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/845747","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34111","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49235","source":"cve@mitre.org"},{"url":"http://ptk.dflabs.com/faq.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ptk.dflabs.com/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/845747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0919","sourceIdentifier":"cve@mitre.org","published":"2009-03-16T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the \"lampp\" default password for the \"nobody\" account within the included ProFTPD installation, (2) a blank default password for the \"root\" account within the included MySQL installation, (3) a blank default password for the \"pma\" account within the phpMyAdmin installation, and possibly other unspecified passwords.  NOTE: this was originally reported as a problem in DFLabs PTK, but this issue affects any product that is installed within the XAMPP environment, and should not be viewed as a vulnerability within that product. NOTE: DFLabs states that PTK is intended for use in a laboratory with \"no contact from / to internet.\""},{"lang":"es","value":"XAMPP instala varios paquetes con contraseñas predeterminadas no confiables, lo que facilita a los atacantes remotos obtener acceso por medio de (1) la contraseña predeterminada \"lampp\" para la cuenta \"nobody\" dentro de la instalación ProFTPD incluida, (2) una contraseña predeterminada en blanco para la cuenta \"root\" dentro de la instalación MySQL incluida, (3) una contraseña predeterminada en blanco para la cuenta \"pma\" dentro de la instalación de phpMyAdmin, y posiblemente otras contraseñas no especificadas. NOTA: esto se informó originalmente como un problema en DFLabs PTK, pero este problema afecta a cualquier producto que está instalado dentro del entorno XAMPP, y no debe ser visto como una vulnerabilidad dentro de ese producto. NOTA: DFLabs declara que PTK está destinado a su uso en un laboratorio sin \"no contact from / to internet\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.1:alpha:solaris:*:*:*:*:*","matchCriteriaId":"D852C7F0-6921-44FE-A87B-A8E78A05D6EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.1:beta:mac_os_x:*:*:*:*:*","matchCriteriaId":"78CEFFC6-417B-4411-93A8-C22681827936"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.2:alpha:solaris:*:*:*:*:*","matchCriteriaId":"04FC6977-82E8-4742-8CFE-9EC5E5511A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.2:beta:mac_os_x:*:*:*:*:*","matchCriteriaId":"A2D5B075-D251-4104-86F1-4BA1FF7EC31C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.3:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"D56B07D0-1D3F-495A-AD76-D866EDCAE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.3:alpha:solaris:*:*:*:*:*","matchCriteriaId":"4B3E4D15-23A8-4541-BB39-C6ACB84D7999"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.4:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"AD23964B-A722-4F7C-A336-61A360ADFA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.4:alpha:solaris:*:*:*:*:*","matchCriteriaId":"D35CA8B9-00B4-44CD-B5BF-CCE276F0216E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.5:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"B9ACB8C9-5980-4789-9CCE-9805906F2DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.5:beta:solaris:*:*:*:*:*","matchCriteriaId":"DF9F9BEF-FC13-48BB-9E6E-68B7F5828CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.6:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"678BE4AA-6505-4A9D-9531-5A581FBA4DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.6:beta:solaris:*:*:*:*:*","matchCriteriaId":"6D1AB580-968E-4C74-AD98-7B21FC1D8F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.6.1:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"E3E9D24D-A10F-4249-A39B-1C0762EEF1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.6.2:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"A915227E-F7E4-4A8E-8E6A-473C1FC8C8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.6.3:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"B708DBBE-F01F-4C1B-B88D-CFB0E2EF20EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.6a:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"35A52F08-3A3C-45BF-805E-6B3F2062D77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.7:beta:solaris:*:*:*:*:*","matchCriteriaId":"D667FE7B-9C1A-49D9-87C2-F7AC02F84C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.7.0:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"1388121F-3F5A-494C-91E9-A64B24F64B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.7.1:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"D49CD506-F56C-41A5-89C1-A3D43F8EB162"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.7.2:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"56FD60B1-B834-496C-A44C-55AD27B5D025"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.7.3:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"294BBC24-7AB9-4F03-9AF3-439333640E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.7.4:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"9EF76E73-830A-4116-8E91-A3EE3AB2D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.8.1:-:solaris:*:*:*:*:*","matchCriteriaId":"15C42672-5DB6-4DB7-BCA6-AA6BFF06FC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.8.2:-:solaris:*:*:*:*:*","matchCriteriaId":"881F9C72-A00F-48DC-ACB1-864F6C780325"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.9:-:solaris:*:*:*:*:*","matchCriteriaId":"22CF20F2-6F81-417E-A5ED-339BEFF17866"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:0.9:-:windows:*:*:*:*:*","matchCriteriaId":"9BAEB9A5-52CA-456A-AC86-8C8A1DD796CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.0:-:windows:*:*:*:*:*","matchCriteriaId":"B5BE1F44-BC2F-42E2-B767-AA68EF6A099C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.0.1:-:mac_os_x:*:*:*:*:*","matchCriteriaId":"595B32FD-012E-4C8E-8551-9C34BA3B1F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.1:-:windows:*:*:*:*:*","matchCriteriaId":"C94F02B3-F069-421C-969F-CB07C03691CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.2:-:linux:*:*:*:*:*","matchCriteriaId":"521DDEA7-67AB-4F15-B01D-B3B27323F790"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.2:-:windows:*:*:*:*:*","matchCriteriaId":"88AEFD99-5859-43B4-A063-7ACE2539799A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.3:-:linux:*:*:*:*:*","matchCriteriaId":"1FCF3544-ED63-4093-9FF8-6D935FA41DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.3:-:windows:*:*:*:*:*","matchCriteriaId":"00D8EC46-23B9-4C8E-8BDD-B33591D9953E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4:-:linux:*:*:*:*:*","matchCriteriaId":"518A38DF-D65C-4413-9562-F8BCEE6A7DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4:-:windows:*:*:*:*:*","matchCriteriaId":"753252BB-CD66-4B66-BB2F-87443A332DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.2:-:linux:*:*:*:*:*","matchCriteriaId":"42A7210B-429F-4768-B500-88E4DAC38883"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.2:-:windows:*:*:*:*:*","matchCriteriaId":"9BCC1009-E28C-40B2-B12F-CF0FB653A6F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.3:-:linux:*:*:*:*:*","matchCriteriaId":"2E92F057-5D2B-48BA-8888-C24694E3F976"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.3:-:windows:*:*:*:*:*","matchCriteriaId":"FD01B77C-5899-49DB-90B2-17D37F26E3D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.4:-:linux:*:*:*:*:*","matchCriteriaId":"692792A8-5EF6-4938-AA73-1E496E646FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.4:-:windows:*:*:*:*:*","matchCriteriaId":"EF035291-21D1-42C9-84F7-9623AACDE2CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.5:-:linux:*:*:*:*:*","matchCriteriaId":"6D416297-CD18-4069-8FBB-BA31D268D7BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"D80F49AC-E95E-45EF-8053-EC1B68E3B897"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.6:-:linux:*:*:*:*:*","matchCriteriaId":"D4FF050C-B90B-48C6-A159-DBBC7DF727F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.6:-:windows:*:*:*:*:*","matchCriteriaId":"DD43FE64-CEB5-4F9E-93D1-FD0D1183D9A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.7:-:linux:*:*:*:*:*","matchCriteriaId":"00D41D08-45E5-4A6F-84C1-60105950DFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.7:-:windows:*:*:*:*:*","matchCriteriaId":"5E428F45-0EF4-4CE6-A6E9-A6D4D649DB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.8:-:linux:*:*:*:*:*","matchCriteriaId":"1C1B89C2-8900-4715-BF68-77992EC03965"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.8:-:windows:*:*:*:*:*","matchCriteriaId":"E98A18D2-02FD-4FEC-8A95-945E216D2B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.9:-:linux:*:*:*:*:*","matchCriteriaId":"0F848630-852D-49CA-B503-52D128E15737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.9:-:windows:*:*:*:*:*","matchCriteriaId":"326D9976-BF09-41A8-9FDA-1E708913F828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.10:-:linux:*:*:*:*:*","matchCriteriaId":"E44CFC4F-A390-4479-8900-8BFED1A4BF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.10:-:windows:*:*:*:*:*","matchCriteriaId":"F498C376-5DE2-4CF0-86CB-04817540196F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.11:-:linux:*:*:*:*:*","matchCriteriaId":"A52BCC2A-E627-4953-A3BA-00344BA6D86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.11:-:windows:*:*:*:*:*","matchCriteriaId":"245C0C32-0D61-421B-AD96-5DDBAF3CAEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.12:-:linux:*:*:*:*:*","matchCriteriaId":"3B39EA8B-5A4E-4CB2-AE1C-51698C678F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.12:-:windows:*:*:*:*:*","matchCriteriaId":"4ABD7A7F-933E-4801-BEC1-828D4D164D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.13:-:linux:*:*:*:*:*","matchCriteriaId":"19CFEB48-760D-4C7A-BF02-BEE37BCC5A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.13:-:windows:*:*:*:*:*","matchCriteriaId":"409EDE80-5401-4D2C-81B7-E902AF2BC05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.14:-:linux:*:*:*:*:*","matchCriteriaId":"0D823D61-D4E3-46CA-8DD0-AA7165DBD625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.14:-:windows:*:*:*:*:*","matchCriteriaId":"DF84DEF8-FE14-4542-9F12-8E7E8B2199C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.15:-:linux:*:*:*:*:*","matchCriteriaId":"2169A052-897D-415B-8E64-EFF052FB4E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.15:-:windows:*:*:*:*:*","matchCriteriaId":"EC2D3C65-85A6-4B6F-B96A-292F01EE89C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.16:-:linux:*:*:*:*:*","matchCriteriaId":"513F226A-C9A6-4D6A-A9B3-A1B52B3CDFE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.4.16:-:windows:*:*:*:*:*","matchCriteriaId":"B3F8A76A-8BFF-455E-93EF-9D1D1816A628"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5:-:linux:*:*:*:*:*","matchCriteriaId":"670147E6-4A2F-491D-96B9-15F7CE0F623E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"5E2BE53B-E413-4ADF-88E2-0E18951A29FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.1:-:linux:*:*:*:*:*","matchCriteriaId":"D2130A2C-5983-4F36-9D35-59BD98CD12A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"14EDDE9C-1571-4015-8D93-277DA5E71B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.2:-:linux:*:*:*:*:*","matchCriteriaId":"0478D781-3A56-46E2-92C7-625D36E81FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"DE908119-F86C-4C4D-B997-8FF8B4FB0F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.3:-:linux:*:*:*:*:*","matchCriteriaId":"B3120206-E5DE-4068-BED4-7AF420A10848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.3:-:windows:*:*:*:*:*","matchCriteriaId":"A6D45009-6224-4EDA-A615-BE31C4F03CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.4:-:linux:*:*:*:*:*","matchCriteriaId":"6DF4FF2F-DC67-4A6A-9559-83132DD10BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.4:-:windows:*:*:*:*:*","matchCriteriaId":"D35F8989-2793-4A55-8B66-E10CB3A6ABE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.4a:-:linux:*:*:*:*:*","matchCriteriaId":"3559622C-545E-4637-8EF9-4B8D988BC2BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.4a:-:windows:*:*:*:*:*","matchCriteriaId":"FF1B3B47-903A-4FE9-ABE9-794AF765B922"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.5:-:linux:*:*:*:*:*","matchCriteriaId":"8BACDCE8-992B-4A22-9F40-19EEA0C1A786"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"98BAC01C-FDDC-466A-86ED-860F63F37C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.5.5a:-:linux:*:*:*:*:*","matchCriteriaId":"4B59F9AA-F1ED-49FE-8111-0EBCB0790552"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6:-:linux:*:*:*:*:*","matchCriteriaId":"45134D13-D489-469F-9A3A-8D4BA70FB219"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"5C9E3E23-8822-457A-955E-33945AF34DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.0a:-:windows:*:*:*:*:*","matchCriteriaId":"68D8BBFF-D1E0-46FB-82D0-D3C508225C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.1:-:linux:*:*:*:*:*","matchCriteriaId":"3FE71F80-806D-4DB5-8375-4D24DA1D32FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"5BEEC481-A24C-43CE-8F21-E8EDC2F85841"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.2:-:linux:*:*:*:*:*","matchCriteriaId":"97B4524A-CBDF-4601-85F3-13681C13F610"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.2:-:windows:*:*:*:*:*","matchCriteriaId":"37A8E8F9-97EC-45B9-9045-D86CB53D828D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.3:-:linux:*:*:*:*:*","matchCriteriaId":"4AC0109B-C81A-4CF5-83BF-4E44D3C29F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.3:-:windows:*:*:*:*:*","matchCriteriaId":"76F1A3F2-2F18-4A0C-98D4-5202BB0E527E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.3a:-:linux:*:*:*:*:*","matchCriteriaId":"8EE9D235-0C16-45C8-AA45-8097CB4A963A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.3a:-:windows:*:*:*:*:*","matchCriteriaId":"C6206F6B-4469-4FFE-A6C8-C8FA261DFDA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.3b:-:linux:*:*:*:*:*","matchCriteriaId":"8C7BC6E9-1C71-4CA5-8AFD-8C93537FF9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.4:-:linux:*:*:*:*:*","matchCriteriaId":"7F199E65-F2A5-47F0-B92D-8D538000D9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.4:-:windows:*:*:*:*:*","matchCriteriaId":"89A9AC2E-4A66-4D4C-AF17-70AB3217CA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.5:-:linux:*:*:*:*:*","matchCriteriaId":"2A0475AF-FA3D-4A34-8542-B11E130C4E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.5:-:windows:*:*:*:*:*","matchCriteriaId":"29C62C67-FD02-4367-BF96-1F5DFE435AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.5a:-:linux:*:*:*:*:*","matchCriteriaId":"8E7EBE1D-0FEC-4ADD-AB8C-D67A6CB57922"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.6:-:linux:*:*:*:*:*","matchCriteriaId":"42C6F2F6-C596-4647-B6C3-ABCEF6A7C890"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.6:-:windows:*:*:*:*:*","matchCriteriaId":"B2D29AA5-0BF4-46C6-8D6D-B584F041788E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.6a:-:windows:*:*:*:*:*","matchCriteriaId":"0174D79A-2341-44D4-B7EA-A14A38F8AF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.7:-:linux:*:*:*:*:*","matchCriteriaId":"EDBC5972-7BD9-4C90-91A7-7D4811857019"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.7:-:windows:*:*:*:*:*","matchCriteriaId":"19A397CD-815D-4207-ABDB-67D0AAD8D750"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.8:-:windows:*:*:*:*:*","matchCriteriaId":"391FA876-2CB5-47F6-879E-F1B3C2EF058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.6.8a:-:linux:*:*:*:*:*","matchCriteriaId":"A3486C4C-995A-425C-9A57-2E2A78AACADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.7:-:linux:*:*:*:*:*","matchCriteriaId":"BAF988E9-F7E6-4246-A5AF-8A68BA8C300C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.7:-:windows:*:*:*:*:*","matchCriteriaId":"6AABB31F-4389-4D1B-80AD-2B99BCE159AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.7.1:-:linux:*:*:*:*:*","matchCriteriaId":"ABFA800A-38C7-4C89-BE56-11929AE7E36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:1.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"2B0A5ED3-D7B5-4B7C-B84B-EF0174F7D904"},{"vulnerable":true,"criteria":"cpe:2.3:a:apachefriends:xampp:development:-:windows:*:*:*:*:*","matchCriteriaId":"F007A84B-F0F1-4DE2-9256-BA0A5D84B80E"}]}]}],"references":[{"url":"http://ptk.dflabs.com/security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.apachefriends.org/en/faq-xampp-linux.html","source":"cve@mitre.org"},{"url":"http://www.debianhelp.co.uk/xampp.htm","source":"cve@mitre.org"},{"url":"http://www.ibm.com/developerworks/linux/library/l-xampp/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49306","source":"cve@mitre.org"},{"url":"http://ptk.dflabs.com/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.apachefriends.org/en/faq-xampp-linux.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debianhelp.co.uk/xampp.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/developerworks/linux/library/l-xampp/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0920","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en OvCgi/Toolbar.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53, permite a atacantes remotos ejecutar código de su elección a través de una cookie OvOSLocale, una variantes de CVE-2008-0067."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EE29430-F5AE-498A-A73C-B1D91D46CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D53F428-EBF9-4599-835E-F1D02CF3FC40"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6A59795B-C6EC-4B4B-AFAF-8D83424F8C7C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8308","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/openview-buffer-overflows","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502054/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34294","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021883","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49364","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/openview-buffer-overflows","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502054/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0921","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en monticulo en OvCgi/Toolbar.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53, permite a atacantes remotos ejecutar código de forma arbitraria a través de (1)la cookie OvAcceptLang, que inicia el error en ov.dll y ovwww.dll, o (2)una cabecera HTTP larga Accept-Language, lo que inicia el error ovwww.dll o libovwww.so.4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EE29430-F5AE-498A-A73C-B1D91D46CAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D53F428-EBF9-4599-835E-F1D02CF3FC40"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:network_node_manager:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6A59795B-C6EC-4B4B-AFAF-8D83424F8C7C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34444","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/openview-buffer-overflows","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502054/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34135","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021883","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49363","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123791084113871&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/openview-buffer-overflows","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502054/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0922","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: https://bugzilla.redhat.com/show_bug.cgi?id=488156\r\n\r\n\"PostgreSQL allows remote authenticated users to cause a momentary denial\r\nof service (crash due to stack consumption) when there is a failure to\r\nconvert a localized error message to the client-specified encoding.\r\nIn releases 8.3.6, 8.2.12, 8.1.16. 8.0.20, and 7.4.24, a trivial\r\nmisconfiguration is sufficient to provoke a crash.  In older releases\r\nit is necessary to select a locale and client encoding for which\r\nspecific messages fail to translate, and so a given installation may or\r\nmay not be vulnerable depending on the administrator-determined locale\r\nsetting.\r\n\r\nReleases 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 are secure against\r\nall known variants of this issue.\"","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests."},{"lang":"es","value":"PostgreSQL en versiones anteriores a 8.3.7, 8.2.13, 8.1.17, 8.0.21 y 7.4.25 permite a usuarios remotos autenticados provocar una denegación de servicio (consumo de pila y caída) desencadenando un fallo en la conversión de un mensaje de error localizado en el cifrado para un cliente especificado, como se demuestra usando peticiones de conversión de codificación no coincidentes."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Red Hat\nEnterprise Linux 4 and 5 via:\nhttps://rhn.redhat.com/errata/RHSA-2009-1484.html\n\nand in Red Hat Application Stack v2 via:\nhttps://rhn.redhat.com/errata/RHSA-2009-1067.html","lastModified":"2009-10-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*","matchCriteriaId":"4394564D-131D-41C8-AE3A-BFF44779F27B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"3CD7F8CA-09B3-4038-B8B0-2D62A77F2478"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*","matchCriteriaId":"3B903334-2F67-4725-8277-6913E03BEFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*","matchCriteriaId":"BC8C96F7-7F85-4E47-A05F-15E3C70AF583"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*","matchCriteriaId":"74857259-30C7-422D-A24D-BE1E33F09466"}]}]}],"references":[{"url":"http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35100","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0086","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:079","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/11/4","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/about/news.1065","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503598/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34090","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021860","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0767","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1316","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488156","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html","source":"cve@mitre.org"},{"url":"http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/about/news.1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503598/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0923","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a denial of service (loss of incremental propagation requests to slave KDC servers) via unknown vectors related to the master Key Distribution Center (KDC) server."},{"lang":"es","value":"Vulnerabilidad sin especificar en Kerberos Incremental Propagation en Solaris 10 y OpenSolaris snv_01 hasta snv_110 permite a atacantes remotos provocar una denegación de servicio (perdida de peticiones de propagación incremental a servidores KDC esclavos) a través de vectores desconocidos relacionados con el servidor maestro Key Distribution Center (KDC)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34487","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34139","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021851","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0875","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49276","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0924","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6442712."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun OpenSolaris snv_39 hasta snv_45, cuando se ejecuta en modo 64-bit sobre arquitecturas x86, permite a usuarios locales provocar una denegación de servicio (cuelgue en la escritura en el sistema de archivos UFS) a través de vectores desconocidos relacionados con las rutinas (1) ufs_getpage y (2) ufs_putapage, también conocido como CR 6442712.\r\n\r\n\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34331","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34137","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021850","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0925","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47 through snv_85, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6425723."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Solaris 10 en SPARC sun4v systems, y OpenSolaris snv_47 hasta snv_85, permite a usuarios locales provocar una denegación de servicio (cuelgue en la escritura en el sistema de archivos UFS) a través de vectores desconocidos relacionados con las rutinas 1) ufs_getpage y (2) ufs_putapage, también conocido como CR 6425723."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34331","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34137","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021850","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49282","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0926","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through snv_91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service (panic) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6679732."},{"lang":"es","value":"Vulnerabilidad no especificada en la funcionalidad del sistema de ficheros UFS en Sun OpenSolaris snv_86 through snv_91, cuando se ejecuta en modo 32-bit sobre sistemas x86, permite a usuarios locales provocar una denegación de servicio (causando un panic) a través de vectores relacionados con las rutinas (1) ufs_getpage and (2) ufs_putapage, también conocido como CR 6679732."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:build_snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"2DFA1F8F-6718-4E66-A70A-2B4B46F41A07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://secunia.com/advisories/34331","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34137","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021850","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0742","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49283","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0927","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.420","lastModified":"2025-10-22T01:15:33.950","vulnStatus":"Deferred","evaluatorSolution":"Per vendor advisory in the 'details' section it states:\n\n\"The Adobe Reader and Acrobat 9.1 and 7.1.1 updates resolve an input validation issue in a JavaScript method that could potentially lead to remote code execution. This issue has already been resolved in Adobe Reader 8.1.3 and Acrobat 8.1.3. (CVE-2009-0927)\"\n\nhttp://www.adobe.com/support/security/bulletins/apsb09-04.html","cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Reader y Adobe Acrobat v9.1 y v7.1.1 permite a atacantes remotos ejecutar código de su elección mediante vectores desconocidos, en relación con un método JavaScript y validación de entrada, una vulnerabilidad diferente a CVE-2009-0658."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.1.1","matchCriteriaId":"FE671D4C-9BAC-4E77-A983-12F6BFD70562"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.1.3","matchCriteriaId":"B03B6302-5781-4010-AD6A-7D18973D70C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.1","matchCriteriaId":"BDBEDB79-859B-4EC6-8AFB-81FC20EB52B1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9579","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502116/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34169","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021861","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0770","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-014","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49312","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/502116/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0927","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-0928","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Adobe Acrobat Reader y Acrobat Professional v7.1.0, v8.1.3, v9.0.0 y otras versiones, permite a atacantes remotos ejecutar código de su elección a través de un archivo PDF que contiene una cadena JBIG2 con un tamaño inconsistente relacionado con una tabla sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"ADDAA1F2-FDC3-4CCE-8233-4F85EB5B8407"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"465F9134-DD86-4F13-8C39-949BE6E7389A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB041EDF-EFF8-4AA6-8D59-411975547534"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AABA4FE3-662B-4956-904D-45086E000890"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"998CD79C-458E-46A8-8261-1C40C53D9FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"0155FB0B-7FAD-4388-96C8-A8543B4FDFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*","matchCriteriaId":"201F059D-33D1-4D9F-9C6F-FC8EB49E4735"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B025E795-5713-485E-8A15-EBE4451A1A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B453FA1D-0FE9-4324-9644-E167561926C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FDEA946E-B6D2-463B-89D0-F2F37278089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"183B5940-2310-4D2E-99F0-9792A801A442"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F8BB13E-2732-4F9E-A588-EA1C00893C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5FCDCBF-597B-439C-8D8B-2819FC70C567"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"440B890A-90E9-4456-B92A-856CD17F0C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8976A7DC-1314-4C4A-A7C5-AA789D2DAB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"37854E7C-2166-48D7-AE8C-44C9468C38C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F9C17896-8895-4731-B77A-F488A94F0CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF9F1050-B6BE-4B99-882B-36D6E187304D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6A624D44-C135-4ED3-9BA4-F4F8A044850B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"3B9F55CC-3681-4A67-99D1-3F40447392D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*","matchCriteriaId":"A9C0AC89-804B-44A1-929A-118993B6BAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"39B174C3-1BA6-4654-BFA4-CC126454E147"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6ACDAA2B-3977-4590-9F16-5DDB6FF6545B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"BB7C4E07-0909-4114-BBFB-92626AFC49BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7832B75B-7868-44DE-A9A4-CBD9CC117DB4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"840D37C8-F30C-4A91-9B34-39AF1E4E34C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1C92642-7C8D-411A-8726-06A8A6483D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"3CBE2E6C-AF0E-4A77-9EB0-3593889BC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"4B5C5C14-383C-4630-858E-D40D6C32FD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F509566A-6D4A-40C0-8A16-F8765C5DCAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"200FFAE3-CC1C-4A11-99AD-377D54A67195"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"8A990E86-07C0-49E2-92D6-55E499F30FAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.5:*:*:*:*:*:*:*","matchCriteriaId":"6AED985D-60D7-489E-9F1E-CE3C9D985B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F7AA1BA3-9FFA-46AB-A92A-7247D5F7EA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"3F5F7424-1E19-4078-8908-CD86A0185042"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F2402B40-6B72-48B5-A376-DA8D16CA43FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"0D968113-340A-4E5A-B4FD-D9702D49E3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF742B8-5F7A-487B-835C-756B1BB392F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B9351C2-16ED-4766-B417-8DB3A8766C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74667860-0047-40AD-9468-860591BA9D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DEA092A-5532-4DCC-B43D-7A8ECF07FA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9628AFF9-6EE1-4E85-858F-AE96EE64B7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B95511FD-C8F1-478F-B6DF-1D0E068845D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"32049561-270C-4B18-9E96-EA0F66ACECAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1976F77D-D8D2-4107-A1C4-05D776A02FAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C4670451-511E-496C-A78A-887366E1E992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1A2A4F62-7AB5-4134-9A65-4B4E1EA262A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"35994F76-CD13-4301-9134-FC0CBEA37D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0FB61191-F955-4DE6-A86B-36E031DE1F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E32D68D5-6A79-454B-B14F-9BC865413E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2A57581C-A139-41C3-B9DB-0C4CFA7A1BB2"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=776","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34229","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021892","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0929","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el administrador de medios en Nucleus CMS anterior a v3.40 permite a atacantes remotos leer ficheros de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"AA33C047-9ABF-40EB-A3DF-F717AB7153CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.40","matchCriteriaId":"CE3CDB80-4346-4CE6-A4D8-8D842494920E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"303D317F-EDB3-4388-A18E-F129DCB5CB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.0_1:*:*:*:*:*:*:*","matchCriteriaId":"3EFCA1BC-8955-4A99-96EB-9AAA81CF69E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.0_rc:*:*:*:*:*:*:*","matchCriteriaId":"CA166822-CE86-4C59-AA10-6759162414A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.1:*:*:*:*:*:*:*","matchCriteriaId":"3832414B-F057-4D74-A5B6-310B030597DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.01:*:*:*:*:*:*:*","matchCriteriaId":"E14B24DC-A0C5-4DEB-B924-AF75CEA249D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.2:*:*:*:*:*:*:*","matchCriteriaId":"994775CD-ED61-4482-81E8-D4BDF23F379D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.21:*:*:*:*:*:*:*","matchCriteriaId":"4B8FEF97-08A4-46C1-A9CA-9C3C5E57082E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.22:*:*:*:*:*:*:*","matchCriteriaId":"CD7CE897-CBCA-465D-A521-C66415AF9A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.23:*:*:*:*:*:*:*","matchCriteriaId":"F7422663-20B1-4C28-98D6-89472D1CD5B5"}]}]}],"references":[{"url":"http://secunia.com/advisories/34180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nucleuscms.org/index.php/item/index.php/item/3051","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34040","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0637","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49142","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nucleuscms.org/index.php/item/index.php/item/3051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0930","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Horde IMP anterior a v4.2.2 y v4.3.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar (1) smime.php, (2) pgp.php, y (3) message.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"20B7AE19-8434-4059-B08A-8ED78625CB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"D64133DD-358E-49AA-BCAF-974223615D7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"09467434-4D19-4BB8-A03C-B534C0A577CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"62422098-04CA-430A-92C4-5EF9C45BF66E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.5","matchCriteriaId":"E4B0D289-30ED-4392-9744-E1B7E251DC63"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1","matchCriteriaId":"5BC61AC5-A795-466E-9CC1-D512D937241B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_imp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"10B4B13B-87E1-4F61-B877-DADEB3EE34B8"}]}]}],"references":[{"url":"http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2009/000484.html","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2009/000485.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34703","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33492","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2009/000484.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2009/000485.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0931","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T21:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la secuencia de comandos de búsqueda de nube de etiquetas (horde/services/portal/cloud_search.php) en Horde anterior a v3.2.4 y v3.3.3, y Horde Groupware anterior a v1.1.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.1","matchCriteriaId":"8243290A-4C75-4390-A226-524F87EC9C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.2","matchCriteriaId":"24B5DA5A-695F-4062-8E95-A620FE43187F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D745ADA6-7790-4680-896D-1644820459C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C47E69BF-8F4C-4C15-BC03-97EE3C61EBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.3:*:*:*:*:*:*:*","matchCriteriaId":"370B7205-5813-4B57-8E90-7DDC2B6A6EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"92954132-BCFF-42A6-9DC3-07895FED14B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"E87F9E81-5AED-4016-AC05-00F6BB763C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"1446CC3A-E773-4D05-9A0D-934E385A3BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"7BB7D857-925F-453E-9AB9-11487A439B52"}]}]}],"references":[{"url":"http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2009/000482.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000483.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000486.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33695","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33491","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2009/000482.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000486.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/33491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-0932","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en framework/Image/Image.php en Horde anterior a v3.2.4 y v3.3.3 y Horde Groupware anterior a v1.1.5 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el nombre Horde_Image driver."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"26AD25F6-4269-47BD-A1ED-C75547EB5ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D745ADA6-7790-4680-896D-1644820459C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C47E69BF-8F4C-4C15-BC03-97EE3C61EBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.3:*:*:*:*:*:*:*","matchCriteriaId":"370B7205-5813-4B57-8E90-7DDC2B6A6EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4BE3470C-2BDA-4246-94C4-EA0C79913ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8C4B8F4A-EC73-4F5D-9468-D36811C9EC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EADFA64E-597A-4946-B175-624B983EC48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A253650-5875-4F7B-A9F0-1F70E44F21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2E3210B2-4111-44C6-A2B4-4C4930BE09B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:horde_groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F0DCD443-05B4-40E9-ABD9-E27389B0575E"}]}]}],"references":[{"url":"http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000482.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000483.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000486.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33695","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34609","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/8077","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33491","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000482.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.horde.org/archives/announce/2009/000486.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/8077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0933","sourceIdentifier":"cve@mitre.org","published":"2009-03-17T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Dotclear anterior a v2.1.5 permite a atacantes inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.4","matchCriteriaId":"B673A5B1-A3EE-4CCE-ACD7-08D3FA68E2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"94896556-5D43-4C54-A49C-301511B69EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49EEF727-A23D-47AE-BE4E-238290246BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"860F6A6A-717B-4B94-B4D0-26C2BAC1E66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9ED66191-F39E-4D78-9B3D-1A20FD2914B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2AFFAE76-D4DE-4F4C-B165-736EA01B30EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E58D04A0-17E9-46E5-9C18-502746371365"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AAAF4270-05C5-487F-8A30-A96C4E943621"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D5F73A6E-6D4F-45D8-98AC-73ABFF55CDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CC1A3960-F1D6-40FF-8E42-B330B347A686"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"A3EE6B1E-3D40-4D61-B5D5-4D9B8A6FAD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"CF6BAC55-C04C-4174-965C-A590BDA7748F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_5.2:*:*:*:*:*:*","matchCriteriaId":"AB76F976-A236-484A-98BA-269BAF196D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_5.4:*:*:*:*:*:*","matchCriteriaId":"30451C6F-53FA-4FDD-9ED0-849C099093C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"F8E4C138-8CD6-4F8B-B45E-FC62FF225358"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:beta_7:*:*:*:*:*:*","matchCriteriaId":"18C6F78A-10EE-4B7E-83F0-51386519100A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9AD6711-6C1D-4DB3-8BB5-4A6CE7234D5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"975A3BEA-86E6-4366-91B7-94B7AE709927"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E64EFF2-3A11-4B05-9AC8-C86C05183B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C1C53E97-A2A5-4819-B547-8B1784BE27A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A49E0B5D-E551-4D94-995D-B9C015617FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"938B7159-8C33-4810-B788-77A7405CE841"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotclear:dotclear:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C2CAD49D-1A73-4C6F-9509-1F58EC172CC8"}]}]}],"references":[{"url":"http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34181","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34036","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0636","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49138","source":"cve@mitre.org"},{"url":"http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0934","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ejabberd anterior a v2.0.4 permite a atacantes inyectar secuencias de comandos web o HTML de su elección a través de vectores desconocidos relacionados con enlaces y MUC logs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"E5004977-E0B9-4CC0-B53D-67691C03E779"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:0.9:*:*:*:*:*:*:*","matchCriteriaId":"666E7908-0690-4DFE-8141-07F2D15E5404"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"DDFFF6D6-C749-4D07-85A5-E6D343FC4243"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F6EE1B8F-0FDB-4E00-A15A-C107DCDB93BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"18E7EDE8-298E-444E-A624-0202705C516C"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C81B5565-94A8-4F03-A846-3C3F842B909D"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DC959279-43D7-4CB0-A845-25D4DE92E06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"46528149-3D63-4E68-9209-DAFA55B3A855"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6D5B249-4D6D-4B15-9348-2C7C0A0B82E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F2425925-5ACB-4BE4-9C98-F028647AAF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB7AF867-ED0A-428A-A53D-E20B733EBAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"4409695C-2A6C-4D27-9DB9-D0BD653487E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F78A11B2-2110-4372-8579-DDA24691C18A"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:2.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"906C248B-FFD7-4EF0-A181-BACE05B324AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"36B7CC0A-CD37-4E31-9A99-41E59EB46E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:2.0.1_2:*:*:*:*:*:*:*","matchCriteriaId":"F401CBE2-80FC-4D64-A21B-5966330E9C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:process-one:ejabberd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0CBC37-5A98-4067-93FF-6B637F9C7EDC"}]}]}],"references":[{"url":"http://osvdb.org/52714","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34354","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34781","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1774","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/16/1","source":"cve@mitre.org"},{"url":"http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49289","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00675.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00735.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/16/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00675.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00735.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0935","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:08.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance."},{"lang":"es","value":"La función inotify_read en el kernel de Linux versiones 2.6.27 hasta 2.6.27.13, 2.6.28 hasta 2.6.28.2 y 2.6.29-rc3, permite a los usuarios locales causar una denegación de servicio (OOPS) por medio de una lectura con una dirección no válida en una instancia inotify, lo que causa que la exclusión mutua de la lista de eventos del dispositivo se desbloquee dos veces e impida la sincronización apropiada de una estructura de datos para la instancia inotify."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.","lastModified":"2009-04-15T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndIncluding":"2.6.27.13","matchCriteriaId":"959E86DD-3F82-4BFC-9190-B63FC5B79507"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndIncluding":"2.6.28.2","matchCriteriaId":"3421BB9A-F9FC-4BDD-B72B-1DF16DA121A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc3:*:*:*:*:*:*","matchCriteriaId":"92058AE0-2E52-4304-B4C6-871AB1CE42DF"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=123337123501681&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/06/2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/18/5","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/19/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33624","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488935","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49331","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=linux-kernel&m=123337123501681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/06/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/18/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/19/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/33624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0936","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:08.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via \"corrupt votes.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Tor anterior a v0.2.0.34 permite a atacantes provocar una denegación de servicio (bucle infinito) a través de \"votos corruptos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0.33","matchCriteriaId":"2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*","matchCriteriaId":"C538F301-D9A9-48CC-AB77-AD073935D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*","matchCriteriaId":"95E17189-F12A-4914-AEDC-52345D097A9A"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33713","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0937","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:08.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Tor anterior a v0.2.0.34 permite replicaciones de directorio que provocan una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0.33","matchCriteriaId":"2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*","matchCriteriaId":"C538F301-D9A9-48CC-AB77-AD073935D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*","matchCriteriaId":"95E17189-F12A-4914-AEDC-52345D097A9A"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33713","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0938","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:08.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via \"malformed input.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Tor anterior a v0.2.0.34 permite replicaciones de directorios que provocan una denegación de servicio (caída de nodo de salida) a través \"entrada malformada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0.33","matchCriteriaId":"2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*","matchCriteriaId":"C538F301-D9A9-48CC-AB77-AD073935D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*","matchCriteriaId":"95E17189-F12A-4914-AEDC-52345D097A9A"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33713","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49323","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0939","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T02:00:08.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to \"Spec conformance,\" as demonstrated using 192.168.0."},{"lang":"es","value":"Tor anterior a v0.2.0.34 trata direcciones IPv4 incompletas como validas, lo que tiene un impacto desconocido y vectores de ataque relacionados con \"Spec conformance,\" como se ha demostrado utilizando 192.168.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0.33","matchCriteriaId":"2C390EF7-1A08-4BAD-8DA5-8402AA2AB7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.30:alpha:*:*:*:*:*:*","matchCriteriaId":"C538F301-D9A9-48CC-AB77-AD073935D1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.32:alpha:*:*:*:*:*:*","matchCriteriaId":"95E17189-F12A-4914-AEDC-52345D097A9A"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33713","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Feb-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200904-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0940","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T21:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders, permiten a atacantes remotos (1) imprimir documentos mediante vectores desconocidos, (2) modificar la configuración de red mediante una petición NetIPChange a hp/device/config_result_YesNo.html/config o (3) cambiar la contraseña mediante los parámetros Password y ConfirmPassword a hp/device/set_config_password.html/config."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:8100c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"4F186CB2-E079-4F2B-943F-EB8F9638C717"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9100c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"F9F8D755-0208-4081-99A2-00B0779AB285"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9200c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"A7F76374-8890-47D1-AD4D-B8951B08A351"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9250c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"EED8DFB7-447D-44BE-98EF-587F6A82D521"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet:*:*:*:*:*:*:*:*","matchCriteriaId":"2938ACA1-A6FA-47CD-AB05-7CF9095C7850"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_1500:*:*:*:*:*:*:*:*","matchCriteriaId":"91EBCE22-6268-4083-A045-0D05F7110384"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*","matchCriteriaId":"C2E92501-3E8C-4E61-9B65-87A7344747E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*","matchCriteriaId":"16651605-4616-44F8-8401-8DD057932BBA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*","matchCriteriaId":"8ADB9132-CEF5-47A0-AC21-BE6B7F89B166"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*","matchCriteriaId":"CEB99C79-1DB4-4545-8457-515B1F9F484B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*","matchCriteriaId":"95B58AD8-F848-4286-8AB4-A8EA0372D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2605dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"EAB5C6FD-9280-451B-ACF3-2C3AFC50BA88"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4370mfp:20081211_46.211.2:*:*:*:*:*:*:*","matchCriteriaId":"3F7CF651-DB8F-4748-8E87-1C0173657400"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*","matchCriteriaId":"A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600dn:*:*:*:*:*:*:*:*","matchCriteriaId":"9E71E717-E71F-495E-9D86-794BF8A094D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"A8881544-2C06-41F2-9569-C3DCEB8F175B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600hdn:*:*:*:*:*:*:*:*","matchCriteriaId":"13BD8FA5-17EC-4850-9970-9F472E4BE809"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*","matchCriteriaId":"6F03F783-0CFE-488A-A392-2866D56E5E6C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*","matchCriteriaId":"627B437F-2941-4689-A3D0-E0037D9CB053"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"12F0604C-781B-4E69-A88E-C25492CB163C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_5500:*:*:*:*:*:*:*:*","matchCriteriaId":"FBE52C54-2BF9-473A-8749-FEA31A2DEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*","matchCriteriaId":"1218222B-AC9B-430D-8948-D72F72293B38"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_8500:*:*:*:*:*:*:*:*","matchCriteriaId":"F5F3C900-81E1-467C-8D70-E70CADF484CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_8550:*:*:*:*:*:*:*:*","matchCriteriaId":"DD4DED7B-DDA5-4302-923F-95258C52CF52"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*","matchCriteriaId":"7C77E2D0-34F7-4940-AC33-47E405006890"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"A5A3DFCD-E5C1-4997-95D4-9DF50FE1EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500mfp:20070719_05.011.2:*:*:*:*:*:*:*","matchCriteriaId":"99FD2715-0ECB-42B9-8967-D8C80DEAC5C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_mfp_cm8050:-:-:edgeline:*:*:*:*:*","matchCriteriaId":"8E40ABF2-0485-47DB-92FE-FC8F630F15B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*","matchCriteriaId":"E8D50F7A-2290-49A1-AB7B-F1FCD5035599"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:digital_senders:*:*:*:*:*:*:*:*","matchCriteriaId":"7F654546-9F2E-4B1B-AAF6-54D799317C92"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:edgeline_printers:*:*:*:*:*:*:*:*","matchCriteriaId":"4A17E5A0-9342-49BD-BBD7-E8A90FC42EC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1000:*:*:*:*:*:*:*:*","matchCriteriaId":"322C9A6C-C3A6-4058-861C-882B68443744"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1005:*:*:*:*:*:*:*:*","matchCriteriaId":"DA365AAC-C67A-43FE-A419-E3B5B0BAEA0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1010:*:*:*:*:*:*:*:*","matchCriteriaId":"7AB27B7D-AAC8-4FEC-98C4-FC613E9CA36F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1012:*:*:*:*:*:*:*:*","matchCriteriaId":"581AB2AA-1731-4142-822A-5F40DFA2C34F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1015:*:*:*:*:*:*:*:*","matchCriteriaId":"07DCE831-3508-4059-9579-91DA526902B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1018:*:*:*:*:*:*:*:*","matchCriteriaId":"4F27B109-9BCA-4D72-A21C-B6D70F1AD7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1018s:*:*:*:*:*:*:*:*","matchCriteriaId":"CAF6A641-E205-4290-97E2-34A3B3E9672C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1020:*:*:*:*:*:*:*:*","matchCriteriaId":"24FD0F5B-F181-46AC-BE66-642E4CD60FAD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1020_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"07B0A4A9-60C2-4CEC-B531-50C086173DB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1022:*:*:*:*:*:*:*:*","matchCriteriaId":"B05D9690-22E6-4E89-A5A7-42B28BD043DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1022n:*:*:*:*:*:*:*:*","matchCriteriaId":"3CCA67FA-E8B9-4D9E-B0F3-58B0A1B183B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1022nw:*:*:*:*:*:*:*:*","matchCriteriaId":"0C09FB44-FFEE-4AB0-A2E0-C470F20733EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1100:*:*:*:*:*:*:*:*","matchCriteriaId":"A25D1906-E45D-465B-B481-8C9B88FF37ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1150:*:*:*:*:*:*:*:*","matchCriteriaId":"E25BDF8F-F1B9-4A3E-A220-E72B306CF21C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1160:*:*:*:*:*:*:*:*","matchCriteriaId":"E04FA759-550C-4C08-BBF3-1B8F512DEBB8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1200:*:*:*:*:*:*:*:*","matchCriteriaId":"49D562B5-09B6-4D0E-9816-4DC9C193FCBF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1300:*:*:*:*:*:*:*:*","matchCriteriaId":"3BB12831-81B7-4B6E-9D80-259A474F38E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1320:*:*:*:*:*:*:*:*","matchCriteriaId":"0645FD3F-1F42-4355-8430-D2B3F8740A2D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2:*:*:*:*:*:*:*:*","matchCriteriaId":"52D3D3A6-7594-4306-A7C1-997328468C39"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"CB3C0E33-D115-4BCB-818E-92E5655AB8EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2100:*:*:*:*:*:*:*:*","matchCriteriaId":"224C6B7D-DEAF-4B0D-93BA-BC5BF9517009"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2200:*:*:*:*:*:*:*:*","matchCriteriaId":"C69367D0-1B9A-4615-9F4A-2F76596BA8EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2200dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"A842F761-7AC1-4FE6-9D8E-D4E812971371"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2300:*:*:*:*:*:*:*:*","matchCriteriaId":"CB3BC003-8116-475C-8816-DCD46E0184DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2300dn:*:*:*:*:*:*:*:*","matchCriteriaId":"9E8A93AE-C3A9-4714-A6FB-C855C9F439C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2400:*:*:*:*:*:*:*:*","matchCriteriaId":"A89A6F96-4A4A-4877-8E95-700CBAE663CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2410:20070410_08.112.3:*:*:*:*:*:*:*","matchCriteriaId":"1B34898C-6B9F-4DEF-9D9E-B7BA52F95A85"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2420:20070410_08.112.3:*:*:*:*:*:*:*","matchCriteriaId":"3029F65D-88C0-4BC4-91D6-594474F022B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*","matchCriteriaId":"F804968D-0241-4C20-BAAC-684BA46B67F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2430:20070410_08.112.3:*:*:*:*:*:*:*","matchCriteriaId":"02BB1543-E25E-4F77-8F53-ADC38FE3B81D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*","matchCriteriaId":"71F75D41-DFB3-4FD2-A883-BBA8964D84D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2500c:*:*:*:*:*:*:*:*","matchCriteriaId":"EB83B8ED-0A0A-45C2-9A4F-BF85F97C114E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2600c:*:*:*:*:*:*:*:*","matchCriteriaId":"B0F0E663-70A4-405C-B37E-60E24DDC6383"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2600n:*:*:*:*:*:*:*:*","matchCriteriaId":"A10474D2-F8D9-40B8-8E19-4741BDA55A6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*","matchCriteriaId":"4042B85B-8BA8-49C8-8C72-ED4B12D10C0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*","matchCriteriaId":"17CE1760-B9BD-4002-BA5C-0AFC4A2FBFE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4:*:*:*:*:*:*:*:*","matchCriteriaId":"A7EBF17F-331F-42D1-AC33-C5F60FF1C865"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4\\/4m:*:*:*:*:*:*:*:*","matchCriteriaId":"96CB43B7-7CA2-4B8A-98D9-377F615F61E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4_plus\\/m_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"F8DBBC2B-C054-46AD-9ABD-249216ED513F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4000:*:*:*:*:*:*:*:*","matchCriteriaId":"659DFCA6-CF7D-4982-913B-6BF1B3DC5F5E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4000n:*:*:*:*:*:*:*:*","matchCriteriaId":"02138F3E-4F3C-4607-BBB1-98D09B3C7F41"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4050:*:*:*:*:*:*:*:*","matchCriteriaId":"5FE6DC20-0757-4CF8-AB85-265C5264630F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*","matchCriteriaId":"549105CC-BA47-4C39-8B8A-9CAC39266B30"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"FE20791A-6CDA-46D0-8149-82F7D21662BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"75525D7F-A881-4199-B44D-8E2D1B4809FA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*","matchCriteriaId":"4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"1ED01DD0-7485-48E8-96E1-598DA0981525"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200ln:*:*:*:*:*:*:*:*","matchCriteriaId":"E1BCFB30-7322-4ABE-9529-CC10DA54F752"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*","matchCriteriaId":"23DD9E6F-1F64-4643-B8E5-B3CAB5F961B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4240n:*:*:*:*:*:*:*:*","matchCriteriaId":"42459D1C-B860-4622-BA74-C6AF5446D644"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*","matchCriteriaId":"F315232A-2DBB-4BE6-AB1E-0CCB327E19E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4250:20080319_08.015.0:*:*:*:*:*:*:*","matchCriteriaId":"D180CB2E-F05A-4B9C-837B-605A00086A82"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*","matchCriteriaId":"3B4B141B-3358-469D-8331-88C5924763EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"9ADF801E-6D02-4CDF-AA6F-9F272D341E1C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4345mfp:20081211_09.131.1:*:*:*:*:*:*:*","matchCriteriaId":"27CB3F95-8653-4CDB-BD81-53CA6D126512"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*","matchCriteriaId":"850BE715-BC0F-4873-9A72-6AED6259FF22"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350:20080319_08.015.0:*:*:*:*:*:*:*","matchCriteriaId":"2B03FD53-A1CA-4BD4-A87A-520D9782CEE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"ECA83D8E-3D70-4021-B9FD-F97BC8C92039"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4650dn:*:*:*:*:*:*:*:*","matchCriteriaId":"2681DAAE-9DD4-4F25-B947-C676F868B854"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4l\\/ml:*:*:*:*:*:*:*:*","matchCriteriaId":"7085C4E6-A34F-49E6-99EE-547861A25098"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4m_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"1B0F639A-C9F6-41E4-83BD-8097659ABEDE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4p\\/mp:*:*:*:*:*:*:*:*","matchCriteriaId":"5B67CAF7-6CDC-4074-BE55-2D898F1CF3EE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4si:*:*:*:*:*:*:*:*","matchCriteriaId":"31DD8C9E-1738-456D-A22C-CB0C760E3712"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4v\\/mv:*:*:*:*:*:*:*:*","matchCriteriaId":"05A010D1-588F-4EC5-9BE2-ADA22D399D5B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5:*:*:*:*:*:*:*:*","matchCriteriaId":"93BAAE8B-718E-4C6D-BAED-3F435D1C66A6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5\\/m\\/n:*:*:*:*:*:*:*:*","matchCriteriaId":"26BD8388-3357-435C-8430-9D6CFE52D65A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_500_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"3F132B58-AF99-4E26-BEFB-C970AC9FCBB6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"3D220CD8-FB19-424D-B223-101098BE9088"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5000:r.25.15:*:*:*:*:*:*:*","matchCriteriaId":"157C92C4-2217-4A53-B70D-16D2171E7ACE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5000:r.25.47:*:*:*:*:*:*:*","matchCriteriaId":"776C077B-32E5-45AD-866C-9C7FBEDF9631"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*","matchCriteriaId":"BC0F236F-7EC3-440B-8FF4-362729EF0807"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5100:v.29.12:*:*:*:*:*:*:*","matchCriteriaId":"D29E506F-B2B1-466C-9DAA-C8DFB643F036"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5100dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"99A1E2E0-6832-4DE2-B793-BC8B2F3BF431"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*","matchCriteriaId":"977F2612-D1DE-4EAD-99ED-CF6FFD1D5B2D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5l:*:*:*:*:*:*:*:*","matchCriteriaId":"212422DE-F76F-4418-89E5-B3826047A852"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5m:*:*:*:*:*:*:*:*","matchCriteriaId":"78907BCD-E0C8-44A0-85B7-0B5148AA8AD4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5p\\/mp:*:*:*:*:*:*:*:*","matchCriteriaId":"76199C42-EF30-4F0B-9D7E-5C546001888E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5si:*:*:*:*:*:*:*:*","matchCriteriaId":"8E8D6D65-3CA2-41E8-A8F8-B7C7BC24F962"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8000:*:*:*:*:*:*:*:*","matchCriteriaId":"1072358B-3C6C-45EB-83B0-22833A96741A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8100:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC8DA70-8669-4522-BEF7-C4595E142467"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*","matchCriteriaId":"F94DFDFD-0CEA-4EC5-8E7D-0548DCAE5563"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8150dn:*:*:*:*:*:*:*:*","matchCriteriaId":"24852945-2734-468C-8DC7-5C9EBF2301FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"54C64CAE-6CC4-4B92-9364-F982CDF47F99"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"5F0E00FE-F3DB-45C2-81AE-D7189559BD42"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"81556F50-ED68-4774-A208-E16286BC2F0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*","matchCriteriaId":"B2D74F55-65F6-4328-B553-2756A75B777E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"2BA65ABF-3241-48B5-B89A-031B09B8C129"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"FDEA0FE9-F42F-4ECC-92E4-E404545CB0CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040mfp:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"A03C331E-BCF9-4226-ACB5-4CA4C85847F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEDCF-C604-49B3-B748-03BE3193792E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"D06ADE7A-F615-475F-A6FB-977D51C8BD3C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"9FDA57B8-2AD5-45EF-9824-E60EBFF71D86"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2623A6-2DA1-4877-A5D8-3C9001FDC648"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050mfp:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"3919FF01-7E93-4F35-826D-542DFD6E85B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*","matchCriteriaId":"7381DEDB-71A9-4882-B9DA-AFDC31D907C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*","matchCriteriaId":"F48F4812-7441-428B-B44A-E85AC64330D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*","matchCriteriaId":"9755F699-E5F7-424C-B84A-119E19A1E413"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9500mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"A4B8D80A-5E64-4ADD-98F7-2CD913EF151B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_ii:*:*:*:*:*:*:*:*","matchCriteriaId":"502E0F4F-8103-431C-BDCD-07FAA44DB035"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iid:*:*:*:*:*:*:*:*","matchCriteriaId":"8F17C5B7-FFE3-4FE6-A4AD-3EABCF9FCE97"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iii:*:*:*:*:*:*:*:*","matchCriteriaId":"1F0EC84F-57BB-44D0-A05D-67AE5CD6652B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iiid:*:*:*:*:*:*:*:*","matchCriteriaId":"B5DA3E91-824D-4167-9990-8CED8E247DBC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iiip:*:*:*:*:*:*:*:*","matchCriteriaId":"B46B3AA1-0D4D-418B-A36B-2B38F642F798"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iiisi:*:*:*:*:*:*:*:*","matchCriteriaId":"AB5EE77A-D014-4366-8D5B-251D09CC2DFB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iip:*:*:*:*:*:*:*:*","matchCriteriaId":"040C7DA9-9FF6-4772-82D4-2ED2BE01D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iip_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"BD91F67B-C52F-4AED-8E02-B955F495BD8A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m1522n_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CF8D0A1B-4F76-4403-B18E-464C33169CC1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CE95CC32-07DA-473D-BDAC-347B137E582A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CEC3DE1F-AA79-4FE8-B634-368BDF14C0B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m4345_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"34E2ECB0-2335-4ABD-8326-CF935E8C4C78"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"55C69873-A989-4B66-8D28-67A260EC7A4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m5035_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CEEA9582-8E01-41D3-A4D0-FA7BB2C98CC3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1000:*:*:*:*:*:*:*:*","matchCriteriaId":"46628FAF-9819-4A6F-93BD-39E0650930E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1005:*:*:*:*:*:*:*:*","matchCriteriaId":"D8C243A3-FA2C-414D-9530-CF50E65A6D78"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1006:*:*:*:*:*:*:*:*","matchCriteriaId":"169C56AB-5565-4A4A-B298-B1FAC40D23CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1007:*:*:*:*:*:*:*:*","matchCriteriaId":"931B6ACB-81B3-4406-834B-DFA85FC8871A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1008:*:*:*:*:*:*:*:*","matchCriteriaId":"641D5E03-1FCD-4404-A37B-586262DCF863"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1009:*:*:*:*:*:*:*:*","matchCriteriaId":"8F8AA6A9-855C-436C-AE9D-217598516DE9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1500:*:*:*:*:*:*:*:*","matchCriteriaId":"69DEDFF4-B9B1-4B31-BE32-1E44C19A5D80"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1505:*:*:*:*:*:*:*:*","matchCriteriaId":"B8C4D0A5-B51C-4122-8BB7-705474A1E709"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1505n:*:*:*:*:*:*:*:*","matchCriteriaId":"049D53B4-920A-4BFC-A007-1DF3648C37A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2000:*:*:*:*:*:*:*:*","matchCriteriaId":"3AE3B2A8-ABE6-464B-B9E2-E1122EDEA3B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2010:*:*:*:*:*:*:*:*","matchCriteriaId":"2F52C858-CFB9-4CE0-9C3C-3672F03B1850"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2015:*:*:*:*:*:*:*:*","matchCriteriaId":"218E5994-4BF9-4B5F-ABAE-0AB85495B8C3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2030:*:*:*:*:*:*:*:*","matchCriteriaId":"B2FCB0F1-6395-4B9E-99C6-9C919C62EB9B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2050:*:*:*:*:*:*:*:*","matchCriteriaId":"9BF93B01-EEEE-4ACF-B7C0-55F17996543E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p3000:*:*:*:*:*:*:*:*","matchCriteriaId":"CF6E5576-6764-4534-A405-67B01F4018FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*","matchCriteriaId":"1BED71C7-C0A7-4934-9930-1EC7C5A96584"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4010:*:*:*:*:*:*:*:*","matchCriteriaId":"612ACC73-A274-46B1-AEC6-9EBAF1E38D73"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*","matchCriteriaId":"222D062D-1F47-4E21-9173-A5AFEEF66482"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*","matchCriteriaId":"6CFBC095-00B6-48D7-AC0A-C172DD3A550B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4500:*:*:*:*:*:*:*:*","matchCriteriaId":"D468AA7E-BA93-4523-B6AA-B542E714A17F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4510:*:*:*:*:*:*:*:*","matchCriteriaId":"D87FDEEF-E459-4C0E-AA61-6DE9E2D73234"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/52847","source":"cve@mitre.org"},{"url":"http://osvdb.org/52848","source":"cve@mitre.org"},{"url":"http://osvdb.org/52849","source":"cve@mitre.org"},{"url":"http://www.louhinetworks.fi/advisory/HP_20090317.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34143","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0754","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/52847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.louhinetworks.fi/advisory/HP_20090317.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0941","sourceIdentifier":"cve@mitre.org","published":"2009-03-18T21:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"El HP Embedded Web Server (EWS) en HP LaserJet Printers, Edgeline Printers, y Digital Senders no tiene contraseña de administración por defecto, lo que facilita a atacantes remotos el obtener acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:8100c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"4F186CB2-E079-4F2B-943F-EB8F9638C717"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9100c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"F9F8D755-0208-4081-99A2-00B0779AB285"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9200c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"A7F76374-8890-47D1-AD4D-B8951B08A351"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9250c_digital_sender:-:*:*:*:*:*:*:*","matchCriteriaId":"EED8DFB7-447D-44BE-98EF-587F6A82D521"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet:*:*:*:*:*:*:*:*","matchCriteriaId":"2938ACA1-A6FA-47CD-AB05-7CF9095C7850"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_1500:*:*:*:*:*:*:*:*","matchCriteriaId":"91EBCE22-6268-4083-A045-0D05F7110384"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500:*:*:*:*:*:*:*:*","matchCriteriaId":"C2E92501-3E8C-4E61-9B65-87A7344747E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500l:*:*:*:*:*:*:*:*","matchCriteriaId":"16651605-4616-44F8-8401-8DD057932BBA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500lse:*:*:*:*:*:*:*:*","matchCriteriaId":"8ADB9132-CEF5-47A0-AC21-BE6B7F89B166"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500n:*:*:*:*:*:*:*:*","matchCriteriaId":"CEB99C79-1DB4-4545-8457-515B1F9F484B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2500tn:*:*:*:*:*:*:*:*","matchCriteriaId":"95B58AD8-F848-4286-8AB4-A8EA0372D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_2605dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"EAB5C6FD-9280-451B-ACF3-2C3AFC50BA88"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4370mfp:20081211_46.211.2:*:*:*:*:*:*:*","matchCriteriaId":"3F7CF651-DB8F-4748-8E87-1C0173657400"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*","matchCriteriaId":"A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600dn:*:*:*:*:*:*:*:*","matchCriteriaId":"9E71E717-E71F-495E-9D86-794BF8A094D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"A8881544-2C06-41F2-9569-C3DCEB8F175B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600hdn:*:*:*:*:*:*:*:*","matchCriteriaId":"13BD8FA5-17EC-4850-9970-9F472E4BE809"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4650:*:*:*:*:*:*:*:*","matchCriteriaId":"6F03F783-0CFE-488A-A392-2866D56E5E6C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4700:*:*:*:*:*:*:*:*","matchCriteriaId":"627B437F-2941-4689-A3D0-E0037D9CB053"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"12F0604C-781B-4E69-A88E-C25492CB163C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_5500:*:*:*:*:*:*:*:*","matchCriteriaId":"FBE52C54-2BF9-473A-8749-FEA31A2DEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_5550:*:*:*:*:*:*:*:*","matchCriteriaId":"1218222B-AC9B-430D-8948-D72F72293B38"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_8500:*:*:*:*:*:*:*:*","matchCriteriaId":"F5F3C900-81E1-467C-8D70-E70CADF484CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_8550:*:*:*:*:*:*:*:*","matchCriteriaId":"DD4DED7B-DDA5-4302-923F-95258C52CF52"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500:*:*:*:*:*:*:*:*","matchCriteriaId":"7C77E2D0-34F7-4940-AC33-47E405006890"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"A5A3DFCD-E5C1-4997-95D4-9DF50FE1EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_9500mfp:20070719_05.011.2:*:*:*:*:*:*:*","matchCriteriaId":"99FD2715-0ECB-42B9-8967-D8C80DEAC5C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_mfp_cm8050:-:-:edgeline:*:*:*:*:*","matchCriteriaId":"8E40ABF2-0485-47DB-92FE-FC8F630F15B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_mfp_cm8060:-:-:edgeline:*:*:*:*:*","matchCriteriaId":"E8D50F7A-2290-49A1-AB7B-F1FCD5035599"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:digital_senders:*:*:*:*:*:*:*:*","matchCriteriaId":"7F654546-9F2E-4B1B-AAF6-54D799317C92"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:edgeline_printers:*:*:*:*:*:*:*:*","matchCriteriaId":"4A17E5A0-9342-49BD-BBD7-E8A90FC42EC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1000:*:*:*:*:*:*:*:*","matchCriteriaId":"322C9A6C-C3A6-4058-861C-882B68443744"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1005:*:*:*:*:*:*:*:*","matchCriteriaId":"DA365AAC-C67A-43FE-A419-E3B5B0BAEA0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1010:*:*:*:*:*:*:*:*","matchCriteriaId":"7AB27B7D-AAC8-4FEC-98C4-FC613E9CA36F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1012:*:*:*:*:*:*:*:*","matchCriteriaId":"581AB2AA-1731-4142-822A-5F40DFA2C34F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1015:*:*:*:*:*:*:*:*","matchCriteriaId":"07DCE831-3508-4059-9579-91DA526902B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1018:*:*:*:*:*:*:*:*","matchCriteriaId":"4F27B109-9BCA-4D72-A21C-B6D70F1AD7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1018s:*:*:*:*:*:*:*:*","matchCriteriaId":"CAF6A641-E205-4290-97E2-34A3B3E9672C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1020:*:*:*:*:*:*:*:*","matchCriteriaId":"24FD0F5B-F181-46AC-BE66-642E4CD60FAD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1020_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"07B0A4A9-60C2-4CEC-B531-50C086173DB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1022:*:*:*:*:*:*:*:*","matchCriteriaId":"B05D9690-22E6-4E89-A5A7-42B28BD043DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1022n:*:*:*:*:*:*:*:*","matchCriteriaId":"3CCA67FA-E8B9-4D9E-B0F3-58B0A1B183B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1022nw:*:*:*:*:*:*:*:*","matchCriteriaId":"0C09FB44-FFEE-4AB0-A2E0-C470F20733EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1100:*:*:*:*:*:*:*:*","matchCriteriaId":"A25D1906-E45D-465B-B481-8C9B88FF37ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1150:*:*:*:*:*:*:*:*","matchCriteriaId":"E25BDF8F-F1B9-4A3E-A220-E72B306CF21C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1160:*:*:*:*:*:*:*:*","matchCriteriaId":"E04FA759-550C-4C08-BBF3-1B8F512DEBB8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1200:*:*:*:*:*:*:*:*","matchCriteriaId":"49D562B5-09B6-4D0E-9816-4DC9C193FCBF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1300:*:*:*:*:*:*:*:*","matchCriteriaId":"3BB12831-81B7-4B6E-9D80-259A474F38E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_1320:*:*:*:*:*:*:*:*","matchCriteriaId":"0645FD3F-1F42-4355-8430-D2B3F8740A2D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2:*:*:*:*:*:*:*:*","matchCriteriaId":"52D3D3A6-7594-4306-A7C1-997328468C39"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"CB3C0E33-D115-4BCB-818E-92E5655AB8EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2100:*:*:*:*:*:*:*:*","matchCriteriaId":"224C6B7D-DEAF-4B0D-93BA-BC5BF9517009"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2200:*:*:*:*:*:*:*:*","matchCriteriaId":"C69367D0-1B9A-4615-9F4A-2F76596BA8EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2200dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"A842F761-7AC1-4FE6-9D8E-D4E812971371"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2300:*:*:*:*:*:*:*:*","matchCriteriaId":"CB3BC003-8116-475C-8816-DCD46E0184DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2300dn:*:*:*:*:*:*:*:*","matchCriteriaId":"9E8A93AE-C3A9-4714-A6FB-C855C9F439C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2400:*:*:*:*:*:*:*:*","matchCriteriaId":"A89A6F96-4A4A-4877-8E95-700CBAE663CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2410:20070410_08.112.3:*:*:*:*:*:*:*","matchCriteriaId":"1B34898C-6B9F-4DEF-9D9E-B7BA52F95A85"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2420:20070410_08.112.3:*:*:*:*:*:*:*","matchCriteriaId":"3029F65D-88C0-4BC4-91D6-594474F022B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2430:*:*:*:*:*:*:*:*","matchCriteriaId":"F804968D-0241-4C20-BAAC-684BA46B67F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2430:20070410_08.112.3:*:*:*:*:*:*:*","matchCriteriaId":"02BB1543-E25E-4F77-8F53-ADC38FE3B81D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*","matchCriteriaId":"71F75D41-DFB3-4FD2-A883-BBA8964D84D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2500c:*:*:*:*:*:*:*:*","matchCriteriaId":"EB83B8ED-0A0A-45C2-9A4F-BF85F97C114E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2600c:*:*:*:*:*:*:*:*","matchCriteriaId":"B0F0E663-70A4-405C-B37E-60E24DDC6383"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2600n:*:*:*:*:*:*:*:*","matchCriteriaId":"A10474D2-F8D9-40B8-8E19-4741BDA55A6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*","matchCriteriaId":"4042B85B-8BA8-49C8-8C72-ED4B12D10C0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*","matchCriteriaId":"17CE1760-B9BD-4002-BA5C-0AFC4A2FBFE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4:*:*:*:*:*:*:*:*","matchCriteriaId":"A7EBF17F-331F-42D1-AC33-C5F60FF1C865"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4\\/4m:*:*:*:*:*:*:*:*","matchCriteriaId":"96CB43B7-7CA2-4B8A-98D9-377F615F61E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4_plus\\/m_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"F8DBBC2B-C054-46AD-9ABD-249216ED513F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4000:*:*:*:*:*:*:*:*","matchCriteriaId":"659DFCA6-CF7D-4982-913B-6BF1B3DC5F5E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4000n:*:*:*:*:*:*:*:*","matchCriteriaId":"02138F3E-4F3C-4607-BBB1-98D09B3C7F41"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4050:*:*:*:*:*:*:*:*","matchCriteriaId":"5FE6DC20-0757-4CF8-AB85-265C5264630F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100:*:*:*:*:*:*:*:*","matchCriteriaId":"549105CC-BA47-4C39-8B8A-9CAC39266B30"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"FE20791A-6CDA-46D0-8149-82F7D21662BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"75525D7F-A881-4199-B44D-8E2D1B4809FA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*","matchCriteriaId":"4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"1ED01DD0-7485-48E8-96E1-598DA0981525"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200ln:*:*:*:*:*:*:*:*","matchCriteriaId":"E1BCFB30-7322-4ABE-9529-CC10DA54F752"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*","matchCriteriaId":"23DD9E6F-1F64-4643-B8E5-B3CAB5F961B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4240n:*:*:*:*:*:*:*:*","matchCriteriaId":"42459D1C-B860-4622-BA74-C6AF5446D644"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4250:*:*:*:*:*:*:*:*","matchCriteriaId":"F315232A-2DBB-4BE6-AB1E-0CCB327E19E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4250:20080319_08.015.0:*:*:*:*:*:*:*","matchCriteriaId":"D180CB2E-F05A-4B9C-837B-605A00086A82"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*","matchCriteriaId":"3B4B141B-3358-469D-8331-88C5924763EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"9ADF801E-6D02-4CDF-AA6F-9F272D341E1C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4345mfp:20081211_09.131.1:*:*:*:*:*:*:*","matchCriteriaId":"27CB3F95-8653-4CDB-BD81-53CA6D126512"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350:*:*:*:*:*:*:*:*","matchCriteriaId":"850BE715-BC0F-4873-9A72-6AED6259FF22"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350:20080319_08.015.0:*:*:*:*:*:*:*","matchCriteriaId":"2B03FD53-A1CA-4BD4-A87A-520D9782CEE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"ECA83D8E-3D70-4021-B9FD-F97BC8C92039"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4650dn:*:*:*:*:*:*:*:*","matchCriteriaId":"2681DAAE-9DD4-4F25-B947-C676F868B854"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4l\\/ml:*:*:*:*:*:*:*:*","matchCriteriaId":"7085C4E6-A34F-49E6-99EE-547861A25098"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4m_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"1B0F639A-C9F6-41E4-83BD-8097659ABEDE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4p\\/mp:*:*:*:*:*:*:*:*","matchCriteriaId":"5B67CAF7-6CDC-4074-BE55-2D898F1CF3EE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4si:*:*:*:*:*:*:*:*","matchCriteriaId":"31DD8C9E-1738-456D-A22C-CB0C760E3712"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4v\\/mv:*:*:*:*:*:*:*:*","matchCriteriaId":"05A010D1-588F-4EC5-9BE2-ADA22D399D5B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5:*:*:*:*:*:*:*:*","matchCriteriaId":"93BAAE8B-718E-4C6D-BAED-3F435D1C66A6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5\\/m\\/n:*:*:*:*:*:*:*:*","matchCriteriaId":"26BD8388-3357-435C-8430-9D6CFE52D65A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_500_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"3F132B58-AF99-4E26-BEFB-C970AC9FCBB6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"3D220CD8-FB19-424D-B223-101098BE9088"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5000:r.25.15:*:*:*:*:*:*:*","matchCriteriaId":"157C92C4-2217-4A53-B70D-16D2171E7ACE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5000:r.25.47:*:*:*:*:*:*:*","matchCriteriaId":"776C077B-32E5-45AD-866C-9C7FBEDF9631"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5100:*:*:*:*:*:*:*:*","matchCriteriaId":"BC0F236F-7EC3-440B-8FF4-362729EF0807"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5100:v.29.12:*:*:*:*:*:*:*","matchCriteriaId":"D29E506F-B2B1-466C-9DAA-C8DFB643F036"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5100dtn:*:*:*:*:*:*:*:*","matchCriteriaId":"99A1E2E0-6832-4DE2-B793-BC8B2F3BF431"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5200:*:*:*:*:*:*:*:*","matchCriteriaId":"977F2612-D1DE-4EAD-99ED-CF6FFD1D5B2D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5l:*:*:*:*:*:*:*:*","matchCriteriaId":"212422DE-F76F-4418-89E5-B3826047A852"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5m:*:*:*:*:*:*:*:*","matchCriteriaId":"78907BCD-E0C8-44A0-85B7-0B5148AA8AD4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5p\\/mp:*:*:*:*:*:*:*:*","matchCriteriaId":"76199C42-EF30-4F0B-9D7E-5C546001888E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5si:*:*:*:*:*:*:*:*","matchCriteriaId":"8E8D6D65-3CA2-41E8-A8F8-B7C7BC24F962"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8000:*:*:*:*:*:*:*:*","matchCriteriaId":"1072358B-3C6C-45EB-83B0-22833A96741A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8100:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC8DA70-8669-4522-BEF7-C4595E142467"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8150:*:*:*:*:*:*:*:*","matchCriteriaId":"F94DFDFD-0CEA-4EC5-8E7D-0548DCAE5563"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_8150dn:*:*:*:*:*:*:*:*","matchCriteriaId":"24852945-2734-468C-8DC7-5C9EBF2301FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"54C64CAE-6CC4-4B92-9364-F982CDF47F99"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"5F0E00FE-F3DB-45C2-81AE-D7189559BD42"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"81556F50-ED68-4774-A208-E16286BC2F0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040:*:*:*:*:*:*:*:*","matchCriteriaId":"B2D74F55-65F6-4328-B553-2756A75B777E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"2BA65ABF-3241-48B5-B89A-031B09B8C129"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"FDEA0FE9-F42F-4ECC-92E4-E404545CB0CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040mfp:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"A03C331E-BCF9-4226-ACB5-4CA4C85847F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEDCF-C604-49B3-B748-03BE3193792E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"D06ADE7A-F615-475F-A6FB-977D51C8BD3C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"9FDA57B8-2AD5-45EF-9824-E60EBFF71D86"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2623A6-2DA1-4877-A5D8-3C9001FDC648"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050mfp:20080204_08.110.0:*:*:*:*:*:*:*","matchCriteriaId":"3919FF01-7E93-4F35-826D-542DFD6E85B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*","matchCriteriaId":"7381DEDB-71A9-4882-B9DA-AFDC31D907C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*","matchCriteriaId":"F48F4812-7441-428B-B44A-E85AC64330D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*","matchCriteriaId":"9755F699-E5F7-424C-B84A-119E19A1E413"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9500mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"A4B8D80A-5E64-4ADD-98F7-2CD913EF151B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_ii:*:*:*:*:*:*:*:*","matchCriteriaId":"502E0F4F-8103-431C-BDCD-07FAA44DB035"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iid:*:*:*:*:*:*:*:*","matchCriteriaId":"8F17C5B7-FFE3-4FE6-A4AD-3EABCF9FCE97"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iii:*:*:*:*:*:*:*:*","matchCriteriaId":"1F0EC84F-57BB-44D0-A05D-67AE5CD6652B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iiid:*:*:*:*:*:*:*:*","matchCriteriaId":"B5DA3E91-824D-4167-9990-8CED8E247DBC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iiip:*:*:*:*:*:*:*:*","matchCriteriaId":"B46B3AA1-0D4D-418B-A36B-2B38F642F798"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iiisi:*:*:*:*:*:*:*:*","matchCriteriaId":"AB5EE77A-D014-4366-8D5B-251D09CC2DFB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iip:*:*:*:*:*:*:*:*","matchCriteriaId":"040C7DA9-9FF6-4772-82D4-2ED2BE01D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_iip_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"BD91F67B-C52F-4AED-8E02-B955F495BD8A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m1522n_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CF8D0A1B-4F76-4403-B18E-464C33169CC1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CE95CC32-07DA-473D-BDAC-347B137E582A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CEC3DE1F-AA79-4FE8-B634-368BDF14C0B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m4345_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"34E2ECB0-2335-4ABD-8326-CF935E8C4C78"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"55C69873-A989-4B66-8D28-67A260EC7A4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m5035_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CEEA9582-8E01-41D3-A4D0-FA7BB2C98CC3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1000:*:*:*:*:*:*:*:*","matchCriteriaId":"46628FAF-9819-4A6F-93BD-39E0650930E4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1005:*:*:*:*:*:*:*:*","matchCriteriaId":"D8C243A3-FA2C-414D-9530-CF50E65A6D78"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1006:*:*:*:*:*:*:*:*","matchCriteriaId":"169C56AB-5565-4A4A-B298-B1FAC40D23CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1007:*:*:*:*:*:*:*:*","matchCriteriaId":"931B6ACB-81B3-4406-834B-DFA85FC8871A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1008:*:*:*:*:*:*:*:*","matchCriteriaId":"641D5E03-1FCD-4404-A37B-586262DCF863"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1009:*:*:*:*:*:*:*:*","matchCriteriaId":"8F8AA6A9-855C-436C-AE9D-217598516DE9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1500:*:*:*:*:*:*:*:*","matchCriteriaId":"69DEDFF4-B9B1-4B31-BE32-1E44C19A5D80"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1505:*:*:*:*:*:*:*:*","matchCriteriaId":"B8C4D0A5-B51C-4122-8BB7-705474A1E709"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p1505n:*:*:*:*:*:*:*:*","matchCriteriaId":"049D53B4-920A-4BFC-A007-1DF3648C37A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2000:*:*:*:*:*:*:*:*","matchCriteriaId":"3AE3B2A8-ABE6-464B-B9E2-E1122EDEA3B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2010:*:*:*:*:*:*:*:*","matchCriteriaId":"2F52C858-CFB9-4CE0-9C3C-3672F03B1850"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2015:*:*:*:*:*:*:*:*","matchCriteriaId":"218E5994-4BF9-4B5F-ABAE-0AB85495B8C3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2030:*:*:*:*:*:*:*:*","matchCriteriaId":"B2FCB0F1-6395-4B9E-99C6-9C919C62EB9B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p2050:*:*:*:*:*:*:*:*","matchCriteriaId":"9BF93B01-EEEE-4ACF-B7C0-55F17996543E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p3000:*:*:*:*:*:*:*:*","matchCriteriaId":"CF6E5576-6764-4534-A405-67B01F4018FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p3005:*:*:*:*:*:*:*:*","matchCriteriaId":"1BED71C7-C0A7-4934-9930-1EC7C5A96584"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4010:*:*:*:*:*:*:*:*","matchCriteriaId":"612ACC73-A274-46B1-AEC6-9EBAF1E38D73"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*","matchCriteriaId":"222D062D-1F47-4E21-9173-A5AFEEF66482"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4015:*:*:*:*:*:*:*:*","matchCriteriaId":"6CFBC095-00B6-48D7-AC0A-C172DD3A550B"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4500:*:*:*:*:*:*:*:*","matchCriteriaId":"D468AA7E-BA93-4523-B6AA-B542E714A17F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4510:*:*:*:*:*:*:*:*","matchCriteriaId":"D87FDEEF-E459-4C0E-AA61-6DE9E2D73234"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.louhinetworks.fi/advisory/HP_20090317.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501884/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0754","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.louhinetworks.fi/advisory/HP_20090317.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501884/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0942","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files."},{"lang":"es","value":"Help Viewer de Apple Mac OS X v10.4.11 y v10.5 anterior a v10.5.7 no comprueba que ciertas Hojas de Estilo en Cascada (CSS) se encuentran en un libro de ayuda registrado, lo cual permite a atacantes remotos ejecutar código arbitrario a través de una URL help: lo cual desencadena invocación de archivos AppleScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022216","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50485","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0943","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files."},{"lang":"es","value":"Help Viewer de Apple Mac OS X v10.4.11 y v10.5 anteriores a v10.5.7 no verifica que las rutas HTML esten localizadas en un libro de ayuda registrado, lo cual permite a atacantes remotos ejecutar código arbitrario a través de una URL help: la que desencadena la invocación de archivos AppleScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022216","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50486","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0944","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption."},{"lang":"es","value":"Microsoft Office Spotlight Importer en Apple Mac OS X v10.4.11 y v10.5 anterior a  v10.5.7 no valida adecuadamente los archivos de Microsoft Office, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo que provoca la corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34939","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022215","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0945","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption."},{"lang":"es","value":"WebKit, utilizado en Safari anterior a v3.2.3 y v4 Public Beta, en Apple Mac OS X v10.4.11 y v10.5 y anteriores a v10.5.7 y Windows permite a atacantes remotos ejecutar código arbitrario a través de un objeto elaborado SVGList que provoca una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=9019","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35056","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35095","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35805","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3550","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1130.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503594/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34924","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022207","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1298","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1321","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50477","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/823-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=9019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1130.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503594/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/823-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0946","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c."},{"lang":"es","value":"Múltiples desbordamientos de entero en FreeType v2.3.9 y anteriores permiten a atacantes remotos ejecutar código de su elección mediante vectores relacionados con valores grandes en ciertas entradas en (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, y (3) cff/cffload.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.9","matchCriteriaId":"7039ABA3-F36E-4337-8F61-470B2FA1C9EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*","matchCriteriaId":"38C3AEB0-59E2-400A-8943-60C0A223B680"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"2.2.1","matchCriteriaId":"614C28E3-3645-4B20-95E5-42E7F123ADDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndIncluding":"10.6.4","matchCriteriaId":"C6DA1D55-B689-47CF-A55F-3C16DA4EFFFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndIncluding":"10.6.4","matchCriteriaId":"924AFEE6-E331-4E10-B1B8-1FF1FF801120"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34723","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34913","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34967","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35198","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35200","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35204","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35210","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1784","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:243","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1061.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34550","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-767-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1058","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491384","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-767-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-0949","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags."},{"lang":"es","value":"La función ippReadIO en cups/ipp.c en cupsd en CUPS antes de la versión 1.3.10 no inicia de manera apropiada la memoria para paquetes de solicitud IPP, lo que permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y caída del demonio) mediante una solicitud de programación (scheduler) con dos etiquetas IPP_TAG_UNSUPPORTED consecutivas."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.10","matchCriteriaId":"DB4D1818-1AE2-42FE-9856-5519EF7E0DAA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.4.11","matchCriteriaId":"2F5DEE66-117C-4844-8FD4-065D0820A808"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.8","matchCriteriaId":"7A880FA4-5DBF-4894-8DAC-C3CD147D1EB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.4.11","matchCriteriaId":"B9ACE85A-56A0-404C-AB58-A4F5CA73243C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.8","matchCriteriaId":"7F74FAC0-CC05-4797-9DE2-F7CE5CB8FC19"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:9.0:-:*:*:*:*:*:*","matchCriteriaId":"C3243C77-D635-480D-908C-328A479719E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35322","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35328","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35340","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35342","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022321","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1811","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1082.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1083.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504032/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35169","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-780-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500972","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50926","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.coresecurity.com/content/AppleCUPS-null-pointer-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504032/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-780-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-0950","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en iTunes de Apple anterior a versión 8.2, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de una URL itms: con un componente URL largo después de dos puntos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:-:mac:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"22597F4D-64AC-41CD-B43B-E0C8326A1311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*","versionEndIncluding":"8.1.1","matchCriteriaId":"96EE562D-15E7-4176-87AB-4002A7D207D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8659A87-1197-4C3B-A076-90FE3A453205"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*","matchCriteriaId":"49DC3DDC-8758-4D28-B2D5-161994C0E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"D88F7A4A-5A12-4D97-B05F-79487082A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:-:windows:*:*:*:*:*","matchCriteriaId":"EEEFF5EC-A455-4B11-9B22-1E79DE3EC45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4E15C097-98DE-4217-8814-95B54CE418F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC4179C0-CA2C-42D7-AD72-A19668662A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"0D0E3B53-AFAE-47F1-B7E3-395406819357"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"A1309426-7C10-4732-AAC7-5A9D0075DF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"5C697C09-C952-4A8F-A1AE-06F423AE7D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0A8AD07-07A4-4384-BE4D-8DB0F2E902A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"C9D9076A-A8FB-4E1A-8DC4-32D36D8A74C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"46297466-0506-4767-B49F-9914ACDB2A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AD3FBB2-EF88-42B5-8745-0DE5A3BB340C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"389B617F-29D2-4171-B4E0-9E65BBFAF369"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"5C912111-DB93-4019-B4D6-06D5873A8538"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:-:windows:*:*:*:*:*","matchCriteriaId":"699424D3-E59B-448C-8157-282701759851"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EA630BC5-DF1D-4602-A3AA-3319F3C5C9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"696D5986-155D-446C-A5FE-49C0DF1868AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"2B16F29E-E502-406E-9F6F-30664C1DBE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"60639271-2C1D-41BD-BEA4-8D1CDAB9E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1EB1098-87E1-45DC-BD44-2B374BAA758C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"3370179D-5E8A-4036-AA23-252674C6D807"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9DF402D2-E1DA-44D6-B1F9-FE35EF5798CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C9A3F04A-2FC3-48F2-B7C3-A159CB14D3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"49DD3B1C-1743-434B-B67F-A3C1B350059A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"2B71E645-F15B-43FE-931B-819F9ABA89C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FB9DFC99-4A94-45CF-A999-0D4A5F153D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"A4F5B268-399F-4CEC-9996-01BD55841141"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4E27E1D8-0303-4F91-B1B0-38C64A8F04F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"E90B5E1A-4D90-4252-8E34-649F33F1A088"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDD9C9F2-5F86-4606-95B3-A8688D9F4B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"28C2D685-7064-4F75-9100-21212557933A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F995CF65-E3DD-4C54-B3F5-417C6F75D930"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"44964DEC-DC35-4DCE-B28D-687348758163"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A8F1A117-8508-4274-99EA-D58F54EBBA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*","matchCriteriaId":"3E74DB1C-208B-42DE-9A5E-E9010140C5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5CBD58D1-C40D-4F6D-816F-A3842897EB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"78B0CA16-044C-44D5-B63F-548D2D0EFEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"262CAFD7-07C2-4C71-B2FC-165A88977881"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3C910CA4-5EA5-4507-BDE9-3E6C1434B666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"018AC033-ACF0-496D-96E1-A03CC4162CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"3395F4BA-C317-4F34-8E47-7AB8F9E7BDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"3CA9634F-A553-4B72-BBA2-AD7EAE4DFA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4490461A-84C7-42C3-A61B-4E6EF5980B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*","matchCriteriaId":"A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0415D4B8-0281-4ED5-B3A1-A97BDD0F8D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"9C210688-EA10-4FE2-A0C2-EA0BBDB1FDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E91D9ACF-2595-4A9A-B581-46F177300B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D365C93F-D06C-4FB0-8192-A4E84B6B2F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B1B4195D-1550-42D1-B562-0E438F7ACC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"9EBF09D5-D19E-4A84-8979-6FC44D2268B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2320B809-DE44-49AA-9C96-196BF39749C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.72:*:*:*:*:*:*:*","matchCriteriaId":"42486BD7-4371-46EE-B670-CED685872E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*","matchCriteriaId":"F2899F21-F01F-4C95-93AA-40C528EE56DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*","matchCriteriaId":"C4B6A66A-AC5F-48E0-ABCE-68828207B106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*","matchCriteriaId":"BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1206A192-A22C-4C55-A323-1D28D89BED21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"D65B8D79-6147-480A-AC94-627D58644D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"FD00E684-506B-4ED6-B48C-7D565CDA188C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*","matchCriteriaId":"071BFB1F-402B-4D8C-8155-671792AEDB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*","matchCriteriaId":"9136E8D6-310D-4D4E-A6AC-2F89218B8666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"52E156DE-12B4-4E7A-B8C4-C2FC0AC2B2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"FB8D37E9-1419-4DC3-B74D-7919F5F08AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"28519DE2-61CA-4943-9247-9F6BCB0367DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*","matchCriteriaId":"DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*","matchCriteriaId":"78A3FEC0-F135-41F9-A260-52157B283B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"93748DFC-6003-4BED-87F9-98713F6897EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.0:-:mac:*:*:*:*:*","matchCriteriaId":"1E88F87C-D724-4D06-B770-532E04B0AF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.0:-:windows:*:*:*:*:*","matchCriteriaId":"822F3D7E-810F-41B9-823F-D0B54BD1A3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"79591197-B671-46B2-9EB2-03A75A838CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:-:mac:*:*:*:*:*","matchCriteriaId":"7CC79D8C-A4FF-4584-BE34-D75D17DF1604"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"359C82A7-F6FB-4140-BD11-2B38B323933A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1.30:*:*:*:*:*:*:*","matchCriteriaId":"B00EDB73-7A1B-4847-903A-88729269E1AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*","matchCriteriaId":"A2DD1A9D-4AF4-452A-99C2-AE93611C985D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2A8873F1-4792-41A1-83B5-B85C9F4A7D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:*:*:*:*:*:*","matchCriteriaId":"07040FC1-6BFE-4E8F-A089-1166404BE33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*","matchCriteriaId":"8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"DB84AFE4-2694-475A-80D3-4D50C524EE18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8.0:-:mac:*:*:*:*:*","matchCriteriaId":"5CBA468F-4D1A-4A17-AC00-C7A377766A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8.0:-:windows:*:*:*:*:*","matchCriteriaId":"E9B16D5E-9EF4-4253-8E07-75C8E5E0E33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:*:*:*:*:*:*","matchCriteriaId":"D6573035-D208-4C4C-98A4-A7BA26C6AB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*","matchCriteriaId":"6514E3F5-3B5D-43BE-A26D-5167B519F3EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"BB20AA2E-5DF0-420C-A1FE-BB6EBA9649FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9.0:-:mac:*:*:*:*:*","matchCriteriaId":"F8E95857-BBE4-461B-885D-61B42D5F4D1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9.0:-:windows:*:*:*:*:*","matchCriteriaId":"CA2B6657-6E0F-4915-ACB9-219F76D8E38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"23C49853-8616-4769-90BC-B6D85B24A36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8343D87F-FA37-4225-B27D-BCCDD2433C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"C235A75A-0D08-42AD-836A-B550EF6257BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"10A63976-A435-4F6C-8B09-3001CA3EDC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B591AE1E-02DB-462A-B71F-48947525D232"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"2D6F98F8-0B9B-4CE5-B1B8-305C6740799A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"B97DF98E-792B-474E-8820-DF88C4B28A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FCD0C29E-FB9F-41DE-968F-46DD0EA55003"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*","matchCriteriaId":"8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"34B5892B-0377-4D81-9E0E-94B8D8CE72C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"5C86DB01-FCCD-47C8-9F6A-51E2A8BBBD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"97558F66-FA78-454B-B25C-DA2A39CA1A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2276BED4-82F0-4F62-AA6F-7E1667F28E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"D5AE8F59-2DF8-403B-BAB9-6465E618897C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"D1354FF7-467B-4F76-81BB-28901E01ACDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"B3F084A8-A293-4151-80F6-72C14582E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"45D47548-1C4D-4368-99D1-929905DD6B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"F37B39AB-2D5B-417E-BCEF-29C18D386C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"509D04DE-62F8-4D80-8CAB-95EA149CA8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"7426FDD0-F909-48AB-97C9-C4B25C05E6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"28AE8D2D-63CA-4091-9D59-CE919EB1FD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"9F5C3AD7-0C07-4972-B789-EE5D1B098107"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"372C1609-E534-41E0-87CD-C654BBF0B88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"9730866D-DFE9-448F-9D4E-6B21B3942737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"E15502B6-B54C-4817-B929-4512E890A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"03FCF3E7-0649-43B7-90C8-521E90079156"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"52A433A5-3EFF-405D-8285-97EC88857968"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"E20BC99A-13FC-446C-A27A-6C2D859C172B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"DD300F1B-EE8F-4606-B024-A14CA2EF4D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:-:mac:*:*:*:*:*","matchCriteriaId":"265E54E3-A5BC-42F2-B085-400BDD67BEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:-:windows:*:*:*:*:*","matchCriteriaId":"407AD48A-EA07-456F-B46B-24383E416A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"582D1FE8-C4E8-4385-B4EB-34320F019E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"18D9E538-FDF6-4112-9BF9-FFB48785439A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"C5B51908-CB81-492D-A437-D0508ABE05FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF61CE34-5130-4B1A-B7A2-B28C1A18B9BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"9997A5A2-104E-449E-ADF2-79F7C52C8D1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"0E826E91-CBBF-48D8-A4AD-7FB6830F3769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"2690D789-B1DC-40A5-8CC6-BBB499E9A550"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"5B892A2F-6052-41BE-B74F-7A81C7C1C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"066FC8C7-5A0B-4B2E-A51E-BFB42153FD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2223B8E2-346A-4C37-9F6C-879F9CA64C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"8879A44A-8EFC-4F3B-9187-371EEA971AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D2412E1-745B-4CFC-B075-1960A1410335"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"93E5227C-0621-43EE-A0F2-4B4545D71852"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8BB11F50-AD2A-438B-8028-29AC8AF9AB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"45F36172-97A7-4767-BC9E-8DC0444A8635"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DB69B123-7A09-4855-9846-E8ACACB3C6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"F9BD3983-B891-41D2-88A5-25B98F89B5F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"D0D889C7-320C-4674-834F-93C8B1701EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C0CC53F2-3827-4CA3-8726-C481B57B4AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"63EC82F8-9726-41B5-821E-2782D211F9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"23B4660B-D22B-4AC5-B6F2-87F83A2251A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1AFF8F-BBCA-4C93-A401-F8B478327BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"B0A35E88-2C3D-40B7-9268-F46AB909B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F61B45F-86CA-43F6-BA12-62AB0FBAD352"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BA3571F-9221-45CD-9798-CC72CA428D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC37C091-02B8-4B39-9253-52C1008ADEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"7E95C92E-ED71-4260-8648-DDBC098A513E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:-:windows:*:*:*:*:*","matchCriteriaId":"9F7D1E31-E28F-4EAD-AAE5-01AE478003B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*","matchCriteriaId":"129ABCA4-FBF6-41B8-BF6B-65467D56D297"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*","matchCriteriaId":"70A4EEE2-1DD2-4936-8939-4683523670B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"017E5A35-D778-46FD-A536-E57A13162675"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"31403D57-0D0F-46D8-8F89-A6CC5B6AAFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"91FB2868-DDF9-4D33-B78C-2A5180F9D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6122C685-4F02-476F-9A41-9C62D3D92651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"95B58CD1-03CB-4C35-A290-7157941D210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7A7BAD1-61DE-4FCE-A2ED-10B7D7837A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"AEEC5C0E-DDC5-4B28-8C04-DF69C152E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"17D37426-00A0-40E5-A27A-CF31D8CBAEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"A27B736F-317F-4538-AA3B-72D6EF0D2D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:-:mac:*:*:*:*:*","matchCriteriaId":"A44D692D-C489-4853-91E1-4AF638309A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:-:windows:*:*:*:*:*","matchCriteriaId":"2F688163-C543-4D58-BF71-DF50FFB0A112"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3E11CADC-AFCC-4A98-9271-C35BC9752B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*","matchCriteriaId":"481E736B-0A83-4422-B1D3-4BD0F9565A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*","matchCriteriaId":"11F1530E-9E63-4A39-9056-3A946A34B650"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*","matchCriteriaId":"3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3856A348-A0D6-4A0A-A8C9-D369CC863A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"17DE00AF-2551-4C20-9670-9B39C1E3C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"0C0CB6DE-46C4-4F9D-B8FD-47C01922D2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*","matchCriteriaId":"29E92D8D-68AB-4FC4-A37A-D6D48829B58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*","matchCriteriaId":"A7448F89-CC4A-4B18-887F-B47C0B57404C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"670656BF-2BE2-41ED-854A-466DC4068FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"9A404797-C734-4A70-BC32-6AED52DD96AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"040B2DB5-8F7D-4272-A0D1-2872B289B125"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FDE7F79F-54F5-4315-98BD-414CA2D1C51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:*:windows:*:*:*:*:*","matchCriteriaId":"4F173E7D-3EEC-4698-B0FE-5CCE6F990829"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:-:mac:*:*:*:*:*","matchCriteriaId":"EA53A8ED-07F9-4882-A253-9E2FDAB731F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"1A957B0E-9A86-40D4-8A39-01895C32838A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DBBF2E9F-0F37-4DDA-9704-B31D94745257"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:*:windows:*:*:*:*:*","matchCriteriaId":"B2943C2E-0DDD-498A-9439-E9394CB06081"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:-:mac:*:*:*:*:*","matchCriteriaId":"1AC8825C-76AD-4640-A5CE-7557DF74133D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:-:windows:*:*:*:*:*","matchCriteriaId":"0B7DBB76-5A86-42A3-8A0A-19D616357619"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*","matchCriteriaId":"BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*","matchCriteriaId":"D41DA19A-4403-40A8-A3DB-01A12FD4F267"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"1143A4DE-F75B-4396-9D01-CE14EF8FCB39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.0:-:mac:*:*:*:*:*","matchCriteriaId":"2EFA38A0-EA7C-40C7-B9B7-FE9D9EBB95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.0:-:windows:*:*:*:*:*","matchCriteriaId":"BC16747F-9F32-4186-9824-487163276EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BDF87AB4-B3F3-4774-8CE3-A2B46C3D8DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:-:mac:*:*:*:*:*","matchCriteriaId":"7990DED7-1E8B-4787-A057-BFEF14462157"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"F2043A3A-3578-42D8-AF54-7C8073CA0DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"816395FD-EA69-4994-8004-D699831649DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:-:mac:*:*:*:*:*","matchCriteriaId":"C0A6DD25-D4A7-42C4-90AB-005B682B45BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:-:windows:*:*:*:*:*","matchCriteriaId":"8524DF4C-9607-42A9-92DF-815F501C2133"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A02D076B-5900-401D-9B47-5136B9CEAA15"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"7D4903B1-40F3-4137-9F4C-07EC7D208674"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"E7A71D45-7715-4B1A-BC64-6F6287A324FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E479501-8832-41B0-A63C-360AE5A1B420"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"5DE81009-8CE1-456D-AFFA-CF2DB21D57D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"17517493-027E-4844-85DD-D8ABCDEB1BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"0D450451-C7BB-429D-8FFA-C3706303127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"5A653FFB-16BF-439D-A03A-1C9FB6B6AB16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.1:-:mac:*:*:*:*:*","matchCriteriaId":"3CA2DDCE-8EB9-4FB8-AD64-4F2C7A1D811B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.1:-:windows:*:*:*:*:*","matchCriteriaId":"891B1042-2F02-4D3A-9F2E-2567B2C0A63C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54833","source":"cve@mitre.org"},{"url":"http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35314","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://static.dataspill.org/releases/itunes/itms_overflow.rb","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3592","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504043/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35157","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022313","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1470","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50899","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17099","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8861","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8934","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://static.dataspill.org/releases/itunes/itms_overflow.rb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504043/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0951","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap)  en Apple QuickTime anterior a  v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de un archivo de compresión FLC manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35161","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50887","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16098","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0952","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image."},{"lang":"es","value":"Desbordamiento de búfer  en Apple QuickTime anterior a  v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PSD comprimida y manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54877","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35168","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15793","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0953","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en Apple QuickTime anterior a  v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PICT manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35164","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50890","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15939","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0954","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Apple QuickTime anterior a v7.6.2 en Windows permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de un fichero de película que contenga una tipos de regiones de clipping manipuladas (CRNG)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54875","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35167","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50892","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15344","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0955","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a \"sign extension issue.\""},{"lang":"es","value":"Apple QuickTime v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una descripción imagen  manipulada en un archivo de video Apple, relacionado con la \"la firma de extensión\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:-:mac:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"FBBE7D6D-5D75-48D9-AF41-E57D1E1B913D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"C4D2A738-C558-4FF4-AD8B-B24213FB3A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"6ED97A46-DE85-4019-AE15-CDFF0E1371F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54874","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35166","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50895","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16159","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0956","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero."},{"lang":"es","value":"Apple QuickTime anterior a v7.6.2 no inicializa adecuadamente la memoria antes de manejar ficheros de películas, lo que permite a atacantes remotos ejecutar código de forma arbitraria o producir una denegación de servicio (caída de aplicación) a través de una película que contenga unos datos de usuario de tamaño cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"1D23D725-2D79-4E21-9273-30D8753B8E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35162","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50896","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16188","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0957","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en Apple QuickTime v7.6.2, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen JP2 manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:vista:*:*:*:*:*","matchCriteriaId":"6F1AC0EA-202C-47F8-8104-C10A5BBEDF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35165","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50898","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16155","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0958","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials."},{"lang":"es","value":"Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 guarda una excepción para un nombre de servidor (hostname) cuando el usuario acepta un certificado de servidor Exchange no confiable, provocando que sea aceptado en usos futuros sin consultar al usuario y permitiendo que servidores Exchange remotos obtengan información sensible como las credenciales de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55236","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35447","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51208","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0959","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 video file that triggers an \"input validation issue.\""},{"lang":"es","value":"El codificador de vídeo MPEG-4 en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 permite a atacantes remotos provocar una denegación de servicio (reinicialización de dispositivo) mediante un fichero de vídeo MPEG-4 manipulado que dispara un \"evento de validación de entrada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55237","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35433","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51211","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0960","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL."},{"lang":"es","value":"El componente Mail en iPhone OS versiones 1.0 hasta 2.2.1 y iPhone OS para iPod touch versiones 1.1 hasta 2.2.1, de Apple, no proporciona una opción para deshabilitar la carga remota de imágenes en el correo electrónico HTML, lo que permite a los atacantes remotos determinar la dirección del dispositivo y cuando se lee un correo electrónico por medio de un correo electrónico HTML que contiene una URL de imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35434","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51209","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0961","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert."},{"lang":"es","value":"El componente Mail en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 descarta el dialogo de aprobación de llamada cuando aparece otra alerta, pudiendo permitir a atacantes remotos forzar al iPhone hacer una llamada sin la aprobación del usuario al causar que una aplicación dispare una alerta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55238","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51210","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0962","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 y anteriores, y CGI Professional 3.2.2 y anteriores, permite a atacantes remotos obtener privilegios de administración mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:mp_form_mail_cgi:*:-:ecommerce:*:*:*:*:*","versionEndIncluding":"1.3.0","matchCriteriaId":"FDEAB009-89A1-401A-80D0-6F9E14296FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:mp_form_mail_cgi:*:-:pro:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"D5B8074E-F12B-48C6-85A0-9920B4CE19D0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN84899898/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000014.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.futomi.com/library/info/2009/20090310.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49179","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49180","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN84899898/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.futomi.com/library/info/2009/20090310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0963","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) users_list.php, and (4) Administrator_list.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHPRunner v4.2 y posiblemente versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"SearchField\" a (1) UserView_list.php, (2) orders_list.php, (3) users_list.php y (4) Administrator_list.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"4E275FB1-EFD7-4AA2-88CB-A5F3D165DE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:phprunner:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0DBC4CF9-4F07-4439-81AB-BFE0D55A24B2"}]}]}],"references":[{"url":"http://osvdb.org/52798","source":"cve@mitre.org"},{"url":"http://osvdb.org/52799","source":"cve@mitre.org"},{"url":"http://osvdb.org/52800","source":"cve@mitre.org"},{"url":"http://osvdb.org/52801","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_63.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501894/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34146","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0750","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49278","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8226","source":"cve@mitre.org"},{"url":"http://osvdb.org/52798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugreport.ir/index_63.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501894/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0964","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges.  NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication."},{"lang":"es","value":"UserView_list.php en PHPRunner v4.2, y posiblemente versiones anteriores, guarda las contraseñas  en la base de datos en texto plano, lo que permite a atacantes obtener privilegios. NOTA: esto puede ser aprovechado mediante una vulnerabilidad de inyección SQL para obtener contraseñas de forma remota sin autenticación."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:phprunner:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"4E275FB1-EFD7-4AA2-88CB-A5F3D165DE03"}]}]}],"references":[{"url":"http://osvdb.org/52804","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.bugreport.ir/index_63.htm","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501894/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0750","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49279","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8226","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/52804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.bugreport.ir/index_63.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501894/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-0965","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attackers to execute arbitrary SQL commands via the node parameter in a browse action to gdl.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en functions/browse.php en Ganesha Digital Library (GDL) v4.0 y v4.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"node\" en una acción \"browse\" a gdl.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ismail_fahmi:ganesha_digital_library:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0E716886-9491-4546-A5BE-0422AD0BB549"},{"vulnerable":true,"criteria":"cpe:2.3:a:ismail_fahmi:ganesha_digital_library:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A41FDE0E-8792-4245-B631-3DE10A3693A6"}]}]}],"references":[{"url":"http://osvdb.org/52803","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34144","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0751","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49292","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8228","source":"cve@mitre.org"},{"url":"http://osvdb.org/52803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0966","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter.  NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en cross.php en YABSoft Mega File Hosting 1.2, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro url. NOTA: esto se puede aprovechar para incluir y ejecutar archivos locales arbitrarios mediante secuencias .. (punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:mega_file_hosting_script:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3A06E0F8-5235-4C71-9473-C75051AF5C00"}]}]}],"references":[{"url":"http://osvdb.org/52789","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34157","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49302","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8230","source":"cve@mitre.org"},{"url":"http://osvdb.org/52789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0967","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument."},{"lang":"es","value":"El servidor FTP en Serv-U versiones 7.0.0.1 hasta 7.4.0.1, permite a los usuarios remotos autenticados causar una denegación de servicio (bloqueo de servicio) por medio de un gran número de comandos SMNT sin un argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CD3CE83-3E37-464C-A511-CDF7E735E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"243CCCC8-9860-4440-9E80-12668270F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6D6DD1-D98B-46C1-921C-9B045C234377"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49260","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0968","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en fmoblog.php en el plugin fMoblog 2.1 para WordPress, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" a \"index.php\". NOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:fmoblog_plugin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E965035F-E376-4CDD-85B4-FE13DAF8A448"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://osvdb.org/52836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34341","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34147","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49296","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8229","source":"cve@mitre.org"},{"url":"http://osvdb.org/52836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0969","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the act[update] action."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en account/settings/account/ in phpFoX v1.6.21, permiten a atacantes remotos cambiar la dirección de correo electrónico del administrador mediante la acción act[update]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpfox:phpfox:1.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6455506A-DFD1-4918-98F7-578EF43B217C"}]}]}],"references":[{"url":"http://osvdb.org/52770","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0903-exploits/phpfox1621-xsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34333","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49288","source":"cve@mitre.org"},{"url":"http://osvdb.org/52770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0903-exploits/phpfox1621-xsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0970","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/class_image.php en PHP Pro Bid 6.05, cuando está habilitado register_globals, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fileExtension. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpprobid:php_pro_bid:6.05:*:*:*:*:*:*:*","matchCriteriaId":"8A344597-AB0A-4DB3-9618-685EEB9BF9C2"}]}]}],"references":[{"url":"http://secunia.com/advisories/34278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52750","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49290","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0971","sourceIdentifier":"cve@mitre.org","published":"2009-03-19T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en futomi's CGI Cafe Access Analyzer CGI Standard Version v3.8.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:*:*:std:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"F6175713-CFAA-415D-87D8-F54EB2FC91AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.1:*:std:*:*:*:*:*","matchCriteriaId":"20ABFF4F-26C3-461D-9F38-6B8DE57B2782"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.2:*:std:*:*:*:*:*","matchCriteriaId":"FA7F7688-CD90-46B7-9AB2-D52A57C5BA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.3:*:std:*:*:*:*:*","matchCriteriaId":"0490EFA6-AEAB-4F11-B679-B9DC1245EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:1.4:*:std:*:*:*:*:*","matchCriteriaId":"6974958E-E0C9-4AB5-AE67-B8A2483772A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.0:*:std:*:*:*:*:*","matchCriteriaId":"B2375FDF-B383-44BC-A2DF-F71416790EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.1:*:std:*:*:*:*:*","matchCriteriaId":"629AAD4C-BB24-4F13-8EAD-6081964470F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.2:*:std:*:*:*:*:*","matchCriteriaId":"A70FB601-1673-447E-8FF0-4B6EAB44C602"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.3:*:std:*:*:*:*:*","matchCriteriaId":"74956E00-B195-488B-8CDF-7497D238629A"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:2.4:*:std:*:*:*:*:*","matchCriteriaId":"5DAB8541-7F13-4D7F-9313-B2242BA8EEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.0:*:std:*:*:*:*:*","matchCriteriaId":"9108EF94-DDBB-4F07-B83C-9CAFD7821BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.1:*:std:*:*:*:*:*","matchCriteriaId":"F566B688-0734-4C28-9BF1-CAD72C910568"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.2:*:std:*:*:*:*:*","matchCriteriaId":"8AD08FFB-D51A-4A93-A0FC-14F2F8AE80B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.3:*:std:*:*:*:*:*","matchCriteriaId":"D4BF8DD9-C511-46B2-AA71-83E0D214591C"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.4:*:std:*:*:*:*:*","matchCriteriaId":"845055EE-C586-4238-A6D9-9A72F4F302B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.5:*:std:*:*:*:*:*","matchCriteriaId":"E522C8B4-EF1C-44BF-B7F3-27E36AE975A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.6:*:std:*:*:*:*:*","matchCriteriaId":"567641E9-8618-48B8-83CD-25AF4C7A27D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.7:*:std:*:*:*:*:*","matchCriteriaId":"04260F18-1816-4347-83E0-6CE9C736841F"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:access_analyzer_cgi:3.8:*:std:*:*:*:*:*","matchCriteriaId":"002162F2-C5AD-48AE-96D9-1A4D95E2F763"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN23558374/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000015.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52802","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34271","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.futomi.com/library/info/2009/20090316.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34123","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49264","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN23558374/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.futomi.com/library/info/2009/20090316.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0972","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database v11.1.0.6, v11.1.0.7, v10.2.0.3, v10.2.0.4, v10.1.0.5, v9.2.0.8, y v9.2.0.8DV permite a usuarios remotos autenticados afectar a la confidencialidad, integridadad y disponibilidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0973","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Cluster Ready Services en Oracle Database v10.1.0.5 permite a atacantes remotos afectar a la disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"}]}]}],"references":[{"url":"http://osvdb.org/53736","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0974","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0983 and CVE-2009-3407."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0983 y CVE-2009-3407."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"415018EB-2D62-49B5-BBBE-E8276400A1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C64FECA-B451-4648-AFDE-194F36527A59"}]}]}],"references":[{"url":"http://osvdb.org/53751","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0975","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0978."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 10.2.0.4 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0978."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://osvdb.org/53732","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0976","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Workspace Manager en Oracle Database v10.2.0.4 y v11.1.0.6 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad, relacionado con LTADM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://osvdb.org/53733","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0977","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is SQL injection in the GRANT_TYPE_ACCESS procedure in the DBMS_AQADM_SYS package."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5 y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridadad, en relación con DBMS_AQIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/502727/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502727/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0978","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0975."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database 10.2.0.4 y 11.1.0.6 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0975."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://osvdb.org/53734","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0979","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Resource Manager en Oracle Database v9.2.0.8 y v9.2.0.8DV permite a usuarios remotos autenticados afectar a la confidencialidad, integridadad y disponibilidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0980","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente SQLX Functions en Oracle Database v10.2.0.3 y v11.1.0.6 permite a usuarios remotos autenticados afectar a la disponibilidad y la integridad a través de vectores desconocidos, relacionado con AGGXQIMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6D836B0-A20F-49D8-9EE3-251BA2D28247"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0981","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Application Express en Oracle Database v11.1.0.7 permite a usuarios remotos autenticados afectar a la confidencialidad, en relación con APEX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"}]}]}],"references":[{"url":"http://osvdb.org/53738","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.red-database-security.com/advisory/apex_password_hashes.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/502724/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/8456","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/53738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/apex_password_hashes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502724/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/8456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0982","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authenticated users to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne v8.49.19 permite a usuarios autenticados remotamente afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.19:*:*:*:*:*:*:*","matchCriteriaId":"BEF1049F-38AF-49A7-98A1-10FCEE26760C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*","matchCriteriaId":"78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"}]}]}],"references":[{"url":"http://osvdb.org/53759","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0983","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente de CVE-2009-0974 y CVE-2009-3407."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"415018EB-2D62-49B5-BBBE-E8276400A1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C64FECA-B451-4648-AFDE-194F36527A59"}]}]}],"references":[{"url":"http://osvdb.org/53752","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0984","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Database Vault en Oracle Database v9.2.0.8DV, v10.2.0.4 y v11.1.0.6 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad, en relación con DBMS_SYS_SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0985","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Core RDBMS de Oracle Database v10.1.0.5, v10.2.0.4 y v11.1.0.6; permite a usuarios autenticados en remotos con el rol IMP_FULL_DATABASE comprometer la confidencialidad, integridad y disponibilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0986","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Workspace Manager en Oracle Database v10.2.0.4 y v11.1.0.6 permite a usuarios autenticados remotamente afectar a la confidencialidad, integridad, y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:M/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"MULTIPLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://osvdb.org/53735","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0987","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Upgrade en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://osvdb.org/55889","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35679","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51746","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0988","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Password Policy en Oracle Database v11.1.0.6 permite a usuarios remotos autenticados afectar a la confidencialidad mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D2E2826-26E2-4AFD-808B-04C9D8FA5FF4"}]}]}],"references":[{"url":"http://osvdb.org/53740","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0989","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0990."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1 y 10.1.3.3.3 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0990."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE83AB53-83DF-4688-B597-35B021797504"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3FBC5D4-270E-432A-8E04-CEBEF8163691"}]}]}],"references":[{"url":"http://osvdb.org/53742","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0990","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0989."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1 y 10.1.3.3.3 permite a usuarios remotos autenticados afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0989."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE83AB53-83DF-4688-B597-35B021797504"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3FBC5D4-270E-432A-8E04-CEBEF8163691"}]}]}],"references":[{"url":"http://osvdb.org/53743","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0991","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Listener en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.7 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1970."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35853080-470C-415B-B15B-D93A6DE856FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37FDC572-7FE0-41B2-99D6-139819781038"}]}]}],"references":[{"url":"http://osvdb.org/53737","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50026","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/53737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0992","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Advanced Queuing en Oracle Database v10.1.0.5, v10.2.0.4, y v11.1.0.7 que permite a los usuarios remotos autenticados afectar a la confidencialidad e integridad, en relación a DBMS_AQIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB9DC5FD-9892-47BD-8F35-A3D4556952A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7940F99-44F2-499B-ABEC-997B9BF7EE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqin.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/502723/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqin.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0993","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente OPMN en Oracle Application Server v10.1.2.3 permite a atacantes remotos afectar a la confidencialidad, la disponibilidad, y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"415018EB-2D62-49B5-BBBE-E8276400A1BB"}]}]}],"references":[{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/502683/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-017","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50030","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502683/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0994","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-1017."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3 y 10.1.3.4 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1017."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE83AB53-83DF-4688-B597-35B021797504"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3FBC5D4-270E-432A-8E04-CEBEF8163691"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"}]}]}],"references":[{"url":"http://osvdb.org/53744","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0995","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Framework en Oracle E-Business Suite v12.0.6 y 11i10CU2 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11i10cu2:*:*:*:*:*:*:*","matchCriteriaId":"C2EF5154-CDAC-49FB-B9A6-D52DC07CB5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_12:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"522B4A4F-5702-4B4E-9215-1DB761E17228"}]}]}],"references":[{"url":"http://osvdb.org/53754","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022056","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0996","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente BI Publisher en Oracle Application Server v10.1.3.2.1, v10.1.3.3.3, y v10.1.3.4 permite a usuarios remotos autenticados afectar a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE83AB53-83DF-4688-B597-35B021797504"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3FBC5D4-270E-432A-8E04-CEBEF8163691"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"}]}]}],"references":[{"url":"http://osvdb.org/53745","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0997","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMS_SYS_SQL."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Database Vault en Oracle Database v11.1.0.6 permite a los usuarios remotos autenticados afectar a la confidencialidad, en relación con DBMS_SYS_SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://osvdb.org/53739","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022052","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0998","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS - eBenefits en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.9.18 y v9.0.8 permite a usuarios autenticados remotamente afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9.18:*:*:*:*:*:*:*","matchCriteriaId":"F2332EAE-75EE-415D-84A6-FE0A19D2C71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DF6738B3-ED75-474D-847E-4A4AD1B56959"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*","matchCriteriaId":"78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"}]}]}],"references":[{"url":"http://osvdb.org/53758","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-0999","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Application Object Library en Oracle E-Business Suite v12.0.6 que permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"}]}]}],"references":[{"url":"http://osvdb.org/53753","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022056","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1000","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified \"FND Applications Users (not DB users),\" which has unknown impact and attack vectors."},{"lang":"es","value":"El componente Oracle Applications Framework de Oracle E-Business Suite v12.0.6 y 11i10CU2, utiliza contraseñas por defecto para para \"Usuarios de Aplicaciones FND (no usuarios BD)\" no especificados. Esto tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11i10cu2:*:*:*:*:*:*:*","matchCriteriaId":"C2EF5154-CDAC-49FB-B9A6-D52DC07CB5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"}]}]}],"references":[{"url":"http://osvdb.org/53755","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022056","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1001","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Portal en BEA Product Suite v8.1 SP6 que permite a los usuarios autenticados afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"}]}]}],"references":[{"url":"http://osvdb.org/53767","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1001.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50053","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/53767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1002","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, and 7.0 Gold through SP7 allows remote attackers to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6, y v7.0 SP7 permite a los atacantes afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1002.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50052","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1003","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect integrity via unknown vectors related to \"access to source code of web pages.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server de BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1 y v9.0; permite a atacantes remotos comprometer la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://osvdb.org/53762","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1003.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50054","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/53762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1004","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite v10.3 permite a atacantes remotos afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1005","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Data Service Integrator (AquaLogic Data Services Platform) en BEA Product Suite v10.3.0, v3.2, v3.0.1, and v3.0 que permite a los usuario locales afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.1},"baseSeverity":"MEDIUM","exploitabilityScore":2.7,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AC96C53F-BBC4-44F2-8CCC-5C1AD4E0AC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CDB55BA2-802E-4942-B641-8FC9B27FFAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:3.2:*:*:*:*:*:*:*","matchCriteriaId":"6F158161-3AAD-4F0A-9E8C-9D4669787317"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0405C95B-CADF-4806-8ED1-D20575F4179B"}]}]}],"references":[{"url":"http://osvdb.org/53760","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/53760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1006","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente JRockit de BEA Product Suite R27.6.2 y anteriores, con SDK/JRE v1.4.2, JRE/JDK v5 y JRE/JDK v6; permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:*:*:*:*:*:*:*:*","versionEndIncluding":"r27.6.2","matchCriteriaId":"9608B08F-67D3-45CA-9F1E-22BB6C02E6D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r26.0:*:*:*:*:*:*:*","matchCriteriaId":"E83DA137-A2FC-4E0F-B297-7D6FEBEF5FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r26.1:*:*:*:*:*:*:*","matchCriteriaId":"5EDC15FE-3C16-433D-9D99-2B82727BD97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r26.2:*:*:*:*:*:*:*","matchCriteriaId":"529D146C-4975-4A15-8818-59BE62202966"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r26.3:*:*:*:*:*:*:*","matchCriteriaId":"CB064B5E-06B4-48BD-9492-7BBBEDAA9978"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r26.4:*:*:*:*:*:*:*","matchCriteriaId":"4CC2BE68-DC4E-4B0B-85FE-27877657827D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.1:*:*:*:*:*:*:*","matchCriteriaId":"4873B9FF-0BA4-45AE-834A-C23AE80A2B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.2:*:*:*:*:*:*:*","matchCriteriaId":"39274558-2ECB-43CE-BAEF-DBD3AAC1BD05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.3:*:*:*:*:*:*:*","matchCriteriaId":"72DA7B82-EC3B-4458-B040-6F9D1AE23DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.3.1:*:*:*:*:*:*:*","matchCriteriaId":"267F16DF-D868-4DD9-8670-01AC3CBCE716"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.4:*:*:*:*:*:*:*","matchCriteriaId":"164B5E91-F21A-4C99-A685-7332A85AF25B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.5:*:*:*:*:*:*:*","matchCriteriaId":"2DD7274B-EA02-49DE-9FA5-40DA26498191"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.6:*:*:*:*:*:*:*","matchCriteriaId":"57BCE344-59AF-404B-9BC2-095562754184"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2D2BE6F9-6DAC-47B3-A9B6-10056E1E48F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jrockit:r27.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44280B48-5ECB-47B2-AE9E-0C6189B01A27"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:jdk:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D9D9B6F3-906D-4CCC-9655-99A1496B1475"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3241D774-D0F4-4529-A779-2F4F11813D18"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*","matchCriteriaId":"2C502FE9-F61F-4316-AA33-B09FA8BA54DF"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1007","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Data Mining de Oracle Database v10.2.0.4, permite a usuarios autenticados en remoto comprometer la confidencialidad, integridad y disponibilidad. Está relacionado con SYS.DMP_SYS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36750","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1008","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1010."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server 8.2.2 y 8.3.0 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad, relacionado con HTML, una vulnerabilidad diferente a CVE-2009-1010."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6C753E1B-D81B-4995-877E-58EDD6F49DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"092F8012-A1EE-46CE-B2B2-0604BF4ACBBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03943E63-9F03-45F9-9BE7-38C9B56C146A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F77E8E37-9AFB-4C1A-A1EC-ACCFB6AE0A16"}]}]}],"references":[{"url":"http://osvdb.org/53747","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1009","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability, related to HTML."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server v8.1.9 que permite a los usuarios locales afectar a la confidencialidad, integridad y disponibilidad en relación a HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"2D12B2DE-9584-4644-9A4E-6A627EF61D6D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6C753E1B-D81B-4995-877E-58EDD6F49DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"092F8012-A1EE-46CE-B2B2-0604BF4ACBBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"}]}]}],"references":[{"url":"http://osvdb.org/53748","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1010","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server 8.2.2 y 8.3.0 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad, relacionado con HTML, una vulnerabilidad diferente a CVE-2009-1008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6C753E1B-D81B-4995-877E-58EDD6F49DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"092F8012-A1EE-46CE-B2B2-0604BF4ACBBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3F1964FC-672F-4139-938F-A8EF9D86D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D303B0B9-CDAB-409B-AE44-512D4791C36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C90EF7A4-8181-42C3-BB95-395D0DD94C14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03943E63-9F03-45F9-9BE7-38C9B56C146A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F77E8E37-9AFB-4C1A-A1EC-ACCFB6AE0A16"}]}]}],"references":[{"url":"http://osvdb.org/53749","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1011","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Outside In Technology en Oracle Application Server v8.2.2 y v8.3.0 permite a los usuarios locales afectar a la confidencialidad, integridad y disponibilidad relacionadas con HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03943E63-9F03-45F9-9BE7-38C9B56C146A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F77E8E37-9AFB-4C1A-A1EC-ACCFB6AE0A16"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=798","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/53750","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21660640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1012","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server en BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6, y v7.0 SP7 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad, relacionada con IIS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://osvdb.org/53765","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/secunia_research/2009-22/","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1012.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64935","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/53765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-22/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technology/deploy/security/wls-security/1012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1013","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1014."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.49.19 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1014."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.19:*:*:*:*:*:*:*","matchCriteriaId":"BEF1049F-38AF-49A7-98A1-10FCEE26760C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*","matchCriteriaId":"78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"}]}]}],"references":[{"url":"http://osvdb.org/53756","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022057","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1014","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1013."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise PeopleTools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.49.19 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1013."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.19:*:*:*:*:*:*:*","matchCriteriaId":"BEF1049F-38AF-49A7-98A1-10FCEE26760C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*","matchCriteriaId":"78CBB588-FC76-4DC3-9D7C-ED5E9249E59C"}]}]}],"references":[{"url":"http://osvdb.org/53757","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022057","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1015","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Core RDBMS en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.05, y v10.2.04 permite a usuarios remotos autenticados afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://osvdb.org/55893","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35682","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51747","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1016","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS.  NOTE: the previous information was obtained from the April 2009 CPU.  Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente  WebLogic Server de BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6 y v7.0 SP7; permite a usuarios autenticados en remoto comprometer la confidencialidad, integridad y disponibilidad. Está relacionado con IIS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://secunia.com/secunia_research/2009-23/","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64934","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/secunia_research/2009-23/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1017","sourceIdentifier":"secalert_us@oracle.com","published":"2009-04-15T10:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente BI Publisher en Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3 y 10.1.3.4 permite a usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0994."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C735B5E0-41E7-42E5-BAB3-7D2BB1F71B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE83AB53-83DF-4688-B597-35B021797504"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3FBC5D4-270E-432A-8E04-CEBEF8163691"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D41A0A9E-6B5B-4FA9-996B-E589B96C24D7"}]}]}],"references":[{"url":"http://osvdb.org/53746","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"secalert_us@oracle.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/53746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-105A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1018","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC)."},{"lang":"es","value":"Vulnerabilidad no especficada en el componente Workspace Manager en Oracle Database v10.2.0.4 permite a usuarios autentificados remotamente afectar la confidencialidad e integridad, relacionado con SYS.LTRIC (WMSYS.LTRIC)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://osvdb.org/59112","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36765","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1019","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Network Authentication en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4, y v11.1.0.7 permite a atacantes remotos afectar a al confidencialidad, integridad y la disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://osvdb.org/55884","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35680","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51748","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1020","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Network Foundation en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4 permite a los usuario remotos autenticados afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://osvdb.org/55897","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35684","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51749","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1021","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Advanced Replication en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, y v10.2.0.3 permite a usuarios remotos autenticados afectar a la confidencialidad y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"}]}]}],"references":[{"url":"http://osvdb.org/55886","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35685","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51750","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1022","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función Preview/ Set Segment en Gretech GOMlab GOM Encoder v1.0.0.1 y anteriores permite a atacantes remotos asistidos por  usuarios locales provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o ejecutar código de su elección a través de un campo de texto largo en un fichero subtitulado (.str)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gomlab:gom_encoder:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.11","matchCriteriaId":"B0E06009-DAA3-490F-8BC2-8ACD30B20882"}]}]}],"references":[{"url":"http://osvdb.org/52677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34314","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=352","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501846/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34120","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49252","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8225","source":"cve@mitre.org"},{"url":"http://osvdb.org/52677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501846/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1023","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en phpComasy v0.9.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"entry_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcomasy:phpcomasy:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"4DD7EC34-569E-4F00-85E7-AA80658F7CEB"}]}]}],"references":[{"url":"http://osvdb.org/52817","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34131","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49268","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8220","source":"cve@mitre.org"},{"url":"http://osvdb.org/52817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1024","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Beerwin PHPLinkAdmin v1.0 permiten a atacantes remotos ejecutar comandos SQL a través del parámetro \"linkid\" de edlink.php, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beerwin:phplinkadmin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E3AAA469-30A9-4952-8A34-2DCD3371F1B3"}]}]}],"references":[{"url":"http://osvdb.org/52778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49265","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8216","source":"cve@mitre.org"},{"url":"http://osvdb.org/52778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1025","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en linkadmin.php en Beerwin PHPLinkAdmin v1.0 permite a atacantes remotos ejecutar código PHP de su elección a través de de un URL en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beerwin:phplinkadmin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E3AAA469-30A9-4952-8A34-2DCD3371F1B3"}]}]}],"references":[{"url":"http://osvdb.org/52779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49265","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8216","source":"cve@mitre.org"},{"url":"http://osvdb.org/52779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1026","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.php en Kim Websites v1.0 permiten a atacantes remotos ejecutar comandos SQl de su elección a través del los parámetros (1) username y (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kimwebsites:kim_websites:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2D054925-4EB8-4965-8061-58E0E247C118"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34116","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49259","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1027","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en OpenCart v1.1.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"order\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opencart:opencart:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4C5896D2-BD35-45A6-98E5-27D6EE6C4E61"}]}]}],"references":[{"url":"http://secunia.com/advisories/34313","source":"cve@mitre.org"},{"url":"http://www.ngenuity.org/wordpress/2009/03/10/ngenuity-2009-005-opencart-order-by-blind-sql-injection/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501843/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngenuity.org/wordpress/2009/03/10/ngenuity-2009-005-opencart-order-by-blind-sql-injection/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501843/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1028","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ediSys eZip Wizard v3.0 permite a atacantes remotos ejecutar código de su elección a través de un fichero manipulado .zip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edisys:ezip_wizard:3.0:*:*:*:*:*:*:*","matchCriteriaId":"ADFA917C-0F87-4A47-B735-EC3C502F5302"}]}]}],"references":[{"url":"http://secunia.com/advisories/39169","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/8217","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49148","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/8217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1029","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en POP Peeper v3.4.0.0 y versiones anteriores permite a servidores POP3 ejecutar código de su elección a través de una cabecera larga Date, relacionado con Imap.dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppeeper:pop_peeper:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.0.0","matchCriteriaId":"AF57FDF2-272B-4933-8047-1520ED872CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppeeper:pop_peeper:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"C887EFD5-3F0A-40AF-8D44-A51F614E8821"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppeeper:pop_peeper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4205EC09-892C-41FD-9045-2C9B3E034186"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppeeper:pop_peeper:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"162F6310-6687-4CAF-9111-0EF9A49EABB3"}]}]}],"references":[{"url":"http://secunia.com/advisories/34077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.krakowlabs.com/res/adv/KL0309ADV-poppeeper_date-bof.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501701/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49215","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8203","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.krakowlabs.com/res/adv/KL0309ADV-poppeeper_date-bof.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501701/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1030","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función choose_primary_blog en wp-includes/wpmu-functions.php en WordPress MU (WPMU) anterior a v2.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cabecera HTTP Host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"12FFA638-4919-4D9F-9F27-F421C9F25B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8D40A30E-7BA2-4121-90D0-55EB5ACDBC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BE8F048D-8B9D-4A1A-85CF-E0240B672864"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BCC5983D-8B24-408A-A2B0-3D9E8918734E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"7343BA05-4A07-49C3-B4D8-69F1DD308B49"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"49E5C0D7-E4FE-4A7C-9A20-D085DA63D434"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2912D04D-A004-4842-8EF0-B51DAAA5FD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A77286DE-D583-4359-8962-439583BE9BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D5ED66D3-5D12-42CE-8B98-6A2984DAC7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB3E9E3-1341-4F34-B6D1-5DF9F3B1D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B0EA81B6-0254-404D-8A2B-80C027383FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"738C3727-FCA0-4C7B-B6D6-2FC14987706A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8149192C-167C-4459-8C20-355DE0FF2921"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"EBC1B2B1-C8EE-47A4-BE44-CAC1A6CD432E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.5a:*:*:*:*:*:*:*","matchCriteriaId":"82E6D03D-0547-4CAB-A1CF-AEAC82634437"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EF5136FA-5060-4448-9874-3DF375467ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F534621-ED5F-46D0-A893-D0C6DAACB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F1930525-806B-49B1-A18E-189D41E5885C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"330826FD-833C-4BB4-8293-2812956496B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"555E7E8A-3632-416B-889E-68E98AABE8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAE70A19-919A-4478-B97B-EEF9FA29BECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"70524981-C0ED-4915-B0F3-A9F5D4865A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6E9450D1-B817-4A38-A46F-05FCB6692A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3AA78384-3133-442A-B135-192440FB1745"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.7:*:*:*:*:*:*:*","matchCriteriaId":"FBFF1FD7-49D4-4EF3-9A2F-49058AB00AE1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126996727024732&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126996727024732&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501667/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34075","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021838","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49184","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8196","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126996727024732&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126996727024732&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501667/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1031","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T00:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \\.. (backslash dot dot) in an MKD request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servidor FTP en Rhino Software Serv-U File Server v7.4.0.1 permite a atacantes remotos crear directorios de su elección a través de \\.. (barra invertida punto punto) en una petición MKD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CD3CE83-3E37-464C-A511-CDF7E735E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"243CCCC8-9860-4440-9E80-12668270F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6D6DD1-D98B-46C1-921C-9B045C234377"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"}]}]}],"references":[{"url":"http://osvdb.org/52773","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34125","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49258","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8211","source":"cve@mitre.org"},{"url":"http://osvdb.org/52773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1032","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en gallery_list.php en YABSoft Advanced Image Hosting (AIH) Script v2.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gal\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:advanced_image_hosting_script:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78C38AA7-43A4-453B-A1A9-E31F4B26159C"}]}]}],"references":[{"url":"http://osvdb.org/52813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34366","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34176","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8238","source":"cve@mitre.org"},{"url":"http://osvdb.org/52813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1033","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en misc.php en DeluxeBB v1.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"qorder\" un vector diferente que CVE-2005-2989 y CVE-2006-2503."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","matchCriteriaId":"DD698256-3700-4C30-858B-6E546A41CCA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"595D9D33-5FF5-4F0A-B8DC-A8E74C3E8D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B3543354-4CC9-4C62-ACCE-6B646F797245"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27346DF8-248F-426C-A435-7FDBCB34A977"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FA6315C2-8918-456C-AF5D-7F53BF12C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.05:*:*:*:*:*:*:*","matchCriteriaId":"9A65D83C-FB89-46C8-8ABA-D9F66ACE8B88"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.06:*:*:*:*:*:*:*","matchCriteriaId":"37F38906-2E8F-40E4-A03B-8121FDEF903C"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.07:*:*:*:*:*:*:*","matchCriteriaId":"DC51CF33-9B6A-40BE-B5A6-3596C02C48B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.08:*:*:*:*:*:*:*","matchCriteriaId":"EEB0CB89-67EF-46F3-8370-ABFBDD54E959"},{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.09:*:*:*:*:*:*:*","matchCriteriaId":"6B137A4A-B7E3-45BF-988D-D599A780E8E7"}]}]}],"references":[{"url":"http://osvdb.org/52788","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34174","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8240","source":"cve@mitre.org"},{"url":"http://osvdb.org/52788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1034","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via values in the URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Tasklist v5.x-1.x anterior a v5.x-1.3 y v5.x-2.x anterior a v5.x-2.0-alpha1, un módulo para Drupal, permite a atacantes remotos ejecutar comandos SQL de su elección a través de valores en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:tasklist:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.x","matchCriteriaId":"398E7060-D8F7-4EA5-A0AD-BEB3D27696F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:tasklist:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-2.x","matchCriteriaId":"0DCC78CC-19F9-41AE-ABF6-F48634989BA9"}]}]}],"references":[{"url":"http://drupal.org/node/406316","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34376","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/52781","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34171","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49320","source":"cve@mitre.org"},{"url":"http://drupal.org/node/406316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/52781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1035","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets (CSS)."},{"lang":"es","value":"Vulnerabilidad de tipo cross-site scripting (XSS) en el módulo Tasklist versiones 5.x-1.x anteriores a 5.x-1.3 y versiones 5.x-2.x anteriores a 5.x-2.0-alpha1, un módulo para Drupal, permite a los usuarios autenticados remotos inyectar script web o HTML arbitrario por medio de Hojas de Estilo en Cascada (CSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jake_gordon:tasks:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"9FB2C128-C62B-42A2-97A8-06C2816D1F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:jake_gordon:tasks:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"6476986E-EDCE-4BD1-AD7A-1A50490C01D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jake_gordon:tasks:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"723AFC7A-8884-4EC4-9F38-475211E2C57B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/406316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/52782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34170","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49319","source":"cve@mitre.org"},{"url":"http://drupal.org/node/406316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/52782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1036","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo Plus 1 anterior a v6.x-2.6, un módulo de Drupal, permite a atacantes remotos emitir votos de contenidos a través de aspectos de la URI sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-2.5","matchCriteriaId":"88EE6257-1E72-4BA9-A258-D4D9D9236387"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"277CB5E7-FA51-45A7-80E2-54EA60FA2F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"163CAC05-57BB-46FE-A207-548EE6DFD28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C27A4BF-8B05-48E3-9AC6-B2ED98D3BD72"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"36C8C9E8-A171-45D3-9596-FA2C208C48D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"C76A47DA-E66B-467E-B468-9CF20CFA8EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FA608B72-450C-4C64-8B4E-0766BEA2B066"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7ADDA1E3-E765-4614-BA92-D68898C4DFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7753EDBC-FAB4-4335-9CBB-9D96A348156A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"B993DA31-890B-4166-8251-D35BA2467327"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"6D24BB6C-56AA-4617-B773-BE59D9630748"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"372BA942-62E7-4215-8F40-73E6FA7ABF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"78863577-3914-481B-901E-2CAD85FE97B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:plus1:6.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"AB37E8A8-85C4-444B-995D-303A13A7D6B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/405672","source":"cve@mitre.org"},{"url":"http://drupal.org/node/406314","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34378","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34168","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49310","source":"cve@mitre.org"},{"url":"http://drupal.org/node/405672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/406314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1037","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Send by e-mail module in the \"Printer, e-mail and PDF versions\" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API."},{"lang":"es","value":"Vulnerabilidad sin especificar en el módulo Send by e-mail en los módulos \"Printer, e-mail y PDF versiones\" v5.x anterior a v5.x-4.4 y v6.x anterior a v6.x-1.4, un módulo para Drupal, permite a atacantes remotos enviar mensajes de correo másivo ilimitados a través de vectores desconocidos relacionados con la API de control de inundación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*","matchCriteriaId":"13532942-BC0A-4B25-9FE3-679E5A698F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B1DFE95-5788-4C00-8D24-FD2068352293"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A35122AE-7CAB-4AB1-88E7-EAF882618E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA7EF9D6-39D2-4922-B516-44B31E38DB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"030BC1EE-8ED5-4955-AD4B-1745690ABB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"F18D750A-6F98-4A72-B040-9A448EC007BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"5029B78B-0160-4547-9934-19A891AB2652"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*","matchCriteriaId":"C88506DA-94A1-4559-BCD8-D6DA9D438AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*","matchCriteriaId":"7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*","matchCriteriaId":"D315DA5E-3012-4F25-8C7D-21C2BA172A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*","matchCriteriaId":"961AEFF7-499F-4709-BB2F-BB623A4CE19F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"7267D96A-43CC-418B-B115-DE77154BCDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"9302C93E-C85F-4EA3-8BE2-3575592B50B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"03EC0689-1246-4E34-948B-6380BB2BAC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"746A3749-36A4-49EA-B705-922B9D260CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*","matchCriteriaId":"A3FCB2CC-8184-406E-BE92-34DB6F1B27A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F41A6973-2C38-418D-A16F-93F77F902206"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"9D6DF7D4-0992-4677-BA0A-860F329E6D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"0E8A1B8F-021C-4558-880F-9E7FCFE2D323"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"CF939A54-5458-4FD5-916D-301CD3B57F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*","matchCriteriaId":"3FF7248F-2CD2-4551-AD81-3207FE1D45A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*","matchCriteriaId":"CD956162-E836-4777-8346-DF6DAA100A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"82398A3C-DB58-42DE-BC16-56D92FAB55B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"33406F84-81BF-492E-9C22-171311E519A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB084C5-BE56-4128-8A5D-8F536B276A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"AA70209E-98DA-4A0A-9272-2F4B04E62C8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/406516","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52785","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34173","source":"cve@mitre.org"},{"url":"http://drupal.org/node/406516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1038","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en YAP Blog v1.1.1 permite a atacantes remotos ejecutar comandos SQL de su eleccón a través del (1) parámetro \"image_id\" para comments.php, y administradores remotos autenticados ejecutar comandos SQL a través del (2) parámetro \"user\" en una acción modificada para admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yap:yap_blog:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EB7F0FA4-CDB9-4A6C-B5F3-1B5C7D062CF9"}]}]}],"references":[{"url":"http://osvdb.org/52761","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/52762","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34274","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8217","source":"cve@mitre.org"},{"url":"http://osvdb.org/52761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/52762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1039","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis (.ogg) file."},{"lang":"es","value":"Desbordamiento de búfer en CDex v1.70b2 permite a atacantes remotos ejecutar código de su elección a través de una cabecera Info manipulada en un fichero Ogg Vorbis (.ogg)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cdexos:cdex:170b2:*:*:*:*:*:*:*","matchCriteriaId":"0D9C6901-1729-4844-88D5-54BB23A89D5B"}]}]}],"references":[{"url":"http://osvdb.org/52812","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_cdex_ogg.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501928/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34164","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8231","source":"cve@mitre.org"},{"url":"http://osvdb.org/52812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_cdex_ogg.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501928/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1040","sourceIdentifier":"cve@mitre.org","published":"2009-03-20T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file."},{"lang":"es","value":"Desbordamiento de búfer en WinAsm Studio v5.1.5.0 permite a atacantes remotos asistidos por usuarios locales ejecutar código de su elección a través de un fichero project (.wap) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winasm:winasm_studio:5.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D9954A1B-A180-47F9-B890-8B4FC7D5F5E7"}]}]}],"references":[{"url":"http://osvdb.org/52776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34132","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49266","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8224","source":"cve@mitre.org"},{"url":"http://osvdb.org/52776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1041","sourceIdentifier":"secteam@freebsd.org","published":"2009-03-26T05:51:47.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value."},{"lang":"es","value":"La funcionalidad ktimer (sys/kern/kern_time.c) de FreeBSD v7.0, v7.1 y v7.2, permite a usuarios locales sobrescribir a su elección la memoria del kernel a través de un valor timer fuera de rango."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:pre-release:*:*:*:*:*:*","matchCriteriaId":"42231BCC-2B90-4196-A1C2-408A353C1BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release:*:*:*:*:*:*","matchCriteriaId":"EF8CCA19-1CBF-406F-AF84-00E803423195"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release-p8:*:*:*:*:*:*","matchCriteriaId":"510ABA29-1AAA-4279-BAD2-B4624DC60A11"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release-p9:*:*:*:*:*:*","matchCriteriaId":"7A6C0249-951F-4352-92B2-E6A6CD5F26FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:releng:*:*:*:*:*:*","matchCriteriaId":"C3556FE9-9949-4B8E-9E51-1205220B1A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:stable:*:*:*:*:*:*","matchCriteriaId":"799D4A5E-7BF1-4B04-89DB-5C929938847B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*","matchCriteriaId":"14D72C9B-EEB0-4605-BEA2-F77092129245"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*","matchCriteriaId":"20A31C9A-A928-4C9B-BB49-0E53227746DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*","matchCriteriaId":"99FB7443-F942-402A-9104-64677EAF014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*","matchCriteriaId":"E9A75104-5A3E-485E-B4EC-0873C942731C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"}]}]}],"references":[{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc","source":"secteam@freebsd.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34196","source":"secteam@freebsd.org"},{"url":"http://www.securitytracker.com/id?1021882","source":"secteam@freebsd.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49362","source":"secteam@freebsd.org"},{"url":"https://www.exploit-db.com/exploits/8261","source":"secteam@freebsd.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1042","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009."},{"lang":"es","value":"Vulnerabilidad no especificada en Apple Safari en Mac OS X 10.5.6 permite a atacantes remotos ejecutar código de su elección a través de vécnoes desconocidos, provocados por hacer \"clic\" en un enlace, como se demostró por Nils durante la competición PWN2OWN en CanSecWest 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=2934","source":"cve@mitre.org"},{"url":"http://cansecwest.com/index.html","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52888","source":"cve@mitre.org"},{"url":"http://twitter.com/tippingpoint1/status/1351485521","source":"cve@mitre.org"},{"url":"http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34183","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021879","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49388","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=2934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cansecwest.com/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/tippingpoint1/status/1351485521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1043","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009."},{"lang":"es","value":"Una vulnerabilidad en Microsoft Internet Explorer 8 sobre Windows 7 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos simplemente haciendo clic en un enlace, como se demostró Nils durante una competición PWN2OWN en CanSecWest 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=2934","source":"cve@mitre.org"},{"url":"http://cansecwest.com/index.html","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52892","source":"cve@mitre.org"},{"url":"http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34182","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021880","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49389","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=2934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cansecwest.com/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1044","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T14:19:12.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009."},{"lang":"es","value":"Mozilla Firefox versión 3.0.7 en Windows 7, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos relacionados con el método de árbol _moveToEdgeShift XUL, que desencadena un garbage collection en objetos que todavía están en uso, como es demostrado por Nils durante la competición PWN2OWN en CanSecWest 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=2934","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=2941","source":"cve@mitre.org"},{"url":"http://cansecwest.com/index.html","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52896","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34511","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34521","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm","source":"cve@mitre.org"},{"url":"http://twitter.com/tippingpoint1/status/1351635812","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1756","source":"cve@mitre.org"},{"url":"http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:084","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-13.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0397.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0398.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502303/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34181","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021878","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-745-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0864","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-015","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=484320","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"cve@mitre.org"},{"url":"http://blogs.zdnet.com/security/?p=2934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.zdnet.com/security/?p=2941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cansecwest.com/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/tippingpoint1/status/1351635812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502303/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-745-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=484320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1045","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T16:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action."},{"lang":"es","value":"El archivo requests/status.xml en VLC versión 0.9.8a, permite a los atacantes remotos causar una denegación de servicio (consumo de pila y bloqueo) por medio de un argumento de entrada largo en una acción in_play."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"A218DA63-4334-4C9F-BB47-44CC00630613"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=262708","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/17/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34126","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49249","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8213","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=262708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/17/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1046","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T16:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an \"off-by-two memory error.\" NOTE: it is not clear whether this issue crosses privilege boundaries."},{"lang":"es","value":"La funcionalidad de selección de consola en el kernel de Linux 2.6.28 en versiones anteriores a 2.6.28.4, 2.6.25 y posiblemente versiones anteriores, cuando se utiliza la consola UTF-8, permite a atacantes físicamente próximos causar una denegación de servicio (corrupción de memoria) seleccionando un número pequeño de carácteres de 3 bytes UTF-8, lo que desencadena un \"error de memoria off-by-two\". NOTA: no queda claro si el problema traspasa límites de privilegio."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0451.html .","lastModified":"2009-05-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"}]}]}],"references":[{"url":"http://lists.openwall.net/linux-kernel/2009/01/30/333","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.openwall.net/linux-kernel/2009/02/02/364","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/10","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/11","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/9","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33672","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"http://lists.openwall.net/linux-kernel/2009/01/30/333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.openwall.net/linux-kernel/2009/02/02/364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/02/12/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1047","sourceIdentifier":"cve@mitre.org","published":"2009-03-23T20:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the \"Printer, e-mail and PDF versions\" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo \"Enviar-por-email\" en el modulo de Drupal \"versiones de PDF, e-mail e impresora\" en las versiones 5.x antes de 5.x-4.4 y 6.x antes de 6.x-1.4, permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores relacionados con la salida de correo electrónico en formato HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*","matchCriteriaId":"13532942-BC0A-4B25-9FE3-679E5A698F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B1DFE95-5788-4C00-8D24-FD2068352293"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A35122AE-7CAB-4AB1-88E7-EAF882618E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA7EF9D6-39D2-4922-B516-44B31E38DB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"030BC1EE-8ED5-4955-AD4B-1745690ABB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"F18D750A-6F98-4A72-B040-9A448EC007BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"5029B78B-0160-4547-9934-19A891AB2652"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*","matchCriteriaId":"C88506DA-94A1-4559-BCD8-D6DA9D438AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*","matchCriteriaId":"7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*","matchCriteriaId":"D315DA5E-3012-4F25-8C7D-21C2BA172A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*","matchCriteriaId":"961AEFF7-499F-4709-BB2F-BB623A4CE19F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"7267D96A-43CC-418B-B115-DE77154BCDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"9302C93E-C85F-4EA3-8BE2-3575592B50B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"03EC0689-1246-4E34-948B-6380BB2BAC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"746A3749-36A4-49EA-B705-922B9D260CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*","matchCriteriaId":"A3FCB2CC-8184-406E-BE92-34DB6F1B27A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F41A6973-2C38-418D-A16F-93F77F902206"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"9D6DF7D4-0992-4677-BA0A-860F329E6D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"0E8A1B8F-021C-4558-880F-9E7FCFE2D323"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"CF939A54-5458-4FD5-916D-301CD3B57F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*","matchCriteriaId":"3FF7248F-2CD2-4551-AD81-3207FE1D45A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*","matchCriteriaId":"CD956162-E836-4777-8346-DF6DAA100A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"82398A3C-DB58-42DE-BC16-56D92FAB55B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"33406F84-81BF-492E-9C22-171311E519A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB084C5-BE56-4128-8A5D-8F536B276A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"7F6B609E-4AD4-46CD-B9C7-5D0690B83326"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"AA70209E-98DA-4A0A-9272-2F4B04E62C8C"}]}]}],"references":[{"url":"http://drupal.org/node/406516","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52852","source":"cve@mitre.org"},{"url":"http://drupal.org/node/406516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1048","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header."},{"lang":"es","value":"El interface Web en los teléfonos Snom VoIP modelos 320, 360, 270 y 820 con el firmware v6.5 anteriores a 6.5.20, 7.1 anteriores a 7.1.39 y 7.3 anteriores a 7.3.14 permite a atacantes remotos saltarse la autenticación, y reconfigurar el teléfono o hacer un uso arbitrario del mismo, a través de (1) http o (2) peticiones https con la dirección IP 127.0.0.1 en la cabecera Host."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-290"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.5.20","matchCriteriaId":"8C47AC90-80C9-4B17-8F55-1B8BFED83064"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.39","matchCriteriaId":"3D4BB1BA-268E-47AE-B0B0-63F793C71794"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_300_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3.14","matchCriteriaId":"C8430CE2-6C4A-4200-B946-F0531A199139"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:snom:snom_300:-:*:*:*:*:*:*:*","matchCriteriaId":"53C8CF7D-C185-42A3-AF2D-4088358150A9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.5.20","matchCriteriaId":"1B8C016A-CFDA-4C22-97A2-E052C7E73C59"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.39","matchCriteriaId":"F0E4FA76-1F69-46D4-8444-F0CE59CD33AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_320_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3.14","matchCriteriaId":"A0A83F90-7F85-4FD2-AC13-72C4B4FA62B0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:snom:snom_320:-:*:*:*:*:*:*:*","matchCriteriaId":"2B0A870E-6BEA-4F0C-9D96-698220682DD6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.5.20","matchCriteriaId":"5CA41185-98DB-48BA-8C4A-9F9202DCFFAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.39","matchCriteriaId":"A9575B25-7E2C-4E2D-9746-DA56EA97F015"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_360_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3.14","matchCriteriaId":"FE5E64C2-5D5F-4ACD-9339-069FE7FE8B6A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:snom:snom_360:-:*:*:*:*:*:*:*","matchCriteriaId":"DBA7DFDB-2A67-4124-81E3-37E3F211568D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.5.20","matchCriteriaId":"2F62932D-6442-4A86-A13B-815A7ECF88BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.39","matchCriteriaId":"6883042A-CE06-4E23-B77F-CC76AEFBD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_370_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3.14","matchCriteriaId":"E205BBA8-10C9-4ED4-9248-1D0CE023C129"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:snom:snom_370:-:*:*:*:*:*:*:*","matchCriteriaId":"D685F7DA-CE4F-497F-B863-6C6175712125"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.5.20","matchCriteriaId":"C9E7A799-BA1E-4D45-A261-33B234400A7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1.39","matchCriteriaId":"99D04CAF-58A1-42C8-B9FD-B9056EA3C5A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:snom:snom_820_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3","versionEndExcluding":"7.3.14","matchCriteriaId":"EF2D9D65-BA9F-4A56-90F9-A1C7477B1BC9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:snom:snom_820:-:*:*:*:*:*:*:*","matchCriteriaId":"66EEF924-599D-4D5E-88B4-65DE12315F19"}]}]}],"references":[{"url":"http://secunia.com/advisories/36293","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/505723/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52424","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/36293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/505723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1049","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en articleCall.php en Bloginator 1A permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kamads:bloginator:1a:*:*:*:*:*:*:*","matchCriteriaId":"E2957F0E-2949-4C68-832E-F416854B5A4F"}]}]}],"references":[{"url":"http://osvdb.org/52839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34187","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49325","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8243","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8244","source":"cve@mitre.org"},{"url":"http://osvdb.org/52839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1050","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie."},{"lang":"es","value":"Bloginator 1A permite a atacantes remotos evitar la autenticación y conseguir acceso administrativo mediante la manipulación de la cookie \"identifyYourself\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kamads:bloginator:1a:*:*:*:*:*:*:*","matchCriteriaId":"E2957F0E-2949-4C68-832E-F416854B5A4F"}]}]}],"references":[{"url":"http://osvdb.org/52838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34187","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49324","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8243","source":"cve@mitre.org"},{"url":"http://osvdb.org/52838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1051","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv."},{"lang":"es","value":"FubarForum v1.6 y anteriores almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a usuarios remotos descargar la base de datos que contiene las credenciales de usuarios a través de una petición directa para user.tsv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"11EE8D19-D577-45FF-8C05-45337C89AE45"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4A77C3C7-32FC-409A-89BA-D9A3911D2BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0C487F28-3520-4D38-B6FF-6D5C37182BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:1.2:*:*:*:*:*:*:*","matchCriteriaId":"EA087ADB-F9B8-486E-AED2-B0CE9A5FF6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6434CC36-9597-492D-B27C-8BA16FD8F5DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C2E1AE1B-3016-44CC-AD23-FC89395F99B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fubarforum:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E8F7287F-66C2-4C17-A280-FCFBEAB718C7"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34358","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501902/100/0/threaded","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501902/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1052","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Additional information available at:\r\n\r\nhttp://secunia.com/advisories/34359/","cveTags":[],"descriptions":[{"lang":"en","value":"FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv."},{"lang":"es","value":"FireAnt v1.3 y anteriores almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos que contiene las credenciales de usuario a través de una petición directa a user.tsv"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fireant:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"F5B53485-54A0-48AF-AD18-BE4017517D86"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fireant:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E86DD6E1-66F0-4208-B975-1F4627CD049E"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:fireant:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E9504B92-D346-464C-A56E-72BB06499802"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=130","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34359","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501905/100/0/threaded","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501905/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1053","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv."},{"lang":"es","value":"chaozzDB v1.2 y anteriores almacena información sensible bajo la root de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos que contiene las credenciales de usuario a través de una petición directa para user.tsv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:chaozzdb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"82B62A70-BCD4-4BD5-9B67-A2B7BC53E279"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:chaozzdb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"32548796-576D-4382-9826-124FF2D1770D"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaozz:chaozzdb:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0EAB7934-28DF-4FCD-B2DE-A177C9CAC450"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501901/100/0/threaded","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501901/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1054","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009."},{"lang":"es","value":"Vulnerabilidad inespecífica en JustSystems Ichitaro v13, de la v2004 hasta la v2008, Lite2, y Ichitaro viewer v5.1.5.0 y anteriores permite a atacantes remotos ejecutar código de forma arbitraria a través de un fichero manipulado, tal y como lo explotaba  Trojan.Tarodrop.H en Marzo de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:13:*:*:*:*:*:*:*","matchCriteriaId":"C7FB9A19-DFFC-4F94-9FEF-C2F5B5F1A944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:2004:*:*:*:*:*:*:*","matchCriteriaId":"CF02213B-94FF-4D80-9B4A-34B748097F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:2005:*:*:*:*:*:*:*","matchCriteriaId":"D81D5676-D77B-4217-A3F8-D912A6906FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:2006:*:*:*:*:*:*:*","matchCriteriaId":"797D01A8-F293-43F9-918D-2AECA31123D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:2007:*:*:*:*:*:*:*","matchCriteriaId":"9103793C-28AF-400E-8EB4-71424255BBC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:2008:*:*:*:*:*:*:*","matchCriteriaId":"84FB501F-DF7E-4AF2-804D-168B87418DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro:lite2:*:*:*:*:*:*:*","matchCriteriaId":"6BD43250-CD0F-4A03-8D6D-ABE4184A2AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ichitaro:ichitaro_viewer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.5.0","matchCriteriaId":"C261864A-B5C8-40FF-B209-1652987914FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/34405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.justsystems.com/jp/info/js09001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34138","source":"cve@mitre.org"},{"url":"http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0769","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49280","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.justsystems.com/jp/info/js09001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1055","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests."},{"lang":"es","value":"Vulnerabilidad inespecífica en el servicio web en Sitecore CMS v5.3.1 rev. 071114 permite a usuarios remotos autenticados conseguir acceso a las bases de datos de seguridad, y obtener credenciales administrativas y de usuario, a través de vectores desconocidos relacionados con las peticiones a SOAP y XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:cms:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"20271A9D-C591-4206-AF17-9170BA32C70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:cms:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FADD8B45-3408-454B-BB24-C9E51CDC05D7"}]}]}],"references":[{"url":"http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34356","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501929/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34162","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49298","source":"cve@mitre.org"},{"url":"http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501929/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1056","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by \"forcefully browsing.\""},{"lang":"es","value":"IBM Rational AppScan Enterprise anteriores a v5.5 FP1 permite a atacantes remotos leer arbitrariamente informes exportados mediante \"navegación vigorosa\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_appscan:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"30FC9824-9989-45DD-8D6E-272725E3C9AB"}]}]}],"references":[{"url":"http://osvdb.org/52764","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34163","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021863","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0768","source":"cve@mitre.org"},{"url":"http://osvdb.org/52764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1057","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a \"format string buffer overflow.\" NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product."},{"lang":"es","value":"MicroSmarts Enterprise ZipItFast! v3.0 permite a atacantes remotos ejecutar código de forma arbitraria a través de un fichero .zip manipulado que inicia una corrupción de memoria, relacionado con un \"desbordamiento de búfer de formato de cadena.\" NOTA: CVE no ha investigado que fichero file.zip puede producir la explotación de este producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsmarts:zipitfast\\!:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B8F2EFA3-F08A-45D1-8997-45C75E3CF990"}]}]}],"references":[{"url":"http://osvdb.org/52550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49491","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8180","source":"cve@mitre.org"},{"url":"http://osvdb.org/52550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1058","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite.  NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ZipGenius podría permitir a atacantes remotos ejecutar código a traves de un fichero .zip manipulado que inicia una sobrescritura SEH. NOTA: Es posible que esta se solape con CVE-2005-3317. NOTA: CVE no ha investigado que fichero file.zip especificamente puede ser utilizado para la explotación de este producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*","matchCriteriaId":"68B0F1E2-A3C7-4884-BEA7-D186F5A56AFF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49490","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8180","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1059","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file.  NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product."},{"lang":"es","value":"Desbordamiento de búfer en Trident PowerZip v7.2, podría permitir a atacantes remotos ejecutar código de su elección a través de una archivo zip manipulado. NOTA: CVE no ha investiga si el archivo zip puede ser usado para explotar la vulnerabilidad de esta aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerzip:powerzip:7.2:*:*:*:*:*:*:*","matchCriteriaId":"66EDE072-5C5A-44C6-8114-673374A64263"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49492","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8180","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1060","sourceIdentifier":"cve@mitre.org","published":"2009-03-24T14:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009."},{"lang":"es","value":"Vulnerabilidad inespecífica en Apple Safari en Mac OS X v10.5.6 permite a atacantes remotos ejecutar código de forma arbitraria a través de vectores desconocidos que se inician cuando se hace click en un enlace, como demostró Charlie Miller durante la competición PWN2OWN en CanSecWest 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"}]}]}],"references":[{"url":"http://cansecwest.com/index.html","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/52888","source":"cve@mitre.org"},{"url":"http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34179","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021879","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49463","source":"cve@mitre.org"},{"url":"http://cansecwest.com/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.cnet.com/8301-1009_3-10199652-83.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1061","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and \"input validation,\" a different vulnerability than CVE-2009-0193 and CVE-2009-1062."},{"lang":"es","value":"Vulnerabilidad inespecífica en Adobe Acrobat Reader v9 anteriores a v9.1, v8 anteriores a v8.1.4, y v7 anteriores a v7.1.1 permitiría a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos relacionados con JBIG2 y la \"validación de entrada\", una vulnerabilidad diferente de CVE-2009-0193 y CVE-2009-1062."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.1.1","matchCriteriaId":"FE671D4C-9BAC-4E77-A983-12F6BFD70562"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.1.4","matchCriteriaId":"4D5C20FC-C257-4523-BF20-74DF2F9B328A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.1","matchCriteriaId":"BDBEDB79-859B-4EC6-8AFB-81FC20EB52B1"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34392","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34229","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021892","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1021892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1062","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061."},{"lang":"es","value":"Adobe Acrobat Reader versión 9 anterior a 9.1, versión 8 anterior a 8.1.4 y versión 7 anterior a 7.1.1 podría permitir a los atacantes remotos desencadenar una corrupción de memoria y posiblemente ejecutar código arbitrario por medio de vectores de ataque desconocidos relacionados con JBIG2, una vulnerabilidad diferente a las CVE-2009-0193 y CVE-2009-1061."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:professional:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"D010E4EE-0FD7-4F64-B973-5863D1ACB9DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:standard:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"8641E058-D77A-4A86-9FA8-0D26AAA27B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"840D37C8-F30C-4A91-9B34-39AF1E4E34C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DA4A65AB-75F1-4F6B-83E4-354E7D1EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5AD49BF0-E8BC-4716-8B13-DF39267D9303"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"71FC1CDB-DF7C-45FF-973D-8C9310121B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"5C8951B8-0DF2-48C9-9EAC-9EDCCD389958"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"DCCCF8E6-2117-4665-AC71-8F05771CDB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.5:*:*:*:*:*:*:*","matchCriteriaId":"99E14042-AF3B-4609-8CFE-6E02B3DF5CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"822D6CAA-4CF7-41BE-B2AC-E7CBAB6229C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"73579E5C-BDB2-4F9C-BB87-E3752B9030B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8A57B3C8-B127-4A52-AB08-A1B6F7830914"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F131F390-EA28-41C2-A054-42E6B070FA8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E26DE5FE-729C-4C3A-80FB-0FAFC90A8BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C85609BE-4385-4728-AC7E-4231B45A3CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"29BDD58D-3200-48C1-AB30-07808E029061"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FC93E153-9E21-4012-BFE0-0168488FFC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"30D445D4-2B00-451B-8744-CCA9F1E1ADA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53D60FEC-557F-456B-8F35-170078EC5C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"51A7B617-FDB3-4F46-AF1F-F9210FB2793B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4B5D145B-FD5B-430E-8E90-929B00271C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40E8FD46-14E2-4D92-8A99-66EC41F38CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"78BA5B02-F565-4A7F-B9FD-DD08ABF258CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E3F0A07-7021-4D04-A8F2-1BCAB474CD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B4C1C3A0-B0DF-42E4-A8AC-D93FCB6526D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B3B5B11C-6E76-4A03-AC05-840EFE2F8504"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CFF8D072-305A-40B9-9E89-D98BDD951346"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DEF52FAE-B6EF-457D-A61A-95B5E31CEF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0A7236C5-85F8-47C5-8A24-D5282F94D77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"718F2E95-E221-4928-B50F-AB840BBA0E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"123D2B4E-0D05-453C-B598-E41D43FE0E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0109ADA4-6BA0-4299-8043-7CD60DAD6DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"98BCBFB5-72DF-4B8A-8F4C-E958B4FAFB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"71EB6E18-5764-4916-9ECA-F4E880672217"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"61151189-E24C-4AB6-BC60-B9AF720E3D4B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34229","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021892","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1063","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file."},{"lang":"es","value":"Desbordamiento de búfer en eXeScope v6.50 permite a atacantes remotos asistidos por usuarios locales ejecutar código de su elección a través de un fichero ejecutable (.exe) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:brother_soft:exescope:6:50:*:*:*:*:*:*","matchCriteriaId":"C16AD6D4-B66D-4F7F-BE84-D45D050B796A"}]}]}],"references":[{"url":"http://osvdb.org/52868","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34413","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0821","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49379","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8270","source":"cve@mitre.org"},{"url":"http://osvdb.org/52868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1064","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en orbitmxt.dll v2.1.0.2 del ActiveX Orbit Downloader  v2.8.7 y versiones previas, permite a atacantes remotos sobreescribir ficheros de su elección a través un espacio en blanco e interruptores de la línea de comandos seguidos de un nombre de ruta completo en el tercer argumento del método \"download\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orbit_downloader:orbit_downloader:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D6523B1-6B03-43B6-AEFD-72B92019D992"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbit_downloader:orbit_downloader:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7553CFDF-7CA8-4DAF-8FFF-3D9222C25937"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.7","matchCriteriaId":"A8309D23-4FB8-4D01-A152-14BF18C6D220"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C9582704-5578-48A0-A410-0F66F0BB85A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"2CEEC8A4-B3A3-447A-BFAD-0C663AF87E50"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CDEDDF18-2B7F-4C36-AF04-FD8980A2F88A"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"04A8333D-8F29-4DB7-95F4-948A4810D3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C3F23407-9615-4C6F-93C1-66BF0D2701B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"DC08EF4B-F0C0-4481-A939-F54B47144FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B9B3EA76-C40F-4AE3-AA7E-C3001FDF2612"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"6113A9CE-B5E9-4A0C-AD89-BD3B12BA4C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"8A9964A5-B840-43A0-9C47-7C4ED9DCB267"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"8B83AB34-50FE-4437-896D-4C33557FF4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"B1C26D59-B436-4ED2-B13D-F81D3DE6D9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"90842889-9B97-492B-8F4A-020A9302D8A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"95DD46C6-9D07-4A0E-801C-2EBFDB02E418"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A412B9B8-3011-4683-AD6B-1FC33E7C151C"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F3471391-3784-420B-A5D2-4D1BE9AFC0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:orbitdownloader:orbit_downloader:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD7B7CF-628E-4D9D-AF21-70E56F532F7E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34200","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/advisory-73.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49353","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8257","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/advisory-73.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1065","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Pixie CMS v1.01a, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro x. NOTA: información de origen desconocido; los detalles se han obtenido únicamente de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getpixie:pixie_cms:1.01a:*:*:*:*:*:*:*","matchCriteriaId":"6B5A23DC-5D37-4111-BCAE-7B60AF59E98D"}]}]}],"references":[{"url":"http://osvdb.org/52834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49334","source":"cve@mitre.org"},{"url":"http://osvdb.org/52834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1066","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función referral de admin/lib/lib_logs.php de Pixie CMS v1.01a, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera HTTP en una solicitud."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getpixie:pixie_cms:1.01a:*:*:*:*:*:*:*","matchCriteriaId":"6B5A23DC-5D37-4111-BCAE-7B60AF59E98D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/52833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49335","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8252","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/52833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1067","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en index.php de Pixie CMS v1.01a, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:getpixie:pixie_cms:1.01a:*:*:*:*:*:*:*","matchCriteriaId":"6B5A23DC-5D37-4111-BCAE-7B60AF59E98D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html","source":"cve@mitre.org"},{"url":"http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/52832","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49333","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8252","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/52832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1068","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en BS.Player (bsplayer) v2.32 Build 975 Free y v2.34 Build 980 PRO y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de un hostname largo en un fichero de lista de reproducción .bsl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bsplayer:bs.player:2.32:free:*:*:*:*:*:*","matchCriteriaId":"ABD8C3AE-A226-4E46-9F79-7B61A7B957DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bsplayer:bs.player:2.34:pro:*:*:*:*:*:*","matchCriteriaId":"97551864-DFEB-4F25-A8A8-8644FFA4F2E1"}]}]}],"references":[{"url":"http://osvdb.org/52841","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_bsplayer_seh.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34412","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502016/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34190","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0800","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49342","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8249","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8251","source":"cve@mitre.org"},{"url":"http://osvdb.org/52841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_bsplayer_seh.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502016/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1069","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en el formulario \"node edit\" del módulo  Content Construction Kit (CCK) v6.x anterior  a v6.x-2.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del (1)títulos de nodos candidatos referenciados en el sub-módulo \"Node Reference\" y (2) nombres de usuarios candidatos referenciados en el sub-módulo \"User references\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"C311CE79-DE50-498A-95B6-0B9F3992A2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"6C557F91-041A-422A-9B8D-A16C8EE37BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"E2884977-8DFE-4488-BD6E-E17FC1781DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"5227C3E1-DCEA-4B71-A911-61E3A9BEFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:beta:*:*:*:*:*:*","matchCriteriaId":"D2181EF0-5583-44F5-98D4-4E583B885CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6B8CAF91-5F75-4542-8F53-60A8A84FC4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc10:*:*:*:*:*:*","matchCriteriaId":"1489B0C9-1889-40EC-BF72-96C3847092B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8749D157-5FE2-42E9-B944-72E98D21DCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B3CB9B8C-F66B-475F-ABA3-6BBD129ACA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"F5563428-0910-4A5C-849A-006F06C74E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"6639D87C-561E-4F5B-A716-D4D9451BA5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"E174665E-32FC-41DF-95E1-7AE6A3168C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc7:*:*:*:*:*:*","matchCriteriaId":"876733CA-158B-46D3-A520-D5D590E5BB5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc8:*:*:*:*:*:*","matchCriteriaId":"2CDCC426-6904-444D-9756-23ECDA460896"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.0:rc9:*:*:*:*:*:*","matchCriteriaId":"B01AF255-E7B9-412B-B3BE-BE252B2ED34A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:content_construction_kit:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"8CA53B6B-59CC-456D-9A96-1B8BC52444B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/406520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52783","source":"cve@mitre.org"},{"url":"http://osvdb.org/52784","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49317","source":"cve@mitre.org"},{"url":"http://drupal.org/node/406520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/52783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1070","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en system/index.php in ExpressionEngine v1.6.4 a la v1.6.6 y posiblemente otras versiones anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"avatar\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:expressionengine:expressionengine:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7C85E9A1-1302-4AE2-8F78-725438C6EE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:expressionengine:expressionengine:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"11CBFAF3-112B-49C0-98D4-E221C01BB36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:expressionengine:expressionengine:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"65A6DBA5-35E1-4910-873F-E68A308851C9"}]}]}],"references":[{"url":"http://expressionengine.com/docs/changelog.html#v167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502045/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34193","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49359","source":"cve@mitre.org"},{"url":"http://expressionengine.com/docs/changelog.html#v167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502045/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1071","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T05:51:52.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted Portable Game Notation (.pgn) file."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Icarus versión 2.0, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) o ejecutar código arbitrario por medio de un archivo de extensión Portable Game Notation (.pgn) diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:randomsoftware:icarus:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A22AD8-33E7-4BF9-9B71-BB0A3DB25B9D"}]}]}],"references":[{"url":"http://osvdb.org/52780","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34167","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49309","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8236","source":"cve@mitre.org"},{"url":"http://osvdb.org/52780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1072","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T01:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option."},{"lang":"es","value":"nfsd en el Kernel de Linux anteriores a la v2.6.28.9 no detiene la capacidad de CAP_MKNOD antes del manejo de una petición de usuario en un hilo, lo que permite a usuarios locales crear nodos de dispositivo, como se ha demostrado en un sistema de ficheros que ha sido exportado con la opción root_squash."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been rated as having moderate security impact. It was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG, via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1081.html .\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 2.1 and 3, due to these products being in Production 3 of their maintenance life-cycles, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/ .","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.28.9","matchCriteriaId":"2735F338-6C83-49C7-8DA0-E4754BE828E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*","matchCriteriaId":"D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EDFF5385-64AA-48AD-A5FE-25918E4F07D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:virtualcenter:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D17E8DFD-AC99-45E6-81F9-ED66369FBD0A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2543D5-AE09-4E90-B27E-95075BE4ACBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34422","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34432","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34786","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35343","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.kernel/805280","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34205","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0802","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49356","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.kernel/805280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1073","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field."},{"lang":"es","value":"nss-ldapd anteriores a v0.6.8 emplea permisos de \"lectura para todos\" para el archivo /etc/nss-ldapd.conf, lo que permite a los usuario locales obtener una contraseña en texto claro para el servidor LDAP, leyendo el campo bindpw."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:nss-ldap:*:*:*:*:*:*:*:*","versionEndExcluding":"0.6.8","matchCriteriaId":"C3B17F2C-7A87-4AFC-AA24-5D2F2B4C787F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://launchpad.net/bugs/cve/2009-1073","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34523","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1758","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/24/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/34211","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://launchpad.net/bugs/cve/2009-1073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/24/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/34211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1074","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to \"ssl termination devices\" and lack of support for relative URLs."},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 y v8.0, no usa SSL en todas las circunstancias que cabría esperar, esto facilita a los atacantes remotos obtener información sensible rastreando la red. Está relacionado con \"dispositivos de terminación ssl\" y una carencia de soporte de URLs relativas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1075","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 responde diferente a fallos de la característica del \"Olvido de Contraseña\" dependiendo de si la cuenta de usuario existe, lo que permite a los atacantes remotos enumerar nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1076","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 responde de forma diferente a la no utilización de usuario final de una cuestión basada en la característica de inicio de sesión dependiendo de si la cuenta de usuario existe, lo cual permite a atacantes remotos enumerar nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1077","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password."},{"lang":"es","value":"La implementación de Change My Password en el intefase de administración en Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 no refuerza el valor de la propiedad RequiresChallenge, lo que permite a usuarios remotos autenticados cambiar la contraseña a otros usuarios, como se demostró cambiando la contraseña al administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1078","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact."},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 a la v8.0 no impone los requisitos de privilegios esperados para  (1) la eliminación de las políticas de auditoría (2) la modificación de flujos de trabajo, lo que permite a usuarios autenticados remotamente tener un impacto sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1079","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Identity Manager (IdM) v7.0 hasta v8.0 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados, también conocido como Bug IDs 19659, 19660, y 19683."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1080","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033."},{"lang":"es","value":"Vulnerabilidad múltiple de ejecución de secuencias de comandos en sitios cruzados - XSS - en Sun Java System Identity Manager (IdM) 7.0 hasta 8.0 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados, también conocidos como Bug ID 19033."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1081","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Identity Manager (IdM) v7.0 a v8.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores sin especificar, también conocido como Bug IDs 19595 y 19661."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1082","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs."},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 hasta v8.0, permite a usuarios autenticados en remoto ganar privilegios al enviar comandos manipulados a la Consola Admin, como se ha demostrado a través de privilegios para crear cuentas y otras capacidades administrativas. Está relacionado con la acción saveNoValidate e IDs saveNoValidateAllowedFormsAndWorkflows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1083","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits \"control characters\" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving \"resource adapters.\""},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 through v8.0 sobre Linux, AIX, Solaris, y HP-UX, permite \"el control de caracteres\" en las contraseñas de las cuentas de usuario, lo que permite a atacantes remotos la ejecución de comandos de su elección a través de vectores que involucran a los \"resource adapters\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1084","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object."},{"lang":"es","value":"Sun Java System Identity Manager (IdM) v7.0 a la v8.0, no restringe adecuadamente el acceso al objeto System Configuration, lo que permite a administradores autenticados remotamente y posiblemente a atacantes remotos, provocar un impacto desconocido mediante la modificación de este objeto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0980492E-B7DB-4B9F-A400-FDC47DB89A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A5C87C0-3734-4568-97A6-6AB8979AABE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E3B2F0-90E6-4868-915F-87131711EEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"90BC0B23-0CEE-489B-B89A-8776272EC8D2"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49607","source":"cve@mitre.org"},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1085","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh."},{"lang":"es","value":"Piwik v0.2.32 y anterioes almacenan información sensible bajo en directorio raíz Web con control de acceso insuficiente, lo que permite a atacantes remotos conseguir la clave API y otra información sensible a través de una petición directa de  misc/cron/archive.sh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.32","matchCriteriaId":"43A7DB24-9CF1-4F80-AC3B-770416688084"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"262A0DB0-6CE4-41E7-BDC6-18924C76EDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.26:*:*:*:*:*:*:*","matchCriteriaId":"D3F37F31-2288-4B86-9EEB-38EE8B1979C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"74DBC09F-4B09-490B-8367-93B3257F9DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"0384553E-FEEB-4AE4-B1F1-1EC99BE07BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"E64C21FE-BCA5-4830-AA85-5959CBE3800D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"BF976D83-866E-416D-A21C-2BF2A8F95462"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"1E9EB7C0-C645-4E1A-A7CD-87325BBA81E5"}]}]}],"references":[{"url":"http://dev.piwik.org/trac/ticket/599","source":"cve@mitre.org"},{"url":"http://marco-ziesing.de/archives/35-Schluesselloch-in-Piwik.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/2","source":"cve@mitre.org"},{"url":"http://dev.piwik.org/trac/ticket/599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marco-ziesing.de/archives/35-Schluesselloch-in-Piwik.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1086","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función ldns_rr_new_frm_str_internal  en ldns  v1.4.x, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y posiblemente la ejecución de código de su elección a través de un registro de recurso (RR) con un (1) campo \"class\"  (variable \"class\") largo y posiblemente con (2) un campo largo TTL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:ldns:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7036E2A8-39EB-45D1-B0A5-80C35F737281"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:ldns:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2B747B09-4C10-4F06-9E75-08C220ABED84"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35013","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1795","source":"cve@mitre.org"},{"url":"http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232","source":"cve@mitre.org"},{"url":"http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/24/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34233","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1087","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de argumento en PPLive.exe de PPLive v1.9.21 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de un UNC con nombre de ruta compartido en el argumento de LoadModule a (1) synacast, (2) Play, (3) pplsv o (4) controlador URI ppvod. NOTA: algunos de estos detalles se han obtenido de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pplive:pplive:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.21","matchCriteriaId":"D49260CE-96F2-4943-BEEE-61F4AB7A9EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pplive:pplive:1.9.15:*:*:*:*:*:*:*","matchCriteriaId":"9F645AD9-D61F-4F50-9540-A40A7C95E462"}]}]}],"references":[{"url":"http://secunia.com/advisories/34327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49263","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1088","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with \"extension elements and extension functions\" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime."},{"lang":"es","value":"Hannon Hill Cascade Server v5.7 y otras versiones que permite a los usuarios remotos autenticados ejecutar arbitrariamente programan o código Java a través de hojas de estilo XSLT manipuladas con \"elementos de extensión y funciones de extensión\" que lanzan ejecución de código por Xalan-Java, como se demuestra usando xala://java.lang.Runtime."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hannonhill:cascade:5.7:svr:*:*:*:*:*:*","matchCriteriaId":"69680B41-9AE1-4186-8F58-B7742B8A5003"}]}]}],"references":[{"url":"http://support.hannonhill.com/browse/CSCD-4753","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501981/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34186","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49332","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8247","source":"cve@mitre.org"},{"url":"http://support.hannonhill.com/browse/CSCD-4753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1089","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en upload.php en Rapidleech rev.36 y anteriores permite a atacantes remotos leer archivos de su elección a través de una ruta absoluta base64-encoded en el parámetro \"filename\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rapidleech:rapidleech:*:*:*:*:*:*:*:*","versionEndIncluding":"rev36","matchCriteriaId":"05EFDD78-9EAC-4672-A82D-488B5E1ECD24"}]}]}],"references":[{"url":"http://secunia.com/advisories/34300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501854/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34119","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501854/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1090","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en upload.php en Rapidleech rev.36 y anteriores permite a atacantes remotos añadir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro \"uploaded\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rapidleech:rapidleech:*:*:*:*:*:*:*:*","versionEndIncluding":"rev.36","matchCriteriaId":"44D87FC7-5CCD-43C6-9AF3-A7FDBD065C56"}]}]}],"references":[{"url":"http://osvdb.org/52753","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501854/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34119","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49256","source":"cve@mitre.org"},{"url":"http://osvdb.org/52753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501854/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1091","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en upload.php en Rapidleech rev.36, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"uploaded \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rapidleech:rapidleech:rev36:*:*:*:*:*:*:*","matchCriteriaId":"7B3BC6AB-2ADE-49FB-91BC-E1D6743C79EA"}]}]}],"references":[{"url":"http://osvdb.org/52754","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/501854/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34119","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49257","source":"cve@mitre.org"},{"url":"http://osvdb.org/52754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/501854/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1092","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T18:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments."},{"lang":"es","value":"Una vulnerabilidad de uso de memoria previamente liberada en el control ActiveX de LIVEAUDIO.LiveAudioCtrl.1 en LIVEAU~1.OCX versión 7.0 para sistemas DVR de GeoVision, permite a los atacantes remotos ejecutar código arbitrario mediante el llamado al método GetAudioPlayingTime con ciertos argumentos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geovision:liveaudio_activex_control:7.0:*:*:*:*:*:*:*","matchCriteriaId":"00ECA59A-A8F6-43EA-8C23-DE0ED5B6443F"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501773/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49238","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8206","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/501773/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1093","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang)."},{"lang":"es","value":"LdapCtx en el servicio LDAP en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 actualización 17 y anteriores; 6 actualización 12 y anteriores; SDK y JRE v1.3.1_24 y anteriores; y v1.4.2_19 y anteriores no cierran la conexión cuando la inicialización falla, lo que permite a los atacantes remotos causar una denegación de servicio (cuelgue del servicio LDAP )."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB0FA568-3AC1-4705-9E48-C93045B661BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"D4433A85-2A88-41B4-86BE-A51E45FBF1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_24","matchCriteriaId":"5FEB3DCE-8F1B-4F69-9F32-B63D8A1A4EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_24","matchCriteriaId":"1FC9BCEE-2470-492C-846F-B8CCC979C9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_19","matchCriteriaId":"AD1187CB-A684-42C9-8751-5499BEAA702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_19","matchCriteriaId":"5F3F1AFF-0554-40BB-A7A8-62088F56D208"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021893","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1094","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación LDAP de Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, v6 Update 12 y anteriores, SDK y JRE v1.3.1_24 y anteriores, y v1.4.2_19 y anteriores; permite a servidores LDAP remotos ejecutar código de su elección a través de vectores desconocidos relacionados con los datos en serie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB0FA568-3AC1-4705-9E48-C93045B661BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"D4433A85-2A88-41B4-86BE-A51E45FBF1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_24","matchCriteriaId":"5FEB3DCE-8F1B-4F69-9F32-B63D8A1A4EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_24","matchCriteriaId":"1FC9BCEE-2470-492C-846F-B8CCC979C9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_19","matchCriteriaId":"AD1187CB-A684-42C9-8751-5499BEAA702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_19","matchCriteriaId":"5F3F1AFF-0554-40BB-A7A8-62088F56D208"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021893","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11064","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6598","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1095","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers."},{"lang":"es","value":"Desbordamiento de entero en unpack200 en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, y v6 Update 12 y anteriores, permite a atacantes remotos acceder a ficheros y ejecutar código de su elección a través de un archivo JAR con cabeceras Pack200 manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB0FA568-3AC1-4705-9E48-C93045B661BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"D4433A85-2A88-41B4-86BE-A51E45FBF1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021894","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10124","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6643","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1096","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers."},{"lang":"es","value":"Desbordamiento de búfer en unpack200 en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, y v6 Update 12 y anteriores, permite a atacantes remotos acceder a archivos o ejecutar código de su elección a través de un archivo JAR con cabeceras PAck200 manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB0FA568-3AC1-4705-9E48-C93045B661BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"D4433A85-2A88-41B4-86BE-A51E45FBF1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021894","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254570-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020225.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1097","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) versión 6 Update 12 y anteriores, permiten a los atacantes remotos acceder a archivos o ejecutar código arbitrario por medio de (1) una imagen PNG diseñada que desencadena un desbordamiento de enteros durante la asignación de memoria para su visualización en la pantalla de presentación, también se conoce como CR 6804996; y (2) una imagen GIF diseñada a partir de la cual se utilizan valores no especificados en el cálculo de desplazamientos, conllevando a una corrupción de puntero de objeto, también se conoce como CR 6804997."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021913","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49475","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6288","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1098","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998."},{"lang":"es","value":"Desbordamiento del búfer en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores; v6 Update 12 y anteriores; v1.4.2_19 y anteriores; y 1.3.1_24 y anteriores, permite a atacantes remotos acceder a ficheros o ejecutar código de su elección a través de una imagen GIF manipulada. También se conoce como CR 6804998."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB0FA568-3AC1-4705-9E48-C93045B661BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"D4433A85-2A88-41B4-86BE-A51E45FBF1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_24","matchCriteriaId":"5FEB3DCE-8F1B-4F69-9F32-B63D8A1A4EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"399B06AC-E101-48EE-A362-D75F7072FF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_24","matchCriteriaId":"1FC9BCEE-2470-492C-846F-B8CCC979C9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"167D85F7-0D94-49CC-8A5E-F5FAB00ADFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_19","matchCriteriaId":"AD1187CB-A684-42C9-8751-5499BEAA702E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_19","matchCriteriaId":"5F3F1AFF-0554-40BB-A7A8-62088F56D208"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021913","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6008","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9956","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1099","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow."},{"lang":"es","value":"Un error de firma de enteros en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) versiones 5.0 Update 17 y anteriores, y versiones 6 Update 12 y anteriores, permite a los atacantes remotos acceder a archivos o ejecutar código arbitrario por medio de descripciones de glifos diseñados en una fuente Type1, lo que omite una comparación firmada y desencadena un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_runtime_environment:5.0:*:17:*:*:*:*:*","matchCriteriaId":"C34EC26B-EA60-484F-ABAD-F1CD308FCF06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_runtime_environment:6.0:*:12:*:*:*:*:*","matchCriteriaId":"83E4124E-E0A6-477D-BDBD-BB6C1887735D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se_development_kit:*:*:*:*:*:*:*:*","matchCriteriaId":"D909E399-16B0-4C1D-A90A-4B5CFE1DFB3D"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021913","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-254571-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1100","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) \"limits on Font creation,\" aka CR 6522586, and (2) another unspecified vector, aka CR 6632886."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v5.0 Update 17 y anteriores, y v6 Update 12 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de disco) a través de vectores relacionados con ficheros de fuentes temporales y (1) \"límites en la creación de Fuentes\" también conocido como CR 6522586 y (2) otro vector no especificado, también conocido como CR 6632886."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"CB0FA568-3AC1-4705-9E48-C93045B661BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update17:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"D4433A85-2A88-41B4-86BE-A51E45FBF1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254608-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021917","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6224","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254608-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1101","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor \"leak.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación del servidor HTTP Lightweight en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v6 Update 12 y anteriores permite a atacantes remotos provocar una denegación de servicio (probablemente consumo de recursos) para un punto final en el servicio JAX-WS a través de una conexión sin datos, lo que provoca una fuga del descriptor de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"8C826CA0-A25F-4A10-BD9E-791372BF8F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_12:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1F38BA27-0EBC-47EC-99BF-A018E0BB0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021918","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254609-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1102","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"code generation.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en la Máquina Virtual de Java en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 6 Update 12 y anteriores, permite a atacantes remotos acceder a ficheros y ejecutar código de su elección a través de vectores desconocidos relacionados con la \"generación de código\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34489","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34632","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021919","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254610-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-748-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1103","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"deserializing applets,\" aka CR 6646860."},{"lang":"es","value":"Vulnerabilidad sin especificar en el Plug-in Java enn Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 5.0 Update 17 y anteriores; 6 Update 12 y anteriores; v1.4.2_19 y anteriores; y v1.3.1_24 y anteriores, permiten a atacantes remotos acceder a archivos de su elección y ejecutar código de su elección a través de vectores no especificados relacionados con \"desserialización de applets,\" también conocido como CR 6646860."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021920","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49456","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6542","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1104","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331.  NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors."},{"lang":"es","value":"El plug-in Java en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 5.0 actualización 17 y anteriores; 6 actualización 12 y anteriores; y v1.4.2_19 y anteriores no previenen Javascript que es cargada desde el localhost desde la conexión a otros puertos en el sistema, lo que permite a los atacantes asistidos por el usuario evitar las restricciones de acceso intencionadas a través de via LiveConnect, también conocido como CR 6724331. NOTA: esta vulnerabilidad puede ser elevada con separadas vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - para vectores de ataque remoto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021920","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49457","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6584","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118669-19-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1105","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490."},{"lang":"es","value":"El plug-in en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v6 Update 12, 11 y 10 permite a atacantes remotos asistidos por usuarios locales, provocar una que un applet de confianza ejecutarse en una versión del JRE antigua, lo que puede ser utilizado para explotar vulnerabilidades en esa versión antigua, también conocido como CR 6706490."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39819","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4171","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021920","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1191","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49458","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6642","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1106","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948."},{"lang":"es","value":"El  Plug-in Java en Java SE Development Kit (JDK) y Java Runtime Environment (JRE) 6 Update 12, 11, y 10 no analiza adecuadamente los archivos  crossdomain.xml, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas y conectarse a sitios de su elección a través de vectores desconocidos, también conocido como CR 6798948."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021920","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49459","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6619","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125137-14-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1107","sourceIdentifier":"cve@mitre.org","published":"2009-03-25T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a \"Swing JLabel HTML parsing vulnerability,\" aka CR 6782871."},{"lang":"es","value":"El plugin de Java de Java SE Development Kit (JDK) y Java Runtime Environment (JRE) v6 Update 12 y anteriores, y v5.0 Update 17 y anteriores, permite a atacantes remotos engañar a los usuarios para que confíen en un applet firmado a través de vectores desconocidos que tergiversan los diálogos de los avisos de seguridad . Está relacionado con una \"Vulnerabilidad de análisis sintáctico de Swing JLabel HTML (Swing JLabel HTML parsing vulnerability)\", también se conoce como CR 6782871."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35156","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34240","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021920","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49460","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6585","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124344236532162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-14-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254611-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0394.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1198.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1119","sourceIdentifier":"security_alert@emc.com","published":"2009-04-15T19:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en monticulo en EMC RepliStor v6.2 anterior a SP5 y v6.3 anterior a SP2 permite a atacantes remotos ejecutar código de su elección a través de un mensaje manipulado en (1) ctrlservice.exe o (2) rep_srv.exe, posiblemente relacionado con un desbordamiento de entero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:replistor:*:sp4:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"2F1EEE21-41FC-4377-B665-1A26DFDE8EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:emc:replistor:*:sp1:*:*:*:*:*:*","versionEndIncluding":"6.3","matchCriteriaId":"B05B45E7-02A9-4C05-B2E1-4FF063269939"}]}]}],"references":[{"url":"http://secunia.com/advisories/34699","source":"security_alert@emc.com","tags":["Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-13.html","source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/archive/1/502575/100/0/threaded","source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/bid/34449","source":"security_alert@emc.com"},{"url":"http://www.securitytracker.com/id?1022026","source":"security_alert@emc.com"},{"url":"http://www.vupen.com/english/advisories/2009/1018","source":"security_alert@emc.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502575/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1122","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka \"IIS 5.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1535."},{"lang":"es","value":"La extension WebDAV en Microsoft Internet Information Services (IIS) v5.0 on Windows 2000 SP4 no decodifica adecuadamente las URLs, lo que permite a atacantes remotos evitar la autenticación, y posiblemente leer o crear ficheros, a través de una petición HTTP manipulada, también conocido como \"Vulnerabilidad para evitar la autenticación de WebDAV en IIS v5.0\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2009-June/002192.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35232","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022358","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1539","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2009-June/002192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1123","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.327","lastModified":"2025-10-22T01:15:34.120","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Windows Improper Input Validation Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Desktop Vulnerability.\""},{"lang":"es","value":"El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 no valida adecuadamente los cambios en objetos del kernel no especificados, lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como \"Vulnerabilidad de  escritorio en el kernel de Windows\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:-:*:*:*","matchCriteriaId":"A6FBF171-B6B6-4244-AE1A-8E09FE44161E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:*:*","matchCriteriaId":"68592FA5-6CD3-41A3-A4DA-C1C472297FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/54940","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35372","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022359","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://osvdb.org/54940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1123","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-1124","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Pointer Validation Vulnerability.\""},{"lang":"es","value":"El Kernel en Microsoft Windows 2000 SP4, XP SP2 y XP SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2 no validan de forma apropiada los punteros en modo usuario, bajo condiciones de error no especificadas, lo que permite a usuarios locales ganar privilegios a través de aplicaciones manipuladas, también conocido como (Vulnerabilidad de validación de punteros en el Kernel de Windows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/54941","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35372","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35238","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022359","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6231","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1125","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka \"Windows Driver Class Registration Vulnerability.\""},{"lang":"es","value":"The kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 SP2, no valida adecuadamente un argumento de una llamada de sistema inespecífica, lo que permite a usuarios locales ganar privilegios a través de una aplicación manipulada, también conocido como \"Vulnerabilidad de Registro de Clase de Driver de Windows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/54942","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35372","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35240","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022359","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5912","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1126","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka \"Windows Desktop Parameter Edit Vulnerability.\""},{"lang":"es","value":"El kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2, no valida adecuadamente la entrada \"user-mode\" asociada con la edición de un parámetro de escritorio no especificados lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como \"Vulnerabilidad de edición de parámetro en el escritorio de Windows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/54943","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35372","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022359","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1127","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka \"Win32k NULL Pointer Dereferencing Vulnerability.\""},{"lang":"es","value":"win32k.sys en el kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server v2003 SP2, Vista Gold, SP1, y SP2, y Server v2008 Gold y SP2 no valida correctamente un argumento en una llamada de sistema no especificada, lo que permite a usuarios locales obtener privilegios a través de aplicaciones manipualdas que lanzan una puntero NULL desreferenciado, como \"vulnerabilidad desreferenciada de Win32k NULL Pointer\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*","matchCriteriaId":"5AEA67EA-C788-4CF2-9246-01475302238E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5588","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1128","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka \"PP7 Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-1129."},{"lang":"es","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP permite a atacantes remotos ejecutar código de su eleccióna  través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 95, que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de corrupción de memoria PP7\" una vulnerabilidad diferente a CVE-2009-1129."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34837","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1129","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka \"PP7 Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-1128."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en el importador de PowerPoint 95 (biblioteca PP7X32. DLL) en Office PowerPoint 2000 SP3, 2002 SP3 y 2003 SP3 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una longitud de registro inconsistente en datos de sonido en un archivo que utiliza un formato de archivo nativo de PowerPoint 95 (PPT95), también se conoce como \"PP7 Memory Corruption Vulnerability\", una vulnerabilidad diferente de CVE-2009-1128."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54387","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34839","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1130","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka \"Heap Corruption Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en Office PowerPoint 2002 SP3 y 2003 SP3, y PowerPoint en Office 2004 para Mac, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una estructura diseñada en un contenedor de Notes en un archivo de PowerPoint que causa que PowerPoint lea más datos de los que se asignaron al crear un objeto C++, conllevando a una sobrescritura de un puntero de función, también se conoce como \"Heap Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=794","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503454","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34840","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-020/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5961","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-020/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1131","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka \"Data Out of Bounds Vulnerability.\""},{"lang":"es","value":"Múltiples desbordamientos del búfer basados en pila en Microsoft Office PowerPoint 2000 SP3 permite a atacantes remotos ejecutar código de su elección a través de una cantidad grande de datos asociados con átomos sin especificar en un fichero PowerPoint que provoca una corrupción de memoria, también conocido como \"Vulnerabilidad de datos fuera de los límites\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"}]}]}],"references":[{"url":"http://osvdb.org/54393","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-46/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503451","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/34841","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2008-46/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1132","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka \"Wireless Frame Parsing Remote Code Execution Vulnerability.\""},{"lang":"es","value":"Desbordamiento del búfer basado en memoria dinámica en el Servicio Wireless LAN AutoConfig (también llamado Wlansvc) en Microsoft Windows Vista Gold, SP1 y SP2, y Server 2008 Gold y SP2, permite a atacantes remotos ejecutar código de su elección a través de una trama inalámbrica mal formada. También es conocido como \"Vulnerabilidad de Ejecución de Código Remoto en el Análisis de Tramas Inalámbricas\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1133","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la conexión remota de escritorio de Microsoft (anteriormente Terminal Services Client) cuando corre RDP desde v5.0 hasta v6.1 en Windows, y Cliente de escritorio remoto para Mac 2.0, permite a atacantes remotos ejecutar código arbitrario a través de parámetros sin especificar, también conocido como \"Vulnerabilidad de memoria dinámica en la conexión de escritorio remoto\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server:2003:sp2:*:*:*:*:*:*","matchCriteriaId":"058039EE-3B8F-4ED2-933E-4AFD53866002"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/36229","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022709","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2238","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1134","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka \"Record Pointer Corruption Vulnerability.\""},{"lang":"es","value":"Excel en 2007 Office System SP1 y SP2 de Microsoft; Office Excel Viewer de Microsoft; y Office Compatibility Pack para formatos de archivo de Word, Excel y PowerPoint 2007 SP1 y SP2 de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo BIFF con un objeto de registro Qsir (0x806) malformado, también se conoce como \"Record Pointer Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*","matchCriteriaId":"34C5FEAD-4B4B-44EB-9F3A-05093347A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp2:*:*:*:*:*:*","matchCriteriaId":"3382DE96-A3CD-4094-9828-2955472BBE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"806086B6-AB83-4008-A1A2-73BC35A95925"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AD22DBA8-40B0-4197-9D56-38D5D9E1ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"297A9F48-13DF-4042-AC21-B8B764B217BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"F03E302A-83DE-46FF-9044-09230841BD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B18C291F-57C2-4328-8FCF-3C1A27B0D18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*","matchCriteriaId":"E013CE59-0ABF-4542-A9E9-D295AA0FC2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*","matchCriteriaId":"C0AEECDD-BBD0-4042-8A47-D66670A6DC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*","matchCriteriaId":"91A3E58F-E2FE-4346-9083-58C963171A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*","matchCriteriaId":"6BE07062-6299-4371-BD74-BA7F7840DBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://osvdb.org/54958","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/504213/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35246","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022351","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-040/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5922","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504213/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-040/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1135","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka \"Radius OTP Bypass Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Security y Acceleration (ISA) Server 2006 Gold y SP1, cuando Radius OTP está activado, usa el método de autenticación HTTP-Basic, lo que permite a atacantes remotos obtener privilegios de una cuenta de su elección y acceso a la publicación de páginas, a través de vectores que involucran intentos de acceso sobre un recurso de red tras un servidor ISA. También conocido como \"Vulnerabilidad Radius OTP Bypass\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*","matchCriteriaId":"D9552EF3-4A85-4F2A-927B-B485BBDB5BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B6CDFF-1DA8-43A1-8363-77F4365852D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*","matchCriteriaId":"82E6155D-37B4-477D-980E-E1ECEC2E6CAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/35784","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022547","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1889","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1136","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka \"Office Web Components HTML Script Vulnerability.\""},{"lang":"es","value":"El control ActiveX de Microsoft Office Web Components Spreadsheet (también se conoce como OWC10 u OWC11), distribuido en Office XP SP3 y Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 y 2006 versión Gold y SP1, y Office Small Business Accounting 2006, de Microsoft, cuando se utiliza en Internet Explorer, permite a los atacantes remotos ejecutar código arbitrario por medio de una llamada diseñada al método msDataSourceObject, tal y como se explotó “in the wild” en julio y agosto de 2009, también se conoce como \"Office Web Components HTML Script Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"12FAB1BC-F8FB-4A14-8E38-703CF8E67B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*","matchCriteriaId":"BB4F1038-F652-4A76-874F-3FFAAF30AB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*","matchCriteriaId":"D9552EF3-4A85-4F2A-927B-B485BBDB5BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B6CDFF-1DA8-43A1-8363-77F4365852D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*","matchCriteriaId":"82E6155D-37B4-477D-980E-E1ECEC2E6CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:*:small_business_accounting_2006:*:*:*:*:*","matchCriteriaId":"421365B8-2B52-42FC-B6DC-F577FAFADA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*","matchCriteriaId":"7B654504-9098-4F7F-8CE7-696CF15BCA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"B07BEA1E-F032-4E63-8548-C98DD6E05AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"6D8158B4-CF89-4545-9EBF-6AB868D63648"}]}]}],"references":[{"url":"http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx","source":"secure@microsoft.com"},{"url":"http://isc.sans.org/diary.html?storyid=6778","source":"secure@microsoft.com"},{"url":"http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://www.microsoft.com/technet/security/advisory/973472.mspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://xeye.us/blog/2009/07/one-0day/","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5809","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/msrc/archive/2009/07/13/microsoft-security-advisory-973472-released.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=6778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/owc_spreadsheet_msdso.rb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.microsoft.com/technet/security/advisory/973472.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://xeye.us/blog/2009/07/one-0day/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1137","sourceIdentifier":"secure@microsoft.com","published":"2009-05-12T22:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227."},{"lang":"es","value":"Microsoft Office PowerPoint 2000 SP3, 2002 SP3, y 2003 SP3 permite a atacantes remotos ejecutar código de su elección a través de datos de sonido manipulados en un fichero que utiliza un formato de fichero nativo en PowerPoint 4.0, que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de formato de fichero legado\" una vulnerabilidad diferente a VE-2009-0222, CVE-2009-0223, CVE-2009-0226, y CVE-2009-0227."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"34EA27E8-657D-4600-936C-423D753880F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"FC12B313-5CBB-4590-A252-C6A406772CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"F57325F6-A2E0-4127-9A2F-DE6929AB29F3"}]}]}],"references":[{"url":"http://osvdb.org/54381","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/32428","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34876","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022205","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50425","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5946","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-132A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1138","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a \"DN AttributeValue,\" aka \"Active Directory Invalid Free Vulnerability.\"  NOTE: this issue is probably a memory leak."},{"lang":"es","value":"El servicio LDAP en Active Directory en Microsoft Windows 2000 SP4 no habilita correctamente la memoria para las solicitudes LDAP y LDAPS, lo que permite a los atacantes remotos ejecutar código arbitrario a través de una solicitud que utiliza codificación hexadecimal, cuya memoria asociada no es liberada, relacionado con un \"DN AttributeValue,\" o \"vulnerabilidad libre inválida de Active Directory.\" Nota: este problema es probablemente una fuga de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=804","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54937","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35355","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35226","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022349","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1537","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6180","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1139","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka \"Active Directory Memory Leak Vulnerability.\""},{"lang":"es","value":"Fuga de memoria en el servicio LDAP en Active Directory en Microsoft Windows 2000 SP4 y Server 2003 SP2, y Active Directory Application Mode (ADAM) en Windows XP SP2 y SP3 y Server 2003 SP2, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y parada del servicio) a través de (1) LDAP o (2) peticiones LDAPS con filtros OID sin especificar, también conocido como \"Vulnerabilidad de fuga de memoria en el Directorio Activo\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:adam:*:*:*:*:*:*:*:*","matchCriteriaId":"0ED2AEC0-0BD2-4537-8910-99EED39F34DA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*","matchCriteriaId":"E0BBA081-24D5-4990-882F-69CB05CC28CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*","matchCriteriaId":"C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:professional:*:*:*:*:*","matchCriteriaId":"471B4ADA-8627-48BC-B13F-FF5F38F55C9D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]}],"references":[{"url":"http://osvdb.org/54938","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35355","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35225","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022349","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1537","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1140","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka \"Cross-Domain Information Disclosure Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 y 7 en Windows XP SP2 y SP3; 6 y 7 en Server 2003 SP2; 7 en Vista Gold, SP1 y SP2; y 7 en Server 2008 SP2; no impide la renderización HTML de los contenidos cacheados, esto permite a atacantes remotos evitar la política de mismo origen -Same Origin Policy- mediante vectores no especificados. También se conoce como \"Vulnerabilidad de Revelación de Información en Dominios Cruzados\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6278","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1141","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the \"insertion, deletion and attributes of a table cell,\" which trigger memory corruption when the window is destroyed, aka \"DHTML Object Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer versión 6 para Microsoft Windows versiones XP SP2 y SP3 y Server 2003 SP2, permite a los atacantes remotos ejecutar código arbitrario por medio de llamadas de función DHTML no especificadas relacionadas con un elemento tr y la \"insertion, deletion and attributes of a table cell\", que desencadenan corrupción de la memoria cuando el windows se destruye, también se conoce como \"DHTML Object Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-22.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/504207/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5554","source":"secure@microsoft.com"},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-22.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504207/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1144","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en el paquete Gentoo de Xpdf anteriores a v3.02-r2, permite a usuarios locales obtener privilegios a través de un troyano (fichero xpdfrc) en el directorio de trabajo actual, relativo a la macro SYSTEM_XPDFRC no fijada en el proceso de construcción Gentoo, que usa la biblioteca poppler."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"069DE067-2C1D-46D3-9F5C-17921FA474B7"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=200023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=242930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/53529","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34610","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-07.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34401","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=200023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=242930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/53529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200904-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1146","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:04.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 allows local users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3761."},{"lang":"es","value":"Vulnerabilidad no especificada en un ioctl de hcmon.sys de VMware Workstation v6.5.1 y anteriores, VMware Player v2.5.1 y anteriores, VMware ACE v2.5.1 y anteriores y VMware Server en sus versiones v1.0.x anteriores a v1.0.9 build 156507 y v2.0.x en sus versiones anteriores a v2.0.1 build 156745. Permite a usuarios locales provocar una denegación de servicio (DOS) a través de vectores de ataque desconocidos utilizando una vulnerabilidad distinta a la especificada en CVE-2008-3761."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"8D249F86-E463-4AB1-BEEE-0828D5A2D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"700C0BB4-2272-4405-9D9A-A636E3D22461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87291B27-442C-4CAB-94A1-67FC766486EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B04862-4377-422E-931A-B17FE1CA1884"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C35B6730-F05B-4B62-B4DE-07C61A4924F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9D22E40D-C362-49FD-924C-262A64555934"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A48CEB4-5864-4A0F-B14C-CFE4699C3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78957047-FB9F-4D1D-B3D9-91257A6B4D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"280033C5-90EF-4825-A87D-B23650D8C71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"BC1C154A-3869-4189-A781-D3071D54143F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E76D03A3-DB55-48A2-B5A5-64002D28B95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA35C066-90A9-4DE2-A97A-38A6CFC59A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"462EEAD5-A78C-4381-847E-B6F1BE4CB379"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E666A5E4-4CDD-4915-B0F3-C63998D01846"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1D3F9D4D-2116-49A7-9292-AF6B4456E175"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AD2EAA90-B24A-45E7-B99F-DA3554A16F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"446F2959-C42B-403B-AE1C-BA7D305C60CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73EC33AB-E92A-4AA8-A523-C341133BB515"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53197903-0614-4460-8944-C1B5257D71A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F037B05F-6F92-4BE1-B672-F677CBEFD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42049891-38B7-4BB7-8DA5-A87169E2D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"07139DF7-C36B-4FED-8558-7FA49BE0BCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E0D7307-5946-45DC-88D3-6BC72EF50184"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"89699BB6-9E41-41DC-B597-B45CA05313A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1","matchCriteriaId":"E4D69FD9-F162-4623-A475-9FA7A3A6DF30"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBF029A-103D-4BB6-B037-25EC2224DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"35A717A5-60C2-4470-943E-CA53781D4B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*","matchCriteriaId":"29AA2B37-BF5F-4AC5-844D-34CF56EC621C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"07131E56-53EE-4CE1-A135-050792EA3C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"86334051-8763-4CD9-9480-CAEAE756DFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"66596F04-9C2E-4091-85A7-40239F3F920E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0E831531-60FE-4DFC-994E-7409E6C69D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*","matchCriteriaId":"4C1A275E-2152-4A37-8CFE-34E8900E3426"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B7A688A2-3E9C-4AA3-832B-300A5A311C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"89098CFF-4696-4BD9-9BC9-D7C2D92FE729"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A30DFFE7-EB73-4A88-A23B-9B386C091314"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AD0FE7C5-2C46-4B59-9242-A03B986C07DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*","matchCriteriaId":"37595A89-52C5-4699-A463-C9D91B91716B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"294B621F-6C1A-4571-AE13-49495680D255"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA47458-E783-4A6A-ABF1-59E8D87E9B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D75ED54E-8E55-48BF-A52E-19FCCE895C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B53297E3-0C74-421B-8058-DAF7357D421A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"97957D6F-0249-4814-8755-5C4537B58E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4408849A-21F1-40F5-A528-0BD47E1BF823"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9938CB4F-96D1-4852-9694-28A93E13AA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCB61760-87FD-4E60-ADC6-407EFA13773C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FBDE6D5-7131-421A-BABE-32F281615597"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"89AA4FEF-FF8F-4706-89BC-8396F7614EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFC6B629-30B3-4C45-B5E9-1B4310F186FD"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021977","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1147","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T15:30:04.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x before 2.0.1 build 156745 allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el archivo vmci.sys en la Virtual Machine Communication Interface (VMCI) en VMware Workstation v6.5.1 y anteriores, VMware Player v2.5.1 y anteriores, VMware ACE 2.5.1 y anteriores, y VMware Server v2.0.x anteriores a v2.0.1 build 156745 permite a los usuarios locales obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","matchCriteriaId":"5A1A5C22-A89A-4B6B-9108-8C3678BBBC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"700C0BB4-2272-4405-9D9A-A636E3D22461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3_build_54075:*:*:*:*:*:*:*","matchCriteriaId":"E2B6602F-EF25-4E20-B4AA-955C026F7AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87291B27-442C-4CAB-94A1-67FC766486EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B04862-4377-422E-931A-B17FE1CA1884"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C35B6730-F05B-4B62-B4DE-07C61A4924F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9D22E40D-C362-49FD-924C-262A64555934"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1_build_55017:*:*:*:*:*:*:*","matchCriteriaId":"9D438AB9-825C-4A9B-A3FF-55F2E5743B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A48CEB4-5864-4A0F-B14C-CFE4699C3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78957047-FB9F-4D1D-B3D9-91257A6B4D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"280033C5-90EF-4825-A87D-B23650D8C71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBF029A-103D-4BB6-B037-25EC2224DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"35A717A5-60C2-4470-943E-CA53781D4B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*","matchCriteriaId":"29AA2B37-BF5F-4AC5-844D-34CF56EC621C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"07131E56-53EE-4CE1-A135-050792EA3C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"86334051-8763-4CD9-9480-CAEAE756DFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"66596F04-9C2E-4091-85A7-40239F3F920E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0E831531-60FE-4DFC-994E-7409E6C69D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*","matchCriteriaId":"4C1A275E-2152-4A37-8CFE-34E8900E3426"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B7A688A2-3E9C-4AA3-832B-300A5A311C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"89098CFF-4696-4BD9-9BC9-D7C2D92FE729"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A30DFFE7-EB73-4A88-A23B-9B386C091314"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.1_build_5289:*:*:*:*:*:*:*","matchCriteriaId":"25F1481E-A07D-4913-BCF3-630561F0FBC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AD0FE7C5-2C46-4B59-9242-A03B986C07DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2_build_8848:*:*:*:*:*:*:*","matchCriteriaId":"FC8F9694-8556-4990-A867-592D6A927498"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*","matchCriteriaId":"0C605123-69F9-44AC-A17E-3C728059E628"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*","matchCriteriaId":"37595A89-52C5-4699-A463-C9D91B91716B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*","matchCriteriaId":"41B54C61-FB19-4900-A635-2F6B63BEC88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.0_build_13124:*:*:*:*:*:*:*","matchCriteriaId":"B4BCB22F-7B9A-493B-AE19-18D0C15EA778"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"294B621F-6C1A-4571-AE13-49495680D255"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1_build_19175:*:*:*:*:*:*:*","matchCriteriaId":"33D6D4DD-13D2-4EA0-A7D7-367C3809ABAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA47458-E783-4A6A-ABF1-59E8D87E9B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:42958:*:*:*:*:*:*","matchCriteriaId":"559D2177-ECB9-4AFF-A8B4-BCB47A1B4637"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*","matchCriteriaId":"DDEAB605-03F6-4968-8A48-126C7C711043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*","matchCriteriaId":"AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D75ED54E-8E55-48BF-A52E-19FCCE895C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.5_build_56455:*:*:*:*:*:*:*","matchCriteriaId":"B27D214D-2BEF-4445-802A-5E02E9E5E5CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B53297E3-0C74-421B-8058-DAF7357D421A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"97957D6F-0249-4814-8755-5C4537B58E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4408849A-21F1-40F5-A528-0BD47E1BF823"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.1_build_55017:*:*:*:*:*:*:*","matchCriteriaId":"0692E537-A36E-470B-BECE-A17D531B925C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9938CB4F-96D1-4852-9694-28A93E13AA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCB61760-87FD-4E60-ADC6-407EFA13773C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FBDE6D5-7131-421A-BABE-32F281615597"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"89AA4FEF-FF8F-4706-89BC-8396F7614EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFC6B629-30B3-4C45-B5E9-1B4310F186FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E76D03A3-DB55-48A2-B5A5-64002D28B95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA35C066-90A9-4DE2-A97A-38A6CFC59A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"462EEAD5-A78C-4381-847E-B6F1BE4CB379"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E666A5E4-4CDD-4915-B0F3-C63998D01846"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1D3F9D4D-2116-49A7-9292-AF6B4456E175"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AD2EAA90-B24A-45E7-B99F-DA3554A16F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"446F2959-C42B-403B-AE1C-BA7D305C60CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34373","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021976","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5471","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/Apr/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1148","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T14:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file_path parameter ($filename variable)."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el archivo bs_disp_as_mime_type.php en la característica BLOB streaming en phpMyAdmin anteriores a 3.1.3.1 que permite a los atacantes remotos leer arbitrariamente archivo a través de secuencias de salto de directorio en el parámetro file_path (variable $filename)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.3","matchCriteriaId":"9B142F14-A80C-4B95-86C9-0B57436AE8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34468","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1149","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en el archivo bs_disp_as_mime_type.php en la característica BLOB streaming en phpMyAdmin anteriores a v3.1.3.1 permite a los atacantes remotos inyectar arbitrariamente cabeceras HTTP y llevar a cabo ataques de separación de respuesta HTTP a través de los parámetros (1) c_type y posiblemente (2) file_type"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.3","matchCriteriaId":"9B142F14-A80C-4B95-86C9-0B57436AE8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34468","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1150","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en la página de exportación (display_export.lib.php) en phpMyAdmin v2.11.x anteriores a v2.11.9.5 y v3.x anteriores a v3.1.3.1, permite a los atacantes remotos inyectar una secuencia de comandos web o HTML a través de la cookie pma_db_filename_template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*","matchCriteriaId":"346DF9C7-40BE-44FD-BB5A-23F60616E97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B00F4D78-34C3-4934-8AFA-B7283388B246"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*","matchCriteriaId":"BDA3305E-CBC2-4469-923F-29EDA0402CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*","matchCriteriaId":"40CE5E7C-A965-492F-AE85-535C3E5F1B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"52F3DA64-2099-4A4F-9F38-F28255F47BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*","matchCriteriaId":"D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*","matchCriteriaId":"4EFCA67E-49E1-41FF-8B40-0209FF7893FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AF4BA83-50C0-4D90-9755-CC99A0FF987E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*","matchCriteriaId":"8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A26E7D37-FA99-42EA-8E19-ED2343E8E70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A982E152-5A20-4A3A-9A98-6CF9EEF9141A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA11353-1DD1-4593-84E8-1D3CBB2C2166"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0C19FB-60DF-440F-9A32-B9C62EBA9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9716FC40-F759-4D24-9604-7A2DB32A8F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/phpMyAdmin/libraries/display_export.lib.php?r1=11986&r2=12302&pathrev=12302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35635","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200906-03.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1824","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:115","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-2.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34251","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/phpMyAdmin/libraries/display_export.lib.php?r1=11986&r2=12302&pathrev=12302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200906-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-2.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1151","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T14:30:00.267","lastModified":"2025-10-22T01:15:34.273","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"phpMyAdmin Remote Code Execution Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en el archivo setup.php en phpMyAdmin v2.11.x anteriores a v2.11.9.5 y v3.x anteriores a v3.1.3.1 que permite a los atacantes remotos inyectar código PHP arbitrariamente en el archivo de configuración a través de la acción guardar."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionStartIncluding":"2.11.0","versionEndExcluding":"2.11.9.5","matchCriteriaId":"DD88D7DA-16CF-4D83-BB84-6AED7A6B7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.1.3.1","matchCriteriaId":"01E76324-525D-4216-893A-A9C609F9FD09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://labs.neohapsis.com/2009/04/06/about-cve-2009-1151/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"cve@mitre.org","tags":["Product"]},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/scripts/setup.php?r1=11514&r2=12301&pathrev=12301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34430","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35585","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35635","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200906-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1824","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.gnucitizen.org/blog/cve-2009-1151-phpmyadmin-remote-code-execution-proof-of-concept/","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:115","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504191/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34236","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8921","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://labs.neohapsis.com/2009/04/06/about-cve-2009-1151/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_9/phpMyAdmin/scripts/setup.php?r1=11514&r2=12301&pathrev=12301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200906-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.gnucitizen.org/blog/cve-2009-1151-phpmyadmin-remote-code-execution-proof-of-concept/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504191/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1151","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-1152","sourceIdentifier":"cve@mitre.org","published":"2009-03-26T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a denial of service (device restart and loss of configuration) by connecting to TCP port 53, then closing the connection."},{"lang":"es","value":"Router Siemens Gigaset SE461 WiMAX, 1.5-BL024.9.6401, y posiblemente otras versiones, que permite a los atacantes causar una denegación de servicios (reinicio del dispositivo y pérdida de configuración) conectándose al puerto TCP 53, cerrando la conexión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:C/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.3},"baseSeverity":"HIGH","exploitabilityScore":5.5,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:gigaset_se461__wimax_router:1.5-bl024.9.6401:*:*:*:*:*:*:*","matchCriteriaId":"5AE6CDAA-FE16-44B9-A0AE-1286AE361C54"}]}]}],"references":[{"url":"http://helith.net/txt/siemens_gigaset_se461_wimax_router_remote_dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34220","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49365","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8260","source":"cve@mitre.org"},{"url":"http://helith.net/txt/siemens_gigaset_se461_wimax_router_remote_dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1154","sourceIdentifier":"psirt@cisco.com","published":"2009-08-21T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute."},{"lang":"es","value":"Cisco IOS XR 3.8.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caida de proceso) mediante un mensaje BGP UPDATE, como se ha demostrado con un mensaje con muchos números AS en el AS Path Attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:M/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"MULTIPLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":6.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"1A71883C-A3DF-4FB3-8BA9-61A0E4DFD2F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*","matchCriteriaId":"75538529-611A-43B5-AC4D-089C4E2E2ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"00DA2581-F618-4F2A-AB65-DA23DF51AF89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"81797938-F953-42BE-B287-AA48B9860AF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92AED038-C73F-4499-B064-F01D80DB0C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*","matchCriteriaId":"F992D03D-1DB8-44C1-B59D-1C09A32A2C91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5F15240-6323-4766-801A-D887F3EA8A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D99DC1CF-78DC-4E59-98BA-DD84702D6467"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0B9FA754-E3D2-4D80-8F4B-41139973D9FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F497A05C-2FC5-427D-8036-2476ACA956C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1131A524-AA7A-4C94-9FFE-54546EA7D2CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"46D1A634-D39C-4305-8915-4AA289FB68EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"21BAB799-3150-46D8-AEA3-9FCC73203221"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"99042285-94AC-4C57-8EAA-EE63C678A94A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2E752AA9-CC1C-44B6-A916-A3C76A57F05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"96F48419-AF66-4B50-ACBF-9E38287A64FA"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022756","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1155","sourceIdentifier":"psirt@cisco.com","published":"2009-04-09T15:08:35.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per vendor advisory: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml\r\n\r\n\"VPN Authentication Bypass Vulnerability\r\n\r\nCisco ASA or Cisco PIX security appliances that are configured for IPsec or SSL-based remote access VPN and have the Override Account Disabled feature enabled are affected by this vulnerability.\r\n\r\nNote:  The Override Account Disabled feature was introduced in Cisco ASA software version 7.1(1). Cisco ASA and PIX software versions 7.1, 7.2, 8.0, and 8.1 are affected by this vulnerability. This feature is disabled by default. \"","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors."},{"lang":"es","value":"Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances v7.1(1) hasta v7.1(2)82, v7.2 anteriores a v7.2(4)27, v8.0 anteriores a v8.0(4)25, y v8.1 anteriores a v8.1(2)15, cuando introducimos en un campo de atributo general AAA, permite a atacantes remotos saltarse la autenticación y establecer una sesión VPN a un dispositivo ASO mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*","matchCriteriaId":"76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C4991BC7-B07D-4D8C-885C-136AD9D4E209"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://osvdb.org/53441","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022016","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"psirt@cisco.com"},{"url":"http://osvdb.org/53441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1156","sourceIdentifier":"psirt@cisco.com","published":"2009-04-09T15:08:35.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per vendor advisory: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml\r\n\r\nVPN Authentication Bypass Vulnerability\r\n\r\nThe Cisco ASA or Cisco PIX security appliance can be configured to override an account-disabled indication from a AAA server and allow the user to log on anyway. However, the user must provide the correct credentials in order to login to the VPN. A vulnerability exists in the Cisco ASA and Cisco PIX security appliances where VPN users can bypass authentication when the override account feature is enabled.\r\n\r\nNote:  The override account feature was introduced in Cisco ASA software version 7.1(1).\r\n\r\nThe override account feature is enabled with the override-account-disable command in tunnel-group general-attributes configuration mode, as shown in the following example. The following example allows overriding the \"account-disabled\" indicator from the AAA server for the WebVPN tunnel group \"testgroup\":\r\n\r\n    hostname(config)#tunnel-group testgroup type webvpn\r\n    hostname(config)#tunnel-group testgroup general-attributes\r\n    hostname(config-tunnel-general)#override-account-disable\r\n\r\nNote:  The override account feature is disabled by default.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet."},{"lang":"es","value":"Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series devices v8.0 anteriores a v8.0(4)25 y v8.1 anteriores a v8.1(2)15, cuando está configurado el acceso SSL VPN o ASDM, permite a atacantes remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete manipulado (1) SSL o (2) HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:N/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.7},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://osvdb.org/53442","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022015","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"psirt@cisco.com"},{"url":"http://osvdb.org/53442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1157","sourceIdentifier":"psirt@cisco.com","published":"2009-04-09T15:08:35.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per vendor advisory: http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml\r\n\r\nCrafted TCP Packet DoS Vulnerability\r\n\r\nCisco ASA and Cisco PIX security appliances may experience a memory leak that can be triggered by a series of crafted TCP packets. Cisco ASA and Cisco PIX security appliances running versions 7.0, 7.1, 7.2, 8.0, and 8.1 are affected when configured for any of the following features:\r\n\r\n    * SSL VPNs\r\n    * ASDM Administrative Access\r\n    * Telnet Access\r\n    * SSH Access\r\n    * Cisco Tunneling Control Protocol (cTCP) for Remote Access VPNs\r\n    * Virtual Telnet\r\n    * Virtual HTTP\r\n    * Transport Layer Security (TLS) Proxy for Encrypted Voice Inspection\r\n    * Cut-Through Proxy for Network Access\r\n    * TCP Intercept","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote attackers to cause a denial of service (memory consumption or device reload) via a crafted TCP packet."},{"lang":"es","value":"Fuga de memoria en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances v7.0 anteriores a v7.0(8)6, v7.1 anteriores a v7.1(2)82, v7.2 anteriores a v7.2(4)30, v8.0 anteriores a v8.0(4)28, y v8.1 anteriores a v8.1(2)19 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y recarga del dispositivo) a través de una paquete TCP manipulado.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*","matchCriteriaId":"235C2CE5-C858-4037-AE35-E6D506301894"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*","matchCriteriaId":"76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"508DECFB-F334-409F-911B-BF8D842D3556"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C4991BC7-B07D-4D8C-885C-136AD9D4E209"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://osvdb.org/53445","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022015","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"psirt@cisco.com"},{"url":"http://osvdb.org/53445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1158","sourceIdentifier":"psirt@cisco.com","published":"2009-04-09T15:08:35.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet."},{"lang":"es","value":"Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series dispositivos v7.0 anteriores a v7.0(8)6, v7.1 anteriores a v7.1(2)82, v7.2 anteriores a v7.2(4)26, v8.0 anteriores a v8.0(4)24, y v8.1 anteriores a v8.1(2)14, cuando la inspección H.323 está habilitado, permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un paquete h.323 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*","matchCriteriaId":"235C2CE5-C858-4037-AE35-E6D506301894"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*","matchCriteriaId":"76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"508DECFB-F334-409F-911B-BF8D842D3556"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C4991BC7-B07D-4D8C-885C-136AD9D4E209"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://osvdb.org/53444","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022015","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"psirt@cisco.com"},{"url":"http://osvdb.org/53444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1159","sourceIdentifier":"psirt@cisco.com","published":"2009-04-09T15:08:35.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows remote attackers to cause a denial of service (traceback and device reload) via a series of SQL*Net packets."},{"lang":"es","value":"Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series y PIX Security Appliances v7.2 anteriores a v7.2(4)26, v8.0 anteriores a v8.0(4)22, y v8.1 anteriores a v8.1(2)12, cuando la inspección SQL*Net está activada, permite a los atacantes remotos provocar una denegación de servicio (rastreo y recarga del dispositivo) a través de series de paquetes SQL*Net."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E32C602C-E278-4DA2-B7D0-941FABA9ADC0"}]}]}],"references":[{"url":"http://osvdb.org/53446","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022015","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"psirt@cisco.com"},{"url":"http://osvdb.org/53446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1160","sourceIdentifier":"psirt@cisco.com","published":"2009-04-09T15:08:35.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277."},{"lang":"es","value":"Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances v7.0 anteriores a v7.0(8)1, v7.1 anteriores a v7.1(2)74, v7.2 anteriores a v7.2(4)9, and v8.0 anteriores a v8.0(4)5 no implementan de forma adecuada la denegación implícita, lo que podría permitir a atacantes remotos enviar paquetes que sobrepasen las restricciones de acceso impuestas, también conocido como Bug ID CSCsq91277."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*","matchCriteriaId":"235C2CE5-C858-4037-AE35-E6D506301894"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*","matchCriteriaId":"76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"508DECFB-F334-409F-911B-BF8D842D3556"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C4991BC7-B07D-4D8C-885C-136AD9D4E209"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*","matchCriteriaId":"85B161D0-D78B-4517-88AC-3A110F13C154"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"35649F68-BD09-4684-925D-620D99B42CE8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34607","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022017","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1161","sourceIdentifier":"psirt@cisco.com","published":"2009-05-21T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el servicio TFTP en Cisco CiscoWorks Common Services (CWCS) v3.0.x hasta v3.2.x en Windows, también utilizado en Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager y otros productos, lo que permite atacantes remotos acceder a ficheros arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"EFFC3AE9-1B61-44F8-938B-6363EDB2DD5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"1BB12692-8BCD-4601-83AE-12F1AFD1EF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"1017A34C-A119-41D4-AE10-1E35FAFF0547"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.0.6:*:windows:*:*:*:*:*","matchCriteriaId":"5399066A-658B-4494-A291-DB20E0CE7687"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"BD8374C6-D8A3-43CB-A9F7-8A71CD69BE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"DC455CA4-A1F7-4614-9A6F-ABCB0C9026E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:3.2:*:windows:*:*:*:*:*","matchCriteriaId":"F5941482-DB47-49E8-90BA-650073C3A233"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_health_and_utilization_monitor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7CC556B9-7073-41E3-8099-00B796F8B68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_health_and_utilization_monitor:1.1:*:*:*:*:*:*:*","matchCriteriaId":"87814504-DC6B-41CA-873E-F46B2F71A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_lan_management_solution:2.5:*:*:*:*:*:*:*","matchCriteriaId":"EB783DD2-C6B7-406B-9DC4-E1BC832D025C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_lan_management_solution:2.6:*:*:*:*:*:*:*","matchCriteriaId":"57CBDA0C-EE71-459C-AFA1-9879C6727287"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D6CF9518-2D68-4E95-862B-54B622622B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2C446E75-5404-4875-AD94-DF953A7874FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_qos_policy_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A30B25F2-2DEB-4254-88DB-FA31AB6CA04D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_qos_policy_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F77163A8-3F2F-473F-B776-A155D94011DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_voice_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1F143B9-20B4-4140-805F-5F709290D6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_voice_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"562CA8A8-C17E-4985-8EA0-E2CB61355FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE4D6E7-9884-4C7B-BD40-F8C08E78E93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"921F93B3-84A8-471B-9A3A-780C76BA3685"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4686AD6B-CAB3-4CE5-9B13-D30613C614CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:telepresence_readiness_assessment_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"668AEB8D-4923-4EAE-A67A-979D7B816108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_operations_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC421340-135D-45AD-8E59-F1B62805ABEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_operations_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C5510F4F-93C9-4722-97F5-37A05B48C23D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_operations_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C73FD728-7A22-4248-B4DA-62AB2704A411"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_operations_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"930EA844-7016-4EC3-833D-70D1B1DE6DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_provisioning_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C453852A-D639-4872-B8FE-AE7E2BC019A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_provisioning_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4D4D4CAE-582C-47F5-A3D5-CC1D3BE00308"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_provisioning_manager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A0337CC9-B682-4135-B5C8-745B41474EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_provisioning_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"14FC0DD7-81A3-4294-ACA5-0F8B05E7CC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_service_monitor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8A5A8958-B3DE-443B-921F-3AE25FFBF615"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_service_monitor:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3B2F5BDC-A768-4A07-92A2-1C9DF484C3A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_service_monitor:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6041F558-D641-4067-BBC8-EC23D0A1ED18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_service_monitor:2.1:*:*:*:*:*:*:*","matchCriteriaId":"56101F5A-4099-4027-859D-07CFE598F1B5"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN62527913/index.html","source":"psirt@cisco.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html","source":"psirt@cisco.com"},{"url":"http://osvdb.org/54616","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/35179","source":"psirt@cisco.com"},{"url":"http://securitytracker.com/id?1022263","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35040","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/1390","source":"psirt@cisco.com"},{"url":"http://jvn.jp/en/jp/JVN62527913/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1162","sourceIdentifier":"psirt@cisco.com","published":"2009-06-05T16:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página de login Spam Quarantine en Cisco IronPort AsyncOS anterior a v6.5.2 en las Series C, M y X, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"referer\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.0.0-754:*:*:*:*:*:*:*","matchCriteriaId":"477A66C5-9B97-4363-8374-7AAD50A6203A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.0.0-757:*:*:*:*:*:*:*","matchCriteriaId":"01DB8C2D-5C38-4171-AE6F-FB224AEC3225"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.1.0-301:*:*:*:*:*:*:*","matchCriteriaId":"C1913AA9-2FF7-43BF-902A-A0730D375580"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.1.0-304:*:*:*:*:*:*:*","matchCriteriaId":"22339A19-2486-4916-B63F-8D0095CE2CAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.1.0-306:*:*:*:*:*:*:*","matchCriteriaId":"BD01E9B8-6787-4658-9E45-2B4916BB0409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.1.0-307:*:*:*:*:*:*:*","matchCriteriaId":"30A807C2-CE36-4760-BC2A-D9A6AEA1D65B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.1.5-110:*:*:*:*:*:*:*","matchCriteriaId":"5134EEAA-DE71-4283-B3D3-2923749EE92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.1.6-003:*:*:*:*:*:*:*","matchCriteriaId":"DEB855ED-197C-4CAC-A5B8-E02D598320EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.3.5-003:*:*:*:*:*:*:*","matchCriteriaId":"F99C6CBC-4044-45A1-B79C-C54E4A13F41B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.3.6-003:*:*:*:*:*:*:*","matchCriteriaId":"29EB3C86-E8EF-4AE2-A8DC-C0B912F27F0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.5.0-405:*:*:*:*:*:*:*","matchCriteriaId":"4716DAB7-C9E9-47DE-946B-B5B8F0768985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.5.1-005:*:*:*:*:*:*:*","matchCriteriaId":"9F240870-D97A-458A-9485-24CAD3816E68"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ironport_asyncos:6.6.4.0-273:*:*:*:*:*:*:*","matchCriteriaId":"F5A6548C-217F-4496-8DF2-4EF2A775BF7D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_email_security_appliances:*:c:*:*:*:*:*:*","matchCriteriaId":"C9211A16-3F60-4FEF-9164-93A8DC447A76"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_email_security_appliances:*:m:*:*:*:*:*:*","matchCriteriaId":"202BD85B-AE22-4638-A344-E5C75C4CC243"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ironport_email_security_appliances:*:x:*:*:*:*:*:*","matchCriteriaId":"79F52D0C-C0D9-4802-9A07-968F6F68C038"}]}]}],"references":[{"url":"http://osvdb.org/54884","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/34895","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18365","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35203","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022335","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50948","source":"psirt@cisco.com"},{"url":"http://osvdb.org/54884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1163","sourceIdentifier":"psirt@cisco.com","published":"2009-06-25T01:30:01.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified TCP packets."},{"lang":"es","value":"Fuga de memoria en Cisco Physical Access Gateway con software anterior a v1.1 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de paquetes TCP sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:physical_access_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"3C46DA7F-B8BC-4552-9CE0-8BA640713378"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad0fb2.html","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8b.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35477","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022444","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad0fb2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8b.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1164","sourceIdentifier":"psirt@cisco.com","published":"2009-07-29T17:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715."},{"lang":"es","value":"La interfaz web de administración en la plataforma Cisco  Wireless LAN Controller  (WLC) v4.x anterior a v4.2.205.0, v5.1 anterior a v5.1.163.0, y v5.0 y v5.2 anterior a v5.2.178.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una respuesta mal formada a peticiones de autenticación (1) HTTP o (2) HTTPS. También conocida como Bug ID CSCsx03715."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*","matchCriteriaId":"8EAB8765-659C-4A1D-ACA8-3323FA64CCEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57E75DB-03F4-4A38-92BA-FAC3F49FB6B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D7754EC-1BA6-4BB3-A339-8977EF747FA6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F458BB81-18CB-45C9-80D6-099E38ECB81F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E9294DEC-0242-4B50-B93F-F46E4B14106A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"6FE4ECC2-918B-4059-80F3-DA4E1FEB7D4F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAF4094-65DD-4A0C-A404-818742666A71"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FEB0F0B7-22BB-43F7-ADF7-E72709196E6C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"39552A59-00AE-47C9-8FDA-EB95F0914CA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"6451FA3E-5C1C-4FF4-B139-B06B3333086A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2847FEF3-65B8-4922-BDD8-AF6F8E8A34DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D553C27-CC79-434F-95CB-CEB54E23E33C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"AB94E899-46D8-401D-8712-03F461A705EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D56C504-10BE-431A-B22C-309A9EE7CD0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E2B03F83-6996-4BDF-A599-21FAA713987E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C4F985DA-38C5-49DC-922A-9A52DCE89F08"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"212A3CD0-892B-4762-B88C-3080B854F69E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"2B37CAD2-B07F-47B8-92C5-9668878266A7"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C3C517DD-ED02-4F31-86E9-93AEBC16E7CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"954B0579-2F6E-43BA-9032-B230EF9F13FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"2ECD9FB2-203F-4395-9399-8FE52ED9C059"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A88DFEA1-E796-4F78-B58A-3D5AA7CCFE6D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A48FEAF2-C03D-49DB-A962-582A20E1AB67"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"22E3EF41-DD13-4A62-91D1-D5AFAC9ACDE4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CE6D5623-6DE5-4C48-A0BA-509365EE2E6F"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1165","sourceIdentifier":"psirt@cisco.com","published":"2009-07-29T17:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (memory consumption and device reload) via SSH management connections, aka Bug ID CSCsw40789."},{"lang":"es","value":"Fuga de moria la plataforma Cisco  Wireless LAN Controller  (WLC) v4.x anterior a v4.2.205.0, v5.1 anterior a v5.1.163.0, y v5.0 y v5.2 anterior a v5.2.178.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y reinicio de dispositivo) a través de conexiones de administración SSH. También conocida como Bug ID CSCsw40789."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*","matchCriteriaId":"8EAB8765-659C-4A1D-ACA8-3323FA64CCEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C75D0787-769B-4686-8DBE-92D2DA52AAAA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"32C15F81-46E3-440F-A36F-DD5904F745F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57E75DB-03F4-4A38-92BA-FAC3F49FB6B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D7754EC-1BA6-4BB3-A339-8977EF747FA6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F458BB81-18CB-45C9-80D6-099E38ECB81F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E9294DEC-0242-4B50-B93F-F46E4B14106A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"66F1A494-06A0-46F9-8443-886EE590628F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"3C200E78-FF91-4C3A-920C-BD9EECC4BD36"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"6FE4ECC2-918B-4059-80F3-DA4E1FEB7D4F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAF4094-65DD-4A0C-A404-818742666A71"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FEB0F0B7-22BB-43F7-ADF7-E72709196E6C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"39552A59-00AE-47C9-8FDA-EB95F0914CA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"404ACEE8-F223-4324-B68F-03A88661E2CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"4E7412AF-4521-4E06-84C1-719591288EEF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"6451FA3E-5C1C-4FF4-B139-B06B3333086A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2847FEF3-65B8-4922-BDD8-AF6F8E8A34DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D553C27-CC79-434F-95CB-CEB54E23E33C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"AB94E899-46D8-401D-8712-03F461A705EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"534311A6-20CE-4DD7-833F-8874BBF34205"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"FB6692EA-EB32-4089-863E-1B107D50CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D56C504-10BE-431A-B22C-309A9EE7CD0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E2B03F83-6996-4BDF-A599-21FAA713987E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C4F985DA-38C5-49DC-922A-9A52DCE89F08"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"212A3CD0-892B-4762-B88C-3080B854F69E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A1B9A187-7240-443F-9B66-AE9AA1E6AEAF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"513EFDE4-C892-4DE3-AB1A-0C8E4F71DC6B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"2B37CAD2-B07F-47B8-92C5-9668878266A7"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C3C517DD-ED02-4F31-86E9-93AEBC16E7CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"954B0579-2F6E-43BA-9032-B230EF9F13FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"2ECD9FB2-203F-4395-9399-8FE52ED9C059"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D24DE9F5-C14C-4BA2-AEE4-B1E3D7D4F908"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"5200DC76-AB38-4A75-BD2E-2D9048A66D07"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A88DFEA1-E796-4F78-B58A-3D5AA7CCFE6D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A48FEAF2-C03D-49DB-A962-582A20E1AB67"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"22E3EF41-DD13-4A62-91D1-D5AFAC9ACDE4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CE6D5623-6DE5-4C48-A0BA-509365EE2E6F"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35817","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022605","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1166","sourceIdentifier":"psirt@cisco.com","published":"2009-07-29T17:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708."},{"lang":"es","value":"El interfaz web sobre la plataforma Cisco  Wireless LAN Controller  (WLC) v4.x anterior a v4.2.205.0 y v5.x anterior a v5.2.191.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de peticiones (1) HTTP o (2) HTTPS manipuladas, también conocido como Bug ID CSCsy27708."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst:3750g:*:*:*:*:*:*:*","matchCriteriaId":"C163D6D0-3806-43B5-8D09-D61E2AED61DC"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022605","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1167","sourceIdentifier":"psirt@cisco.com","published":"2009-07-29T17:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672."},{"lang":"es","value":"Vulnerabilidad sin especificar en la plataforma Cisco Wireless LAN Controller (WLC) v4.x anterior a v4.2.205.0 y v5.x anterior a v5.2.191.0, usado en  Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos modificar a configuración a través de peticiones (1) HTTP o (2) HTTPS, también conocido como Bug ID CSCsy44672."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750g:*:*:*:*:*:*:*:*","matchCriteriaId":"8EAB8765-659C-4A1D-ACA8-3323FA64CCEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C75D0787-769B-4686-8DBE-92D2DA52AAAA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"32C15F81-46E3-440F-A36F-DD5904F745F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C57E75DB-03F4-4A38-92BA-FAC3F49FB6B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D7754EC-1BA6-4BB3-A339-8977EF747FA6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F458BB81-18CB-45C9-80D6-099E38ECB81F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_1500_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E9294DEC-0242-4B50-B93F-F46E4B14106A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"66F1A494-06A0-46F9-8443-886EE590628F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"3C200E78-FF91-4C3A-920C-BD9EECC4BD36"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"6FE4ECC2-918B-4059-80F3-DA4E1FEB7D4F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAF4094-65DD-4A0C-A404-818742666A71"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FEB0F0B7-22BB-43F7-ADF7-E72709196E6C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2000_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"39552A59-00AE-47C9-8FDA-EB95F0914CA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"404ACEE8-F223-4324-B68F-03A88661E2CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"4E7412AF-4521-4E06-84C1-719591288EEF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"6451FA3E-5C1C-4FF4-B139-B06B3333086A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2847FEF3-65B8-4922-BDD8-AF6F8E8A34DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D553C27-CC79-434F-95CB-CEB54E23E33C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_2100_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"AB94E899-46D8-401D-8712-03F461A705EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"534311A6-20CE-4DD7-833F-8874BBF34205"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"FB6692EA-EB32-4089-863E-1B107D50CFF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D56C504-10BE-431A-B22C-309A9EE7CD0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E2B03F83-6996-4BDF-A599-21FAA713987E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C4F985DA-38C5-49DC-922A-9A52DCE89F08"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4100_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"212A3CD0-892B-4762-B88C-3080B854F69E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A1B9A187-7240-443F-9B66-AE9AA1E6AEAF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"513EFDE4-C892-4DE3-AB1A-0C8E4F71DC6B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"2B37CAD2-B07F-47B8-92C5-9668878266A7"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C3C517DD-ED02-4F31-86E9-93AEBC16E7CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"954B0579-2F6E-43BA-9032-B230EF9F13FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4200_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"2ECD9FB2-203F-4395-9399-8FE52ED9C059"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D24DE9F5-C14C-4BA2-AEE4-B1E3D7D4F908"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.1m:*:*:*:*:*:*:*","matchCriteriaId":"5200DC76-AB38-4A75-BD2E-2D9048A66D07"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A88DFEA1-E796-4F78-B58A-3D5AA7CCFE6D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A48FEAF2-C03D-49DB-A962-582A20E1AB67"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.1:*:*:*:*:*:*:*","matchCriteriaId":"22E3EF41-DD13-4A62-91D1-D5AFAC9ACDE4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_4400_wireless_lan_controller:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CE6D5623-6DE5-4C48-A0BA-509365EE2E6F"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022606","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1168","sourceIdentifier":"psirt@cisco.com","published":"2009-07-30T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (memory corruption and device reload) by using an RFC4271 peer to send an update with a long series of AS numbers, aka Bug ID CSCsy86021."},{"lang":"es","value":"Cisco IOS v12.0(32)S12 hasta v12.0(32)S13 y v12.0(33)S3 hasta v12.0(33)S4, v12.0(32)SY8 hasta v12.0(32)SY9, v12.2(33)SXI1, v12.2XNC anterior a v12.2(33)XNC2, v12.2XND anterior a v12.2(33)XND1, y v12.4(24)T1; y IOS XE v2.3 hasta v2.3.1t y v2.4 hasta v2.4.0; cuando el enrutado RFC4893 BGP está habilitado, lo que permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria o reinicio del dispositivo) usando un par RFC4271 para enviar una actualización con una serie larga de números AS, también conocido como fallo ID CSCsy86021."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)s12:*:*:*:*:*:*:*","matchCriteriaId":"7F505B0A-E9E0-4CF3-B85B-70EEE71314F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)s13:*:*:*:*:*:*:*","matchCriteriaId":"ED66A91B-6429-4983-8167-07DECA601916"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)sy8:*:*:*:*:*:*:*","matchCriteriaId":"0F288884-3DB7-474D-B56B-120E2DB7975A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9:*:*:*:*:*:*:*","matchCriteriaId":"A29860C6-75E6-43A4-8BF5-E6ABF2040B0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(33\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"AF0C8019-BDDA-4019-AF64-352EFFAC9036"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(33\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"9BCFE974-9D9A-443D-A55D-6A2CBF96EC4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi1:*:*:*:*:*:*:*","matchCriteriaId":"4627BEF7-CEEB-4CBC-8620-4D9C5A7F7C30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi2:*:*:*:*:*:*:*","matchCriteriaId":"866E9A29-97D8-41E1-81BE-73FAF1B5E2DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"2A6AD6E5-EBB0-44D8-A63C-EFF7260E4CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.3:*:*:*:*:*:*:*","matchCriteriaId":"91895083-E6C5-432A-BF41-8D157E539C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*","matchCriteriaId":"57F6EF3B-2F31-4449-9B2A-9114D41BBC6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.4:*:*:*:*:*:*:*","matchCriteriaId":"4964AB2C-E255-4844-8DD9-FFFC9512B7C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D0B52CA-3834-4435-A3E1-9684A41E6405"}]}]}],"references":[{"url":"http://secunia.com/advisories/36046","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35862","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022619","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2082","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6697","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/36046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1169","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.securityfocus.com/bid/34235/info\r\n\r\nMozilla Firefox is prone to a remote memory-corruption vulnerability.\r\n\r\nAn attacker can exploit this issue to execute arbitrary code within the context of the affected browser. Failed exploit attempt will result in a denial-of-service condition.","cveTags":[],"descriptions":[{"lang":"en","value":"The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform."},{"lang":"es","value":"La función txMozillaXSLTProcessor::TransformToDoc en Firefox anterior a versión 3.0.8 y SeaMonkey anterior a versión 1.1.16, de Mozilla, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecute código arbitrario por medio de un archivo XML con una transformación XSLT diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.7","matchCriteriaId":"CDC0430B-245A-4462-B8DB-2465D682C747"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"}]}]}],"references":[{"url":"http://blogs.zdnet.com/security/?p=3013","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34471","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34486","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34505","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34510","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34511","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34521","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34549","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34550","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34792","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1756","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:084","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-12.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0397.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0398.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34235","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021939","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-745-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0853","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460090","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=485217","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=485286","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49439","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11372","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/8285","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://blogs.zdnet.com/security/?p=3013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1021939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-745-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=485217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=485286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1170","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun OpenSolaris desde la version snv_100 hasta la snv_101 que permite a usuarios locales, con privilegios en una \"non-global zone\" (zona no global), ejecutar código de su elección en una \"global zone\" (zona global) cuando un usuario de \"global-zone\" esta usando mdb o un proceso de \"non-global zone\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255608-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34272","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021944","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0877","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49468","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255608-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1171","sourceIdentifier":"cve@mitre.org","published":"2009-03-30T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a \"$$\" sequence, which causes LaTeX to include the contents of the file."},{"lang":"es","value":"El filtro TeX en Moodle v1.6 anteriores a v1.6.9+, v1.7 anteriores a v1.7.7+, v1.8 anteriores a v1.8.9, y v1.9 anteriores a v1.9.5 permite a atacantes con la intervención del usuario leer ficheros de su elección mediante un comando \"input\" en secuencia con \"$$\", provocando que LaTeX incluya el contenido del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"680CE396-5F61-409C-A152-4D1E1CB44EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C6A0F31A-BB19-4B2C-A2CD-1DFA5FDF1C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"98CA6482-0B84-463D-9C81-A92FFC06C9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0794B997-0793-4465-B9BA-5BFF254D600A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"06F4A1D8-65C5-4EDA-BCEC-CD267DE5C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"AB2A20C9-5FEF-4D91-AFA0-B49672CC8B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DCFEA024-4CA7-4975-802C-1BB9C099C164"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D1E5E19D-BC58-478E-A584-6D260A5C5265"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"CD6C092A-2871-475E-AE53-DC02EB9C3FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FB16198E-A32D-4CFA-9CCE-65871596E6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFE9D24-24DB-49EA-B59E-AF9B47D46EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"56551145-5213-4165-88C9-C351DACDD1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"A589727E-92BB-40DA-8172-89279EB9B73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"92E97539-A7CC-48D3-A897-ADE4BC194B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D19C1954-6330-449D-9101-378D5DBD122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"A3B70465-F734-4C65-9790-0D83D03B7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"}]}]}],"references":[{"url":"http://cvs.moodle.org/moodle/filter/tex/filter.php?r1=1.18.4.4&r2=1.18.4.5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34517","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34557","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35570","source":"cve@mitre.org"},{"url":"http://tracker.moodle.org/browse/MDL-18552","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1761","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502231/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34278","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/791-2/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8297","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00077.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00079.html","source":"cve@mitre.org"},{"url":"http://cvs.moodle.org/moodle/filter/tex/filter.php?r1=1.18.4.4&r2=1.18.4.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tracker.moodle.org/browse/MDL-18552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502231/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/791-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00079.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1172","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T14:09:53.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not properly validate UsernameToken objects, which has unknown impact and attack vectors."},{"lang":"es","value":"El JAX-RPC Runtime WS-Security en el componente Web Services Security en IBM WebSphere Application Server (WAS) v6.1 versiones anteriores a v6.1.0.23 y v7.0 versiones anteriores a v7.0.0.3, cuando APAR PK41002 está instalado, no valida apropiadamente objetos UsernameToken, lo cual tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"}]}]}],"references":[{"url":"http://secunia.com/advisories/34131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK75992","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21367223","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK75992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21367223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1173","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T14:09:53.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified \"interim fixes,\" which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) v7.0 anterior a v7.0.0.3 utiliza permisos débiles (777) para ficheros asociados con \"correcciones parciales\" sin especificar, lo que permite a atacantes modificar ficheros que podría no haber estado accesible si los fueran utilizados los permisos 755."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"}]}]}],"references":[{"url":"http://secunia.com/advisories/34131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34259","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0854","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1174","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T14:09:53.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified \"security problem\" in the XML digital-signature specification, which has unknown impact and attack vectors."},{"lang":"es","value":"El componente Web Services Security en IBM WebSphere Application Server (WAS) v7.0 versiones anteriores a v7.0.0.3 tiene un \"problema de seguridad\" no especificado en la especificación firma-digital XML, lo cual tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"}]}]}],"references":[{"url":"http://secunia.com/advisories/34131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35301","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK80596","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384925","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34506","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://secunia.com/advisories/34131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK80596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}},{"cve":{"id":"CVE-2009-1175","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T14:09:53.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en apps/web/vs_diag.cgi en la extensión DAAP en Banshee v1.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"server\", que no permite un manejo adecuado en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:banshee-project:banshee:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1A13354B-324C-448B-A1DF-9DDB60D914CE"}]}]}],"references":[{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=577270","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/30/2","source":"cve@mitre.org"},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=577270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1176","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action."},{"lang":"es","value":"mapserv.c en mapserv en MapServer v4.x anterior a v4.10.4 y v5.x anterior a v5.2.2 no garantiza que la cadena que soporta el parámetro \"id\" finalice en un carácter '\\0', lo que permite a atacantes remotos dirigir un ataque de desbordamiento de búfer o tener un otro impacto sin especificar a través de un parámetro \"id\" largo en una acción de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1177","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:45.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors."},{"lang":"es","value":"Desbordamiento múltiple de búfer basado en pila en el archivo maptemplate.c en mapserv en MapServer v4.x anteriores a v4.10.4 y v5.x anteriores a v5.2.2 con impacto desconocido y vectores de ataque remoto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1DED21A-FA34-4F6A-8ED5-A985671E5653"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34603","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2944","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021952","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"cve@mitre.org"},{"url":"http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502271/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00170.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1178","sourceIdentifier":"cve@mitre.org","published":"2009-03-31T18:24:46.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the \"admin command line.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el servidor en IBM Tivoli Storage Manager (TSM) 5.3.x versiones anteriores a v5.3.2 y 6.x versiones anteriores a v6.1 tiene un impacto desconocido y vectores de ataque relacionados a la \"línea de comandos del administrador\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A263333E-DB86-41BE-A508-731079429E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"AC4EA95B-C812-4A27-8FB2-46F644463BF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021945","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21246076","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375360","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC46744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34285","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21246076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21375360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC46744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1179","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file."},{"lang":"es","value":"Desbordamiento de enteros en el decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3613","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3639","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022073","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495889","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1180","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data."},{"lang":"es","value":"El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado que desencadena una liberación de datos no válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022073","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495892","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1181","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference."},{"lang":"es","value":"El decodificador JBIG2 en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de un archivo PDF creado que desencadena una desreferencia de puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022072","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495894","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1182","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file."},{"lang":"es","value":"Múltiples desbordamientos del búfer en el decodificador JBIG2 MMR en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos, permiten a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022073","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495896","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1183","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file."},{"lang":"es","value":"El decodificador JBIG2 MMR en Xpdf versión 3.02 PL2 y anteriores, CUPS versión 1.3.9 y anteriores, Poppler versión anterior a 0.10.6, y otros productos permite a los atacantes remotos causar una denegación de servicio (bucle infinito y colgar) por medio de un archivo PDF creado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:*","matchCriteriaId":"B8ABE533-8FC1-45E6-B574-A4CC7571EF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1B02805E-7BD0-4563-82C8-6FFB982D4913"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"852F526D-F388-4FF0-BDD9-DF7635DB46D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"478D53EA-CC8C-4ECB-8410-0910505AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:*","matchCriteriaId":"8C84FB90-FF1C-4502-B2D2-390438DD422F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:*","matchCriteriaId":"13341DAE-D16D-41A7-BF17-FEC802997B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:*","matchCriteriaId":"3E30BAEA-231C-4A82-B014-9EE3D1E81545"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:*","matchCriteriaId":"FE1DE5A5-6448-43F6-A612-56998D16E6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:*","matchCriteriaId":"35F84699-D4CF-4FD1-A959-53E316559EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:*","matchCriteriaId":"D820DFD5-0EF9-4C9A-B281-D553A4F63141"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:*","matchCriteriaId":"E2EFC7E4-E513-42DB-BDA5-8D1E497971DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:*","matchCriteriaId":"0AA5CDDC-BFDE-4C5E-920F-5DA1B3C51B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:*","matchCriteriaId":"F4CF839D-D034-4D47-977F-7E27B36EF04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:*","matchCriteriaId":"F3B3E8A4-14FE-42DA-B82E-839B092B5302"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:*","versionEndIncluding":"3.02","matchCriteriaId":"32628280-E2DB-45E0-AB8A-CFC90419A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:*","matchCriteriaId":"DEF5EC54-9145-4B51-8241-C9343160BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D33C2C1D-C1C1-4B1D-BDC8-6480CE8EC24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1344DF7-9917-4DB0-9256-9E8131C55B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:*","matchCriteriaId":"309F0CF2-4AF7-4F46-91EA-39BA07BAF312"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:*","matchCriteriaId":"36FA872B-74B8-48E4-9D5C-5ACA6FCB8026"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:*","matchCriteriaId":"20311EDE-0E34-432A-AE41-F61EA68F134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:*","matchCriteriaId":"16FEF460-3569-4294-ABA4-D7C251D67071"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:*","matchCriteriaId":"BB41E8C2-BBCC-48CB-805B-23411D39E936"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:*","matchCriteriaId":"16670F8A-E70B-4CDF-8C61-414D86E20C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:*","matchCriteriaId":"69483A91-53DB-4736-908F-7B14EFB40888"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:*","matchCriteriaId":"5B3E7962-0A95-4E7B-A983-683B02350B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:*","matchCriteriaId":"BD1120B3-3372-417B-BCA0-FD515638FBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F7397645-3225-4980-8465-28F93322B58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"B4E90153-8D18-4A50-9581-895C851F6489"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4D89E03-94D0-4F7F-9A54-3021E3E5A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"298D6BE7-7683-4225-8DD6-4C0FC5EB48BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"230B77E7-B1AE-4470-859D-7B5F99749D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F8FECBBD-B1A2-4F42-8A68-32AB8331BDC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7B6070FC-4566-4314-940E-0AAE34B56E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BC691F07-8B38-4867-AB18-51F380CAEA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"E943EFBF-39A7-408F-8AC5-677E83DFDBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"5EA7725A-4398-4C76-BEBF-10E56C7F34F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D7415295-0FBF-4946-8D99-8CB2EC391319"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*","matchCriteriaId":"7C702EE3-4B7C-42EA-92AA-8717807CF67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*","matchCriteriaId":"73F74581-D71C-4FEC-BA8C-85EF4C1991BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*","matchCriteriaId":"7ABCFB52-33D3-428C-B1D5-DCE504170A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"45F03F2B-6AC3-4872-9032-293C2E9B837C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7E02B6FB-C36D-45F3-95F3-566CA03B29A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"96093309-A87D-48D0-84DA-446255ABF231"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*","matchCriteriaId":"CF67F149-614B-4507-A15F-E557A1B73423"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"B4A14432-D8A1-4D19-9408-B9B4F2FC6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*","matchCriteriaId":"49862F77-B8DE-4AA7-AE17-B348B05AC00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"78D7719F-03E0-4E66-A50A-F8E857A9B6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F3139FDA-9476-4414-B349-7119E63FD268"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"523FE78C-441F-4ACD-B9F2-3E5293E277AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"F887B5B1-7528-4086-AE6C-134F54A93342"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0D6D24ED-0D73-4CF2-B746-6EF29F2EF56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E8C5C552-6276-4791-80CD-6B3EB425EF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"5279D055-248A-4BD1-9FBB-0024BA16DF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"BF791C1D-9AF8-4F0F-8F4B-844BC9A55DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*","matchCriteriaId":"16519855-FCB9-44A8-9C7E-116192327BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*","matchCriteriaId":"B1D9330B-C51A-4C7D-A322-85103C64D86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2DA0C19F-95EB-429C-AF06-A2C1D5643662"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*","matchCriteriaId":"225CCE80-FF4B-4B39-B8BD-EB4710047524"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*","matchCriteriaId":"07925DD8-50C0-4908-95D1-7342A4617BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"48A519DB-6C6D-4094-814D-33BD5EF389BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*","matchCriteriaId":"B6ED7566-5092-4B08-97A9-B2B53117A224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*","matchCriteriaId":"98DCAC0C-896F-4353-A665-5BCD0D8AEBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*","matchCriteriaId":"E72614CD-8F70-4E07-AD83-8FDE8026CEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*","matchCriteriaId":"48E62419-C165-4B42-8C23-E24821BD4BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*","matchCriteriaId":"217D804B-CA56-49CE-B9EB-2A297EB1763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*","matchCriteriaId":"A41E8583-C837-4871-B4D2-FD41C78D538E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D480C37B-0DA8-4096-80B0-5198FE589A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*","matchCriteriaId":"74F5A83B-3C1A-49F3-A9D6-F7B9B897E447"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*","matchCriteriaId":"241D4183-879D-4974-BACB-A6987EDA2E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*","matchCriteriaId":"8758715D-B973-4960-8B7D-6F9A11E73288"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*","matchCriteriaId":"0370E9EB-B830-4362-B83C-912579695691"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DA3EC6EE-720D-4F27-A2E1-88AE53FC41A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*","matchCriteriaId":"D644926A-C2A5-45FE-85A3-2782CE87ED86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0696E675-0A13-45FC-8917-845E6FF7A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAC98C-1FE6-42A3-8B62-E3C321914F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC3EF2F-0140-4185-9FB3-2B595B61CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7C36785A-F735-45C0-986B-9624AD65F0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3C1D3916-607F-44E8-9D47-93C6C0789083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"174613C3-A04B-4701-849B-BAA598BF4F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"81C1137C-BE3D-45F9-83C9-D212107F0E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"3CBC1F81-E93A-42A7-8BC8-4B903688F2E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1FA876FF-C58A-45CF-A8E8-E2068DF79421"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5FD78771-BD9A-4AC2-B664-B189DD288FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"50A16424-732F-4B76-A753-1642A97BC1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E189C976-2DD2-485C-828E-7FC3DC6A8F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A86CA90F-A944-4F3E-B75F-8147125335D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAFABDC-E40F-4C53-AC66-94EFD077665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"42A2F7B3-F4A7-416E-A07F-D4C5F0768B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F96C1B80-9E20-4832-8308-BF7911569EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3F2D7DB3-F467-4BC0-83BB-4706D067A2C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ABD33C2C-7D39-4CCE-AC99-BC7B1B205A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"46C394DC-65A7-4713-B823-6F5D329A0C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E5E9F74F-3C7D-486A-8BA1-EE2A73160B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"FCAEE03E-0B8A-4D10-BD4D-2DA25B7BBE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"0718FB6B-D787-409A-B535-0318F2C63A81"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/34291","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022072","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495899","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1184","sourceIdentifier":"secalert@redhat.com","published":"2009-05-05T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic.  NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21."},{"lang":"es","value":"La función selinux_ip_postroute_iptables_compat en security/selinux/hooks.c en el subsistema SELinux en el kernel de Linux anterior a v2.6.27.22, y v2.6.28.x anterior a 2.6.28.10, cuando compat_net esta activado, omite llamadas a avc_has_perm para (1) el nodo y (2) puerto, lo que permite a usuarios locales evitar la restricciones previstas en el trafico de la red. NOTA: Esto fue incorrectamente reportado como una cuestión arreglada en 2.6.27.21."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*","matchCriteriaId":"241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*","matchCriteriaId":"CBEBA0F6-5453-4993-932B-BB8941DCC5CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=910c9e41186762de3717baaf392ab5ff0c454496","source":"secalert@redhat.com"},{"url":"http://lwn.net/Articles/331434/","source":"secalert@redhat.com"},{"url":"http://lwn.net/Articles/331435/","source":"secalert@redhat.com"},{"url":"http://patchwork.ozlabs.org/patch/25238/","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/35121","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35656","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/04/1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"secalert@redhat.com"},{"url":"https://launchpad.net/bugs/cve/2009-1184","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=910c9e41186762de3717baaf392ab5ff0c454496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/331434/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/331435/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.ozlabs.org/patch/25238/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1185","sourceIdentifier":"secalert@redhat.com","published":"2009-04-17T14:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space."},{"lang":"es","value":"udev antes de v1.4.1 no verifica si un mensaje NETLINK es generado desde el espacio del kernel, lo que permite a usuarios locales obtener privilegios mediante el envio de un mensaje NETLIINK desde el espacio de usuario."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been fixed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2009-0427.html .  udev packages as shipped in Red Hat Enterprise Linux 4 were not affected by this flaw, as they do not use netlink sockets for communication.  udev is not shipped in Red Hat Enterprise Linux 2.1 and 3.","lastModified":"2009-04-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:udev_project:udev:*:*:*:*:*:*:*:*","versionEndExcluding":"141","matchCriteriaId":"7F3E9D80-7648-4B88-AD14-EB45BF4A4284"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*","matchCriteriaId":"C76D0C17-2AFF-4209-BBCD-36166DF7F974"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:ctpview:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"A2953793-3D79-4128-A841-EDAF50095FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:ctpview:7.1:-:*:*:*:*:*:*","matchCriteriaId":"D6B30D89-FF23-4818-A63D-7DE5C3328165"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:ctpview:7.1:r1:*:*:*:*:*:*","matchCriteriaId":"9FC90E91-36BB-458E-9E63-B35DB0FF8666"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:ctpview:7.2:-:*:*:*:*:*:*","matchCriteriaId":"79A6AAEE-464C-424D-9738-174CDB70FAB9"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000060.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34731","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34750","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34753","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34771","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34776","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34785","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34787","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34801","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35766","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0063","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1772","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:103","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:104","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0427.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502752/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504849/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34536","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022067","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-758-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1053","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1865","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495051","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://launchpad.net/bugs/cve/2009-1185","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8572","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0427.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502752/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504849/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-758-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://launchpad.net/bugs/cve/2009-1185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1186","sourceIdentifier":"secalert@redhat.com","published":"2009-04-17T14:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments."},{"lang":"es","value":"Desbordamiento de búfer en la función util_path_encode en udev/lib/libudev-util.c en udev antes de v1.4.1 permite a usuarios locales provocar una denegación de servicio (parada del servicio) mediante vectores que disparan una llamada con argumentos manipulados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of udev as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2009-04-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:udev_project:udev:*:*:*:*:*:*:*:*","versionEndExcluding":"141","matchCriteriaId":"7F3E9D80-7648-4B88-AD14-EB45BF4A4284"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*","matchCriteriaId":"C76D0C17-2AFF-4209-BBCD-36166DF7F974"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34731","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34750","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34753","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34771","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34776","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34785","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34787","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34801","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0063","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1772","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:103","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/502752/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34539","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022068","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-758-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1053","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495052","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://launchpad.net/bugs/cve/2009-1186","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/502752/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-758-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://launchpad.net/bugs/cve/2009-1186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1187","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc)."},{"lang":"es","value":"Desbordamiento de entero en la característica JBIG2 decoding en Poppler anteriores a v0.10.6 permite a atacantes remotos producir una denegación de servicio (caida) y posiblemente ejecutar código a través de vectores relacionados con CairoOutputDev (CairoOutputDev.cc)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028#c16","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50184","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028#c16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1188","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."},{"lang":"es","value":"Desbordamiento de entero en la característica JBIG2 decoding en Poppler anteriores a v0.10.6 permite a atacantes remotos producir una denegación de servicio (caida) y posiblemente ejecutar código a través de vectores relacionados con SplashBitmap (splash/SplashBitmap.cc)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028#c16","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/releases.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34746","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35064","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35618","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37028","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37037","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37043","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37053","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37077","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37079","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39938","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34568","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495907","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526915","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50185","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263028#c16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/196617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0480.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502761/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/361875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=495907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1189","sourceIdentifier":"secalert@redhat.com","published":"2009-04-27T18:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key.  NOTE: this is due to an incorrect fix for CVE-2008-3834."},{"lang":"es","value":"La función _dbus_validate_signature_with_reason (dbus-marshal-validate.c) en D-Bus (también conocido como DBus) en versiones anteriores a 1.2.14 utiliza lógica incorrecta para validar un tipo básico, lo que permite a atacantes remotos suplantar una firma a través de una clave manipulada. NOTA: esto es debido a una solución incorrecta para CVE-2008-3834."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.3","matchCriteriaId":"CB9F83F6-FFF0-456A-87D1-A546FAA09F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1A2945FB-BDB8-49B7-BA9A-2BB390345FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0FE08E05-948A-4A9C-BA91-B2935355D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB0A3D5A-8823-4365-83B9-1E370C131F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6262F9B-30B5-4A7E-AC49-B9221B06CA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C2F4A579-8F26-47CF-9AE0-41334A9751AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E12E1141-5FE4-43BF-B3A0-DC45C593F880"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B04817C0-14A2-4B75-8747-691D48E70BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09C8C79E-AE58-48AE-89DB-E84637543783"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.9:*:*:*:*:*:*:*","matchCriteriaId":"ED4ECF06-79CC-4142-BE6A-AF4E1E981543"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.10:*:*:*:*:*:*:*","matchCriteriaId":"A87CC329-AF59-4882-82E1-851C4E0BB0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.11:*:*:*:*:*:*:*","matchCriteriaId":"9BDA4ACC-9166-491C-A8D4-A5418F3B0965"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.12:*:*:*:*:*:*:*","matchCriteriaId":"084A8212-B0FC-41BA-9532-080E8F92B949"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.13:*:*:*:*:*:*:*","matchCriteriaId":"0EB88CDF-0C71-4FE7-9210-C43EBE806416"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.20:*:*:*:*:*:*:*","matchCriteriaId":"0D84E94E-18EB-4276-AF55-2FB9850B08CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.21:*:*:*:*:*:*:*","matchCriteriaId":"0C6D0AAC-7F4B-48FF-9ACB-8C8844BDD722"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.22:*:*:*:*:*:*:*","matchCriteriaId":"5FD40B16-FF56-4C23-B8A9-D79433713F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23:*:*:*:*:*:*:*","matchCriteriaId":"C5A81FE8-37A0-46CE-AAA4-F00CF4122C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.1:*:*:*:*:*:*:*","matchCriteriaId":"D8815B87-7910-4E41-AB28-AEAD9F53475A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.2:*:*:*:*:*:*:*","matchCriteriaId":"DCEF7E9B-3F19-48CF-862B-B5935824A4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.23.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB32F7B-8616-40F5-8D94-4FC97F6AD958"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.31:*:*:*:*:*:*:*","matchCriteriaId":"4EC42FAD-C541-4D91-BDF6-62AA1C894B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.32:*:*:*:*:*:*:*","matchCriteriaId":"FAECF21B-68AF-47D8-9540-BB0001087881"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.33:*:*:*:*:*:*:*","matchCriteriaId":"30D0DE09-5F83-423B-AD86-033005D35994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.34:*:*:*:*:*:*:*","matchCriteriaId":"D6618ACC-B506-4A92-BE4F-346FAC29D24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35:*:*:*:*:*:*:*","matchCriteriaId":"BB406736-7185-4E0A-ACC6-4F79AB312FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35.1:*:*:*:*:*:*:*","matchCriteriaId":"18867CA7-E4AE-4312-A6E8-0CC514FCF063"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.35.2:*:*:*:*:*:*:*","matchCriteriaId":"5C443F3D-5BD0-4E89-99F1-1BC0798666F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36:*:*:*:*:*:*:*","matchCriteriaId":"2DA75AB4-4ADF-4E42-8840-B044DC4D9FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36.1:*:*:*:*:*:*:*","matchCriteriaId":"D809A431-7BA6-4C9F-8644-33A14389B289"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.36.2:*:*:*:*:*:*:*","matchCriteriaId":"732CD552-3E19-4389-B426-77D5B473866F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.50:*:*:*:*:*:*:*","matchCriteriaId":"1702AE33-38F4-40C5-B448-C863A7E95553"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.60:*:*:*:*:*:*:*","matchCriteriaId":"3801D383-91A6-4F2F-87D5-32882005BF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.61:*:*:*:*:*:*:*","matchCriteriaId":"2392266A-BE81-4494-81C3-942ED56B0558"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.62:*:*:*:*:*:*:*","matchCriteriaId":"BCCA6868-E09D-4616-A9A8-EF63F20C981D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.90:*:*:*:*:*:*:*","matchCriteriaId":"60B6DA02-F08B-4ACE-8F93-F869467BC628"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.91:*:*:*:*:*:*:*","matchCriteriaId":"3B4E7E9B-722E-4EE1-A435-906DE07BEB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:0.92:*:*:*:*:*:*:*","matchCriteriaId":"BEF4902A-5598-42B7-8BB0-E9F8AB645D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DEF0BA7-4EE6-482A-BFE4-A159A7C329AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E93056D8-497A-4C08-B3FA-8372A92A6ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0380A55A-541E-450B-8092-280BD5DA736D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"C55E6EEB-A408-45F5-AF95-37DBDEBA17EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8671706-FC4E-4485-945C-C397C80D859E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4C9908FE-6B10-41BF-ADE2-1639CAC1340E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FA34903A-9D38-46FF-B702-D6BEECA96031"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"39753912-8A2D-49B0-B90B-43DAF723B34A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"11FF206A-8E96-40A2-9687-E0C4F00F020F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"EA580B9B-F975-4667-9ECC-703E2B16D24C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:dbus:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"90BDF532-871B-4A0B-B536-038545C2339C"}]}]}],"references":[{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=17803","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32127","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35810","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/16/13","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31602","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50385","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10308","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/799-1/","source":"secalert@redhat.com"},{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=17803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freedesktop.org/wiki/Software/dbus#head-dad0dab297a44f1d7a3b1259cfc06b583fd6a88a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/16/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/799-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1190","sourceIdentifier":"secalert@redhat.com","published":"2009-04-27T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540."},{"lang":"es","value":"Una vulnerabilidad de complejidad algorítmica  en el método java.util.regex.Pattern.compile en Sun Java Development Kit (JDK) antes de la versión 1.6, cuando se utiliza con spring.jar en la plataforma SpringSource Spring Framework v1.1.0 a la v2.5.6 y v3.0.0.M1 a y v3.0.0.M2 y dm Server v1.0.0 a v1.0.2, permite a atacantes remotos provocar una denegación de servicio (mediante un excesivo consumo de CPU) a través de datos serializables con una cadena regex demasiado larga que almacene multiples grupos opcionales. Vulnerabilidad relacionada con la CVE-2004-2540."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_22:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"B2BAB703-E024-42CE-B6DF-605A54BF4749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C4C1D605-1FE9-4F1A-A374-CC342CD7310C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AEBE2903-9C4E-4BBD-AC12-2408BAF42ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.6:update7:*:*:*:*:*:*","matchCriteriaId":"8722DCD3-C7CB-4D79-808E-FBC1E27A0ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.7b:*:*:*:*:*:*:*","matchCriteriaId":"4E48A0E7-9956-4187-952D-4D4DD2F28099"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.7b:update5:*:*:*:*:*:*","matchCriteriaId":"8A64F606-A1A8-4ABE-9249-0F3D3D02A182"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update10:*:*:*:*:*:*","matchCriteriaId":"F16BAE28-B7F1-496F-98AC-43DCA387FA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update13:*:*:*:*:*:*","matchCriteriaId":"2F99B49A-5A04-4EC8-ABD7-1BEAF620C0DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update14:*:*:*:*:*:*","matchCriteriaId":"E58C529E-0D46-46A2-A6F3-894ECB215A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update2:*:*:*:*:*:*","matchCriteriaId":"C5D8520B-8B24-444F-A47B-ED0733859954"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update7:*:*:*:*:*:*","matchCriteriaId":"D6A18370-9054-48F5-8766-D4A15F3A67C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update8:*:*:*:*:*:*","matchCriteriaId":"4053D51D-57A9-495F-9B8D-0076661283EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF39BD92-7733-4408-A907-D292D973D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"07425A23-5BF3-441E-B47A-395BE402B2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.1:update3:*:*:*:*:*:*","matchCriteriaId":"38A647E6-2BC2-4E71-96FB-7CA457484CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2:update4:*:*:*:*:*:*","matchCriteriaId":"5B791B1F-D6AA-451D-A415-C2C9BE44865A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2:update5:*:*:*:*:*:*","matchCriteriaId":"A4D34197-1500-47C7-848D-676F7592BCD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1AA4DE59-4CF5-49F4-8625-0F3DA2DB7020"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_01:*:*:*:*:*:*:*","matchCriteriaId":"4BC733B9-1694-44E3-BF58-34BABBA4E08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_02:*:*:*:*:*:*:*","matchCriteriaId":"991AEC76-0494-4085-9427-52D8BDD75753"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_03:*:*:*:*:*:*:*","matchCriteriaId":"12763342-3D3A-4744-941D-4DFD33F79515"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_04:*:*:*:*:*:*:*","matchCriteriaId":"D3E28D80-D908-4F17-BF3D-62C970A4D54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_05:*:*:*:*:*:*:*","matchCriteriaId":"F0D8BC0C-13B8-472D-A077-F2039A637326"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"15AAA894-90A8-4B08-A392-5CB36ABE6F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1:update19:*:*:*:*:*:*","matchCriteriaId":"910AF14C-1993-4740-AE6D-77B55B52AC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1:update20:*:*:*:*:*:*","matchCriteriaId":"8C924560-0EF5-4BC0-8614-2DD5616E076A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"C09F9315-CE9E-4F20-9E8A-597896057A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"88DB55B2-7D7F-4EB8-8E29-7D15F735A286"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"38CDFAD5-389F-4F08-AF24-5D8782E86225"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"EE962961-9E1D-4164-A11A-0CA6DC4FFBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"6E8244F8-C212-420B-BB12-F58B84B64335"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"1E7BB67D-0D40-4C92-8005-C1F876629304"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"926B3423-5AB8-4A7C-A83E-5C363A783AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"8F623253-2FF5-4398-AF23-A56F06008301"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"A4EE7212-2AF1-4D10-826B-3B6EDDDA6DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"9B5A02FE-614B-4B8C-AB9A-57F5C32B36A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"4E781B3C-EA57-4CA6-9F03-117C52552AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"1227F19E-5A69-422F-A2E1-5280B1836C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"18FE8DE3-A93A-4884-9131-84715C776545"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"BA3D41B2-05C4-4EB5-9124-FFC887A010F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"95E09BF6-A2E4-49F3-9E8C-3C7EB5FE782B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"BB23A52B-0F6E-4570-9B72-0D07CF26D536"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"B0E1566F-1257-428F-8DA9-29DB0DF5D647"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"A84080AF-E076-40FD-BDEB-727AAE986AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"6FD02135-C3C2-4FCC-A85C-353CD321B97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"10ACCA84-F469-401B-A68F-0281E5C2D46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"03B1DA4B-CE36-4828-B10F-8A854CCB368E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"55B201EA-49A8-407A-9893-B3988C936D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"DD65ECF9-5495-4F69-B566-C1657473F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"671EF738-7846-40A0-B070-649F637782F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"7714D90D-1BF0-4388-B086-17C6D1BC9D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"D54C9BE0-9009-41F6-B07F-855358EE5141"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_26:*:*:*:*:*:*:*","matchCriteriaId":"9C144EF3-5228-4338-921E-547902CC6F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_27:*:*:*:*:*:*:*","matchCriteriaId":"4F9F5541-983B-42E3-AA7A-988028303B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.1_28:*:*:*:*:*:*:*","matchCriteriaId":"0B63DC45-DDDB-4D93-81BC-16893FFF558C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"20C9C594-3DBC-4706-BA88-A662CD28C830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_01:*:*:*:*:*:*:*","matchCriteriaId":"01E34550-4CA8-4AF1-81CA-BBD5AC53BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_02:*:*:*:*:*:*:*","matchCriteriaId":"A5AE3D20-565C-4438-A6B6-8FD87511BD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_03:*:*:*:*:*:*:*","matchCriteriaId":"73966143-616D-4CB7-80A9-3CB3F1F455D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_04:*:*:*:*:*:*:*","matchCriteriaId":"BF742B38-8C5E-4F17-8C75-23A8C61BDB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"811DEBE9-356B-4D60-8BE8-AE55CE484D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_01:*:*:*:*:*:*:*","matchCriteriaId":"02F2D988-DFAE-420E-B7BB-440746F4AB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_02:*:*:*:*:*:*:*","matchCriteriaId":"5CEF4A09-4520-422F-8766-AD0D00832BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_03:*:*:*:*:*:*:*","matchCriteriaId":"6E06A6F0-9F90-4BCD-A736-0A521E565C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_04:*:*:*:*:*:*:*","matchCriteriaId":"C1032FEB-9948-4501-AB70-94DFBEFD204D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_05:*:*:*:*:*:*:*","matchCriteriaId":"5BA27821-FAB3-40E2-8D94-F3B5DFB0714B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_06:*:*:*:*:*:*:*","matchCriteriaId":"0F27CFAE-F807-4643-BAC3-1A6486DE3D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_07:*:*:*:*:*:*:*","matchCriteriaId":"4EBF7DA4-B357-4507-8BBE-7AE21CB6CE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F9E5ACCC-F82F-42F8-860A-92765D0F0B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"FA9CA652-9B8C-4175-9ED8-71F441ADF962"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"93B973CB-25CE-4CA4-A4F8-577ED9ACEFEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"00F66ED4-F74A-4F61-B01C-122DC98D5324"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"7321A75D-AC6E-486E-8911-AF66A992C8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"D70B8B14-B4A2-4D05-B999-E2840A2365E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"C3EDC5EB-2E48-462E-BA0B-217BC470DFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"FA1D44C4-E43A-4D63-A5C9-76E885D3B436"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"52E30E1D-2766-4E79-B9C7-7B998E23A49F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"1E9872BC-5A24-4855-8D01-4C43BBF5C265"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"E94D13A6-E832-4BDF-8AF2-A4E0EF7DCBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"9E5EFE8C-B098-460C-AFE5-C5A938599F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"040AD56D-A0B7-4AF7-AF3D-4B4BD802516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"3F0F7DF1-E117-4FD4-9A63-D05747727D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"D63DF43C-4781-4E0F-89C4-0BFC841A0488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"6D29842F-2185-46C5-8091-23ECB06CB680"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"1FF285D8-6E75-4932-A28B-639DA07F1124"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"817C3737-F625-4EE9-BB5C-D4B624EF0DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"3A152C0A-65CE-438D-8B53-32D1EFC019F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"BA8DEFA1-AAA4-4AA2-859F-257B9B4D2B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*","matchCriteriaId":"5C4DFCD2-00A3-4BC7-8842-836CE22C7B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*","matchCriteriaId":"EB3A0C49-3FF9-4CB7-9E01-F771D4925103"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*","matchCriteriaId":"F7D1BBD4-2F88-4372-B863-BB70753D841B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*","matchCriteriaId":"9A75A4C0-6B49-424B-BEC0-0E0AAEF877B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*","matchCriteriaId":"0DF9EC3A-E40C-415B-8BF3-40D3C474AF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0_03:*:windows:*:*:*:*:*","matchCriteriaId":"937EEE89-443C-4435-9064-EE228B3CEBD9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:dm_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D95E4679-D525-4E6A-921F-9CE1C7E1EE09"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:dm_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A8C3A93-F837-4595-8A4D-F53CA97AC7E4"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:dm_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"27410ECF-4E3D-40B2-86A6-6A4BAA9E9C82"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"12B16A98-BB2E-4F5B-AE14-F84B6A879097"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1274AB42-FE68-4EF5-B11F-6343685A7747"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:m1:*:*:*:*:*:*","matchCriteriaId":"E88635C7-2305-41F6-9BD9-8E945F524C12"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:m2:*:*:*:*:*:*","matchCriteriaId":"2DD492C8-A0EF-44E8-AC9F-56F8F64C99A4"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:m3:*:*:*:*:*:*","matchCriteriaId":"C419AC44-21A5-456C-B537-B8BAF475BCF3"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:m4:*:*:*:*:*:*","matchCriteriaId":"EFAAE3B9-C62E-47F6-A23D-1024E5870B7E"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:m5:*:*:*:*:*:*","matchCriteriaId":"DA630C68-21E8-4F2A-8044-5DAF3CA3CC37"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"012985DE-5D39-470C-8E51-5AFCED594FB9"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"94639F24-EEF4-4AA3-83F4-6C86A3286E5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"6649C191-78C3-403F-BEAF-741AF9FF2893"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6A4E6F8A-44B0-4982-9D52-96E8C85D9CFF"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56CC4457-E99A-4AAF-B9FA-E4852E4E1967"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C0474C87-8CC6-4E71-B350-3A4AA7CF452D"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5049E640-145C-4338-B25C-7AA82A67FA0C"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CCDB933A-AED3-4A0B-9911-CBBF0B9E91B6"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58F22748-6F62-495A-96F5-694E5E1EBCB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.1:m1:*:*:*:*:*:*","matchCriteriaId":"030CC42C-8582-4B71-B93E-9D7AE5D2EBF9"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.1:m2:*:*:*:*:*:*","matchCriteriaId":"629C79A0-0233-4750-9A43-F98C97BBA47D"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.1:m3:*:*:*:*:*:*","matchCriteriaId":"AB6958CD-61D4-41ED-A16A-2B74E17AD501"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.1:m4:*:*:*:*:*:*","matchCriteriaId":"AC4E5B16-5012-44CD-9719-ADDAACF4FBAE"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5ECA0EF4-6BEA-4464-B098-37C0342AEDDF"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F45DF1E8-2BB9-45A6-96C4-406C81827E68"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"FFE1B570-A480-46AD-A8AE-E984824CF6BE"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B4DDA5A7-62A4-471A-9B01-D54CF560BF56"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B977B334-EC1A-45BD-976D-3DF3332ADA90"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6DC37B55-E7DF-4426-B1E2-2644078EDD19"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A939B963-7C6C-4617-A695-A9CC4FC774EE"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"BB2D44CB-BBBF-45DE-B3C9-2BD2625BC8E7"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F709DAAC-AA32-4D37-9E0C-A014FB519697"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:3.0.0:m1:*:*:*:*:*:*","matchCriteriaId":"13E1344C-CB41-48FC-BB98-7FEBEBF190E9"},{"vulnerable":false,"criteria":"cpe:2.3:a:springsource:spring_framework:3.0.0:m2:*:*:*:*:*:*","matchCriteriaId":"AD66E687-C387-486D-AC34-279961311A8F"}]}]}],"references":[{"url":"http://secunia.com/advisories/34892","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502926/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.springsource.com/securityadvisory","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497161","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50083","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502926/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.springsource.com/securityadvisory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1191","sourceIdentifier":"secalert@redhat.com","published":"2009-04-23T17:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request."},{"lang":"es","value":"mod_proxy_ajp.c en el módulo mod_proxy_ajp en el servidor HTTP Apache v2.2.11 permite a atacantes remotos obtener datos de respuesta sensibles, lo que esta previsto para un cliente que envío una petición POST temprana sin cuerpo de petición, a través de una petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"B1CF6394-95D9-42AF-A442-385EFF9CEFE1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://osvdb.org/53921","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34827","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35395","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35721","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:102","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34663","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022264","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1147","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50059","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=46949","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8261","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://osvdb.org/53921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=766938&r2=767089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.apache.org/dist/httpd/patches/apply_to_2.2.11/PR46949.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=46949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1192","sourceIdentifier":"secalert@redhat.com","published":"2009-04-24T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages."},{"lang":"es","value":"drivers/char/agp/generic.c en el subsistema en el kernel de Linux antes de v2.6.30-rc3 no vacía páginas que más tarde pueden estar disponibles para un proceso del espacio de usuario, lo que permite a usuarios locales obtener información sensible mediante la lectura estas páginas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.6.30","matchCriteriaId":"860DCD8A-7E14-4DE9-9CAA-993AF91BBD5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*","matchCriteriaId":"0D5FC0A9-A78A-4D09-BDCC-208AFC899824"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*","matchCriteriaId":"7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*","matchCriteriaId":"54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2009/04/22/2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34981","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35011","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35120","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35121","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35343","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35656","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37351","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34673","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497020","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10567","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/04/22/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1194","sourceIdentifier":"secalert@redhat.com","published":"2009-05-11T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox."},{"lang":"es","value":"Un desbordamiento de entero en la función pango_glyph_string_set_size en pango/glyphstring.c en Pango antes de la versión v1.24 permite causar una denegación de servicio (mediante caída de la aplicación) a atacantes dependientes del contexto y posiblemente también ejecutar código arbitrario a través de una cadena glifo demasiado larga que desencadena un desbordamiento de búfer basado en montículo, como se ha demostrado por un valor document.location demasiado largo en Firefox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:*:*:*:*:*:*:*:*","versionEndIncluding":"1.22","matchCriteriaId":"A8B42FA2-C5FA-4F4B-8542-889AEF8BD855"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0A419445-E8C0-4BC1-A592-9B63FCC8354C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.4:*:*:*:*:*:*:*","matchCriteriaId":"31EA2429-07F7-4569-9D4D-0397BD2708BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.6:*:*:*:*:*:*:*","matchCriteriaId":"4F64E49C-25CF-4C59-AD1A-AA804AA1D746"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.8:*:*:*:*:*:*:*","matchCriteriaId":"F5C554F1-F4B7-47C3-B6E0-8822B205B79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.10:*:*:*:*:*:*:*","matchCriteriaId":"AE0ECCE2-76E8-4A4B-A6CA-EEC45E3D7403"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.12:*:*:*:*:*:*:*","matchCriteriaId":"C6322FCB-DC34-4C4B-A8AE-9983927F6B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.14:*:*:*:*:*:*:*","matchCriteriaId":"85CB58A0-A452-40EE-818F-A56723BBBF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.16:*:*:*:*:*:*:*","matchCriteriaId":"30BA57EA-8702-4247-8A75-DB5D2AD18F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.18:*:*:*:*:*:*:*","matchCriteriaId":"4F73FC80-FB3C-4AEA-BB27-961CD378B1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.20:*:*:*:*:*:*:*","matchCriteriaId":"B78E87B1-4879-42AE-9B98-9AA176C8ECC7"}]}]}],"references":[{"url":"http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/54279","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35018","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35027","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35038","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1798","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-36.html","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2009-001.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/07/1","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0476.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/503349/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34870","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022196","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-773-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1269","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=480134","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496887","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50397","source":"secalert@redhat.com"},{"url":"https://launchpad.net/bugs/cve/2009-1194","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10137","source":"secalert@redhat.com"},{"url":"http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-36.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0476.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503349/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-773-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=480134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1195","sourceIdentifier":"secalert@redhat.com","published":"2009-05-28T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file."},{"lang":"es","value":"El Servidor HTTP de Apache v2.2.11 y anteriores a versiones 2.2 no maneja adecuadamente Options=IncludesNOEXEC en la directiva AllowOverride, lo que permite a usuarios locales obtener privilegios configurando (1) Options Includes, (2) Options +Includes, o (3) Options +IncludesNOEXEC en un fichero .htaccess, y después insertar un elemento exec en un fichero .shtml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"67AD11FB-529C-404E-A13B-284F145322B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"733D62FE-180A-4AE8-9DBF-DA1DC18C1932"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CCBBB7FE-35FC-4515-8393-5145339FCE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F519633F-AB68-495A-B85E-FD41F9F752CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A894BED6-C97D-4DA4-A13D-9CB2B3306BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5D5B52AA-B059-47D1-87CD-D2F002387FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"9AF3A0F5-4E5C-4278-9927-1F94F25CCAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AB63EBE5-CF14-491E-ABA5-67116DFE3E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8C2A33DE-F55F-4FD8-BB00-9C1E006CA65C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/54733","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35261","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35264","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35395","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35453","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=772997","source":"secalert@redhat.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0142","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1075.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1156.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507852/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507857/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35115","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022296","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1444","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=489436","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50808","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11094","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12377","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8704","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/54733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=772997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507852/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507857/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=489436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1196","sourceIdentifier":"secalert@redhat.com","published":"2009-06-09T17:30:10.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a \"pointer use-after-delete flaw.\""},{"lang":"es","value":"La funcionalidad directory-services en el planificador (scheduler) en CUPS v1.1.17 y v1.1.22 permite a atacantes remotos provocar una denegación de servicio (parada o caída del demonio cupsd) mediante la manipulación de la cadencia de los paquetes de navegación CUPS, en relación con el problema de punteros \"uso después de borrado\" (\"pointer use-after-delete flaw\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"8335D4E3-563D-4288-B708-A9635BCA595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"96592A93-4967-4B91-BCF7-558DC472E7BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35340","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022327","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1083.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35194","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1488","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497135","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50944","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1201","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694."},{"lang":"es","value":"Vulnerabilidad de inyección \"Eval\" en la función csco_wrap_js en /+CSCOL+/cte.js en WebVPN en los dispositivos Cisco Adaptive Security Appliances (ASA) con software 8.0(4), 8.1.2, y 8.2.1, permite a atacantes remotos eludir un envoltorio (wrapper) DOM y realizar  ataques de secuencias de comandos en sitios cruzados (XSS) configurando el valor CSCO_WebVPN['process'] con el nombre de la función modificada, alias Bug ID CSCsy80694."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"98CBFBF5-966C-48E8-BAFB-DED4E58098F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"13BC5744-8EB0-4BE3-A743-E95BCD6E2CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7853F676-A9A4-4980-B698-19C60F4DD71F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7D80DB80-F243-469B-993F-E368B092B3C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/35511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504516/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35476","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022457","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1713","source":"cve@mitre.org"},{"url":"https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504516/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1202","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705."},{"lang":"es","value":"WebVPN en los dispositivos Cisco Adaptive Security Appliances (ASA) con software 8.0(4), 8.1.2, y 8.2.1 permite a atacantes remotos eludir ciertos mecanismos de protección que impliquen la reescritura de URL y HTML y realizar ataques de secuencias de comandos en sitios cruzados (XSS) modificando el primer carácter codificado hexadecimal en una URI /+CSCO+, alias Bug ID CSCsy80705."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"98CBFBF5-966C-48E8-BAFB-DED4E58098F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"13BC5744-8EB0-4BE3-A743-E95BCD6E2CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7853F676-A9A4-4980-B698-19C60F4DD71F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7D80DB80-F243-469B-993F-E368B092B3C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/35511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504516/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35480","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022457","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504516/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1203","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709."},{"lang":"es","value":"WebVPN en los dispositivos Cisco Adaptive Security Appliances (ASA) con software 8.0(4), 8.1.2, y 8.2.1 no distingue de manera apropiada su propia pantalla de login de las pantallas de login que produce para servidores (1) FTP and (2) CIFS de terceros, lo que facilita a atacantes remotos engañar a un usuario enviándole credenciales WebVPN para un servidor de su elección mediante una URL asociada con este servidor, alias Bug ID CSCsy80709."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"98CBFBF5-966C-48E8-BAFB-DED4E58098F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"13BC5744-8EB0-4BE3-A743-E95BCD6E2CC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7853F676-A9A4-4980-B698-19C60F4DD71F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7D80DB80-F243-469B-993F-E368B092B3C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/35511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504516/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35475","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022457","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504516/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1204","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, and (4) tiki-orphan_pages.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en TikiWiki (Tiki) CMS/Groupware v2.2 permite a atacantes remotos inyectar web script o HTML a través de la parte PHP_SELF de una URI de (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, y (4) tiki-orphan_pages.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A5160514-D8C3-458A-B3A6-24CD4FB96BD2"}]}]}],"references":[{"url":"http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=51","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/501702/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34105","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34106","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34107","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://info.tikiwiki.org/tiki-read_article.php?articleId=51","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/501702/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1205","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.297","lastModified":"2023-11-07T02:03:51.273","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-4475.  Reason: This candidate is a duplicate of CVE-2007-4475.  Notes: All CVE users should reference CVE-2007-4475 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-1206","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in futomi's CGI Cafe Access Analyzer CGI Professional Version 4.11.5 and earlier allows remote attackers to gain administrative privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en futomi's CGI Cafe Access Analyzer CGI Professional Version v4.11.5 y anteriroes, permite a atacantes remotos obtener privilegios de administrador a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.9","matchCriteriaId":"8CBEE32F-8BF8-4140-B593-CAA1FE0D7C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.10","matchCriteriaId":"970A9B75-0F76-4169-8BFB-CFB01066B336"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.10.1","matchCriteriaId":"91DAA5BF-E021-4574-B405-E790D68595B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.10.2","matchCriteriaId":"E30ECDFB-E285-4EC3-A6E6-039E7E631280"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.10.3","matchCriteriaId":"20FECDCD-9DEC-4A35-B064-0CAE63A40C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.10.4","matchCriteriaId":"BB71FBCF-8684-4223-A569-266BB22B8775"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.10.5","matchCriteriaId":"3A315ABE-B665-41EC-A033-2CAAF6A2ACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.11.0","matchCriteriaId":"042989AC-85A8-477A-90B0-05F04315BA96"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.11.1","matchCriteriaId":"AB1D34F7-4456-43F1-87DF-C02D6AEBC955"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.11.2","matchCriteriaId":"C7E17260-2D0C-4A77-AB25-69648BD97839"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.11.3","matchCriteriaId":"341B90EC-4E75-448C-9FC3-C2132A00B31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.11.4","matchCriteriaId":"C8BF7F88-1C96-49F2-B502-15FFD3804E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:futomi:cgi_cafe_access_analyzer_cgi:*:pro:*:*:*:*:*:*","versionEndIncluding":"4.11.5","matchCriteriaId":"34238598-9C96-4FEF-B9EF-EA630663C6F4"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN63511247/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000016.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.futomi.com/library/info/2009/20090331.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34315","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0888","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49525","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN63511247/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.futomi.com/library/info/2009/20090331.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1207","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files."},{"lang":"es","value":"Condición Race en la secuencia de comandos en  Sun Solaris v8 hasta v10, y OpenSolaris snv_01 hasta snv_111, permite a los usuario locales sobrescribir arbitrariamente archivos, probablemente involucra un ataque de enlace simbólico en archivos temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/34558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34813","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34316","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49526","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6183","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1208","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en auth2db v0.2.5 y posiblemente otras versiones anteriores a la v0.2.7, emplea la función addslashes en vez de mysql_real_escape_string, lo que permite a atacantes remotos llevar a cabo ataques de inyección SQL usando codificaciones de caracteres multibyte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7ADBE959-5BD2-4F1C-B661-B7CFFFB7AA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D75A90F6-62CF-41C3-A8ED-D9B1F2B0E8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C892EC6A-A4BB-4985-AD36-1B3109649130"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0F874A8E-890E-43E3-A2B1-6405541D9960"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"44B108BC-10AE-486A-A609-2E96DB094557"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"96EE7BE6-882D-4B2A-AB7B-4C3C9F79A836"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F8B5F172-9E20-49E8-A337-85C46F85CBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"576B8177-220D-4D9B-A7B9-F6972751D0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"743F3844-D07B-4031-BC79-9723FB1EE7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9364AFFB-1718-4C7B-A2F0-826883E53D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"67ACADB2-A81D-4617-9039-6DD7C5DC4B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"06E6DEC0-36A5-4A4B-BD55-11538713EA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EFCB393B-EFAD-4C01-B43B-738E73B5842F"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"85462ABB-BCBB-4528-962A-FB4CF44D961A"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"70D14ACC-ECEE-4CB7-B7E8-D4565DD46D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2db:auth2db:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"9A1842BC-FF1E-4AEC-8B48-B15FF888CAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:auth2dbauth2db:0.1.1:*:*:*:*:*:*:*:*","matchCriteriaId":"50EB40E3-1A47-4A0E-BF48-E33D0D64F49B"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.auth2db.com.ar/?title=CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1757","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34287","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49518","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.auth2db.com.ar/?title=CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1209","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Navegador Web Amaya W3C v11.1, permite a atacantes remotos ejecutar código de su elección a través de una etiqueta de secuencias de comandos con un atributo defer largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3:amaya:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82185BDB-DB66-4C49-9F4C-E9E88467443A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34531","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0889","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8321","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1210","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato en el disector PROFINET/DCP (PN-DCP) en Wireshark versión 1.0.6 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de un paquete PN-DCP con especificadores de cadena de formato en el nombre station. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"9FDDCBF7-AD49-4A8B-AEE8-27CF79A2B2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"DA052598-2E72-4568-B783-8B01382736DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3283D8D0-0714-48CC-94C4-B5FA6C913A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"090B987C-9880-4221-BC4C-8D53A8801649"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"06828062-5F31-4532-9E24-34F29CE30218"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"5738F4F0-41C6-48CF-8233-C94D79DCA807"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34970","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35133","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1785","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:088","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34291","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49512","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8308","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1211","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header."},{"lang":"es","value":"Blue Coat ProxySG, cuando el modo de interceptación transparente está activado, usa la cabecera HTTP Host para determinar el \"endpoint\" (punto de finalización) remoto, lo que permite a atacantes remotos evitar los controles de acceso por Flash, Java, Silverlight y probablemente otras tecnologías, y posiblemente comunicarse con sitios de la intranet restringidos, a través de una página web manipulada que provoca que el cliente envíe peticiones HTTP con una cabecera Host modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluecoat:proxysg_va-10:*:*:*:*:*:*:*:*","matchCriteriaId":"52A8FDA3-E3E4-407D-9FB3-091A59EA50D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluecoat:proxysg_va-15:*:*:*:*:*:*:*:*","matchCriteriaId":"124C54BF-B511-47FF-96A4-7B2DCDDDA2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluecoat:proxysg_va-20:*:*:*:*:*:*:*:*","matchCriteriaId":"A95C5F84-3FDE-441A-9DF3-CAAEFBFF9A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:bluecoat:proxysg_va-5:*:*:*:*:*:*:*:*","matchCriteriaId":"8C59FA09-5E58-4741-B591-FA71C5E95AC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"9E11536F-7CFA-41C8-9826-945B6D3606A9"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"C162E145-9C08-4763-A5E4-0D383B18380A"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"3E2D3EE0-8C28-4338-BB55-3942868AEBD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"2A8518E8-575C-42E4-844E-479448E0358A"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"650EF456-4DF5-42B4-BEC5-76F351461DAD"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"41104737-2E55-47DE-B29F-F88B07956601"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"64AC1648-94E7-4C2F-8D28-906DD3C9E9C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"B3ABD5B1-3CD8-4361-9933-A99C5BCAEC53"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"A63F6BE1-3705-41F8-83F2-14262C1A8513"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"33C50C6D-42FD-47E2-811D-69673144601B"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"6F61A3FE-A7A2-42B8-BE15-A5904F68C2EB"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"053096B7-C691-430B-8EAF-FF8DF0ED3626"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg510-5:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"3CC9C212-03B8-4D1D-8E66-1CAE9066D3A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"844E3782-018D-4CBB-B4E1-B60D713851D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"3711A175-0F97-4B8D-991B-EE05C6927D35"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"25BA7C9D-3E26-4F1B-9C8A-DF864D3F8F91"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"DFC4B7BB-804A-4628-9829-369A37BB7C33"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"147F05C5-8148-4448-9A27-6A8093E4D501"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"DB590391-1E89-4585-95B7-C77C3FA127C8"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg810-5:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"066A03FA-CEDF-4C8A-A445-521C9E6E954E"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"E9858A0D-3368-407A-8438-14EB8BA0F096"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"EAF352C1-3CA1-4CE4-9067-9819BA327F6F"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"A3EB21AA-B393-42F6-8945-E8EF1EF81C1C"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"A2A29D44-8A16-4F5A-9907-85D1F0EC13CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:*:*:*:*:*","matchCriteriaId":"2EDF8810-4C81-49E8-B4AA-2B87B5D6C953"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:*:*:*:*:*","matchCriteriaId":"A5259AF1-EBB5-4083-BF78-2DB7C075E298"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1021781","source":"cve@mitre.org"},{"url":"https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1021781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in_transparent_deployments","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1212","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datamatrix) allow remote attackers to overwrite arbitrary files via the (1) SaveBarCode and (2) SaveEnhWMF methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en PRECIS~2.DLL en el control ActiveX PrecisionID Datamatrix (DMATRIXLib.Datamatrix) permite a atacantes remotos sobreescribir ficheros de su elección mediante los métodos (1) SaveBarCode y (2) SaveEnhWMF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:precisionid:data_matrix_barcode_activex_control:-:*:*:*:*:*:*:*","matchCriteriaId":"D220327C-9153-43D6-A21F-27942DE23BE0"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/DSECRG-09-030.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502319/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34322","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8332","source":"cve@mitre.org"},{"url":"http://dsecrg.com/pages/vul/DSECRG-09-030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502319/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1213","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en attachment.cgi de Bugzilla v3.2 anterior a v3.2.3, v3.3 anterior a v3.3.4 y versiones anteriores, permiten a atacantes remotos secuestrar la autenticación de usuarios aleatorios de solicitudes que utilizan la edición de adjuntos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"170EB43B-9488-4E25-9401-B84DE838247B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:rc2:*:*:*:*:*:*","matchCriteriaId":"B1ED7682-A315-4F92-9F9F-38290BCC058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"14B5A433-526F-436E-9FCD-B71E661180FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"48EDC5BC-AD4B-4E67-B79C-F44292307AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3:*:*:*:*:*:*:*","matchCriteriaId":"BEB4EF1D-D4D0-40DA-BE78-24FD48030EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF288A74-070E-4EB4-BB92-7D4D41635DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5B8B31F0-6FCC-4258-865B-B65ECBFAF252"}]}]}],"references":[{"url":"http://secunia.com/advisories/34545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34624","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security/3.2.2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34308","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0887","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=476603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49524","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00188.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00191.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security/3.2.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=476603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00191.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1214","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information."},{"lang":"es","value":"GNU Screen v4.0.3, crea el archivo temporal /tmp/screen-exchange con permisos de lectura, lo que permite a usuarios locales obtener información sensible."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  Affected file is supposed to be used to exchange information between local system users, therefore open permissions are intentional.","lastModified":"2009-04-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:screen:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AFF73BAA-7734-46E6-9F9C-0A5AF3E5E365"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123","source":"cve@mitre.org"},{"url":"http://savannah.gnu.org/bugs/?25296","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34521","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492104","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49886","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://savannah.gnu.org/bugs/?25296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1215","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T10:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file."},{"lang":"es","value":"Condición de carrera en GNU screen v4.0.3, permite a usuarios locales crear y sobreescribir archivos de su elección a través de un ataque de enlace simbólico al archivo temporal /tmp/screen-exchange."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  The checks implemented by screen to protect against race condition attacks on /tmp/screen-exchange file provide sufficient protection for this rarely-used buffer exchange feature.  For more details, see https://bugzilla.redhat.com/show_bug.cgi?id=492104","lastModified":"2009-04-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnu_screen:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"49FAB4AC-93A3-4733-8DE3-0CD96D25D8FB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123","source":"cve@mitre.org"},{"url":"http://savannah.gnu.org/bugs/?25296","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34521","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492104","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49887","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://savannah.gnu.org/bugs/?25296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/03/25/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1216","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T18:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en (1) unlzh.c y (2) unpack.c en las librerías gzip en Microsoft Windows Server 2008, Windows Services para UNIX 3.0 y 3.5, y el subsistema para UNIX-based Applications (SUA); como lo utilizado en gunzip, gzip, pack, pcat, y unpack 7.x versiones anteriores a 7.0.1701.48, 8.x versiones anteriores a 8.0.1969.62, y 9.x versiones anteriores a 9.0.3790.2076; permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:subsystem_for_unix-based_applications:*:*:*:*:*:*:*:*","matchCriteriaId":"57DB32FA-500C-4B3F-945E-ED9293F4C214"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_services_for_unix:3.0:-:std:*:*:*:*:*","matchCriteriaId":"797D9EB7-A39A-4A36-B7C0-789BD2B2E031"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_services_for_unix:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BAD55F3F-C961-4E84-AC69-188306ADDE4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"8FF0D88B-821D-4E45-A2EC-5279B9190356"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*","matchCriteriaId":"F0257B7A-A8D1-4AC9-98C8-324B5B810877"}]}]}],"references":[{"url":"http://secunia.com/advisories/34428","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021937","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/953602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34258","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49435","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/kb/953602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1217","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T18:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the \"Microsoft GdiPlus EMF GpFont.SetData integer overflow.\""},{"lang":"es","value":"Error Off-by-one en la función GpFont::SetData en gdiplus.dll en Microsoft GDI+ en Windows XP permite a atacantes remotos provocar una denegación de servicio (corrupción de pila y terminación de la aplicación) a través de un fichero EMF manipulado que dispara un desbordamiento de entero, como lo demostrado por voltage-exploit.emf, también conocido como el \"desbordamiento de entero Microsoft GdiPlus EMF GpFont.SetData\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:gdi\\+:-:*:*:*:*:*:*:*","matchCriteriaId":"C061A827-8040-4224-8E3A-C14953012763"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://blogs.technet.com/srd/archive/2009/03/26/new-emf-gdiplus-dll-crash-not-exploitable-for-code-execution.aspx","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34250","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49438","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bl4cksecurity.blogspot.com/2009/03/microsoft-gdiplus-emf-gpfontsetdata.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://blogs.technet.com/srd/archive/2009/03/26/new-emf-gdiplus-dll-crash-not-exploitable-for-code-execution.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1218","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Sun Calendar Express Web Server en Sun ONE Calendar Server 6.0 y Sun Java System Calendar Server 6 2004Q2 hasta 6.3-7.01 permite a atacantes remotos inyectar web script o HTML de su elección a través de (1) el parámetro \"fmt-out\" de login.wcap o (2) el parámetro \"date\" de command.shtml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*","matchCriteriaId":"1C2387AF-026B-423B-A396-55034DC984A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*","matchCriteriaId":"E54204FF-DAA2-4D25-91CA-78DC271C35BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*","matchCriteriaId":"E04C0F4E-6825-4EED-994F-4FACCABD4670"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*","matchCriteriaId":"65EA6495-81BA-4124-82AB-C81AB94E2F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*","matchCriteriaId":"382FDFCA-95D8-4A57-8114-B7B3C939DD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*","matchCriteriaId":"DF8C61E6-7EF3-4069-8335-1D11B86B31D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*","matchCriteriaId":"4E60435B-947E-4579-B4D5-3BB3A858D8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*","matchCriteriaId":"D377C48F-4513-467B-8514-5F7F27071A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*","matchCriteriaId":"1B17A5EA-6081-4229-B792-5EE18458BB9A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020321.1-1","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/sun-calendar-express","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502320/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34153","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0905","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020321.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/sun-calendar-express","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502320/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1219","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter."},{"lang":"es","value":"Sun Calendar Express Web Server en Sun ONE Calendar Server v6.0 y Sun Java System Calendar Server 6 2004Q2 hasta 6.3-7.01 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de múltiples peticiones de la URI por defecto con caracteres alfabéticos en el parámetro \"tzid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:-:sparc:*:*:*:*:*","matchCriteriaId":"1C2387AF-026B-423B-A396-55034DC984A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:-:sparc:*:*:*:*:*","matchCriteriaId":"E54204FF-DAA2-4D25-91CA-78DC271C35BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:-:sparc:*:*:*:*:*","matchCriteriaId":"E04C0F4E-6825-4EED-994F-4FACCABD4670"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:-:x86:*:*:*:*:*","matchCriteriaId":"65EA6495-81BA-4124-82AB-C81AB94E2F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:-:x86:*:*:*:*:*","matchCriteriaId":"382FDFCA-95D8-4A57-8114-B7B3C939DD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:-:x86:*:*:*:*:*","matchCriteriaId":"DF8C61E6-7EF3-4069-8335-1D11B86B31D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6:-:linux:*:*:*:*:*","matchCriteriaId":"4E60435B-947E-4579-B4D5-3BB3A858D8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.3:-:linux:*:*:*:*:*","matchCriteriaId":"D377C48F-4513-467B-8514-5F7F27071A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_calendar_server:6.0:-:linux:*:*:*:*:*","matchCriteriaId":"1B17A5EA-6081-4229-B792-5EE18458BB9A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/sun-calendar-express","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502320/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34150","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0905","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255008-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/sun-calendar-express","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502320/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1220","sourceIdentifier":"cve@mitre.org","published":"2009-04-01T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo +webvpn+/index.html en el WebVPN en los Adaptive Security Appliances (ASA) 5520 de Cisco con el software versiones 7.2(4)30 y anteriores a 7.2 incluyendo 7.2(2)22, y versiones 8.0(4)28 y anteriores a 8.0, cuando el modo clientless está habilitado, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del encabezado HTTP Host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:5520:*:*:*:*:*:*:*","matchCriteriaId":"8A2E92E9-6319-47BF-92B3-41D978CEE6D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:7.2\\(2\\)22:*:*:*:*:*:*:*","matchCriteriaId":"92103922-950F-406F-82D7-B637718F7C6B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0478.html","source":"cve@mitre.org"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=17950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502313/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34307","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022122","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1169","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49528","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0478.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=17950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502313/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1222","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the WE_LANGUAGE parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en webEdition v6.0.0.4 y anteriores, cuando register_globals esta activado y magic_quotes desactivado permite a atacantes remotos incluir y ejecutar ficheros de modo arbitrario a través de ..(punto punto) en el parámetro WE_LANGUAGE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webedition:webedition:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19372166-15FF-4004-9A39-F97C13BC18F6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502315/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34323","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49530","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502315/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1223","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb."},{"lang":"es","value":"aspWebCalendar Free Edition almacena información sensible bajo la raíz web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos que contiene las credenciales de usuario a través de una petición directa para calendar/calendar.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fullrevolution:aspwebcalendar:-:-:free:*:*:*:*:*","matchCriteriaId":"76DB632B-5E1D-4D63-AE97-E911ED9F5CEA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/502311/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49885","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502311/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1224","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attackers to execute arbitrary SQL commands via the gameID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en vsp-core/pub/themes/bismarck/gamestat.php en vsp stats processor  v0.45 permite a usuarios remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"game ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scivox:vsp_stats_processor:0.45:*:*:*:*:*:*:*","matchCriteriaId":"DBD2E56E-4262-4078-B48C-573BAD6248DA"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8331","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1225","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Turnkey Ebook Store v1.1 permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través del parámetro \"keywords\" en el momento de realizar una búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:platinumprofitzone:turnkey_ebook_store:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5B7F09CB-20AD-4FDE-B333-20D3433B44A8"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/turnkeyebook-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/turnkeyebook-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1226","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter."},{"lang":"es","value":"core/admin/delete.php en Podcast Generator v1.1 y anteriores no maneja adecuadamente las restricciones de acceso de funciones administrativas, lo que permite a atacantes remotos borrar ficheros de forma arbitraria a través del parámetro \"file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"CB555065-7FFA-45D8-9814-02EE8B45F05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*","matchCriteriaId":"40E1E9E4-8EC1-44E3-94FF-A3F7FC341756"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B51DEDE5-E7B4-44A1-86F0-D71F516AB7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*","matchCriteriaId":"6378A248-F8CE-4A6A-AC72-9DEAFE2AE6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*","matchCriteriaId":"8DF6FD0A-A18C-495A-B9E7-EE188EA1A58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*","matchCriteriaId":"49690E2C-AC1E-40BE-BE91-FAB522A3EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*","matchCriteriaId":"5BB0AED7-B499-440E-A4C1-3589512AFAB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*","matchCriteriaId":"765992EE-077D-4B67-80A3-5E5B664A4920"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*","matchCriteriaId":"5230DAE5-0774-43A7-94ED-A9BDB2AD4D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*","matchCriteriaId":"F571A8D8-5D07-4D6E-8282-75DE3F75E12C"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*","matchCriteriaId":"1A3E9072-8FCE-4E5D-97C4-E7B60DF36207"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*","matchCriteriaId":"D543A430-EFFA-470D-80F3-30016852E4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF53E2AD-1E11-4C55-8CFF-D580BFA63216"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CA26821E-665A-4650-9694-2F83A00D31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"86110300-D592-4079-9561-6CCD9C8CFD94"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"4BC6F118-1C43-4C82-8DCE-BDFD78D6CB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"5B718D31-5746-43A9-AC72-79EF26716A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"41207558-39B2-4B9C-B684-C21C04BB16E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*","matchCriteriaId":"4080859E-FABD-4668-BF6A-32905B3EC49A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34555","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8324","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1227","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor.  Buffer overflow in the PKI Web Service in Check Point Firewall-1 PKI Web Service allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) Authorization or (2) Referer HTTP header to TCP port 18624.  NOTE: the vendor has disputed this issue, stating \"Check Point Security Alert Team has analyzed this report. We've tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. The issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack. We consider this attack to pose no risk to Check Point customers.\"  In addition, the original researcher, whose reliability is unknown as of 20090407, also states that the issue \"was discovered during a pen-test where the client would not allow further analysis."},{"lang":"es","value":"** DISPUTADA ** NOTA: este problema ha sido disputado por el proveedor. desbordamiento de buffer en PKI Web Service en Check Point Firewall-1 PKI Web Service permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de una cabecera larga (1) Authorization o (2) Referer HTTP en el puerto TCP 18624. NOTA: el proveedor ha disputado este problema diciendo que 'el equipo de alertas de seguridad de Check Point ha analizado este informe. hemos intentado reproducir el ataque sobre todas las versiones de VPN-1 desde NG FP2 y más arriba con y sin HFAs. El problema no fue reproducido. Hemos realizado un análisis completo del código relevante y verificado que estamos seguros contra este ataque. Consideramos que este ataque no supone ningún riesgo para los clientes de Check Point.' Además, el investigador original, cuyo nivel de confianza es desconocido desde el 7 de abril del 2009, también dice que el problema 'fue descubierto durante una prueba de penetración (pen-test) donde el cliente no permitió más análisis.'"}],"vendorComments":[{"organization":"Check Point","comment":"Check Point Security Alert Team has analyzed this report. We’ve tried to reproduce the attack on all VPN-1 versions from NG FP2 and above with and without HFAs. \nThe issue was not reproduced. We have conducted a thorough analysis of the relevant code and verified that we are secure against this attack.\nWe consider this attack to pose no risk to Check Point customers.\n \nCheck Point Security Alert Team","lastModified":"2009-04-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1_pki_web_service:-:*:*:*:*:*:*:*","matchCriteriaId":"15EEECE9-5B04-4591-9908-D1A6D0A2CED9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502256/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34286","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021948","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8313","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502256/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1021948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1228","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field (user_name parameter)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en register.php en Arcadwy Arcade Script CMS permite a atacantes remotos inyectar de forma arbitraria secuencia de comandos web o HTML a través del campo \"username\" (parámetro user_name)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadwy:arcadwy_arcade_script_cms:-:*:*:*:*:*:*:*","matchCriteriaId":"7DFEB380-1EBC-4212-A981-F7405DAD33C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34506","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49472","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8296","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1229","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la secuencia de comandos Arcadwy Arcade permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro de cookie \"user\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadwy:arcadwy_arcade_script:-:*:*:*:*:*:*:*","matchCriteriaId":"1A0E0401-3E9D-47EB-A9FD-8B99055C422D"}]}]}],"references":[{"url":"http://secunia.com/advisories/34506","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34284","source":"cve@mitre.org"},{"url":"http://z0rlu.blogspot.com/2009/03/arcadwy-arcade-script-auth-bypass.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49500","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8304","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://z0rlu.blogspot.com/2009/03/arcadwy-arcade-script-auth-bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1230","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en index.php en Podcast Generator v1.1 y anteriores permite a administradores remotos autenticados inyectar codigo PHP a su elección en config.php a través de el parámetro \"recent\" en una acción de cambio de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"CB555065-7FFA-45D8-9814-02EE8B45F05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.6:*:*:*:*:*:*:*","matchCriteriaId":"40E1E9E4-8EC1-44E3-94FF-A3F7FC341756"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B51DEDE5-E7B4-44A1-86F0-D71F516AB7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.9:*:*:*:*:*:*:*","matchCriteriaId":"6378A248-F8CE-4A6A-AC72-9DEAFE2AE6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.81:*:*:*:*:*:*:*","matchCriteriaId":"8DF6FD0A-A18C-495A-B9E7-EE188EA1A58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.91:*:*:*:*:*:*:*","matchCriteriaId":"49690E2C-AC1E-40BE-BE91-FAB522A3EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.92:*:*:*:*:*:*:*","matchCriteriaId":"5BB0AED7-B499-440E-A4C1-3589512AFAB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.93:*:*:*:*:*:*:*","matchCriteriaId":"765992EE-077D-4B67-80A3-5E5B664A4920"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.94:*:*:*:*:*:*:*","matchCriteriaId":"5230DAE5-0774-43A7-94ED-A9BDB2AD4D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.95:*:*:*:*:*:*:*","matchCriteriaId":"F571A8D8-5D07-4D6E-8282-75DE3F75E12C"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.96:*:*:*:*:*:*:*","matchCriteriaId":"1A3E9072-8FCE-4E5D-97C4-E7B60DF36207"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:0.96.2:*:*:*:*:*:*:*","matchCriteriaId":"D543A430-EFFA-470D-80F3-30016852E4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF53E2AD-1E11-4C55-8CFF-D580BFA63216"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CA26821E-665A-4650-9694-2F83A00D31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"86110300-D592-4079-9561-6CCD9C8CFD94"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"4BC6F118-1C43-4C82-8DCE-BDFD78D6CB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"5B718D31-5746-43A9-AC72-79EF26716A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"41207558-39B2-4B9C-B684-C21C04BB16E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:podcast_generator:podcast_generator:1.0_beta4a:*:*:*:*:*:*:*","matchCriteriaId":"4080859E-FABD-4668-BF6A-32905B3EC49A"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8324","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1231","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en eClient en IBM DB2 Content Manager v8.4.1 anterior a la v8.4.1.1 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_content_manager:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B858AD4F-749C-495E-A19A-7863761BDD09"}]}]}],"references":[{"url":"http://secunia.com/advisories/34544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27015162","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IO08969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34326","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0910","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27015162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IO08969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1232","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected."},{"lang":"es","value":"Firefox de Mozilla versiones 3.0.8 y anteriores a 3.0.x, permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria) por medio de un documento XML compuesto por una serie larga de etiquetas de inicio sin las etiquetas finales correspondientes. NOTA: más tarde se informó que la versión 3.0.10 y anteriores también están afectadas."}],"vendorComments":[{"organization":"Red Hat","comment":"https://bugzilla.mozilla.org/show_bug.cgi?id=485941\n\nRed Hat does not consider a user-assisted crash of a client application such as Firefox to be a security issue.\n","lastModified":"2009-04-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"}]}]}],"references":[{"url":"http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3216/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34522","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=485941","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49521","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8306","source":"cve@mitre.org"},{"url":"http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3216/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=485941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1233","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an XML document containing many nested A elements."},{"lang":"es","value":"Apple Safari v3.2.2 y v4 Beta en Windows permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un documento XML que contiene elementos \"A\" anidados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4:beta:windows:*:*:*:*:*","matchCriteriaId":"FC9E7532-DEF2-4537-AB1E-B4D5D0C9C51C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49527","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5559","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8325","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1234","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags.  NOTE: it was later reported that 9.52 is also affected."},{"lang":"es","value":"Opera versión 9.64, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un documento XML que contiene una serie larga de etiquetas de inicio sin las etiquetas finales correspondientes. NOTA: más tarde se informó que la versión 9.52 también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3216/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34298","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49522","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5432","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8320","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3216/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1235","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls."},{"lang":"es","value":"XNU v1228.9.59 y anteriores en Apple Mac OS X v10.5.6 no aplica las restricciones adecuadas entre el espacio del usuario y el manejador HFS IOCTL, lo que permite a usuarios locales sobrescribir la memoria del kernel y conseguir ganar privilegios adjuntando una imagen de un disco HFS+ y realizando ciertos pasos incluyendo llamadas HFS_GET_BOOT_INFO fcntl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"536E776F-22D6-437C-B4F4-912071428F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*","matchCriteriaId":"ED946D47-0E49-4A56-A509-72D936167D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*","matchCriteriaId":"6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*","matchCriteriaId":"666E67AD-6097-4D69-810D-2D4403A6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"BD25BF89-969E-4E3B-87DA-D105496F8C09"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org"},{"url":"http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022671","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0822","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8266","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1236","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AppleTalk networking stack en XNU v1228.3.13 y anteriores en Apple Mac OS X v10.5.6 permite a atacantes remotos producir una denegación de servicio (caída del sistema) a través de un paquete NOTIFY (también conocido como ZIPOP_NOTIFY) que sobrescribe miembro de estructura ifPort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"536E776F-22D6-437C-B4F4-912071428F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*","matchCriteriaId":"ED946D47-0E49-4A56-A509-72D936167D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*","matchCriteriaId":"6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*","matchCriteriaId":"666E67AD-6097-4D69-810D-2D4403A6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"BD25BF89-969E-4E3B-87DA-D105496F8C09"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34424","source":"cve@mitre.org"},{"url":"http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34201","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1237","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call."},{"lang":"es","value":"Múltiples fugas de memoria en XNU v1228.3.13 y anteriores en Apple Mac OS X v10.5.6 y anteriores permite a usuarios locales producir una denegación de servicio (consumo de memoria del kernel) a traves de llamadas de sistema (1) SYS_add_profil o (2) SYS___mac_getfsstat manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"536E776F-22D6-437C-B4F4-912071428F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*","matchCriteriaId":"ED946D47-0E49-4A56-A509-72D936167D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*","matchCriteriaId":"6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*","matchCriteriaId":"666E67AD-6097-4D69-810D-2D4403A6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"BD25BF89-969E-4E3B-87DA-D105496F8C09"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34424","source":"cve@mitre.org"},{"url":"http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.digit-labs.org/files/exploits/xnu-profil-leak.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8263","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8264","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.digit-labs.org/files/exploits/xnu-profil-leak.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1238","sourceIdentifier":"cve@mitre.org","published":"2009-04-02T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable."},{"lang":"es","value":"Condición de carrera en el interfaz HFS vfs sysctl en XNU v1228.8.20 y anteriores en Apple Mac OS X v10.5.6 y anteriores permite a usuarios locales producir una denegación de servicio (corrupción de la memoria del kernel) mediante la ejecucion simultanea de la ruta de código HFS_SET_PKG_EXTENSIONS en múltiples lineas de ejecución, lo cual es problemático debido a la ausencia de bloqueo de mutex para una variable inespecífica global."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"536E776F-22D6-437C-B4F4-912071428F22"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:mac_mini:*:*:*:*:*","matchCriteriaId":"ED946D47-0E49-4A56-A509-72D936167D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook:*:*:*:*:*","matchCriteriaId":"6E9BAD0F-7B96-4842-9C23-1B53B4CFE2D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:macbook_pro:*:*:*:*:*","matchCriteriaId":"666E67AD-6097-4D69-810D-2D4403A6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.5.6","matchCriteriaId":"BD25BF89-969E-4E3B-87DA-D105496F8C09"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34424","source":"cve@mitre.org"},{"url":"http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8265","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1239","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query."},{"lang":"es","value":"IBM DB2 v9.1 anteriores a FP7 devuelve resultados incorrectos en ciertas situaciones relacionadas con la orden de aplicación de una identificación INNER JOIN y una identificación OUTER JOIN, lo que permitiría a atacantes conseguir información sensible a través de una petición manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp6a:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"90C0F24A-7D81-4A4B-8987-FEF3214AFB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:connect_server:*:*:*:*:*","matchCriteriaId":"7372EC03-10FD-4A90-801A-B7947436CE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"959E00AE-24A2-4890-A120-0EDEC401A2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:express_server:*:*:*:*:*","matchCriteriaId":"66CF4477-2D86-48D6-BD56-E09A01EA518F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:personal:*:*:*:*:*","matchCriteriaId":"CE1F8C8D-DC4C-4401-9D83-BBCF9687035D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:workgroup_server:*:*:*:*:*","matchCriteriaId":"C1C73916-C875-4137-A208-6AE5EEB1A94E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:unix:*:*:*:*:*","matchCriteriaId":"AB624942-B12A-48B4-88F8-22261CBED995"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:windows:*:*:*:*:*","matchCriteriaId":"C631A734-423E-4C76-8E1C-A4BB2974DA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21381257","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49864","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21381257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1240","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417\r\n\r\nAlthough the Virus Prevention System technology was, at one time, incorporated into the IBM Proventia Network MFS and the Proventia Network Mail appliances, this capability was removed in Jan 2008. For this reason, this vulnerability does not apply to these product lines.\r\n\r\nThe Virus Prevention System technology is currently incorporated into Proventia Desktop. However, the Proventia Desktop product is not affected by this evasion.\r\n\r\nNo other IBM ISS products currently incorporate the Virus Prevention System technology.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive."},{"lang":"es","value":"Una vulnerabilidad no especificada en el motor Proventia de IBM versión 4.9.0.0.44 20081231, tal y como es usado en Proventia Network Mail Security System , Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), y posiblemente otros productos de IBM, permite a los atacantes remotos omitir la detección de malware por medio de un archivo RAR modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:proventia_desktop_endpoint_security:*:*:*:*:*:*:*:*","matchCriteriaId":"B77F1551-5C37-4D5B-AC86-C2965083B93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*","matchCriteriaId":"C520BF35-8406-44E3-8FC6-D8BD7242D13B"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:network_multi-function_security:*:*:*:*:*:*:*:*","matchCriteriaId":"F24569C0-A783-4CFC-9A74-794DBA96E719"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:proventia_network_mail_security_system_virtual_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"3F19781E-ECC4-40A0-8027-2DC059FB989E"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html","source":"cve@mitre.org"},{"url":"http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502369/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504992/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34345","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502369/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504992/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1241","sourceIdentifier":"cve@mitre.org","published":"2009-04-03T18:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive."},{"lang":"es","value":"Vulnerabilidad inespecífica en ClamAV en versiones anteriores a v0.95 lo que permite a atacantes remotos evitar la detección de malware a través de un archivo RAR modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndExcluding":"0.95","matchCriteriaId":"313364AD-2D04-4292-932A-33CC851EA16E"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/6","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502366/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34344","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0934","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502366/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}},{"cve":{"id":"CVE-2009-1242","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka \"Long mode enable\") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform."},{"lang":"es","value":"La función vmx_set_msr en arch/x86/kvm/vmx.c en la implementación VMX en el subsistema KVM en el kernel de Linux anteriores a v2.6.29.1 en la plataforma i386 permite a los usuarios invitados del SO causar una denegación de servicio (OOPS) estableciendo el bit EFER_LME (también conocido como \"modo largo habilitado\") en la Extended Feature Enable Register (EFER) registro específico de modelo, lo que es específico para la plataforma x86_64."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2009-04-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.29.1","matchCriteriaId":"1FF4F98B-4264-4C5E-BB8F-7D80149F3B06"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/04/01/3","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/15549/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34478","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35120","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35226","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35387","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34331","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0924","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502109","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49594","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/04/01/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/15549/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1243","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the \"udp seq_file infrastructure.\""},{"lang":"es","value":"net/ipv4/udp.c en el kernel de Linux anteriores a v2.6.29.1, desarrolla un paso desbloqueante en ciertas circunstancias incorrectas, lo que permite a los usuarios locales causar una denegación de servicio (panic) por lectura de cero bytes desde el archivo /proc/net/udp y otros no especificado, en relación a \"udp seq_file infrastructure.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2009-04-07T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.29.1","matchCriteriaId":"1FF4F98B-4264-4C5E-BB8F-7D80149F3B06"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://openwall.com/lists/oss-security/2009/04/01/4","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34478","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34329","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0924","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49595","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://openwall.com/lists/oss-security/2009/04/01/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1244","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916."},{"lang":"es","value":"Una vulnerabilidad no especificada en la función de pantalla de máquina virtual de en VMware Workstation v6.5.1 y anteriores; VMware Player v2.5.1 y anteriores; VMware ACE v2.5.1 y anteriores; VMware Server v1.x antes de la v1.0.9 build 156507 y v2.x antes de v2.0.1 build 156745; VMware Fusion antes de la v2.0.4 build 159196; VMware ESXi 3.5 y VMware ESX v3.0.2, v3.0.3 y v3.5 permite ejecutar, a los usuarios invitados, código arbitrario en el sistema operativo anfitrión a través de vectores desconocidos, una vulnerabilidad diferente a la CVE-2008-4916."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"8D249F86-E463-4AB1-BEEE-0828D5A2D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"700C0BB4-2272-4405-9D9A-A636E3D22461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87291B27-442C-4CAB-94A1-67FC766486EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B04862-4377-422E-931A-B17FE1CA1884"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C35B6730-F05B-4B62-B4DE-07C61A4924F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9D22E40D-C362-49FD-924C-262A64555934"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A48CEB4-5864-4A0F-B14C-CFE4699C3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78957047-FB9F-4D1D-B3D9-91257A6B4D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"280033C5-90EF-4825-A87D-B23650D8C71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"78322B97-DBE0-4C7E-9826-11727254500E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B6F7416-E694-4EC9-9FE5-0C24448ECB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"B3BA4159-EBBA-4326-A672-23322377781B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"942B4ED3-A68E-4106-A98B-FA7CD3505140"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BDA2CE1-E26E-4347-BD60-2764A19F5E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B503A45-D9F3-414D-9BFA-C58B1E81A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8E18541B-36B6-40A7-9749-FA47A10379C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A6DA47C9-3D1A-49A7-8976-AE05D6730673"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"BC1C154A-3869-4189-A781-D3071D54143F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E76D03A3-DB55-48A2-B5A5-64002D28B95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA35C066-90A9-4DE2-A97A-38A6CFC59A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"462EEAD5-A78C-4381-847E-B6F1BE4CB379"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E666A5E4-4CDD-4915-B0F3-C63998D01846"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1D3F9D4D-2116-49A7-9292-AF6B4456E175"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AD2EAA90-B24A-45E7-B99F-DA3554A16F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"446F2959-C42B-403B-AE1C-BA7D305C60CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73EC33AB-E92A-4AA8-A523-C341133BB515"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53197903-0614-4460-8944-C1B5257D71A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F037B05F-6F92-4BE1-B672-F677CBEFD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42049891-38B7-4BB7-8DA5-A87169E2D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"07139DF7-C36B-4FED-8558-7FA49BE0BCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E0D7307-5946-45DC-88D3-6BC72EF50184"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"89699BB6-9E41-41DC-B597-B45CA05313A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1","matchCriteriaId":"E4D69FD9-F162-4623-A475-9FA7A3A6DF30"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBF029A-103D-4BB6-B037-25EC2224DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"35A717A5-60C2-4470-943E-CA53781D4B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*","matchCriteriaId":"29AA2B37-BF5F-4AC5-844D-34CF56EC621C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"07131E56-53EE-4CE1-A135-050792EA3C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"86334051-8763-4CD9-9480-CAEAE756DFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"66596F04-9C2E-4091-85A7-40239F3F920E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0E831531-60FE-4DFC-994E-7409E6C69D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*","matchCriteriaId":"4C1A275E-2152-4A37-8CFE-34E8900E3426"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B7A688A2-3E9C-4AA3-832B-300A5A311C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"89098CFF-4696-4BD9-9BC9-D7C2D92FE729"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A30DFFE7-EB73-4A88-A23B-9B386C091314"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AD0FE7C5-2C46-4B59-9242-A03B986C07DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*","matchCriteriaId":"37595A89-52C5-4699-A463-C9D91B91716B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53FBB074-4EAC-4CEC-AFC5-33C66B135F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"525D50A3-2943-4B96-B354-F81F814A7707"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"294B621F-6C1A-4571-AE13-49495680D255"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA47458-E783-4A6A-ABF1-59E8D87E9B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D75ED54E-8E55-48BF-A52E-19FCCE895C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B53297E3-0C74-421B-8058-DAF7357D421A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"97957D6F-0249-4814-8755-5C4537B58E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4408849A-21F1-40F5-A528-0BD47E1BF823"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9938CB4F-96D1-4852-9694-28A93E13AA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCB61760-87FD-4E60-ADC6-407EFA13773C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FBDE6D5-7131-421A-BABE-32F281615597"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"89AA4FEF-FF8F-4706-89BC-8396F7614EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFC6B629-30B3-4C45-B5E9-1B4310F186FD"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000055.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53634","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502615/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34471","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022031","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0006.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49834","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502615/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1245","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Mútiples vulnerabilidades de inyección SQL en la función insert_to_pastebin de php/cccp-admin/inc/functions.php de la aplicación web CCCP Community Clan Portal Pastebin en versiones anteriores a la v2.80. Permite a usuarios remotos ejecutar comandos SQL de su elección a través de los  parámetros (1) subject, (2) language y (3) nickname de php/cccp-pages/submit.php. NOTA: algunos de estos detalles han sido obtenido de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.70","matchCriteriaId":"B14BA363-5A2D-4350-8550-48B79F390800"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.10:*:*:*:*:*:*:*","matchCriteriaId":"EBB45A98-380D-4916-B7FB-81AAC9E2A0D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.20:*:*:*:*:*:*:*","matchCriteriaId":"201AAECE-F0E4-4F92-9780-51DA068DD17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.30:*:*:*:*:*:*:*","matchCriteriaId":"4EBF323A-2894-4C04-BE22-8BDE5F19985C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.40:*:*:*:*:*:*:*","matchCriteriaId":"259ECBB6-9BE1-48AE-8E0E-155895847AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.50:*:*:*:*:*:*:*","matchCriteriaId":"AB10992C-1E5B-4F17-BD5F-76975B39527B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccp-common-clan-portal-pasterbin:cccp_pastebin:2.60:*:*:*:*:*:*:*","matchCriteriaId":"1440B07C-AB93-4F4A-BA21-58D64F5E7ECD"}]}]}],"references":[{"url":"http://jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/34474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=670960","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49426","source":"cve@mitre.org"},{"url":"http://jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/34474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=670960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1246","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_top[file] includes/parameter to block_center_top.php; (3) row_mysql_blocks_left[file] parameter to includes/block_left.php; (4) row_mysql_blocks_right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.php and (6) includes/window_top.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Blogplus v1.0 permiten a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro (1) row_mysql_blocks_center_down[file] de includes/block_center_down.php; (2) parámetro row_mysql_blocks_center_top[fichero] includes/ de block_center_top.php; (3) parámetro row_mysql_blocks_left[file] de includes/block_left.php; (4) parámetro row_mysql_blocks_right[file] de includes/block_right.php; y parámetro row_mysql_bloginfo[theme] de (5) includes/window_down.php y (6) includes/window_top.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogplus:blogplus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FCC962A3-942C-4A72-89CC-BB8F918F6BD4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34261","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49446","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1247","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Acute Control Panel v1.0.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acutecp.rediscussed:acutecp:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"056DCE60-DF83-421B-BF37-3443BE8D4E71"}]}]}],"references":[{"url":"http://secunia.com/advisories/34485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49444","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8291","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1248","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the theme_directory parameter to (1) container.php and (2) header.php in themes/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en Acute Control Panel v1.0.0 que permite a usuarios remotos ejecutar código PHP de su elección a través de una URL en el parámetro theme_directory de (1) container.php y (2) header.php de themes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acutecp:acute_control_panel:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"82D76393-109D-48EF-BC69-B61EE309A329"}]}]}],"references":[{"url":"http://secunia.com/advisories/34485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49443","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8291","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1249","sourceIdentifier":"cve@mitre.org","published":"2009-04-06T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Feed element mapper 5.x versiones anteriores a 5.x-1.1, un módulo para Drupal, permite a atacantes remotos inyectar web script o HTML de su elección a través del contenido del título en admin/content/node-type/nodetype/map."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9D7AF9A-4FEE-493E-9DEA-A4C9F00755F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"8F2B1FF7-6DC9-486D-B798-2637943B6175"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FDC54361-B0BE-4F18-9BB0-954896960B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"6488C64C-60D0-45FA-A7D5-3ADF3CC61BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"20A57654-5776-4400-AF95-8DE74A727426"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta5:*:*:*:*:*:*","matchCriteriaId":"0F4D02C8-842F-40DC-ABF4-AD6BDD4519B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta6:*:*:*:*:*:*","matchCriteriaId":"A8402B0F-688A-4F7D-B9AF-74D19AFAACD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"80BD5743-720B-4BDC-BF86-C275D2635C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:feedapi_mapper:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"BE8BD67A-FB6D-4DAE-A5FF-0A584176C815"}]}]}],"references":[{"url":"http://drupal.org/node/414644","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/414702","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34266","source":"cve@mitre.org"},{"url":"http://drupal.org/node/414644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/414702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1250","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro."},{"lang":"es","value":"El gestor de caché en el cliente OpenAFS v1.0 hasta v1.4.8 y v1.5.0 hasta v1.5.58 en Linux, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de una respuesta RX con un valor en el código de error muy largo, lo que es interpretado como un puntero y desrefereciado, relativo al uso de la macro ERR_PTR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:*:patch18:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"4201D241-5784-46AC-AACD-5612EB4F08AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:3.6:*:*:*:*:*:*:*","matchCriteriaId":"30616D7B-7047-4DB0-A259-1859619AC78B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:3.6:patch12:*:*:*:*:*:*","matchCriteriaId":"278D5804-4178-4946-AA4A-987540E82602"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:3.6:patch13:*:*:*:*:*:*","matchCriteriaId":"E41CEBB0-3A49-4652-AE91-D41A40DF92A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:3.6:patch14:*:*:*:*:*:*","matchCriteriaId":"8E86AF64-34DB-4C1F-AAC7-BA44D5DDBF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:3.6:patch15:*:*:*:*:*:*","matchCriteriaId":"441D8AD1-5E83-4A48-9C5E-50E508C60B01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:afs:3.6:patch16:*:*:*:*:*:*","matchCriteriaId":"8B0EB239-580C-433D-8FAB-6BF0437D0755"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC8B64A-B5A9-4F66-86AD-0288F8E3D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE08E0AC-71F8-456B-9E88-43E94A6A2F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"10CFD4A8-71AE-4F85-B86D-001461ECC2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8CD3D4A8-934B-420A-AF4A-36DD16E2F851"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D7AD53C-917A-41CC-83CD-6DF825E2640E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"F6F84C9B-8073-4EBE-AA75-A373772A42EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8E921700-C76F-41EA-AA61-6F939ED329CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC9A5221-2DBC-487A-9C6D-84EB9C95EB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0BDBD251-3E96-4068-AD24-E5B1802769E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"23A07568-7B15-49F1-9163-40A0BFF38309"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E8A18760-0921-475E-9104-4DF480697E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CD01B5F6-7E91-4FE8-B345-42D58C786FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"34002792-689C-45B5-9B5A-94B5342AC20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.2a:*:*:*:*:*:*:*","matchCriteriaId":"3331166E-ABBA-4326-8EF4-88872B9824A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.2b:*:*:*:*:*:*:*","matchCriteriaId":"302A9220-4C73-4D69-8B62-B64A7E280B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2B8FC287-D6D8-44BA-9125-3E64624ECDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"295C09E5-23C3-4F9E-80FC-B0C4EC34C846"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0295B94D-BE71-4DA2-81C5-E5BBCF0E17AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2FBADEB7-0073-42EB-B53D-ADA227898493"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F0951C53-C62A-4607-B6DB-E6B38DF3A5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0813CDDB-FF48-4154-81F3-20873A6C6C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"6AAAE0E9-BB79-455F-A08E-AC83370DBD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"55B65ACE-3BA2-4B42-AEE8-8F647A6399F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"C0E298D9-63FB-4818-A2F1-EDFC287625F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"E3F2EED9-29E6-41E9-A911-D6ED9A08643C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3:*:*:*:*:*:*:*","matchCriteriaId":"299D4344-A1DB-4EC3-B1A2-5E07FB2B585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"72BE26C0-4A71-43AE-B134-3CE6DE839349"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"DE590EA3-85F6-462A-BCC1-0550192F8F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"20DB0E2F-782F-4BA1-A81A-5DDDA8CF0A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.70:*:*:*:*:*:*:*","matchCriteriaId":"3C1399FC-A356-4624-BBA6-059B797B4C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.74:*:*:*:*:*:*:*","matchCriteriaId":"5D767864-04D5-4571-8B13-CD347ADB3ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.77:*:*:*:*:*:*:*","matchCriteriaId":"C47CECE6-1BD8-4CC3-B1F8-A4A069004C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.81:*:*:*:*:*:*:*","matchCriteriaId":"846D8776-DCDF-4BD0-A391-5546BD4B20C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4:*:*:*:*:*:*:*","matchCriteriaId":"58C9013E-A08B-441E-AE3F-C688793366FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0F37635-C186-4D06-A79C-2A7AB0CFBAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB1364B7-D564-4385-B7D7-67184E474712"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EA3D7891-0B48-4C5D-B74B-6810FB4696F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"2C3BF7B2-72FF-4756-A1CC-982A1CD0747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"832A44D5-3851-4DC5-A37A-B3C356764B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D6F42FFC-9EA1-471C-8E5F-F8860BB2EA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre1:*:*:*:*:*:*:*","matchCriteriaId":"91E0060C-4C43-4B4C-88CE-01F5055A9193"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre2:*:*:*:*:*:*:*","matchCriteriaId":"4F1A3516-7785-406E-83B2-96A0FF8461A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre3:*:*:*:*:*:*:*","matchCriteriaId":"F020E77C-8445-4BE8-A36E-A436102FE83B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre4:*:*:*:*:*:*:*","matchCriteriaId":"39F16D28-5011-4CE3-A656-9F9908E760AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre5:*:*:*:*:*:*:*","matchCriteriaId":"1F1E040E-020D-4567-BF57-9A2DA7294CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"38D14A4C-D467-431A-A223-9383FD94EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8_pre1:*:*:*:*:*:*:*","matchCriteriaId":"ED10F836-88BE-4832-BE5A-83AE0C798368"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8_pre2:*:*:*:*:*:*:*","matchCriteriaId":"CA22C60E-64A4-4340-A780-0C85BDACBB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8_pre3:*:*:*:*:*:*:*","matchCriteriaId":"F407281C-A813-4190-BBF1-FB93779681DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4C6BEEDA-C1FE-49BA-A829-BA3BBBED1AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*","matchCriteriaId":"39308049-0C20-4845-9803-529A85CB9682"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"CAC63C9E-169F-40B5-A011-2A77B675875D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*","matchCriteriaId":"378F38A7-422C-4603-8120-42DB91C8B90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*","matchCriteriaId":"69AC18EA-7DB6-4F68-95DD-637D557DDF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*","matchCriteriaId":"BFD8DE00-622E-42DC-B1C7-8B9C1300DEF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*","matchCriteriaId":"A6FCFBC7-CDEF-402D-8C11-DD3D112B76CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*","matchCriteriaId":"22ABC36E-79A7-41A6-8A80-CF3563EE640E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*","matchCriteriaId":"9E121D95-158B-446D-BECD-D90D348A8CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*","matchCriteriaId":"C2993321-45A6-496F-ADC3-B83E52B90ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4EA6732C-6108-40B1-B9D3-D11D9C18B225"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*","matchCriteriaId":"A93DE322-6843-4C9C-82F2-2E55FC5231DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*","matchCriteriaId":"52D0C9D5-009C-4153-AB84-1DC3191CAC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*","matchCriteriaId":"18AAA5FE-D9FE-40A8-804B-C86C2D865958"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*","matchCriteriaId":"ADCB63E5-D32E-41E3-958D-F1991318CFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*","matchCriteriaId":"7FDE6F07-DD16-4075-B7C4-4C3B9A194C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*","matchCriteriaId":"B0B8EC69-A4CD-42F8-AD25-ACE8DDAE7F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*","matchCriteriaId":"9F3B0624-435B-4A06-BC13-5B47C34E11E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*","matchCriteriaId":"A8F90E76-4EF0-4E12-96F9-1007DF457277"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*","matchCriteriaId":"F3944EFB-9C8C-451E-A339-603FC617A352"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*","matchCriteriaId":"5B400BB8-53F2-4BC3-842B-42480B52D156"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*","matchCriteriaId":"5A1C5AD7-141A-4932-9A05-994B6CC69AC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://secunia.com/advisories/34655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36310","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42896","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201101-05.xml","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396389","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1768","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:099","source":"cve@mitre.org"},{"url":"http://www.openafs.org/security/OPENAFS-SA-2009-002.txt","source":"cve@mitre.org"},{"url":"http://www.openafs.org/security/openafs-sa-2009-002.patch","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34404","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0984","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201101-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openafs.org/security/OPENAFS-SA-2009-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openafs.org/security/openafs-sa-2009-002.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1251","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en el gestor de caché en el cliente OpenAFS v1.0 hasta la v1.4.8 y v1.5.0 hasta la 1.5.58 de las plataformas Unix, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) o posiblemente ejecutar código de su elección a través de una respuesta RX que contenga más datos que los especificados en la petición, relativo al uso de las tablas XDR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A7C398-5356-45D6-AA5C-53E63BC88DCA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC8B64A-B5A9-4F66-86AD-0288F8E3D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE08E0AC-71F8-456B-9E88-43E94A6A2F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"10CFD4A8-71AE-4F85-B86D-001461ECC2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8CD3D4A8-934B-420A-AF4A-36DD16E2F851"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D7AD53C-917A-41CC-83CD-6DF825E2640E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"F6F84C9B-8073-4EBE-AA75-A373772A42EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8E921700-C76F-41EA-AA61-6F939ED329CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC9A5221-2DBC-487A-9C6D-84EB9C95EB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0BDBD251-3E96-4068-AD24-E5B1802769E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"23A07568-7B15-49F1-9163-40A0BFF38309"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E8A18760-0921-475E-9104-4DF480697E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CD01B5F6-7E91-4FE8-B345-42D58C786FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"34002792-689C-45B5-9B5A-94B5342AC20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.2a:*:*:*:*:*:*:*","matchCriteriaId":"3331166E-ABBA-4326-8EF4-88872B9824A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.2b:*:*:*:*:*:*:*","matchCriteriaId":"302A9220-4C73-4D69-8B62-B64A7E280B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2B8FC287-D6D8-44BA-9125-3E64624ECDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"295C09E5-23C3-4F9E-80FC-B0C4EC34C846"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0295B94D-BE71-4DA2-81C5-E5BBCF0E17AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2FBADEB7-0073-42EB-B53D-ADA227898493"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F0951C53-C62A-4607-B6DB-E6B38DF3A5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0813CDDB-FF48-4154-81F3-20873A6C6C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"6AAAE0E9-BB79-455F-A08E-AC83370DBD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"55B65ACE-3BA2-4B42-AEE8-8F647A6399F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"C0E298D9-63FB-4818-A2F1-EDFC287625F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"E3F2EED9-29E6-41E9-A911-D6ED9A08643C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3:*:*:*:*:*:*:*","matchCriteriaId":"299D4344-A1DB-4EC3-B1A2-5E07FB2B585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"72BE26C0-4A71-43AE-B134-3CE6DE839349"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"DE590EA3-85F6-462A-BCC1-0550192F8F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"20DB0E2F-782F-4BA1-A81A-5DDDA8CF0A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.70:*:*:*:*:*:*:*","matchCriteriaId":"3C1399FC-A356-4624-BBA6-059B797B4C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.74:*:*:*:*:*:*:*","matchCriteriaId":"5D767864-04D5-4571-8B13-CD347ADB3ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.77:*:*:*:*:*:*:*","matchCriteriaId":"C47CECE6-1BD8-4CC3-B1F8-A4A069004C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.3.81:*:*:*:*:*:*:*","matchCriteriaId":"846D8776-DCDF-4BD0-A391-5546BD4B20C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4:*:*:*:*:*:*:*","matchCriteriaId":"58C9013E-A08B-441E-AE3F-C688793366FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0F37635-C186-4D06-A79C-2A7AB0CFBAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB1364B7-D564-4385-B7D7-67184E474712"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"EA3D7891-0B48-4C5D-B74B-6810FB4696F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"2C3BF7B2-72FF-4756-A1CC-982A1CD0747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"832A44D5-3851-4DC5-A37A-B3C356764B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D6F42FFC-9EA1-471C-8E5F-F8860BB2EA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre1:*:*:*:*:*:*:*","matchCriteriaId":"91E0060C-4C43-4B4C-88CE-01F5055A9193"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre2:*:*:*:*:*:*:*","matchCriteriaId":"4F1A3516-7785-406E-83B2-96A0FF8461A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre3:*:*:*:*:*:*:*","matchCriteriaId":"F020E77C-8445-4BE8-A36E-A436102FE83B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre4:*:*:*:*:*:*:*","matchCriteriaId":"39F16D28-5011-4CE3-A656-9F9908E760AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.7_pre5:*:*:*:*:*:*:*","matchCriteriaId":"1F1E040E-020D-4567-BF57-9A2DA7294CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"38D14A4C-D467-431A-A223-9383FD94EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8_pre1:*:*:*:*:*:*:*","matchCriteriaId":"ED10F836-88BE-4832-BE5A-83AE0C798368"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8_pre2:*:*:*:*:*:*:*","matchCriteriaId":"CA22C60E-64A4-4340-A780-0C85BDACBB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.4.8_pre3:*:*:*:*:*:*:*","matchCriteriaId":"F407281C-A813-4190-BBF1-FB93779681DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4C6BEEDA-C1FE-49BA-A829-BA3BBBED1AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.16:*:*:*:*:*:*:*","matchCriteriaId":"39308049-0C20-4845-9803-529A85CB9682"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"CAC63C9E-169F-40B5-A011-2A77B675875D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.26:*:*:*:*:*:*:*","matchCriteriaId":"378F38A7-422C-4603-8120-42DB91C8B90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.27:*:*:*:*:*:*:*","matchCriteriaId":"69AC18EA-7DB6-4F68-95DD-637D557DDF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.30:*:*:*:*:*:*:*","matchCriteriaId":"BFD8DE00-622E-42DC-B1C7-8B9C1300DEF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.31:*:*:*:*:*:*:*","matchCriteriaId":"A6FCFBC7-CDEF-402D-8C11-DD3D112B76CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.32:*:*:*:*:*:*:*","matchCriteriaId":"22ABC36E-79A7-41A6-8A80-CF3563EE640E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.33:*:*:*:*:*:*:*","matchCriteriaId":"9E121D95-158B-446D-BECD-D90D348A8CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.34:*:*:*:*:*:*:*","matchCriteriaId":"C2993321-45A6-496F-ADC3-B83E52B90ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4EA6732C-6108-40B1-B9D3-D11D9C18B225"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.36:*:*:*:*:*:*:*","matchCriteriaId":"A93DE322-6843-4C9C-82F2-2E55FC5231DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.38:*:*:*:*:*:*:*","matchCriteriaId":"52D0C9D5-009C-4153-AB84-1DC3191CAC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.39:*:*:*:*:*:*:*","matchCriteriaId":"18AAA5FE-D9FE-40A8-804B-C86C2D865958"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.50:*:*:*:*:*:*:*","matchCriteriaId":"ADCB63E5-D32E-41E3-958D-F1991318CFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.52:*:*:*:*:*:*:*","matchCriteriaId":"7FDE6F07-DD16-4075-B7C4-4C3B9A194C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.53:*:*:*:*:*:*:*","matchCriteriaId":"B0B8EC69-A4CD-42F8-AD25-ACE8DDAE7F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.54:*:*:*:*:*:*:*","matchCriteriaId":"9F3B0624-435B-4A06-BC13-5B47C34E11E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.55:*:*:*:*:*:*:*","matchCriteriaId":"A8F90E76-4EF0-4E12-96F9-1007DF457277"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.56:*:*:*:*:*:*:*","matchCriteriaId":"F3944EFB-9C8C-451E-A339-603FC617A352"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.57:*:*:*:*:*:*:*","matchCriteriaId":"5B400BB8-53F2-4BC3-842B-42480B52D156"},{"vulnerable":true,"criteria":"cpe:2.3:a:openafs:openafs:1.5.58:*:*:*:*:*:*:*","matchCriteriaId":"5A1C5AD7-141A-4932-9A05-994B6CC69AC8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42896","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201101-05.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1768","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:099","source":"cve@mitre.org"},{"url":"http://www.openafs.org/security/OPENAFS-SA-2009-001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openafs.org/security/openafs-sa-2009-001.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34407","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0984","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201101-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openafs.org/security/OPENAFS-SA-2009-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openafs.org/security/openafs-sa-2009-001.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1252","sourceIdentifier":"cve@mitre.org","published":"2009-05-19T19:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función crypto_recv en ntp_crypto.c en ntpd en NTP anteriores a v4.2.4p7 y v4.2.5 anterior a v4.2.5p74, cuando OpenSSL y autokey están activados, permite a atacantes remotos ejecutar código de forma arbitraria a través de paquetes manipulados que contienen un campo de extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:*","matchCriteriaId":"AA843BCD-372A-42F5-A8C0-1AD32FA9E94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*","matchCriteriaId":"B980A178-2958-4B36-8AD8-3932B12C5A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*","matchCriteriaId":"5D65210A-F80E-4019-91DA-49838369E03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*","matchCriteriaId":"29FAB224-3493-4273-A655-10BE44F5B5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:*","matchCriteriaId":"093F0DD2-9E88-4138-AFF5-69105E7F2C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*","matchCriteriaId":"B3590927-E242-411D-822A-33337D6B8A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:*","matchCriteriaId":"20FCD55C-D4A8-4544-81AF-C920B3B48A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p0:*:*:*:*:*:*:*","matchCriteriaId":"881ED983-01B5-4A02-B671-8744EC0E1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p1:*:*:*:*:*:*:*","matchCriteriaId":"A3897870-1724-4018-8F77-122548022535"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p2:*:*:*:*:*:*:*","matchCriteriaId":"7012720C-D4BD-40C5-8521-6859BE46DDDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p3:*:*:*:*:*:*:*","matchCriteriaId":"E8474ADA-F2A8-494D-BB6F-6EA4D4B865B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p4:*:*:*:*:*:*:*","matchCriteriaId":"9FFC396E-2E5C-4576-94D3-96C619523CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p5:*:*:*:*:*:*:*","matchCriteriaId":"19F55042-5CA1-453E-A786-A8B346C02BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p6:*:*:*:*:*:*:*","matchCriteriaId":"A3C5930E-7792-4940-9EC3-CD5AE78D51B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p7:*:*:*:*:*:*:*","matchCriteriaId":"87004177-C6F2-4057-919D-20D91D01A8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p8:*:*:*:*:*:*:*","matchCriteriaId":"E01570E4-447A-4F60-BD5C-40D201A464F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p9:*:*:*:*:*:*:*","matchCriteriaId":"440B4315-C7B3-4930-BD4D-B55BD3EEEE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p10:*:*:*:*:*:*:*","matchCriteriaId":"760050D5-5F8E-41CE-98DA-31E5BFB8A6C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p11:*:*:*:*:*:*:*","matchCriteriaId":"96E4FED4-A7F0-44C0-9405-1AB07D9B0079"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p12:*:*:*:*:*:*:*","matchCriteriaId":"78977FE3-FF1E-47CA-9B97-3E6EC18894B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p13:*:*:*:*:*:*:*","matchCriteriaId":"11E24A99-575E-42EB-9463-29021A33C914"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p14:*:*:*:*:*:*:*","matchCriteriaId":"CBB88D29-930C-4552-889D-4DBF23EC3760"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p15:*:*:*:*:*:*:*","matchCriteriaId":"E13EE5C4-594E-4004-A8BC-AD4D3608FF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p16:*:*:*:*:*:*:*","matchCriteriaId":"16009504-A8ED-43E9-A7F9-E8E1628449BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p17:*:*:*:*:*:*:*","matchCriteriaId":"5A4A86DA-E8CB-44B5-9E7D-A69A149FAF8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p18:*:*:*:*:*:*:*","matchCriteriaId":"A0F918DA-D4F3-4016-861E-78A8A00F9FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p19:*:*:*:*:*:*:*","matchCriteriaId":"DD908ABD-5A18-436B-830B-7F252E22B3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p20:*:*:*:*:*:*:*","matchCriteriaId":"E8152815-3510-4FE7-A8B9-51EB857D7262"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p21:*:*:*:*:*:*:*","matchCriteriaId":"C03D4FCB-A0CE-45EA-80FC-523F388E51A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p23:*:*:*:*:*:*:*","matchCriteriaId":"86CBFD14-8B03-4F0D-8B0F-670629334D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p24:*:*:*:*:*:*:*","matchCriteriaId":"656E046B-C3F2-4DD5-B3C2-C60ACEBC808C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p25:*:*:*:*:*:*:*","matchCriteriaId":"014A6026-C4B9-4E09-9170-059D1FD8D95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p26:*:*:*:*:*:*:*","matchCriteriaId":"51BAB21E-C818-492A-A537-EFDF57E412EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p27:*:*:*:*:*:*:*","matchCriteriaId":"92CACCD1-DF24-4226-A891-6FD7EBB0E57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p28:*:*:*:*:*:*:*","matchCriteriaId":"824DE9A3-5ABF-4E9F-985D-0633893CAECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p29:*:*:*:*:*:*:*","matchCriteriaId":"8A27E0EA-38B8-49F0-818B-BB4CAA7EF7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p30:*:*:*:*:*:*:*","matchCriteriaId":"8347419F-6B7F-4BA6-B03C-3A52E5F7148C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p31:*:*:*:*:*:*:*","matchCriteriaId":"23D73277-B636-4F50-88F0-A79278EB6AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p32:*:*:*:*:*:*:*","matchCriteriaId":"4701E3A4-FE51-4A48-8ABB-67DFE815BBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p33:*:*:*:*:*:*:*","matchCriteriaId":"3A2E5F24-1242-4819-8787-4F2EB9E97C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p35:*:*:*:*:*:*:*","matchCriteriaId":"DD55122C-2983-4193-BC46-6269A348EC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p36:*:*:*:*:*:*:*","matchCriteriaId":"D4199168-912C-4702-801C-A36394ED494B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p37:*:*:*:*:*:*:*","matchCriteriaId":"3D89067A-7F24-458A-AD6F-ADFB92C24F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p38:*:*:*:*:*:*:*","matchCriteriaId":"362FDB7C-EA5E-480D-96FB-2BCEF7F4E64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p39:*:*:*:*:*:*:*","matchCriteriaId":"DC3E2B20-E6B7-47DB-8A02-CAAF6C2B1597"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p40:*:*:*:*:*:*:*","matchCriteriaId":"98F3B4EA-053B-4A25-88F8-A788F88488A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p41:*:*:*:*:*:*:*","matchCriteriaId":"24B31D93-005E-498A-8935-EC31DC104B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p42:*:*:*:*:*:*:*","matchCriteriaId":"125D14D2-3443-46E6-AC58-967683604B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p43:*:*:*:*:*:*:*","matchCriteriaId":"E2969C79-0B8F-4759-9978-7432BA388ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p44:*:*:*:*:*:*:*","matchCriteriaId":"485E789D-B602-477E-BD10-0054AEE98D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p45:*:*:*:*:*:*:*","matchCriteriaId":"83284150-1E06-45B0-BD75-7BE895EB99B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p46:*:*:*:*:*:*:*","matchCriteriaId":"3298B973-D08A-44A6-AD60-0E18A9FF55AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p47:*:*:*:*:*:*:*","matchCriteriaId":"06314717-CF64-4269-A049-F70396CA000A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p48:*:*:*:*:*:*:*","matchCriteriaId":"EF909823-66E7-49AE-9385-DCDA7CD5EB51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p49:*:*:*:*:*:*:*","matchCriteriaId":"A4FE8C8E-6051-4DB8-B03B-6EF211992545"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p50:*:*:*:*:*:*:*","matchCriteriaId":"E1FF094E-49CA-41BB-A568-2BA49D770270"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p51:*:*:*:*:*:*:*","matchCriteriaId":"AE0D9B6F-3838-40ED-9998-89E66EEA79EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p52:*:*:*:*:*:*:*","matchCriteriaId":"8076E3B3-57DA-425A-9CBD-426ADE3735F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p53:*:*:*:*:*:*:*","matchCriteriaId":"E66A89E0-B31A-4469-859C-6C323399A706"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p54:*:*:*:*:*:*:*","matchCriteriaId":"6813F72B-4D8B-4903-BCB7-5A0EDE288B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p55:*:*:*:*:*:*:*","matchCriteriaId":"2F8F957C-632F-4E5D-82E3-B3DF6572C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p56:*:*:*:*:*:*:*","matchCriteriaId":"0DC1DBF1-C2EE-4241-A50F-40E837B84C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p57:*:*:*:*:*:*:*","matchCriteriaId":"A7826192-660B-49AC-B1B8-BD799712DF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p58:*:*:*:*:*:*:*","matchCriteriaId":"3443D451-1845-4440-AFB8-D6432585CBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p59:*:*:*:*:*:*:*","matchCriteriaId":"88C81B35-94C8-4881-B2FA-AF8214AAEBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p60:*:*:*:*:*:*:*","matchCriteriaId":"7D3BDB8B-21E7-45EB-B39A-8822B64196ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p61:*:*:*:*:*:*:*","matchCriteriaId":"808929AC-EC57-49FF-9FCC-FE593743EE6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p62:*:*:*:*:*:*:*","matchCriteriaId":"28C8CE4D-6C53-490E-8223-A6A4EEEA2CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p63:*:*:*:*:*:*:*","matchCriteriaId":"C49B2C1E-5653-4DA9-96A1-8E84A0AAB95E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p64:*:*:*:*:*:*:*","matchCriteriaId":"6DCD5198-26B4-4334-8077-916EA21F0760"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p65:*:*:*:*:*:*:*","matchCriteriaId":"AD533741-97B8-4726-A7C4-4B7D0723817E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p66:*:*:*:*:*:*:*","matchCriteriaId":"0336E989-FB7F-49CC-9FC9-F10B5C6716CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p67:*:*:*:*:*:*:*","matchCriteriaId":"1CD72509-2E02-4C18-8AB1-7FAB7016EB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p68:*:*:*:*:*:*:*","matchCriteriaId":"EFD88BB1-C82A-4021-BEA3-40B23CA2A5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p69:*:*:*:*:*:*:*","matchCriteriaId":"79740F38-3210-4AF2-80C7-692DA5C5E315"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p70:*:*:*:*:*:*:*","matchCriteriaId":"7A1FB0C1-3A68-41A3-9290-1CAA09042716"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p71:*:*:*:*:*:*:*","matchCriteriaId":"4CA193DE-E94C-4229-8FBC-1E35884F310B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p73:*:*:*:*:*:*:*","matchCriteriaId":"C76D8727-2324-4A2B-B73A-99E452FD07E4"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1039.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1040.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35169","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35243","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1801","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/853097","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35017","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022243","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499694","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://launchpad.net/bugs/cve/2009-1252","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307","source":"cve@mitre.org"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1151","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/777-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/853097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://launchpad.net/bugs/cve/2009-1252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/777-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1253","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file."},{"lang":"es","value":"James Stone Tunapie v2.1 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico en un fichero temporal no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:james_stone:tunapie:2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E82DD2-C7CC-4A08-B20E-58DC9AD3DDD3"}]}]}],"references":[{"url":"http://osvdb.org/53426","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34643","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34417","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0972","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/314591","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-1253","source":"cve@mitre.org"},{"url":"http://osvdb.org/53426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/314591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1254","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T00:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL."},{"lang":"es","value":"James Stone Tunapie v2.1 permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres Shell en la cadena URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:james_stone:tunapie:2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E82DD2-C7CC-4A08-B20E-58DC9AD3DDD3"}]}]}],"references":[{"url":"http://osvdb.org/53427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34643","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34418","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0972","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/314591","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-1254","source":"cve@mitre.org"},{"url":"http://osvdb.org/53427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/314591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1255","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port."},{"lang":"es","value":"La función process_stat en (1) Memcached antes de v1.2.8 y (2) MemcacheDB v1.2.0 revela (a) el contenido de /proc/self/maps en respuesta a un comando stats maps (estadisticas de mapas) y (b) las estadísticas de la asignación de memoria en respuesta a un comando stats malloc (estadisticas de asignacion de memoria), lo cual permite a atacantes remotos obtener información sensible como la localización de regiones de memoria, y evitar la protección ASLR, mediante el envío de un comando a el demonio del puerto TCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"82B62E56-CCC2-4239-8B5C-81FF1D6BF32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5F664659-721C-4387-A06C-AD30DD9AF762"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"18A83632-06E4-4978-909A-5E145F7A654F"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9A511459-F98A-4192-8E79-24766D296A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8DC3886A-4C1B-49B9-A334-E9A1C8CA5309"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AD764B57-6985-4DD2-BA3C-09912715A56A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E433DCE9-8C2E-47AC-907E-8306D322D0A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.0.0:beta:*:*:*:*:*:*","matchCriteriaId":"8164AFC1-6320-44C1-8872-9C26A5E1C173"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"6397D3FD-EF1F-4B0C-BA6C-26131820A653"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.0.2:beta:*:*:*:*:*:*","matchCriteriaId":"2616A383-92BE-4FD2-8A62-8A2CF1F69830"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F500EE98-0AAA-4C9E-91DF-313E6812CC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF0C217E-B2E4-472A-AE6A-C95D73C8FE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.1.0:beta:*:*:*:*:*:*","matchCriteriaId":"07FCB8CB-1434-4486-858D-BC509246231D"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"6BE87DDD-FF8E-47B2-A30B-7C32ADA6C02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.2.1:beta:*:*:*:*:*:*","matchCriteriaId":"A76FC002-9B7C-4F3D-A2E7-E416CD6C6336"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0282.html","source":"cve@mitre.org"},{"url":"http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98","source":"cve@mitre.org"},{"url":"http://code.google.com/p/memcachedb/source/detail?r=98","source":"cve@mitre.org"},{"url":"http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e","source":"cve@mitre.org"},{"url":"http://osvdb.org/54127","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34915","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34932","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35175","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:105","source":"cve@mitre.org"},{"url":"http://www.positronsecurity.com/advisories/2009-001.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503064/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34756","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022140","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1196","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50221","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00851.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01256.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0282.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/memcachedb/source/detail?r=98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.positronsecurity.com/advisories/2009-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503064/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00851.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1256","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en FlexCMS v2.5 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"ItemId\". NOTA: Algunos de los detalles de esta información fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flexcms:flexcms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BD6DF79F-643E-4B88-A559-383F7FD1898B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34394","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49680","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8355","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1257","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Magic ISO Maker v5.5 build 0274, permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección a través de un fichero CCD manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magic_iso_maker:magic_iso_maker:5.5:*:*:*:*:*:*:*","matchCriteriaId":"28A7DD9C-D097-4E16-B97A-E744C11C217E"}]}]}],"references":[{"url":"http://osvdb.org/53262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34574","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49673","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8343","source":"cve@mitre.org"},{"url":"http://osvdb.org/53262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1258","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente RD-Autos (com_rdautos) v1.5.7 para Joomla! permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"makeid\" en index.php. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rd-media:com_rdautos:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3334C6D1-EE2F-48D6-885F-A8FCB322F70F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/53138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34364","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49671","source":"cve@mitre.org"},{"url":"http://osvdb.org/53138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1259","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a topic action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/bb/topic.php en Insane Visions AdaptBB v1.0, cuando magic_quotes esta desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"topic_id\" en una acción \"topic\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:insanevisions:adaptbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B3F4CB18-2C5F-48DB-A6C2-01DE7B4CA80D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34371","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49681","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8351","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1260","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file."},{"lang":"es","value":"Múltiples desbordamientos del búfer basados en pila en UltraISO v9.3.3.2685 y versiones anteriores, permiten a atacantes remotos provocar una denegación de servicio (caída) y ejecutar código de su elección a través de un fichero (1) CCD o (2) IMG manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:*:-:pe:*:*:*:*:*","versionEndIncluding":"9.3.3","matchCriteriaId":"17F5DF7A-9903-43A9-9BD2-E13EFAB08439"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DC0D66CC-2BB9-42F2-AB1A-F2528F524235"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:3.1_sr1:*:*:*:*:*:*:*","matchCriteriaId":"7E500A39-2771-4755-9BB8-117CAD275958"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:3.1_sr2:*:*:*:*:*:*:*","matchCriteriaId":"DDA8DC52-D446-4610-85DB-FF370D2338B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5236E727-20BB-42A3-BAE1-A0243FED3633"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5A1033E2-58A8-42A7-B782-BEA733CFE5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:4.5:*:*:*:*:*:*:*","matchCriteriaId":"34021E37-E7F0-460A-A72D-936B8FB0EECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:5.0:*:*:*:*:*:*:*","matchCriteriaId":"37F6294A-3E02-4B37-AB76-E5BCC99F0462"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:5.1:*:*:*:*:*:*:*","matchCriteriaId":"156623DE-C954-4470-97A0-87BB66AA0BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:5.55:*:*:*:*:*:*:*","matchCriteriaId":"C42C26DB-5C2B-444A-A2CE-0EF9DE1C57AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:5.55_sr-1:*:*:*:*:*:*:*","matchCriteriaId":"199E347B-61BE-4EF9-A2B6-6D1998462E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:5.55_sr-2:*:*:*:*:*:*:*","matchCriteriaId":"BEF4B560-72DF-4FDB-B77B-60D8253B8B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.0:*:*:*:*:*:*:*","matchCriteriaId":"75393582-C1D5-42FD-9C4D-4E39810A89E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.1:*:*:*:*:*:*:*","matchCriteriaId":"AE47C4E9-C4AB-48C7-814F-0F58E3F358CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.5:*:*:*:*:*:*:*","matchCriteriaId":"6B07F4F7-7C7C-4358-A304-02F5DFCA82AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.51:*:*:*:*:*:*:*","matchCriteriaId":"FE09B73F-A9F1-473E-9C0A-8CC144DD00A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.52:*:*:*:*:*:*:*","matchCriteriaId":"EC84B744-042C-4C83-A0D6-37F1934E35AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.52_sr-1:*:*:*:*:*:*:*","matchCriteriaId":"E7571790-24EA-4764-AB99-3F4AA792B81E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.52_sr-2:*:*:*:*:*:*:*","matchCriteriaId":"7621A640-266C-4435-9770-1804F186CA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.56_sr-1:*:*:*:*:*:*:*","matchCriteriaId":"806D55A4-F87D-49D0-AD72-A254FAEDF56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:6.56_sr-2:*:*:*:*:*:*:*","matchCriteriaId":"ECC8414A-FE5D-4343-842D-6FD1B6EB4BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.0:-:me:*:*:*:*:*","matchCriteriaId":"9BF9EF37-892B-4314-9F57-95D11548E659"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.1:-:me:*:*:*:*:*","matchCriteriaId":"3BA4DAF7-72D5-47A9-ADD9-0274D8CBCCA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.5:-:me:*:*:*:*:*","matchCriteriaId":"12CC24A7-74D6-4FA5-B9F2-E0669D1E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.6:-:me:*:*:*:*:*","matchCriteriaId":"6AD36A09-943A-4B34-9439-34E0CACB1B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.21_sr-1:*:*:*:*:*:*:*","matchCriteriaId":"DBAB8C09-472D-46D0-8AA7-B017A0D7DC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.21_sr-2:*:*:*:*:*:*:*","matchCriteriaId":"119B2B6F-E010-487F-A8BE-7929426E3C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.22_me:*:*:*:*:*:*:*","matchCriteriaId":"C86A46AD-3BB8-4F5B-9F73-2A9BE6BD3B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.23:-:me:*:*:*:*:*","matchCriteriaId":"995353BF-F882-44C4-8698-20AE41FDDF36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.25:-:me:*:*:*:*:*","matchCriteriaId":"7FB3582B-A19A-4D00-8D3C-47D73386E215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.51:-:me:*:*:*:*:*","matchCriteriaId":"04F1A22F-80DF-4F0C-A6AE-4232327AF258"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.52:-:me:*:*:*:*:*","matchCriteriaId":"F2CB70BB-8DF2-4FCE-914C-BE5C6D8BF7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.55:-:me:*:*:*:*:*","matchCriteriaId":"0ED81FD8-2DCD-44A7-B29D-EA537D8A76C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.56:-:me:*:*:*:*:*","matchCriteriaId":"08DBBFF6-2B77-4B28-AEBE-51CC37F57169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.62:-:me:*:*:*:*:*","matchCriteriaId":"FCE3C7D8-0DC3-442E-9733-7D05770E6D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.65:-:me:*:*:*:*:*","matchCriteriaId":"A650E9E8-A2E1-420B-8EBC-4608ED2669F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.65_sr-2:*:*:*:*:*:*:*","matchCriteriaId":"91A65038-1900-44BF-BAAE-DA348A1C2274"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:7.66:-:me:*:*:*:*:*","matchCriteriaId":"E3EBB8A7-1F10-4E4A-9965-C142976F335B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8:-:pe:*:*:*:*:*","matchCriteriaId":"1A8AF672-11EF-4D00-9CB0-4C687C73D27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.2:-:pe:*:*:*:*:*","matchCriteriaId":"A2238638-682D-4EFD-A793-FB015D24AF0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.6:-:pe:*:*:*:*:*","matchCriteriaId":"A7ABE1FD-F407-4A2A-80AC-798DAD000A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.12:-:pe:*:*:*:*:*","matchCriteriaId":"CEA13675-CB4C-4ADB-911B-0834AED3504B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.51:-:pe:*:*:*:*:*","matchCriteriaId":"63DD03D1-E0C9-47DB-98E6-CDA26193E53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.61:-:pe:*:*:*:*:*","matchCriteriaId":"3E2E7CD0-51CE-461B-9098-6341B6480298"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.62:-:pe:*:*:*:*:*","matchCriteriaId":"912F4170-8E12-400C-97C1-109396B5D8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.63:-:pe:*:*:*:*:*","matchCriteriaId":"E31327FF-B3CC-4236-BB84-B6DD2659A0EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.65:-:pe:*:*:*:*:*","matchCriteriaId":"F6F3AF7A-AE94-4C94-BF1D-219B4454149B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:8.66:-:pe:*:*:*:*:*","matchCriteriaId":"499BBD33-BE6A-42D6-9FC2-DE0D5A848E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.0:-:pe:*:*:*:*:*","matchCriteriaId":"79ABC413-761B-4EB3-A9FC-B83EE5DAFC8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.1.2:-:pe:*:*:*:*:*","matchCriteriaId":"8D32892E-C508-469F-B06B-0F1C546106C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.2:-:pe:*:*:*:*:*","matchCriteriaId":"94B835E1-8E67-46FE-B9C6-854525DCF0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.3:-:pe:*:*:*:*:*","matchCriteriaId":"266CEA1B-5C88-4A66-BD7B-53EC2750575C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.3.1:-:pe:*:*:*:*:*","matchCriteriaId":"4C9B2E61-9531-478C-AF8A-F16439F0A221"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezbsystems:ultraiso:9.3.2:-:pe:*:*:*:*:*","matchCriteriaId":"375D5262-2DE1-4056-A010-F171A852AFBC"}]}]}],"references":[{"url":"http://osvdb.org/53275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34363","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49672","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8343","source":"cve@mitre.org"},{"url":"http://osvdb.org/53275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1261","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Web Help Desk v9.1.22 (versión de evaluación) permite a atacantes remotos inyectar secuencias de  comandos web o HTML de su elección a través de (1) Report Name, (2) Asset No., y (3) y campos Full Name en una acción \"Models\". NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos exclusivamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webhelpdesk:web_help_desk:9.1.22:*:*:*:*:*:*:*","matchCriteriaId":"DEC4A539-97AE-45E0-A69F-1484E486D654"}]}]}],"references":[{"url":"http://osvdb.org/53422","source":"cve@mitre.org"},{"url":"http://osvdb.org/53423","source":"cve@mitre.org"},{"url":"http://osvdb.org/53424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34596","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34391","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49683","source":"cve@mitre.org"},{"url":"http://osvdb.org/53422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1262","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en Fortinet FortiClient v3.0.614 y posiblemente versiones anteriores permite a usuarios locales ejecutar código de forma arbitraria a través de especificadores de formato de cadena en el nombre de la conexión VPN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:forticlient:3.0.614:*:*:*:*:*:*:*","matchCriteriaId":"46CC5D47-9685-4B5A-9308-A450CC7C8233"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53266","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.layereddefense.com/FortiClient02Apr.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502354/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502602/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34343","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021966","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0941","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49633","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.layereddefense.com/FortiClient02Apr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502602/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1263","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en sub_commententry.php en el componente BookJoomlas (com_bookjoomlas) v0.1 para Joomla! permite a atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro \"gbid\" en una acción de comentario en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alikonweb:com_bookjoomlas:0.1:*:*:*:*:*:*:*","matchCriteriaId":"54520703-F96D-47B1-9958-C3DF4E76A61B"}]}]}],"references":[{"url":"http://osvdb.org/53421","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34392","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0952","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49682","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8353","source":"cve@mitre.org"},{"url":"http://osvdb.org/53421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1264","sourceIdentifier":"cve@mitre.org","published":"2009-04-07T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors."},{"lang":"es","value":"La extensión Frontend User Registration (sr_feuser_register) v.2.5.20 y anteriores para TYPO3, no comprueba adecuadamente los permisos de acceso, esto permite a usuarios autenticados en remoto obtener información sensible como contraseñas a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.20","matchCriteriaId":"B3355511-4472-4D36-B160-45A1F818DCFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.4:*:*:*:*:*:*:*","matchCriteriaId":"053EF31D-FE26-4CF3-BE33-EB0F1036718F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6:*:*:*:*:*:*:*","matchCriteriaId":"E3E20C0A-8B89-4C95-8B24-A2A3CBFA0127"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"476D5133-8BCB-44BF-B61F-6699D7B8F9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E9C84689-C9B1-480A-A3BF-00EF5316F03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"9B00C7C5-54A6-485D-AAF7-61F12E0D7B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3:*:*:*:*:*:*:*","matchCriteriaId":"D815939A-4446-4CC8-86EE-58903DEC9CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B238304F-2FEB-497C-B74D-4BED29879040"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.4:*:*:*:*:*:*:*","matchCriteriaId":"ABDA6FBA-9A42-4524-AA65-2A15A5B2E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F51DBFDB-9D5B-46D2-8EBC-A298E8DBBF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"3F44CBF4-5A38-41C8-A7C5-CA1D6A61BEE4"}]}]}],"references":[{"url":"http://osvdb.org/53278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34374","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0938","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1265","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T01:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes \"garbage\" memory to be sent."},{"lang":"es","value":"Desbordamiento de entero en rose_sendmsg (sys/net/af_rose.c) en el kernel de Linux  v2.6.24.4 y otras versiones anteriores a la 2.6.30-rc1, podría permitir a atacantes remotos conseguir información sensible a través de un valor largo, lo que causaría que la \"basura\" de la memoria fuese enviada."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 4, 5, or Red Hat Enterprise MRG, as the affected driver is not enabled in these kernels.\n\nThe affected driver is available in Red Hat Enterprise Linux 3, but only if the kernel-unsupported package is installed.\n\nThis issue has been rated as having moderate security impact as it does not lead to a denial of service or privilege escalation. As Red Hat Enterprise Linux 3 is now in Production 3 of its maintenance life-cycle, http://www.redhat.com/security/updates/errata, and the affected driver can only be enabled when using the unsupported kernel-unsupported package, a fix for this issue is not currently planned to be included in the future updates.","lastModified":"2009-06-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*","matchCriteriaId":"AA036609-ADD3-4903-AB9D-E8BF81CFC776"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*","matchCriteriaId":"38F9E122-994B-4276-9FCF-A8E4D2D06D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*","matchCriteriaId":"7A15720C-3BDF-4343-B270-2575978293EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*","matchCriteriaId":"FB5ADCFA-2CD8-4A00-AFEC-B84F7E0015A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*","matchCriteriaId":"6EA2EE9B-27FD-49FE-8665-159DABA0E3C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*","matchCriteriaId":"4C81C5F8-2224-4D84-B7C0-E18421276AFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.38:*:*:*:*:*:*:*","matchCriteriaId":"B44A2C76-174E-40A5-9603-3B84D0D35557"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.39:*:*:*:*:*:*:*","matchCriteriaId":"42ACE154-0709-4AA1-82E3-1B7F34E63187"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.40:*:*:*:*:*:*:*","matchCriteriaId":"3022E902-9F0D-49FF-9279-71E0E1E8A873"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.41:*:*:*:*:*:*:*","matchCriteriaId":"DDF77B26-91FA-4245-BFEC-43FD021A28E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.42:*:*:*:*:*:*:*","matchCriteriaId":"601B4C93-9A9C-40E8-A9D0-DA9D71C745EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.43:*:*:*:*:*:*:*","matchCriteriaId":"FF7CE35A-87A4-4D95-86F9-211D50E30482"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.44:*:*:*:*:*:*:*","matchCriteriaId":"CEA8675A-A37C-4658-9D26-3359EBA277B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.45:*:*:*:*:*:*:*","matchCriteriaId":"00E8CB86-ECEE-4435-BEFC-B8D209B2C5AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.46:*:*:*:*:*:*:*","matchCriteriaId":"B373DEAE-8F8B-44AA-BAE5-3A0120A541F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.47:*:*:*:*:*:*:*","matchCriteriaId":"7D40063F-13D0-4897-AE71-1C7B617C8855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.48:*:*:*:*:*:*:*","matchCriteriaId":"AC7E89C8-CF89-4FA8-A9F1-F0B415E5FE10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.49:*:*:*:*:*:*:*","matchCriteriaId":"4034EFE6-449D-4749-9265-B47D44AA4EC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.50:*:*:*:*:*:*:*","matchCriteriaId":"1F835D17-ACF9-4AE6-8C38-B74BE448B8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.51:*:*:*:*:*:*:*","matchCriteriaId":"21A12676-7EBE-4D83-83BD-D46CC7A1773A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.52:*:*:*:*:*:*:*","matchCriteriaId":"2FB112DB-891D-4FDB-8772-2E233A39A7BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.53:*:*:*:*:*:*:*","matchCriteriaId":"4B3A0794-B10C-4DFD-9CAD-202CA1DC9250"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.54:*:*:*:*:*:*:*","matchCriteriaId":"76E86CE6-CD1C-4412-939F-B45867068D44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.55:*:*:*:*:*:*:*","matchCriteriaId":"1F6896A4-16E0-46B6-B90C-5C002C526478"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.56:*:*:*:*:*:*:*","matchCriteriaId":"469534AB-2D0F-4B31-8121-05A792FA9332"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.57:*:*:*:*:*:*:*","matchCriteriaId":"C2820354-F25B-485D-9FA7-E32B38DDBB1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.58:*:*:*:*:*:*:*","matchCriteriaId":"EF88BEB3-9EA4-47AA-B24E-DE9AD879382A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.59:*:*:*:*:*:*:*","matchCriteriaId":"C4209B4C-4901-4235-B35E-B0085AF1952F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.60:*:*:*:*:*:*:*","matchCriteriaId":"5D748A69-4A93-421E-AD83-2B63B2460A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.61:*:*:*:*:*:*:*","matchCriteriaId":"2727A6AE-A1B6-4158-BB73-49D7C86104F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.62:*:*:*:*:*:*:*","matchCriteriaId":"71F3744A-0205-4BD6-8D43-E06DCBA54C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=10423","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53571","source":"cve@mitre.org"},{"url":"http://osvdb.org/53630","source":"cve@mitre.org"},{"url":"http://osvdb.org/53631","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35387","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/08/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34654","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=10423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/08/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1266","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en Wireshark anteriores a v1.0.7-0.1-1 tiene un impacto y vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7","matchCriteriaId":"C9E11B1A-B1B2-417C-804F-7C9E2454D8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"DA052598-2E72-4568-B783-8B01382736DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3283D8D0-0714-48CC-94C4-B5FA6C913A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"090B987C-9880-4221-BC4C-8D53A8801649"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"06828062-5F31-4532-9E24-34F29CE30218"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"5738F4F0-41C6-48CF-8233-C94D79DCA807"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50334","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1267","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el analizador de LDAP de Wireshark desde la versión v0.99.2 hasta la v1.0.6, cuando se ejecuta en Windows, permite a usuarios remotos provocar una denegación de servicio (caída del servicio) a través de vectores de ataque desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n","lastModified":"2009-04-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34457","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022027","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49814","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6099","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1268","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet."},{"lang":"es","value":"Vulnerabilidad en el analizador del protocolo Check Point High-Availability Protocol (CPHAP) de Wireshark desde la versión v0.0.6 hasta la v1.0.6 permite a usuarios remotos causar una denegación de servicio (caída del servicio) a través de un paquete FWHA_MY_STATE modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35224","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37477","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1785","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34457","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022027","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49815","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10876","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5335","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1269","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file."},{"lang":"es","value":"Una vulnerabilidad sin especificar en Wireshark 0.99.6 a 1.0.6 permite a atacantes remotos provocar una denegación de servicio (con caída de la aplicación) a través de un archivo Tektronix .rf5 debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34970","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35224","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35464","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1785","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:088","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34457","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022027","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49816","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10642","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5748","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1270","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang."},{"lang":"es","value":"libclamav/untar.c en ClamAV anteriores a v0.95 permite a atacantes remotos provocar una denegación de servicio (buble infinito) a través de un fichero manipulado que provoca que se cuelguen (1) clamd y (2) clamscan."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndExcluding":"0.95","matchCriteriaId":"313364AD-2D04-4292-932A-33CC851EA16E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/53461","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34716","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1771","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/6","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34357","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-754-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0934","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49846","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462","source":"cve@mitre.org","tags":["Broken Link","Issue Tracking"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/53461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-754-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Issue Tracking"]}]}},{"cve":{"id":"CVE-2009-1271","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function."},{"lang":"es","value":"La función JSON_parser (ext/json/JSON_parser.c) en PHP v5.2.x anteriores a v5.2.9 permite a atacantes remotos provocar una denegación de servicio (falta de segmentación) a través de una cadena formada de forma incorrecta a la función API json_decode.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect PHP versions as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5, and Red Hat Application Stack v1. PHP version in Red Hat Application Stack v2 was fixed via: https://rhn.redhat.com/errata/RHSA-2009-0350.html","lastModified":"2009-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*","matchCriteriaId":"F526115E-A68E-4B10-AA6A-9CD26CB81AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34770","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34830","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34933","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35003","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35007","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1775","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:090","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/9","source":"cve@mitre.org"},{"url":"http://www.php.net/releases/5_2_9.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-761-2","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/761-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"cve@mitre.org"},{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_2_9.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-761-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/761-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1272","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction."},{"lang":"es","value":"La función php_zip_make_relative_path en php_zip.c en PHP v5.2.x anteriores a v5.2.9 permite a atacantes, dependiendo del contexto, provocar una denegación de servicio (caída) a través de una fichero ZIP que contiene nombres de ficheros con las rutas relativas, lo que no está bien manejado durante la extracción."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect PHP versions as shipped in Red Hat Enterprise Linux 2.1, 3, 4, and 5, and Red Hat Application Stack v1 and v2. This problem was introduced in the fix for CVE-2008-5658. Patch for CVE-2008-5658 as used in Red Hat Application Stack v2 also includes the fix for this crash too.","lastModified":"2009-04-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*","matchCriteriaId":"F526115E-A68E-4B10-AA6A-9CD26CB81AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"}]}]}],"references":[{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/9","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/09/1","source":"cve@mitre.org"},{"url":"http://www.php.net/releases/5_2_9.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_2_9.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1273","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames."},{"lang":"es","value":"pam_ssh v1.92 y posiblemente otras versiones, como las usadas cuando PAM se compila con USE=ssh, genera diferentes mensajes de error dependiendo de cuando el nombre de usuario es válido o inválido, lo que hace más fácil a atacantes remotos enumerar los nombres de usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_j.korty:pam_ssh:1.92:*:*:*:*:*:*:*","matchCriteriaId":"73F34D9E-CBD9-4BB2-BEDC-BB536241CA2C"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263579","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34536","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34986","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00145.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=263579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00145.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1274","sourceIdentifier":"cve@mitre.org","published":"2009-04-08T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función qt_error parse_trak_atom en demuxers/demux_qt.c en xine-lib v1.1.16.2 y anteriores permite a atacantes remotos ejecutar código de su elección a través de un fichero de vídeo Quicktime, con un valor largo de contador en un elemento STTS, lo que provoca un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAB10333-6C25-4359-BB3F-D76468170825"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2377493B-8CC0-414B-AA5F-B7777C852195"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AFC149FA-B916-4844-AD98-B7827116C803"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BBF4E9-6090-4ED3-8A12-09396E660505"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"AA642532-365F-4981-BA09-A56D3628271C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"7B75F992-1E85-491D-99FF-2ABE4228B88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C68EFD39-5F34-41DD-9897-A28A6BD190A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"25A4FBA1-BC5C-43F8-AD20-7D7245382EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.16.1:*:*:*:*:*:*:*","matchCriteriaId":"066B88F9-0617-403E-9B7A-B8CAC6E76D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1.1.16.2:*:*:*:*:*:*:*","matchCriteriaId":"D88354B3-C565-480C-B45D-CB172F139E28"}]}]}],"references":[{"url":"http://bugs.xine-project.org/show_bug.cgi?id=224","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:298","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:299","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34384","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021989","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2009-005.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49714","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html","source":"cve@mitre.org"},{"url":"http://bugs.xine-project.org/show_bug.cgi?id=224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2009-005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/0937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1275","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags."},{"lang":"es","value":"Apache Tiles v2.1 anteriores a v2.1.2, como las usadas en Apache Struts y otros productos, evalúan las expresiones del lenguaje de expresiones (EL), dos veces en ciertas circunstancias, lo que permite a atacantes remotos conducir ataques de secuencias de comandos en sitios cruzados (XSS) para obtener información sensible a través de vectores no especificados, relativo a (1) tiles:putAttribute y (2) etiquetas JSP tiles:insertTemplate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*","matchCriteriaId":"4BFF7B2B-1DD7-46F4-9EF3-CB486EA84D94"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tiles:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A48583E6-A6FB-4F6E-AB8D-75BC999EE8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tiles:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"500C802F-65FF-4CD4-863C-063760B67116"}]}]}],"references":[{"url":"http://svn.apache.org/viewvc/tiles/framework/trunk/src/site/apt/security/security-bulletin-1.apt?revision=741913","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34657","source":"cve@mitre.org"},{"url":"https://issues.apache.org/struts/browse/TILES-351","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/tiles/framework/trunk/src/site/apt/security/security-bulletin-1.apt?revision=741913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/struts/browse/TILES-351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1276","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T15:08:35.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications."},{"lang":"es","value":"XScreenSaver en Sun Solaris v10 and OpenSolaris anteriores a snv_109, y Solaris v8 y v9 con GNOME v2.0 o v2.0.2, permite a atacantes próximos físicamente conseguir información sensible, leyendo las ventanas \"PopUp\"s, que se muestran cuando la pantalla se bloquea, como se demostró en las notificaciones de nuevo mensaje de Thunderbird."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gnome:2.0:*:*:*:*:*:*:*","matchCriteriaId":"49E5B508-4053-4FA4-9454-BC7E2D31DE05"},{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gnome:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1AE904C0-4BF9-44EA-B17D-C8E5E43B103D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_108","matchCriteriaId":"D4A9DF86-60C3-41C2-8CB7-AD9841676694"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gnome:2.0:*:*:*:*:*:*:*","matchCriteriaId":"49E5B508-4053-4FA4-9454-BC7E2D31DE05"},{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gnome:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1AE904C0-4BF9-44EA-B17D-C8E5E43B103D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_108","matchCriteriaId":"342DE19C-9923-45C8-A441-5101F117A1CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022009","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34421","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0978","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1277","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:53.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action.  NOTE: the board_id issue is already covered by CVE-2008-2996.2."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Gravity Board X (GBX) 2.0 BETA permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro member_id en una acción viewprofile. NOTA: La cuestión board_id ya está cubierta por el CVE-2008-2996.2"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"F03FB72E-B395-412A-BE9B-27FE08A2A2D2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34370","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49678","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1278","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en forms/ajax/configure.php en Gravity Board X (GBX) v2.0 BETA permite a atacantes remotos inyectar código PHP a su elección en config.php a través de la acción configure en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravityboardx:gravity_board_x:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"F03FB72E-B395-412A-BE9B-27FE08A2A2D2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34370","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49679","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1279","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when \"Gather Search Statistics\" is enabled, and (3) the category view in the com_content component."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Joomla! v1.5 hasta 1.5.9, permite a atacantes remotos web script o HTML de su elección a través de vectores no especificados en los componentes (1) com_admin, (2) com_search cuando \"Gather Search Statistics\" está disponible y (3) la vista categoría en com_content.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D548B3C9-483F-492C-A6BB-694B7217FEE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9813E813-2983-4471-9E56-6F254810A66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A4F4F9E7-BA44-4235-A246-DB6C432C3873"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"495BD724-45BE-4214-B120-3A83BD9AD11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B29D3E39-7B43-4D19-B39F-2EB56E30F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5F155C3B-AAF5-4393-A964-E655113D84DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34360","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49654","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49655","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1280","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición de sitios cruzados en el componente com_media para Joomla! v1.5.x hasta v1.5.9 permite a atacantes remotos secuestrar la autentificación de de víctimas no especificadas mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D548B3C9-483F-492C-A6BB-694B7217FEE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9813E813-2983-4471-9E56-6F254810A66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A4F4F9E7-BA44-4235-A246-DB6C432C3873"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"495BD724-45BE-4214-B120-3A83BD9AD11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B29D3E39-7B43-4D19-B39F-2EB56E30F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5F155C3B-AAF5-4393-A964-E655113D84DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49656","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1281","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en glFusion anteriores a v1.1.3, permite a usuarios remotos inyectar de forma arbitraria secuencias de comandos web o HTML a través vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"ED6C9F8D-68B5-4269-8202-D49B48434214"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"798B4747-978F-46D2-8EF1-76D8BC0872F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D711131E-314B-4BBE-9E6F-973C154694B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D80EE971-44CA-478F-88CB-A13CBDD628CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6941B9D9-5EA0-4954-89E8-350B4EE8E35A"}]}]}],"references":[{"url":"http://osvdb.org/53287","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.glfusion.org/article.php/glfusion113","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34377","source":"cve@mitre.org"},{"url":"http://osvdb.org/53287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.glfusion.org/article.php/glfusion113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1282","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glf_session cookie parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en private/system/lib-session.php en glFusion v1.1.2 y anteriores, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de parámetro de la cookie glf_session.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"ED6C9F8D-68B5-4269-8202-D49B48434214"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"798B4747-978F-46D2-8EF1-76D8BC0872F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E3D0B5AC-35D8-4900-B2F8-95D661E880CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3FE6694E-7ED1-45F4-94D7-D5CD9AA6D801"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D711131E-314B-4BBE-9E6F-973C154694B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D80EE971-44CA-478F-88CB-A13CBDD628CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51D13EE5-3B44-4AB3-86CD-01E9488DFBF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6941B9D9-5EA0-4954-89E8-350B4EE8E35A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123877379105028&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/53286","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34361","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49652","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8347","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123877379105028&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/53286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1283","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glf_password cookie, aka \"User Masquerading.\" NOTE: this can be leveraged with a separate SQL injection vulnerability to steal hashes."},{"lang":"es","value":"glFusion anterior a v1.1.3 realiza la autenticación con el hash de una contraseña en lugar de una contraseña, lo que permite a atacantes remotos obtener privilegios mediante la obtención del hash y utilizarlo en la cookie glf_password, (tambien conocido como \"Enmascaramiento de usuario.\") NOTA: esto puede ser apoyado con una vulnerabilidad de inyección SQL para robar hashes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"ED6C9F8D-68B5-4269-8202-D49B48434214"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"798B4747-978F-46D2-8EF1-76D8BC0872F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E3D0B5AC-35D8-4900-B2F8-95D661E880CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3FE6694E-7ED1-45F4-94D7-D5CD9AA6D801"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D711131E-314B-4BBE-9E6F-973C154694B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B0A24202-EB12-4428-A327-97504EB460B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D80EE971-44CA-478F-88CB-A13CBDD628CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51D13EE5-3B44-4AB3-86CD-01E9488DFBF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6941B9D9-5EA0-4954-89E8-350B4EE8E35A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=123877379105028&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.glfusion.org/article.php/glfusion113","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8347","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=123877379105028&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.glfusion.org/article.php/glfusion113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1284","sourceIdentifier":"cve@mitre.org","published":"2009-04-09T16:27:57.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib bibliography file."},{"lang":"es","value":"Desbordamiento de búfer en BibTeX v0.99 permite a atacantes, dependiendo del contexto, provocar una denegación de servicio (corrupción de memoria y caída) a través de un fichero de bibliografía .bib grande."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\n\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-1284\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\n\nhttp://www.redhat.com/security/updates/classification/","lastModified":"2009-08-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bibtex:bibtex:0.99:*:*:*:*:*:*:*","matchCriteriaId":"9E6B810E-48BB-4CB4-8A06-EAB032FD913F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34445","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201206-28.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/8","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-937-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492136","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00505.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00507.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201206-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-937-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=492136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00505.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00507.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1285","sourceIdentifier":"cve@mitre.org","published":"2009-04-16T15:12:57.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en la función getConfigFile en setup/lib/ConfigFile.class.php en phpMyAdmin v3.x antes de v3.1.3.2 permite a atacantes remotos ejecutar código PHP de su elección en ficheros de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*","matchCriteriaId":"F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"}]}]}],"references":[{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/setup/lib/ConfigFile.class.php?r1=12248&r2=12301&pathrev=12342","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34727","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34741","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-4.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34526","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1045","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00442.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00452.html","source":"cve@mitre.org"},{"url":"http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/setup/lib/ConfigFile.class.php?r1=12248&r2=12301&pathrev=12342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-4.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00442.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00452.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1286","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities."},{"lang":"es","value":"Vulnerabilidad en la tarea de servidor IMAP en IBM Lotus Domino v8.0.2 anterior a FP1 IF1 y v8.5 anterior IF3 permite a usuarios remotos causar una denegación de servicio (caída del servicio) a través de un mensaje de e-mail MIME con adjuntos RFC822 (o blobs) que contienen entidades root mal formadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*","matchCriteriaId":"6C3DB9C3-4DAC-4663-9097-95600E13FCDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE8510F6-D054-488E-99E9-A58272C47AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"15DB2AF7-B494-4494-8686-33CB6A4C2CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FD6A3A3-6D6C-4EE0-B092-862DB03AC320"}]}]}],"references":[{"url":"http://secunia.com/advisories/34657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022024","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21379894","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21379915","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21381562","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21381566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34441","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0986","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21379894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21379915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21381562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21381566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1287","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Cisco Subscriber Edge Services Manager (SESM) permite a usuarios remotos inyectar código web script o HTML de su elección a través de la URI (Uniform Resource Identifier). NOTA: algunos de estos detalles se han obtenido de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:subscriber_edge_services_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E86726D1-256E-4F9D-8D3A-DD1F1BD2E165"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34454","source":"cve@mitre.org"},{"url":"http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50349","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1288","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager."},{"lang":"es","value":"Varias vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el \"Advanced Management Module\" (AMM) o módulo de gestión avanzada de BladeCenter de IBM, incluyendo el BladeCenter H con BPET36H 54. Permiten a usuarios remotos inyectar código web script o HTML de su elección a través de (1) el nombre de usuario en una acción de login o (2) el parámetro PATH de private/file_management.ssi en el gestor de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*","matchCriteriaId":"65D2F618-192F-449D-B182-0AF5CAAE730B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*","matchCriteriaId":"F0D41279-6729-447A-A9CE-EFD83D82DC19"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*","matchCriteriaId":"F578E536-42AE-4ABB-999B-C0F1249913D4"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*","matchCriteriaId":"BDE7F2D8-362B-49E5-B110-F5845F337FE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*","matchCriteriaId":"0BAADDA3-CD72-4F14-B2CA-6EDA5E4EAEF1"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*","matchCriteriaId":"D22C37E6-62A0-48FD-8000-91270C14B646"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*","matchCriteriaId":"E98311E3-E944-4380-B52A-CCB7895187B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*","matchCriteriaId":"B77405D4-F9B6-445A-9124-AAF53F955FA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*","matchCriteriaId":"CA2824FF-1585-4035-AB47-24835688BEE6"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*","matchCriteriaId":"2BE05E6A-F41B-4F5B-BF80-E9848BC21D5D"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*","matchCriteriaId":"84927A93-FBE6-4A9D-937C-73D84FDA0CFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*","matchCriteriaId":"6AD291A9-FD2A-4F2E-AA5A-F587781FF208"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*","matchCriteriaId":"61A7429A-EA22-4CC3-9177-EBD739BB55AD"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*","matchCriteriaId":"177AB1AA-15CC-416C-A47B-7C290F23EC31"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*","matchCriteriaId":"1210591D-6168-4C99-A40F-18BCC49656F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*","matchCriteriaId":"E2C199D1-B4F3-4939-A216-30836490B4F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*","matchCriteriaId":"FD438583-D9C6-40CD-9526-D42E8FAC6689"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*","matchCriteriaId":"8D690D2D-174D-40CB-9273-8FA8E75EACDD"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*","matchCriteriaId":"FBC94677-BF7E-4DEE-9C2B-EEF4E730E6F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*","matchCriteriaId":"B0B7B3D3-306D-45C1-992F-8DBE78106A0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*","matchCriteriaId":"97B880FC-2992-4644-B40D-BFD857ADDF7D"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*","matchCriteriaId":"55CF4234-A310-4A08-9BFA-6CA0E46F50CB"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*","matchCriteriaId":"FF502A54-6B7B-4ED9-932B-DC51A440D145"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*","matchCriteriaId":"7A7C4912-DCDC-4402-BC10-B7BCE2821E86"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*","matchCriteriaId":"6D2473A1-0DBB-4A17-8330-1E835D793815"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*","matchCriteriaId":"F7BD9823-CDFB-4E75-B9CA-AB4D53BE22DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*","matchCriteriaId":"3D8C051F-56B7-4B6D-8357-4E1B76DAE024"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*","matchCriteriaId":"9AC31661-5830-4FB3-8970-7C26D0658BC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*","matchCriteriaId":"A7C6F823-C727-45DA-A623-3F95C92CFE76"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*","matchCriteriaId":"9B853206-C826-4215-9A56-8CAF9D018603"}]}]}],"references":[{"url":"http://osvdb.org/53657","source":"cve@mitre.org"},{"url":"http://osvdb.org/53658","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022025","source":"cve@mitre.org"},{"url":"http://www.louhinetworks.fi/advisory/ibm_090409.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34447","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/53657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.louhinetworks.fi/advisory/ibm_090409.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1289","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter."},{"lang":"es","value":"Vulnerabilidad en private/login.ssi en el \"Advanced Management Module\" (AMM) o módulo de gestión avanzada de BladeCenter de IBM, incluyendo el BladeCenter H con BPET36H 54, permite a usuarios remotos averiguar los roles de acceso y el \"scope\" (alcance) de cuentas de usuario arbitrarias a través del parámetro WEBINDEX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*","matchCriteriaId":"65D2F618-192F-449D-B182-0AF5CAAE730B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*","matchCriteriaId":"F0D41279-6729-447A-A9CE-EFD83D82DC19"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*","matchCriteriaId":"F578E536-42AE-4ABB-999B-C0F1249913D4"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*","matchCriteriaId":"BDE7F2D8-362B-49E5-B110-F5845F337FE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*","matchCriteriaId":"0BAADDA3-CD72-4F14-B2CA-6EDA5E4EAEF1"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*","matchCriteriaId":"D22C37E6-62A0-48FD-8000-91270C14B646"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*","matchCriteriaId":"E98311E3-E944-4380-B52A-CCB7895187B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*","matchCriteriaId":"B77405D4-F9B6-445A-9124-AAF53F955FA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*","matchCriteriaId":"CA2824FF-1585-4035-AB47-24835688BEE6"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*","matchCriteriaId":"2BE05E6A-F41B-4F5B-BF80-E9848BC21D5D"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*","matchCriteriaId":"84927A93-FBE6-4A9D-937C-73D84FDA0CFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*","matchCriteriaId":"6AD291A9-FD2A-4F2E-AA5A-F587781FF208"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*","matchCriteriaId":"61A7429A-EA22-4CC3-9177-EBD739BB55AD"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*","matchCriteriaId":"177AB1AA-15CC-416C-A47B-7C290F23EC31"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*","matchCriteriaId":"1210591D-6168-4C99-A40F-18BCC49656F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*","matchCriteriaId":"E2C199D1-B4F3-4939-A216-30836490B4F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*","matchCriteriaId":"FD438583-D9C6-40CD-9526-D42E8FAC6689"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*","matchCriteriaId":"8D690D2D-174D-40CB-9273-8FA8E75EACDD"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*","matchCriteriaId":"FBC94677-BF7E-4DEE-9C2B-EEF4E730E6F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*","matchCriteriaId":"B0B7B3D3-306D-45C1-992F-8DBE78106A0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*","matchCriteriaId":"97B880FC-2992-4644-B40D-BFD857ADDF7D"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*","matchCriteriaId":"55CF4234-A310-4A08-9BFA-6CA0E46F50CB"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*","matchCriteriaId":"FF502A54-6B7B-4ED9-932B-DC51A440D145"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*","matchCriteriaId":"7A7C4912-DCDC-4402-BC10-B7BCE2821E86"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*","matchCriteriaId":"6D2473A1-0DBB-4A17-8330-1E835D793815"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*","matchCriteriaId":"F7BD9823-CDFB-4E75-B9CA-AB4D53BE22DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*","matchCriteriaId":"3D8C051F-56B7-4B6D-8357-4E1B76DAE024"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*","matchCriteriaId":"9AC31661-5830-4FB3-8970-7C26D0658BC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*","matchCriteriaId":"A7C6F823-C727-45DA-A623-3F95C92CFE76"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*","matchCriteriaId":"9B853206-C826-4215-9A56-8CAF9D018603"}]}]}],"references":[{"url":"http://osvdb.org/53659","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022025","source":"cve@mitre.org"},{"url":"http://www.louhinetworks.fi/advisory/ibm_090409.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34447","source":"cve@mitre.org"},{"url":"http://osvdb.org/53659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.louhinetworks.fi/advisory/ibm_090409.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1290","sourceIdentifier":"cve@mitre.org","published":"2009-04-13T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en la interfaz de administración web en el Módulo de Gestión Avanzada (AMM) en el IBM BladeCenter, incluidos los BladeCenter H con BPET36H 54, permiten a atacantes remotos realizar acciones no autorizadas como administradores, como lo demuestra una solicitud de apagado al script private/blade_power_action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:advanced_management_module:1.36h:*:*:*:*:*:*:*","matchCriteriaId":"65D2F618-192F-449D-B182-0AF5CAAE730B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:1881:*:*:*:*:*","matchCriteriaId":"F0D41279-6729-447A-A9CE-EFD83D82DC19"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:7967:*:*:*:*:*","matchCriteriaId":"F578E536-42AE-4ABB-999B-C0F1249913D4"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:e:*:8677:*:*:*:*:*","matchCriteriaId":"BDE7F2D8-362B-49E5-B110-F5845F337FE5"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:h:*:7989:*:*:*:*:*","matchCriteriaId":"0BAADDA3-CD72-4F14-B2CA-6EDA5E4EAEF1"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:h:*:8852:*:*:*:*:*","matchCriteriaId":"D22C37E6-62A0-48FD-8000-91270C14B646"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hc10:*:7996:*:*:*:*:*","matchCriteriaId":"E98311E3-E944-4380-B52A-CCB7895187B0"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:1916:*:*:*:*:*","matchCriteriaId":"B77405D4-F9B6-445A-9124-AAF53F955FA0"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:8014:*:*:*:*:*","matchCriteriaId":"CA2824FF-1585-4035-AB47-24835688BEE6"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs12:*:8028:*:*:*:*:*","matchCriteriaId":"2BE05E6A-F41B-4F5B-BF80-E9848BC21D5D"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs20:*:1883:*:*:*:*:*","matchCriteriaId":"84927A93-FBE6-4A9D-937C-73D84FDA0CFE"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21:*:1885:*:*:*:*:*","matchCriteriaId":"6AD291A9-FD2A-4F2E-AA5A-F587781FF208"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21:*:8853:*:*:*:*:*","matchCriteriaId":"61A7429A-EA22-4CC3-9177-EBD739BB55AD"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21_xm:*:1915:*:*:*:*:*","matchCriteriaId":"177AB1AA-15CC-416C-A47B-7C290F23EC31"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:hs21_xm:*:7995:*:*:*:*:*","matchCriteriaId":"1210591D-6168-4C99-A40F-18BCC49656F5"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:ht:*:8740:*:*:*:*:*","matchCriteriaId":"E2C199D1-B4F3-4939-A216-30836490B4F5"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:ht:*:8750:*:*:*:*:*","matchCriteriaId":"FD438583-D9C6-40CD-9526-D42E8FAC6689"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:js12:*:7998:*:*:*:*:*","matchCriteriaId":"8D690D2D-174D-40CB-9273-8FA8E75EACDD"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:js21:*:7988:*:*:*:*:*","matchCriteriaId":"FBC94677-BF7E-4DEE-9C2B-EEF4E730E6F8"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:js21:*:8844:*:*:*:*:*","matchCriteriaId":"B0B7B3D3-306D-45C1-992F-8DBE78106A0A"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:js22:*:7998:*:*:*:*:*","matchCriteriaId":"97B880FC-2992-4644-B40D-BFD857ADDF7D"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:ls20:*:8850:*:*:*:*:*","matchCriteriaId":"55CF4234-A310-4A08-9BFA-6CA0E46F50CB"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:ls21:*:7971:*:*:*:*:*","matchCriteriaId":"FF502A54-6B7B-4ED9-932B-DC51A440D145"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:ls41:*:7972:*:*:*:*:*","matchCriteriaId":"7A7C4912-DCDC-4402-BC10-B7BCE2821E86"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:qs21:*:0792:*:*:*:*:*","matchCriteriaId":"6D2473A1-0DBB-4A17-8330-1E835D793815"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:qs22:*:0793:*:*:*:*:*","matchCriteriaId":"F7BD9823-CDFB-4E75-B9CA-AB4D53BE22DE"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:s:*:1948:*:*:*:*:*","matchCriteriaId":"3D8C051F-56B7-4B6D-8357-4E1B76DAE024"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:s:*:8886:*:*:*:*:*","matchCriteriaId":"9AC31661-5830-4FB3-8970-7C26D0658BC0"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*","matchCriteriaId":"A7C6F823-C727-45DA-A623-3F95C92CFE76"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*","matchCriteriaId":"9B853206-C826-4215-9A56-8CAF9D018603"}]}]}],"references":[{"url":"http://osvdb.org/53660","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022025","source":"cve@mitre.org"},{"url":"http://www.louhinetworks.fi/advisory/ibm_090409.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502582/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34447","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/53660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.louhinetworks.fi/advisory/ibm_090409.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502582/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1291","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via \"inbound data,\" as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en  TIBCO SmartSockets antes de v6.8.2, SmartSockets Product Family (alias RTworks) antes de v4.0.5, y Enterprise Message Service (EMS) v4.0.0 hasta v5.1.1, utilizado en SmartSockets Server y RTworks Server (alias RTserver), librerias del cliente SmartSockets y productos con el complemento, \r\nlibrerias y componentes RTworks, EMS Server (alias tibemsd), SmartMQ, iProcess Engine, productos ActiveMatrix, y CA Enterprise Communicator, permite a atacantes remotos ejecutar código arbitrario a través de \"inbound data,\" (datos de entrada), como lo demuestran las solicitudes de la interfaz UDP de el componente RTserver, y inyección de datos en el flujo TCP a tibemsd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.1","matchCriteriaId":"6217FE17-B839-43F5-BE35-F4A01C40DA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A391F64-B618-4961-942C-109CE548FBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3811EEE8-ED90-4272-BDC9-9FBB7E2ABC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72D4BFCE-FD9B-45D8-B23A-B928B86ED2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A8B14826-B53E-46DC-8AE9-85776867D341"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50598050-FAC6-42B6-98E5-D02DF85F1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:enterprise_message_service:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D47D8470-3A41-4A12-95B4-B77A97A2AF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rtworks:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E49B105-E110-4A0B-A93B-B93A956B9A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:rtworks:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"087EFE3D-85C1-4479-B867-AD32A20693A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F1ABE58C-9AF7-4013-A117-D72FF5991F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A0823AC2-9E58-4669-9DC0-41A5A93B427B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*","versionEndIncluding":"6.8.1","matchCriteriaId":"E3B33DD3-A164-4C13-A961-1E66ACB87DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tibco:smartsockets_rtserver:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"73DC7F67-3813-4659-9429-78B93C02385B"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34911","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022129","source":"cve@mitre.org"},{"url":"http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34754","source":"cve@mitre.org"},{"url":"http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.tibco.com/services/support/advisories/default.jsp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1198","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50214","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.tibco.com/services/support/advisories/default.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1292","sourceIdentifier":"cve@mitre.org","published":"2009-04-14T16:26:56.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process."},{"lang":"es","value":"UCM-CQ en IBM Rational ClearCase 7.0.0.x versiones anteriores a v7.0.0.5, 7.0.1.x versiones anteriores a v7.0.1.4, y 7.1.x versiones anteriores a v7.1.0.1 en Linux y AIX sitúa un nombre de usuario y una contraseña en la línea de comandos, lo cual permite a usuarios locales obtener credenciales listando el proceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BB9F09C7-CF4B-42FA-ADDD-189E60813590"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D00DF56-BFB1-4B91-95A4-0A2F33074AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"58FCE9A7-B9C0-470D-A71D-2A94F826A907"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E41B2A6E-F8F9-4D81-840A-B520BC557515"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"63308FC2-AE4D-4D50-B969-6AB28A77E550"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ED125939-3657-45AC-8F41-F61B08B4A220"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"89778E9A-90E8-4467-A33B-5F2BB0762A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FCCE7749-300A-452B-B428-9CF1DB000205"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6E293794-7223-46EE-BA6A-EF0535566312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.1:*:*:*:*:*:*:*","matchCriteriaId":"EDAC2996-1ACC-423C-BEA5-D86652A748D2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":false,"criteria":"cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A7C398-5356-45D6-AA5C-53E63BC88DCA"}]}]}],"references":[{"url":"http://secunia.com/advisories/34689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK75832","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34483","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022035","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK75832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1293","sourceIdentifier":"cve@mitre.org","published":"2009-04-16T15:12:57.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames."},{"lang":"es","value":"La funcionalidad de acceso web (c/portal/login) en Novell Teaming v1.0 a SP3 (1.0.3) genera diferentes mensajes de error en función de si el nombre de usuario es válido o inválid, lo que facilita a atacantes remotos descubrir los nombres de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6512E489-A272-4A6F-919D-E947E49CC0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"EFB7A6E2-2BF1-4999-9C21-EBAE0D6ADAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8F5B14AF-37D5-4BD8-B132-15AD5ACADC89"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"822B39AC-1892-4109-8FBE-E60A3B1766AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D04F150F-BFA8-49BF-BA7A-2FEA386D60B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1135D3D2-92DC-424C-986C-034EFEC343DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4EBB9853-7AC0-4169-853B-4DED8B59FCC0"}]}]}],"references":[{"url":"http://secunia.com/advisories/34714","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34531","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022063","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1048","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090415-0-novell-teaming.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090415-0-novell-teaming.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1294","sourceIdentifier":"cve@mitre.org","published":"2009-04-16T15:12:57.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject arbitrary web script or HTML via the (1) p_p_state or (2) p_p_mode parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en web/guest/home en el portal Liferay v4.3.0 en Novell Teaming v1.0 a SP3 (1.0.3) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) p_p_state or (2) p_p_mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6512E489-A272-4A6F-919D-E947E49CC0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D04F150F-BFA8-49BF-BA7A-2FEA386D60B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1135D3D2-92DC-424C-986C-034EFEC343DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:teaming:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4EBB9853-7AC0-4169-853B-4DED8B59FCC0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79819957-E04A-422D-A5F9-EC597C1BE32C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34714","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002999&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34531","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022063","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1048","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090415-0-novell-teaming.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002999&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090415-0-novell-teaming.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1295","sourceIdentifier":"security@ubuntu.com","published":"2009-04-30T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors."},{"lang":"es","value":"Apport anterior a v0.108.4 en Ubuntu v8.04 LTS, antes de v0.119.2 en Ubuntu v8.10, y antes de v1.0-0ubuntu5.2 en Ubuntu v9.04 no elimina adecuadamente los archivos del directorio crash-report,lo cual permite a los usuarios locales borrar archivos a su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apport:apport:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.0.8.1","matchCriteriaId":"EE304688-05F0-4F7F-8664-E729B6FA5090"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu:8.0.4_lts:*:*:*:*:*:*:*","matchCriteriaId":"F9245826-44D6-432D-9447-025FD02431D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8893D670-FF80-4297-8EF8-83C6CB165604"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"24066D17-EE95-4E06-9FAC-DA9B2227195F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/34947","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/34952","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/35065","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/34776","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-768-1","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/bugs/357024","source":"security@ubuntu.com","tags":["Exploit"]},{"url":"https://launchpad.net/bugs/cve/2009-1295","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-768-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/bugs/357024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://launchpad.net/bugs/cve/2009-1295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1296","sourceIdentifier":"security@ubuntu.com","published":"2009-06-09T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk.  NOTE: the log files are only readable by root."},{"lang":"es","value":"Las utilidades de soporte eCryptfs (ecryptfs-utils) 73-0ubuntu6.1 sobre Ubuntu v9.04, almacena almacena la \"passphrase\" de (frase clave) de montaje en los registros de instalación, lo que podría permitir a usuarios locales obtener acceso al sistema de ficheros mediante la lectura de los archivos de registro desde el disco. NOTA: los registros de archivos únicamente pueden ser leídos por el usuario root."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of ecryptfs-utils as shipped with Red Hat Enterprise Linux 5.  eCryptfs encrypted home directories are not set up during the system installation, so theres no possibility for leaking encryption passwords to the installation log file.","lastModified":"2009-06-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubuntu:73-oubuntu:6.1:*:*:*:*:*:*:*","matchCriteriaId":"8F6E6F4C-968E-475C-9BF1-4D34ABBA8BE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"24066D17-EE95-4E06-9FAC-DA9B2227195F"}]}]}],"references":[{"url":"http://secunia.com/advisories/35383","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022347","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-783-1","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51191","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/35383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-783-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1297","sourceIdentifier":"security@ubuntu.com","published":"2009-10-23T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name."},{"lang":"es","value":"iscsi_discovery en open-iscsi en SUSE openSUSE versión 10.3 hasta la 11.1 y SUSE Linux Enterprise (SLE) versión 10 SP2 y 11, y otros sistemas operativos, permite a los usuarios locales sobrescribir archivos arbitrarios por medio de un ataque de enlace simbólico (symlink) en un archivo temporal no especificado que tiene un nombre predecible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux:10:sp2:enterprise:*:*:*:*:*","matchCriteriaId":"3DC820C5-6283-4EB7-A5C7-B28EFEFC3926"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux:11:-:enterprise:*:*:*:*:*","matchCriteriaId":"BB545D91-1C4C-4692-B01A-B8DAE4A958BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:109","source":"security@ubuntu.com"},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1298","sourceIdentifier":"security@ubuntu.com","published":"2009-12-08T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function."},{"lang":"es","value":"La función ip_frag_reasm en el archivo net/ipv4/ip_fragment.c en el kernel de Linux versiones 2.6.32-rc8, y 2.6.29 y versiones posteriores anteriores a 2.6.32, llama a IP_INC_STATS_BH con un argumento incorrecto, que permite a atacantes remotos causar una denegación de servicio (suspensión y desreferencia de puntero NULL) por medio de paquetes IP largos, posiblemente relacionados con la función ip_defrag."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 and Red Hat Enterprise MRG as they did not include upstream commit 7c73a6fa that introduced the problem.","lastModified":"2009-12-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc8:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"B04C697F-397E-46B0-829E-9D21749C8BEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"46568A0D-F374-4DAB-9B64-FCC74A9AA07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc6:*:*:*:*:*:*","matchCriteriaId":"1B6C0A59-556F-4579-9AD2-4ABAE01FE2CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc7:*:*:*:*:*:*","matchCriteriaId":"DBE3083A-0FA6-4854-8F65-05E8364B3A9B"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=bbf31bf18d34caa87dd01f08bf713635593697f2","source":"security@ubuntu.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/37624","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"security@ubuntu.com"},{"url":"http://twitter.com/spendergrsec/statuses/6339560349","source":"security@ubuntu.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0161","source":"security@ubuntu.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32","source":"security@ubuntu.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"security@ubuntu.com"},{"url":"http://www.osvdb.org/60788","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/archive/1/508517/100/0/threaded","source":"security@ubuntu.com"},{"url":"http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/USN-869-1","source":"security@ubuntu.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544144","source":"security@ubuntu.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00453.html","source":"security@ubuntu.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00496.html","source":"security@ubuntu.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=bbf31bf18d34caa87dd01f08bf713635593697f2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/6339560349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508517/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-869-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00453.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00496.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1300","sourceIdentifier":"cve@mitre.org","published":"2009-04-16T15:12:57.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"apt 0.7.20 does not check when the date command returns an \"invalid date\" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight."},{"lang":"es","value":"apt 0.7.20 no comprueba si el comando \"date\" devuelve un error de \"invalid date\" (fecha no válida) que puede prevenir a apt de la carga de actualizaciones de seguridad en zonas horarias para las cuales DST se produce a medianoche."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.20:*:*:*:*:*:*:*","matchCriteriaId":"63E05BE6-9BDF-441E-873E-A4D965B3494F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34832","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34874","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1779","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/08/11","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/762-1/","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/08/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/762-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1301","sourceIdentifier":"cve@mitre.org","published":"2009-04-16T15:12:57.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via an ID3 tag with a negative encoding value.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Error de presencia de signo entero en la función store_id3_text en el código ID3v2 en mpg123 antes de 1.7.2 permite a atacantes remotos provocar una denegación de servicio (acceso a memoria fuera de rango) y posiblemente ejecutar código de su elección mediante una etiqueta ID3 con un valor de codificación negativo. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.1","matchCriteriaId":"EE444055-2ECC-4E90-BAEB-1D7F8A1C7045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59m:*:*:*:*:*:*:*","matchCriteriaId":"A46F3026-9958-460C-AB14-593C216E12D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59n:*:*:*:*:*:*:*","matchCriteriaId":"4D782ECC-6223-4055-A812-36625B50517D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59o:*:*:*:*:*:*:*","matchCriteriaId":"74027FB8-195D-432C-A4AB-83829C81FFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59p:*:*:*:*:*:*:*","matchCriteriaId":"2330232E-59BF-4885-84DC-879BAB98BA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59q:*:*:*:*:*:*:*","matchCriteriaId":"124B56BC-EF2F-42D8-81B5-AD4E854CA9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:*","matchCriteriaId":"1F8EEF7E-C6BB-4669-81D2-68AABF8A7686"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59s:*:*:*:*:*:*:*","matchCriteriaId":"1144518D-4069-4903-9B45-56C0E97BC992"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.62:*:*:*:*:*:*:*","matchCriteriaId":"F101A71C-6467-4008-9CCB-E2B9F69513FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D5C11F12-01A2-48A7-9A4D-4D07E6C2D8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"93106E19-1059-4040-A5FA-569A1B7EF8C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F7123CC8-1F0C-4069-A2DA-0A25418E551E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:pre0.59s:*:*:*:*:*:*:*","matchCriteriaId":"9AE94FDE-EC0C-48A1-A1E9-B4112CA4B0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:pre0.59s_r11:*:*:*:*:*:*:*","matchCriteriaId":"9765C6AD-E1F0-421C-B7B1-C09AD83A3DB7"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=265342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34587","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34748","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20090405211856.41696433%40sunscreen.local","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=673696","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200904-15.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:093","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34381","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0936","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=265342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20090405211856.41696433%40sunscreen.local","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=673696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200904-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1302","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors."},{"lang":"es","value":"El motor del navegador Mozilla Firefox v3.x anteriores a la v3.0.9, Thunderbird anteriores a la v2.0.0.22, y SeaMonkey anteriores a v1.1.16 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente inicia una corrupción de memoria a través de vectores relacionados con (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) caso de pueba xslt_attributeset_ImportSameName.html para el compilador XSLT stylesheet , (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate y nsEditor::EndUpdateViewBatch, y (8) gfxSkipCharsIterator::SetOffsets, y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022090","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=428113","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431260","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=432114","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454276","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461053","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=462517","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=467881","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=477775","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=483444","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=428113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=432114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=462517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=467881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=477775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=483444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1303","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree."},{"lang":"es","value":"El navegador del motor en Mozilla Firefox versiones anteriores a v3.0.9, Thunderbird versiones anteriores a v2.0.0.22, y SeaMonkey versiones anteriores a v1.1.16 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y posiblemente disparar corrupción de memoria a través de vectores relacionados con nsSVGElement::BindToTre."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.15","matchCriteriaId":"DBCBF62F-8386-4E0B-99F3-5152A2BCFEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.21","matchCriteriaId":"E03AD36E-7C5B-4A60-AE19-29F3AF780333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022090","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453736","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5810","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5992","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6151","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6646","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9455","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1304","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration."},{"lang":"es","value":"El motor JavaScript en Mozilla Firefox v3.x en anteriores a v3.0.9, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.16  permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente iniciar una corrupción de memoria a través de vectores relacionados con (1) js_FindPropertyHelper, relacionado con las definiciones de \"Math\" y \"Date\"; (2) js_CheckRedeclaration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022090","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461158","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475971","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5319","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5480","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6015","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7516","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9535","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1305","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute."},{"lang":"es","value":"El motor JavaScript en Mozilla Firefox antes de 3.0.9, Thunderbird antes de 2.0.0.22, y SeaMonkey antes de 1.1.16 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) y posiblemente disparar una corrupción de memoria mediante vectores en relación con JSOP_DEFVAR y con las propiedades que carecen del atributo JSPROP_PERMANENT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.13","matchCriteriaId":"547B206A-36E7-4602-8046-8366BC556AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022090","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=476049","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10110","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6090","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6232","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6248","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6921","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=476049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1306","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a \"Content-Disposition: attachment\" designation."},{"lang":"es","value":"La implementación de jar: URI en Mozilla Firefox anteriores 3.0.9, Thunderbird, y SeaMonkey no cumplen la cabecera \"Content-Disposition\" de la URI interna, permitiendo a atacantes remotos realizar ataques de secuencias de comandos en sitios cruzados (XSS) y posiblemente otros ataques al utilizar un fichero .jar cargado con una designación \"Content-Disposition: attachment\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-16.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022095","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=474536","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10150","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6021","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6194","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6312","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6710","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=474536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1307","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI."},{"lang":"es","value":"La implementación view-source: URI en Mozilla Firefox anteriores a v3.0.9, Thunderbird, and SeaMonkey no implementa correctamente la política de mismo origen, permitiendo a atacantes remotos (1) saltar las restricciones crossdomain.xml y conectar a sitios web de su elección utilizando un fichero Flash; (2) leer, crear o modificar objetos compartidos locales utilizando un fichero Flash; o (3) saltar restricciones no especificadas y generar contenido mediante vectores relacionados con jar: URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022093","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=481342","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10972","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5933","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6154","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6266","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7008","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=481342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1308","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mozilla Firefox anteriores a 3.0.9, Thunderbird, y SeaMonkey permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores involucrados con enlaces XBL JavaScript y hojas de estilo remotas, como ha sido explotado por una lista de eBay en Marzo de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-18.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022097","source":"secalert@redhat.com"},{"url":"http://www.theregister.co.uk/2009/03/08/ebay_scam_wizardy/","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=481558","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10428","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6173","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6185","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6296","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7285","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2009/03/08/ebay_scam_wizardy/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=481558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1309","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document."},{"lang":"es","value":"Mozilla Firefox anteriores a 3.0.9, Thunderbird, y SeaMonkey no implementan correctamente la política de mismo origen para (1) XMLHttpRequest, suponiendo una perdida del documento principal, y (2) XPCNativeWrapper.toString, suponiendo un alcance _proto_ incorrecto, permitiendo a atacantes remotos con la intervención del usuario realizar ataques de secuencias de comandos en sitios cruzados (XSS) y posiblemente otros ataques al utilizar documentos manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34780","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-19.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022094","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=478433","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=482206","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5265","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5591","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6139","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6831","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9494","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=478433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=482206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1310","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la implementación del plugin MozSearch en Mozilla Firefox anteriores a v3.0.9 permite a atacantes remotos con la intervención del usuario inyectar secuencias de comandos web o HTML de su elección mediante un javascript: URI en el elemento SearchForm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36757","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1886","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-20.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022097","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=483086","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11520","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6242","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=483086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1311","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.9 y SeaMonkey anteriores a v1.1.17 permite a atacantes remotos con la intervención del usuario obtener información sensible al utilizar una página web con un \"frame\" embebido, provocando que una operación \"POST\" desde una página externa sea enviada al \"frame\" contenido en la URL al realizar un almacenamiento \"SAVEMODE_FILEONLY\" del \"frame\" contenido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022097","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=471962","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10939","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6200","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6222","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7235","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=471962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1312","sourceIdentifier":"secalert@redhat.com","published":"2009-04-22T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.9 y SeaMonkey no bloquean el código \"javascript\": URIs en cabeceras \"Refresh\" en respuestas HTTP, permitiendo a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) utilizando vectores relacinados con (1) inyectar una cabecera \"Refresh\" o (2) especificar el contenido de una cabecera \"Refresh\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"FF7EBD73-EAFC-4D89-9962-8EBB2BB3DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"}]}]}],"references":[{"url":"http://ha.ckers.org/blog/20070309/firefox-header-redirection-javascript-execution/","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34844","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://websecurity.com.ua/3275/","source":"secalert@redhat.com"},{"url":"http://websecurity.com.ua/3386/","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-22.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34656","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022096","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475636","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6064","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6131","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6731","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9818","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/764-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"secalert@redhat.com"},{"url":"http://ha.ckers.org/blog/20070309/firefox-header-redirection-javascript-execution/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3275/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=475636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/764-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1313","sourceIdentifier":"secalert@redhat.com","published":"2009-04-30T21:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302."},{"lang":"es","value":"La función nsTextFrame::ClearTextRun en layout/generic/nsTextFrameThebes.cpp en Mozilla Firefox v3.0.9 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y, probablemente, ejecutar código arbitrario a través de vectores no especificados. NOTA: esta vulnerabilidad existe porque supuestamente se dio una solución incorrecta para CVE-2009-1302."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"}]}]}],"references":[{"url":"http://secunia.com/advisories/34851","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34866","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34910","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34919","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022126","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022127","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-23.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34743","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-765-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1180","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489647","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489676","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490233","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497447","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0449.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-765-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-0449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1314","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension."},{"lang":"es","value":"body.asp en Web File Explorer v3.1 permite a atacantes remotos crear ficheros y ejecutar código de su elección mediante una acción \"savefile\" con el parámetro \"file\" conteniendo un nombre de fichero con una extensión ejecutable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webfileexplorer:web_file_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"26608C9C-28DD-4C51-BD89-C17F7A9DB766"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50389","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1315","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:51.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter to groups_profile.php, (2) cat_id and (3) razd_id parameters to adv_cat.php, and the (4) URL to blogs_full.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en AbleSpace 1.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"gid\" a groups_profile.php, (2) \"cat_id\" y (3) \"razd_id\" a adv_cat.php y (4) la URL a blogs_full.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abk-soft:ablespace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7FF7D9A0-BEF0-4E83-BA04-FF847B523F06"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34663","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502670/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34512","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44847","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8424","source":"cve@mitre.org"},{"url":"http://dsecrg.com/pages/vul/show.php?id=137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502670/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1316","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:51.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php and the (2) id parameter to events_clndr_view.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en AbleSpace 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"eid\" a events_view.php y (2) \"id\" a events_clndr_view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abk-soft:ablespace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7FF7D9A0-BEF0-4E83-BA04-FF847B523F06"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34663","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502670/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34512","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8424","source":"cve@mitre.org"},{"url":"http://dsecrg.com/pages/vul/show.php?id=137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502670/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1317","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:51.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userSID cookie parameter to droplets/functions/base.php and the (2) username parameter to admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Aqua CMS 1.1, cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) userSID cookie a droplets/functions/base.php y (2) username a admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aquacms:aqua_cms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"79BF40F5-A233-4945-A6E9-4934B0C98DEB"}]}]}],"references":[{"url":"http://secunia.com/advisories/34720","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34516","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1318","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en Jamroom v3.1.2, v3.2.3 a v3.2.6, v4.0.2, y posiblemente otras versiones antes de v3.4.0 permite a atacantes remotos incluir ficheros de su elección a través de secuencias de salto de directorio en el parámetro \"t\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:*:*:*:*:*:*:*:*","matchCriteriaId":"99C9C0E9-C1CC-4AA1-AE36-5550AE806649"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2CD5550F-E364-4888-8A53-2A3DCE796A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b1:*:*:*:*:*:*","matchCriteriaId":"61367DA9-F651-4FB3-8D48-1AF26066C15D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b2:*:*:*:*:*:*","matchCriteriaId":"66CD47A2-E6E0-4079-B872-F890520FDC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b3:*:*:*:*:*:*","matchCriteriaId":"3DA0695A-4CA9-4FE0-B9D1-A48335F57BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b4:*:*:*:*:*:*","matchCriteriaId":"4ABCF337-4928-45B8-8F99-725B5F081AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:1.0:b5:*:*:*:*:*:*","matchCriteriaId":"28AB3D7B-7AE2-44C5-A704-825B33BFBB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6C797B83-2A8C-49BE-8CDB-B6CFFBB9658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.0.9:a:*:*:*:*:*:*","matchCriteriaId":"38C2B402-A285-4959-B775-65B7A81AC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"AD305738-CAF6-4D26-9C20-2E30BCCB4ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"67567C47-1AC5-4916-99F2-B114E3B28087"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"FC892073-E68B-4BC7-B327-5A50423D5CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:*:*:*:*:*:*:*","matchCriteriaId":"BB2BAE01-7CA6-4883-A94B-F8DCA3664DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:rc2:*:*:*:*:*:*","matchCriteriaId":"922EBD12-2BDD-4DCB-95B4-859379699698"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.60:rc3:*:*:*:*:*:*","matchCriteriaId":"E0E76FF6-D673-410D-83D6-F120CBC916B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.61:*:*:*:*:*:*:*","matchCriteriaId":"D96BCD95-57BE-49E3-AA36-553615FB8CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.62:*:*:*:*:*:*:*","matchCriteriaId":"9F370EE5-826A-4180-83AD-13391DF8C1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.63:*:*:*:*:*:*:*","matchCriteriaId":"DF74AC65-8D38-45F2-9D07-93414DDC3321"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.64:*:*:*:*:*:*:*","matchCriteriaId":"D4C09353-8A2D-4363-A44C-62EEDD6CD127"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.65:*:*:*:*:*:*:*","matchCriteriaId":"F08631D7-BD25-4EEB-A980-8BD959D65296"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.66:*:*:*:*:*:*:*","matchCriteriaId":"68B03674-5C17-4867-A4B7-3F81F9F25E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.67:*:*:*:*:*:*:*","matchCriteriaId":"137287E7-5927-495F-9B9F-D04AC7E528E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.68:*:*:*:*:*:*:*","matchCriteriaId":"B55161FB-A8BC-412D-8AF7-DBB50D251AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:2.69:*:*:*:*:*:*:*","matchCriteriaId":"04BAE9FF-377C-4DA8-BA15-6D54266B571A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:*:*:*:*:*:*:*","matchCriteriaId":"65E5D230-4B3F-40B4-BA76-CF6ED80C6A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b1:*:*:*:*:*:*","matchCriteriaId":"5EE9AC6B-DEDA-4898-8D77-E1D0FE16A5A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b2:*:*:*:*:*:*","matchCriteriaId":"CA9222BC-4F3F-4ADA-BE29-C0E60D852B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b3:*:*:*:*:*:*","matchCriteriaId":"E269400E-65C9-4993-A469-C1722C72A89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b4:*:*:*:*:*:*","matchCriteriaId":"A96EE17A-987A-4FA6-872C-2998F22A3B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b5:*:*:*:*:*:*","matchCriteriaId":"718A7588-74E6-4601-B3B7-0C3EA0A0D021"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b6:*:*:*:*:*:*","matchCriteriaId":"6370A2F4-2D59-404F-87C6-FEDCACD4A64F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b7:*:*:*:*:*:*","matchCriteriaId":"E5FFE8CE-0001-4221-A19C-2CB45A6CDA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0:b8:*:*:*:*:*:*","matchCriteriaId":"F9084E5E-29A9-4C1C-BBB4-0A05870908AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6947161-212C-48D0-A21F-DC5EFED5274B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"473AEE4B-3F73-49EB-8E30-B1AEF11DD9D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"45F96B70-E44F-4392-9983-E395D27DDF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"12D8B1B7-2349-4E1F-B86F-C6CF5157F429"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"63A95CFA-5E47-4D8D-B5A7-38880FC9324B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0E521F6F-D31C-4E08-AC06-120109DF4020"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2B92F69F-85E9-4413-8474-24CF6186FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7B3B-3BBE-40E7-A750-D4911A7380AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1091207E-9F46-4F56-8D0F-C098BD2BBB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"3AE17521-A44E-4920-B50F-84EBA942D08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"21E46C8F-0B90-4583-A52E-933B7333F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A911F967-8298-4C81-A6D3-0378595D41C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"213CE4E8-54D1-479D-8227-94035A982155"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"151F9FC7-0BAB-463F-BD3A-2F8582AD1C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"16CCF11C-2464-48E8-8049-4838092C6547"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FCB674DC-97AB-4D45-BAF1-71AE18FAB3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"05D0AA62-0F61-490D-AFC6-E571F4646A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"E5D88374-B90E-4E85-BFA9-C874ABA08B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"25655EBC-1E87-415E-9D20-0179F4FCD35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2F208C24-E78B-49A0-8E61-90A1A7D475CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8D49548E-EE58-4694-8099-032D3B65AA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"00DE05D9-4DC3-4F76-9314-E7AE267DA4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"7DC05C6F-2816-4486-8A2D-A40A523439F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"EF05E590-EDA4-4F52-A3D9-A7D070484A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F34F3181-7CC9-45D4-AC45-D6A61AC58627"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"690D31B5-B81E-4FA7-8031-84438703490D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"D93B8842-96E2-4153-9F12-5A3A1DFB7C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"4F1BB904-07E0-4C62-9365-C717D9FA18C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"1A2BFB5B-BC98-4604-A3E1-1B703D1C1577"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"DDC0BC1D-8BFD-4A57-A160-959CB93DE303"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA6F88A-C89F-4014-B1FD-BBBA8A68B5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:b1:*:*:*:*:*:*","matchCriteriaId":"44456A6C-AF1D-445F-BF71-5A80008F84FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:b2:*:*:*:*:*:*","matchCriteriaId":"4EE15983-D025-47B0-87AB-B8E3818EA811"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.0:b3:*:*:*:*:*:*","matchCriteriaId":"6EDCB191-2EB5-41C0-A354-6D790CF16083"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E394BD3-8B2A-4896-868E-C4927356B486"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41C8D61B-A5D8-4075-B2C6-119CC06AA4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9CC1F1D3-46B6-4AB2-9A5C-A13B89084031"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"111054E3-3BD4-4E97-980B-1E1DC539182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"32EC8F1C-4014-4DF2-AB32-6D82327FE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA8FDF4F-1F22-4E2B-A5F6-F69F6FC62FCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C655733-74A4-4E0F-84EF-FE294F6753BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C86D6AC4-4641-4874-A8D2-26E486EE6B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1DCE23FB-700D-4E00-9B46-7AFD31D9358B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A6366FFF-8412-465C-AA08-7C9366785059"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1978E341-AF7E-49B8-8ADC-879F2B11D8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CC99103B-A43D-4370-A70B-D9DD2C665056"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F953D-8D25-4395-8A86-4E2DD5B2399F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA61EDF9-CF08-407E-861E-98BF3B752834"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A406E79C-13CF-48A3-943E-0AACC8050411"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B97B0CB1-E4D7-4210-933B-AD114EFF0D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"FE551F7B-0F0F-480D-BDD5-0E51ACB595ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C10A858B-6771-4E23-9E93-CCA37F21089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"93DD0B7C-609B-4E41-A44C-1F3B607EBC70"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AF7DC010-399B-4DC7-82BC-BC2CAF19AD3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"95BFE507-492C-452C-9BF1-3A38FC16D858"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamroom:jamroom:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FCB32428-77AA-44D0-9CBD-DFE7A1CFAD90"}]}]}],"references":[{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49869","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8423","source":"cve@mitre.org"},{"url":"http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1319","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the lang parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/ini.inc.php en GuestCal 2.1 permite a atacantes remotos incluir y ejecutar ficheros de su elección mediante un .. (punto punto) en el parámetro \"lang\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guestcal:guest_cal:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FFA973C4-D8D0-4692-9936-89DA42E02472"}]}]}],"references":[{"url":"http://secunia.com/advisories/34721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8431","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1320","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) gridPage and (2) gridSort parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en include/zstore.php en Zazzle Store Builder v1.0.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) gridPage y (2) gridSort. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zazzle:store_builder:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4539CBF4-EC54-41F3-BFF6-C096151D7C08"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/102/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34525","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/102/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1321","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en ASP Product Catalog v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"keywords\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:humayun_shabbir_bhutta:asp_product_catalog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6F3715-533E-4B6A-B91A-8C4BD4EBCFC2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49858","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1322","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb."},{"lang":"es","value":"ASP Product Catalog 1.0 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo que permite a atacantes remotos descargar una base de datos con las credenciales de usuario a través de una petición directa de database/aspProductCatalog.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:humayun_shabbir_bhutta:asp_product_catalog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6F3715-533E-4B6A-B91A-8C4BD4EBCFC2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49859","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1323","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en body.asp in Web File Explorer v3.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webfileexplorer:web_file_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"26608C9C-28DD-4C51-BD89-C17F7A9DB766"}]}]}],"references":[{"url":"http://secunia.com/advisories/34648","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34462","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49801","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8382","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1324","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream ASX a MP3 Converter v3.0.0.7 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:asx_to_mp3_converter:3.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"09EF8AB4-5A27-44BE-BF36-D7BE9A469A51"}]}]}],"references":[{"url":"http://secunia.com/advisories/34681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49840","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8407","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1325","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream Ripper v3.0.1.1 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:ripper:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4F4D1F4-1928-47BC-8060-694755E8441E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34692","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49844","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8402","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1326","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream RM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:rm_downloader:3.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"97A33CA1-7981-4B92-B0F8-7E7B5FC82A1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/34647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49843","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8404","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8410","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1327","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream WM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:wm_downloader:3.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F0E832D6-3D03-49EA-95A4-591C7CBB312B"}]}]}],"references":[{"url":"http://secunia.com/advisories/34674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49842","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8403","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1328","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream RM-MP3 Converter 3.0.0.7 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:rm-mp3_converter:3.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"36AE52CE-7BD0-4B5F-B3F6-EDEAF8C01D46"}]}]}],"references":[{"url":"http://secunia.com/advisories/34653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49841","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8405","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8413","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1329","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream Shadow Stream Recorder 3.0.1.7 permite a atacantes remotos ejecutar código de su elección mediante una URI de gran tamaño en un fichero playlist (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:shadow_stream_recorder:3.0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B5CE478B-5933-40B2-B85B-285731B58FD6"}]}]}],"references":[{"url":"http://secunia.com/advisories/34719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8405/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8426","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8405/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1330","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:08:52.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Easy RM a MP3 Converter permite a atacantes remotos ejecutar código de su elección mediante un nombre de fichero de gran tamaño en un fichero playlist (.pls)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:easy_rm_to_mp3_converter:*:*:*:*:*:*:*:*","matchCriteriaId":"4CD1F226-B118-43CF-AC7A-C276C94A28B7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34514","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50326","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/39933/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8427","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/39933/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1331","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted .mid file, as demonstrated by crash.mid."},{"lang":"es","value":"Desbordamiento de entero en Microsoft Windows Media Player (WMP) 11.0.5721.5260, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante un fichero .mid manipulado, como es demostrado por crash.mid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:11.0.5721.5260:*:*:*:*:*:*:*","matchCriteriaId":"52A31EEA-215E-4FB2-B5E4-8470111CE37D"}]}]}],"references":[{"url":"http://osvdb.org/53804","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34534","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8445","source":"cve@mitre.org"},{"url":"http://osvdb.org/53804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1332","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors."},{"lang":"es","value":"La característica Online Help en Sun Java System Directory Server 5.2 y Enterprise Edition 5 permite a atacantes remotos determinar la existencia de ficheros y directorios y posiblemente obtener contenidos parciales de ficheros mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:5.0:-:enterprise:*:*:*:*:*","matchCriteriaId":"8EA36B7D-1506-4B50-B371-8CF16879A62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*","matchCriteriaId":"083E8ACF-7A6B-4C7C-B1E1-1567D09A8E4B"}]}]}],"references":[{"url":"http://osvdb.org/53800","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255848-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34548","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1059","source":"cve@mitre.org"},{"url":"http://osvdb.org/53800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255848-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1333","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP Deskjet 6840 printer with firmware XF1M131A allows remote attackers to inject arbitrary web script or HTML via the POST request body."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en refresh_rate.htm en la interfaz web de la impresora HP Deskjet 6840 con firmware XF1M131A permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del cuerpo de una petición POST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:deskjet_6840:xf1m131a:*:*:*:*:*:*:*","matchCriteriaId":"34DAC0FF-ECE4-4010-AB4D-E7CF0312EBCF"}]}]}],"references":[{"url":"http://osvdb.org/53769","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34702","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502620/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34480","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49850","source":"cve@mitre.org"},{"url":"http://osvdb.org/53769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502620/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1334","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login/FilepathLogin.html en IBM Tivoli Continuous Data Protection (CDP) para Files v3.1.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"reason\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_continuous_data_protection_for_files:3.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6019D979-A179-48A6-BCEB-F884A245C97C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022060","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSS","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.osvdb.org/53651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34513","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.osvdb.org/53651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1335","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T14:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (application hang) via a large document composed of unprintable characters, aka MSRC 9011jr."},{"lang":"es","value":"Microsoft Internet Explorer 7 y 8 en Windows XP y Vista permiten a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante un documento de gran tamaño formado por caracteres no imprimibles, también conocido como MSRC 9011jr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0111.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502617/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34478","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50350","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502617/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1336","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T15:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function."},{"lang":"es","value":"fs/nfs/client.c in el kernel de Linux en versiones anteriores a v2.6.23 no inicializa adecuadamente cierto miembro de la estructura que alacena la longitud máxima de fichero NFS, lo que permite a usuarios locales producir una denegación de servicio (OOPS) a través de un nombre de fichero largo, relacionado con la función encode_lookup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.22.19","matchCriteriaId":"1826D616-AC19-40CC-A62F-FCB194E2113D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54af3bb543c071769141387a42deaaab5074da55","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35160","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35324","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/06/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/17/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1024.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1077.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34390","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022176","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494074","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10859","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8495","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54af3bb543c071769141387a42deaaab5074da55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/17/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1337","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application."},{"lang":"es","value":"La función exit_notify en kernel/exit.c en el kernel Linux antes de la versión 2.6.30-rc1 no restringe las señales de salida cuando se alcanza la capacidad CAP_KILL , lo que permite a usuarios locales enviar una señal de su elección a un proceso mediante la ejecución de un programa que modifica el campo exit_signal y, a continuación, utiliza una llamada exec  al sistema para iniciar una aplicación setuid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc2_git7:*:*:*:*:*:*","versionEndIncluding":"2.6.29","matchCriteriaId":"135A0668-0598-41A0-BB2F-90D6F24B2987"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*","matchCriteriaId":"CBEBA0F6-5453-4993-932B-BB8941DCC5CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=432870dab85a2f69dc417022646cb9a70acf7f94","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123560588713763&w=2","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/16544/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35160","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35324","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35387","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/17/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1024.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1077.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34405","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022141","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=493771","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10919","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11206","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8295","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=432870dab85a2f69dc417022646cb9a70acf7f94","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123560588713763&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/16544/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/17/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=493771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1338","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command."},{"lang":"es","value":"La función kill_something_info function en kernel/signal.c en el núcleo de Linux versiones anteriores a v2.6.28 no considera namespaces PID cuando está procesando señales dirigidas a PID -1, lo cual permite a atacantes remotos evitar namespace aislados, y envía señales de su elección a todos los procesos en todos los namespaces, a través del comando kill."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1081.html .","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27.21","matchCriteriaId":"45F60110-70D6-45AF-A52C-572DFB4EBB5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2008/7/23/148","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35343","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/16/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/17/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/21/1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496031","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50386","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2008/7/23/148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/04/16/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/17/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1339","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en TWiki anterior a v4.3.1 permite a usuarios remotos autenticados secuestrar la autenticación de usuarios a su elección para las peticiones que actualizan páginas, como se demostró por una URL para un script de guardado en el atributo SRC de un elemento IMG, una cuestión relacionada con CVE-2009-1434."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"1E38FC46-7F35-4777-87D8-124838860474"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9FE3EEC6-7E05-4A37-97AA-D73E7D7A0E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"855671F5-C215-4382-B512-4ABD9D66F13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E9C00515-CFEE-427A-BACE-B3140B0D6C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E9CF4F9B-7ADF-47A2-A556-10CCF7401DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"81DDB420-E707-4319-8395-531FC0D84E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:twiki:twiki:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0D7A5A57-AE7D-4D3E-A280-41676F355AEE"}]}]}],"references":[{"url":"http://bugs.debian.org/526258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022146","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce","source":"cve@mitre.org"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50254","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-1339","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/526258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1341","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns."},{"lang":"es","value":"Fuga de memoria en la función dequote_bytea en quote.c en el módulo DBD::Pg (alias DBD-Pg o libdbd-pg-perl) anterior a v2.0.0 para Perl permite a atacantes, dependiendo del contexto, causar una denegación de servicio (consumo de memoria) obteniendo los datos con columnas BYTEA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.9","matchCriteriaId":"4FA7647E-4058-4E2B-AFF8-01BBAB1D1B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.1:*:*:*:*:*:*:*","matchCriteriaId":"613612A7-EC67-4B63-89AB-0A844D1A8782"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.2:*:*:*:*:*:*:*","matchCriteriaId":"34E75CE2-B819-46BF-ABE9-83C32B22EC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.3:*:*:*:*:*:*:*","matchCriteriaId":"638D9B29-C654-41E4-AB2D-0047D55673DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E024E548-2D2D-4651-808D-5C0010C13063"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.5:*:*:*:*:*:*:*","matchCriteriaId":"4C53713A-8B3E-483C-B0B2-1B26C550EB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.51:*:*:*:*:*:*:*","matchCriteriaId":"7E5750AA-0347-4A14-B5E9-BA60AFAD26AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.52:*:*:*:*:*:*:*","matchCriteriaId":"B3630BEA-0EDD-4B42-B652-ACE8E501FF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.61:*:*:*:*:*:*:*","matchCriteriaId":"35306D81-3690-4082-8CE3-77512B4F1791"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.62:*:*:*:*:*:*:*","matchCriteriaId":"72323A75-2F6F-4D22-9B5C-4691DF6918BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.63:*:*:*:*:*:*:*","matchCriteriaId":"6CACFAD2-226E-4DC0-A426-305BB4AF573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.64:*:*:*:*:*:*:*","matchCriteriaId":"4C0B881F-AC4B-4A71-8E1B-051549E5D22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.65:*:*:*:*:*:*:*","matchCriteriaId":"97BA119B-A2BA-4133-BA38-841107A1B404"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.66:*:*:*:*:*:*:*","matchCriteriaId":"D5A4793D-CE46-4E87-835A-AE99B3087331"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.67:*:*:*:*:*:*:*","matchCriteriaId":"8DA32921-F742-4972-9596-23CCEC98009E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.68:*:*:*:*:*:*:*","matchCriteriaId":"4A3F494B-D2FB-4DF5-8346-7DEBC6A15C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.69:*:*:*:*:*:*:*","matchCriteriaId":"A7E0581B-E46B-4D31-B6EF-6B961A149324"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.70:*:*:*:*:*:*:*","matchCriteriaId":"A0E3784A-BAB6-4E1F-BDC8-02471EB9E9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.71:*:*:*:*:*:*:*","matchCriteriaId":"67394C79-025F-4756-847C-37CB48DD6337"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.72:*:*:*:*:*:*:*","matchCriteriaId":"26B1B340-723C-423C-B08D-7D5A3D0E69CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.73:*:*:*:*:*:*:*","matchCriteriaId":"5CD390BD-E49E-4982-BC14-70D893F18DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.80:*:*:*:*:*:*:*","matchCriteriaId":"036A1EB2-AFA1-4279-90C2-B8F69DB44D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.81:*:*:*:*:*:*:*","matchCriteriaId":"2DC4E34A-1D5D-4C32-A1DD-AAC168E0AB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.82:*:*:*:*:*:*:*","matchCriteriaId":"A9469A86-BDF3-4266-8390-C8E9994ACB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.83:*:*:*:*:*:*:*","matchCriteriaId":"0F6BB8AB-F316-46F4-A385-F6CAB8BEAAD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.84:*:*:*:*:*:*:*","matchCriteriaId":"FC597EB3-913B-40F5-A693-BC49BB89AB2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.85:*:*:*:*:*:*:*","matchCriteriaId":"1B35351C-8CE9-4AB6-A4C1-AB01E6A60197"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.86:*:*:*:*:*:*:*","matchCriteriaId":"BA32BC37-7FDB-43A1-BE17-77D2F82871F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.87:*:*:*:*:*:*:*","matchCriteriaId":"ADF1C3F4-8C2B-40DA-A8AF-D1492AAD92D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.88:*:*:*:*:*:*:*","matchCriteriaId":"FFA29146-FB2E-457F-9B79-3C059E659313"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.89:*:*:*:*:*:*:*","matchCriteriaId":"64D8C17D-6D35-49FC-83F2-968E6CA28CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.90:*:*:*:*:*:*:*","matchCriteriaId":"A568FEB3-4852-4BCE-ADDE-749A216E995C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.91:*:*:*:*:*:*:*","matchCriteriaId":"753CD595-49CD-48BD-980B-415DDBC4492C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.92:*:*:*:*:*:*:*","matchCriteriaId":"7C74BC7E-18C0-4399-9240-6A000B23B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.93:*:*:*:*:*:*:*","matchCriteriaId":"190E89EA-61AE-4EB8-ACBB-4E4FE39ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.94:*:*:*:*:*:*:*","matchCriteriaId":"5532D0CB-7001-4C8E-80BF-54EAD32E8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.95:*:*:*:*:*:*:*","matchCriteriaId":"B9F54A01-AEFA-4426-977E-677970FE3025"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.96:*:*:*:*:*:*:*","matchCriteriaId":"F7EDF0F1-D0DB-4D84-82DD-8E65E129CD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.97:*:*:*:*:*:*:*","matchCriteriaId":"8CCD9E8F-8456-4513-A291-70DA11CF6E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.98:*:*:*:*:*:*:*","matchCriteriaId":"51B2F3E1-2D73-499C-A971-31679EE07E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:0.99:*:*:*:*:*:*:*","matchCriteriaId":"E4905713-30CC-4327-A6D8-FACE14B362E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"681E2741-C68B-4AED-BAB5-DFC78F10FF36"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5AEF38D8-073C-427D-B4BE-54FF4272054F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5E6031E9-B041-43B9-B3C1-796086925821"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3BEE07CF-260D-4BAF-A1E6-91941293E16E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"50E810D1-7D96-47E2-83F9-44FF8938BABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6A150EC9-2A91-4221-870C-A6B6C3533516"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5FC742FA-EC42-4812-9788-C482DF2A1C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F55C4ECC-ACC8-444B-9DA6-F115659C2D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"D2092056-CEC1-41EA-B10E-C5519113982E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B8CF3B9-6980-47C9-A15A-DC2E3A53A6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"875393EA-EADB-4F58-803D-A9FCA1C4B233"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"3F918396-10B5-430F-A046-7EBBA9B58E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"28F79BE3-82EC-4643-8D76-74577AC0A0DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"AE351E89-6E8B-499A-BE04-8CDFDF105DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"43AE9FD7-E718-47BA-AFF1-920F560CDC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:libdbd-pg-perl:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"42EF22B1-A736-4A9E-A91F-2B60D2182440"}]}]}],"references":[{"url":"http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://rt.cpan.org/Public/Bug/Display.html?id=21392","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34909","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1780","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0479.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34757","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50387","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-1341","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680","source":"cve@mitre.org"},{"url":"http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.cpan.org/Public/Bug/Display.html?id=21392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0479.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1342","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo \"CCK comment reference\" en versiones 6.x anteriores a 6.x-1.2 del gestor de contenidos Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de ciertos títulos de comentarios asociados al formulario de edición de nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:cck_comment_reference:6.x:*:*:*:*:*:*:*","matchCriteriaId":"96085D14-9913-459F-84D3-2625DF14D3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:cck_comment_reference:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BA191B9-B7F4-4433-BC9B-BC5961C14940"}]}]}],"references":[{"url":"http://drupal.org/node/434836","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34547","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1060","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/434836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1343","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo módulo Print o Printer (en sus variantes e-mail y PDF) en sus versiones 5.x anteriores a 5.x-4.5 y 6.x anteriores a 6.x-1.5 del gestor de contenidos Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de los títulos de contenido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*","matchCriteriaId":"13532942-BC0A-4B25-9FE3-679E5A698F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B1DFE95-5788-4C00-8D24-FD2068352293"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A35122AE-7CAB-4AB1-88E7-EAF882618E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA7EF9D6-39D2-4922-B516-44B31E38DB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"030BC1EE-8ED5-4955-AD4B-1745690ABB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"F18D750A-6F98-4A72-B040-9A448EC007BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"5029B78B-0160-4547-9934-19A891AB2652"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*","matchCriteriaId":"C88506DA-94A1-4559-BCD8-D6DA9D438AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*","matchCriteriaId":"7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*","matchCriteriaId":"D315DA5E-3012-4F25-8C7D-21C2BA172A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*","matchCriteriaId":"961AEFF7-499F-4709-BB2F-BB623A4CE19F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"7267D96A-43CC-418B-B115-DE77154BCDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"9302C93E-C85F-4EA3-8BE2-3575592B50B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"03EC0689-1246-4E34-948B-6380BB2BAC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"746A3749-36A4-49EA-B705-922B9D260CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.4:*:*:*:*:*:*:*","matchCriteriaId":"2ECD6FD0-0A42-4445-9524-DE02E568FF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*","matchCriteriaId":"A3FCB2CC-8184-406E-BE92-34DB6F1B27A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F41A6973-2C38-418D-A16F-93F77F902206"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"9D6DF7D4-0992-4677-BA0A-860F329E6D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"0E8A1B8F-021C-4558-880F-9E7FCFE2D323"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"CF939A54-5458-4FD5-916D-301CD3B57F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*","matchCriteriaId":"3FF7248F-2CD2-4551-AD81-3207FE1D45A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*","matchCriteriaId":"CD956162-E836-4777-8346-DF6DAA100A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"82398A3C-DB58-42DE-BC16-56D92FAB55B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"33406F84-81BF-492E-9C22-171311E519A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB084C5-BE56-4128-8A5D-8F536B276A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"7F6B609E-4AD4-46CD-B9C7-5D0690B83326"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"AA70209E-98DA-4A0A-9272-2F4B04E62C8C"}]}]}],"references":[{"url":"http://drupal.org/node/434748","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53704","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34545","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1060","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/434748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1344","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el modulo \"Localization client\" en versiones 5.x anteriores a 5.x-1.2 y 6.x anteriores a 6.x-1.7 del gestor de contenidos Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de la entrada a la funcionalidad de traducción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"E3E569CF-2F12-434C-9335-F1D863B95C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"79CEEDA8-74C8-4172-8142-BAB017B2B6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:5.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"1426782B-F79F-409E-A855-413C9C780FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"E6A4EE4E-EA90-4E6C-92F9-3A54405593A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F6DDC58-2B86-426A-8581-BED2D853A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A17AEEF-A5F9-48A6-B95F-FA3396BAD2BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"B4060FDC-1BAE-4A9F-9123-BF37365F1258"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"1B36A0D0-1A87-487A-80CD-87E21F57C056"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"56E9C3FB-F440-44B6-AB1E-9EAD59EF7E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"C189416E-1B0D-4C4C-9F1D-FF8C5B95ADD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:localization_client:6.x-1.xdev:*:*:*:*:*:*:*","matchCriteriaId":"057E6EE9-EEAC-4DB2-BC61-17D66590AC9C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/434682","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53703","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34546","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1060","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/434682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1345","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_document parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en document.php de cpCommerce v1.2.8 permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro id_document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce:cpcommerce:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"E70369A4-FED2-42C5-A0CB-A5299B5B8AFC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34556","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022082","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49901","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8455","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1346","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL commands via the id_establecimiento parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en publico/ficha.php en NetHoteles v3.0 permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"id_establecimiento\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interguias:nethoteles:3.0:*:*:*:*:*:*:*","matchCriteriaId":"45661989-F01D-4BF5-8176-845470B02E60"}]}]}],"references":[{"url":"http://osvdb.org/53814","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34561","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49897","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8457","source":"cve@mitre.org"},{"url":"http://osvdb.org/53814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1347","sourceIdentifier":"cve@mitre.org","published":"2009-04-20T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw parameter (aka the password field)."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en stats/index.php de chCounter v3.3.3 permiten a usuarios remotos ejecutar comandos SQL de su elección a través de (1) el parámetro \"login_name\" (nombre de usuario) o (2) el parámetro \"login_pw\" (contraseña)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chcounter:chcounter:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D1218F9E-A0D4-484F-A259-2138AE199D78"}]}]}],"references":[{"url":"http://secunia.com/advisories/24879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34572","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/24879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1348","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive."},{"lang":"es","value":"El AV engine antes de DAT 5600 en McAfee VirusScan, Total Protection, Internet Security, SecurityShield para Microsoft ISA Server, Security para Microsoft Sharepoint, Security para Email Servers, Email Gateway, y Active Virus Defense permite a atacantes remotos eludir la detección de virus a través de (1) un campo Headflags inválido de un archivo RAR malformado, (2) un campo Packsize inválido de un archivo RAR malformado, o (3) un campo Filelength de un archivo ZIP malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:active_virus_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"55875615-29A3-4092-975C-60E9C8FAB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:active_virusscan:*:*:*:*:*:*:*:*","matchCriteriaId":"4A14000E-6A4C-474B-A92B-473A0EB0C533"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"35188DE1-99A4-42B1-81C3-E2ECBD589605"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:internet_security_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"E7C68CA8-9525-4FBA-A873-F17524D3F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:internet_security_suite:2004:*:*:*:*:*:*:*","matchCriteriaId":"CB0A7659-25FF-4E18-B2BA-34F6FD6410F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:internet_security_suite:2005:*:*:*:*:*:*:*","matchCriteriaId":"1C22BB62-9790-4D89-B1B4-D5E0F4FFB3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:internet_security_suite:2006:*:*:*:*:*:*:*","matchCriteriaId":"7E69BB96-F48B-43DA-BA7B-530E5148CCC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:internet_security_suite:2009:*:*:*:*:*:*:*","matchCriteriaId":"B978BD2B-D454-49BB-81A4-EABA14E75600"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:securityshield_for_email_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"AC106925-640E-4318-BDED-A9F904961AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:securityshield_for_microsoft_isa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"53275048-EE57-4204-86FA-BC6B8D5D614F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:securityshield_for_microsoft_sharepoint:*:*:*:*:*:*:*:*","matchCriteriaId":"5E7A0A32-C1B6-465D-ABB3-156C570A0E5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:total_protection:2009:*:*:*:*:*:*:*","matchCriteriaId":"B3C7EE0B-F166-478E-B800-B4D429B26F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:total_protection_for_endpoint:*:*:*:*:*:*:*:*","matchCriteriaId":"0CD4E524-C466-4FB5-92FD-7EDAEEAE1F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_commandline:*:*:*:*:*:*:*:*","matchCriteriaId":"F1FAB752-311E-4594-AE25-34BD02844578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_enterprise:*:*:*:*:*:*:*:*","matchCriteriaId":"E0BCC0FD-E09A-495A-926A-FE080BE46A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_enterprise:-:-:linux:*:*:*:*:*","matchCriteriaId":"316D3C1B-D7E4-4FA9-B5CD-72D18BE775EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_enterprise:-:-:sap:*:*:*:*:*","matchCriteriaId":"C64CDC92-E9CD-446A-9ADE-B10A28E20A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_enterprise:-:-:storage:*:*:*:*:*","matchCriteriaId":"019C46AA-7537-4930-BDC8-8EA0F6C5A216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_plus:2009:*:*:*:*:*:*:*","matchCriteriaId":"2B4CF979-7A55-4712-9B48-D885B746B62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan_usb:*:*:*:*:*:*:*:*","matchCriteriaId":"42D0FC30-BAA5-4677-A3E5-C7A6DEB8BE0E"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503173/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34780","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503173/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1349","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en C2Net Stronghold v2.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la URI."}],"vendorComments":[{"organization":"Red Hat","comment":"This flaw was caused by a C2Net specific patch added to Apache http_log.c in Stronghold 2.3.\n\nC2Net Stronghold 2.3 reached end of life for updates on October 31st 2000. \nhttp://www.awe.com/mark/history/stronghold.html","lastModified":"2009-04-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:stronghold:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B778FBDF-3D73-4841-8568-C4DDCE839EA7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/502799/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34606","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/502799/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1350","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer."},{"lang":"es","value":"Vulnerabilidad inespecífica en xtagent.exe en Novell NetIdentity Client anteriores v1.2.4 permite a atacantes remotos ejecutar código arbitrario mediante el establecimiento de una conexión IPC$ al tubo XTIERRPCPIPE, y enviando mensajes RPC que inicia una desreferencia de un puntero arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netidentity_client1.2.3:*:*:*:*:*:*:*:*","matchCriteriaId":"0AA602AC-C61F-407B-BD9D-DEB80991C070"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=6ERQGPjRZ8o~","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502514/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34400","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021990","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0954","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-016/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=437511","source":"cve@mitre.org"},{"url":"http://download.novell.com/Download?buildid=6ERQGPjRZ8o~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502514/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=437511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1351","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Apollo 37zz permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente ejecutar código a través de una URI larga en un fichero de lista de reproducción (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heikki_ylinen:apollo:37zz:*:*:*:*:*:*:*","matchCriteriaId":"67E03235-4208-4654-8D4C-F4BB8B3D3094"}]}]}],"references":[{"url":"http://osvdb.org/53770","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34554","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8451","source":"cve@mitre.org"},{"url":"http://osvdb.org/53770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1352","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an HTML file with a link to a long URL, as demonstrated by a .rar URL."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Dawningsoft PowerCHM v5.7 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente ejecutar código a través de un fichero HTML con un enlace a una URL larga, como se demostró mediante una URL .rar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dawningsoft:powerchm:5.7:*:*:*:*:*:*:*","matchCriteriaId":"048CF5D2-27BA-4C6C-8365-C4F44468FB7D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49882","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1353","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c."},{"lang":"es","value":"Desbordamiento de búfer en la función http_parse_hex en libz/misc.c en Zervit Webserver v0.02 permite a atacantes remotos producir una denegación de servicio (caída de demonio) a través de una URI larga, relacionado con http.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian_fernandez:zervit:0.02:*:*:*:*:*:*:*","matchCriteriaId":"208BB7A6-808D-467D-BCF3-7400C6B67DA8"}]}]}],"references":[{"url":"http://osvdb.org/53768","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34735","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502693/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34530","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?r1=17&r2=19","source":"cve@mitre.org"},{"url":"http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?view=log","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8447","source":"cve@mitre.org"},{"url":"http://osvdb.org/53768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502693/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?r1=17&r2=19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1354","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Mongoose v2.4 permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sergey_lyubka:mongoose:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FDD3A200-BEF3-41F7-8EA2-A7FD558F68B2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/502648/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34510","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49878","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8428","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502648/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1355","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en muxatmd en IBM AIX v5.2, v5.3, y v6.1 permite a usuarios locales conseguir privilegios a través de un nombre largo de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48495","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48500","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48501","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48561","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48562","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34543","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022065","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1056","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ48562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1356","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T16:24:52.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Elecard AVC HD Player permite a atacantes remotos ejecutar código de forma arbitraria a través de un nombre de fichero MP3 largo en un fichero de lista de reproducción (.xpl)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elecard:elecard_avc_hd_player:*:*:*:*:*:*:*:*","matchCriteriaId":"ADA56E53-3891-4617-B1BF-71C1E75C85B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34560","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8452","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1357","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T17:30:01.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en da/DA/Login en Sun Java System Delegated Administrator desde v6.2 hasta v6.4 permite a atacantes remotos inyectar cabeceras HTTP de forma arbitraria y dirigir ataques de división de respuesta HTTP a través del parámetro \"HELP_PAGE\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:sparc:*:*:*:*:*","matchCriteriaId":"84FBFD6D-70D2-4068-A8FB-997F55962DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:sparc:*:*:*:*:*","matchCriteriaId":"6DD69018-E00B-4A29-A1AD-0487756E763C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:sparc:*:*:*:*:*","matchCriteriaId":"42C7A680-F66F-44B7-85E6-910F92EBB94F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:x86:*:*:*:*:*","matchCriteriaId":"60880A55-685E-4079-8501-96734549AA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:x86:*:*:*:*:*","matchCriteriaId":"3DC59D17-A1A2-4D41-A163-270A33A0EE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:x86:*:*:*:*:*","matchCriteriaId":"1C5A463D-99A0-413C-86C4-895696021474"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.2:-:linux:*:*:*:*:*","matchCriteriaId":"45ED4043-563B-49BB-A6CB-32109E7F0E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.3:-:linux:*:*:*:*:*","matchCriteriaId":"92BE2B12-7FA9-469F-8B91-D0D6C38E76F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_delegated_administrator:6.4:-:linux:*:*:*:*:*","matchCriteriaId":"4ADC7E16-A2B6-43D7-BB99-9A48B9DE3449"}]}]}],"references":[{"url":"http://osvdb.org/53920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022108","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-121581-20-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255928-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020305.1-1","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/sun-delegated-administrator","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502863/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34643","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1122","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50004","source":"cve@mitre.org"},{"url":"http://osvdb.org/53920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-121581-20-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255928-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020305.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/sun-delegated-administrator","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502863/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1358","sourceIdentifier":"cve@mitre.org","published":"2009-04-21T23:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories."},{"lang":"es","value":"apt-get in apt anterior a 0.7.21 no comprueba adecuadamente el error de codigo en gpgv, lo que hace que apt utilice un repositorio firmado con una clave que ha sido revocada o ha caducado, lo que permite a atacantes remotos engañar a apt en la instlacion de repositorios maliciosos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.20","matchCriteriaId":"A5915EA2-9710-4CCC-A16A-EABD1D34A9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"2372DE68-69A3-44B6-A42E-1C8EA272FAC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1F846A10-711A-42A1-A71A-FB11D4B511F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"3E070DA8-E764-4C1B-BCDB-F15597ABE7AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.2-0.1:*:*:*:*:*:*:*","matchCriteriaId":"DCEE6BF2-3B33-41F7-84C4-626D1559FB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"1BDAAE90-9BD4-4160-89D3-162561CB30BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"CBC7B0DD-F983-41DC-BB78-52FB53C044DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"B832BF3E-A081-4708-8D54-C5BC827965E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"31586872-C049-4125-B82A-FEA8B06FDF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"2F377D69-4C1D-4D1A-96D9-B7724756CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"71851F90-85E4-4250-B9FB-320A33B04B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp1:*:*:*:*:*:*","matchCriteriaId":"C6356166-F4D5-4B50-94AE-7A25803FFF38"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp2:*:*:*:*:*:*","matchCriteriaId":"0D7D88AF-16B4-4C3F-AF7D-8773CB08BA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp3:*:*:*:*:*:*","matchCriteriaId":"5F293909-BFDB-49A2-AF03-6ADACE195204"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.16:*:*:*:*:*:*:*","matchCriteriaId":"E138D3A7-F289-4491-A24D-4DF2F179EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.17:*:*:*:*:*:*:*","matchCriteriaId":"19ED89FC-F907-4126-B969-625887306487"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp1:*:*:*:*:*:*","matchCriteriaId":"0F467E33-20AC-401C-AF1F-8F4BC0CB0C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp2:*:*:*:*:*:*","matchCriteriaId":"595406A6-DFD2-4E26-82C8-745E0AC0D6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp3:*:*:*:*:*:*","matchCriteriaId":"4ED3DB0F-E9BF-4E23-8057-AACA17475C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp4:*:*:*:*:*:*","matchCriteriaId":"39A7A479-6225-43EA-B010-46EF4BC77E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.18:*:*:*:*:*:*:*","matchCriteriaId":"9EC4CC2E-7E68-4360-8360-B0463D9B6B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.19:*:*:*:*:*:*:*","matchCriteriaId":"BF988A0E-A630-40DD-9387-2C1610D2F932"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.20.1:*:*:*:*:*:*:*","matchCriteriaId":"EBE7EC9A-2E4D-4A60-AC88-F390F5B3432A"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.20.2:*:*:*:*:*:*:*","matchCriteriaId":"A2257DAB-0A44-4841-9EF9-CBBF9BB68F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:advanced_package_tool:0.7.21:*:*:*:*:*:*:*","matchCriteriaId":"47EDE750-C502-4B25-829D-D0C0F2653C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E67027C4-0C37-4715-9EE6-BBE71C8A4CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"63D7BB47-916D-40AB-9B6C-DBBCB8CC8F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"862E6716-C665-43E9-9245-E0FABC095CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"63B043A4-EC4C-4A30-ABA3-CE63934C06CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBD74BC2-9B95-4E0E-B7A9-62C97464443A"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"15861FDD-ED4A-4407-B7DF-6AAC25C3AC7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"05D0D36A-F149-4733-BC75-B6EF39FD9C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"10450117-95E5-43EF-8BAE-56D403C27E0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E5B1CAB4-EF19-419E-AE59-950F4C64CAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"27DC4956-E0D1-451C-AECA-6C5629DD1A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"DB54FAC9-4300-4C91-98A8-7AA075B68E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"9B5ED2CB-2603-42BE-A067-738E76E52687"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"181924A3-71DD-46A2-BAD4-6D4734DDD541"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.13-bo1:*:*:*:*:*:*:*","matchCriteriaId":"4955663F-A699-428D-9995-21ED69331F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"DB91513D-3AEB-440E-BDD2-8D2FE1D6AD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"1410E630-2E45-4AC0-B5F9-96839957C8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.15-0.1bo:*:*:*:*:*:*:*","matchCriteriaId":"98AC38E9-FBFE-4972-80FA-D7F5D9169B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.15-0.2bo:*:*:*:*:*:*:*","matchCriteriaId":"78C6533A-C6DA-4E45-BB5F-44B7C4ADEA8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.16-1:*:*:*:*:*:*:*","matchCriteriaId":"9EF482CC-3A0A-4178-9ADD-57C8BFD5050E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.0.17-1:*:*:*:*:*:*:*","matchCriteriaId":"DB97D09E-80A1-4819-8496-AA5D4BCB9189"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3229262-E656-46EB-8880-B24F73C90509"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"81B47A64-8339-4A26-8AF5-D8CE90293F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3D5E1D8-EC66-495D-BBBC-78D535635F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2593C2F6-54E2-4311-B0A6-6E5E80B99A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E18DAF1F-2FFA-4C12-93A4-5417C5C25E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B8A2315F-0591-4CB7-AFD1-ADC8BF1C87FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"6C5ED765-9C72-4334-91E0-4BB0A15381DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"185A3B86-2261-488F-B1CA-03E9B42D94DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C98BE1A-0B65-44CD-ABDC-7CAA5D595797"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0B883322-F944-4FFC-B9D8-B1C289EA6C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1EC159F3-A216-45B8-A547-174ABABC953B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"56E1C9D0-5CDB-4DB2-A757-FCA31D1D591F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"E6D9BFD0-E308-44E8-A7C7-4699A2510A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72875923-4ACB-4B08-B52F-D9BA45CA8D1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.9:*:*:*:*:*:*:*","matchCriteriaId":"4EE3B58F-BD33-452A-BD4D-D0D023E1F8E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.11:*:*:*:*:*:*:*","matchCriteriaId":"86F2E2D4-CDEA-4D26-869A-C32C97A53D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.12:*:*:*:*:*:*:*","matchCriteriaId":"015691AF-BFD4-4ED0-873A-5D23F9194D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.13:*:*:*:*:*:*:*","matchCriteriaId":"699D019F-2924-4AE5-A833-92E46BA4AF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.14:*:*:*:*:*:*:*","matchCriteriaId":"9FD22F86-65A4-4B63-AEA3-77CD2DEF589B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.15:*:*:*:*:*:*:*","matchCriteriaId":"3A8FF5D4-493B-42DE-8DAA-BF6BDE3B5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.16:*:*:*:*:*:*:*","matchCriteriaId":"CF5AF288-9358-40BF-9A71-99C983713F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.17:*:*:*:*:*:*:*","matchCriteriaId":"7995C830-651D-46E9-AE53-2D73CB1575A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.18:*:*:*:*:*:*:*","matchCriteriaId":"F31AEB78-1DA5-4583-B865-1F74C0DE364E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.3.19:*:*:*:*:*:*:*","matchCriteriaId":"D3A64810-DB07-4600-9968-052703A01B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6B0F899-EF61-4B2B-81A3-932D5B8786EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5CCF1902-FD1C-4AA2-86BE-1374A5677C82"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"32B29CF3-9B80-4626-9785-73446E3DA300"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F384C461-0A0B-4A3A-A944-51C7282CE6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4BB2D223-5C72-4728-8628-C692E59155DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3776D2F0-5551-4B0D-B5B6-A6306E1052CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FE504A04-16EA-421F-A01E-FCCAFC9D2971"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F68E822C-189B-4F90-8D06-92E1E64E1C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"AAA1B686-013D-44A2-A9D5-52D913C28236"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"C1C7B1EB-B9B6-4E04-A14B-A7ADAF282EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"863AD8F9-1BC2-4CCE-962D-C9E77FD5C61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"7529570E-6563-4A7D-A493-A557583481AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.11:*:*:*:*:*:*:*","matchCriteriaId":"D4ECE94E-D866-435A-A54C-B6B90E8149E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.12:*:*:*:*:*:*:*","matchCriteriaId":"CD1D9284-EEF8-49B6-AAD1-826695148720"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.13:*:*:*:*:*:*:*","matchCriteriaId":"3C391EB0-E875-4B9E-BF0A-285B91961EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.14:*:*:*:*:*:*:*","matchCriteriaId":"44311E97-AF64-4181-A52F-9F66F9F250C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.15:*:*:*:*:*:*:*","matchCriteriaId":"D98750AF-DCD0-4B5F-82E2-911FB3F72BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.16:*:*:*:*:*:*:*","matchCriteriaId":"3C0D02B8-2DC4-4ECD-B846-EEEF13BFA026"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.17:*:*:*:*:*:*:*","matchCriteriaId":"5A25EFC1-758B-4F81-A07B-10807674D94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.18:*:*:*:*:*:*:*","matchCriteriaId":"9E9C27EE-F6AA-400B-AFDE-6AFD5988685E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.19:*:*:*:*:*:*:*","matchCriteriaId":"6473F0E9-C55E-4687-B57C-5A2B9CA5DF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.20:*:*:*:*:*:*:*","matchCriteriaId":"5CFA4C36-68E3-4586-B715-86FCC0C934FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.21:*:*:*:*:*:*:*","matchCriteriaId":"AED45163-C060-4884-90D6-32DCCB3FC907"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.22:*:*:*:*:*:*:*","matchCriteriaId":"4E5643C7-7519-4C86-A962-541057765FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D5A8669B-1746-439D-B592-BFD9FDCAF384"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.24:*:*:*:*:*:*:*","matchCriteriaId":"17F14B17-32E2-420A-99F5-E5E4729D73AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F3A0ED4A-58FB-4F7B-AEF4-482AC4DDAFA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.26:*:*:*:*:*:*:*","matchCriteriaId":"F11B9294-7C52-4E64-A8D8-F1A36A9B3AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.27:*:*:*:*:*:*:*","matchCriteriaId":"E9FBA9CD-AF6B-4EE8-A4D4-5ED9FEF560D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.28:*:*:*:*:*:*:*","matchCriteriaId":"FD4BB811-8AFE-4ADC-9790-A72B64614FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.29:*:*:*:*:*:*:*","matchCriteriaId":"6D7CF6C2-B787-4DB3-AF77-B69C25ED94E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.30:*:*:*:*:*:*:*","matchCriteriaId":"F9B478DB-912F-4563-A058-C4671BA8D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.30:ubuntu1:*:*:*:*:*:*","matchCriteriaId":"B061E3B1-9865-4730-BB64-5B727C28B6EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.30:ubuntu2:*:*:*:*:*:*","matchCriteriaId":"A4FCC9BF-91E0-4E51-B071-A4A80C3D50E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.31:*:*:*:*:*:*:*","matchCriteriaId":"EB5A7027-0C72-4C98-A20F-F176D2CA783C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.5.32:*:*:*:*:*:*:*","matchCriteriaId":"9128231B-2EE4-49CE-93BB-E1569F997C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"DBD12618-EADC-4C62-9844-B13D42F48873"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4D3BAFCE-3B0F-46C5-A0F3-FA10795F94C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"83E6EE25-34B0-44A7-9E0B-85420BA23A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"2EBBC666-27DA-482D-AEFF-2158965A9A49"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"3B130388-E8CD-48E6-BBB3-9555CDF41ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"46311A8F-B75F-497B-8B9D-3912437BC300"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"AD5FAC29-BDBC-44A4-9B3A-54D335D66315"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D4606D3C-3956-4028-9B3C-38D89E5C3732"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"1631B320-1ADA-4D92-889A-27802AA289CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"0A32DEA0-0410-4D7F-8B20-35B76B8542B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"6AD2BF13-3509-449D-BCD7-626DA16E333C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"8931C487-7B01-46B4-AAC7-959E286D796A"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"5D1DD0BF-6581-4269-90E3-D7FD14ACC542"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"C379EA2E-90F0-4B2E-8F6F-B2DA7259CD3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"C1CF91FC-A3B4-4507-A225-49A27EE451EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.15:*:*:*:*:*:*:*","matchCriteriaId":"D9962509-53B4-402E-AA1E-77C7C5D54452"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.16:*:*:*:*:*:*:*","matchCriteriaId":"65345737-6DD6-4971-8A24-209C6EFBEC38"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.17:*:*:*:*:*:*:*","matchCriteriaId":"7DDAC7AC-A0FB-4B0F-9DF9-BAA1C6C2E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.18:*:*:*:*:*:*:*","matchCriteriaId":"4CDE8307-9EBB-461D-8802-516599DD3D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.19:*:*:*:*:*:*:*","matchCriteriaId":"4CA4BEB2-98AE-4834-BD6C-7E41EA0F08E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.20:*:*:*:*:*:*:*","matchCriteriaId":"66EFD81E-7B6B-48C2-B8A2-B803C1347EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.21:*:*:*:*:*:*:*","matchCriteriaId":"BA7F566F-700E-411D-B0C7-CF9BC30FAD89"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.22:*:*:*:*:*:*:*","matchCriteriaId":"AB94CAF2-2C59-43D5-A5BE-BAE3D44B94D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.23:*:*:*:*:*:*:*","matchCriteriaId":"7550CF30-596C-4C46-9928-99D1F091982B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.24:*:*:*:*:*:*:*","matchCriteriaId":"4D74FEBE-5BA7-4907-ADBE-21BC4A73F2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.25:*:*:*:*:*:*:*","matchCriteriaId":"08025BA8-8DB2-4A63-BE31-4BC7626CF247"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.27:*:*:*:*:*:*:*","matchCriteriaId":"C33D9E60-633B-48A9-AC9D-FDDB6FF39440"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.27:ubuntu1:*:*:*:*:*:*","matchCriteriaId":"C745117D-546B-451F-9839-2AA56AC10AC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.27:ubuntu2:*:*:*:*:*:*","matchCriteriaId":"7A29168F-B7BD-460E-91D7-143B243BC2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.27:ubuntu3:*:*:*:*:*:*","matchCriteriaId":"ED3AB78A-864E-4F5A-827B-F0AFD503F22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.27:ubuntu4:*:*:*:*:*:*","matchCriteriaId":"AB2659B2-7D6B-4FB8-A941-DD313544ED15"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.28:*:*:*:*:*:*:*","matchCriteriaId":"1ADA767C-A9C7-4592-9633-54EB71F07793"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.29:*:*:*:*:*:*:*","matchCriteriaId":"F063F513-7F04-49B9-BCAA-69261841B8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.30:*:*:*:*:*:*:*","matchCriteriaId":"4751E4B9-B89F-49D4-8E72-534AEFE57F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.31:*:*:*:*:*:*:*","matchCriteriaId":"BC64ABF1-F116-4510-B279-84C28405D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.32:*:*:*:*:*:*:*","matchCriteriaId":"1686258C-4378-47BA-9811-8B6863FAF1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.33:*:*:*:*:*:*:*","matchCriteriaId":"B3BD2A6B-A393-4435-9958-2A01DEE48DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.34:*:*:*:*:*:*:*","matchCriteriaId":"9CE7BEE8-10F8-4735-A204-738AAA0C3038"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.35:*:*:*:*:*:*:*","matchCriteriaId":"CA66AB92-12CA-4B8D-8BAB-7DA45A4EF9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.36:*:*:*:*:*:*:*","matchCriteriaId":"BC226131-5C53-4829-B125-AFB8111A3774"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.36:ubuntu1:*:*:*:*:*:*","matchCriteriaId":"DE6C9C14-C804-47F1-97CE-CA2FF3287DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.37:*:*:*:*:*:*:*","matchCriteriaId":"ED3454FE-522A-42C0-8CA7-21AE8EAC9437"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.38:*:*:*:*:*:*:*","matchCriteriaId":"15B6CBB7-4870-4A82-9B6A-30A34EA54E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.39:*:*:*:*:*:*:*","matchCriteriaId":"346E9720-D787-4BE7-9F33-D5FFE30C7B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.40:*:*:*:*:*:*:*","matchCriteriaId":"78B0FB1A-48C0-4455-9109-7A8F60B99DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.40.1:*:*:*:*:*:*:*","matchCriteriaId":"3D6CCB50-D360-4AB2-90D5-C3FCF506D31C"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.41:*:*:*:*:*:*:*","matchCriteriaId":"BD0E1794-C19A-4779-8CD5-C10DA67F6DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.42:*:*:*:*:*:*:*","matchCriteriaId":"61AF9067-3A57-41C3-A326-19A2A1FC5291"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.42.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD24204-9DE1-498B-8CF7-23234B3DC517"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.42.2:*:*:*:*:*:*:*","matchCriteriaId":"411547FE-D995-488F-A07D-018FFB4DCF44"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.42.3:*:*:*:*:*:*:*","matchCriteriaId":"D748634E-B7D1-4E1F-8951-E5B1FC64D9B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.43:*:*:*:*:*:*:*","matchCriteriaId":"A75E5219-4BC1-45CE-A225-21C2C3E3D212"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.43.1:*:*:*:*:*:*:*","matchCriteriaId":"40B1D550-8384-40EC-827C-2433E3BA71CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.43.2:*:*:*:*:*:*:*","matchCriteriaId":"7D705912-ADE8-4BF6-B367-AB1699E17B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.43.3:*:*:*:*:*:*:*","matchCriteriaId":"0C709AC5-2A55-4917-AD18-3E313A9B3F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.44:*:*:*:*:*:*:*","matchCriteriaId":"913E6EE4-D94B-4B0D-8F5C-637CD23ABBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.44.1:*:*:*:*:*:*:*","matchCriteriaId":"FF26A78B-E7B7-481D-9C0F-888E322CF7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.44.1-0.1:*:*:*:*:*:*:*","matchCriteriaId":"43BB1F89-B225-49B8-922F-AA93404D9102"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.44.2:*:*:*:*:*:*:*","matchCriteriaId":"C482A979-497D-40D0-A606-21B2E1803BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.44.2:exp1:*:*:*:*:*:*","matchCriteriaId":"E923935B-F81D-4BC5-9C01-06612159C07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.45:*:*:*:*:*:*:*","matchCriteriaId":"18A6960B-7B34-43D8-8E86-F2E6FCA91E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46:*:*:*:*:*:*:*","matchCriteriaId":"EBFF6B94-521C-4B51-8F60-9CEF723978C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46.1:*:*:*:*:*:*:*","matchCriteriaId":"5FFEBB7C-4E56-4A92-BFD3-8D10E739B457"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46.2:*:*:*:*:*:*:*","matchCriteriaId":"4F2764CB-AE41-4435-A459-9227B6E670B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46.3:*:*:*:*:*:*:*","matchCriteriaId":"E28D5396-5378-46D3-A46A-CC77A02A6ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46.3-0.1:*:*:*:*:*:*:*","matchCriteriaId":"AAAA97B2-1072-4080-A341-64C00DAED664"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46.3-0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6BEB024-66AD-4B5A-A61E-82543767400E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.6.46.4-0.1:*:*:*:*:*:*:*","matchCriteriaId":"A77824A3-F70D-4AA2-93D3-7BE6E6A12616"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"5E5D42EE-C68F-4BCC-AF01-5AE9EF107DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"E1DB0DE2-C967-4DCA-A3B4-2F235371993B"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"5CA862B0-D7DB-44D7-A669-66357DC46AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"1464B59B-72A7-4328-A6BA-D60153C226AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"CB3B7EBB-BDE5-4091-8FE5-05965656912F"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"48005163-3A91-4F5D-B2E5-9A7B691713C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:apt:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"335B661E-7912-4E16-B6B2-18A111C23D1C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34829","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34832","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34874","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1779","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34630","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50086","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/762-1/","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/762-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1359","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SCTP sockets implementation in Sun OpenSolaris snv_106 through snv_107 allows local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la implementación de los sockets en Sun OpenSolaris snv_106 hasta la snv_107  permite a usuarios locales producir una denegación de servicio (panic) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257331-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34628","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1120","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257331-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1360","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel before 2.6.29, when Network Namespace Support (aka NET_NS) is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via vectors involving IPv6 packets."},{"lang":"es","value":"La función __inet6_check_established en net/ipv6/inet6_hashtables.c en el núcleo de Linux versiones anteriores a v2.6.29, cuando Network Namespace Support (también conocido como NET_NS) está activo, permite a atacantes remotos provocar una denegación de servicio (puntero de referencia NULL y caída del sistema) a través de vectores envueltos con paquetes IPv6."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.","lastModified":"2009-04-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.9","matchCriteriaId":"65B49D64-E571-4D7F-9852-6A3D129B51BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*","matchCriteriaId":"CBEBA0F6-5453-4993-932B-BB8941DCC5CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f53a38131a4e7a053c0aa060aba0411242fb6b9","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35387","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34602","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"http://xorl.wordpress.com/2009/04/21/linux-kernel-net_ns-ipv6-null-pointer-dereference/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f53a38131a4e7a053c0aa060aba0411242fb6b9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xorl.wordpress.com/2009/04/21/linux-kernel-net_ns-ipv6-null-pointer-dereference/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1361","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"dig.php en las herramientas DNS GScripts.net permite a atacantes remotos ejecutar código de su elección al utilizar meta-caracteres del interprete de comandos en el parámetro \"host\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gscripts:dns_tools:*:*:*:*:*:*:*:*","matchCriteriaId":"9FE79F01-6B31-466B-9512-CFBDD79CF22A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1362","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the login_name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en administration/index.php en chCounter v3.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"login_name\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chcounter:chcounter:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D1218F9E-A0D4-484F-A259-2138AE199D78"}]}]}],"references":[{"url":"http://secunia.com/advisories/24879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50353","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/24879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1364","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file."},{"lang":"es","value":"vulnerabilidad de uso después de liberación (use-after-free) en la librería incrustada GD en libwmf v0.2.8.4 permite a atacantes dependiendo del contexto causar una denegación de servicio (cuelgue de aplicación) o posiblemente ejecutar código a su elección a través de un archivo WMF elaborado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francis_james_franklin:libwmf:0.2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"441D6814-A090-4F17-9A15-A1D3904DA554"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0457.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35001","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35025","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35190","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35686","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-01.xml","source":"cve@mitre.org"},{"url":"http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1796","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34792","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022154","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-769-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1228","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496864","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50290","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-1364","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10959","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01263.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01266.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01269.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0457.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-769-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01263.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01266.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01269.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1365","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Flash Media Server (FMS) anterior a v3.0.4 y v3.5.x anterior a v3.5.2, utilizado en Flash Media Interactive Server y Flash Media Streaming Server, permite a atacantes remotos ejecutar procedimientos remotos a su elección dentro de un archivo ActionScript en el servidor a través de peticiones RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.3","matchCriteriaId":"EAF97B08-1802-4850-893A-C541E6BFB6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73544702-D995-43BA-92CB-01ED3642D22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7C5602CE-0860-46EC-9D31-13A83A81476A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CE2057CB-905A-4E81-A9EB-898105B2DF0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"95E05CA6-B186-4213-A46F-C4E0458B2CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9F9D585C-DBD6-4E13-A8FF-E043EC162D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE4A07B6-E5DA-4781-ABB3-DB2663E2A737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"84681400-0CBD-41D1-94D0-B9045958793D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29A5E8DC-E664-4FAF-9ED9-7191433F01E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"897B12DA-8749-44F7-AA1E-AB1F01BB205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8334A448-0DFF-4571-81BC-81ADEDBD9D7C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34878","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-05.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34790","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022148","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1366","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T21:30:13.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Website\\admin\\Sales\\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"name/value pairs\" and \"paypal IPN functionality.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Website\\admin\\Sales\\paypalipn.aspx en DotNetNuke (DNN) versiones anteriores v4.9.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados relacionados con \"parejas name/value\" y \"funcionalidad paypal IPN\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.9.2","matchCriteriaId":"7EFC7E92-07CE-4652-97CD-02EA6C3E98B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*","matchCriteriaId":"FE94AE61-4CA4-48B5-BB08-D808CF750CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C7863328-514C-4885-B5DD-5E04503962E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"750F735B-1419-4FCF-84F0-05E13608B73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BF8EC31D-9C28-46D7-83C6-9720AA0DBC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"81D4BDCE-EF83-48E2-BDC7-F6F6CE5CE51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E2A5E7E9-4530-4CA9-BD61-4A22D17A898F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DEB2BD-8543-4408-B96E-616AFEBEEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"72A73BE5-6668-484E-8E7C-16E839E98882"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1681BA4-9C05-45DF-B51B-D89633EB0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"884BA1BF-BD03-4437-A02C-825B59634A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C627743E-9B8B-431B-A513-89CBF7C1E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"677B54A1-6945-459F-9ADA-D6D9E89F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C7059E6A-4A54-4364-8977-400C18905D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:*","matchCriteriaId":"2902A37C-97AA-42CD-A038-3DA1A6E4653A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"403D90A9-C191-496A-BBB9-4915D39B675D"}]}]}],"references":[{"url":"http://secunia.com/advisories/34686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno25/tabid/1260/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34484","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno25/tabid/1260/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1367","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T21:30:14.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en moziloCMS v1.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"query\" en la acción de búsqueda, siendo una vulnerabilidad diferente que CVE-2008-6127.2a."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"B1E63B7C-1A65-407E-BB0D-8AA95A86C79F"}]}]}],"references":[{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34474","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49812","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8394","source":"cve@mitre.org"},{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1368","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T21:30:14.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.  NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en moziloCMS v1.11 permite a atacantes remotos leer ficheros de su elección al utilizar los caracteres .. (punto punto) en el parámetro \"page\". NOTA: esta podría ser la misma vulnerabilidad que CVE-2008-6126.2,que podría haber sido solucionada en v1.10.3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"B1E63B7C-1A65-407E-BB0D-8AA95A86C79F"}]}]}],"references":[{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34474","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49813","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8394","source":"cve@mitre.org"},{"url":"http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1369","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T21:30:14.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message."},{"lang":"es","value":"moziloCMS v1.11 permite a atacantes remotos obtener información sensible mediante el parámetro (1) \"gal[]\" en gallery.php, los parámetros (2) \"page[]\" y () \"cat[]\" en index.php, o el parámetro (4) \"file[]\" en download.php, revelando la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.11:*:*:*:*:*:*:*","matchCriteriaId":"B1E63B7C-1A65-407E-BB0D-8AA95A86C79F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49811","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8394","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1370","sourceIdentifier":"cve@mitre.org","published":"2009-04-22T21:30:14.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .cue file."},{"lang":"es","value":"Desbordamiento de búfer en ape_plugin.plg en Xilisoft Video Converter v3.1.53.0704n y v5.1.23.0402 permite a atacantes remotos provocar una denegación de servicio (colgarse) y posiblemente ejecutar código de su elección al utilizar una cadena larga en un fichero de extensión .cue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xilisoft:xilisoft_video_converter:3.1.53:*:*:*:*:*:*:*","matchCriteriaId":"96DFD3FF-B87F-4ADB-8F74-494DA7008FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xilisoft:xilisoft_video_converter:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"81E75033-DDC1-491A-86DC-DFBC60AF7F74"}]}]}],"references":[{"url":"http://secunia.com/advisories/34660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34472","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49807","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1371","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding."},{"lang":"es","value":"La macro CLI_ISCONTAINED en libclamav/others.h en ClamAV anteriores a v0.95.1 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero malformado con codificación UPack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*","versionEndIncluding":"0.95","matchCriteriaId":"4DA7BE61-355F-48AD-91F3-79A9A91B5FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*","matchCriteriaId":"68EC0AEB-91CF-4A79-AF40-A475E896FB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*","matchCriteriaId":"5935EDE0-9203-4150-9B7A-AB10B377F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*","matchCriteriaId":"59C2680C-C187-487A-B6C4-F509E0C52436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*","matchCriteriaId":"A796E5E1-6481-49EF-8D97-9EC2A01C712B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*","matchCriteriaId":"03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.8_:rc3:*:*:*:*:*:*","matchCriteriaId":"61ABEE1A-AABB-47D3-941D-81DCB198DC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"5CAD151A-2494-41A5-9FDB-CE0082333FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*","matchCriteriaId":"22958219-46D6-4868-B324-BFC2F2C893F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*","matchCriteriaId":"4543DDEE-C1D1-428F-91C7-98B8985A5931"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*","matchCriteriaId":"1FED760C-7106-49CE-B4FE-CA53A1092C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*","matchCriteriaId":"CABA4177-6B24-4364-BC34-D5ED171E60FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"F488ACB2-A013-4BF3-B5AC-897E40BA87F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"2D5799FA-DD99-4A35-BC56-B2FBEB747226"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"F32EA99F-088E-499E-9DCE-EFA9A64D1673"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"F8B04C5B-316D-4C6A-96CF-F145F7C9E636"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"20769174-C51F-47D5-A34F-EB772F542A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"721B8B46-DFD9-4937-96A3-8D731304415B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"CDF18A59-FB30-45C6-B28E-4499DCD78F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"0B28E0BE-1E2D-45D2-B483-2D81326BF482"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"F47FD5DF-F22E-4B78-9B92-A9C41950F836"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"C1F9571F-9192-414F-B680-10A22C71CFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"F7CAC876-9AAC-407C-A34E-98AA6801D25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*","matchCriteriaId":"470FC8FE-785A-4934-8989-D17C1796870E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"79A6C0FE-2EED-447D-9F62-12CFF1E0918A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*","matchCriteriaId":"0928E05F-92E7-4451-AC11-4E6A014E1154"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"B2E7A70A-3584-4259-80CA-03AE290ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"D27D70A0-EC82-4DC7-A66D-60D263B76E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*","matchCriteriaId":"28C9C5AD-97A9-42C8-917C-2787785F5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"F4AB3389-1C30-47BB-9DAE-0F744E7F8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"4DA837A0-C8CB-486B-845E-A370E3137697"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"235A144A-4AB1-4756-AFB1-58AFFE02649E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"767BBE7F-6CC4-42D4-9730-6E617D36AAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"4EA7CD6A-133F-48E4-87BC-77CF21A25940"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"F65A7930-A913-4C3D-95A3-E629D6A468C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"9C24942D-7AD6-4391-8F05-2827AB6A751E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*","matchCriteriaId":"BABA6024-1769-44D9-BF20-215602980A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc1:*:*:*:*:*:*:*","matchCriteriaId":"EC10D578-B4C4-48A3-ADB6-09BEFEB440E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EE4A3CF4-5295-47B5-8CC6-BD5B07C6618A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc3:*:*:*:*:*:*:*","matchCriteriaId":"E28D6C24-5BF9-496D-AA74-28A5D1455225"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"DA719FE4-04E0-4664-8EEC-70CD613408DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D90B7512-74E3-4578-9473-1C8B1759B933"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"C859F864-B68F-4805-B804-E50F2C3FFE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"B5CAFEA5-C062-43EA-A302-38887DA6768C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"525DC218-308C-4A0E-96A7-DC74B8973B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84_rc1:*:*:*:*:*:*:*","matchCriteriaId":"52584216-2921-4299-AC4E-2118EA72997B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EEC1A194-C333-4AAC-AE23-9ADEFFAA6377"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"72C71B82-8F84-4855-A138-7E7436788D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"039341D8-8E2B-4901-BFA6-9CCC46A18C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"C048A75E-6587-485C-9F2B-E12BED34FF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"5B003639-3228-4AC1-AB46-73481BB5DDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86_rc1:*:*:*:*:*:*:*","matchCriteriaId":"61F0A16A-4B50-4CF0-B857-3BAC06CDD54E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"6D6A495D-F9BB-41B9-A912-670D837EA278"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"45F5E6B4-88DD-4426-9FB6-D9009F6B8740"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DB1EB857-D417-49EB-89FD-04733C872EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"4551D5ED-6C72-4C9B-A556-491042A6113A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"01859947-09D4-417E-92A4-FA4F1625C60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"797B7A3B-BAEA-4868-BC3E-CE629FE151F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"30337B76-E552-431F-B49C-A418E5B851A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"53027413-3353-4051-88FA-A46859AD747A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"970D5900-7F83-4140-A3E4-FF4E710DBD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*","matchCriteriaId":"AA0D4F76-258B-4E5D-AA4D-8231E846C76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*","matchCriteriaId":"F2A669CC-C10F-4E74-ACD0-DF933D723EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"13E8E7E7-E29A-4539-8D8C-45B9C39B0146"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*","matchCriteriaId":"A966F2C4-47A0-445F-8927-0F0222A48FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"7681419E-5125-40D6-BE61-57CE9C8F3DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"2CE0D056-B84F-4331-832C-5D1703A15A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"96A13543-D7E2-41D6-8E8E-BE150ECDAA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*","matchCriteriaId":"27310591-C883-4929-824A-AE99E7592D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*","matchCriteriaId":"2964A047-0277-4DA4-BDBE-3F5FC3C1F68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc1:*:*:*:*:*:*:*","matchCriteriaId":"30CD371C-7B08-4A4B-AEB7-AC6BD199EE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"7DBFE202-86D7-4AE3-AC5B-0902B5FEF18A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4FBB0CE5-C6E7-469D-B3E4-1AB7FF677DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F2B28501-9959-41D4-AA04-70706792611E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"E891471A-A0B8-4251-A6D3-60E947A18F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"D0E6A5E0-66E0-4EA7-9007-2389179500C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"ED827D10-C862-4BC7-AB33-06E040DAE161"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"51DC9827-D7D1-4D34-AA35-6A7BDB92907D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91_rc1:*:*:*:*:*:*:*","matchCriteriaId":"5511BAA8-2BA1-45C2-A4FB-6B8285CE62DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91_rc2:*:*:*:*:*:*:*","matchCriteriaId":"A756F525-1527-49FB-B045-9709FA957836"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"37A3B776-0096-41B7-8D2E-C6F0B4F37458"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"B5AAC04C-FFC7-45D8-A29C-6B258CD56489"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*","matchCriteriaId":"A06278C4-328D-4D14-9BC1-DCA697EC9EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"9A66094D-050A-405E-AB0F-239A39F64E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*","matchCriteriaId":"B931BDB2-DBE4-4983-ABFB-86941CDD14F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*","matchCriteriaId":"C8FA4A86-C015-4F1F-B565-89410E70D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*","matchCriteriaId":"F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*","matchCriteriaId":"0722860E-934A-49CA-BEAD-0EB05AA6E4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*","matchCriteriaId":"96F399F4-E7C0-4AD0-AA4F-C7C7FC2C466E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*","matchCriteriaId":"19A73FE2-2D4C-4B47-85C9-F8E3874992B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.95:src2:*:*:*:*:*:*","matchCriteriaId":"7DB5B3F9-3A02-450D-A6F0-4C640209780B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1771","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34446","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022028","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-756-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0985","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://launchpad.net/bugs/360502","source":"cve@mitre.org"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-756-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://launchpad.net/bugs/360502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1372","sourceIdentifier":"cve@mitre.org","published":"2009-04-23T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función cli_url_canon en libclamav/phishcheck.c en ClamAV antes de 0.95.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue de la aplicación) y posiblemente ejecutar código de su elección mediante una URL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:*:src2:*:*:*:*:*:*","versionEndIncluding":"0.95","matchCriteriaId":"6D8C3234-5194-4E3B-8503-526CB99E0E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*","matchCriteriaId":"68EC0AEB-91CF-4A79-AF40-A475E896FB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*","matchCriteriaId":"5935EDE0-9203-4150-9B7A-AB10B377F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*","matchCriteriaId":"59C2680C-C187-487A-B6C4-F509E0C52436"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*","matchCriteriaId":"A796E5E1-6481-49EF-8D97-9EC2A01C712B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*","matchCriteriaId":"03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.8_:rc3:*:*:*:*:*:*","matchCriteriaId":"61ABEE1A-AABB-47D3-941D-81DCB198DC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"5CAD151A-2494-41A5-9FDB-CE0082333FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*","matchCriteriaId":"22958219-46D6-4868-B324-BFC2F2C893F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*","matchCriteriaId":"4543DDEE-C1D1-428F-91C7-98B8985A5931"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*","matchCriteriaId":"1FED760C-7106-49CE-B4FE-CA53A1092C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*","matchCriteriaId":"CABA4177-6B24-4364-BC34-D5ED171E60FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*","matchCriteriaId":"F488ACB2-A013-4BF3-B5AC-897E40BA87F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*","matchCriteriaId":"2D5799FA-DD99-4A35-BC56-B2FBEB747226"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*","matchCriteriaId":"F32EA99F-088E-499E-9DCE-EFA9A64D1673"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*","matchCriteriaId":"F8B04C5B-316D-4C6A-96CF-F145F7C9E636"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*","matchCriteriaId":"E66D5CDE-ED5D-41BA-A4B1-28E8559EC056"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*","matchCriteriaId":"20769174-C51F-47D5-A34F-EB772F542A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"721B8B46-DFD9-4937-96A3-8D731304415B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"CDF18A59-FB30-45C6-B28E-4499DCD78F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"0B28E0BE-1E2D-45D2-B483-2D81326BF482"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E7029650-6DF1-4616-BE9F-DE40E9BBE3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"F47FD5DF-F22E-4B78-9B92-A9C41950F836"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*","matchCriteriaId":"C1F9571F-9192-414F-B680-10A22C71CFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"F7CAC876-9AAC-407C-A34E-98AA6801D25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*","matchCriteriaId":"470FC8FE-785A-4934-8989-D17C1796870E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"79A6C0FE-2EED-447D-9F62-12CFF1E0918A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*","matchCriteriaId":"0928E05F-92E7-4451-AC11-4E6A014E1154"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"B2E7A70A-3584-4259-80CA-03AE290ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"24AF81C1-5B68-4D84-AFB9-C0419B7F98D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*","matchCriteriaId":"D27D70A0-EC82-4DC7-A66D-60D263B76E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*","matchCriteriaId":"28C9C5AD-97A9-42C8-917C-2787785F5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*","matchCriteriaId":"F4AB3389-1C30-47BB-9DAE-0F744E7F8877"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*","matchCriteriaId":"CD4D3D3E-067B-4A37-A851-99D2A3E20FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*","matchCriteriaId":"4DA837A0-C8CB-486B-845E-A370E3137697"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*","matchCriteriaId":"235A144A-4AB1-4756-AFB1-58AFFE02649E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*","matchCriteriaId":"767BBE7F-6CC4-42D4-9730-6E617D36AAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*","matchCriteriaId":"4EA7CD6A-133F-48E4-87BC-77CF21A25940"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*","matchCriteriaId":"F65A7930-A913-4C3D-95A3-E629D6A468C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*","matchCriteriaId":"9C24942D-7AD6-4391-8F05-2827AB6A751E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*","matchCriteriaId":"BABA6024-1769-44D9-BF20-215602980A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc1:*:*:*:*:*:*:*","matchCriteriaId":"EC10D578-B4C4-48A3-ADB6-09BEFEB440E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EE4A3CF4-5295-47B5-8CC6-BD5B07C6618A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.80_rc3:*:*:*:*:*:*:*","matchCriteriaId":"E28D6C24-5BF9-496D-AA74-28A5D1455225"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*","matchCriteriaId":"DA719FE4-04E0-4664-8EEC-70CD613408DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.81_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D90B7512-74E3-4578-9473-1C8B1759B933"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*","matchCriteriaId":"C859F864-B68F-4805-B804-E50F2C3FFE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*","matchCriteriaId":"B5CAFEA5-C062-43EA-A302-38887DA6768C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*","matchCriteriaId":"525DC218-308C-4A0E-96A7-DC74B8973B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84_rc1:*:*:*:*:*:*:*","matchCriteriaId":"52584216-2921-4299-AC4E-2118EA72997B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.84_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EEC1A194-C333-4AAC-AE23-9ADEFFAA6377"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*","matchCriteriaId":"72C71B82-8F84-4855-A138-7E7436788D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*","matchCriteriaId":"039341D8-8E2B-4901-BFA6-9CCC46A18C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*","matchCriteriaId":"C048A75E-6587-485C-9F2B-E12BED34FF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC4D448-DDCD-4C0B-AA84-2D054FCF718C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*","matchCriteriaId":"5B003639-3228-4AC1-AB46-73481BB5DDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.86_rc1:*:*:*:*:*:*:*","matchCriteriaId":"61F0A16A-4B50-4CF0-B857-3BAC06CDD54E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*","matchCriteriaId":"6D6A495D-F9BB-41B9-A912-670D837EA278"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*","matchCriteriaId":"45F5E6B4-88DD-4426-9FB6-D9009F6B8740"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DB1EB857-D417-49EB-89FD-04733C872EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*","matchCriteriaId":"5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*","matchCriteriaId":"4551D5ED-6C72-4C9B-A556-491042A6113A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*","matchCriteriaId":"01859947-09D4-417E-92A4-FA4F1625C60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*","matchCriteriaId":"797B7A3B-BAEA-4868-BC3E-CE629FE151F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*","matchCriteriaId":"30337B76-E552-431F-B49C-A418E5B851A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*","matchCriteriaId":"53027413-3353-4051-88FA-A46859AD747A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*","matchCriteriaId":"970D5900-7F83-4140-A3E4-FF4E710DBD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*","matchCriteriaId":"AA0D4F76-258B-4E5D-AA4D-8231E846C76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*","matchCriteriaId":"F2A669CC-C10F-4E74-ACD0-DF933D723EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*","matchCriteriaId":"13E8E7E7-E29A-4539-8D8C-45B9C39B0146"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*","matchCriteriaId":"A966F2C4-47A0-445F-8927-0F0222A48FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*","matchCriteriaId":"7681419E-5125-40D6-BE61-57CE9C8F3DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"2CE0D056-B84F-4331-832C-5D1703A15A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*","matchCriteriaId":"96A13543-D7E2-41D6-8E8E-BE150ECDAA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*","matchCriteriaId":"27310591-C883-4929-824A-AE99E7592D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*","matchCriteriaId":"2964A047-0277-4DA4-BDBE-3F5FC3C1F68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc1:*:*:*:*:*:*:*","matchCriteriaId":"30CD371C-7B08-4A4B-AEB7-AC6BD199EE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc1.1:*:*:*:*:*:*:*","matchCriteriaId":"7DBFE202-86D7-4AE3-AC5B-0902B5FEF18A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4FBB0CE5-C6E7-469D-B3E4-1AB7FF677DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.90_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F2B28501-9959-41D4-AA04-70706792611E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*","matchCriteriaId":"E891471A-A0B8-4251-A6D3-60E947A18F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*","matchCriteriaId":"D0E6A5E0-66E0-4EA7-9007-2389179500C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*","matchCriteriaId":"ED827D10-C862-4BC7-AB33-06E040DAE161"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*","matchCriteriaId":"51DC9827-D7D1-4D34-AA35-6A7BDB92907D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91_rc1:*:*:*:*:*:*:*","matchCriteriaId":"5511BAA8-2BA1-45C2-A4FB-6B8285CE62DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.91_rc2:*:*:*:*:*:*:*","matchCriteriaId":"A756F525-1527-49FB-B045-9709FA957836"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*","matchCriteriaId":"37A3B776-0096-41B7-8D2E-C6F0B4F37458"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"B5AAC04C-FFC7-45D8-A29C-6B258CD56489"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*","matchCriteriaId":"A06278C4-328D-4D14-9BC1-DCA697EC9EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*","matchCriteriaId":"9A66094D-050A-405E-AB0F-239A39F64E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*","matchCriteriaId":"AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*","matchCriteriaId":"B931BDB2-DBE4-4983-ABFB-86941CDD14F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*","matchCriteriaId":"C8FA4A86-C015-4F1F-B565-89410E70D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*","matchCriteriaId":"F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*","matchCriteriaId":"0722860E-934A-49CA-BEAD-0EB05AA6E4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*","matchCriteriaId":"96F399F4-E7C0-4AD0-AA4F-C7C7FC2C466E"},{"vulnerable":false,"criteria":"cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*","matchCriteriaId":"1F0BB8C6-F0A3-418F-A457-93A4CC5BB6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*","matchCriteriaId":"19A73FE2-2D4C-4B47-85C9-F8E3874992B6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/53603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34446","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022028","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0985","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1373","sourceIdentifier":"secalert@redhat.com","published":"2009-05-26T15:30:05.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en XMPP SOCKS5 bytestream server en Pidgin anteriores a v2.5.6 permite a usuarios remotos autenticados ejecutar código de forma arbitraria a través de vectores que incluyen una transferencia de fichero saliente XMPP. NOTA: Algunos de los detalles fueron obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.5","matchCriteriaId":"6FC23273-E322-40E0-AD26-2F272EB5E7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"}]}]}],"references":[{"url":"http://debian.org/security/2009/dsa-1805","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35188","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35194","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35215","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35294","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35329","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35330","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:140","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"secalert@redhat.com"},{"url":"http://www.pidgin.im/news/security/?id=29","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1059.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35067","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-781-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500488","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50682","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"secalert@redhat.com"},{"url":"http://debian.org/security/2009/dsa-1805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-781-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1374","sourceIdentifier":"secalert@redhat.com","published":"2009-05-26T15:30:05.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet."},{"lang":"es","value":"Desbordamiento de búfer en la función decrypt_out en Pidgin anteriores a v2.5.6 permite a atacantes remotos producir una denegación de servicio (caída de aplicación)a través de un paquete QQ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.5","matchCriteriaId":"6FC23273-E322-40E0-AD26-2F272EB5E7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"}]}]}],"references":[{"url":"http://secunia.com/advisories/35188","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35194","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35294","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35329","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"secalert@redhat.com"},{"url":"http://www.pidgin.im/news/security/?id=30","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35067","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500490","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50684","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1375","sourceIdentifier":"secalert@redhat.com","published":"2009-05-26T15:30:05.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol."},{"lang":"es","value":"La implementación PurpleCircBuffer en Pidgin anteriores a v2.5.6 no mantienen de forma adecuada cierto búfer, lo que permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) a través de vectores que incluyen los protocolos (1) XMPP o (2) Sametime."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.5","matchCriteriaId":"6FC23273-E322-40E0-AD26-2F272EB5E7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"}]}]}],"references":[{"url":"http://debian.org/security/2009/dsa-1805","source":"secalert@redhat.com"},{"url":"http://osvdb.org/54649","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35188","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35194","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35215","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35294","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35329","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"secalert@redhat.com"},{"url":"http://www.pidgin.im/news/security/?id=31","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35067","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500491","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50683","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"secalert@redhat.com"},{"url":"http://debian.org/security/2009/dsa-1805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1376","sourceIdentifier":"secalert@redhat.com","published":"2009-05-26T15:30:05.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2927."},{"lang":"es","value":"Múltiples desbordamientos de entero en las funciones msn_slplink_process_msg en el manejador del protocolo de MSN en (1) libpurple/protocols/msn/slplink.c y (2) libpurple/protocols/msnp9/slplink.c en Pidgin anterior a v2.5.6 en plataformas de 32 bits permite a atacantes remotos ejecutar código arbitrario a través de un mensaje mal formado con un valor de offset manipulado, que produce un desbordamiento de búfer. NOTA: Este hecho se produce por un arreglo incompleto de CVE-2008-2927."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.5","matchCriteriaId":"6FC23273-E322-40E0-AD26-2F272EB5E7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"A7D1DFC7-4B7F-4006-9058-8335A292821E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*","matchCriteriaId":"12095F49-8DFD-4C74-9454-5C3A5992A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"C62110B5-61D7-406D-B1A5-65AEC202DDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"3FEE4F73-A426-4B47-8BAF-1C7D2F955850"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"777EF35C-195A-4784-986D-3811CF1DCF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*","matchCriteriaId":"F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"}]}]}],"references":[{"url":"http://debian.org/security/2009/dsa-1805","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35188","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35194","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35215","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35294","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35329","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35330","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37071","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:140","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"secalert@redhat.com"},{"url":"http://www.pidgin.im/news/security/?id=32","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1059.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35067","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-781-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500493","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50680","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"secalert@redhat.com"},{"url":"http://debian.org/security/2009/dsa-1805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-781-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-781-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1377","sourceIdentifier":"secalert@redhat.com","published":"2009-05-19T19:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\""},{"lang":"es","value":"La función dtls1_buffer_record en ssl/d1_pkt.c en OpenSSL 0.9.8k y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de memoria) a través de series largas de registros DTLS de \"eras futuras\" que se almacenan en búfer en una cola, también conocido como \"fallo de limitación de la grabación de búfer DTLS\""}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndExcluding":"0.9.8m","matchCriteriaId":"EA054F35-6E05-4A24-9195-F80C0C2761DC"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18187","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247675613888&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Broken Link","Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1377","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247675613888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-1378","sourceIdentifier":"secalert@redhat.com","published":"2009-05-19T19:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\""},{"lang":"es","value":"Múltiples fugas de memoria en la función dtls1_process_out_of_seq_message en ssl/d1_both.c en OpenSSL v0.9.8k y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de memoria) a través de registros DTLS que (1) son duplicados o (2) tienen una secuencia de números mucho mayor que la actual secuencia de números, conocido también como \"fuga de memoria en el manejo de fragmentos DTLS\"."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.\n","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartExcluding":"0.9.8","versionEndExcluding":"0.9.8m","matchCriteriaId":"5DC47E9C-E7B1-4EF7-AAEE-7D7746544D47"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18188","source":"secalert@redhat.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247679213944&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124263491424212&w=2","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1378","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8720","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247679213944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124263491424212&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1379","sourceIdentifier":"secalert@redhat.com","published":"2009-05-19T19:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en (use-after-free) en la función dtls1_retrieve_buffered_fragment en ssl/d1_both.c en OpenSSL v1.0.0 Beta 2 permite a atacantes remotos producir una denegación de servicio (caída de openssl s_client) a posiblemente tenga un impacto sin especificar a través de un paquete DTLS, como se demostró mediante un paquete de un servidor que utiliza un certificado de servidor manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.\n","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35461","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/4","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35138","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022241","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50661","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://launchpad.net/bugs/cve/2009-1379","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1380","sourceIdentifier":"secalert@redhat.com","published":"2009-12-15T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en JMX-Console en JBossAs en Red Hat JBoss Enterprise Application Platform (tambien conocida como JBoss EAP or JBEAP) v4.2 anteriores a v4.2.0.CP08 y v4.3 anteriores a v4.3.0.CP07 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro filtro, relacionado con la propiedad \"key\" y la posición de los caracteres comilla y dos puntos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp01:*:*:*:*:*:*","matchCriteriaId":"E715EAF0-DAE9-4FD5-996E-18E61C9CC703"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp02:*:*:*:*:*:*","matchCriteriaId":"4E6C7D0B-DBC0-4414-9C40-713E01146FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp03:*:*:*:*:*:*","matchCriteriaId":"C68C2A35-BC1E-414A-9DB1-7585435DCA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp01:*:*:*:*:*:*","matchCriteriaId":"599FBAC3-2E83-443B-AACB-99BBA896CB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp02:*:*:*:*:*:*","matchCriteriaId":"43590B58-A1C7-4105-A00F-6C4F46A6CC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp03:*:*:*:*:*:*","matchCriteriaId":"A44F907E-AE57-4213-B001-A23319B72CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp04:*:*:*:*:*:*","matchCriteriaId":"243ED156-851C-4897-AF59-86FCA5C9C66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp05:*:*:*:*:*:*","matchCriteriaId":"125BF8B0-AF1B-4FB1-9D41-D9FB30AE23FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp06:*:*:*:*:*:*","matchCriteriaId":"A3E7C299-8A2D-4733-98AC-F6FA37CC1C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp07:*:*:*:*:*:*","matchCriteriaId":"7398F80B-8318-40E7-A0EE-6CCF7E066C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3:cp01:*:*:*:*:*:*","matchCriteriaId":"888B9B34-40A3-4CE3-9643-0174CC61751B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp01:*:*:*:*:*:*","matchCriteriaId":"2B3E4026-F98E-4AEB-9FE1-4FFBBF44AC55"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp02:*:*:*:*:*:*","matchCriteriaId":"960A513A-CAFC-4B3D-ABD7-4659CF545C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp03:*:*:*:*:*:*","matchCriteriaId":"C2D8DC6D-5E39-4A53-8BB8-F998706D573F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp04:*:*:*:*:*:*","matchCriteriaId":"3AA2D64E-D7E7-400D-AC7E-CB2045750791"}]}]}],"references":[{"url":"http://secunia.com/advisories/37671","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023315","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37276","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511224","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54698","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-1983","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-1983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1381","sourceIdentifier":"secalert@redhat.com","published":"2009-05-22T20:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating systems and versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.  NOTE: this issue exists because of an incomplete fix for CVE-2009-1579."},{"lang":"es","value":"La función map_yp_alias en functions/imap_general.php en SquirrelMail anteriores a v1.4.19-1 en Debian GNU/Linux, y posiblemente otras versiones y sistemas operativos, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres shell en una cadena de nombre de usuario, que es usada por el programa ypmatch. NOTA: Esta característica existe por una resolución deficiente de la vulnerabilidad CVE-2009-1579."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of squirrelmail as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n\nUpdates for squirrelmail released via RHSA-2009:1066 (https://rhn.redhat.com/errata/RHSA-2009-1066.html) fixed original flaw CVE-2009-1579 without introducing CVE-2009-1381.","lastModified":"2009-05-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:imap_general.php:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"181400A1-714E-4CC1-A8C4-071C4C7ADAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6-rc1:*:*:*:*:*:*:*","matchCriteriaId":"80FE1297-04B7-4F1D-B932-1015EE3070C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0-r1:*:*:*:*:*:*:*","matchCriteriaId":"5F6B4BA8-1379-44CF-B87D-9DA66B5F2484"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r1:*:*:*:*:*:*:*","matchCriteriaId":"AB0ABD26-2EA3-4884-BA0B-FFB88177CFDB"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r2:*:*:*:*:*:*:*","matchCriteriaId":"CCC479F3-6F3B-46CB-9D28-2DB7D76FDAE5"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r3:*:*:*:*:*:*:*","matchCriteriaId":"8EDC2C56-E977-452F-9263-541091356B67"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r4:*:*:*:*:*:*:*","matchCriteriaId":"B743DEC2-1ED2-4CAC-87F4-4EFDF16159FF"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r5:*:*:*:*:*:*:*","matchCriteriaId":"5CCE37B1-932D-4A4A-B4CA-056E26D78659"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B08E51F1-3764-4146-89C1-20B9B8EE1222"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:r1:*:*:*:*:*:*","matchCriteriaId":"0F28456D-EA59-4900-AEAD-F8CB06F5129D"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail1.4.19-1:*:*:*:*:*:*:*:*","matchCriteriaId":"F1EC97E5-CD9F-42F9-B2B5-E5909339CC40"}]}]}],"references":[{"url":"http://release.debian.org/proposed-updates/stable_diffs/squirrelmail_1.4.15-4+lenny2.debdiff","source":"secalert@redhat.com","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:122","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/503718/100/0/threaded","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01195.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01202.html","source":"secalert@redhat.com"},{"url":"http://release.debian.org/proposed-updates/stable_diffs/squirrelmail_1.4.15-4+lenny2.debdiff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503718/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01195.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01202.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1382","sourceIdentifier":"secalert@redhat.com","published":"2009-07-14T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags."},{"lang":"es","value":"Desbordamiento múltiple basado en pila en mimetex.cgi en mimeTeX, cuando se descargaron antes de 20090713, permiten a atacantes remotos ejecutar código arbitrario a través de un archivo TeX con una gran (1) foto, (2) círculo, o (3) etiquetas de entrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mimetex:*:*:*:*:*:*:*:*","versionEndIncluding":"1.71","matchCriteriaId":"0205895B-D777-43B6-B4B4-E57B333CAC40"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html","source":"secalert@redhat.com"},{"url":"http://scary.beasts.org/security/CESA-2009-009.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35752","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35816","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0877","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51794","source":"secalert@redhat.com"},{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2009-009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1383","sourceIdentifier":"secalert@redhat.com","published":"2009-07-14T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag."},{"lang":"es","value":"La función getdirective en mathex.cgi en mathTeX, cuando se ha descargado antes de 20090713, permite a atacantes remotos ejecutar comandos arbitrarios a través de metacaracteres shell en la tag \"dpi\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mathtex:-:*:*:*:*:*:*:*","matchCriteriaId":"5784FD6A-EED6-4A19-8FDC-3F8C60EF93DB"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35816","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51795","source":"secalert@redhat.com"},{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1384","sourceIdentifier":"secalert@redhat.com","published":"2009-05-28T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"pam_krb5 v2.2.14 a v2.3.4, tal como se usa Red Hat Enterprise Linux (RHEL) 5, genera diferentes peticiones de contraseña dependiendo de si existe la cuenta de usuario, lo que permite a atacantes remotos enumerar los nombres de usuario válidos."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of the pam_krb5 packages, as shipped with Red Hat Enterprise Linux 3 and 4.\n\nThe issue was addressed in the pam_krb5 packages as shipped with Red Hat Enterprise Linux 5 via:\nhttps://rhn.redhat.com/errata/RHSA-2010-0258.html","lastModified":"2010-03-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client:*:*:*:*:*","matchCriteriaId":"7361D8F0-FE84-41D0-9C62-F180339DD40A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*","matchCriteriaId":"5454336D-724E-4027-A642-1EFCB79C1ADC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*","matchCriteriaId":"5833A489-D6DE-4D51-9E74-189CBC2E28CA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"D57B9A37-0003-4E3D-B0FE-9BEA46D26FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.3:*:*:*:*:*:*:*","matchCriteriaId":"81821DD4-343A-4CDE-A7A6-CA606662971C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eyrie:pam-krb5:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F0F34ECE-67B4-4B0A-BB57-A0A8F666669C"}]}]}],"references":[{"url":"http://osvdb.org/54791","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35230","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43314","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:054","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/27/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35112","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1448","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502602","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652","source":"secalert@redhat.com"},{"url":"http://osvdb.org/54791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/27/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1385","sourceIdentifier":"secalert@redhat.com","published":"2009-06-04T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size."},{"lang":"es","value":"Desbordamiento inferior de entero en la función 1000_clean_rx_irq en drivers/net/e1000/e1000_main.c en el controlador e1000 en Linux kernel anterior a v2.6.30-rc8, el controlador e1000e en el kernel de Linux, y Intel Wired Ethernet (también conocido como e1000) anteriores a v7.5.5 permite a los atacantes remotos causar una denegación de servicios (panic) a través de un tamaño de marco manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4.35","matchCriteriaId":"5D5A3319-0284-4AD3-90C1-51A5B1DEC589"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.2.22:*:*:*:*:*:*:*","matchCriteriaId":"F8F900E9-03F9-4300-827C-30D5FCB05C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.2.30.1:*:*:*:*:*:*:*","matchCriteriaId":"BE4EDE6D-A095-48B3-BE17-E0E736875944"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.2.52:*:*:*:*:*:*:*","matchCriteriaId":"931C9D7B-9E51-4D15-8B08-2AFDADAF938B"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.3.19:*:*:*:*:*:*:*","matchCriteriaId":"47D7EBDF-CC20-4EAE-93A8-1F69EC3DFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.4.11:*:*:*:*:*:*:*","matchCriteriaId":"7003DA69-4ACA-4C83-B223-021FE59FFB2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"44C0CB29-E22E-4866-A5FC-8BFF030451B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.6.10:*:*:*:*:*:*:*","matchCriteriaId":"895280E8-958D-4F03-865D-E7F9F11162E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.6.10.1:*:*:*:*:*:*:*","matchCriteriaId":"2671C674-18DE-4A94-9E0D-C40CD3AE2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:5.7.6:*:*:*:*:*:*:*","matchCriteriaId":"818FDED7-7BB0-491E-856F-8795ABB683AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:6.0.54:*:*:*:*:*:*:*","matchCriteriaId":"33C7240F-6FB6-44A4-802B-81ECCE038312"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:6.0.60:*:*:*:*:*:*:*","matchCriteriaId":"B3A86028-EAB0-462D-97D4-9DF00148B4FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:6.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E2451466-AB8B-4E64-B25B-CF7801B24F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:6.2.15:*:*:*:*:*:*:*","matchCriteriaId":"8BBA12ED-F5FB-4CD0-A098-88DBCE2E11F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:6.3.9:*:*:*:*:*:*:*","matchCriteriaId":"62FC547B-9EE1-4A1E-969C-A8A3D0B487D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.0.33:*:*:*:*:*:*:*","matchCriteriaId":"7FC19339-25C7-4A88-BF12-194AA67E81A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.0.41:*:*:*:*:*:*:*","matchCriteriaId":"B878098A-958E-412C-BCB6-6F5BDBBBD5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8E25EC32-DF88-42AE-B36C-1B1CAC607EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.2.7:*:*:*:*:*:*:*","matchCriteriaId":"799672BF-A7EC-426D-8A44-183312B962C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.2.9:*:*:*:*:*:*:*","matchCriteriaId":"DA010350-3589-44CA-867E-D709D2E044FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.3.15:*:*:*:*:*:*:*","matchCriteriaId":"72E2BF5D-283C-44DF-8044-B25AF793BDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.3.20:*:*:*:*:*:*:*","matchCriteriaId":"38F81628-D03C-4646-8BD0-229DF0392E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:e1000:7.4.27:*:*:*:*:*:*:*","matchCriteriaId":"FAE0F106-5017-4D0B-9824-53708D59D3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28","matchCriteriaId":"9B5B312F-E76A-43E1-A73F-31535848D55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc7-git6:*:*:*:*:*:*","versionEndIncluding":"2.6.30","matchCriteriaId":"FBD48C54-738D-4559-A43C-A37F80CB5640"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23_rc1:*:*:*:*:*:*:*","matchCriteriaId":"76D0AFF0-8CA9-42EF-A20E-3CD6E7DDF016"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3069324C-28FB-4BB6-9451-F3AC6A8DA64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc4:*:*:*:*:*:*:*","matchCriteriaId":"8F3D19AD-4268-45E7-B13D-BC93ABDF2226"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24_rc5:*:*:*:*:*:*:*","matchCriteriaId":"67E619E6-A515-43BC-B371-C1FF6DAA6CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*","matchCriteriaId":"0D5FC0A9-A78A-4D09-BDCC-208AFC899824"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*","matchCriteriaId":"7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*","matchCriteriaId":"54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a29332554573b4a10","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/54892","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35265","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35566","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35623","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35656","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35847","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36051","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=504022&group_id=42302","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"secalert@redhat.com"},{"url":"http://www.intel.com/support/network/sb/CS-030543.htm","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc8","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/2","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35185","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502981","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11598","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11681","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8340","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a29332554573b4a10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=504022&group_id=42302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.intel.com/support/network/sb/CS-030543.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1386","sourceIdentifier":"secalert@redhat.com","published":"2009-06-04T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello."},{"lang":"es","value":"ssl/s3_pkt.c en OpenSSL anteriores a v0.9.8i permite a los atacantes remotos, causar una denegación de servicios (puntero NULO desreferenciado y caída del \"daemon\"), a través de un paquete ChangeCipherSpec DTLs que ocurre antes de ClientHello."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartExcluding":"0.9.8","versionEndExcluding":"0.9.8i","matchCriteriaId":"CD28B423-FF29-4983-9FBD-68641B1C142A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17369","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35174","source":"secalert@redhat.com","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50963","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8873","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1387","sourceIdentifier":"secalert@redhat.com","published":"2009-06-04T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\""},{"lang":"es","value":"La función dtls1_retrieve_buffered_fragment en ssl/d1_both.c en OpenSSL anteriores a v1.0.0 Beta 2 permite a los atacantes causar una denegación de servicios (puntero NULO desreferenciado y caída de \"daemon\") a través de un mensaje \"handshake\" DTLS fuera de secuencia, relativo a \"fragment bug\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndExcluding":"0.9.8m","matchCriteriaId":"EA054F35-6E05-4A24-9195-F80C0C2761DC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17958","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-1388","sourceIdentifier":"secalert@redhat.com","published":"2009-07-05T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread."},{"lang":"es","value":"La función ptrace_start de kernel/ptrace.c en el kernel de Linux v2.6.18, no maneja adecuadamente la ejecución simultánea de la función do_coredump, esto permite a usuarios locales provocar una denegación de servicio -bloqueo mutuo (deadlock)- a través de vectores que incluyen la llamada al sistema ptrace y un hilo coredumping."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise 5 via: https://rhn.redhat.com/errata/RHSA-2009-1193.html","lastModified":"2009-08-05T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=124654277229434&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://osvdb.org/55679","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35559","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346615","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346742","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504263","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://marc.info/?l=oss-security&m=124654277229434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://osvdb.org/55679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=346742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-1389","sourceIdentifier":"secalert@redhat.com","published":"2009-06-16T23:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet."},{"lang":"es","value":"Desbordamiento de memoria en el driver RTL8169 NIC (drivers/net/r8169.c) en el kernel de  Linux anteriores a v2.6.30 permite a atacantes remotos producir una denegación de servicio (consumo de memoria del kernel y caída) a través de un paquete largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*","matchCriteriaId":"A12077FF-39D0-474A-AB6C-62926CC065B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*","matchCriteriaId":"508BC14E-41D8-4847-AE0F-7830E2EE0522"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*","matchCriteriaId":"241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59393187-1D1E-45CD-BE0E-385F978E4834"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"D0CCDF6B-0365-4553-B161-3F6D68A58F72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*","matchCriteriaId":"A9B2BB71-0489-40F6-9CB6-A95B96E92106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*","matchCriteriaId":"842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*","matchCriteriaId":"05F0391C-D4CC-4652-A24C-DC47F4C3DC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*","matchCriteriaId":"56340FF9-EE77-4EB3-9720-240FAAEF39F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*","matchCriteriaId":"79EB0E94-6AE8-4703-96BD-B927E0F2893F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*","matchCriteriaId":"8A1F1242-0F07-4D81-9175-3BA5B2C7B564"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*","matchCriteriaId":"3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1CF4EC75-06A2-4BD4-A39A-183F00C46E11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*","matchCriteriaId":"DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*","matchCriteriaId":"A6501752-2595-4412-9140-C78EB9FD41CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*","matchCriteriaId":"0D78F881-DB3A-423A-8DAD-314645B2B3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*","matchCriteriaId":"D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*","matchCriteriaId":"70D1E088-5A9B-4CBF-A4FF-969201942CCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*","matchCriteriaId":"27B3F220-7FE0-4D47-918B-C9CBFAD23808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*","matchCriteriaId":"813C1C54-697D-4170-8202-E07FF578815A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*","matchCriteriaId":"51403992-077A-4F6F-8722-DAAD30489DB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*","matchCriteriaId":"BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*","matchCriteriaId":"0B066E6A-B150-4D5F-8263-F955EB366806"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*","matchCriteriaId":"6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*","matchCriteriaId":"2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*","matchCriteriaId":"72587FF5-B82D-42DE-A35B-0ECA76C37D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*","matchCriteriaId":"013D2D76-AFAD-4479-B814-8597D8F51B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*","matchCriteriaId":"86F9C61A-913C-42BA-BD16-BF82F75AA84B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*","matchCriteriaId":"B6E51493-8AE7-4F18-85BD-D0444A297C1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*","matchCriteriaId":"CD68B4B3-CCF4-4A64-8C67-F549CC905A06"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*","matchCriteriaId":"D9350C90-D7A3-4DFF-A574-D079A4DCC453"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*","matchCriteriaId":"9A27FA94-0483-4DD7-A2C4-9FA246526243"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*","matchCriteriaId":"E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC106BDA-2EA4-41A2-AA01-6352A5C255B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*","matchCriteriaId":"FB515243-7519-4CA4-9267-D9A6798CBC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*","matchCriteriaId":"B672E1B6-E8E9-473F-853F-906EA56D712E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*","matchCriteriaId":"0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*","matchCriteriaId":"9F727CD3-D3C2-4648-9EC5-092DF3F73B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*","matchCriteriaId":"D1765065-ABE5-478C-9ACC-EFFA8E4A7043"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*","matchCriteriaId":"D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*","matchCriteriaId":"95DD4647-564E-4067-A945-F52232C0A33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*","matchCriteriaId":"6E20AD05-586B-4493-9793-3FF8028CF887"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*","matchCriteriaId":"4F76C298-81DC-43E4-8FC9-DC005A2116EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*","matchCriteriaId":"0AB349B2-3F78-4197-882B-90ADB3BF645A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*","matchCriteriaId":"8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*","matchCriteriaId":"F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*","matchCriteriaId":"31523E67-5E4F-43F7-9410-20CB3F287DAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*","matchCriteriaId":"9B627DE3-2702-4EB2-9733-253D315FB594"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*","matchCriteriaId":"C5B76C21-70C8-4911-A24B-270F876EF7C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*","matchCriteriaId":"A89DC9CD-C06F-4B9B-B376-900E65016296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*","matchCriteriaId":"15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*","matchCriteriaId":"8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*","matchCriteriaId":"707ECC75-65B6-4B02-BE85-A4804549A2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*","matchCriteriaId":"E55F2549-F813-4BD6-8933-6788D898ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:x86_32:*:*:*:*:*","matchCriteriaId":"A2B1B229-B325-4D8C-B326-1FF6D85891F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.0:*:*:*:*:*:*:*","matchCriteriaId":"7A252C50-D63A-4FC0-A51E-A63A939D6AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*","matchCriteriaId":"3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"1BACA0F0-B7B5-4C8B-8D9A-DAA803960AAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*","matchCriteriaId":"CBEBA0F6-5453-4993-932B-BB8941DCC5CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*","matchCriteriaId":"0D5FC0A9-A78A-4D09-BDCC-208AFC899824"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*","matchCriteriaId":"7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*","matchCriteriaId":"54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lkml.org/lkml/2009/6/8/194","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-netdev&m=123462461713724&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35265","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35566","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35847","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36045","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36051","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40645","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/css/P8/documents/100067254","source":"secalert@redhat.com"},{"url":"http://support.citrix.com/article/CTX123453","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/10/1","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35281","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1023507","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0219","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1857","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504726","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51051","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/6/8/194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=linux-netdev&m=123462461713724&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100067254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX123453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/10/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1390","sourceIdentifier":"secalert@redhat.com","published":"2009-06-16T21:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack."},{"lang":"es","value":"Mutt v1.5.º9, enlazado contra (1) OpenSSL (mutt_ssl.c) o (2) GnuTLS (mutt_ssl_gnutls.c), permite conexiones cuando se acepta un certificado TLS en la cadena en vez de verificar esta última, lo que permite a atacantes remotos suplantar servidores de confianda a través de un ataque hombre-en-medio(Man-in-the-middle)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mutt as shipped with Red Hat Enterprise Linux 3, 4, or 5.  Only mutt version 1.5.19 was affected by this flaw.","lastModified":"2009-06-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.5.19:*:*:*:*:*:*:*","matchCriteriaId":"89C33B31-B9BC-4E43-8221-219380B4B682"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","matchCriteriaId":"2745A1E0-C586-4686-A5AC-C82ABE726D5C"}]}]}],"references":[{"url":"http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://dev.mutt.org/hg/mutt/rev/8f11dd00c770","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/10/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35288","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51068","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html","source":"secalert@redhat.com"},{"url":"http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://dev.mutt.org/hg/mutt/rev/8f11dd00c770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/10/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1391","sourceIdentifier":"secalert@redhat.com","published":"2009-06-16T23:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en la función \"inflate\" en Zlib.xs en  el modulo de Perl Compress::Raw::Zlib anteriores a v2.017, cuando es utilizado en AMaVis, SpamAssassin, y posiblemente otros productos, permite a atacantes dependientes del contexto, producir una denegación de servicio (cuelgue o caída) a través de un stream comprimido zlib manipulado que inicia un desbordamiento de búfer basado en memoria libre, como se explot activamente por Trojan.Downloader-71014 en Junio de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:*:*:*:*:*:*:*:*","versionEndIncluding":"2.015","matchCriteriaId":"C3867092-1A54-4D15-84AD-FEF6F8D569FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.001:*:*:*:*:*:*:*","matchCriteriaId":"BEF4AFD2-AD3B-45E0-97A4-F18050DFF747"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.002:*:*:*:*:*:*:*","matchCriteriaId":"E5C2CBC9-74C2-4A06-B233-AD32E66F3A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.003:*:*:*:*:*:*:*","matchCriteriaId":"ADE72DF4-3BFE-46D5-8551-DE48D7AE83D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.004:*:*:*:*:*:*:*","matchCriteriaId":"53485323-D0B0-416E-99AC-AFB79E3A59E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.005:*:*:*:*:*:*:*","matchCriteriaId":"03A1BA23-4E33-47A8-B4F5-FD788F9A489D"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.006:*:*:*:*:*:*:*","matchCriteriaId":"55E7DEEA-B6EC-4876-BF54-59564B710C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.008:*:*:*:*:*:*:*","matchCriteriaId":"35911484-ACDF-46F5-9E44-B16A8E25634A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.009:*:*:*:*:*:*:*","matchCriteriaId":"47D33DF3-EEDA-4929-861C-B5F579D46CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.010:*:*:*:*:*:*:*","matchCriteriaId":"D5DDEB63-825A-4CD5-A068-56719B58F7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.011:*:*:*:*:*:*:*","matchCriteriaId":"4479CA05-1A67-49C9-AF46-1B259EF0AB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.012:*:*:*:*:*:*:*","matchCriteriaId":"610E93EB-E130-40D9-BD88-F6110EE8FC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.014:*:*:*:*:*:*:*","matchCriteriaId":"02ABE61E-EDD1-4661-B0BC-E71ED14F3957"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.mail.virus.amavis.user/33635","source":"secalert@redhat.com"},{"url":"http://article.gmane.org/gmane.mail.virus.amavis.user/33638","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55041","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35422","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35689","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35876","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200908-07.xml","source":"secalert@redhat.com"},{"url":"http://thread.gmane.org/gmane.mail.virus.amavis.user/33635","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:157","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35307","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1571","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=273141","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504386","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51062","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/794-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00607.html","source":"secalert@redhat.com"},{"url":"http://article.gmane.org/gmane.mail.virus.amavis.user/33635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://article.gmane.org/gmane.mail.virus.amavis.user/33638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://thread.gmane.org/gmane.mail.virus.amavis.user/33635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=273141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/794-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00607.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1392","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors."},{"lang":"es","value":"El motor del navegador en Mozilla Firefox v3 anteriores a v3.0.11, Thunderbird anteriores a 2.0.0.22, y SeaMonkey anteriores a 1.1.17 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores relacionados con (1) nsEventStateManager::GetContentState y nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames y ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, relacionado con la tabla atom, eventos de mutacion DOM, y subrrogados Unicode; (8) nsHTMLEditor::HideResizers; y (9) nsWindow::SetCursor, relacionado con el cambio de cursor; y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://osvdb.org/55144","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55145","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55146","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55147","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35428","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022376","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-24.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35370","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022397","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380359","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=429969","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431086","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=432068","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451341","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472776","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=486398","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489041","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490410","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490425","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490513","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503568","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=380359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=429969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=431086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=432068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=486398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1394","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Motorola Timbuktu Pro 8.6.5 en Windows permite a atacantes remotos ejecutar código de su elección enviando un cadena malformada de gran tamaño sobre la tubería (pipe) PlughNTCommand."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:motorola:timbuktu_pro:8.6.5:*:*:*:*:*:*:*","matchCriteriaId":"06815CAC-C8E2-41C7-9D5E-BB6572D77F7D"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35533","source":"cve@mitre.org"},{"url":"http://www.netopia.com/software/products/tb2/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504554/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35496","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022455","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netopia.com/software/products/tb2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504554/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1403","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the products_id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en product_info.php en CRE Loaded v6.2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro products_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:creloaded:cre_loaded:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2ECDAEC6-5493-478E-BA31-DC78AEB24384"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34640","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49987","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8501","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1404","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user (Username) parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en admin.php en PastelCMS v0.8.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro usuario (Username)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pastel:pastelcms:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0EA84A19-6FDE-435F-A252-757ED9604C1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/34853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34635","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49985","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1405","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set_lng parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en index.php en PastelCMS v0.8.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro set_lng."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pastel:pastelcms:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0EA84A19-6FDE-435F-A252-757ED9604C1B"}]}]}],"references":[{"url":"http://secunia.com/advisories/34853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34635","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49986","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1406","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the include parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en cms_detect.php en TotalCalendar 2.4 permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro include."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sweetphp:totalcalendar:2.4:*:*:*:*:*:*:*","matchCriteriaId":"F17F19D1-00AA-4A51-9BC9-6C04FD3EB005"}]}]}],"references":[{"url":"http://secunia.com/advisories/34824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34634","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49980","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8503","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1407","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a certain languages[][file] parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en config.php en NotFTP 1.3.1 permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en un determinado parámetro languages[][file]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wonko:notftp:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"11916F71-1FB9-4146-928B-20BFD95B87AC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34636","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49988","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8504","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1408","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using (1) email, (2) img, and (3) url tags."},{"lang":"es","value":"Una vunerabildad de ejecución de secuencias de comandos en sitios cruzados(XSS) en webSPELL v4.2.0c permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de eventos Javascript onmouseover en etiquetas BBcode anidadas, como se ha demostrado usando las etiquetas (1) email, (2) img, y (3) url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.2.0c:*:*:*:*:*:*:*","matchCriteriaId":"45223AEF-D151-4C08-993F-1537BC02DA40"}]}]}],"references":[{"url":"http://osvdb.org/53782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502732/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34595","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.webspell.org/index.php?site=files&file=25","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webspell.org/index.php?site=news_comments&newsID=126&lang=uk","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49937","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8453","source":"cve@mitre.org"},{"url":"http://osvdb.org/53782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502732/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.webspell.org/index.php?site=files&file=25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webspell.org/index.php?site=news_comments&newsID=126&lang=uk","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1409","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when \"Extended User Fields\" is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en usersettings.php en e107 v0.7.15 y anteriores, cuando la opción \"Campos de usuario extendidos\" está activado y magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro Hide. Se trata de un vector diferente al de CVE-2005-4224 y CVE-2008-5320."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.15","matchCriteriaId":"87794C62-4C18-4F8F-9E78-1993BD1B0E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*","matchCriteriaId":"18C34EB0-7685-4346-81A2-371C1F19F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*","matchCriteriaId":"AB26A2A4-B0DE-4130-AA5F-76D5394A0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*","matchCriteriaId":"90909932-AD39-4648-8621-5866F0C4AB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*","matchCriteriaId":"37F208E9-3C39-4D00-B1E0-5CD0B315E740"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*","matchCriteriaId":"27C7402F-54C9-4FDA-B181-85941DDC7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*","matchCriteriaId":"70AB914E-D616-45D2-A451-1C247B8B6E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA03C1AC-97EA-47ED-9558-A7CA48420AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"32695A82-B042-46B7-9CB4-20F3446E0C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6716A040-0CBE-4402-AB2A-1621B1240B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"81627355-AB45-4D47-8DD2-4087E6971EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DAAA4F-B893-4914-8538-E68DDA211225"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"2FEEC90E-8640-4786-B014-CAD83EC4F2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"E29B9B12-4C94-4A8D-B407-2D288502EFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"F1C22711-AEC4-438F-9B37-64D36B0BDFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*","matchCriteriaId":"437C4251-886C-4E94-B7F6-AE34A0142A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*","matchCriteriaId":"761D4EE9-0D54-4370-BCBC-3C23481C127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*","matchCriteriaId":"E11E3F9E-708E-44CB-8FD2-E4961028B732"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*","matchCriteriaId":"8F38EB42-437C-4381-B36A-FD3DB78E724E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*","matchCriteriaId":"ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*","matchCriteriaId":"1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*","matchCriteriaId":"0FC4B3A4-2563-4C06-A484-5C02CD8F7408"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*","matchCriteriaId":"7E80F85C-61AD-49C0-9EBF-B79F728F6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*","matchCriteriaId":"3FE097FC-A525-4599-9FDA-1A011EECE767"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*","matchCriteriaId":"9FF51B0D-E020-491D-92A9-D2A01A7417AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*","matchCriteriaId":"75197306-53DB-4C94-959B-C46D3FB1F42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*","matchCriteriaId":"D0C5C91C-C1C5-457D-9E09-24C7CACCC280"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*","matchCriteriaId":"6EB88C92-4F62-471A-8C10-C13C890E764F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*","matchCriteriaId":"5585DC36-C65F-4FCA-B26F-E4A7901863E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*","matchCriteriaId":"2C7DD56C-66F7-421C-B211-07C7856112C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*","matchCriteriaId":"8E14B108-228D-454F-AF16-9D9086E4C10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*","matchCriteriaId":"B5CB33E9-9AB8-482A-A196-768A2085A49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*","matchCriteriaId":"12BD5CAD-0EB8-48F2-AF80-510584A83446"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*","matchCriteriaId":"AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*","matchCriteriaId":"92E294FE-F0A2-45FC-BB67-D988DD89D2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*","matchCriteriaId":"9640315B-7F04-4F5A-B213-8FAF509DFF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*","matchCriteriaId":"CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*","matchCriteriaId":"DF75A192-81C1-4F58-A660-7EFE4F33E58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F0DD84FB-8CF3-4FD4-AB18-DCD3FF3A2F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4189588A-A887-4D27-B3A0-48A3DBBD5E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5549E7FF-4329-49F6-BF59-081DA7874BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"AA26A71E-F1E6-4EA0-9165-F7989FB89B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.3_beta2:*:*:*:*:*:*:*","matchCriteriaId":"9C90BAB9-2ACE-48E4-BC15-E88C2C370B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.04:*:*:*:*:*:*:*","matchCriteriaId":"DFD219A3-4958-4EA9-A914-37D4F0A8A24D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta1:*:*:*:*:*:*:*","matchCriteriaId":"3417C70B-E531-49C8-971E-CC349FB5AA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta3:*:*:*:*:*:*:*","matchCriteriaId":"CB5EF2F8-0A65-4C8C-A4A3-9B9B1151509C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta4:*:*:*:*:*:*:*","matchCriteriaId":"62FBE3F6-7685-43BA-B63B-28AA79330323"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta5:*:*:*:*:*:*:*","matchCriteriaId":"94CC3B56-F1FC-452A-A0A7-4CF60089C1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.4_beta6:*:*:*:*:*:*:*","matchCriteriaId":"7524B12E-3D05-4CD1-B582-8A66EEC3F6DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.05:*:*:*:*:*:*:*","matchCriteriaId":"590FE150-07AF-4E25-B8F8-D0E8500D73B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:5.21:*:*:*:*:*:*:*","matchCriteriaId":"F515DEBF-B55A-4B42-8E1F-AB9A2C3DD8DF"}]}]}],"references":[{"url":"http://osvdb.org/53812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49981","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8495","source":"cve@mitre.org"},{"url":"http://osvdb.org/53812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1410","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Quick.Cms.Lite 0.5 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id. \t"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensolution:quick.cms.lite:0.5:*:*:*:*:*:*:*","matchCriteriaId":"377D2FEC-AB61-40DC-983B-19623F4FBBD4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34647","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49989","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8505","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1411","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en events/inc/events.inc.php en el plugin para Eventos de Seditio CMS 1.0 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro c para plug.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:seditio:1.0:*:*:*:*:*:*:*","matchCriteriaId":"26F15E84-46FF-4E53-BB0C-04D9B15E6CBF"}]}]}],"references":[{"url":"http://osvdb.org/53827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34812","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34608","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49975","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8482","source":"cve@mitre.org"},{"url":"http://osvdb.org/53827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1412","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that sets document.location to a chromehtml: value, as demonstrated by use of a (1) javascript: or (2) data: URL.  NOTE: this can be leveraged for Universal XSS by exploiting certain behavior involving persistence across page transitions."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en el manejador de protocolo chromehtml: en Google Chrome antes de v1.0.154.59, cuando es invocado por Internet Explorer, lo que permite a atacantes remotos determinar la existencia de archivos y abrir pestañas para URLs que no cumplen la restricción IsWebSafeScheme, a través de una página web que establece document.location a un valor chromehtml, como lo demuestra el uso de una URL (1) javascript: o (2) data: . NOTA: esto puede ser aprovechados para ataques XSS universales explotando ciertos comportamientos que impliquen persistencia a través de transiciones de la página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.53","matchCriteriaId":"22A411BE-895D-4D8F-B14B-AAEB3112F9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=9860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://googlechromereleases.blogspot.com/2009/04/stable-update-security-fix.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50449","source":"cve@mitre.org"},{"url":"http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=9860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://googlechromereleases.blogspot.com/2009/04/stable-update-security-fix.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1413","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context of an arbitrary web site.  NOTE: this can be leveraged for a remote attack by exploiting a chromehtml: argument-injection vulnerability."},{"lang":"es","value":"Google Crome 1.0.x no cancela los timeouts sobre una pagina de transición, lo que facilita a atacantes a la hora de llevar a cabo ataques XSS Universales llamando a la función setTimeout para desencadenar futuras ejecuciones de código JavaScript, y, a continuación modificar document.location para organizar la ejecución de JavaScript en el contexto de un sitio Web arbitrario. NOTA: esto puede ser aprovechado para un ataque a distancia mediante la explotación de un argumento de la vulnerabilidad de la inyección chromehtml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"}]}]}],"references":[{"url":"http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=9860","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50447","source":"cve@mitre.org"},{"url":"http://chromium.googlecode.com/issues/attachment?aid=5579180911289877192&name=Google+Chrome+Advisory.doc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=9860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1414","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors."},{"lang":"es","value":"Google Chrome 2.0.x permite que las modificaciones en el objeto global persistan a través de una página de transición, lo que facilita a los atacantes a la hora de llevar a cabo ataques XSS universales a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=9860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50446","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=9860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1415","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free."},{"lang":"es","value":"lib/pk-libgcrypt.c en libgnutls en GnuTLS anterior a v2.6.6 no maneja correctamente las firmas DSA, lo cual permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) y posiblemente tiene otro impacto no especificado a través de una clave DSA malformada que desencadena (1) una liberación del puntero no inicializado.  (2) una doble liberación."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of gnutls shipped in Red Hat Enterprise Linux 4 and 5 as it only affected gnutls 2.6.x versions.","lastModified":"2009-09-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.6","matchCriteriaId":"0CC336AC-F306-4643-91E0-BA1D4B07DC10"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3515","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34842","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35211","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-04.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:116","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34783","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022157","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1218","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50257","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50260","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50445","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/34842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1416","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key."},{"lang":"es","value":"lib/gnutls_pk.c en libgnutls en GnuTLS v2.5.0 hasta v2.6.5 genera claves RSA almacenados en estructuras DSA, en lugar de las claves DSA previstas, lo cual podría permitir a atacantes remotos suplantar firmas en los certificados o tener otro impacto no especificado por el utilizamiento de una clave DSA no es válida."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect versions of gnutls shipped in Red Hat Enterprise Linux 4 and 5 as it only affected gnutls 2.6.x versions.","lastModified":"2009-09-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DA9E7F22-5BC4-4AD5-A630-25947CC1E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D6B3DBF9-52EB-4741-85E4-E68645BD81E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"350A6845-77D6-4D63-A13C-5DAB55F98727"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8A456D12-C43A-47B0-AC0D-BF02AEBA0828"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D457688-987A-4059-AA58-D9BF19ABC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AA20043D-EC85-4003-9E7B-27AB50F4E133"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"18A2C47E-510D-4537-8F51-3763A73E8E52"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35211","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-04.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34783","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022158","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1218","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1417","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup."},{"lang":"es","value":"gnutls-cli en GnuTLS anteriores a v2.6.6 no verifica la activación y tiempos de caducidad de los certificados X.509, lo cual permite a atacantes remotos presentar con éxito un certificado que (1) aún es válido o (2) ya no es válido, en relación con la falta de controles en el tiempo la función _gnutls_x509_verify_certificate en lib/x509/verify.c en libgnutls_x509, utilizado por (a) Exim, (b) OpenLDAP y (c) libsoup."}],"vendorComments":[{"organization":"Red Hat","comment":"The Red Hat Security Response Team has rated this issue as having low security impact. The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 4, or 5.\n\nFor further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1417\n","lastModified":"2009-08-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.5","matchCriteriaId":"A5EDD6F6-742C-4A59-AFB5-A7BCFB6AA759"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"4FBB8F2C-498D-4D31-A7D7-9991BABEA7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"8856E1B1-8007-42E5-82EF-4700D4DEEDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"A9CF40D3-CE03-4C2A-8EEF-EB5989291806"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"EC60D4CC-922C-4941-A400-0CBEAC7F31D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"754A0D19-A17A-4007-8355-497D14CFCBF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8140DBE1-8116-4051-9A57-07535586E0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F1CC840D-AD01-4EE2-8652-06742A6286BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"84224A82-6D58-4000-A449-20C1632DAE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"A466931C-769A-4A28-B072-10930CE655E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"10F621DC-7967-4D97-A562-02E7033C89C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"776E5481-399F-45BC-AD20-A18508B03916"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"63D7F972-9128-4A4D-8508-B38CE2F155E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"C5D56873-E8C5-4E4B-BB85-6DCF6526B453"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"54FE4766-32D0-491E-8C71-5B998C468142"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"7F980857-2364-466A-8366-BD017D242222"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"0A2E649D-5C45-4412-927B-E3EDCE07587C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"066175C2-6E96-4BAE-B1A6-B23D25547FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"869D3010-67AE-44D0-BB8F-D9C410AEA1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"052B40C1-C29B-4189-9A45-DAE873AB716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B588AAE0-8C3F-47C7-812F-8C97BD8795E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EBB9154B-4254-4F33-8DB2-5B96E2DA4931"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2EA79D1-2EA8-4040-A5B5-C93EE937945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"61D05BC3-1315-4AC7-884D-41459272C94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*","matchCriteriaId":"2901E522-6F54-4FA5-BF22-463A9D6B53D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"738F29DA-9741-4BA5-B370-417443A3AC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"52173492-1031-4AA4-A600-6210581059D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB636C36-2884-4F66-B68A-4494AEAF90C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC4231BD-201D-4B10-9E35-B9EEFC714F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4C9200C3-0F46-4238-918B-38D95BF11547"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"024A9511-7CB4-4681-8429-0FE7FC34DF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"34CEF5ED-87A5-44B2-8A4A-9896957C057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B84A4F5-CED7-4633-913F-BE8235F68616"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"97564ABD-F9CE-4B3C-978A-1622DE3E4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3DB6EC88-DCE0-439B-89CD-18229965849B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1E2C89DD-CDBD-4772-A031-089F32006D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8C2FD618-91F4-48E7-B945-90CC0A367DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"65DC9555-E76F-4F8D-AE39-5160B34A87FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8B61D180-9EEA-4258-9A59-7F004F2C83F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"00DE1208-BDDC-405B-A34A-B58D00A279DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B8EF689E-59AA-4619-ADB2-E195CFD4094A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"22314ED6-D0CD-442E-A645-A9CCFE114AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1C5B2-27BF-4328-9336-98B8828EE4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C952BF-A135-4B15-8A51-94D66B618469"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6ADED309-0A25-478D-B542-96217A0DD63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DC0403DE-76B1-4E24-8014-64F73DCB53DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7F714D22-873A-4D64-8151-86BB55EFD084"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E9181F9-50FF-4995-9554-022CF93376C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AED0B40F-3413-40D6-B1EF-E6354D2A91F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4E99A7D8-2303-4268-8EF8-6F01A042BEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"86C70F69-FB80-4F32-A798-71A5153E6C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B2A1E604-500E-4181-BF66-BB69C7C3F425"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"0C8120E3-B60F-44E4-B837-4707A9BAEDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F7073EAD-06C9-4309-B479-135021E82B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"1895868E-E501-42C2-8450-EEED4447BAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"199AA36A-3B23-438C-9109-CC9000372986"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD6FFF05-37B2-4D69-86AF-921591382D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*","matchCriteriaId":"82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"04C40F0E-B102-4FE8-9E93-0ACFBF35226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*","matchCriteriaId":"22802660-D33F-4683-B82F-C94AC6170A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*","matchCriteriaId":"3623E9BE-F513-4301-BF0C-6A7F87E78E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*","matchCriteriaId":"B5DBAF08-1441-4F14-A740-E90044B77042"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*","matchCriteriaId":"4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*","matchCriteriaId":"5D3B6684-3890-4B60-BE67-D06045A86B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81C6C982-21D5-4FE3-A342-FC45BD78D2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F9D61596-01EB-4936-923B-63537625F926"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"599EB59C-7717-47A8-84C6-78B6D79AEB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"26E9005E-5034-43F2-B96E-7829E19FE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A5EE-2892-4548-A0CB-D3289CD64D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"83F22BF4-A738-438B-8D0B-6993640F0D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D3193B7-8FB9-45E4-BFF6-891A3F14F021"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF269AE-121B-4982-A765-5C7E806FA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A1C9F604-7FBE-4759-B039-8F5894574203"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"191821CD-E4CB-4269-B04C-284A9F9783B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B2A71474-958D-4689-A652-3E2A731F47FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38169043-17DF-4CF9-963A-8770B8882357"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C4537676-A72E-4433-B44F-3664EDD6F240"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8D090B10-68F2-424D-8234-2A280AA96B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"23168B77-645D-4A2A-A6E3-7001104064A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4D085B16-3116-423F-BDE0-2D93E12650A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C59247E9-CDAE-4269-A8E4-F49F617CDD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6019C0C-E9DD-4831-8E6A-785AE1A930FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"16F9CF15-8789-49B6-BB6D-B784C8FF20ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C51E0C88-B19C-408D-AC17-10CE7462D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"2AC41482-B3BC-4C93-A850-73A179BAB763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"ADC80BE1-28A6-4348-A061-8FD9C805E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D8201FF6-53A8-4850-A2B2-47AA65B2CB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB33002-E5C6-4573-BC94-647DDE4E6F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8D7D245A-D983-40AD-89A7-0EA00D38D570"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A7223691-225D-4649-B410-F41D2C489BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D6B3DBF9-52EB-4741-85E4-E68645BD81E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"350A6845-77D6-4D63-A13C-5DAB55F98727"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8A456D12-C43A-47B0-AC0D-BF02AEBA0828"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D457688-987A-4059-AA58-D9BF19ABC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AA20043D-EC85-4003-9E7B-27AB50F4E133"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3517","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35211","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-04.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34783","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022159","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50261","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1418","sourceIdentifier":"cve@mitre.org","published":"2009-05-19T19:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065\r\n\r\n\r\n\"SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.\r\n\r\nHP System Management Homepage (SMH) before v3.0.1.73 running on Linux and Windows Server 2003, 2008.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en HP System Management Homepage (SMH) anteriores a v3.0.1.73 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.0-68","matchCriteriaId":"904009FC-0506-4119-A26D-7CF3CE5EBDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD9A9442-18B7-4858-AB3A-19FE272A5C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90042282-9151-4D8E-8093-D85E57BD332C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.1.104:*:*:*:*:*:*:*","matchCriteriaId":"5FDEA64C-7511-4E71-8DFA-6E66531AC461"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EF92B4-AAC3-4957-9D8F-1796C2045962"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.2.106:*:*:*:*:*:*:*","matchCriteriaId":"F304AB45-8298-4426-91B3-B99ED7FF6C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D44CEFC1-CE95-4549-A981-C3F259075B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*","matchCriteriaId":"1C035D5C-90ED-4259-B05C-BEF93D81F42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-103\\(a\\):*:*:*:*:*:*:*","matchCriteriaId":"824996A5-C2CC-4FC5-8705-F6B4D69F39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*","matchCriteriaId":"7DBF9F0E-AA30-4E5A-B23E-DD895303245C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*","matchCriteriaId":"DA2005B3-1914-4B4B-892A-8CCC0F39EF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.0.121:*:*:*:*:*:*:*","matchCriteriaId":"61ED0B94-3CC3-427C-A038-90C6CEF768BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6426924C-AA5C-4C93-AB8B-9314CD010139"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*","matchCriteriaId":"4D7DCF4F-609A-497B-A32E-3D946EC2EE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2.127:*:*:*:*:*:*:*","matchCriteriaId":"ECEAE287-0A13-4DB3-A36D-BD50148BE9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6E5C789-9827-47DF-A47C-454DF7687E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*","matchCriteriaId":"D85F0390-B076-4B54-9E4E-67472FF3759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*","matchCriteriaId":"0ECF53BE-0E3A-41F8-AFD2-29CA3F2D0C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4.143:*:*:*:*:*:*:*","matchCriteriaId":"A8D25EAF-145F-4D96-836E-1B7C3FE53E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EBB25A-A1DE-4943-9EE5-0FCF21A55666"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*","matchCriteriaId":"C43EF082-E9AB-41D3-B7AF-936B84BB6AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5.146:*:*:*:*:*:*:*","matchCriteriaId":"AA5379C7-0061-4C53-8B81-45F8063956DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5.146:b:*:*:*:*:*:*","matchCriteriaId":"FD94C7BD-B398-42BF-9FB9-EB4581AF98E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B61485E4-6EC1-4886-AB47-F5BC8E72A08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*","matchCriteriaId":"203163D8-15E8-4F2D-A807-7643EA0D6920"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6.156:*:*:*:*:*:*:*","matchCriteriaId":"EBF2CB88-3E10-48BF-8D49-994A3E6014E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E354FF4-5CDD-4B79-B56C-2C774B235D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*","matchCriteriaId":"DAC9CEFE-23C2-4455-BE6F-51D26487D3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7.168:*:*:*:*:*:*:*","matchCriteriaId":"BF1A3FCF-B0AD-45DF-96D3-09BE755F94A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*","matchCriteriaId":"4D0DA8D6-3B1D-4935-855E-9431EB4BA683"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8.179:*:*:*:*:*:*:*","matchCriteriaId":"D75CC6FB-FB51-42DD-B708-54A99B10F70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8AFAF26C-7BFE-479E-880C-B13E78780625"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*","matchCriteriaId":"FC95912B-8C95-4CA8-BDA7-76074E20E362"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"3162C720-A042-48D8-A598-5CC9845C5715"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*","matchCriteriaId":"DEDD728B-9E92-4EC8-BD61-6E1AE300CE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10.186:*:*:*:*:*:*:*","matchCriteriaId":"73D573A1-93F3-4652-9E64-EDED09731EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10.186:b:*:*:*:*:*:*","matchCriteriaId":"8B6EF4B8-AF43-4777-9556-CA6DFF864B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.10.186:c:*:*:*:*:*:*","matchCriteriaId":"42050FEF-5456-4340-9AD1-00448E4B5E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"ABEEE1E4-1883-411E-A4BA-985041880439"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*","matchCriteriaId":"7E3E3BC1-A986-4942-80FA-5911428F8E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.11.197:a:*:*:*:*:*:*","matchCriteriaId":"96B6DA99-20FA-4622-8F1C-3086143CAE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*","matchCriteriaId":"7038AC00-8A30-49CB-956D-715053A920D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*","matchCriteriaId":"F425004A-EC16-44E8-A297-21F33F802FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.12.201:*:*:*:*:*:*:*","matchCriteriaId":"849BE02B-513B-405E-A430-DF9D02C0A666"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.14.20:*:*:*:*:*:*:*","matchCriteriaId":"C46B2D3D-1B9A-4AE4-BDE2-4E6C388356EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.15-210:*:*:*:*:*:*:*","matchCriteriaId":"BD611329-F5D3-455D-A275-4D61429357E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.15.210:*:*:*:*:*:*:*","matchCriteriaId":"09857263-747C-40F5-9744-21FD03187CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2C14DB20-E22E-466E-A3CD-C841CFDF2A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"8881820B-29B4-41DB-AEED-5513A347E290"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:3.0.0.64:*:*:*:*:*:*:*","matchCriteriaId":"C78C2C5A-F788-4F25-BD19-50C76C802329"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN02331156/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000029.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35108","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022242","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50633","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01745065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN02331156/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1419","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP Discovery & Dependency Mapping Inventory (DDMI) v2.0.0 hasta v2.52, v7.50 y v7.51 para Windows, permite a atacantes remotos acceder a agentes DDMI a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0BC9B663-FDB9-4F2D-9CBA-8659EA3D948D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6AB308F9-8C1A-4A3D-AC33-D7DE3A241214"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4BB9AE16-BB49-4A13-8B5A-DEDECC4433AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"06E2EBF0-7D21-4858-9D62-0544E6B54730"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"46C965C9-63D4-4C44-B0F3-04AFD61ABD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1EAE4D4E-522E-49AB-8D28-6BAD7E724B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"93CF3351-84A7-4544-9D8F-478E59D5C053"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"27E22AF8-A097-44CD-9800-B5A35C6DAB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"32AD06D9-F51D-41A9-9FC2-3DC4687D1A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.20:*:*:*:*:*:*:*","matchCriteriaId":"1A0463A9-A315-4C33-8205-13AF41FD9B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.21:*:*:*:*:*:*:*","matchCriteriaId":"A23EEEEE-C00D-4529-9E7E-C6833C795E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.22:*:*:*:*:*:*:*","matchCriteriaId":"EF9E5202-3BE0-45A9-AC47-0B1DABDE16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.50:*:*:*:*:*:*:*","matchCriteriaId":"E1D68B93-258D-41AE-A151-9FA31F1186CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.51:*:*:*:*:*:*:*","matchCriteriaId":"50164877-9D15-427D-B0D8-F6142902FA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.52:*:*:*:*:*:*:*","matchCriteriaId":"6B34CE45-D8E0-4C97-80EB-3787E680852F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.50:*:*:*:*:*:*:*","matchCriteriaId":"044B28F0-C1C5-4BE6-ADA7-28341024A1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.51:*:*:*:*:*:*:*","matchCriteriaId":"146FFF61-C7B7-404C-9697-97AAF1138FAB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124423677616704&w=2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124423677616704&w=2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35250","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124423677616704&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124423677616704&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1420","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP OpenView Network Node Manager (OV NNM) v7.51 y v7.53, cuando se utiliza como SNMP (también conocido como HPOvNNM.HPOVSNMP) anteriores a v1.30.009 y MIB (también conocido como HPOvNNM.HPOVMIB) anteriores a v1.30.009, permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hp:hpovnnm.hpovmib:1.30.000:*:*:*:*:*:*:*","matchCriteriaId":"F0D6A709-8FA3-4DAD-8CDE-5D09E7020B07"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:hpovnnm.hpovsnmp:1.30.000:*:*:*:*:*:*:*","matchCriteriaId":"B3AD984B-D366-4F16-A1C4-0E8018460EE5"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124457320614552&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124457320614552&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022360","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35267","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1549","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124457320614552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124457320614552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1421","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.vupen.com/english/advisories/2009/1755\r\n\r\n\"Affected Products\r\n\r\nHP-UX B.11.31 running NFS / ONCplus version B.11.31_07 and B.11.31_06 \"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a denial of service via unknown attack vectors."},{"lang":"es","value":"Una Vulnerabilidad no especificada en NFS/ONCplus versiones B.11.31_06 y B.11.31_07 sobre HP HP-UX versión B.11.31 permite a los usuarios locales provocar una denegación de servicio por medio de ataques de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_06:*:*:*:*:*:*:*","matchCriteriaId":"25790FF6-9936-419A-AEDA-47CD24696E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:oncplus:b.11.31_07:*:*:*:*:*:*:*","matchCriteriaId":"0CB4DF09-21C4-49D2-80CC-A80A97A77C20"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124654506100944&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124654506100944&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022493","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35547","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124654506100944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124654506100944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1422","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to gain privileges via unknown vectors, aka PR_41209."},{"lang":"es","value":"Vulnerabilidad no especificada en HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 y anteriores permite a atacantes remotos obtener privilegios a través de vectores desconocidos, alias PR_41209."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*","versionEndIncluding":"st.1.0.090213","matchCriteriaId":"AC839900-5C97-49F4-8298-961B3C785A62"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"D644E410-B6D3-4E92-BC12-81DD5AEC5E65"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"768D4D20-84E1-4BC0-9CF9-5769F1978022"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1423","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39898, a different vulnerability than CVE-2009-1424 and CVE-2009-1425."},{"lang":"es","value":"Vulnerabilidad sin especificar en HP ProCurve Threat Management Services zl Modulo (J9155A) ST.1.0.090213 y anteriores permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos, tambien conocido como PR_39898,una vulnerabilidad diferente que CVE-2009-1424 y CVE-2009-1425."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*","versionEndIncluding":"st.1.0.090213","matchCriteriaId":"AC839900-5C97-49F4-8298-961B3C785A62"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"D644E410-B6D3-4E92-BC12-81DD5AEC5E65"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"768D4D20-84E1-4BC0-9CF9-5769F1978022"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51689","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1424","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 y anteriores permite a atacantes remotos producir una denegación de servicio a través de vectores desconocidos, también conocido como PR_39412, una vulnerabilidad diferente de CVE-2009-1423 y CVE-2009-1425."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*","versionEndIncluding":"st.1.0.090213","matchCriteriaId":"AC839900-5C97-49F4-8298-961B3C785A62"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"D644E410-B6D3-4E92-BC12-81DD5AEC5E65"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"768D4D20-84E1-4BC0-9CF9-5769F1978022"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1425","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424."},{"lang":"es","value":"Una vulnerabilidad no especificada en ProCurve Threat Management Services zl Module de HP (J9155A) versiones ST.1.0.090213 y anteriores, permite a los atacantes remotos causar una denegación de servicio mediante la activación de una parada o bloqueo en httpd, también se conoce como PR_ 18770, esta es una vulnerabilidad diferente de los CVE-2009-1423 y CVE-2009-1424."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_threat_management_services_zl_module:*:*:*:*:*:*:*:*","versionEndIncluding":"st.1.0.090213","matchCriteriaId":"AC839900-5C97-49F4-8298-961B3C785A62"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_5400zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"D644E410-B6D3-4E92-BC12-81DD5AEC5E65"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:procurve_switch_8200zl:k.13.40:*:*:*:*:*:*:*","matchCriteriaId":"768D4D20-84E1-4BC0-9CF9-5769F1978022"}]}]}],"references":[{"url":"http://cdn.procurve.com/training/Manuals/TMSzlModule-RelNotes-90603-59900224.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35653","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51691","source":"cve@mitre.org"},{"url":"http://cdn.procurve.com/training/Manuals/TMSzlModule-RelNotes-90603-59900224.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124751363528317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1426","sourceIdentifier":"cve@mitre.org","published":"2009-07-29T17:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en los servidores HP ProLiant DL y ML 100 Series G5, G5p, y G6 con ProLiant Onboard Administrator Powered by LO100i (anteriormente Lights Out 100) v3.07 y anteriores, permite a atacantes remotos provocar una dengación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_onboard_administrator:3.07:*:powered_by_lo100i:*:*:*:*:*","matchCriteriaId":"EB9DCB4B-9F27-4CF7-93DC-B8BA90FFAC15"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl120:-:g5:*:*:*:*:*:*","matchCriteriaId":"BE68D2A4-985B-4675-BEEC-F3FB0C76BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl160:-:g5:*:*:*:*:*:*","matchCriteriaId":"D29094A9-B14A-475C-A0E9-DA92414AE4AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl160:-:g5p:*:*:*:*:*:*","matchCriteriaId":"69F58087-C9AB-4E1A-A0F7-ADD2BBBB6716"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl160:-:g6:*:*:*:*:*:*","matchCriteriaId":"8FC09958-856F-4750-A94F-E387B1DA4FF8"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl165:-:g6:*:*:*:*:*:*","matchCriteriaId":"EEAC03FE-EEF4-43FE-9791-B9FE6FDFE870"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl180:-:g5:*:*:*:*:*:*","matchCriteriaId":"C5BD7B7F-1C8D-41E2-9F63-654050A595D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl180:-:g6:*:*:*:*:*:*","matchCriteriaId":"D02277DA-1B2F-4ED5-BD04-642B5020FABF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_dl185:-:g5:*:*:*:*:*:*","matchCriteriaId":"359D0748-F951-4AD5-88D7-609B7C028275"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_ml110:-:g5:*:*:*:*:*:*","matchCriteriaId":"8A453C79-1AEB-48B9-8097-B5FC10E443F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_ml115:-:g5:*:*:*:*:*:*","matchCriteriaId":"A493D9B8-EAC2-4C31-BE90-E10087044F79"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:proliant_ml150:-:g5:*:*:*:*:*:*","matchCriteriaId":"5B44642B-B3F1-42BE-996B-1149D93DBAC3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124881779623139&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124881779623139&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35990","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022617","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124881779623139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=124881779623139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1427","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call."},{"lang":"es","value":"Vulnerabilidad sin especificar en el sistema HP-UX B.11.31, permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores desconocidos, relacionado con la llamada del sistema \"ttrace\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:hpux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"0BD00FE5-4188-4DA0-B80B-5850027F5E16"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36261","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36017","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022706","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2230","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19004","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6215","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1428","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to \"two parsing errors.\""},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en ccLgView.exe en Symantec Log Viewer, utilizado en Symantec AntiVirus (SAV), anterior a v10.1 MR8, Symantec Endpoint Protection (SEP) v11.0 anteriores a v11.0 MR1, Norton 360 v1.0, y Norton Internet Security 2005 hasta 2008, permite a atacantes remotos inyectar HTML o scripts web arbitrarios a su elección a través de un mensaje de correo electrónico elaborado ,relacionadas con \"dos errores de análisis sintáctico.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:*:*:*:*:*:*:*","versionEndIncluding":"10.1","matchCriteriaId":"B5F1EF45-537A-4656-BDE8-FA9383A75676"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:*:*:*:*:*:*:*","matchCriteriaId":"E02FE2FB-514A-48F9-8833-B1EF4CC1E27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7BD10A73-3DEF-48BD-9B35-D2BF791560E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"03684DB6-9DC6-4EDD-902F-D1EC160330ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"64D38110-4B50-472E-9743-52A137F2ED93"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C1004A37-D22B-4690-8625-B631595C8B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FE7A5EDA-F1FF-4F66-BC78-DC6429D301CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A664090-5993-4DF2-AD6B-0F4867DB98B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"079D24C8-27D6-4794-8E56-58A7885DFE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.5:*:*:*:*:*:*:*","matchCriteriaId":"732CB44D-7468-486A-85CA-FA1365DB0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E236C99A-D524-462A-BD8E-97A07B3BFC69"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.7:*:*:*:*:*:*:*","matchCriteriaId":"37456791-164A-489B-A905-8B61C6F91BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.8:*:*:*:*:*:*:*","matchCriteriaId":"C39155B8-55BD-4B58-85DB-505876930A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.9:*:*:*:*:*:*:*","matchCriteriaId":"287B278D-A114-4795-8934-64E3C4472481"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*","matchCriteriaId":"E269D396-3A70-4C4B-9D79-CBBA75C280D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00819E08-CC5C-48FC-9F80-95B68AB19C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005:*:anti_spyware:*:*:*:*:*","matchCriteriaId":"803641B7-E099-4CE8-B805-DBB338479E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005:*:professional:*:*:*:*:*","matchCriteriaId":"E4BBE123-56E1-46E0-93BE-38F0932D9C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005:11.0:*:*:*:*:*:*","matchCriteriaId":"F39AE3D7-7018-47AB-B332-D40EA5273CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005:11.0.9:*:*:*:*:*:*","matchCriteriaId":"82446BA3-92F9-4689-9D67-3CE159AA0F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005:11.5.6.14:*:*:*:*:*:*","matchCriteriaId":"98F9F2E3-1775-4EF9-9FE0-0D011307C269"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005_contains_nav_11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D7FE1A0A-4352-459A-892D-29AB14AA3B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2006:*:professional:*:*:*:*:*","matchCriteriaId":"1DE91FB9-35C3-4DC7-BE00-7C60EE9FD880"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"692ECBCD-AB6B-4965-93F4-BDAD4777C018"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"3EF87752-C86D-4C89-9DE9-F874068C89EC"}]}]}],"references":[{"url":"http://osvdb.org/54132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34936","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34669","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022133","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022134","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022135","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1203","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50170","source":"cve@mitre.org"},{"url":"http://osvdb.org/54132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1429","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function."},{"lang":"es","value":"El LANDesk Common Base Agent (CBA) de Intel en Alert Management System 2 (AMS2) de Symantec, tal y como es usado en System Center (SSS) de Symantec; AntiVirus Server de Symantec; AntiVirus Central Quarantine Server de Symantec; Symantec AntiVirus (SAV) Corporate Edition versiones 9 anteriores a 9.0 MR7, versiones 10.0 y 10.1 anteriores a 10.1 MR8, y versiones 10.2 anteriores a 10.2 MR2; Symantec Client Security (SCS) versiones 2 anteriores a 2.0 MR7 y versiones 3 anteriores a 3.1 MR8; y Symantec Endpoint Protection (SEP) anterior a versión 11.0 MR3, permite a atacantes remotos ejecutar comandos arbitrarios por medio de un paquete diseñado cuyo contenido se interpreta como un comando para ser iniciado en un nuevo proceso mediante la función CreateProcessA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:-:corporate:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"658366BE-0214-4388-9C96-ABEB9E60C213"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*","versionEndIncluding":"10.1","matchCriteriaId":"4CD3B130-38CD-4B85-B054-EE43C205E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*","versionEndIncluding":"10.2","matchCriteriaId":"C754F33C-88E5-45A7-96D9-91C0D0397ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:-:-:srv:*:*:*:*:*","matchCriteriaId":"91397AE1-03FB-4938-8E4F-6E0A29DD1D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*","matchCriteriaId":"EEB639EF-B434-42ED-A162-A2593FA78E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*","matchCriteriaId":"5BA427D2-2F74-4314-B68A-164E2B6B0240"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*","matchCriteriaId":"549049F7-2698-4F68-A1D0-1E4546B9EB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*","matchCriteriaId":"3E86D9CE-8A86-498B-B3A3-8988274A91E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*","matchCriteriaId":"BBF13A92-83EF-44EE-AD87-BA0CF8FF266D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*","matchCriteriaId":"D92B456D-A69E-4B10-8F74-D3DFC242F641"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*","matchCriteriaId":"643AF180-138C-472A-8BC5-B8B028E77CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*","matchCriteriaId":"0D56068D-CEF2-46B7-9914-36AB961839C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*","matchCriteriaId":"C8ADDF27-67FF-41D7-BF2E-87AE06FDECD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*","matchCriteriaId":"002290DD-589E-404F-BFC0-A1239D0E92E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*","matchCriteriaId":"D2854BCF-2D37-4BE9-A590-7E25DF443EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*","matchCriteriaId":"4BDB19A7-8DFA-43AD-9C44-16BBCF4531B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*","matchCriteriaId":"ED683B68-530A-436F-A49B-32890EDFAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus_central_quarantine_server:*:*:*:*:*:*:*:*","matchCriteriaId":"F8ABFB83-2B3D-4F73-A849-1910D8BCA622"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"64CC7EDE-5A85-4D8E-99B0-FF6690BCE35E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0DDD0E02-306D-4675-B73A-2C2F619CDDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"844A6963-F60C-4D48-8445-9056C99201D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:*","matchCriteriaId":"FDB1C90D-DBC0-4DA0-AF5D-E42C41E84B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*","matchCriteriaId":"2852548A-39A6-44FB-A73E-96507BA0CD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:*","matchCriteriaId":"FB9641FC-FF7B-4413-8163-B795AA35C888"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*","matchCriteriaId":"17862D7F-7001-46B8-A415-2A15A247E9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*","matchCriteriaId":"170AEE7B-31AF-44E2-9B63-9703D0DE721C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*","matchCriteriaId":"E651C9BE-201B-4DDC-A650-F9269531290C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56EA0BAC-ED6D-45D2-995C-18B828906E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*","matchCriteriaId":"63B1A9FC-707C-4F6F-959B-30B28E43D202"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*","matchCriteriaId":"87E4E013-A819-42E0-8F8E-9B2D409F900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*","matchCriteriaId":"097B87A8-8176-4426-BDE4-6FDDD272E1B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*","matchCriteriaId":"5EBD7767-C352-435B-8963-83F723FFD302"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*","matchCriteriaId":"E2FC1708-B643-4489-A59C-EBDAFD9B0078"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*","matchCriteriaId":"7DCE0C8A-A97C-4DE1-B0EE-3A2D16A34C77"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*","matchCriteriaId":"EE714705-CEE9-4BA1-8573-FD3765BC7F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"11.0","matchCriteriaId":"C77B51F3-AB82-4C0A-8341-73CC9650F841"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:system_center:*:*:*:*:*:*:*:*","matchCriteriaId":"FEBAB5D5-E3B7-4D65-80E8-C0E5B40A95A8"}]}]}],"references":[{"url":"http://osvdb.org/54157","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34856","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34671","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022130","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022131","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022132","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50176","source":"cve@mitre.org"},{"url":"http://osvdb.org/54157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1430","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process."},{"lang":"es","value":"Desbordamiento múltiple de búfer basado en pila en IAO.EXE en el Intel Alert Originator Service en Symantec Alert Management System 2 (AMS2), tal como se utiliza en Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 anterior a v9.0 MR7, v10.0 y v10.1 anterior a v10.1 MR8, y v10.2 anterior a v10.2 MR2; Symantec Client Security (SCS) v2 anterior a v2.0 MR7 y v3 anterior a v3.1 MR8; y Symantec Endpoint Protection (SEP) anterior a v11.0 MR3, permite a atacantes remotos ejecutar código arbitrario a través de (1) un paquete elaborado o (2) los datos que aparentemente se reciban a del proceso MsgSys.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:-:corporate:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"658366BE-0214-4388-9C96-ABEB9E60C213"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*","versionEndIncluding":"10.1","matchCriteriaId":"4CD3B130-38CD-4B85-B054-EE43C205E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*","versionEndIncluding":"10.2","matchCriteriaId":"C754F33C-88E5-45A7-96D9-91C0D0397ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:-:-:srv:*:*:*:*:*","matchCriteriaId":"91397AE1-03FB-4938-8E4F-6E0A29DD1D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*","matchCriteriaId":"EEB639EF-B434-42ED-A162-A2593FA78E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*","matchCriteriaId":"5BA427D2-2F74-4314-B68A-164E2B6B0240"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*","matchCriteriaId":"549049F7-2698-4F68-A1D0-1E4546B9EB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*","matchCriteriaId":"3E86D9CE-8A86-498B-B3A3-8988274A91E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*","matchCriteriaId":"BBF13A92-83EF-44EE-AD87-BA0CF8FF266D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*","matchCriteriaId":"D92B456D-A69E-4B10-8F74-D3DFC242F641"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*","matchCriteriaId":"643AF180-138C-472A-8BC5-B8B028E77CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*","matchCriteriaId":"0D56068D-CEF2-46B7-9914-36AB961839C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*","matchCriteriaId":"C8ADDF27-67FF-41D7-BF2E-87AE06FDECD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*","matchCriteriaId":"002290DD-589E-404F-BFC0-A1239D0E92E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*","matchCriteriaId":"D2854BCF-2D37-4BE9-A590-7E25DF443EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*","matchCriteriaId":"4BDB19A7-8DFA-43AD-9C44-16BBCF4531B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*","matchCriteriaId":"ED683B68-530A-436F-A49B-32890EDFAC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus_central_quarantine_server:*:*:*:*:*:*:*:*","matchCriteriaId":"F8ABFB83-2B3D-4F73-A849-1910D8BCA622"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"64CC7EDE-5A85-4D8E-99B0-FF6690BCE35E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0DDD0E02-306D-4675-B73A-2C2F619CDDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"844A6963-F60C-4D48-8445-9056C99201D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:*","matchCriteriaId":"FDB1C90D-DBC0-4DA0-AF5D-E42C41E84B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*","matchCriteriaId":"2852548A-39A6-44FB-A73E-96507BA0CD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:*","matchCriteriaId":"FB9641FC-FF7B-4413-8163-B795AA35C888"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*","matchCriteriaId":"17862D7F-7001-46B8-A415-2A15A247E9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*","matchCriteriaId":"170AEE7B-31AF-44E2-9B63-9703D0DE721C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*","matchCriteriaId":"E651C9BE-201B-4DDC-A650-F9269531290C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56EA0BAC-ED6D-45D2-995C-18B828906E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*","matchCriteriaId":"63B1A9FC-707C-4F6F-959B-30B28E43D202"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*","matchCriteriaId":"87E4E013-A819-42E0-8F8E-9B2D409F900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*","matchCriteriaId":"097B87A8-8176-4426-BDE4-6FDDD272E1B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*","matchCriteriaId":"5EBD7767-C352-435B-8963-83F723FFD302"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*","matchCriteriaId":"E2FC1708-B643-4489-A59C-EBDAFD9B0078"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*","matchCriteriaId":"7DCE0C8A-A97C-4DE1-B0EE-3A2D16A34C77"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*","matchCriteriaId":"EE714705-CEE9-4BA1-8573-FD3765BC7F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"11.0","matchCriteriaId":"C77B51F3-AB82-4C0A-8341-73CC9650F841"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:system_center:*:*:*:*:*:*:*:*","matchCriteriaId":"FEBAB5D5-E3B7-4D65-80E8-C0E5B40A95A8"}]}]}],"references":[{"url":"http://secunia.com/advisories/34856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503080/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34672","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34674","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022130","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022131","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022132","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-018/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50177","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503080/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-018/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1431","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per vendor: http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02\r\n\r\n\"Symantec System Center Impact\r\n\r\nSymantec System Center (SSS) is a Microsoft Management Console (MMC) plug-in which allows an administrator to manage all Symantec AntiVirus platforms from a single, centralized location. Alert Management System 2 (AMS2) is an alerting feature of System Center that listens for specific events and sends notifications as specified by the administrator.\r\n\r\nAMS2 is installed by default with Symantec System Center 9.0. AMS2 is an optional component in Symantec System Center 10.0 or 10.1. These vulnerabilities will only impact systems if AMS has been installed.\r\n\r\nSymantec AntiVirus Server Impact\r\n\r\nAMS2 is installed by default with Symantec AntiVirus Server 9.0. AMS2 is an optional component in Symantec AntiVirus Server 10.0 or 10.1. These vulnerabilities will only impact systems if AMS has been installed.\r\n\r\nSymantec AntiVirus and Symantec Endpoint Protection Central Quarantine Server Impact\r\n\r\nAMS2 is installed by default by Central Quarantine Server. These vulnerabilities will only impact systems if Quarantine Server has been installed.\r\n\r\nSymantec is not aware of any customers impacted by these issues, or of any attempts to exploit them. However, we recommend that any affected customers update their product immediately to protect against potential attempts to exploit these issues.\r\n\r\nCertain localized language versions of SCS 2.0/SAV 9.x were not patched due to compatibility issues on the localized platforms. As a result, customers who are running the following versions are strongly recommended to update to a non-vulnerable SCS 2.0/SAV 9 International English version or upgrade to a non-vulnerable version of SEP 11.x:\r\n\r\nSymantec Client Security 2.0/Symantec AntiVirus Corporate Edition 9.x (Chinese Simplified and Chinese Traditional)\r\nSymantec Client Security 2.0/Symantec AntiVirus Business Pack 9.x (Chinese Simplified and Chinese Traditional)\r\nSymantec Client Security 2.0/Symantec AntiVirus Business Pack 9.x (Korean)\r\nSymantec Client Security 2.0/Symantec AntiVirus Business Pack 9.x (Japanese licensed)\"","cveTags":[],"descriptions":[{"lang":"en","value":"XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service."},{"lang":"es","value":"XFR.EXE en el servicio Intel File Transfer en la consola en Symantec Alert Management System 2 (AMS2), tal como se utiliza en Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 anteriores a 9.0 MR7, 10.0 y 10.1 anteriores a 10.1 MR8, y 10.2 anteriores a 10.2 MR2; Symantec Client Security (SCS) 2 anteriores a 2.0 MR7 y 3 anteriores a 3.1 MR8; y Symantec Endpoint Protection (SEP) anteriores a 11.0 MR3, permite a atacantes remotos la ejecución de código arbitrario colocando el código en un (1) compartido o (2) servidor WebDAV y luego enviando la ruta al compartido UNC de este servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:-:corporate:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"658366BE-0214-4388-9C96-ABEB9E60C213"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:*:*:corporate:*:*:*:*:*","versionStartIncluding":"10","versionEndIncluding":"10.2","matchCriteriaId":"DF1F4E2F-B0F3-4FC1-8085-0A7B88586FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:-:-:srv:*:*:*:*:*","matchCriteriaId":"91397AE1-03FB-4938-8E4F-6E0A29DD1D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus_central_quarantine_server:*:*:*:*:*:*:*:*","matchCriteriaId":"F8ABFB83-2B3D-4F73-A849-1910D8BCA622"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"E740F9D8-BC99-4016-9B2B-E868DE018549"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"3.1","matchCriteriaId":"5DF597A7-8F2D-4C9D-97C6-ACF8F57A771A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"11.0","matchCriteriaId":"C77B51F3-AB82-4C0A-8341-73CC9650F841"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:system_center:*:*:*:*:*:*:*:*","matchCriteriaId":"FEBAB5D5-E3B7-4D65-80E8-C0E5B40A95A8"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34856","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34675","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022130","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022131","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022132","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50179","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1432","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled."},{"lang":"es","value":"Symantec Reporting Server, utilizado en Symantec AntiVirus (SAV) Corporate Edition v10.1 anterior a v10.1 MR8 y v10,2 antes de v10.2 MR2, Symantec Client Security (SCS), antes de v3.1 MR8, y el componente Symantec Endpoint Protection Manager (SEPM) en Symantec Endpoint Protection (SEP) anterior a v11.0 MR2, permite a atacantes remotos inyectar texto arbitrario en la pantalla de inicio de sesión y, posiblemente, realizar ataques de phishing, a través de vectores relacionados con un URL que no está bien manejada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:-:*:*:corporate:*:*:*","matchCriteriaId":"357629A3-1F45-477D-B560-B4AFB6E163E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:maintenance_release7:*:*:corporate:*:*:*","matchCriteriaId":"D2126B10-14E6-4B47-8DA2-361BD51BD378"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.2:-:*:*:corporate:*:*:*","matchCriteriaId":"11C99ECE-8A4E-4DF3-98CF-4B8E15F6662A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.2:maintenance_release1:*:*:corporate:*:*:*","matchCriteriaId":"D4B0ACE4-1374-40DF-8E52-C1785753ACBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:-:*:*:*:*:*:*","matchCriteriaId":"96B92C62-EB73-4777-9307-677754819F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:maintenance_release7:*:*:*:*:*:*","matchCriteriaId":"A63081A8-FB67-4E43-98CF-CD59D7BA5556"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:11.0:-:*:*:*:*:*:*","matchCriteriaId":"FF3B36FF-5C26-4565-A23A-789D1158B867"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:endpoint_protection:11.0:maintenance_release1:*:*:*:*:*:*","matchCriteriaId":"D62FBC34-2CA4-430E-B3DF-8948E9F91B02"}]}]}],"references":[{"url":"http://secunia.com/advisories/34856","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34935","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022136","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1022137","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1022138","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34668","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1202","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50172","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/34856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1022137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1022138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1433","sourceIdentifier":"cve@mitre.org","published":"2009-04-24T23:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en File::find (filesystem/File.php) in SilverStripe antes de v2.3.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro de nombre de archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"FCA6B176-316E-40D6-932A-8DEA9EE7E0DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D93D92D9-A3CC-46D0-8539-587F2B3A3A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6330F446-45E8-4C3E-8585-4BAA9385DFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3AC23F5D-AC9E-4F83-95B2-CEF6E546E732"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"77480CB4-04B8-4934-AB1D-B61BB262CD40"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3D735517-B50D-4C4B-A95F-E48626AB5671"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA1CDF7-D273-4044-94AB-3295EAD98AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8AB709-B4E7-4D48-8481-08BBCD9121A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D51AEAF-EACD-4E52-85D4-5A54A443EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"800CC172-F319-41A2-8C29-8944B98930B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"24734325-97DA-4B2C-B192-3F4B83CCF0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D875C510-39F2-4726-9DBD-3D95A5CB3D5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"BE8C544D-E233-488D-B768-8C077BB79338"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"26E1807F-7DEB-4519-95B9-4FA647C7D477"},{"vulnerable":true,"criteria":"cpe:2.3:a:silverstripe:silverstripe:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"FAB67F4E-0E56-4597-BD9B-90D07685D7F7"}]}]}],"references":[{"url":"http://open.silverstripe.com/ticket/3721","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://open.silverstripe.com/wiki/ChangeLog/2.3.1","source":"cve@mitre.org"},{"url":"http://osvdb.org/53589","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34485","source":"cve@mitre.org"},{"url":"http://open.silverstripe.com/ticket/3721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://open.silverstripe.com/wiki/ChangeLog/2.3.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1434","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a (1) save or (2) view script in the SRC attribute of an IMG element, a related issue to CVE-2009-1339."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Foswiki anterior a v1.0.5 permite a atacantes remotos secuestrar la autenticación de usuarios a su elección para realizar solicitudes que modifiquen las páginas, cambiar los permisos, o cambiar la pertenencia a grupos, como se demuestró mediante una URL para (1) guardar o (2) ver script en el atributo SRC de un elemento IMG, una cuestión relacionada con la CVE-2009-1339."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"E0355BD7-ECE2-415D-8F35-68B0B05DC22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:foswiki:foswiki:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF0B6551-9ED0-4D32-A9DC-C1167550ECED"},{"vulnerable":true,"criteria":"cpe:2.3:a:foswiki:foswiki:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9280019F-EBB1-476A-BF19-B9B2FA5F929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:foswiki:foswiki:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DBE5ADD0-893A-4E5E-AF4D-550562338FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foswiki:foswiki:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"46521E63-4714-4464-AA2F-91E3DC892389"}]}]}],"references":[{"url":"http://foswiki.org/Support/SecurityAlert-CVE-2009-1434","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54148","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=49F61C4E.2040806%40lavrsen.dk&forum_name=foswiki-announce","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50256","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-1434","source":"cve@mitre.org"},{"url":"http://foswiki.org/Support/SecurityAlert-CVE-2009-1434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=49F61C4E.2040806%40lavrsen.dk&forum_name=foswiki-announce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1435","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"NTRtScan.exe en Trend Micro OfficeScan Client 8.0 SP1 y 8.0 SP1 Parche 1 permite a usuarios locales causar una denegación de servicio (cuelgue de la aplicación) a través de directorios con nombres de rutas largas. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:officescan:8.0:sp1:client:*:*:*:*:*","matchCriteriaId":"5F9E1EED-C780-4E2A-BACC-932EE2E521BC"}]}]}],"references":[{"url":"http://es.geocities.com/jplopezy/officescan.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/53890","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502847/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502860/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34642","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022109","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://es.geocities.com/jplopezy/officescan.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/53890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502847/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502860/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1436","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file."},{"lang":"es","value":"La interfaz de base de datos en libc en FreeBSD 6.3, 6.4, 7.0, 7.1, y 7.2-PRERELEASE no inicializa correctamente la memoria para las estructuras de la base de datos Berkeley DB v1.85, lo cual permite a usuarios locales obtener información sensible mediante la lectura de un archivo de base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*","matchCriteriaId":"9A1D9D46-75E4-4742-9CF3-2B063B6B7504"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*","matchCriteriaId":"8E08DCB9-9064-4DB7-B43A-7B415882EB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*","matchCriteriaId":"06FB0EEA-254E-4A1F-99E7-058FCD518E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*","matchCriteriaId":"47E0A416-733A-4616-AE08-150D67FCEA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.0:release-p12:*:*:*:*:*:*","matchCriteriaId":"0452688A-3E71-4BC9-8942-56ABBC47EA87"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*","matchCriteriaId":"C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*","matchCriteriaId":"8B573401-DC6F-4AFE-92F5-D96F785D2107"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756","source":"cve@mitre.org"},{"url":"http://osvdb.org/53918","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34666","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1022113","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1022113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1437","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en PortableApps CoolPlayer Portable (también conocido como CoolPlayer+ Portable), en versiones 2.19.6 y anteriores permite que atacantes remotos ejecuten código arbitrario mediante una cadena larga en un archivo de lista de reproducción malformado (.m3u). NOTA: podría solaparse con CVE-2008-3408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolplayer:coolplayer:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"2B434D0D-4AD5-4C45-933C-2A284FE1FA03"}]}]}],"references":[{"url":"http://osvdb.org/53885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49984","source":"cve@mitre.org"},{"url":"https://hansesecure.de/vulnerability-in-coolplayer/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8489","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8519","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8520","source":"cve@mitre.org"},{"url":"http://osvdb.org/53885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hansesecure.de/vulnerability-in-coolplayer/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1438","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008."},{"lang":"es","value":"Desbordamiento en la función CSoundFile::ReadMed (src/load_med.cpp) en libmodplug antes de la versión v0.8.6, tal como se utiliza en gstreamer-plugins y otros productos, permite ejecutar a determinados atacantes, dependiendo del contexto, código arbitrario a través de un archivo MED con un (1) un comentario a una canción o (2) nombre de canción, debidamente modificado, lo que desencadena un desbordamiento de búfer basado en montículo."}],"vendorComments":[{"organization":"Red Hat","comment":"The impact of this flaw is limited to application crash, not allowing code execution.  Red Hat does not consider a user-assisted crash of a client application such as media players using GStreamer framework to be a security issue.\n\nFor further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1438","lastModified":"2009-04-28T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.5","matchCriteriaId":"AC513C19-E6AE-434D-9FF1-AFD01FE8A494"},{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5E90B264-B800-4D01-B9C6-1B1A97702F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7869CDE5-B184-42EB-B0D6-6E6164AA324A"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=266913","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp%3Br2=1.2","source":"cve@mitre.org"},{"url":"http://osvdb.org/53801","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34930","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35026","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36183","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-07.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1850","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1851","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:128","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/21/4","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00907.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00908.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30801","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-771-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1104","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496834","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50388","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=266913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp%3Br2=1.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/21/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00907.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-771-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1439","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request."},{"lang":"es","value":"Un desbordamiento de búfer en fs/cifs/connect.c en el kernel de Linux v2.6.29 y anteriores permite a atacantes remotos provocar una denegación de servicio (mediante caída) a través de un campo nativeFileSystem demasiado largo en una respuesta Tree Connect a una petición de montaje SMB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.29","matchCriteriaId":"3871E973-1DCE-4C2D-8FF0-9330AF928297"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"}]}]}],"references":[{"url":"http://blog.fefe.de/?ts=b72905a8","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35217","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35226","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35343","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35387","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/04/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/7","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34453","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=492282","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494275","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html","source":"cve@mitre.org"},{"url":"http://blog.fefe.de/?ts=b72905a8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/07/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=492282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1440","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T18:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename."},{"lang":"es","value":"Una vulnerabilidad de lista negra incompleta en DownloadListCtrl.cpp en amule v2.2.4 permite realizar, a atacantes remotos, ataques de inyección de argumentos en un comando de mplayer a través de un nombre de archivo debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amule:amule:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0690116F-2D29-4E01-BAFA-78E7EEB42266"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525078","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34839","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1821","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/22/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34683","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50205","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/22/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1441","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:04.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la función ParamTraits(SkBitmap)::Read en Chrome de Google anterior a versión 1.0.154.64, permite a los atacantes aprovechar el acceso al renderizador para causar una denegación de servicio (bloqueo de aplicación) o posiblemente ejecutar código arbitrario por medio de vectores relacionados con un mapa de bits grande que llega por medio del canal IPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.53","matchCriteriaId":"22A411BE-895D-4D8F-B14B-AAEB3112F9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=10869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34859","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022174","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1266","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50362","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=10869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1442","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T17:30:04.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas."},{"lang":"es","value":"Múltiples desbodamientos de enteros en Skia, utilizado en Google Chrome v1.x anteriores a v1.0.154.64 y v2.x, y posiblemente Android, debería permitir a los atacantes remotos ejecutar arbitrariamente código en el proceso de renderizado a través de (1) imagenes o (2) canvas manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.53","matchCriteriaId":"22A411BE-895D-4D8F-B14B-AAEB3112F9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=10736","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://code.google.com/p/skia/source/detail?r=159","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34859","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022175","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1266","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=10736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://code.google.com/p/skia/source/detail?r=159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1443","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el componente de servidor de OCS Inventory NG antes de v1.02 tienen un impacto y unos vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.01","matchCriteriaId":"348E1D9C-D9E9-4258-A5FB-7B4D11A949EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9C9D8DD-6505-4903-9181-26223DA65DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3E915093-BDDA-4A75-A0D0-819246D94249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*","matchCriteriaId":"F8B28BF3-C16C-458A-BC9B-23631D2B7623"}]}]}],"references":[{"url":"http://secunia.com/advisories/34763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34694","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1152","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1444","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter."},{"lang":"es","value":"Una vulnerabilidad de inclusión remota de archivo PHP en indexk.php en WebPortal CMS v0.8-beta permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro lib_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webportal:webportal_cms:0.8_beta:*:*:*:*:*:*:*","matchCriteriaId":"7677BF08-46A6-4E91-8892-40FD784D433A"}]}]}],"references":[{"url":"http://osvdb.org/54121","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8516","source":"cve@mitre.org"},{"url":"http://osvdb.org/54121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1445","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the error parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en WebPortal CMS v0.8-beta permiten a atacantes remotos (1) leer ficheros de su elección a través de secuencias de salto de directorio en el parámetro lang de libraries/helpdocs/help.php y (2) incluir y ejecutar archivos locales de su elección a través de secuencias de salto de directorio en el parámetro de error a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivano_culmine:webportal_cms:0.8:beta:*:*:*:*:*:*","matchCriteriaId":"EC541683-B488-4448-A826-F5E01E08461C"}]}]}],"references":[{"url":"http://osvdb.org/54119","source":"cve@mitre.org"},{"url":"http://osvdb.org/54120","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8516","source":"cve@mitre.org"},{"url":"http://osvdb.org/54119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1446","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de subida de ficheros sin  restricciones en upload.php en Elkagroup Image Gallery v1.0 permite a los usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en gallery/pictures/. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elkagroup:image_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7DB9AD45-67EF-4859-BAA1-38C8DD8E6F87"}]}]}],"references":[{"url":"http://osvdb.org/54115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34679","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8514","source":"cve@mitre.org"},{"url":"http://osvdb.org/54115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1447","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/."},{"lang":"es","value":"Una vulnerabilidad de subida de ficheros sin restricciones en admin/editor/image.php en e-cart.biz Free Shopping Cart permite a atacantes remotos ejecutar código arbitrario mediante la subida de archivos con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en images/ ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-cart:free_shopping_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"06BD714A-DFB9-4B0C-83FC-3713E4D4D91A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34736","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34590","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49956","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8474","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1448","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en apricot.php en la aplicación Apricot de LovPop.net, probablemente en la versión 1.20, permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de parámetros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lovpop:apricot:1.20:*:*:*:*:*:*:*","matchCriteriaId":"E5D6256C-19D2-4735-BDE9-0FA0E809253F"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN82744714/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49948","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN82744714/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1449","sourceIdentifier":"cve@mitre.org","published":"2009-04-27T22:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter.  NOTE: this may overlap CVE-2008-5735."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en PortableApps CoolPlayer Portable (alias CoolPlayer+ Portable) v2.19.1 permite a atacantes remotos ejecutar código arbitrario a través de un archivo skin.ini con un parámetro PlaylistSkin muy grande. NOTA: esta vulnerabilidad puede anular a CVE-2008-5735."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolplayer:coolplayer:2.19.1:*:*:*:*:*:*:*","matchCriteriaId":"2B434D0D-4AD5-4C45-933C-2A284FE1FA03"}]}]}],"references":[{"url":"http://osvdb.org/54113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50448","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8527","source":"cve@mitre.org"},{"url":"http://osvdb.org/54113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1450","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T15:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the _page_content parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de ficheros en format.php en SMA-DB v0.3.12 permite a atacantes remotos ejecutar código PHP a su elección a través de una URL en el parámetro _page_content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluevirus-design:sma-db:0.3.12:*:*:*:*:*:*:*","matchCriteriaId":"718DC9B9-0A61-45E3-9EAF-7E5F65A1F44E"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/7936","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1451","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T15:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en startpage.php en SMA-DB v0.3.12 permite a atacantes remotos inyectar HTML o scripts web a su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluevirus-design:sma-db:0.3.12:*:*:*:*:*:*:*","matchCriteriaId":"718DC9B9-0A61-45E3-9EAF-7E5F65A1F44E"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/7936","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/7936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1452","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivos PHP en theme/format.php en SMA-DB v0.3.13 permiten a atacantes remotos ejecutar código PHP arbitrario a través de una URL en los parámetros (1) _page_css y (2) _page_javascript. NOTA: el vector _page_content ya está cubierto por CVE-2009-1450."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluevirus-design:sma-db:0.3.13:*:*:*:*:*:*:*","matchCriteriaId":"38ED9A46-9DDD-4865-BB5F-B2A87CF4F331"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49928","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8460","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1453","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en class.eport.php en Tiny Blogr v1.0.0 RC4, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos arbitrarios SQL a través del parámetro txtUsername (alias del campo Username). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anoochit_chalothorn:tiny_blogr:1.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"37C96ECF-839F-4879-8F30-78511D7CBAF7"}]}]}],"references":[{"url":"http://secunia.com/advisories/34768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502747/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34581","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502747/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1454","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en tasks.php en WebCollab anterior a v2.50 (alias Billy Goat) permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de selección de parámetros en una tarea de acción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:*:*:*:*:*:*:*:*","versionEndIncluding":"2.40","matchCriteriaId":"D1B6A332-16AE-4941-B3BF-F46BE31E1632"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.20:*:*:*:*:*:*:*","matchCriteriaId":"35368D38-7D8C-4338-A54E-9EEA5257C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9840E707-2DCC-4585-A74D-CAC8A93D1738"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.31:*:*:*:*:*:*:*","matchCriteriaId":"817D79BC-7532-4797-85C9-79D5BC27BA8E"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/108/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/53780","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34576","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49939","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/108/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/53780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1455","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en WebCollab anterior a v2.50 (alias Billy Goat) permiten a atacantes remotos el secuestro de la autenticación de los administradores para las peticiones que cambian una contraseña a su elección o tienen otro impacto no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.20:*:*:*:*:*:*:*","matchCriteriaId":"35368D38-7D8C-4338-A54E-9EEA5257C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9840E707-2DCC-4585-A74D-CAC8A93D1738"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.31:*:*:*:*:*:*:*","matchCriteriaId":"817D79BC-7532-4797-85C9-79D5BC27BA8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_simpson:webcollab:2.40:*:*:*:*:*:*:*","matchCriteriaId":"DF67AA63-67C5-4F04-919A-4DBE44977BCA"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/108/45/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/53781","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49940","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/108/45/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/53781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1456","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin.php en Malleo v1.2.3 permite a los administradores remotos autenticados incluir y ejecutar archivos locales a su elección a través de un .. (punto punto) en el módulo de parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephane_rajalu:malleo:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"66FA66DC-6DF3-4032-ADA7-2D856E72DD3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502763/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34588","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502763/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1457","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en player.php en Nuke Evolución Xtreme v2.x permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro defaultVisualExt. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolution-extreme:nuke_evolution_xtreme:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4D93B042-D50C-4C72-977D-3A6DC8A0A195"},{"vulnerable":true,"criteria":"cpe:2.3:a:evolution-extreme:nuke_evolution_xtreme:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"32D8DD43-9FAA-496B-BED6-4DD59E2D0EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:evolution-extreme:nuke_evolution_xtreme:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"431822FC-6E77-4290-BD73-F2817575EC1E"}]}]}],"references":[{"url":"http://osvdb.org/53779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34594","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49944","source":"cve@mitre.org"},{"url":"http://osvdb.org/53779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1458","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/index.php en razorCMS anterior a v0.4 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro slab en una acción de edición, (2) el parámetro catname en un acción showcats, y (3) el parámetro cat en una acción reordercat.\r\n\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"52856284-CC33-4779-8A9D-A9A02FEA6654"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5D9EDF45-CA3B-44B8-A87E-99083223007C"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/53776","source":"cve@mitre.org"},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49945","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1459","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en razorCMS anterior a v0.4 permite a atacantes remotos secuestrar la autenticación de administradores para las peticiones que crean una pagina web que contiene código PHP.\r\n\r\n\t\t\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"52856284-CC33-4779-8A9D-A9A02FEA6654"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5D9EDF45-CA3B-44B8-A87E-99083223007C"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*","matchCriteriaId":"F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/53778","source":"cve@mitre.org"},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49947","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1460","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact."},{"lang":"es","value":"razorCMS anterior a v0.4 utiliza permisos débiles para (1) admin/core/admin_config.php, lo cual permite a los usuarios locales obtener el hash de la contraseña del administrador y las credenciales del usuario FTP; y (2) el directorio raíz, (3) datastore/, y (4) admin/core/, lo cual permite a los usuarios locales a tener un impacto no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"52856284-CC33-4779-8A9D-A9A02FEA6654"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5D9EDF45-CA3B-44B8-A87E-99083223007C"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*","matchCriteriaId":"F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/53777","source":"cve@mitre.org"},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49946","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/53777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1461","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el formulario Create New Page en razorCMS v0.3 RC2 y anteriores permite a usuarios remotos autenticados inyectar scripts web arbitrarios o HTML a través del campo Page Title."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:*:rc2:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"5571FE14-5D75-41F7-9C41-96FBC0F79382"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5D9EDF45-CA3B-44B8-A87E-99083223007C"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50357","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1462","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact."},{"lang":"es","value":"El Security Manager en razorCMS anterior a v0.4 no comprueba los permisos de todos los archivos propiedad de la cuenta de usuario de apache, lo cual es inconsistente con la documentación y permite a los usuarios locales tener un impacto no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"52856284-CC33-4779-8A9D-A9A02FEA6654"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5D9EDF45-CA3B-44B8-A87E-99083223007C"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*","matchCriteriaId":"F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50358","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1463","sourceIdentifier":"cve@mitre.org","published":"2009-04-28T16:30:03.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en razorCMS anterior a v0.4 permite a atacantes remotos inyectar código PHP a su eleccion en cualquier página guardando contenido como un fichero .php ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"52856284-CC33-4779-8A9D-A9A02FEA6654"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5D9EDF45-CA3B-44B8-A87E-99083223007C"},{"vulnerable":true,"criteria":"cpe:2.3:a:razorcms:razorcms:0.3:rc2:*:*:*:*:*:*","matchCriteriaId":"F5B19BB3-8D38-4D4A-928E-75A45A63D6E6"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50359","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=123990481506680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=123998062108561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://razorcms.co.uk/support/viewtopic.php?f=13&t=325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1464","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a setservice job, or (3) terminate processes via a killprocess job."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en index.aas en la Aplicación del Servidor de Acceso (A-A-S) v2.0.48 permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones que (1) ejecutan programas de su elección a través de una tarea \"command\", (2) parar servicios a través de una tarea \"setservice\", o (3) terminar procesos a través de una tarea \"killprocess\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022204","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34911","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.syhunt.com/advisories/aashack.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.syhunt.com/advisories/aashack.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1465","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Application Access Server (A-A-S) 2.0.48 has \"wildbat\" as its default password for the admin account, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"Aplicación del Servidor de Acceso (A-A-S) v2.0.48 tiene \"wildbat\" como su contraseña por defecto para la cuenta administrador, lo cual hace sencillo a atacantes remotos obtener el acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022204","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34911","source":"cve@mitre.org"},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50589","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1466","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file."},{"lang":"es","value":"Aplicación de Servidor de Acceso (A-A-S) v2.0.48 almacena (1) contraseñas y (2) las palabras clave del puerto en texto claro en aas.ini, lo cual permite a usuarios locales obtener información sensible a través de la lectura del fichero."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:klinzmann:application_access_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"DCC440C8-91C2-49B3-B023-C3B8F9D0E1D4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022204","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34911","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50590","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1022204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/503434/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.syhunt.com/advisories/?id=aas-multiple","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1467","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title, (3) link, or (4) description element in an RSS feed, related to the getHTML function in server/inc/rss/item.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IceWarp eMail Server y WebMail Server anteriores a v9.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de (1) el cuerpo del mensaje, relacionado con la vista del correo electrónico y el incorrecto filtrado HTML en la función \"cleanHTML\" en server/inc/tools.php; o (2) el titulo, (3) enlace o (4)el elemento descripción en un RSS, relacionado con la función gerHTML en server/inc/rss/item.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"6EC05573-9E95-4E38-9BB7-8EEC2207F93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:*","matchCriteriaId":"65413C6D-2477-46BE-A9E0-DFEBFA4984B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:*","matchCriteriaId":"D626E83E-B8D2-488C-86A1-E9EEE26338AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:*","matchCriteriaId":"3BC20926-AA4F-411B-AC96-F411E7A00ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:*","matchCriteriaId":"B6B4CF45-C28E-4F9B-8593-FC3227FD3B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:*","matchCriteriaId":"DCB40BD9-01B0-43A8-B382-6AF471D4E5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:*","matchCriteriaId":"273ACE18-425A-42F4-A1C4-A729E61C06D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:*","matchCriteriaId":"A049A822-9A1D-4A67-B3C7-87F37CE14966"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:*","matchCriteriaId":"FF6A3368-1C9F-404C-B22C-5BA19F8C89DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:*","matchCriteriaId":"421C0DFF-83B4-494F-B56F-80FCB7465383"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:*","matchCriteriaId":"CD09ABFB-431C-4F81-8B75-1E310FF1DEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:*","matchCriteriaId":"10D46E21-2A13-4378-B9D9-77B75C574053"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:*","matchCriteriaId":"5637C09C-F43E-41DB-A8C1-AE08DEC5E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:*","matchCriteriaId":"2F1E0EB6-D30B-4448-A61D-79F3720ED199"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:*","matchCriteriaId":"7EB1408C-6076-45C4-8532-41B946E9F2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:*","matchCriteriaId":"64040FAE-3457-4153-84F5-DB4C0F298DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:*","matchCriteriaId":"53883B0E-662C-41E6-B0E4-44052243B8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:*","matchCriteriaId":"659D6D8F-6E4F-4961-88D8-93AEBBBACA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:*","matchCriteriaId":"F5CD4B14-457C-493B-8206-63AC78C677BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:*","matchCriteriaId":"DD881C18-E67E-431D-BF64-E9AD74B623B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:*","matchCriteriaId":"9498A897-FC1E-42F7-A766-F2F3F3AD73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:*","matchCriteriaId":"86FD3A63-6985-4557-BCBF-A6C3C62965C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:*","matchCriteriaId":"5C730232-BE10-485B-B7E6-C7221FF830CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:*","matchCriteriaId":"75BCAB2F-D3DC-446C-B260-E6528D424574"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:*","matchCriteriaId":"7517B62B-E8BD-46BE-8876-210AF4BBCFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:*","matchCriteriaId":"380A25A3-84E8-4660-8E1E-D9F86CCDF451"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:*","matchCriteriaId":"2F811823-8E74-4940-82BF-0BB874A2EDAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:*","matchCriteriaId":"0D881063-B61C-4C8D-BA5B-C924968284C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:*","matchCriteriaId":"BA4F4994-9B1C-4975-80A0-48CFC8A59F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:*","matchCriteriaId":"FC092BCB-C03D-489A-8169-A78672DDAC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:*","matchCriteriaId":"82BCBCDB-1C96-4AD9-9BD5-6C6F28B0A59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:*","matchCriteriaId":"377D2092-82CD-4BE5-92CB-1B6970C9B343"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5637CE33-3C19-4BF5-9768-B680FC16DD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27100290-294C-4938-9E31-5E4EC1CC0DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"257EF71D-D21C-42D6-B799-0CDE4D48D8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"885DC4F5-0809-4BD0-8EB9-26B6F7AC5D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"772781AF-D898-41E0-94CA-5E4E68263B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:*","matchCriteriaId":"EF8458C9-BB0B-450A-906E-982183D2D112"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:*","matchCriteriaId":"E6E554A0-B31E-42EC-AC96-02928324D8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"516EB69D-9AA3-4E39-8902-54F1BE74FF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAAD90B-2109-4EA8-B6E9-6DC097E46BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C66CFCE9-52A8-4F40-A256-A4246B9A0345"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"20CB84F9-D621-4C76-B7FD-7CBE9126C7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"16F5651E-AFC4-4ED5-89A3-4FFF17849892"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9E8EF6-6EDA-4204-A9BE-9F0A1FA67F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B52C4762-F008-4A95-9DB2-0187C918D2D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0D7D1390-BB52-4E73-9D53-AC7C890273FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"16D2E155-E79B-4F92-8150-49385D9ED683"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7243D261-9880-4FC1-A709-B270D451819C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ECA1EEB6-F96D-4CB4-B19B-FE298A7106CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D65F51-8021-47C5-A587-AC1F08A690E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"92E5E64D-EBF3-44AA-A986-B3A668CA84FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"E436882C-626F-44E0-92C1-AB42679DB36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A838F48D-65D4-4D0A-AD70-770E564C414F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"528BA85A-A479-4AE5-AE58-4F223EC70CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7C4DFEC2-E095-4670-A87D-9686FFBACE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"EE29A7F9-B10D-43DE-ACF9-82799A5AB622"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"7C1CE47F-2420-455E-8D59-9115F8553786"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"9479F83D-4C9B-4E09-8173-FEF3D648D173"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"78426705-364D-44A8-9D11-52FA221501F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84F5E9BC-1925-4109-88CA-BDDA2760A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"34006ADE-3045-4730-9905-F2739F03B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"16C43E85-FCD9-4C27-9D0F-FDBD6C6BE11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"79BE6199-BDF4-492F-AD3F-8F228B3333D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AD60C3BF-BFA2-48DE-BFF8-862BEB55DC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F59FE641-F8C2-4499-A68F-4C7B67446B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BCB7BC6-8B20-4BA0-A228-FFA64B9D2679"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A5F0B2E0-74A3-40B7-AF4E-547401ABF7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"58A59BCD-74B9-4E7F-A79A-293E75ED1457"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AFCD42-008D-47C3-B91F-CDBF753B4DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2F5318A0-2F46-483C-B4C1-DE5E78E2B206"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A5203E03-7810-4FBD-BC29-85D4FC0C44F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C6A978E8-6F27-4FAA-9B1C-EAD110F3A626"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ADB831B3-D03A-4597-9DA0-0C1101751A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"12E0046D-0F36-4882-BF2E-0C54A6DAF3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6628764-234B-4B2F-BB96-BC502781D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"534C2A48-DC12-41D1-A848-5826D8D00A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"33E40169-02AC-4F18-B085-58B16073CDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"31F92171-ACF9-49F7-88FA-662FE6EC05E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8C4E23C-34D9-4655-9FEF-E99D94BFCBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C585DB99-2778-473C-9D20-5B707C12E961"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B7888DF8-A12C-4583-A4A1-8FD77F258BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"39616720-7128-4364-A376-4F272DE6052E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D109C95C-E55B-4E26-818D-1F6A5EF879FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E23876D5-6BD5-446A-A8B8-EFF5293E2C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9142EEFA-753E-4CB2-97E0-644EF942E149"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90B14DCB-3070-4A68-AE00-4004542739C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C3C5AF-13AE-482C-ACE8-8E9EA2A104E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"8BE0C1F2-E9EB-441F-BA29-26F8AE5CD53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:*","matchCriteriaId":"B825E8AC-E3E0-4D6F-AEB1-1C8571F42B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:*","matchCriteriaId":"B629D1A8-4D8A-4814-B88F-D26DE0A8AD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:*","matchCriteriaId":"626E5CBB-A953-4D6C-9AA3-BD8FC44AC310"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:*","matchCriteriaId":"B00D854B-D34B-41BD-9B28-573B0A66FF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:*","matchCriteriaId":"FF300F62-E247-4A6F-89B1-F27CD22D2AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:*","matchCriteriaId":"BE9F5609-2C2B-4D57-974F-E4AA7A1354F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:*","matchCriteriaId":"69EE8E28-E95B-48F9-87BF-9A6A713C614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:*","matchCriteriaId":"60BE3477-86AF-4301-905C-B2D41347C95D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:*","matchCriteriaId":"23CED09C-9C1F-4E98-87E4-FF1AF3FDB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:*","matchCriteriaId":"16A67BBF-D7D2-4780-BB52-6247B1C2BF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:*","matchCriteriaId":"11F50DDD-14C5-430C-BA64-39DBF86C8195"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:*","matchCriteriaId":"E48D0885-9A43-41CF-97F5-DEE654DEB4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:*","matchCriteriaId":"F36F5040-A148-4D41-AEDE-E2031FC0783A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:*","matchCriteriaId":"D3D444E7-8533-49C9-BEA5-95B1867D5B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:*","matchCriteriaId":"AC9FE52B-976E-45D5-9F72-0DA02A549283"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:*","matchCriteriaId":"E07F2597-CBEB-4CF4-853B-432C90A0E5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:*","matchCriteriaId":"000C3F0B-5083-4E2A-9C3B-A3BBD8F5FC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:*","matchCriteriaId":"0C2E1F50-0C4F-49BD-837B-E0A6AA897F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:*","matchCriteriaId":"2D7527FB-5E18-4E25-A344-6FF3AD48F440"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:*","matchCriteriaId":"EA4C32D2-A4D3-4D1D-8C40-A19E71D2CD8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:*","matchCriteriaId":"D96B83F5-78EF-46C7-AEF3-B07DC47AD36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:*","matchCriteriaId":"3E812EF7-F33C-4A9E-B21C-9E713EAA5DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:*","matchCriteriaId":"3313DDB5-AB69-4FC6-B404-7161DFD42065"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:*","matchCriteriaId":"AC5A2472-E80B-453E-AC87-61755089F816"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:*","matchCriteriaId":"CBE775DD-1332-4DBD-B43E-82DEDF65EDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:*","matchCriteriaId":"81AACBDC-A27F-42E9-9503-BEAE6277C38E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:*","matchCriteriaId":"994FED3B-18B0-43CD-AF69-71363EB69A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:*","matchCriteriaId":"B8C1006A-9BA2-4E2E-934A-E6D84FE31F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:*","matchCriteriaId":"251150DB-9F36-4024-83E5-CCB61788D591"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:*","matchCriteriaId":"1E018C4E-3442-43DF-A62C-8EF32F582376"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:*","matchCriteriaId":"D9E5C940-3411-4298-AF22-4E0CD0897068"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"40084349-0248-4DCA-84FF-BAFC61913B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6E67D777-B1EE-467C-A9F6-3FE3AC602BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA9BA513-7DFF-4DA5-A850-1932332AB713"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"68B44F9B-36F5-42A5-8007-F4437C5956FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"11D9460D-8004-4C48-8435-5BB55E18407F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:*","matchCriteriaId":"1D37D32E-49FF-48AE-AB1D-5F83FB4ABC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:*","matchCriteriaId":"549C6763-6BAC-418D-801E-BA219BA84306"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"78C15656-8A36-446F-B72E-B5D8D02118C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A1F6586C-A227-4ABA-BBCD-7608BC3AE986"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35887E35-7075-4DA7-9DA0-43784E83E523"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C96A0CF4-4646-42C2-A2D1-D143307AA075"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4587B57E-E5CF-46F7-914C-3E3FF62ABF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8F92BC1B-439E-497E-AE9A-0962C665EA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2245DA60-68D3-4FF0-9E22-EE469BFDCA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"EF984C80-8F2A-444E-8176-AF4207659443"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"998D7471-D097-40FF-9749-D1F1F540676C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B349E3F2-5D93-4448-B901-5A51682A095D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"426A5CA3-5AF9-409F-8CC5-8B012F9B4D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"CB35A154-98E1-4EF7-9B5A-1691023E69AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"C34887E6-AB33-48C1-BD0A-015C141498C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A3CDBBC7-EEF8-40A4-B32D-528370E85361"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"2E324B02-9C59-44D8-AC8A-899130501C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"144BFD52-D569-42B1-BBBA-BA6F3B41C0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D3B6E6-8B47-4790-9293-254A446256AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4F0899F9-F7FC-459A-BF39-A2590F4C948A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D1571098-025D-4F9E-9F5B-8CF4E47CB0A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"8BC9A8D1-95F8-41F1-B282-548B654AC024"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"15A7C86B-1F63-492E-BDBF-3AD1F27F3ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FAF58F47-FBA0-472F-84B2-37C40AE9F11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D208182-D571-4756-953B-84647B7C30DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ADC5EF5A-FB10-4362-BF83-F2D399677C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1E6375DB-EAD9-40DB-ABC8-9ED47937335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1465311E-9F28-4D02-87A1-8262F0E91363"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6B4565A0-4CB2-4BB8-8747-88C2E1DB04BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8111EB25-993B-40D4-9A3F-B0A379FF2544"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A3932C58-3E6B-4CE8-AD86-5258C657B9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"4E884468-C200-4994-8073-A06145DD32EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA8B9FC-58C3-4CDB-B3C9-DCE3FC6DD071"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"44F1065B-3CCB-4690-9623-948AE5480388"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5A195789-BE60-41D0-A09F-297C481E1741"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"99EA6D4D-4818-4B90-A431-F5DB4AEEAC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC60DE-9C65-48C8-B9F9-CBB99D6E6EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9D72538A-63D7-4714-819F-D84E23A477C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C48479D4-85A4-471C-BBE3-95EC7ED42551"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17670892-BDEB-435D-92A8-4D362FB48235"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0233108-DAE6-42A5-B525-6D8F91298183"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0FCFDA77-070C-42E6-897C-DB4CA6FDD0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5090C955-3E5A-4CDF-A2B2-EF5A181BE4FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"33D199BC-D664-48A8-8D0C-5496C5DFF8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0E6327BC-34F7-46E9-ABB3-9FA8B9C5F684"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D93FD709-6918-4F00-8C90-416F0E4208DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9179B-25BD-4AF6-9ED1-1C0B4439A726"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"0E7A7D8F-0669-42D0-A7F8-447E05EB5F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"88A2049F-CAEC-47A5-9C22-0295B08CAA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F7DF0BF3-2284-488D-8C62-DB9766445556"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"00B1AF41-963E-470C-9EC3-4ECD49EB1BC7"}]}]}],"references":[{"url":"http://osvdb.org/54226","source":"cve@mitre.org"},{"url":"http://osvdb.org/54227","source":"cve@mitre.org"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-001","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-002","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/503225/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503229/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34825","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022167","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022168","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1253","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50331","source":"cve@mitre.org"},{"url":"http://osvdb.org/54226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/503225/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503229/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1468","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T20:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el formulario de búsqueda en server/webmail.php en el componente Groupware en IceWarp eMail Server y WebMail Server anteriores a v9.4.2 permite a usuarios remotos autenticados ejecutar comandos SQL de forma arbitraria a través de los elementos (1) sql y (2) order_by en un petición de búsqueda XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"6EC05573-9E95-4E38-9BB7-8EEC2207F93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:*","matchCriteriaId":"65413C6D-2477-46BE-A9E0-DFEBFA4984B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:*","matchCriteriaId":"D626E83E-B8D2-488C-86A1-E9EEE26338AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:*","matchCriteriaId":"3BC20926-AA4F-411B-AC96-F411E7A00ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:*","matchCriteriaId":"B6B4CF45-C28E-4F9B-8593-FC3227FD3B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:*","matchCriteriaId":"DCB40BD9-01B0-43A8-B382-6AF471D4E5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:*","matchCriteriaId":"273ACE18-425A-42F4-A1C4-A729E61C06D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:*","matchCriteriaId":"A049A822-9A1D-4A67-B3C7-87F37CE14966"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:*","matchCriteriaId":"FF6A3368-1C9F-404C-B22C-5BA19F8C89DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:*","matchCriteriaId":"421C0DFF-83B4-494F-B56F-80FCB7465383"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:*","matchCriteriaId":"CD09ABFB-431C-4F81-8B75-1E310FF1DEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:*","matchCriteriaId":"10D46E21-2A13-4378-B9D9-77B75C574053"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:*","matchCriteriaId":"5637C09C-F43E-41DB-A8C1-AE08DEC5E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:*","matchCriteriaId":"2F1E0EB6-D30B-4448-A61D-79F3720ED199"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:*","matchCriteriaId":"7EB1408C-6076-45C4-8532-41B946E9F2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:*","matchCriteriaId":"64040FAE-3457-4153-84F5-DB4C0F298DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:*","matchCriteriaId":"53883B0E-662C-41E6-B0E4-44052243B8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:*","matchCriteriaId":"659D6D8F-6E4F-4961-88D8-93AEBBBACA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:*","matchCriteriaId":"F5CD4B14-457C-493B-8206-63AC78C677BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:*","matchCriteriaId":"DD881C18-E67E-431D-BF64-E9AD74B623B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:*","matchCriteriaId":"9498A897-FC1E-42F7-A766-F2F3F3AD73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:*","matchCriteriaId":"86FD3A63-6985-4557-BCBF-A6C3C62965C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:*","matchCriteriaId":"5C730232-BE10-485B-B7E6-C7221FF830CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:*","matchCriteriaId":"75BCAB2F-D3DC-446C-B260-E6528D424574"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:*","matchCriteriaId":"7517B62B-E8BD-46BE-8876-210AF4BBCFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:*","matchCriteriaId":"380A25A3-84E8-4660-8E1E-D9F86CCDF451"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:*","matchCriteriaId":"2F811823-8E74-4940-82BF-0BB874A2EDAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:*","matchCriteriaId":"0D881063-B61C-4C8D-BA5B-C924968284C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:*","matchCriteriaId":"BA4F4994-9B1C-4975-80A0-48CFC8A59F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:*","matchCriteriaId":"FC092BCB-C03D-489A-8169-A78672DDAC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:*","matchCriteriaId":"82BCBCDB-1C96-4AD9-9BD5-6C6F28B0A59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:*","matchCriteriaId":"377D2092-82CD-4BE5-92CB-1B6970C9B343"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5637CE33-3C19-4BF5-9768-B680FC16DD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27100290-294C-4938-9E31-5E4EC1CC0DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"257EF71D-D21C-42D6-B799-0CDE4D48D8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"885DC4F5-0809-4BD0-8EB9-26B6F7AC5D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"772781AF-D898-41E0-94CA-5E4E68263B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:*","matchCriteriaId":"EF8458C9-BB0B-450A-906E-982183D2D112"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:*","matchCriteriaId":"E6E554A0-B31E-42EC-AC96-02928324D8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"516EB69D-9AA3-4E39-8902-54F1BE74FF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAAD90B-2109-4EA8-B6E9-6DC097E46BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C66CFCE9-52A8-4F40-A256-A4246B9A0345"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"20CB84F9-D621-4C76-B7FD-7CBE9126C7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"16F5651E-AFC4-4ED5-89A3-4FFF17849892"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9E8EF6-6EDA-4204-A9BE-9F0A1FA67F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B52C4762-F008-4A95-9DB2-0187C918D2D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0D7D1390-BB52-4E73-9D53-AC7C890273FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"16D2E155-E79B-4F92-8150-49385D9ED683"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7243D261-9880-4FC1-A709-B270D451819C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ECA1EEB6-F96D-4CB4-B19B-FE298A7106CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D65F51-8021-47C5-A587-AC1F08A690E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"92E5E64D-EBF3-44AA-A986-B3A668CA84FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"E436882C-626F-44E0-92C1-AB42679DB36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A838F48D-65D4-4D0A-AD70-770E564C414F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"528BA85A-A479-4AE5-AE58-4F223EC70CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7C4DFEC2-E095-4670-A87D-9686FFBACE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"EE29A7F9-B10D-43DE-ACF9-82799A5AB622"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"7C1CE47F-2420-455E-8D59-9115F8553786"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"9479F83D-4C9B-4E09-8173-FEF3D648D173"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"78426705-364D-44A8-9D11-52FA221501F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84F5E9BC-1925-4109-88CA-BDDA2760A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"34006ADE-3045-4730-9905-F2739F03B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"16C43E85-FCD9-4C27-9D0F-FDBD6C6BE11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"79BE6199-BDF4-492F-AD3F-8F228B3333D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AD60C3BF-BFA2-48DE-BFF8-862BEB55DC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F59FE641-F8C2-4499-A68F-4C7B67446B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BCB7BC6-8B20-4BA0-A228-FFA64B9D2679"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A5F0B2E0-74A3-40B7-AF4E-547401ABF7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"58A59BCD-74B9-4E7F-A79A-293E75ED1457"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AFCD42-008D-47C3-B91F-CDBF753B4DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2F5318A0-2F46-483C-B4C1-DE5E78E2B206"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A5203E03-7810-4FBD-BC29-85D4FC0C44F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C6A978E8-6F27-4FAA-9B1C-EAD110F3A626"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ADB831B3-D03A-4597-9DA0-0C1101751A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"12E0046D-0F36-4882-BF2E-0C54A6DAF3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6628764-234B-4B2F-BB96-BC502781D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"534C2A48-DC12-41D1-A848-5826D8D00A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"33E40169-02AC-4F18-B085-58B16073CDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"31F92171-ACF9-49F7-88FA-662FE6EC05E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8C4E23C-34D9-4655-9FEF-E99D94BFCBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C585DB99-2778-473C-9D20-5B707C12E961"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B7888DF8-A12C-4583-A4A1-8FD77F258BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"39616720-7128-4364-A376-4F272DE6052E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D109C95C-E55B-4E26-818D-1F6A5EF879FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E23876D5-6BD5-446A-A8B8-EFF5293E2C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9142EEFA-753E-4CB2-97E0-644EF942E149"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90B14DCB-3070-4A68-AE00-4004542739C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C3C5AF-13AE-482C-ACE8-8E9EA2A104E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"8BE0C1F2-E9EB-441F-BA29-26F8AE5CD53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:*","matchCriteriaId":"B825E8AC-E3E0-4D6F-AEB1-1C8571F42B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:*","matchCriteriaId":"B629D1A8-4D8A-4814-B88F-D26DE0A8AD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:*","matchCriteriaId":"626E5CBB-A953-4D6C-9AA3-BD8FC44AC310"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:*","matchCriteriaId":"B00D854B-D34B-41BD-9B28-573B0A66FF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:*","matchCriteriaId":"FF300F62-E247-4A6F-89B1-F27CD22D2AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:*","matchCriteriaId":"BE9F5609-2C2B-4D57-974F-E4AA7A1354F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:*","matchCriteriaId":"69EE8E28-E95B-48F9-87BF-9A6A713C614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:*","matchCriteriaId":"60BE3477-86AF-4301-905C-B2D41347C95D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:*","matchCriteriaId":"23CED09C-9C1F-4E98-87E4-FF1AF3FDB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:*","matchCriteriaId":"16A67BBF-D7D2-4780-BB52-6247B1C2BF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:*","matchCriteriaId":"11F50DDD-14C5-430C-BA64-39DBF86C8195"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:*","matchCriteriaId":"E48D0885-9A43-41CF-97F5-DEE654DEB4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:*","matchCriteriaId":"F36F5040-A148-4D41-AEDE-E2031FC0783A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:*","matchCriteriaId":"D3D444E7-8533-49C9-BEA5-95B1867D5B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:*","matchCriteriaId":"AC9FE52B-976E-45D5-9F72-0DA02A549283"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:*","matchCriteriaId":"E07F2597-CBEB-4CF4-853B-432C90A0E5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:*","matchCriteriaId":"000C3F0B-5083-4E2A-9C3B-A3BBD8F5FC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:*","matchCriteriaId":"0C2E1F50-0C4F-49BD-837B-E0A6AA897F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:*","matchCriteriaId":"2D7527FB-5E18-4E25-A344-6FF3AD48F440"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:*","matchCriteriaId":"EA4C32D2-A4D3-4D1D-8C40-A19E71D2CD8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:*","matchCriteriaId":"D96B83F5-78EF-46C7-AEF3-B07DC47AD36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:*","matchCriteriaId":"3E812EF7-F33C-4A9E-B21C-9E713EAA5DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:*","matchCriteriaId":"3313DDB5-AB69-4FC6-B404-7161DFD42065"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:*","matchCriteriaId":"AC5A2472-E80B-453E-AC87-61755089F816"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:*","matchCriteriaId":"CBE775DD-1332-4DBD-B43E-82DEDF65EDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:*","matchCriteriaId":"81AACBDC-A27F-42E9-9503-BEAE6277C38E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:*","matchCriteriaId":"994FED3B-18B0-43CD-AF69-71363EB69A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:*","matchCriteriaId":"B8C1006A-9BA2-4E2E-934A-E6D84FE31F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:*","matchCriteriaId":"251150DB-9F36-4024-83E5-CCB61788D591"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:*","matchCriteriaId":"1E018C4E-3442-43DF-A62C-8EF32F582376"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:*","matchCriteriaId":"D9E5C940-3411-4298-AF22-4E0CD0897068"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"40084349-0248-4DCA-84FF-BAFC61913B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6E67D777-B1EE-467C-A9F6-3FE3AC602BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA9BA513-7DFF-4DA5-A850-1932332AB713"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"68B44F9B-36F5-42A5-8007-F4437C5956FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"11D9460D-8004-4C48-8435-5BB55E18407F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:*","matchCriteriaId":"1D37D32E-49FF-48AE-AB1D-5F83FB4ABC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:*","matchCriteriaId":"549C6763-6BAC-418D-801E-BA219BA84306"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"78C15656-8A36-446F-B72E-B5D8D02118C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A1F6586C-A227-4ABA-BBCD-7608BC3AE986"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35887E35-7075-4DA7-9DA0-43784E83E523"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C96A0CF4-4646-42C2-A2D1-D143307AA075"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4587B57E-E5CF-46F7-914C-3E3FF62ABF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8F92BC1B-439E-497E-AE9A-0962C665EA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2245DA60-68D3-4FF0-9E22-EE469BFDCA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"EF984C80-8F2A-444E-8176-AF4207659443"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"998D7471-D097-40FF-9749-D1F1F540676C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B349E3F2-5D93-4448-B901-5A51682A095D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"426A5CA3-5AF9-409F-8CC5-8B012F9B4D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"CB35A154-98E1-4EF7-9B5A-1691023E69AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"C34887E6-AB33-48C1-BD0A-015C141498C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A3CDBBC7-EEF8-40A4-B32D-528370E85361"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"2E324B02-9C59-44D8-AC8A-899130501C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"144BFD52-D569-42B1-BBBA-BA6F3B41C0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D3B6E6-8B47-4790-9293-254A446256AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4F0899F9-F7FC-459A-BF39-A2590F4C948A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D1571098-025D-4F9E-9F5B-8CF4E47CB0A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"8BC9A8D1-95F8-41F1-B282-548B654AC024"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"15A7C86B-1F63-492E-BDBF-3AD1F27F3ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FAF58F47-FBA0-472F-84B2-37C40AE9F11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D208182-D571-4756-953B-84647B7C30DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ADC5EF5A-FB10-4362-BF83-F2D399677C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1E6375DB-EAD9-40DB-ABC8-9ED47937335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1465311E-9F28-4D02-87A1-8262F0E91363"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6B4565A0-4CB2-4BB8-8747-88C2E1DB04BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8111EB25-993B-40D4-9A3F-B0A379FF2544"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A3932C58-3E6B-4CE8-AD86-5258C657B9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"4E884468-C200-4994-8073-A06145DD32EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA8B9FC-58C3-4CDB-B3C9-DCE3FC6DD071"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"44F1065B-3CCB-4690-9623-948AE5480388"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5A195789-BE60-41D0-A09F-297C481E1741"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"99EA6D4D-4818-4B90-A431-F5DB4AEEAC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC60DE-9C65-48C8-B9F9-CBB99D6E6EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9D72538A-63D7-4714-819F-D84E23A477C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C48479D4-85A4-471C-BBE3-95EC7ED42551"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17670892-BDEB-435D-92A8-4D362FB48235"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0233108-DAE6-42A5-B525-6D8F91298183"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0FCFDA77-070C-42E6-897C-DB4CA6FDD0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5090C955-3E5A-4CDF-A2B2-EF5A181BE4FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"33D199BC-D664-48A8-8D0C-5496C5DFF8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0E6327BC-34F7-46E9-ABB3-9FA8B9C5F684"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D93FD709-6918-4F00-8C90-416F0E4208DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9179B-25BD-4AF6-9ED1-1C0B4439A726"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"0E7A7D8F-0669-42D0-A7F8-447E05EB5F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"88A2049F-CAEC-47A5-9C22-0295B08CAA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F7DF0BF3-2284-488D-8C62-DB9766445556"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"00B1AF41-963E-470C-9EC3-4ECD49EB1BC7"}]}]}],"references":[{"url":"http://osvdb.org/54228","source":"cve@mitre.org"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-003","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503226/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022169","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1253","source":"cve@mitre.org"},{"url":"http://osvdb.org/54228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503226/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1469","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element of an XML document, as demonstrated by triggering an e-mail message from the server that contains a user's correct credentials, and requests that the user compose a reply that includes this message."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF en la implementación Forgot Password en server/webmail.php en IceWarp eMail Server y WebMail Server anterior a v9.4.2 hace mas facil para atacantes remotos engañar a un usuario para la revelación de credenciales a través de secuencias CRLF precediendo una cabecera de respuesta en el elemento \"subject\" de un documento XML, como se demostró mediante el envío de un mensaje de correo electrónico que contenga las credenciales de usuario desde el servidor, las peticiones para componer la respuesta al usuario, incluyen este mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"6EC05573-9E95-4E38-9BB7-8EEC2207F93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:*","matchCriteriaId":"65413C6D-2477-46BE-A9E0-DFEBFA4984B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:*","matchCriteriaId":"D626E83E-B8D2-488C-86A1-E9EEE26338AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:*","matchCriteriaId":"3BC20926-AA4F-411B-AC96-F411E7A00ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:*","matchCriteriaId":"B6B4CF45-C28E-4F9B-8593-FC3227FD3B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:*","matchCriteriaId":"DCB40BD9-01B0-43A8-B382-6AF471D4E5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:*","matchCriteriaId":"273ACE18-425A-42F4-A1C4-A729E61C06D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:*","matchCriteriaId":"A049A822-9A1D-4A67-B3C7-87F37CE14966"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:*","matchCriteriaId":"FF6A3368-1C9F-404C-B22C-5BA19F8C89DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:*","matchCriteriaId":"421C0DFF-83B4-494F-B56F-80FCB7465383"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:*","matchCriteriaId":"CD09ABFB-431C-4F81-8B75-1E310FF1DEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:*","matchCriteriaId":"10D46E21-2A13-4378-B9D9-77B75C574053"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:*","matchCriteriaId":"5637C09C-F43E-41DB-A8C1-AE08DEC5E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:*","matchCriteriaId":"2F1E0EB6-D30B-4448-A61D-79F3720ED199"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:*","matchCriteriaId":"7EB1408C-6076-45C4-8532-41B946E9F2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:*","matchCriteriaId":"64040FAE-3457-4153-84F5-DB4C0F298DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:*","matchCriteriaId":"53883B0E-662C-41E6-B0E4-44052243B8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:*","matchCriteriaId":"659D6D8F-6E4F-4961-88D8-93AEBBBACA2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:*","matchCriteriaId":"F5CD4B14-457C-493B-8206-63AC78C677BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:*","matchCriteriaId":"DD881C18-E67E-431D-BF64-E9AD74B623B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:*","matchCriteriaId":"9498A897-FC1E-42F7-A766-F2F3F3AD73DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:*","matchCriteriaId":"86FD3A63-6985-4557-BCBF-A6C3C62965C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:*","matchCriteriaId":"5C730232-BE10-485B-B7E6-C7221FF830CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:*","matchCriteriaId":"75BCAB2F-D3DC-446C-B260-E6528D424574"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:*","matchCriteriaId":"7517B62B-E8BD-46BE-8876-210AF4BBCFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:*","matchCriteriaId":"380A25A3-84E8-4660-8E1E-D9F86CCDF451"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:*","matchCriteriaId":"2F811823-8E74-4940-82BF-0BB874A2EDAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:*","matchCriteriaId":"0D881063-B61C-4C8D-BA5B-C924968284C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:*","matchCriteriaId":"BA4F4994-9B1C-4975-80A0-48CFC8A59F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:*","matchCriteriaId":"FC092BCB-C03D-489A-8169-A78672DDAC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:*","matchCriteriaId":"82BCBCDB-1C96-4AD9-9BD5-6C6F28B0A59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:*","matchCriteriaId":"377D2092-82CD-4BE5-92CB-1B6970C9B343"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5637CE33-3C19-4BF5-9768-B680FC16DD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27100290-294C-4938-9E31-5E4EC1CC0DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"257EF71D-D21C-42D6-B799-0CDE4D48D8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"885DC4F5-0809-4BD0-8EB9-26B6F7AC5D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"772781AF-D898-41E0-94CA-5E4E68263B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:*","matchCriteriaId":"EF8458C9-BB0B-450A-906E-982183D2D112"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:*","matchCriteriaId":"E6E554A0-B31E-42EC-AC96-02928324D8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"516EB69D-9AA3-4E39-8902-54F1BE74FF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAAD90B-2109-4EA8-B6E9-6DC097E46BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C66CFCE9-52A8-4F40-A256-A4246B9A0345"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"20CB84F9-D621-4C76-B7FD-7CBE9126C7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"16F5651E-AFC4-4ED5-89A3-4FFF17849892"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9E8EF6-6EDA-4204-A9BE-9F0A1FA67F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B52C4762-F008-4A95-9DB2-0187C918D2D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0D7D1390-BB52-4E73-9D53-AC7C890273FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"16D2E155-E79B-4F92-8150-49385D9ED683"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7243D261-9880-4FC1-A709-B270D451819C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"ECA1EEB6-F96D-4CB4-B19B-FE298A7106CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D65F51-8021-47C5-A587-AC1F08A690E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"92E5E64D-EBF3-44AA-A986-B3A668CA84FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"E436882C-626F-44E0-92C1-AB42679DB36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A838F48D-65D4-4D0A-AD70-770E564C414F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"528BA85A-A479-4AE5-AE58-4F223EC70CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7C4DFEC2-E095-4670-A87D-9686FFBACE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"EE29A7F9-B10D-43DE-ACF9-82799A5AB622"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"7C1CE47F-2420-455E-8D59-9115F8553786"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"9479F83D-4C9B-4E09-8173-FEF3D648D173"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"78426705-364D-44A8-9D11-52FA221501F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84F5E9BC-1925-4109-88CA-BDDA2760A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"34006ADE-3045-4730-9905-F2739F03B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"16C43E85-FCD9-4C27-9D0F-FDBD6C6BE11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"79BE6199-BDF4-492F-AD3F-8F228B3333D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AD60C3BF-BFA2-48DE-BFF8-862BEB55DC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F59FE641-F8C2-4499-A68F-4C7B67446B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BCB7BC6-8B20-4BA0-A228-FFA64B9D2679"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A5F0B2E0-74A3-40B7-AF4E-547401ABF7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"58A59BCD-74B9-4E7F-A79A-293E75ED1457"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AFCD42-008D-47C3-B91F-CDBF753B4DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2F5318A0-2F46-483C-B4C1-DE5E78E2B206"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A5203E03-7810-4FBD-BC29-85D4FC0C44F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C6A978E8-6F27-4FAA-9B1C-EAD110F3A626"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"ADB831B3-D03A-4597-9DA0-0C1101751A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"12E0046D-0F36-4882-BF2E-0C54A6DAF3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"B6628764-234B-4B2F-BB96-BC502781D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"534C2A48-DC12-41D1-A848-5826D8D00A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"33E40169-02AC-4F18-B085-58B16073CDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"31F92171-ACF9-49F7-88FA-662FE6EC05E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8C4E23C-34D9-4655-9FEF-E99D94BFCBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C585DB99-2778-473C-9D20-5B707C12E961"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B7888DF8-A12C-4583-A4A1-8FD77F258BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"39616720-7128-4364-A376-4F272DE6052E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D109C95C-E55B-4E26-818D-1F6A5EF879FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E23876D5-6BD5-446A-A8B8-EFF5293E2C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9142EEFA-753E-4CB2-97E0-644EF942E149"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90B14DCB-3070-4A68-AE00-4004542739C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C3C5AF-13AE-482C-ACE8-8E9EA2A104E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"8BE0C1F2-E9EB-441F-BA29-26F8AE5CD53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:*","matchCriteriaId":"B825E8AC-E3E0-4D6F-AEB1-1C8571F42B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:*","matchCriteriaId":"B629D1A8-4D8A-4814-B88F-D26DE0A8AD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:*","matchCriteriaId":"626E5CBB-A953-4D6C-9AA3-BD8FC44AC310"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:*","matchCriteriaId":"B00D854B-D34B-41BD-9B28-573B0A66FF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:*","matchCriteriaId":"FF300F62-E247-4A6F-89B1-F27CD22D2AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:*","matchCriteriaId":"BE9F5609-2C2B-4D57-974F-E4AA7A1354F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:*","matchCriteriaId":"69EE8E28-E95B-48F9-87BF-9A6A713C614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:*","matchCriteriaId":"60BE3477-86AF-4301-905C-B2D41347C95D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:*","matchCriteriaId":"23CED09C-9C1F-4E98-87E4-FF1AF3FDB3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:*","matchCriteriaId":"16A67BBF-D7D2-4780-BB52-6247B1C2BF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:*","matchCriteriaId":"11F50DDD-14C5-430C-BA64-39DBF86C8195"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:*","matchCriteriaId":"E48D0885-9A43-41CF-97F5-DEE654DEB4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:*","matchCriteriaId":"F36F5040-A148-4D41-AEDE-E2031FC0783A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:*","matchCriteriaId":"D3D444E7-8533-49C9-BEA5-95B1867D5B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:*","matchCriteriaId":"AC9FE52B-976E-45D5-9F72-0DA02A549283"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:*","matchCriteriaId":"E07F2597-CBEB-4CF4-853B-432C90A0E5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:*","matchCriteriaId":"000C3F0B-5083-4E2A-9C3B-A3BBD8F5FC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:*","matchCriteriaId":"0C2E1F50-0C4F-49BD-837B-E0A6AA897F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:*","matchCriteriaId":"2D7527FB-5E18-4E25-A344-6FF3AD48F440"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:*","matchCriteriaId":"EA4C32D2-A4D3-4D1D-8C40-A19E71D2CD8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:*","matchCriteriaId":"D96B83F5-78EF-46C7-AEF3-B07DC47AD36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:*","matchCriteriaId":"3E812EF7-F33C-4A9E-B21C-9E713EAA5DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:*","matchCriteriaId":"3313DDB5-AB69-4FC6-B404-7161DFD42065"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:*","matchCriteriaId":"AC5A2472-E80B-453E-AC87-61755089F816"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:*","matchCriteriaId":"CBE775DD-1332-4DBD-B43E-82DEDF65EDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:*","matchCriteriaId":"81AACBDC-A27F-42E9-9503-BEAE6277C38E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:*","matchCriteriaId":"994FED3B-18B0-43CD-AF69-71363EB69A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:*","matchCriteriaId":"B8C1006A-9BA2-4E2E-934A-E6D84FE31F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:*","matchCriteriaId":"251150DB-9F36-4024-83E5-CCB61788D591"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:*","matchCriteriaId":"1E018C4E-3442-43DF-A62C-8EF32F582376"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:*","matchCriteriaId":"D9E5C940-3411-4298-AF22-4E0CD0897068"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"40084349-0248-4DCA-84FF-BAFC61913B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6E67D777-B1EE-467C-A9F6-3FE3AC602BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA9BA513-7DFF-4DA5-A850-1932332AB713"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"68B44F9B-36F5-42A5-8007-F4437C5956FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"11D9460D-8004-4C48-8435-5BB55E18407F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:*","matchCriteriaId":"1D37D32E-49FF-48AE-AB1D-5F83FB4ABC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:*","matchCriteriaId":"549C6763-6BAC-418D-801E-BA219BA84306"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"78C15656-8A36-446F-B72E-B5D8D02118C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A1F6586C-A227-4ABA-BBCD-7608BC3AE986"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35887E35-7075-4DA7-9DA0-43784E83E523"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C96A0CF4-4646-42C2-A2D1-D143307AA075"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4587B57E-E5CF-46F7-914C-3E3FF62ABF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8F92BC1B-439E-497E-AE9A-0962C665EA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2245DA60-68D3-4FF0-9E22-EE469BFDCA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"EF984C80-8F2A-444E-8176-AF4207659443"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"998D7471-D097-40FF-9749-D1F1F540676C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B349E3F2-5D93-4448-B901-5A51682A095D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"426A5CA3-5AF9-409F-8CC5-8B012F9B4D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"CB35A154-98E1-4EF7-9B5A-1691023E69AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"C34887E6-AB33-48C1-BD0A-015C141498C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A3CDBBC7-EEF8-40A4-B32D-528370E85361"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"2E324B02-9C59-44D8-AC8A-899130501C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"144BFD52-D569-42B1-BBBA-BA6F3B41C0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D3B6E6-8B47-4790-9293-254A446256AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4F0899F9-F7FC-459A-BF39-A2590F4C948A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D1571098-025D-4F9E-9F5B-8CF4E47CB0A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"8BC9A8D1-95F8-41F1-B282-548B654AC024"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"15A7C86B-1F63-492E-BDBF-3AD1F27F3ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FAF58F47-FBA0-472F-84B2-37C40AE9F11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D208182-D571-4756-953B-84647B7C30DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ADC5EF5A-FB10-4362-BF83-F2D399677C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1E6375DB-EAD9-40DB-ABC8-9ED47937335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1465311E-9F28-4D02-87A1-8262F0E91363"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6B4565A0-4CB2-4BB8-8747-88C2E1DB04BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8111EB25-993B-40D4-9A3F-B0A379FF2544"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A3932C58-3E6B-4CE8-AD86-5258C657B9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"4E884468-C200-4994-8073-A06145DD32EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA8B9FC-58C3-4CDB-B3C9-DCE3FC6DD071"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"44F1065B-3CCB-4690-9623-948AE5480388"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5A195789-BE60-41D0-A09F-297C481E1741"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"99EA6D4D-4818-4B90-A431-F5DB4AEEAC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC60DE-9C65-48C8-B9F9-CBB99D6E6EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9D72538A-63D7-4714-819F-D84E23A477C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C48479D4-85A4-471C-BBE3-95EC7ED42551"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17670892-BDEB-435D-92A8-4D362FB48235"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F0233108-DAE6-42A5-B525-6D8F91298183"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0FCFDA77-070C-42E6-897C-DB4CA6FDD0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5090C955-3E5A-4CDF-A2B2-EF5A181BE4FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"33D199BC-D664-48A8-8D0C-5496C5DFF8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0E6327BC-34F7-46E9-ABB3-9FA8B9C5F684"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D93FD709-6918-4F00-8C90-416F0E4208DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9179B-25BD-4AF6-9ED1-1C0B4439A726"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"0E7A7D8F-0669-42D0-A7F8-447E05EB5F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"88A2049F-CAEC-47A5-9C22-0295B08CAA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F7DF0BF3-2284-488D-8C62-DB9766445556"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"00B1AF41-963E-470C-9EC3-4ECD49EB1BC7"}]}]}],"references":[{"url":"http://osvdb.org/54229","source":"cve@mitre.org"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503227/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34827","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022166","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1253","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50332","source":"cve@mitre.org"},{"url":"http://osvdb.org/54229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redteam-pentesting.de/advisories/rt-sa-2009-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503227/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1472","sourceIdentifier":"cve@mitre.org","published":"2009-05-27T16:30:01.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to machines connected to the switch, by hijacking a session."},{"lang":"es","value":"El programa cliente JAVA para los switches ATEN KH1516i IP KVM con firmware 1.0.063 y KN9116 IP KVM con firmware 1.1.104 tiene una clave de cifrado AES fija, lo que facilita a los atacantes de tipo \"hombre en el medio\" (man-in-the-middle) (1) ejecutar código Java de su elección  o (2) obtener acceso a las máquinas conectadas al switch mediante el secuestro de la sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:-:java_client:*:*:*:*:*","matchCriteriaId":"50ACA9FF-A214-4911-B3EC-39B3950FA5E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:-:java_client:*:*:*:*:*","matchCriteriaId":"43CC1042-AB83-4B46-984B-98D98D133DAA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1473","sourceIdentifier":"cve@mitre.org","published":"2009-05-27T16:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified \"client-side calculations.\""},{"lang":"es","value":"Los programas cliente (1) Windows and (2) Java para los switches ATEN KH1516i IP KVM con firmware 1.0.063 y KN9116 IP KVM con firmware 1.1.104 no usan de manera apropiada la criptografía RSA en una negociación de clave de sesión simétrica, lo que facilita a atacantes remotos (a) desencriptar el tráfico de red o (b) llevar a cabo ataques del tipo \"man in the middle (hombre en el medio)\", mediante la repetición de \"cálculos en el lado del cliente\" no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:-:java_client:*:*:*:*:*","matchCriteriaId":"50ACA9FF-A214-4911-B3EC-39B3950FA5E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:-:windows_client:*:*:*:*:*","matchCriteriaId":"BBB7093D-2C92-43E5-9FCC-6455F2814307"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:-:java_client:*:*:*:*:*","matchCriteriaId":"43CC1042-AB83-4B46-984B-98D98D133DAA"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:-:windows_client:*:*:*:*:*","matchCriteriaId":"3111EE0D-155E-4031-9003-B9013BABEA76"}]}]}],"references":[{"url":"http://secunia.com/advisories/35241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1474","sourceIdentifier":"cve@mitre.org","published":"2009-05-27T16:30:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not (2) set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."},{"lang":"es","value":"El switch ATEN KH1516i IP KVM con firmware 1.0.063 y el switch KN9116 IP KVM con firmware 1.1.104 no (1) cifran los eventos del ratón, lo que permite a atacantes de tipo \"hombre en el medio\" (man-in-the-middle) realizar operaciones de ratón en máquinas conectadas al switch mediante la inyección de tráfico de red; y no (2) no habilitan el flag 'secure' para la cookie de sesión en una sesión https, lo que faciita a los atacantes remotos el capturar esta cookie interceptando su transmisión dentro de una sesión http.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:*:*:*:*:*:*:*","matchCriteriaId":"F67B9DD1-E02A-4C5B-A580-BFD9ABD8A8E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:*:*:*:*:*:*:*","matchCriteriaId":"C48202DF-1036-45C0-AEBB-6F133649D537"}]}]}],"references":[{"url":"http://secunia.com/advisories/35241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50850","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1476","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T15:30:05.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL."},{"lang":"es","value":"Desbordamiento de búfer en lib/load_http.c en ippool en Darren Reed IPFilter (también conocido como IP Filter) v4.1.31 permite a usuarios locales conseguir privilegios a través de vectores relacionados con un nombre de servidor largo en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"C2C2E385-9268-49B9-82E6-00D093EC4F8E"}]}]}],"references":[{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h","source":"cve@mitre.org"},{"url":"http://securityreason.com/achievement_securityalert/62","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35076","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022272","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50716","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/achievement_securityalert/62","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1477","sourceIdentifier":"cve@mitre.org","published":"2009-05-27T16:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer."},{"lang":"es","value":"Las interfaces web en el switch ATEN KH1516i IP KVM con firmware 1.0.063, el switch KN9116 IP KVM con firmware 1.1.104 y la unidad de control de energía PN108 tienen una clave privada SSL fija, lo que facilita a atacantes remotos desencriptar sesiones https mediante la extracción de esta clave de su propio switch y posteriormente capturar tráfico de red dirigido a un switch propiedad de otro cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kh1516i_ip_kvm_switch:1.0.063:*:*:*:*:*:*:*","matchCriteriaId":"F67B9DD1-E02A-4C5B-A580-BFD9ABD8A8E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:kn9116_ip_kvm_switch:1.1.104:*:*:*:*:*:*:*","matchCriteriaId":"C48202DF-1036-45C0-AEBB-6F133649D537"},{"vulnerable":true,"criteria":"cpe:2.3:h:aten:pn9108_power_over_the_net:*:*:*:*:*:*:*:*","matchCriteriaId":"BFDE53F8-D607-44AF-8379-A0C1FD71BF7C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50851","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1478","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en los manipuladores DTrace ioctl en Sun Solaris v10 y OpenSolaris anteriores a snv_114, permiten a usuarios locales provocar una denegación de servicio (panic) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/54138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35098","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34753","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022143","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1199","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1378","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50220","source":"cve@mitre.org"},{"url":"http://osvdb.org/54138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1479","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en client/desktop/default.htm en Boxalino anterior v09.05.25-0421 permite a atacantes remotos leer archivos a su elección a través de .. (punto punto) en el parámetro de la url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boxalino:boxalino:*:*:*:*:*:*:*:*","matchCriteriaId":"E77C8B90-CD70-46C7-B732-3B0B7D5257DB"}]}]}],"references":[{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507319/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53932","source":"cve@mitre.org"},{"url":"http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507319/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1480","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Pragyan CMS v2.6.4 permite a atacantes remotos ejecutar comandos SQL a través del parámetro fileget en una acción de vista y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragyan_cms_project:pragyan_cms:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"21FE4542-6302-4FFA-AEEC-2A2F6D0728C9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/502933/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8533","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502933/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1481","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en action.asp en PuterJam's Blog (PJBlog3) v3.0.6.170 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro cname en la acción checkAlias, como se ha explotado libremente en Abril de 2009. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pjhome:puterjams_blog:3.0.6.170:*:*:*:*:*:*:*","matchCriteriaId":"C8E7D0C5-34EA-4D78-9668-212847EB0AB6"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/53939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50082","source":"cve@mitre.org"},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/53939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1482","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related to package file errors in the upload_form function, different vectors than CVE-2009-0260."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en action/AttachFile.py en MoinMoin v1.8.2 y anteriores permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) una sub-acción AttachFile en la función error_msg o (2) múltiples vectores relacionados con los errores de empaquetado de ficheros en la función upload_form, diferentes vectores que CVE-2009-0260."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmo:moinmoin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"23A64B6E-48D4-4743-97E3-C1EC6C1A2EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.2","matchCriteriaId":"ACB9D53C-D2DE-4FCA-B20B-43FC0EECF9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D2866E-A684-4EB7-A127-5FEC934945E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BDC4AB6-39BF-4444-9CFE-B654A19814C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD78CAE-9A9D-40AA-AD1F-C124A8315714"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8673FFE8-349E-4412-9913-1145DFA1EC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"24271A6D-21D9-4E8D-997F-0EC132518FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3072B82-3D5C-46DF-8869-08FAAC5C70DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*","matchCriteriaId":"93508FCF-7852-4CB9-AD91-AB0FCD61BE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83ACA6-5C3C-46E3-805C-EE1E759B7331"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2354B8-9A1A-4E75-92AC-F16CFDF91761"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6B44C24B-013E-4769-A200-D59752E0A041"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EB8DB90E-BEE5-447E-9F78-A96634343815"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"84317439-A287-4897-9608-65095860AB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2FB70477-B0F2-44D6-92A8-0F42F890CF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"013FBB75-8B01-4249-9C6C-5E27964ED2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"361C37DC-CB43-4E6A-A198-313A9D62CD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"22F3D66C-3D24-41D0-9E4B-BB458DD5517D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"0A4C9F85-C5EF-4991-A005-5839951B9843"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"690F09A1-6195-404D-BDC3-5F02A4A201C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.5a:*:*:*:*:*:*:*","matchCriteriaId":"F9C82F62-DFBB-4499-8C6D-27DA49A00F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"57003BFE-8FB2-480A-AFA1-63817B608F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B0FD9248-1E4B-46DC-9F78-20787F56D50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"23539FCA-FF83-46E5-A9E2-5051D975DC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6:*:*:*:*:*:*:*","matchCriteriaId":"10CFA717-B536-46CF-8D96-B850EB4C6F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"03FBCD1B-2D05-4C17-B41C-CF8DA75BB05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"51DF4CAC-EDD8-4C71-BC77-0F516692B5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB1CAAA6-8D33-4901-88E2-120AB7B4CD53"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1F89B87E-70F6-4B3C-B684-BE2666342F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7:*:*:*:*:*:*:*","matchCriteriaId":"77C78CF4-D4B3-4AE1-A15F-14C3BB8136D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"33BA7179-8A11-41C1-8F54-AC9316E8330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"59C423EE-D9F5-4570-A5E8-1AA34F05E0EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4B12CADC-8939-462C-8D40-DD56B13773AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"A19C0F96-9054-4DE9-92AD-A9DAF03B4960"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"6C5CDE22-2384-4B78-A76F-B95D5FBAD141"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"E706F537-8473-4E45-9165-CA502263DC2B"}]}]}],"references":[{"url":"http://hg.moinmo.in/moin/1.8/rev/5f51246a4df1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35024","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1791","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34631","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-774-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1119","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50356","source":"cve@mitre.org"},{"url":"http://hg.moinmo.in/moin/1.8/rev/5f51246a4df1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://moinmo.in/SecurityFixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-774-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1483","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in profiles/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en upload-file.php en Adam Patterson Studio Lounge Address Book 2.5, que es accesible desde index2.php, permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable, accediendo luego a él a través de una solicitud directa al el archivo en los perfiles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:studiolounge:address_book:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D75A02F5-F37B-4574-A77C-C4721BF650CD"}]}]}],"references":[{"url":"http://secunia.com/advisories/34761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53813","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34652","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49972","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8481","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1484","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función del interfaz de correo web en AXIGEN Mail Server 6.2.2 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores sin especificar involucrando mensajes de correo electrónico. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gecad:axigen_mail_server:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"30879EDE-262D-4CD7-B67C-39ABEB945881"}]}]}],"references":[{"url":"http://secunia.com/advisories/34402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1485","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via unspecified attack vectors."},{"lang":"es","value":"La función de inicio de sesión en eMule Plus anterior a v1.2e permite a atacantes remotos provocar una denegación de servicio (bucle infinito)a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aemuleplus:emule_plus:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"2F45C29D-CF53-4EFC-82C0-B657CE61767F"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2c","matchCriteriaId":"C4FE2664-2570-4EC2-9E27-A20832483AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.1:*:*:*:*:*:*:*","matchCriteriaId":"06F976C3-CC97-487F-9564-748E94F16207"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"534E3D63-5D17-47B8-86DE-CEC7228227F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.1c:*:*:*:*:*:*:*","matchCriteriaId":"17805C50-2274-4E79-97D8-EB29787079E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.1d:*:*:*:*:*:*:*","matchCriteriaId":"F84884CF-5FEE-43C5-AD18-B4C984FFE92A"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.1e:*:*:*:*:*:*:*","matchCriteriaId":"51BEE0EA-4AFF-4A01-8069-0B9C27C7DAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.1f:*:*:*:*:*:*:*","matchCriteriaId":"01EE04B0-6D9A-43C8-BA7B-1768B0D74319"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.2:*:*:*:*:*:*:*","matchCriteriaId":"78BF152E-8F26-4B2C-859B-BB0F32E0DA71"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"FF8BFF74-126E-4C7B-8360-1C99D67559AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.2b:*:*:*:*:*:*:*","matchCriteriaId":"5A27B638-42AE-4E3F-9BAB-A27905B1C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.2d:*:*:*:*:*:*:*","matchCriteriaId":"89C9524A-0F96-404F-B24E-3465E71804FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1.h:*:*:*:*:*:*:*","matchCriteriaId":"37FBABCA-F25E-489D-922E-A37942706866"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1a:*:*:*:*:*:*:*","matchCriteriaId":"7B4EAC23-DDCC-48DE-9CF2-F40FA74E80F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1b:*:*:*:*:*:*:*","matchCriteriaId":"BCF028BA-1E1E-45DC-A69A-1C516089C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1c:*:*:*:*:*:*:*","matchCriteriaId":"8294FF0E-C4FD-4135-91E9-99FDAA7835DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1d:*:*:*:*:*:*:*","matchCriteriaId":"02A4080F-60C9-4BFC-A33B-1E0FB1F93E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1e:*:*:*:*:*:*:*","matchCriteriaId":"0B35FDA4-378C-4EEE-A0B7-C63C99D0E5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1f:*:*:*:*:*:*:*","matchCriteriaId":"B6A17FC1-2E31-4B6C-9B68-26119CAC5DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1g:*:*:*:*:*:*:*","matchCriteriaId":"CCE5D4F9-1E8D-4564-AF9D-D86A56654961"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1i:*:*:*:*:*:*:*","matchCriteriaId":"AC5A78A5-C32D-4355-8F94-651972AF7D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1j:*:*:*:*:*:*:*","matchCriteriaId":"9E0E4BA2-1B92-4C0C-A27F-D68A4437E41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1k:*:*:*:*:*:*:*","matchCriteriaId":"67247E7D-0F34-4CCE-A750-8380703241F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1l:*:*:*:*:*:*:*","matchCriteriaId":"FAE6276D-63F5-484A-A81C-04CD29DBFEF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1m:*:*:*:*:*:*:*","matchCriteriaId":"0F9BD63D-5F28-4CDB-B188-8CCA2D464D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:emuleplus:emule_plus:1o:*:*:*:*:*:*:*","matchCriteriaId":"BCA0F425-2B41-420B-A506-5470E573C702"}]}]}],"references":[{"url":"http://secunia.com/advisories/34799","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676726","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50081","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1486","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the with parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en pmscript.php en Flatchat 3.0 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de un .. (punto punto) en el parámetro with."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ninjadesigns:flatchat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"26668A41-84D0-4EF3-867E-D904D1D9C13A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34904","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1487","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en pages/login.php en FunGamez RC1 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro login_user (alias username). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rens_rikkerink:fungamez:-:rc1:*:*:*:*:*:*","matchCriteriaId":"CB4371BC-9EC3-4424-86E4-1BE9CF2E1973"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025031126068&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34610","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50090","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8493","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025031126068&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1488","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/load.php en FunGamez RC1 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de un .. (punto punto) en el módulo de parámetros para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rens_rikkerink:fungamez:-:rc1:*:*:*:*:*:*","matchCriteriaId":"CB4371BC-9EC3-4424-86E4-1BE9CF2E1973"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025031126068&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34610","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50091","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8493","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025031126068&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1489","sourceIdentifier":"cve@mitre.org","published":"2009-04-29T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter."},{"lang":"es","value":"includes/user.php en Fungamez RC1 permite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de los parámetros de la cookie de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rens_rikkerink:fungamez:-:rc1:*:*:*:*:*:*","matchCriteriaId":"CB4371BC-9EC3-4424-86E4-1BE9CF2E1973"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124025031126068&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50424","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8493","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124025031126068&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1490","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T19:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Sendmail anterior a v8.13.2 permite a atacantes remotos producir una denegación de servicio (caída de demonio) y posiblemente  ejecutar código de forma arbitraria a través de la cabecera X- como se demostró mediante la cabecera de prueba X-."}],"vendorComments":[{"organization":"Red Hat","comment":"Based on our analysis this issue does not have a security consequence and does not lead to a buffer overflow or denial of service.  For more details of our technical evaluation see\nhttps://bugzilla.redhat.com/show_bug.cgi?id=499252#c18","lastModified":"2009-05-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.13.1.2","matchCriteriaId":"2820FDAE-AA3F-4452-933C-62B4F174D941"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:2.6:*:*:*:*:*:*:*","matchCriteriaId":"1CA16C02-3B8D-4188-898E-048A93F11ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:2.6:*:nt:*:*:*:*:*","matchCriteriaId":"3300A5FC-69D9-4F19-AB0E-0273F5ECF45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0FF12CC4-C9CD-479A-8F85-8F947B5B60A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:2.6.1:*:nt:*:*:*:*:*","matchCriteriaId":"EC340D43-0E4D-4365-A604-9DDF3BD62039"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"623A2E07-2122-4ADE-9932-011DCA4396A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E5C563EF-FDED-4193-A66A-06527878BB1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0:*:nt:*:*:*:*:*","matchCriteriaId":"E43CBCA0-47B1-4992-A636-A0BF4441B91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B4A267D3-2F49-4E61-B2C9-D8ED2265665E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0.1:*:nt:*:*:*:*:*","matchCriteriaId":"2FA4711B-319B-4410-A1B5-C6D8C4B1EC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7199205A-B914-40A1-9C82-A9698511E3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0.2:*:nt:*:*:*:*:*","matchCriteriaId":"F4981D22-AA6B-4901-95BA-F1BB893828B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BEC468AB-8B18-4169-8040-614A32444732"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:4.1:*:*:*:*:*:*:*","matchCriteriaId":"EE4E6D5E-BD37-4F8E-962C-0438C62BEF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:4.55:*:*:*:*:*:*:*","matchCriteriaId":"111C0FC5-A199-44CA-9512-9E6B12514E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5:*:*:*:*:*:*:*","matchCriteriaId":"7AFADCBA-DB24-451F-9E1D-FBBEE41C5D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5.59:*:*:*:*:*:*:*","matchCriteriaId":"5DFC5B8B-9102-46A9-9BD3-5CC0B671383F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5.61:*:*:*:*:*:*:*","matchCriteriaId":"51BC02ED-17B1-44B3-97DB-F626A2BD2524"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5.65:*:*:*:*:*:*:*","matchCriteriaId":"EF58EBCB-5735-4569-957D-C37CC38F0823"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.6.7:*:*:*:*:*:*:*","matchCriteriaId":"4BBEEC1F-8382-4FEE-9F7F-60A8D9494DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.7.6:*:*:*:*:*:*:*","matchCriteriaId":"3A34E836-DFF7-404B-9F49-C56DCD81DB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.7.7:*:*:*:*:*:*:*","matchCriteriaId":"624CA3E0-1D02-43C8-9BE2-CDB3651D153F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.7.8:*:*:*:*:*:*:*","matchCriteriaId":"0006A6D0-E3E5-447E-ABCF-6D6E741ADC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.7.9:*:*:*:*:*:*:*","matchCriteriaId":"85996153-65D0-4697-A01B-F6174CE5B4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.7.10:*:*:*:*:*:*:*","matchCriteriaId":"855476CC-21EA-4037-91B7-7B9AAE9E7F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*","matchCriteriaId":"D30A1136-074A-460D-9794-DDD530626800"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*","matchCriteriaId":"76A9602B-8E5A-4BF4-81F5-D1152D09FCAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"EFD0B100-D822-4EBF-8EC9-ADAB8141116B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"196D77DF-E6D4-46D0-BC2C-8804A587CA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B743E5A3-6B15-4877-9424-A1F1A4214B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*","matchCriteriaId":"76A60742-7815-4658-A6F7-147AA48C24B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC773E5-84D2-4084-80DA-EE8423C4925B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*","matchCriteriaId":"9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*","matchCriteriaId":"120271B8-08A9-4C21-A108-0DA61095A006"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA859AF-4E4E-4077-8E98-523E617A1DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*","matchCriteriaId":"A9791650-C367-43B6-A0F4-5BB56CE10778"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*","matchCriteriaId":"8340DDA8-77DD-4AEB-B267-F86F64A851B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*","matchCriteriaId":"07DCBBEE-1DF0-40FE-B755-1FC35CF16788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*","matchCriteriaId":"581626E7-47B5-4819-B34F-B6DFD07A12F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*","matchCriteriaId":"8BBE9A4A-8AB9-4A97-A106-970FEB08952C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.7:*:*:*:*:*:*:*","matchCriteriaId":"B754AD41-90A0-4382-B599-E41289C690A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*","matchCriteriaId":"BD99394C-5408-4A01-8D4E-417FFFFDE9C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*","matchCriteriaId":"AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*","matchCriteriaId":"97D641EF-0B69-45A1-B85E-3C9C93AB9D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*","matchCriteriaId":"8972211B-6A5B-4095-9CBB-CEF4C23C9C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*","matchCriteriaId":"8F81A2AD-90A0-4B97-86A3-92690A0FCA71"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"598F74BA-2B71-435E-92B8-9DEADB3311A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"581E5904-1A2B-49FF-BE3F-D42019AD816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC4C83-4FB9-4344-AFCB-C260659F81DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*","matchCriteriaId":"CAF763B4-58E3-4868-8C92-47DE3E4E5F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*","matchCriteriaId":"8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*","matchCriteriaId":"6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*","matchCriteriaId":"58CD19B4-4BFD-4DE8-B21F-6B6CDE6793C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*","matchCriteriaId":"7B82BBB7-CD72-4A33-97D4-B1E51A595323"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*","matchCriteriaId":"6C1D6A40-5DD1-481C-AF85-85705FCE3680"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.10:*:*:*:*:*:*:*","matchCriteriaId":"DC7125C4-64AF-4A3B-BBD6-1A56660A2D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.11:*:*:*:*:*:*:*","matchCriteriaId":"83AE5BA5-09FF-4AF8-B4E8-4D372A208E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.13.0:*:*:*:*:*:*:*","matchCriteriaId":"B4E0D099-C149-4923-A06C-200A23CEA943"}]}]}],"references":[{"url":"http://www.nmrc.org/~thegnome/blog/apr09/","source":"cve@mitre.org"},{"url":"http://www.sendmail.org/releases/8.13.2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50355","source":"cve@mitre.org"},{"url":"http://www.nmrc.org/~thegnome/blog/apr09/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sendmail.org/releases/8.13.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1491","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body."},{"lang":"es","value":"McAfee GroupShield para Microsoft Exchange en Exchange Server 2000, y posiblemente otros productos antivirus y antispam de McAfee y otros vendedores, no escanea las cabeceras X- de los contenidos maliciosos, lo que permite a atacantes remotos evitar la detección vírica a través de un mensaje manipulado, como se ha demostrado con un mensaje con una cabecera X- de prueba y sin cuerpo de mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:groupshield:*:*:*:*:*:*:*:*","matchCriteriaId":"1F8EEB2A-4BB6-4D3C-8CCC-88D1D0D6D4D0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"5E61FD5F-3B18-4589-B652-FDFE8F234417"}]}]}],"references":[{"url":"http://www.nmrc.org/~thegnome/blog/apr09/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50354","source":"cve@mitre.org"},{"url":"http://www.nmrc.org/~thegnome/blog/apr09/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1492","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments."},{"lang":"es","value":"El método getAnnots Doc en la API de JavaScript en Adobe Reader y Acrobat v9.1, v8.1.4, v7.1.1 y anteriores permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o ejecutar código arbitrario a través de un archivo PDF que contiene una anotación, y tiene una entrada OpenAction con el código JavaScript que llama a este método con argumentos enteros elaborados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.1.1","matchCriteriaId":"C45837B4-F4F9-45DC-B324-48BD4AB51973"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.1.4","matchCriteriaId":"5C1BEE55-AAE2-4D61-9156-7E34692469C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.1","matchCriteriaId":"746FE43A-5FB1-4EF1-8004-E5183BAB51B7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.1.1","matchCriteriaId":"4BB02266-8184-4A96-A1F0-66C9A3F0A329"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.1.4","matchCriteriaId":"07DD4484-A823-4B8B-8939-44A553E2FD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.1","matchCriteriaId":"0740542B-CD65-4CE7-AA8C-43D252D66498"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/54130","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34924","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35055","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35096","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35152","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35358","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/970180","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0478.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34736","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022139","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133B.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1189","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1317","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50145","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8569","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/54130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/970180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0478.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1493","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument."},{"lang":"es","value":"El método spell customDictionaryOpen en la API de JavaScript en Adobe Reader v8.1.4 y v9.1 de Linux permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o ejecutar código arbitrario a través de un archivo PDF que activa una llamada a este método con una larga cadena de en el segundo argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"61151189-E24C-4AB6-BC60-B9AF720E3D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"FBE16943-CCD8-4A39-832F-F6ED3CF2936B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/54129","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34924","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35152","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35358","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-06.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/970180","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0478.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34740","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022139","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133B.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1189","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1317","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50146","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8570","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/54129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/970180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0478.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1494","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port."},{"lang":"es","value":"La función process_stat en Memcached v1.2.8 divulga las estadísticas de asignación de memoria en respuesta a un comando stats malloc, lo cual permite a atacantes remotos obtener información potencialmente sensible mediante el envío de este comando al puerto TCP del demonio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"45A81180-5F55-4E8B-B4AF-8B646D694945"}]}]}],"references":[{"url":"http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98","source":"cve@mitre.org"},{"url":"http://code.google.com/p/memcachedb/source/detail?r=98","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://memcached.googlecode.com/files/memcached-1.2.8.tar.gz","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50444","source":"cve@mitre.org"},{"url":"http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/memcachedb/source/detail?r=98","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://memcached.googlecode.com/files/memcached-1.2.8.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1495","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb."},{"lang":"es","value":"Web File Explorer v3.1 almacena información sensible bajo la raíz web con insuficiente control de acceso, lo cual permite a atacantes remotos descargar una base de datos a través de una petición directa a data/db.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webfileexplorer:web_file_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"26608C9C-28DD-4C51-BD89-C17F7A9DB766"}]}]}],"references":[{"url":"http://secunia.com/advisories/34648","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1496","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Cmi Marketplace (com_cmimarketplace) v0.1 para Joomla! permite a atacantes remotos listar directorios a su elección a través de un .. (punto punto) en el parámetro viewit a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ijobid:com_cmimarketplace:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4B73E027-DE28-4B54-9E92-E3FCB26BB864"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34431","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8367","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1497","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in an SRT file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en srt2smi.exe en Gretech Online Movie Player (GOM Player) v2.1.16.4635 permite a atacantes remotos provocar una denegación de servicio (cuelgue) o ejecutar código a su elección a través de una larga cadena en un archivo SRT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gomlab:gom_player:2.1.16:*:*:*:*:*:*:*","matchCriteriaId":"D559D7CC-BE71-4E9D-9930-560DB26C4AE4"}]}]}],"references":[{"url":"http://osvdb.org/53361","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=501","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/502552/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34427","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8370","source":"cve@mitre.org"},{"url":"http://osvdb.org/53361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502552/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1498","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter in a settings action to profile.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en inc/profilemain.php en Game Maker 2k Internet Discussion Boards (iDB) v0.2.5 Pre-Alpha SVN 243 permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro skin en una acción de configuración a profile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idb:idb:0.2.5_pre-alpha:*:*:*:*:*:*:*","matchCriteriaId":"EB08698D-DF5B-4147-AB2F-0E50695AE526"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34397","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49697","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8357","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1499","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php.  NOTE: SecurityFocus states that this issue has been disputed by the vendor."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el componente MailTo (alias com_mailto) en Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro artículo (article) en index.php. NOTA: SecurityFocus indica que esta cuestión ha sido discutida por el vendedor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_mailto:*:*:*:*:*:*:*:*","matchCriteriaId":"493019F7-EEEF-4CAE-B4E5-7D455835CD52"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34433","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1500","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en ProjectCMS v1.0 Beta permite a atacantes remotos ejecutar comandos SQL a través del parámetro sn."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:projectcms:projectcms:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"C70C402A-DC54-43A6-A290-ABC6ECB3F56C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503079/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34767","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503079/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1501","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en módulo Exif v5.x-1.x anterior a v5.x-1.2 y v6.x-1.x-dev anterior a 13 de Abril de 2009, un módulo para Drupal, permite a atacantes remotos inyectar HTML o scripts web a su elección a través de las etiquetas EXIF de una imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exif:exif:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"3314D997-E262-429B-A5F8-D981EDD608B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:exif:exif:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"CB8CF40B-1088-448F-9A29-12DB881A04D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:exif:exif:5.x-1.x:*:dev:*:*:*:*:*","matchCriteriaId":"158689B5-7425-4CBE-BEAB-3D59719410FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:exif:exif:6.x-1.x:*:dev:*:*:*:*:*","matchCriteriaId":"88AE4C03-A1F4-48FE-9BE0-58ACA578E84E"}]}]}],"references":[{"url":"http://drupal.org/node/448958","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34774","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1213","source":"cve@mitre.org"},{"url":"http://drupal.org/node/448958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1502","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio transversal enplugin.php en S-Cms v1.1 Stable y v1.5.2 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de secuencias de salto de directorio en el parámetro de página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matteoiammarrone:s-cms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0A5920CA-48BC-488A-A450-17F3E95C6047"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteoiammarrone:s-cms:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"137E0077-5F88-4676-9D1A-7B3D48D5710E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34940","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34771","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1503","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.php en Tiger Document Management System (DMS) permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) username  (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigerdms:tigerdms:*:*:*:*:*:*:*:*","matchCriteriaId":"DABD8C80-E1E1-4181-B6A7-C7B9699CCCA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/34784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34775","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8571","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1504","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to \"lvl=1&userid=1.\""},{"lang":"es","value":"Absolute Form Processor XE v1.5 permite a atacantes remotos eludir la autenticación y obtener acceso administrativo mediante el establecimiento de la cookie xlaAFPadmin a \"lvl=1&userid=1.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xigla:absolute_control_panel_xe:1.5:*:*:*:*:*:*:*","matchCriteriaId":"353D91C9-8782-46E5-B90B-719F4D85D420"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8529","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1505","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el módulo News Page versiones 5.x anteriores a 5.x-1.2 para Drupal, permite a los usuarios autenticados remotos, con nodos de News Page crear y editar privilegios, ejecutar comandos SQL arbitrarios por medio del campo Include Words (también se conoce como keywords)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:news_page:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"36113737-4A74-415D-B2A8-804D06E7A2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:news_page:5.x-1.x:*:dev:*:*:*:*:*","matchCriteriaId":"A58E2A83-AD4D-4C17-BEAA-949BBB5AF9F9"}]}]}],"references":[{"url":"http://drupal.org/node/449014","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54151","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34777","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50248","source":"cve@mitre.org"},{"url":"http://drupal.org/node/449014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1506","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to banner-details.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en las classes/Xp.php en eLitius v1.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro id a banner-details.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intelliants:elitius:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0BE24D22-AB85-49A5-994D-CA8214BD4C47"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34769","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1507","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a module for Drupal, interprets an empty CCK user reference as a reference to the anonymous user, which might allow remote attackers to bypass intended access restrictions to read or modify a node."},{"lang":"es","value":"El módulo Node Access User Reference v5.x anterior a v5.x-2.0-beta4 y v6.x anterior a v6.x-2.0-beta6, un módulo para Drupal, interpreta un referencia a usuario CCK vacía como una referencia al usuario anónimo, lo cual puede permitir a atacantes remotos eludir las restricciones de acceso para leer o modificar un nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"258146DF-AE15-409C-BE70-725982EA136C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A1007E9C-8634-4A8E-8A36-5F337F766BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"30D3C011-FEBF-4435-8F9D-19B5187D090F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"B92368BC-20A6-42B5-889D-53AB1BA028B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"17D553E7-8EBB-4EAC-A9F3-E1524F7AA154"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"EAF88146-F2AB-4A49-BE0B-5EE56BF180DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"7E6A50E4-6B5C-4683-B3F9-7FDEFB9F0CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:5.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"A2360CB4-D4F4-462D-B0BC-4E44C91D98E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F30F5EBC-0350-4D2B-9145-DB9AF13A90AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"942B1BC4-11AE-42F4-BD8D-83898432DC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"5F7C7F90-9FEF-4D31-9643-5D92AF7F1D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"BD0A18F6-8EE6-41D8-AF69-FFAABEB47661"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"66824B75-7E7E-45CA-9D9D-F916D4C8B9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"ADA0F06E-3674-4816-9BBE-8B1668B71E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"4E7AAAB4-D435-400E-8532-201A96EF93A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"2102783C-0725-4BC0-B809-BFB32E8E1330"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"08CD2483-246B-4987-B20B-383C0E1A989C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"00E69FB5-6D7E-4830-B371-C36D4F512030"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"4AEDC123-2E18-4181-A1D7-412641D2249A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodeaccess_userreference:6.x-2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"5735D8E8-3B78-4ED4-80F5-5C5BC16658AF"}]}]}],"references":[{"url":"http://drupal.org/node/449030","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34778","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1212","source":"cve@mitre.org"},{"url":"http://drupal.org/node/449030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1508","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookie_username parameter to Configure.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en la función xforum_validateUser en Common.php en X-Forum v0.6.2 permite a atacantes remotos ejecutar comandos SQL, como se ha demostrado a través del parámetro cookie_username a Configure.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keir_davis:x-forum:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E9C38264-7B0D-4E21-B493-7C7D6474AB6C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34302","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49537","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1509","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en ajaxp_backend.php en MyioSoft AjaxPortal v3.0 permite a atacantes remotos ejecutar comandos SQL a través de parámetros de la página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:ajaxportal:3.0:*:*:*:*:*:*:*","matchCriteriaId":"65D28AB1-A48F-480C-8590-048197F0D6B3"}]}]}],"references":[{"url":"http://secunia.com/advisories/34529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34338","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8341","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1510","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the file parameter to (1) ki_makepic.php and (2) ki_nojsdisplayimage.php in ki_base/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en KoschtIT Image Gallery v1.82 permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de secuencias de salto de directorio en el archivo de parámetros de (1) ki_makepic.php y (2) ki_nojsdisplayimage.php en ki_base/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:koschtit:koschtit_image_gallery:1.82:*:*:*:*:*:*:*","matchCriteriaId":"BA1D641A-3051-4F65-9C12-B40DC9FDC26C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8334","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1511","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value."},{"lang":"es","value":"GDI+ en Microsoft Windows XP SP3 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un archivo PNG que contiene un determinado valor btChunkLen grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34586","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8466","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1512","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en X-Forum v0.6.2 permite a los administradores remotos autenticados inyectar código PHP arbitrario en Config.php a traves del parámetro adminEMail a SaveConfig.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keir_davis:x-forum:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E9C38264-7B0D-4E21-B493-7C7D6474AB6C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50390","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8317","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1513","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name."},{"lang":"es","value":"Desbordamiento de búfer en la función PATinst en src/load_pat.cpp en libmodplug anteriores a v0.8.7 permite a atacantes remotos asistidos por usuarios, provocar una denegación de servicio y posiblemente la ejecución de código de su elección mediante un nombre de instrumento largo."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libmodplug embedded in gstreamer-plugins as shipped with Red Hat Enterprise Linux 3 and 4, as they do not include support for the PAT file type.","lastModified":"2009-05-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6","matchCriteriaId":"DD0CAE8E-3B2A-4630-868C-79071A5A0450"},{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5E90B264-B800-4D01-B9C6-1B1A97702F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7869CDE5-B184-42EB-B0D6-6E6164AA324A"},{"vulnerable":true,"criteria":"cpe:2.3:a:konstanty_bialkowski:libmodplug:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"CBA5392B-E9CE-4092-BF72-5A661F1C20F1"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084","source":"cve@mitre.org"},{"url":"http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4","source":"cve@mitre.org"},{"url":"http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595","source":"cve@mitre.org"},{"url":"http://osvdb.org/54109","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34927","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35026","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35736","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36158","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-07.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1850","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:128","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/29/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34747","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-771-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/29/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-771-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1514","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value."},{"lang":"es","value":"Google Chrome v1.0.154.53 permite a atacantes remotos provocar una denegación de servicio desreferenciación de puntero nulo y caída de aplicación) a través de una declaración con un valor de excepción largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34786","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8573","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1515","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función cdf_read_sat en src/cdf.c en Christos Zoulas file v5.00, permite a atacantes remotos asistidos por usuarios ejecutar código se su elección a través de un componente del fichero de documentación manipulado, como se demuestra por ficheros .msi, .doc o .mpp. NOTA: algunos de estos detalles se han obtenido de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:5.00:*:*:*:*:*:*:*","matchCriteriaId":"F6FF256D-3DD4-41A8-B119-D20A493A6EA5"}]}]}],"references":[{"url":"ftp://ftp.astron.com/pub/file/file-5.01.tar.gz","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820","source":"cve@mitre.org"},{"url":"http://mx.gw.com/pipermail/file/2009/000379.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:129","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/54100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"ftp://ftp.astron.com/pub/file/file-5.01.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mx.gw.com/pipermail/file/2009/000379.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1516","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX en IceWarpServer.APIObject en api.dll en IceWarp Merak Mail Server v9.4.1, permite a atacantes, dependiendo del contexto, ejecutar código de su elección a través de un valor largo en el segundo argumento del método Base64FileEncode, como se demostró posiblemente por una aplicación web que acepte entradas inseguras de este método."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:merak_mail_server:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"082F70CB-C398-4BCB-9F37-D4E932B8486A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34739","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1517","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en el control ActiveX Symantec.EasySetup.1 en EasySetupInt.dll v14.0.4.30167 en el asistente EasySetup en Symantec Norton Ghost v14.0 permite a atacantes remotos provocar una denegación de servicio (caída del navegador) y posiblemente ejecución de código de su elección a través de una entrada no específica en los métodos (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, y (6) CallTour."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_ghost:14.0:*:*:*:*:*:*:*","matchCriteriaId":"80B89097-0763-4CA0-B544-6ACD39765454"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34696","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022120","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50098","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1518","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T19:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Beltane anteriores a v2.3.11 permite a atacantes remotos secuestrar la autenticación de víctimas no determinadas a través de vectores no especificados. NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beltane:beltane:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.9","matchCriteriaId":"FC7CBCAC-103E-421D-A850-3E4F4A48CC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:beltane:beltane:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"8FBF5E9F-50F9-437C-A057-413DB8704275"},{"vulnerable":true,"criteria":"cpe:2.3:a:beltane:beltane:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"39D3C840-AE30-4DAD-A5F4-ADCC60A63287"},{"vulnerable":true,"criteria":"cpe:2.3:a:beltane:beltane:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B1335664-6322-4EC5-9302-E2765BBC02EA"}]}]}],"references":[{"url":"http://osvdb.org/54167","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1519","sourceIdentifier":"cve@mitre.org","published":"2009-05-04T19:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio transversal en index.php en Pecio CMS v1.1.5 permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro \"lenguaje\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pecio-cms:pecio_cms:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"315D11F1-934F-4A7A-B421-4A5D70611FC0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34802","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8593","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1520","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en el interfaz gráfico de usuario Web en el cliente IBM Tivoli Storage Manager (TSM) desde v5.1.0.0 hasta v5.1.8.2, desde v5.2.0.0 hasta v5.2.5.3, desde v5.3.0.0 hasta v5.3.6.4, desde v5.4.0.0 hasta v5.4.2.6, y desde v5.5.0.0 hasta v5.5.1.17 permite a atacantes producir una denegación de servicio (caída de aplicación) o ejecutar código arbitrario a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5249F29D-A30C-47DE-A2E7-1643506833B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"BF8BBC00-2EE5-4679-9A55-C160C3FE0502"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"AEE65DEA-32C5-4AF3-BD3F-B6650BC7C3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2:*:*:*:*:*:*:*","matchCriteriaId":"0775DC8E-AFEF-4EC8-A42F-ACB266087F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5CF5583-AD0F-41A9-A963-077D4592EE95"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"91C00917-D04A-480F-AE51-7F666A092A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"FD374314-ACC9-4F14-A65F-14761B04B483"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3:*:*:*:*:*:*:*","matchCriteriaId":"F1E0A6F7-EB54-49AC-BA68-FFAFEEBF82B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"488891DD-FDF9-45B6-8E27-9488016617E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"FC9FD3F9-CADE-4B7F-B44D-87910F093842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E985452D-8819-493B-A505-98E393224AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"7FADD1A6-5E07-4701-9846-389DBB980040"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DCA554F-03B3-44E1-A175-E3163445626E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"29442ECF-F9F0-42CE-92BD-0C04A8E2556C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"02303411-3A86-49B4-BF41-E7103E424F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.96:*:*:*:*:*:*:*","matchCriteriaId":"0AD6AF10-1F26-46AD-8137-E9246D09EC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*","matchCriteriaId":"F5E6A344-E062-4179-9CFA-CF912B4AED16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9A140293-8F4A-4AB4-9EE8-36D0EB398C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AABAD076-C9D6-481E-B9DC-CEB95C224979"}]}]}],"references":[{"url":"http://secunia.com/advisories/32604","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1521","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en Java GUI en el cliente IBM Tivoli Storage Manager (TSM) desde v5.2.0.0 hasta v5.2.5.3, desde v5.3.0.0 hasta v5.3.6.5, desde v5.4.0.0 hasta v5.4.2.6, y desde v5.5.0.0 hasta v5.5.1.17, y el cliente TSM Express desde v5.3.3.0 hasta v5.3.6.5, permite a atacantes remotos leer o modificar ficheros de forma arbitraria a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"628DBF06-F69A-4912-B0D8-DEE9EFD830AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A077B803-1CB7-4068-9C03-6E10D24D82A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D6A5DEA-1308-4A36-B7CF-4F8B6CEB5994"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7F3EE328-1E1E-4D20-B41A-D381D5E60D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FF328830-D1B6-462F-B504-C85495D14229"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4881A76F-B6DB-4E9E-90C4-C2773A698EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0832F6E5-99D1-4A27-A308-BDF637F9C417"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"93E31155-39D3-4EB5-988E-7AAB83C6A3AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4371D56F-F69B-421A-A098-BFD965636B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2775F4-0353-4FEE-89BA-BE18BB933BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"F6A3EF8F-A50D-4C8F-ABFF-73AF3F265F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F2D721F7-B62A-48C8-9D6D-A69E24AE94BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"77A527E6-7428-43C6-A313-2B4D4ED9811E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"ABB38022-F071-4ACB-A720-53766F20BDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C65A37A-AB50-4325-A0BF-E99F46463A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CD4C86D9-79E2-49C7-AD10-48FB2E4CDF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*","matchCriteriaId":"F5E6A344-E062-4179-9CFA-CF912B4AED16"}]}]}],"references":[{"url":"http://secunia.com/advisories/32604","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1522","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors."},{"lang":"es","value":"El cliente IBM Tivoli Storage Manager (TSM) desde v5.5.0.0 hasta v5.5.1.17 en AIX y Windows, cuando se utiliza SSL, lo que permite atacantes remotos realizar ataques de man-in-the-middle y leer ficheros de forma arbitraria a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4861ED9D-8A24-47AB-B14F-D2842930C7B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.0.91:*:*:*:*:*:*:*","matchCriteriaId":"B8474D87-2420-40D1-8E8B-E0197A5297C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CD4C86D9-79E2-49C7-AD10-48FB2E4CDF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager_client:5.5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A60B8753-DE15-4FF1-A5AB-26410BA345A2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://osvdb.org/54235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32604","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50330","source":"cve@mitre.org"},{"url":"http://osvdb.org/54235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21384389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC59781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1523","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI."},{"lang":"es","value":"Una vulnerabilidad de salto directorio en el servidor HTTP en Mort Bay Jetty versión 5.1.14, versiones 6.x anteriores a 6.1.17, y versiones 7.x hasta 7.0.0.M2, permite a los atacantes remotos acceder a archivos arbitrarios por medio de secuencias de salto de directorio en el URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.16","matchCriteriaId":"52DCEE3F-F777-48A8-80B6-1DCD95874432"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:*:m2:*:*:*:*:*:*","versionEndIncluding":"7.0.0","matchCriteriaId":"E598BE4E-A24F-4F59-9C4A-4B2024EBA256"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFFAED25-216C-4AB0-BAF4-7ACCC04FFB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BF2825D2-57A6-4DC7-84DC-608AE123E04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6500547B-8CDD-4595-AF2D-1A2014B66191"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C3D7BAEA-7F58-4FA3-9F34-CF5CBC4362E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"58750CF6-E237-4F28-A446-DE0E882BD6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"827C3682-91FA-42D4-A0DD-CC61CB94A9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"45401E9F-9C20-4600-AE6A-CD0A1F30C4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F23500C7-2A70-4E28-97E6-13161AE1EBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"CA8A425F-BBF5-48D2-AD0E-6D97C7808A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"916600EC-3D21-4367-878B-8B0E19D10D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4877B638-8D6C-40ED-B6B5-23C8B7787F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"B522D870-8D99-42FB-9F33-4CD314369CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"B3D046A5-C346-4E01-A0B2-0876FD8A3F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A07EEADC-A52B-4F99-9A68-4DED263992BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"DD72AC80-DA74-4F06-880A-87317917476E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBA5A992-A7FF-411F-9D8C-02A08090F9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"902C6363-358D-452B-A687-78486B58ABBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"279C47D8-6D64-4F70-824F-AA82FDE2BDD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D213EDC8-B7C5-4093-B10B-E7A207F159F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5293F817-6EBB-4B9A-BBA0-852FCC0641B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3E067B12-B4D8-4DDB-8F65-63205ABB20E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C32EDFC7-58D0-46B6-B946-72AB8C0A7463"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7AD9BC1D-0205-44CC-91BC-6588CDECB800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9EEBD3B-19A6-4C35-B823-5F99286FC873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FBA14BB2-E4C0-494A-98A9-5A9916259583"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"712FF994-343E-4316-9C6F-B57F95B5FEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C399FBC5-5133-4977-BD55-4AB1C8067CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"59244D30-6A90-40D5-8CD7-79EABBC2D58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A004B7E0-158E-49E0-93D8-38B49B2C0448"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"218A6DB9-D4A2-4063-B87B-953BDD5360D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"4793A285-5346-4812-9C26-271F166C13B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:alpha0:*:*:*:*:*:*","matchCriteriaId":"2B62ACEB-5F1E-4147-ADB0-B16DFB56171D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:alpha1:*:*:*:*:*:*","matchCriteriaId":"265A00C8-C367-426C-BC5F-DD123F02D461"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta0:*:*:*:*:*:*","matchCriteriaId":"CC9EC9F5-A7E9-4118-84A5-068CAD51864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"D4B6D8AE-47C5-422C-980C-58C60BBDD574"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"A35F3C2D-DC60-4347-90C1-239B233917A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta3:*:*:*:*:*:*","matchCriteriaId":"21109D6D-063C-4502-BDAB-5D255DAFF8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta4:*:*:*:*:*:*","matchCriteriaId":"EDC65F75-0CD7-4F5A-8BCD-F3F0CD494ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A259BF8E-00DD-4559-9925-FDD7D8C16F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C005200-8957-4A58-B7AE-B645C94C4C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"69780249-BE2F-424F-90F6-4CFC43D1DF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9DD32E82-427E-48F7-8D04-2793C78F855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4C2AAA1A-4D81-4B23-88B7-FFD05758A9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9414F1F6-63F9-4F7C-95EF-91CC4322ECE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C8DE3B94-DF72-4E61-B795-A0CD4A10D349"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"53E5B7F4-5543-43DA-8D26-09AE9D3A74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B5E32A34-7C0B-4DF3-8CA7-35057EFD7800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C61055B-E90D-4146-AEF2-B369ACE681CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.0a:*:*:*:*:*:*:*","matchCriteriaId":"453715D7-6E59-432D-B88E-A2573298B35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C44D3FB9-7CAA-4D6A-8D69-9E30CA42FFB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0A70B1E7-48D3-4EEE-9755-CDA6575D1550"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465F9B9A-C335-4341-A98C-8FECCC018FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"19DDA3F2-22FA-49EF-8F94-C11495C2CD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4E213CE6-0BFE-41DB-82BA-2C6A6D02455C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BED8B2C4-1288-4385-B74F-59557F13E1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A3511BFF-CFE2-4938-8ACE-3638104CAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C36A7783-041F-4FD7-AEE2-5DFCD18E2343"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A795AA0C-A893-4BF8-A991-C997AEBF716C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"367F4809-D74B-4C05-9AB8-EE89D605A755"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"F93D0813-EC1B-4301-912B-D1C1D4260F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"E82EC442-85DA-4471-9871-67AFA32E8E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"C507301A-FDC0-42A5-A385-A4ADC8D4CD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"843E68E4-CD85-4BCB-8216-034FD1567E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"45519B5C-9713-4020-AC9E-95742C585152"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"843235B9-728A-450B-95D6-1FC694EF6D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"902945F1-4F11-4577-BD28-BB35E815F125"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"20A0597E-CFA6-404C-936E-3A8065FF9145"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"40951E40-8E30-465E-B1C0-A0C85ADBE217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"21D5C70A-64E4-434E-93CF-9FC6C510D545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"54D7108A-6CB6-46AC-B9CB-DF33F090C738"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D3254B37-125F-44BA-87B6-0C4DEE0B214C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc7:*:*:*:*:*:*","matchCriteriaId":"78ECE463-E0EA-4691-90CA-E548FCACC4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc8:*:*:*:*:*:*","matchCriteriaId":"F466738D-D94C-4D89-AA2C-BE2E8E16FE1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77A320CE-96F5-4B2C-B2C7-7E8A7E5334BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34BBDAF7-EBE4-49B4-860A-3719006FFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C8529EC-86A5-444A-8656-760DF95258DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"608F3AAA-F5CB-4694-90BB-75C66ACA8755"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8F3A4849-E341-4BE6-84AB-57A24E0922A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CAE6090A-AD1C-4831-8112-B4462980FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a0:*:*:*:*:*:*:*","matchCriteriaId":"6A840DB6-BAB5-4FA8-B6AE-8DC94A82C791"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a1:*:*:*:*:*:*:*","matchCriteriaId":"9094D5D9-B3D4-4050-97C7-6F5FAF49CE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a2:*:*:*:*:*:*:*","matchCriteriaId":"23BF46B5-F614-4074-8C6A-0AE3A8EA3B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a3:*:*:*:*:*:*:*","matchCriteriaId":"9CD2E8FD-6381-43CA-8467-C968DB9A8D72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a4:*:*:*:*:*:*:*","matchCriteriaId":"A6C5F69E-75AF-40A8-9707-F9AEE79A146D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a5:*:*:*:*:*:*:*","matchCriteriaId":"D8D3A860-1747-47EF-9384-BD83F77E9A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a6:*:*:*:*:*:*:*","matchCriteriaId":"10393155-E386-420A-8699-68A3B49DE29C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a7:*:*:*:*:*:*:*","matchCriteriaId":"9494C7B4-65B0-46E2-B8F4-9325882FCF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a8:*:*:*:*:*:*:*","matchCriteriaId":"F4EA2E6E-DD73-4245-B9BA-DE7504AC805A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a9:*:*:*:*:*:*:*","matchCriteriaId":"E2B973C7-CB4D-4E65-8812-19FF963D1D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a90:*:*:*:*:*:*:*","matchCriteriaId":"D5620162-7E20-4AC6-BFCD-3302471B21BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a91:*:*:*:*:*:*:*","matchCriteriaId":"5B809408-895A-4909-9609-B529C3F9019E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a92:*:*:*:*:*:*:*","matchCriteriaId":"FC8EEECA-E493-45AE-BF20-466D90628C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a93:*:*:*:*:*:*:*","matchCriteriaId":"AB746413-10C2-4A75-9A8A-DEB839140F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a94:*:*:*:*:*:*:*","matchCriteriaId":"94F6250D-6360-4C9F-A124-CF8389084C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a95:*:*:*:*:*:*:*","matchCriteriaId":"0215E5C6-9CC0-41DE-988A-2810ACD8209E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a96:*:*:*:*:*:*:*","matchCriteriaId":"3A3B5B55-E4D0-4928-B4EA-D95CB28E81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a97:*:*:*:*:*:*:*","matchCriteriaId":"5B5705E4-BA21-4320-8230-C6B6C3922338"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a98:*:*:*:*:*:*:*","matchCriteriaId":"7DF706A6-9418-4948-AD1D-989A7A41A464"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a99:*:*:*:*:*:*:*","matchCriteriaId":"C6196D65-AA3A-46D5-9A59-30846832D4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b01:*:*:*:*:*:*:*","matchCriteriaId":"A3CB6CA5-FDF5-495F-A631-ED43DC41C2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b02:*:*:*:*:*:*:*","matchCriteriaId":"DA22B8BC-52C4-4792-8804-24E5B87F701D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b03:*:*:*:*:*:*:*","matchCriteriaId":"2EC5AFE5-D0AC-4619-9C60-D151AEDBC27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b04:*:*:*:*:*:*:*","matchCriteriaId":"A5689AB8-C02B-4F97-9AC7-A3EDDE7DB96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b05:*:*:*:*:*:*:*","matchCriteriaId":"DF1AA7EE-75BD-4D35-A071-D5F25080CE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc0:*:*:*:*:*:*","matchCriteriaId":"71684452-6A1D-4023-A10A-D078F24DC7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D28F3815-B209-4409-82EA-A083096F56D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc2:*:*:*:*:*:*","matchCriteriaId":"A547D1F8-3916-4D78-8ED6-0B2E1EB87BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"2D4CFA43-DC62-42B5-8E96-9D6EFDF73145"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc4:*:*:*:*:*:*","matchCriteriaId":"D117126F-306B-44C7-A2BE-0A114E658847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc5:*:*:*:*:*:*","matchCriteriaId":"DD6B826E-E97E-4287-B604-8810F79DDDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc6:*:*:*:*:*:*","matchCriteriaId":"12CE9A9F-1118-4C96-B37B-8D9D9E53228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc7:*:*:*:*:*:*","matchCriteriaId":"6F0F93DB-CE46-42C9-A059-8F27FCC59FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc8:*:*:*:*:*:*","matchCriteriaId":"1A9D25B8-D48B-43C5-A5AB-3D60C00A6DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc9:*:*:*:*:*:*","matchCriteriaId":"EE783D81-02E5-4D78-A65C-572A69765D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6F236E4-2FB8-434E-A4AE-F5DA7CC94AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F92CFF11-E18D-4D07-81D5-9ACE41084AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"54087E79-2212-4B35-A631-6C15AC70D413"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E22496A-C88C-47D5-9F29-29CB184A626C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"139D9B00-5FDB-48E1-AFB3-098184E73318"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1512F40A-E056-42BD-A733-CBA4929CD2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9DE25824-2C05-4F96-BA2B-2EE0923CA35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7BEAC38-360A-4F4A-B3A2-DA5EF5310ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"34896B7F-3BA0-4D14-A6A8-042DDAE4B787"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A926CADB-EE62-4F54-9905-A8900103DBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"ACEF6355-DE50-4C9F-B96A-92F35714480B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"866E2E49-24D8-4216-9477-0C949EF8AC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc3:*:*:*:*:*:*","matchCriteriaId":"ECEC910E-A2FA-403D-B59C-AFD2BBFBD088"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6D9F4F9-89A8-4884-9716-EF9FDA250120"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE0646AD-13A6-40A4-B06A-9BF6B1B8064A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc0:*:*:*:*:*:*","matchCriteriaId":"C5B71502-C203-41B0-A9F4-652A274660A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"A73A92E5-5779-4C54-B7E7-6A056B3998C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"D306CD82-93BB-4CF1-80EB-B567E9155395"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DAA932D-35F9-4052-A3FA-2FB09ED6A19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"03BEBC5F-26C8-480A-B986-64655DED1669"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E1738719-44A2-44D5-973E-F90282A9B9C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E912CA35-FCF6-4F06-9974-CCE2F246D570"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"ADBA3DFC-F229-49A6-9191-6A3975C18416"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b0:*:*:*:*:*:*:*","matchCriteriaId":"5E8CCB26-4831-47D4-86B3-D15915E18246"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b1:*:*:*:*:*:*:*","matchCriteriaId":"E8847B6C-6011-44DC-B97D-9D61354D9F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b2:*:*:*:*:*:*:*","matchCriteriaId":"B6A5135B-C30A-41A3-9E22-97451AAE1931"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d0:*:*:*:*:*:*:*","matchCriteriaId":"583918DB-2E06-4AB0-BCFC-A373C40D72DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d1:*:*:*:*:*:*:*","matchCriteriaId":"507E24BC-6C1F-4CAC-B942-15293341162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d2:*:*:*:*:*:*:*","matchCriteriaId":"D2ADAC7B-3CE6-444B-BE8A-35B945B028B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d3:*:*:*:*:*:*:*","matchCriteriaId":"1346595C-0416-40C7-9450-F4F1D17B647C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d4:*:*:*:*:*:*:*","matchCriteriaId":"76C1FB85-81DC-44FB-9960-FC7E2BB0B871"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C07610E5-454A-44A9-B341-B9642FA56EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"30E203AE-92EF-40EA-B7CD-8BFB88B4256E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6AE29CB8-80EE-4849-ACC1-A42AD07FEA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AE47A5EA-A381-497F-B046-CA34A8940886"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"900CA07F-B7CE-4809-A6B6-1F24F7C10313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C39F3BB4-D4B7-4512-A86B-CB771233DD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"6A333033-ACCB-4E0C-AF00-C419DEADEC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc6:*:*:*:*:*:*","matchCriteriaId":"EE935CEE-7B99-42EE-AE64-5EBCB776B20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AFB0FA4D-E6B1-4495-9D48-245D584F6DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB8D7C9F-5E0E-491B-A585-81BC09CA1893"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BC5ABD34-B873-425B-A518-AABB7998C3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0D448AAA-51AC-4374-9E31-4FE78C65DF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F5F9A-A55C-4FBA-8D79-1C84F3C8E2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"5579C03D-B65E-4579-B549-01C1BD339EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d0:*:*:*:*:*:*:*","matchCriteriaId":"E63404EA-0893-487F-AAEC-EF477E7B5B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d1:*:*:*:*:*:*:*","matchCriteriaId":"BAE7F716-4C1B-4BF9-BC5C-B44CFA797412"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d2:*:*:*:*:*:*:*","matchCriteriaId":"737FCDCE-43BB-4DE4-8082-E501EE26BA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D274307-4D78-4F4E-8F0C-2CE51D4EF0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:beta0:*:*:*:*:*:*","matchCriteriaId":"60C25402-0A69-470B-8C9F-580BCC8E704A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:rc0:*:*:*:*:*:*","matchCriteriaId":"BE4AC5EC-4EE1-4641-A2D7-8D80E53A3800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E7DD698C-9DB0-4D41-98D9-286DABB51CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F92C801-9C82-4174-A65E-9B6E9D97F5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8CBDAE22-A78D-43EC-BC66-07A571DCB995"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DEE25A6C-CAEE-463A-A0B4-763058A5F199"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93784446-870F-4714-A18C-EE7CF09E9A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.4:rc0:*:*:*:*:*:*","matchCriteriaId":"3E6F6DA2-FF77-45C7-82DB-7699ED4AB1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B32D70B-89DD-4A48-AEBC-0E6E93354808"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"51419B6C-A11C-4080-A8EE-FDB6E21269A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"66F37AA5-2602-42BC-9CB0-C6E53335D897"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.8_01:*:*:*:*:*:*:*","matchCriteriaId":"28527C05-D797-4E26-8BC9-57DD30F3F5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"E758E39E-4CAA-438A-B21A-00826C4000CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"829F2EA3-DF4F-4329-96EC-F8DDFD3018A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:rc2:*:*:*:*:*:*","matchCriteriaId":"4D4FE910-DF31-4CF9-9D20-6D4CD847D423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"ED8F5AB5-8402-49C5-A28D-433B0227DD3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre0:*:*:*:*:*:*","matchCriteriaId":"A64CB9CA-BBA1-4863-B54E-1097C8E3851B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre1:*:*:*:*:*:*","matchCriteriaId":"2B933981-DE49-4407-BCD5-E5FAC0583B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre2:*:*:*:*:*:*","matchCriteriaId":"42385DC4-BE2D-4156-8B65-EB0860A36EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"6437A8AB-462B-4C4E-B189-58026AE78804"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A1339AF7-DCCF-449A-A875-AF0AB5118569"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:rc0:*:*:*:*:*:*","matchCriteriaId":"0499A6D8-43CB-49AA-A1E7-0EE28956E894"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"8C12E374-9B1B-4952-9631-14143261E938"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"29BAE0E2-B245-46D8-AA11-D9BF40158A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.15:rc0:*:*:*:*:*:*","matchCriteriaId":"C6446496-9842-4677-8076-E3A720D37100"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"535ADA05-0809-4631-8CFD-ED22711995CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"8649DCC7-2A43-419C-AAD1-10290034A923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"C06E26FA-88DF-4F05-B08B-B0D760844453"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.19:*:*:*:*:*:*:*","matchCriteriaId":"2218730A-4DC2-492B-A1ED-7721D53CA1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.20:*:*:*:*:*:*:*","matchCriteriaId":"F27BC968-7D4B-4661-9316-DA548BD0F52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.20:rc0:*:*:*:*:*:*","matchCriteriaId":"E926E761-FD3A-4156-8365-2FA3433D22F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.21:*:*:*:*:*:*:*","matchCriteriaId":"7E87A10C-A28D-46C8-B11D-301451FA969C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.22:*:*:*:*:*:*:*","matchCriteriaId":"174E3F20-6784-485A-922F-676FFE5BF406"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.23:*:*:*:*:*:*:*","matchCriteriaId":"A6B09CD0-9523-4333-BD5E-B8DF4AF201B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.23:rc0:*:*:*:*:*:*","matchCriteriaId":"E47CE334-8E29-4063-8957-BAA83B49FDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:*:*:*:*:*:*:*","matchCriteriaId":"18B098A9-F324-49A0-9ACB-3E22D9C9F7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:rc0:*:*:*:*:*:*","matchCriteriaId":"9BE4C864-32A3-4507-977B-64D583AF74E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:rc1:*:*:*:*:*:*","matchCriteriaId":"E062D526-F046-4CC4-85B5-68AAF90F50AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.25:*:*:*:*:*:*:*","matchCriteriaId":"B56A6E02-1969-4F4F-82B6-7508C86FB9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.26:*:*:*:*:*:*:*","matchCriteriaId":"AE48DB9C-E0B4-403C-8D02-E7C3D6A6EFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.27:*:*:*:*:*:*:*","matchCriteriaId":"2D19EB77-8D76-4B64-B715-8F57358CAECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha0:*:*:*:*:*:*","matchCriteriaId":"BA2DBF03-E810-4AE2-9A71-AEF6EA4E536B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"040585FC-6BE9-4B71-AD86-0D61FDEDB6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"7B891FCB-0633-4C08-B16F-0A664D2DCE6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"54292E8D-D579-4589-BA95-E451C5C8E555"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta0:*:*:*:*:*:*","matchCriteriaId":"7F0FB14F-7024-4E40-9F02-CE368A813E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D5AAAABB-E5FA-4459-BDEE-FF9CD52CAF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5884BEE2-3697-4B0E-83E5-1A198323B878"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2A569C44-3A0B-4909-B649-4CF2E4933DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7904365A-D0A6-4D28-9FAB-341FE331B075"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23A02116-6B1A-4F9F-8A63-C241ABD070D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"70C6274C-1F51-4FDD-BEC2-46B282F1F1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1DAACAF6-7CA4-40A2-A9D0-65671FCC56E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"B4E4471A-F016-4B23-A67E-BF25953D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:rc0:*:*:*:*:*:*","matchCriteriaId":"DE6D4E7F-11FC-4849-A5F5-DCD09752C666"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"ED4AC3A1-95B2-4E28-AE87-41ADC45C45DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"627AAA2A-0601-4ACD-BD48-369C95626A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6C4BFAA-1661-4EAA-840E-AC95B99E39D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:rc0:*:*:*:*:*:*","matchCriteriaId":"54CE8D50-4F58-4857-8580-84EAD15B73B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8911C3D3-CE91-4F09-AFAF-F27AEA70D744"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4EF1A9C9-8F21-4A10-A801-AA29BC8AA509"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.2:pre0:*:*:*:*:*:*","matchCriteriaId":"D6EC919B-EA06-48DE-B3FC-C50396232C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"50A32E32-3E8B-46F4-865E-4FCD9DBD3FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc0:*:*:*:*:*:*","matchCriteriaId":"1CE35011-D35C-4B9C-9A79-962D7DD0DB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"0591418E-F324-4061-9719-90B64122FC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"B367B4F4-4D87-4BDA-B0A1-2603AA85B52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"37E42FDB-3F1C-4810-91F2-2E7292A3C425"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc4:*:*:*:*:*:*","matchCriteriaId":"FF735C84-651F-4971-A7EE-C73CE79828B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C1E3BF8D-CE7D-4810-B4C2-F7D1ACC5A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.4:rc0:*:*:*:*:*:*","matchCriteriaId":"B865666D-3AD2-4F8E-9371-A2CFB40DDE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D6283995-B660-4015-881C-36A8CC1869BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc0:*:*:*:*:*:*","matchCriteriaId":"36D7DF04-644D-4DF3-9005-6C52B00D0A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"224559B0-1A22-427A-AB55-51D6E7084617"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"B2AAEF6E-A978-4C2A-BBCB-1726C76E4DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D1D43081-A6F2-4E50-A4C7-9037EE36C830"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6E6A4797-85E9-4CE2-A751-F63CEEE07603"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.7:rc0:*:*:*:*:*:*","matchCriteriaId":"DA4B1901-CC70-4C02-9133-E7DEA251C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4497A7-8D80-4F2C-9A92-C171D5497056"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A98BE423-C6CA-4C34-859E-25D891FDC7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"7E158EB7-8424-4822-96DF-6308FCA77138"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"BB8BC6F9-C78A-4B76-9498-646C03EBDBDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.11:rc0:*:*:*:*:*:*","matchCriteriaId":"785057A7-9ECA-4A8C-8497-3AC344D69BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"97F39F8B-21F7-4D8D-838B-97B5B2B0658B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"C6CE0063-9A70-43F4-9427-067BD665BE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"5CAD09DE-8D68-4DE6-B1E1-4308B2D0BCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0D427FB0-D97B-40D7-A03D-FDB972C219FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha0:*:*:*:*:*:*","matchCriteriaId":"B9B1ACB4-A7B4-4207-8C71-045B4E066474"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"9EBB87BA-6FFA-40F1-9075-CACC03ECF964"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"53C17181-13E0-47F2-B35C-2375CC25B0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"6D2ACDC9-9FF6-4A25-9296-2E088606B38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta0:*:*:*:*:*:*","matchCriteriaId":"8665FE23-C558-4346-9920-36F0AE8A47AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3B19D912-0A07-4EED-A7D2-81C7493AE481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"DB95EB3C-61C4-46FB-AF57-1AEED089D014"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"96B26040-AAD7-4CE2-AFA5-FD711C36A4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"27027709-B180-4DAE-9385-3E407E3EF4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"4E580541-5375-46AA-B42C-55B0F8C15758"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"DB9AA914-09E3-4346-BC9A-9DCBD0D1EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"803B064D-32BF-4137-A320-8B8579C269DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta17:*:*:*:*:*:*","matchCriteriaId":"7B5C42D8-5A59-4A23-A86D-538F285497FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"47FF0752-AB64-4352-9B55-2198EA927625"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7F933B53-4F01-42B8-AC09-1C31D4836093"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CFD54477-BAE2-4833-AEDF-FAFD80F64F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"9C407D54-6828-4298-9331-7F94E0BF28E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9861AD14-AFFB-4A4E-91BF-BF323230012A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"F8EC131C-BE8C-4F1C-AC83-8E84CF4199C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta8:*:*:*:*:*:*","matchCriteriaId":"CCF4C1FC-9F4C-4763-A7D9-9FFC8F0B392F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"06E74876-6E82-412C-8B74-019BF7CC71CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:betax:*:*:*:*:*:*","matchCriteriaId":"B8410DED-A0E5-4318-9370-7994D476CBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"547FEA12-F46C-4585-92D1-B390452D982A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3956FC00-6776-42B6-8386-50F99F91833D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E1C831B8-C865-444D-A18B-569D80D27AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"47E41EF8-5DD7-4018-ABF9-1FCEFA631351"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"32EDB585-7123-40F1-84B2-36F0282E7C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6FEA754C-343D-4FB3-BA64-4C7691285126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C1CFEDA-5F30-48B9-8B0F-E36CB579DDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"586B69D3-7734-4ECA-8E84-8FEB2A914471"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre0:*:*:*:*:*:*","matchCriteriaId":"D61DE1A4-36B9-4EDD-9628-B736318973C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre1:*:*:*:*:*:*","matchCriteriaId":"C981EEAA-1D2B-44BC-9ED5-D3851F31A67F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre2:*:*:*:*:*:*","matchCriteriaId":"6A7D5DD4-EB54-4C4C-8090-421C3319EDEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre3:*:*:*:*:*:*","matchCriteriaId":"ADB640DA-460C-45EC-8F02-A03E055ED15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"079E0899-2130-431E-9805-013A8B853BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"10681635-C15C-44C8-BFB5-67912D4D39E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E75B9E0D-D7CD-47EA-AB0C-86645CA2DF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A877189B-8D9E-4A09-AC1C-831D0E15E686"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A411147B-CE7E-4277-A5DF-83B90C4FC97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.1:rc0:*:*:*:*:*:*","matchCriteriaId":"0615E5DF-590A-454D-BEE3-ACEB16DD83E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B83BFC82-97CF-40FF-B087-3B2B2DC5EE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:pre0:*:*:*:*:*:*","matchCriteriaId":"B5DE9EF1-22BC-4182-8905-038AA06F8A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:pre1:*:*:*:*:*:*","matchCriteriaId":"3DAB11DB-4B81-4DDA-A29F-DEE72658E903"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc0:*:*:*:*:*:*","matchCriteriaId":"2CCEF874-0F28-40F3-84D7-9B2F1510054A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"84A6F86D-B74A-467E-A16C-25A255CC61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"C1BC12C8-98F4-4F41-979C-540F08908199"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"B4B5666F-C034-4656-A2D8-5D804CA3AA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc4:*:*:*:*:*:*","matchCriteriaId":"F7EC937F-3C86-4E63-86E2-0118DAD15430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc5:*:*:*:*:*:*","matchCriteriaId":"699F1242-4422-4134-B191-F42CA8EAA91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B7810EC-58C5-4BB4-B2E5-6196364B3F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"56644769-E21B-46E3-9131-4078500F9B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:rc0:*:*:*:*:*:*","matchCriteriaId":"812CC60A-71D8-47E2-BE60-BCE975418047"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"3B860EF7-0F72-45D6-B4B6-D3E29B07F88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A2C2A9E3-8C89-4D2D-AECA-55415DDD4BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.5:rc0:*:*:*:*:*:*","matchCriteriaId":"F3550007-F89A-4164-BA45-30104347E463"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5A8E5744-F4FB-4D67-9DEA-938FDC66B7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:rc0:*:*:*:*:*:*","matchCriteriaId":"80BFA8A6-2EC8-4BD4-BAA8-768246EC277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"CC92AA15-22D9-4213-BC7D-C36FBE4B249D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DC998D08-61EC-45EE-AC67-41CB2B96BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"717F839C-2DDC-4D1F-84EE-8F87F4030904"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.9:*:*:*:*:*:*:*","matchCriteriaId":"66649F13-2EAE-4F76-B21C-585C57921655"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BBD66FB6-F007-46DA-82B6-5083C75E5C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2D85A1B1-4E94-4F7C-B363-1F8C18999E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DF21570D-1EEF-4254-9BF2-8CAE8B408407"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"01A59DB6-B292-4040-9945-5ADADFBDFC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc2:*:*:*:*:*:*","matchCriteriaId":"41419D41-EE7A-4464-94E7-847BD72EAAE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc3:*:*:*:*:*:*","matchCriteriaId":"5E16D7BC-9BCE-4FFD-9289-E7D951DA254A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc4:*:*:*:*:*:*","matchCriteriaId":"859687C2-C15E-4D6B-B109-39F9AE80397C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc5:*:*:*:*:*:*","matchCriteriaId":"F6563B61-601D-4C8A-9572-BD848C3A8313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"D05A27CC-C36F-425A-B72B-8F3DE19D5587"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:*:*:*:*:*:*:*","matchCriteriaId":"76857BA7-99D9-489B-8ED5-292DAA083931"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:pre0:*:*:*:*:*:*","matchCriteriaId":"2C4AE268-006A-4EDE-8D2E-3CCD35F8EC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc2:*:*:*:*:*:*","matchCriteriaId":"8F726A16-C432-4679-A904-37C0FE820883"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc3:*:*:*:*:*:*","matchCriteriaId":"81586EBF-EDFB-42C9-B5E2-BE29B66CE968"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc4:*:*:*:*:*:*","matchCriteriaId":"20E0FB52-1B22-46E5-B83D-D88513A3E314"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc5:*:*:*:*:*:*","matchCriteriaId":"1D9C76FD-3612-410F-AB14-A36D2C520439"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8DF87A1-6CE0-4232-8801-43DE4D0D38E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:m1:*:*:*:*:*:*","matchCriteriaId":"87F81322-4604-43D5-B57E-3E56A66F22B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:pre0:*:*:*:*:*:*","matchCriteriaId":"8C6457AD-D323-446C-969D-9714FA13ECB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:pre1:*:*:*:*:*:*","matchCriteriaId":"9104207F-ACD0-4B65-B29B-5F071F7980B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:7.0.0:pre3:*:*:*:*:*:*","matchCriteriaId":"08C7BEF3-B0F2-451A-8470-59FEDB8B0D36"}]}]}],"references":[{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"cve@mitre.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"cve@mitre.org"},{"url":"http://jira.codehaus.org/browse/JETTY-1004","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/402580","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CRDY-7RKQCY","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35675","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022563","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499867","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html","source":"cve@mitre.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jira.codehaus.org/browse/JETTY-1004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/402580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CRDY-7RKQCY","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01262.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1524","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mort Bay Jetty anterior a v6.1.17 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una petición de listado de directorio que contenga el carácter ; (punto y coma)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.16","matchCriteriaId":"52DCEE3F-F777-48A8-80B6-1DCD95874432"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFFAED25-216C-4AB0-BAF4-7ACCC04FFB90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BF2825D2-57A6-4DC7-84DC-608AE123E04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6500547B-8CDD-4595-AF2D-1A2014B66191"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C3D7BAEA-7F58-4FA3-9F34-CF5CBC4362E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"58750CF6-E237-4F28-A446-DE0E882BD6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"827C3682-91FA-42D4-A0DD-CC61CB94A9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"45401E9F-9C20-4600-AE6A-CD0A1F30C4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F23500C7-2A70-4E28-97E6-13161AE1EBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"CA8A425F-BBF5-48D2-AD0E-6D97C7808A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"916600EC-3D21-4367-878B-8B0E19D10D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4877B638-8D6C-40ED-B6B5-23C8B7787F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"B522D870-8D99-42FB-9F33-4CD314369CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"B3D046A5-C346-4E01-A0B2-0876FD8A3F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A07EEADC-A52B-4F99-9A68-4DED263992BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"DD72AC80-DA74-4F06-880A-87317917476E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBA5A992-A7FF-411F-9D8C-02A08090F9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"902C6363-358D-452B-A687-78486B58ABBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"279C47D8-6D64-4F70-824F-AA82FDE2BDD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D213EDC8-B7C5-4093-B10B-E7A207F159F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5293F817-6EBB-4B9A-BBA0-852FCC0641B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3E067B12-B4D8-4DDB-8F65-63205ABB20E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C32EDFC7-58D0-46B6-B946-72AB8C0A7463"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7AD9BC1D-0205-44CC-91BC-6588CDECB800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9EEBD3B-19A6-4C35-B823-5F99286FC873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FBA14BB2-E4C0-494A-98A9-5A9916259583"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"712FF994-343E-4316-9C6F-B57F95B5FEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C399FBC5-5133-4977-BD55-4AB1C8067CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"59244D30-6A90-40D5-8CD7-79EABBC2D58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A004B7E0-158E-49E0-93D8-38B49B2C0448"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"218A6DB9-D4A2-4063-B87B-953BDD5360D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"4793A285-5346-4812-9C26-271F166C13B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:alpha0:*:*:*:*:*:*","matchCriteriaId":"2B62ACEB-5F1E-4147-ADB0-B16DFB56171D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:alpha1:*:*:*:*:*:*","matchCriteriaId":"265A00C8-C367-426C-BC5F-DD123F02D461"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta0:*:*:*:*:*:*","matchCriteriaId":"CC9EC9F5-A7E9-4118-84A5-068CAD51864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"D4B6D8AE-47C5-422C-980C-58C60BBDD574"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"A35F3C2D-DC60-4347-90C1-239B233917A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta3:*:*:*:*:*:*","matchCriteriaId":"21109D6D-063C-4502-BDAB-5D255DAFF8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2:beta4:*:*:*:*:*:*","matchCriteriaId":"EDC65F75-0CD7-4F5A-8BCD-F3F0CD494ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A259BF8E-00DD-4559-9925-FDD7D8C16F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C005200-8957-4A58-B7AE-B645C94C4C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"69780249-BE2F-424F-90F6-4CFC43D1DF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9DD32E82-427E-48F7-8D04-2793C78F855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4C2AAA1A-4D81-4B23-88B7-FFD05758A9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9414F1F6-63F9-4F7C-95EF-91CC4322ECE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C8DE3B94-DF72-4E61-B795-A0CD4A10D349"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"53E5B7F4-5543-43DA-8D26-09AE9D3A74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B5E32A34-7C0B-4DF3-8CA7-35057EFD7800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C61055B-E90D-4146-AEF2-B369ACE681CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.0a:*:*:*:*:*:*:*","matchCriteriaId":"453715D7-6E59-432D-B88E-A2573298B35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C44D3FB9-7CAA-4D6A-8D69-9E30CA42FFB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0A70B1E7-48D3-4EEE-9755-CDA6575D1550"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465F9B9A-C335-4341-A98C-8FECCC018FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"19DDA3F2-22FA-49EF-8F94-C11495C2CD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4E213CE6-0BFE-41DB-82BA-2C6A6D02455C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BED8B2C4-1288-4385-B74F-59557F13E1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A3511BFF-CFE2-4938-8ACE-3638104CAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C36A7783-041F-4FD7-AEE2-5DFCD18E2343"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A795AA0C-A893-4BF8-A991-C997AEBF716C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"367F4809-D74B-4C05-9AB8-EE89D605A755"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"F93D0813-EC1B-4301-912B-D1C1D4260F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"E82EC442-85DA-4471-9871-67AFA32E8E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"C507301A-FDC0-42A5-A385-A4ADC8D4CD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"843E68E4-CD85-4BCB-8216-034FD1567E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"45519B5C-9713-4020-AC9E-95742C585152"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"843235B9-728A-450B-95D6-1FC694EF6D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"902945F1-4F11-4577-BD28-BB35E815F125"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"20A0597E-CFA6-404C-936E-3A8065FF9145"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"40951E40-8E30-465E-B1C0-A0C85ADBE217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"21D5C70A-64E4-434E-93CF-9FC6C510D545"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"54D7108A-6CB6-46AC-B9CB-DF33F090C738"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D3254B37-125F-44BA-87B6-0C4DEE0B214C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc7:*:*:*:*:*:*","matchCriteriaId":"78ECE463-E0EA-4691-90CA-E548FCACC4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.0:rc8:*:*:*:*:*:*","matchCriteriaId":"F466738D-D94C-4D89-AA2C-BE2E8E16FE1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77A320CE-96F5-4B2C-B2C7-7E8A7E5334BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34BBDAF7-EBE4-49B4-860A-3719006FFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5C8529EC-86A5-444A-8656-760DF95258DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"608F3AAA-F5CB-4694-90BB-75C66ACA8755"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8F3A4849-E341-4BE6-84AB-57A24E0922A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CAE6090A-AD1C-4831-8112-B4462980FAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a0:*:*:*:*:*:*:*","matchCriteriaId":"6A840DB6-BAB5-4FA8-B6AE-8DC94A82C791"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a1:*:*:*:*:*:*:*","matchCriteriaId":"9094D5D9-B3D4-4050-97C7-6F5FAF49CE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a2:*:*:*:*:*:*:*","matchCriteriaId":"23BF46B5-F614-4074-8C6A-0AE3A8EA3B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a3:*:*:*:*:*:*:*","matchCriteriaId":"9CD2E8FD-6381-43CA-8467-C968DB9A8D72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a4:*:*:*:*:*:*:*","matchCriteriaId":"A6C5F69E-75AF-40A8-9707-F9AEE79A146D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a5:*:*:*:*:*:*:*","matchCriteriaId":"D8D3A860-1747-47EF-9384-BD83F77E9A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a6:*:*:*:*:*:*:*","matchCriteriaId":"10393155-E386-420A-8699-68A3B49DE29C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a7:*:*:*:*:*:*:*","matchCriteriaId":"9494C7B4-65B0-46E2-B8F4-9325882FCF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a8:*:*:*:*:*:*:*","matchCriteriaId":"F4EA2E6E-DD73-4245-B9BA-DE7504AC805A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a9:*:*:*:*:*:*:*","matchCriteriaId":"E2B973C7-CB4D-4E65-8812-19FF963D1D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a90:*:*:*:*:*:*:*","matchCriteriaId":"D5620162-7E20-4AC6-BFCD-3302471B21BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a91:*:*:*:*:*:*:*","matchCriteriaId":"5B809408-895A-4909-9609-B529C3F9019E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a92:*:*:*:*:*:*:*","matchCriteriaId":"FC8EEECA-E493-45AE-BF20-466D90628C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a93:*:*:*:*:*:*:*","matchCriteriaId":"AB746413-10C2-4A75-9A8A-DEB839140F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a94:*:*:*:*:*:*:*","matchCriteriaId":"94F6250D-6360-4C9F-A124-CF8389084C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a95:*:*:*:*:*:*:*","matchCriteriaId":"0215E5C6-9CC0-41DE-988A-2810ACD8209E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a96:*:*:*:*:*:*:*","matchCriteriaId":"3A3B5B55-E4D0-4928-B4EA-D95CB28E81AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a97:*:*:*:*:*:*:*","matchCriteriaId":"5B5705E4-BA21-4320-8230-C6B6C3922338"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a98:*:*:*:*:*:*:*","matchCriteriaId":"7DF706A6-9418-4948-AD1D-989A7A41A464"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.a99:*:*:*:*:*:*:*","matchCriteriaId":"C6196D65-AA3A-46D5-9A59-30846832D4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b01:*:*:*:*:*:*:*","matchCriteriaId":"A3CB6CA5-FDF5-495F-A631-ED43DC41C2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b02:*:*:*:*:*:*:*","matchCriteriaId":"DA22B8BC-52C4-4792-8804-24E5B87F701D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b03:*:*:*:*:*:*:*","matchCriteriaId":"2EC5AFE5-D0AC-4619-9C60-D151AEDBC27A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b04:*:*:*:*:*:*:*","matchCriteriaId":"A5689AB8-C02B-4F97-9AC7-A3EDDE7DB96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.0.b05:*:*:*:*:*:*:*","matchCriteriaId":"DF1AA7EE-75BD-4D35-A071-D5F25080CE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc0:*:*:*:*:*:*","matchCriteriaId":"71684452-6A1D-4023-A10A-D078F24DC7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D28F3815-B209-4409-82EA-A083096F56D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc2:*:*:*:*:*:*","matchCriteriaId":"A547D1F8-3916-4D78-8ED6-0B2E1EB87BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc3:*:*:*:*:*:*","matchCriteriaId":"2D4CFA43-DC62-42B5-8E96-9D6EFDF73145"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc4:*:*:*:*:*:*","matchCriteriaId":"D117126F-306B-44C7-A2BE-0A114E658847"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc5:*:*:*:*:*:*","matchCriteriaId":"DD6B826E-E97E-4287-B604-8810F79DDDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc6:*:*:*:*:*:*","matchCriteriaId":"12CE9A9F-1118-4C96-B37B-8D9D9E53228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc7:*:*:*:*:*:*","matchCriteriaId":"6F0F93DB-CE46-42C9-A059-8F27FCC59FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc8:*:*:*:*:*:*","matchCriteriaId":"1A9D25B8-D48B-43C5-A5AB-3D60C00A6DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1:rc9:*:*:*:*:*:*","matchCriteriaId":"EE783D81-02E5-4D78-A65C-572A69765D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6F236E4-2FB8-434E-A4AE-F5DA7CC94AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F92CFF11-E18D-4D07-81D5-9ACE41084AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"54087E79-2212-4B35-A631-6C15AC70D413"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E22496A-C88C-47D5-9F29-29CB184A626C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"139D9B00-5FDB-48E1-AFB3-098184E73318"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1512F40A-E056-42BD-A733-CBA4929CD2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9DE25824-2C05-4F96-BA2B-2EE0923CA35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7BEAC38-360A-4F4A-B3A2-DA5EF5310ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"34896B7F-3BA0-4D14-A6A8-042DDAE4B787"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A926CADB-EE62-4F54-9905-A8900103DBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"ACEF6355-DE50-4C9F-B96A-92F35714480B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"866E2E49-24D8-4216-9477-0C949EF8AC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0:rc3:*:*:*:*:*:*","matchCriteriaId":"ECEC910E-A2FA-403D-B59C-AFD2BBFBD088"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6D9F4F9-89A8-4884-9716-EF9FDA250120"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE0646AD-13A6-40A4-B06A-9BF6B1B8064A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc0:*:*:*:*:*:*","matchCriteriaId":"C5B71502-C203-41B0-A9F4-652A274660A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"A73A92E5-5779-4C54-B7E7-6A056B3998C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"D306CD82-93BB-4CF1-80EB-B567E9155395"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DAA932D-35F9-4052-A3FA-2FB09ED6A19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"03BEBC5F-26C8-480A-B986-64655DED1669"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E1738719-44A2-44D5-973E-F90282A9B9C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E912CA35-FCF6-4F06-9974-CCE2F246D570"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"ADBA3DFC-F229-49A6-9191-6A3975C18416"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b0:*:*:*:*:*:*:*","matchCriteriaId":"5E8CCB26-4831-47D4-86B3-D15915E18246"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b1:*:*:*:*:*:*:*","matchCriteriaId":"E8847B6C-6011-44DC-B97D-9D61354D9F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.b2:*:*:*:*:*:*:*","matchCriteriaId":"B6A5135B-C30A-41A3-9E22-97451AAE1931"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d0:*:*:*:*:*:*:*","matchCriteriaId":"583918DB-2E06-4AB0-BCFC-A373C40D72DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d1:*:*:*:*:*:*:*","matchCriteriaId":"507E24BC-6C1F-4CAC-B942-15293341162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d2:*:*:*:*:*:*:*","matchCriteriaId":"D2ADAC7B-3CE6-444B-BE8A-35B945B028B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d3:*:*:*:*:*:*:*","matchCriteriaId":"1346595C-0416-40C7-9450-F4F1D17B647C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.0.d4:*:*:*:*:*:*:*","matchCriteriaId":"76C1FB85-81DC-44FB-9960-FC7E2BB0B871"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C07610E5-454A-44A9-B341-B9642FA56EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"30E203AE-92EF-40EA-B7CD-8BFB88B4256E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6AE29CB8-80EE-4849-ACC1-A42AD07FEA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"AE47A5EA-A381-497F-B046-CA34A8940886"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"900CA07F-B7CE-4809-A6B6-1F24F7C10313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C39F3BB4-D4B7-4512-A86B-CB771233DD95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"6A333033-ACCB-4E0C-AF00-C419DEADEC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.0:rc6:*:*:*:*:*:*","matchCriteriaId":"EE935CEE-7B99-42EE-AE64-5EBCB776B20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AFB0FA4D-E6B1-4495-9D48-245D584F6DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB8D7C9F-5E0E-491B-A585-81BC09CA1893"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BC5ABD34-B873-425B-A518-AABB7998C3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"0D448AAA-51AC-4374-9E31-4FE78C65DF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"8D1F5F9A-A55C-4FBA-8D79-1C84F3C8E2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"5579C03D-B65E-4579-B549-01C1BD339EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d0:*:*:*:*:*:*:*","matchCriteriaId":"E63404EA-0893-487F-AAEC-EF477E7B5B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d1:*:*:*:*:*:*:*","matchCriteriaId":"BAE7F716-4C1B-4BF9-BC5C-B44CFA797412"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.1.d2:*:*:*:*:*:*:*","matchCriteriaId":"737FCDCE-43BB-4DE4-8082-E501EE26BA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D274307-4D78-4F4E-8F0C-2CE51D4EF0F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:beta0:*:*:*:*:*:*","matchCriteriaId":"60C25402-0A69-470B-8C9F-580BCC8E704A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:rc0:*:*:*:*:*:*","matchCriteriaId":"BE4AC5EC-4EE1-4641-A2D7-8D80E53A3800"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E7DD698C-9DB0-4D41-98D9-286DABB51CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F92C801-9C82-4174-A65E-9B6E9D97F5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8CBDAE22-A78D-43EC-BC66-07A571DCB995"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DEE25A6C-CAEE-463A-A0B4-763058A5F199"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93784446-870F-4714-A18C-EE7CF09E9A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.4:rc0:*:*:*:*:*:*","matchCriteriaId":"3E6F6DA2-FF77-45C7-82DB-7699ED4AB1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B32D70B-89DD-4A48-AEBC-0E6E93354808"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"51419B6C-A11C-4080-A8EE-FDB6E21269A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"66F37AA5-2602-42BC-9CB0-C6E53335D897"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.8_01:*:*:*:*:*:*:*","matchCriteriaId":"28527C05-D797-4E26-8BC9-57DD30F3F5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"E758E39E-4CAA-438A-B21A-00826C4000CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"829F2EA3-DF4F-4329-96EC-F8DDFD3018A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.9:rc2:*:*:*:*:*:*","matchCriteriaId":"4D4FE910-DF31-4CF9-9D20-6D4CD847D423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"ED8F5AB5-8402-49C5-A28D-433B0227DD3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre0:*:*:*:*:*:*","matchCriteriaId":"A64CB9CA-BBA1-4863-B54E-1097C8E3851B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre1:*:*:*:*:*:*","matchCriteriaId":"2B933981-DE49-4407-BCD5-E5FAC0583B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.10:pre2:*:*:*:*:*:*","matchCriteriaId":"42385DC4-BE2D-4156-8B65-EB0860A36EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"6437A8AB-462B-4C4E-B189-58026AE78804"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A1339AF7-DCCF-449A-A875-AF0AB5118569"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:rc0:*:*:*:*:*:*","matchCriteriaId":"0499A6D8-43CB-49AA-A1E7-0EE28956E894"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"8C12E374-9B1B-4952-9631-14143261E938"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"29BAE0E2-B245-46D8-AA11-D9BF40158A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.15:rc0:*:*:*:*:*:*","matchCriteriaId":"C6446496-9842-4677-8076-E3A720D37100"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"535ADA05-0809-4631-8CFD-ED22711995CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"8649DCC7-2A43-419C-AAD1-10290034A923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"C06E26FA-88DF-4F05-B08B-B0D760844453"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.19:*:*:*:*:*:*:*","matchCriteriaId":"2218730A-4DC2-492B-A1ED-7721D53CA1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.20:*:*:*:*:*:*:*","matchCriteriaId":"F27BC968-7D4B-4661-9316-DA548BD0F52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.20:rc0:*:*:*:*:*:*","matchCriteriaId":"E926E761-FD3A-4156-8365-2FA3433D22F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.21:*:*:*:*:*:*:*","matchCriteriaId":"7E87A10C-A28D-46C8-B11D-301451FA969C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.22:*:*:*:*:*:*:*","matchCriteriaId":"174E3F20-6784-485A-922F-676FFE5BF406"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.23:*:*:*:*:*:*:*","matchCriteriaId":"A6B09CD0-9523-4333-BD5E-B8DF4AF201B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.23:rc0:*:*:*:*:*:*","matchCriteriaId":"E47CE334-8E29-4063-8957-BAA83B49FDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:*:*:*:*:*:*:*","matchCriteriaId":"18B098A9-F324-49A0-9ACB-3E22D9C9F7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:rc0:*:*:*:*:*:*","matchCriteriaId":"9BE4C864-32A3-4507-977B-64D583AF74E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.24:rc1:*:*:*:*:*:*","matchCriteriaId":"E062D526-F046-4CC4-85B5-68AAF90F50AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.25:*:*:*:*:*:*:*","matchCriteriaId":"B56A6E02-1969-4F4F-82B6-7508C86FB9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.26:*:*:*:*:*:*:*","matchCriteriaId":"AE48DB9C-E0B4-403C-8D02-E7C3D6A6EFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:4.2.27:*:*:*:*:*:*:*","matchCriteriaId":"2D19EB77-8D76-4B64-B715-8F57358CAECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha0:*:*:*:*:*:*","matchCriteriaId":"BA2DBF03-E810-4AE2-9A71-AEF6EA4E536B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"040585FC-6BE9-4B71-AD86-0D61FDEDB6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"7B891FCB-0633-4C08-B16F-0A664D2DCE6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"54292E8D-D579-4589-BA95-E451C5C8E555"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta0:*:*:*:*:*:*","matchCriteriaId":"7F0FB14F-7024-4E40-9F02-CE368A813E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D5AAAABB-E5FA-4459-BDEE-FF9CD52CAF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5884BEE2-3697-4B0E-83E5-1A198323B878"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"2A569C44-3A0B-4909-B649-4CF2E4933DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"7904365A-D0A6-4D28-9FAB-341FE331B075"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23A02116-6B1A-4F9F-8A63-C241ABD070D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"70C6274C-1F51-4FDD-BEC2-46B282F1F1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1DAACAF6-7CA4-40A2-A9D0-65671FCC56E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"B4E4471A-F016-4B23-A67E-BF25953D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:rc0:*:*:*:*:*:*","matchCriteriaId":"DE6D4E7F-11FC-4849-A5F5-DCD09752C666"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"ED4AC3A1-95B2-4E28-AE87-41ADC45C45DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"627AAA2A-0601-4ACD-BD48-369C95626A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6C4BFAA-1661-4EAA-840E-AC95B99E39D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:rc0:*:*:*:*:*:*","matchCriteriaId":"54CE8D50-4F58-4857-8580-84EAD15B73B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8911C3D3-CE91-4F09-AFAF-F27AEA70D744"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4EF1A9C9-8F21-4A10-A801-AA29BC8AA509"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.2:pre0:*:*:*:*:*:*","matchCriteriaId":"D6EC919B-EA06-48DE-B3FC-C50396232C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"50A32E32-3E8B-46F4-865E-4FCD9DBD3FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc0:*:*:*:*:*:*","matchCriteriaId":"1CE35011-D35C-4B9C-9A79-962D7DD0DB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"0591418E-F324-4061-9719-90B64122FC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"B367B4F4-4D87-4BDA-B0A1-2603AA85B52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"37E42FDB-3F1C-4810-91F2-2E7292A3C425"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.3:rc4:*:*:*:*:*:*","matchCriteriaId":"FF735C84-651F-4971-A7EE-C73CE79828B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C1E3BF8D-CE7D-4810-B4C2-F7D1ACC5A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.4:rc0:*:*:*:*:*:*","matchCriteriaId":"B865666D-3AD2-4F8E-9371-A2CFB40DDE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D6283995-B660-4015-881C-36A8CC1869BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc0:*:*:*:*:*:*","matchCriteriaId":"36D7DF04-644D-4DF3-9005-6C52B00D0A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"224559B0-1A22-427A-AB55-51D6E7084617"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"B2AAEF6E-A978-4C2A-BBCB-1726C76E4DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D1D43081-A6F2-4E50-A4C7-9037EE36C830"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6E6A4797-85E9-4CE2-A751-F63CEEE07603"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.7:rc0:*:*:*:*:*:*","matchCriteriaId":"DA4B1901-CC70-4C02-9133-E7DEA251C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4497A7-8D80-4F2C-9A92-C171D5497056"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A98BE423-C6CA-4C34-859E-25D891FDC7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"7E158EB7-8424-4822-96DF-6308FCA77138"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"BB8BC6F9-C78A-4B76-9498-646C03EBDBDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.11:rc0:*:*:*:*:*:*","matchCriteriaId":"785057A7-9ECA-4A8C-8497-3AC344D69BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"97F39F8B-21F7-4D8D-838B-97B5B2B0658B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"C6CE0063-9A70-43F4-9427-067BD665BE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"5CAD09DE-8D68-4DE6-B1E1-4308B2D0BCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0D427FB0-D97B-40D7-A03D-FDB972C219FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha0:*:*:*:*:*:*","matchCriteriaId":"B9B1ACB4-A7B4-4207-8C71-045B4E066474"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"9EBB87BA-6FFA-40F1-9075-CACC03ECF964"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"53C17181-13E0-47F2-B35C-2375CC25B0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"6D2ACDC9-9FF6-4A25-9296-2E088606B38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta0:*:*:*:*:*:*","matchCriteriaId":"8665FE23-C558-4346-9920-36F0AE8A47AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3B19D912-0A07-4EED-A7D2-81C7493AE481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta10:*:*:*:*:*:*","matchCriteriaId":"DB95EB3C-61C4-46FB-AF57-1AEED089D014"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta11:*:*:*:*:*:*","matchCriteriaId":"96B26040-AAD7-4CE2-AFA5-FD711C36A4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta12:*:*:*:*:*:*","matchCriteriaId":"27027709-B180-4DAE-9385-3E407E3EF4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta14:*:*:*:*:*:*","matchCriteriaId":"4E580541-5375-46AA-B42C-55B0F8C15758"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta15:*:*:*:*:*:*","matchCriteriaId":"DB9AA914-09E3-4346-BC9A-9DCBD0D1EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta16:*:*:*:*:*:*","matchCriteriaId":"803B064D-32BF-4137-A320-8B8579C269DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta17:*:*:*:*:*:*","matchCriteriaId":"7B5C42D8-5A59-4A23-A86D-538F285497FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"47FF0752-AB64-4352-9B55-2198EA927625"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7F933B53-4F01-42B8-AC09-1C31D4836093"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CFD54477-BAE2-4833-AEDF-FAFD80F64F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"9C407D54-6828-4298-9331-7F94E0BF28E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9861AD14-AFFB-4A4E-91BF-BF323230012A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta7:*:*:*:*:*:*","matchCriteriaId":"F8EC131C-BE8C-4F1C-AC83-8E84CF4199C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta8:*:*:*:*:*:*","matchCriteriaId":"CCF4C1FC-9F4C-4763-A7D9-9FFC8F0B392F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:beta9:*:*:*:*:*:*","matchCriteriaId":"06E74876-6E82-412C-8B74-019BF7CC71CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:betax:*:*:*:*:*:*","matchCriteriaId":"B8410DED-A0E5-4318-9370-7994D476CBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"547FEA12-F46C-4585-92D1-B390452D982A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3956FC00-6776-42B6-8386-50F99F91833D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E1C831B8-C865-444D-A18B-569D80D27AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"47E41EF8-5DD7-4018-ABF9-1FCEFA631351"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"32EDB585-7123-40F1-84B2-36F0282E7C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6FEA754C-343D-4FB3-BA64-4C7691285126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C1CFEDA-5F30-48B9-8B0F-E36CB579DDED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"586B69D3-7734-4ECA-8E84-8FEB2A914471"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre0:*:*:*:*:*:*","matchCriteriaId":"D61DE1A4-36B9-4EDD-9628-B736318973C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre1:*:*:*:*:*:*","matchCriteriaId":"C981EEAA-1D2B-44BC-9ED5-D3851F31A67F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre2:*:*:*:*:*:*","matchCriteriaId":"6A7D5DD4-EB54-4C4C-8090-421C3319EDEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:pre3:*:*:*:*:*:*","matchCriteriaId":"ADB640DA-460C-45EC-8F02-A03E055ED15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"079E0899-2130-431E-9805-013A8B853BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"10681635-C15C-44C8-BFB5-67912D4D39E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E75B9E0D-D7CD-47EA-AB0C-86645CA2DF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A877189B-8D9E-4A09-AC1C-831D0E15E686"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A411147B-CE7E-4277-A5DF-83B90C4FC97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.1:rc0:*:*:*:*:*:*","matchCriteriaId":"0615E5DF-590A-454D-BEE3-ACEB16DD83E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B83BFC82-97CF-40FF-B087-3B2B2DC5EE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:pre0:*:*:*:*:*:*","matchCriteriaId":"B5DE9EF1-22BC-4182-8905-038AA06F8A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:pre1:*:*:*:*:*:*","matchCriteriaId":"3DAB11DB-4B81-4DDA-A29F-DEE72658E903"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc0:*:*:*:*:*:*","matchCriteriaId":"2CCEF874-0F28-40F3-84D7-9B2F1510054A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"84A6F86D-B74A-467E-A16C-25A255CC61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"C1BC12C8-98F4-4F41-979C-540F08908199"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc3:*:*:*:*:*:*","matchCriteriaId":"B4B5666F-C034-4656-A2D8-5D804CA3AA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc4:*:*:*:*:*:*","matchCriteriaId":"F7EC937F-3C86-4E63-86E2-0118DAD15430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.2:rc5:*:*:*:*:*:*","matchCriteriaId":"699F1242-4422-4134-B191-F42CA8EAA91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B7810EC-58C5-4BB4-B2E5-6196364B3F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"56644769-E21B-46E3-9131-4078500F9B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:rc0:*:*:*:*:*:*","matchCriteriaId":"812CC60A-71D8-47E2-BE60-BCE975418047"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"3B860EF7-0F72-45D6-B4B6-D3E29B07F88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A2C2A9E3-8C89-4D2D-AECA-55415DDD4BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.5:rc0:*:*:*:*:*:*","matchCriteriaId":"F3550007-F89A-4164-BA45-30104347E463"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5A8E5744-F4FB-4D67-9DEA-938FDC66B7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:rc0:*:*:*:*:*:*","matchCriteriaId":"80BFA8A6-2EC8-4BD4-BAA8-768246EC277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"CC92AA15-22D9-4213-BC7D-C36FBE4B249D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DC998D08-61EC-45EE-AC67-41CB2B96BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"717F839C-2DDC-4D1F-84EE-8F87F4030904"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.9:*:*:*:*:*:*:*","matchCriteriaId":"66649F13-2EAE-4F76-B21C-585C57921655"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BBD66FB6-F007-46DA-82B6-5083C75E5C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.11:*:*:*:*:*:*:*","matchCriteriaId":"2D85A1B1-4E94-4F7C-B363-1F8C18999E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DF21570D-1EEF-4254-9BF2-8CAE8B408407"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc1:*:*:*:*:*:*","matchCriteriaId":"01A59DB6-B292-4040-9945-5ADADFBDFC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc2:*:*:*:*:*:*","matchCriteriaId":"41419D41-EE7A-4464-94E7-847BD72EAAE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc3:*:*:*:*:*:*","matchCriteriaId":"5E16D7BC-9BCE-4FFD-9289-E7D951DA254A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc4:*:*:*:*:*:*","matchCriteriaId":"859687C2-C15E-4D6B-B109-39F9AE80397C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.12:rc5:*:*:*:*:*:*","matchCriteriaId":"F6563B61-601D-4C8A-9572-BD848C3A8313"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.14:*:*:*:*:*:*:*","matchCriteriaId":"D05A27CC-C36F-425A-B72B-8F3DE19D5587"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:*:*:*:*:*:*:*","matchCriteriaId":"76857BA7-99D9-489B-8ED5-292DAA083931"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:pre0:*:*:*:*:*:*","matchCriteriaId":"2C4AE268-006A-4EDE-8D2E-3CCD35F8EC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc2:*:*:*:*:*:*","matchCriteriaId":"8F726A16-C432-4679-A904-37C0FE820883"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc3:*:*:*:*:*:*","matchCriteriaId":"81586EBF-EDFB-42C9-B5E2-BE29B66CE968"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc4:*:*:*:*:*:*","matchCriteriaId":"20E0FB52-1B22-46E5-B83D-D88513A3E314"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.15:rc5:*:*:*:*:*:*","matchCriteriaId":"1D9C76FD-3612-410F-AB14-A36D2C520439"}]}]}],"references":[{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"cve@mitre.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"cve@mitre.org"},{"url":"http://jira.codehaus.org/browse/JETTY-980","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40553","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34800","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1792","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499867","source":"cve@mitre.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jira.codehaus.org/browse/JETTY-980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1525","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action."},{"lang":"es","value":"CMD_DB en JBMC Software DirectAdmin anterior a v1.334 permite a usuarios remotos autenticados conseguir privilegios a través de metacaracteres del interprete de comandos en el parámetro \"name\" durante una acción \"restore\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.333","matchCriteriaId":"B768ED82-8524-4A8A-8870-150B4B2070A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:0.95:*:*:*:*:*:*:*","matchCriteriaId":"950B6C5B-8864-4248-BFE2-3559CEBCEAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1:*:*:*:*:*:*:*","matchCriteriaId":"5A7A412F-D5D3-4835-B496-931867BE2F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9E9F46CD-7BCB-4230-85DE-423FD56CBB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F3E73F85-C632-4FCE-8E0E-D43057F7F2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.02:*:*:*:*:*:*:*","matchCriteriaId":"9BF52D95-BBF9-4433-A7CA-938F663BBF8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D4D38930-9C2B-4C1E-A60E-2A01751E6962"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.3:*:*:*:*:*:*:*","matchCriteriaId":"684EA453-9B2F-4DC6-B352-33E9FF1D059E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.03:*:*:*:*:*:*:*","matchCriteriaId":"6F667CC1-B49B-4F1D-9D7F-BA9EA0B358B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.04:*:*:*:*:*:*:*","matchCriteriaId":"1EC670D6-4E3C-4911-BD82-5615029FF7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.05:*:*:*:*:*:*:*","matchCriteriaId":"F7AD7550-22EB-4AFB-AFEA-AEAE67DA5D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.06:*:*:*:*:*:*:*","matchCriteriaId":"AED4E43C-23C6-4FA7-BE9E-F2B680ACEDA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.07:*:*:*:*:*:*:*","matchCriteriaId":"3B871B01-7F60-42D3-A935-C8FAE964B742"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.08:*:*:*:*:*:*:*","matchCriteriaId":"DA0BCB5A-FDDD-43BB-9837-F8A99AF3C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.09:*:*:*:*:*:*:*","matchCriteriaId":"F6003B88-A67E-4DF3-B79A-3DA3FE4B232E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.11:*:*:*:*:*:*:*","matchCriteriaId":"80AE9A2B-1A17-44C7-960F-6C44F54E499B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.12:*:*:*:*:*:*:*","matchCriteriaId":"1C7A40F1-8099-45A9-B583-5DCD9418EEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.13:*:*:*:*:*:*:*","matchCriteriaId":"2A777926-1C6D-4815-9AD5-BB0187240DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.14:*:*:*:*:*:*:*","matchCriteriaId":"DC5D92DD-3FBA-4E61-A225-4533340F5E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.15:*:*:*:*:*:*:*","matchCriteriaId":"E38AFB57-3C20-40F4-9B2A-48A54618A95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.16:*:*:*:*:*:*:*","matchCriteriaId":"118EE3CB-8379-4596-A123-97E27E4755D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.17:*:*:*:*:*:*:*","matchCriteriaId":"3B9678BF-0C83-42B3-AF53-B5C03E876F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.18:*:*:*:*:*:*:*","matchCriteriaId":"6385C7C5-7FD5-482A-ADDB-A7253949D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.19:*:*:*:*:*:*:*","matchCriteriaId":"484B6212-6A45-4294-8D3C-FDAE8263FDEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.21:*:*:*:*:*:*:*","matchCriteriaId":"9EBE1E56-DD19-434B-9269-2CD4881A8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.22:*:*:*:*:*:*:*","matchCriteriaId":"1FD2FA1E-A4F7-4EDA-B976-6587E8FAE599"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.23:*:*:*:*:*:*:*","matchCriteriaId":"3EC562EE-048A-49D7-9F1B-A2BA6ABB30AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.24:*:*:*:*:*:*:*","matchCriteriaId":"C845A416-F58A-4ADB-81E9-A873052CD9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.25:*:*:*:*:*:*:*","matchCriteriaId":"64BDDF62-9CBC-4AB7-BEBC-0FABDC4DF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.26:*:*:*:*:*:*:*","matchCriteriaId":"01B46A2D-7333-497C-90D8-C73088682C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.27:*:*:*:*:*:*:*","matchCriteriaId":"7336ABAE-8274-478F-9807-BF6F622D2805"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.28:*:*:*:*:*:*:*","matchCriteriaId":"C414DDF6-95B8-469B-B604-94B9C585EAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.29:*:*:*:*:*:*:*","matchCriteriaId":"D1020F89-5184-4786-8506-C049213522F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.31:*:*:*:*:*:*:*","matchCriteriaId":"E83CBC81-74F8-4880-8BF8-A248C2978329"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.32:*:*:*:*:*:*:*","matchCriteriaId":"81656A6B-A30A-415E-8212-FDE8A4BE7F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.33:*:*:*:*:*:*:*","matchCriteriaId":"FBC6DA4C-4EA7-4A34-999F-E6EEA1187A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.081:*:*:*:*:*:*:*","matchCriteriaId":"59A80A97-600A-4014-BE17-3704AF17EB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.111:*:*:*:*:*:*:*","matchCriteriaId":"2FCAC483-220A-4A77-9947-DF9364038889"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.121:*:*:*:*:*:*:*","matchCriteriaId":"CE419366-9394-4CA7-A55B-AFE4581E9784"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.151:*:*:*:*:*:*:*","matchCriteriaId":"5D135322-8410-485D-8D08-26C3D1E5F28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.152:*:*:*:*:*:*:*","matchCriteriaId":"16A5AE38-893B-41E3-951F-3D5816F57865"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.161:*:*:*:*:*:*:*","matchCriteriaId":"620907FD-D1E8-4B49-BA15-6CBDA20A3CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.171:*:*:*:*:*:*:*","matchCriteriaId":"9B468D79-6AFA-404F-AB78-321A3C0FF2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.172:*:*:*:*:*:*:*","matchCriteriaId":"9C014925-8D2A-463B-8241-27DE59117325"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.173:*:*:*:*:*:*:*","matchCriteriaId":"B7CCC9CF-40B0-4B21-BA39-2F426566DC41"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.174:*:*:*:*:*:*:*","matchCriteriaId":"B979554A-1BC6-4E10-A293-A173D2A99954"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.181:*:*:*:*:*:*:*","matchCriteriaId":"11D32A32-5E67-43E3-B4B9-A0688894FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.192:*:*:*:*:*:*:*","matchCriteriaId":"9E172E4C-02EF-441D-9D24-32CC2757A0F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.193:*:*:*:*:*:*:*","matchCriteriaId":"48430BB0-0012-4C99-ACB8-7F20FE211763"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.195:*:*:*:*:*:*:*","matchCriteriaId":"79F416BB-FB79-4F47-BC40-6B6FB4A689FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.196:*:*:*:*:*:*:*","matchCriteriaId":"DAEF5026-014D-4BCB-AC71-D70B09B8B98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.201:*:*:*:*:*:*:*","matchCriteriaId":"64A68763-3A6E-4B6D-AAB0-8052D8020C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.202:*:*:*:*:*:*:*","matchCriteriaId":"5F8D00D6-C972-4474-8DE8-CF37F2E371ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.203:*:*:*:*:*:*:*","matchCriteriaId":"7F136A16-A7C7-4A83-8D4D-BB8ADEDCA25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.204:*:*:*:*:*:*:*","matchCriteriaId":"8B969866-0DA1-4FF6-B481-8294368D2465"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.205:*:*:*:*:*:*:*","matchCriteriaId":"C21BD781-F02C-499D-85CD-AF95B76F5267"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.206:*:*:*:*:*:*:*","matchCriteriaId":"085694D2-F999-4054-AE4F-13E75E1670CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.207:*:*:*:*:*:*:*","matchCriteriaId":"0D49B376-0F3E-4DC4-B132-F28670A0EEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.211:*:*:*:*:*:*:*","matchCriteriaId":"9540CD99-37B0-433C-BD6B-76CF4B7A4039"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.212:*:*:*:*:*:*:*","matchCriteriaId":"968B35D0-89FD-4442-8F58-A2737091293E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.213:*:*:*:*:*:*:*","matchCriteriaId":"483AE214-5602-4B41-B516-20328C5F728C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.221:*:*:*:*:*:*:*","matchCriteriaId":"5DF4CD9C-A504-4B42-8341-76DD11B8BE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.222:*:*:*:*:*:*:*","matchCriteriaId":"1AA2F0D1-66AE-43B1-A864-86EAB01AE0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.223:*:*:*:*:*:*:*","matchCriteriaId":"5A3761B7-DA83-40A6-AAF1-7FD7F9012C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.224:*:*:*:*:*:*:*","matchCriteriaId":"C69A38A8-434F-490F-8ACD-8C9707F90C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.225:*:*:*:*:*:*:*","matchCriteriaId":"EAD23827-F6DE-4687-86C1-835C788D3CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.226:*:*:*:*:*:*:*","matchCriteriaId":"93A8E1AC-6AB9-4CDC-B1F1-B120B8F11F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.231:*:*:*:*:*:*:*","matchCriteriaId":"B681B118-70C1-476C-9251-64643D9CF200"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.232:*:*:*:*:*:*:*","matchCriteriaId":"EEEBBCB1-7D88-4E02-BC36-D88A5B2DEFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.233:*:*:*:*:*:*:*","matchCriteriaId":"FBA16933-AAC0-4DE2-8860-8991ED65D207"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.234:*:*:*:*:*:*:*","matchCriteriaId":"3B4851D2-8EBE-4520-A1DF-379F78F1FFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.235:*:*:*:*:*:*:*","matchCriteriaId":"149F2DE3-9D5A-42FE-A7FF-EFE4106BE471"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.241:*:*:*:*:*:*:*","matchCriteriaId":"C780A435-BB3E-4990-85D7-94E48A11D9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.242:*:*:*:*:*:*:*","matchCriteriaId":"E2F3F4ED-ED64-4147-B24E-D9E019321097"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.243:*:*:*:*:*:*:*","matchCriteriaId":"A178CCE4-3880-42C4-BE11-6F8E7766B35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.244:*:*:*:*:*:*:*","matchCriteriaId":"D083974F-1533-4E1C-A7AD-C3217987783F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.251:*:*:*:*:*:*:*","matchCriteriaId":"497D4932-C82B-40CE-8A6A-CA3874964C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.252:*:*:*:*:*:*:*","matchCriteriaId":"F19AF8A4-F9B6-4256-A079-9BD44BE44EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.253:*:*:*:*:*:*:*","matchCriteriaId":"0B724438-B83B-43D2-B9F3-2967EE51D860"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.254:*:*:*:*:*:*:*","matchCriteriaId":"39E4EA93-CA34-462B-BD57-5388906331E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.255:*:*:*:*:*:*:*","matchCriteriaId":"F0D5DDB1-5E2B-4EB8-B883-21302FEC0574"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.261:*:*:*:*:*:*:*","matchCriteriaId":"423D2B7B-F50C-43FA-8CAB-320D0E8CC327"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.262:*:*:*:*:*:*:*","matchCriteriaId":"3E5EA035-B7C1-4D2C-8D54-40F51CC385B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.263:*:*:*:*:*:*:*","matchCriteriaId":"D56B6FC1-662A-4F65-A4DF-D83FDC3B8A19"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.264:*:*:*:*:*:*:*","matchCriteriaId":"03E7ABAC-E97D-48F5-B279-922675D7A46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.265:*:*:*:*:*:*:*","matchCriteriaId":"E9486749-DA99-4937-8F24-4BA75DD131FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.266:*:*:*:*:*:*:*","matchCriteriaId":"D034435F-401F-47E7-A9AC-9A803C289F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.273:*:*:*:*:*:*:*","matchCriteriaId":"0879D0C9-D397-4EFA-96D3-F6923966AA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.274:*:*:*:*:*:*:*","matchCriteriaId":"A9582E5D-6924-4707-91B0-F395121A5F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.275:*:*:*:*:*:*:*","matchCriteriaId":"701FDD8C-B7C9-43D0-AE06-BEFFD3A7822E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.281:*:*:*:*:*:*:*","matchCriteriaId":"C86CB562-1BDE-4238-8C88-F1D735BAC6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.282:*:*:*:*:*:*:*","matchCriteriaId":"CC755D99-DA7E-4590-B747-A6EAFE7EE872"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.285:*:*:*:*:*:*:*","matchCriteriaId":"15F969FE-243B-4015-84FF-E3490BAC0BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.286:*:*:*:*:*:*:*","matchCriteriaId":"D93E5BF7-6E1B-474C-AABF-71FC548CB828"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.291:*:*:*:*:*:*:*","matchCriteriaId":"A23A9476-A56F-4D60-9F04-645B16840A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.292:*:*:*:*:*:*:*","matchCriteriaId":"154CC305-820A-4079-85A2-2C6E3AE26598"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.293:*:*:*:*:*:*:*","matchCriteriaId":"4E98D3D2-C999-4134-B34D-7278E52C8385"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.294:*:*:*:*:*:*:*","matchCriteriaId":"82D70C90-4D03-423B-B499-EB368049A5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.295:*:*:*:*:*:*:*","matchCriteriaId":"BDE26A64-F441-4724-99AF-4D94D741B070"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.296:*:*:*:*:*:*:*","matchCriteriaId":"FD0E5D29-A3B7-49A6-AC4E-38F0233611EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.297:*:*:*:*:*:*:*","matchCriteriaId":"0FF7F89C-D4DD-4058-9A9F-B7B976DFAB47"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.301:*:*:*:*:*:*:*","matchCriteriaId":"BD6B81BC-A032-4964-8F13-C485F160DE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.302:*:*:*:*:*:*:*","matchCriteriaId":"D49EFEB2-1F4B-4CA7-A082-20F41B980987"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.311:*:*:*:*:*:*:*","matchCriteriaId":"75726460-6DB3-48B7-B984-46F45953FEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.312:*:*:*:*:*:*:*","matchCriteriaId":"2B4D90A0-46AF-4D3C-8601-23AAE919AC95"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.313:*:*:*:*:*:*:*","matchCriteriaId":"199447EB-E134-42C7-B4D4-3A89A50F2CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.314:*:*:*:*:*:*:*","matchCriteriaId":"54E4AF59-9EBE-495E-936B-EED2BC213919"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.315:*:*:*:*:*:*:*","matchCriteriaId":"CEBB2E15-C99F-4293-AB93-51987A476068"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.321:*:*:*:*:*:*:*","matchCriteriaId":"D0188D54-45F0-4F35-8A73-76D90777C9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.322:*:*:*:*:*:*:*","matchCriteriaId":"B233AFD7-DFD0-4D28-8109-95E913918F08"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.323:*:*:*:*:*:*:*","matchCriteriaId":"B7C36E7E-6D3A-4222-A35F-E72B9DA2191C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.331:*:*:*:*:*:*:*","matchCriteriaId":"4900B370-4CF1-4E77-BDBD-374BAA01C61B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.332:*:*:*:*:*:*:*","matchCriteriaId":"F9C9E06A-39E6-4062-AB43-559396829107"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.1741:*:*:*:*:*:*:*","matchCriteriaId":"57313039-6B37-4DF9-85F0-77B97F187AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.1941:*:*:*:*:*:*:*","matchCriteriaId":"36F381A8-406E-46DB-9276-7E4284BFA44A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/54015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.directadmin.com/features.php?id=968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50167","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/54015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.directadmin.com/features.php?id=968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1526","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action."},{"lang":"es","value":"JBMC Software DirectAdmin anterior a v1.334 permite a usuarios locales crear o sobreescribir cualquier fichero a través de un ataque de enlace simbólico en un directorio temporal concreto, relacionada con una petición para ese fichero temporal en PATH_INFO en la secuencia de comandos CMD_DB durante una acción de copia de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.333","matchCriteriaId":"B768ED82-8524-4A8A-8870-150B4B2070A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:0.95:*:*:*:*:*:*:*","matchCriteriaId":"950B6C5B-8864-4248-BFE2-3559CEBCEAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1:*:*:*:*:*:*:*","matchCriteriaId":"5A7A412F-D5D3-4835-B496-931867BE2F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9E9F46CD-7BCB-4230-85DE-423FD56CBB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F3E73F85-C632-4FCE-8E0E-D43057F7F2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.02:*:*:*:*:*:*:*","matchCriteriaId":"9BF52D95-BBF9-4433-A7CA-938F663BBF8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D4D38930-9C2B-4C1E-A60E-2A01751E6962"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.3:*:*:*:*:*:*:*","matchCriteriaId":"684EA453-9B2F-4DC6-B352-33E9FF1D059E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.03:*:*:*:*:*:*:*","matchCriteriaId":"6F667CC1-B49B-4F1D-9D7F-BA9EA0B358B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.04:*:*:*:*:*:*:*","matchCriteriaId":"1EC670D6-4E3C-4911-BD82-5615029FF7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.05:*:*:*:*:*:*:*","matchCriteriaId":"F7AD7550-22EB-4AFB-AFEA-AEAE67DA5D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.06:*:*:*:*:*:*:*","matchCriteriaId":"AED4E43C-23C6-4FA7-BE9E-F2B680ACEDA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.07:*:*:*:*:*:*:*","matchCriteriaId":"3B871B01-7F60-42D3-A935-C8FAE964B742"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.08:*:*:*:*:*:*:*","matchCriteriaId":"DA0BCB5A-FDDD-43BB-9837-F8A99AF3C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.09:*:*:*:*:*:*:*","matchCriteriaId":"F6003B88-A67E-4DF3-B79A-3DA3FE4B232E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.11:*:*:*:*:*:*:*","matchCriteriaId":"80AE9A2B-1A17-44C7-960F-6C44F54E499B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.12:*:*:*:*:*:*:*","matchCriteriaId":"1C7A40F1-8099-45A9-B583-5DCD9418EEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.13:*:*:*:*:*:*:*","matchCriteriaId":"2A777926-1C6D-4815-9AD5-BB0187240DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.14:*:*:*:*:*:*:*","matchCriteriaId":"DC5D92DD-3FBA-4E61-A225-4533340F5E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.15:*:*:*:*:*:*:*","matchCriteriaId":"E38AFB57-3C20-40F4-9B2A-48A54618A95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.16:*:*:*:*:*:*:*","matchCriteriaId":"118EE3CB-8379-4596-A123-97E27E4755D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.17:*:*:*:*:*:*:*","matchCriteriaId":"3B9678BF-0C83-42B3-AF53-B5C03E876F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.18:*:*:*:*:*:*:*","matchCriteriaId":"6385C7C5-7FD5-482A-ADDB-A7253949D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.19:*:*:*:*:*:*:*","matchCriteriaId":"484B6212-6A45-4294-8D3C-FDAE8263FDEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.21:*:*:*:*:*:*:*","matchCriteriaId":"9EBE1E56-DD19-434B-9269-2CD4881A8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.22:*:*:*:*:*:*:*","matchCriteriaId":"1FD2FA1E-A4F7-4EDA-B976-6587E8FAE599"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.23:*:*:*:*:*:*:*","matchCriteriaId":"3EC562EE-048A-49D7-9F1B-A2BA6ABB30AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.24:*:*:*:*:*:*:*","matchCriteriaId":"C845A416-F58A-4ADB-81E9-A873052CD9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.25:*:*:*:*:*:*:*","matchCriteriaId":"64BDDF62-9CBC-4AB7-BEBC-0FABDC4DF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.26:*:*:*:*:*:*:*","matchCriteriaId":"01B46A2D-7333-497C-90D8-C73088682C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.27:*:*:*:*:*:*:*","matchCriteriaId":"7336ABAE-8274-478F-9807-BF6F622D2805"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.28:*:*:*:*:*:*:*","matchCriteriaId":"C414DDF6-95B8-469B-B604-94B9C585EAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.29:*:*:*:*:*:*:*","matchCriteriaId":"D1020F89-5184-4786-8506-C049213522F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.31:*:*:*:*:*:*:*","matchCriteriaId":"E83CBC81-74F8-4880-8BF8-A248C2978329"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.32:*:*:*:*:*:*:*","matchCriteriaId":"81656A6B-A30A-415E-8212-FDE8A4BE7F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.33:*:*:*:*:*:*:*","matchCriteriaId":"FBC6DA4C-4EA7-4A34-999F-E6EEA1187A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.081:*:*:*:*:*:*:*","matchCriteriaId":"59A80A97-600A-4014-BE17-3704AF17EB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.111:*:*:*:*:*:*:*","matchCriteriaId":"2FCAC483-220A-4A77-9947-DF9364038889"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.121:*:*:*:*:*:*:*","matchCriteriaId":"CE419366-9394-4CA7-A55B-AFE4581E9784"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.151:*:*:*:*:*:*:*","matchCriteriaId":"5D135322-8410-485D-8D08-26C3D1E5F28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.152:*:*:*:*:*:*:*","matchCriteriaId":"16A5AE38-893B-41E3-951F-3D5816F57865"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.161:*:*:*:*:*:*:*","matchCriteriaId":"620907FD-D1E8-4B49-BA15-6CBDA20A3CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.171:*:*:*:*:*:*:*","matchCriteriaId":"9B468D79-6AFA-404F-AB78-321A3C0FF2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.172:*:*:*:*:*:*:*","matchCriteriaId":"9C014925-8D2A-463B-8241-27DE59117325"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.173:*:*:*:*:*:*:*","matchCriteriaId":"B7CCC9CF-40B0-4B21-BA39-2F426566DC41"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.174:*:*:*:*:*:*:*","matchCriteriaId":"B979554A-1BC6-4E10-A293-A173D2A99954"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.181:*:*:*:*:*:*:*","matchCriteriaId":"11D32A32-5E67-43E3-B4B9-A0688894FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.192:*:*:*:*:*:*:*","matchCriteriaId":"9E172E4C-02EF-441D-9D24-32CC2757A0F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.193:*:*:*:*:*:*:*","matchCriteriaId":"48430BB0-0012-4C99-ACB8-7F20FE211763"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.195:*:*:*:*:*:*:*","matchCriteriaId":"79F416BB-FB79-4F47-BC40-6B6FB4A689FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.196:*:*:*:*:*:*:*","matchCriteriaId":"DAEF5026-014D-4BCB-AC71-D70B09B8B98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.201:*:*:*:*:*:*:*","matchCriteriaId":"64A68763-3A6E-4B6D-AAB0-8052D8020C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.202:*:*:*:*:*:*:*","matchCriteriaId":"5F8D00D6-C972-4474-8DE8-CF37F2E371ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.203:*:*:*:*:*:*:*","matchCriteriaId":"7F136A16-A7C7-4A83-8D4D-BB8ADEDCA25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.204:*:*:*:*:*:*:*","matchCriteriaId":"8B969866-0DA1-4FF6-B481-8294368D2465"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.205:*:*:*:*:*:*:*","matchCriteriaId":"C21BD781-F02C-499D-85CD-AF95B76F5267"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.206:*:*:*:*:*:*:*","matchCriteriaId":"085694D2-F999-4054-AE4F-13E75E1670CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.207:*:*:*:*:*:*:*","matchCriteriaId":"0D49B376-0F3E-4DC4-B132-F28670A0EEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.211:*:*:*:*:*:*:*","matchCriteriaId":"9540CD99-37B0-433C-BD6B-76CF4B7A4039"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.212:*:*:*:*:*:*:*","matchCriteriaId":"968B35D0-89FD-4442-8F58-A2737091293E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.213:*:*:*:*:*:*:*","matchCriteriaId":"483AE214-5602-4B41-B516-20328C5F728C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.221:*:*:*:*:*:*:*","matchCriteriaId":"5DF4CD9C-A504-4B42-8341-76DD11B8BE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.222:*:*:*:*:*:*:*","matchCriteriaId":"1AA2F0D1-66AE-43B1-A864-86EAB01AE0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.223:*:*:*:*:*:*:*","matchCriteriaId":"5A3761B7-DA83-40A6-AAF1-7FD7F9012C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.224:*:*:*:*:*:*:*","matchCriteriaId":"C69A38A8-434F-490F-8ACD-8C9707F90C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.225:*:*:*:*:*:*:*","matchCriteriaId":"EAD23827-F6DE-4687-86C1-835C788D3CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.226:*:*:*:*:*:*:*","matchCriteriaId":"93A8E1AC-6AB9-4CDC-B1F1-B120B8F11F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.231:*:*:*:*:*:*:*","matchCriteriaId":"B681B118-70C1-476C-9251-64643D9CF200"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.232:*:*:*:*:*:*:*","matchCriteriaId":"EEEBBCB1-7D88-4E02-BC36-D88A5B2DEFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.233:*:*:*:*:*:*:*","matchCriteriaId":"FBA16933-AAC0-4DE2-8860-8991ED65D207"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.234:*:*:*:*:*:*:*","matchCriteriaId":"3B4851D2-8EBE-4520-A1DF-379F78F1FFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.235:*:*:*:*:*:*:*","matchCriteriaId":"149F2DE3-9D5A-42FE-A7FF-EFE4106BE471"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.241:*:*:*:*:*:*:*","matchCriteriaId":"C780A435-BB3E-4990-85D7-94E48A11D9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.242:*:*:*:*:*:*:*","matchCriteriaId":"E2F3F4ED-ED64-4147-B24E-D9E019321097"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.243:*:*:*:*:*:*:*","matchCriteriaId":"A178CCE4-3880-42C4-BE11-6F8E7766B35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.244:*:*:*:*:*:*:*","matchCriteriaId":"D083974F-1533-4E1C-A7AD-C3217987783F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.251:*:*:*:*:*:*:*","matchCriteriaId":"497D4932-C82B-40CE-8A6A-CA3874964C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.252:*:*:*:*:*:*:*","matchCriteriaId":"F19AF8A4-F9B6-4256-A079-9BD44BE44EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.253:*:*:*:*:*:*:*","matchCriteriaId":"0B724438-B83B-43D2-B9F3-2967EE51D860"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.254:*:*:*:*:*:*:*","matchCriteriaId":"39E4EA93-CA34-462B-BD57-5388906331E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.255:*:*:*:*:*:*:*","matchCriteriaId":"F0D5DDB1-5E2B-4EB8-B883-21302FEC0574"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.261:*:*:*:*:*:*:*","matchCriteriaId":"423D2B7B-F50C-43FA-8CAB-320D0E8CC327"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.262:*:*:*:*:*:*:*","matchCriteriaId":"3E5EA035-B7C1-4D2C-8D54-40F51CC385B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.263:*:*:*:*:*:*:*","matchCriteriaId":"D56B6FC1-662A-4F65-A4DF-D83FDC3B8A19"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.264:*:*:*:*:*:*:*","matchCriteriaId":"03E7ABAC-E97D-48F5-B279-922675D7A46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.265:*:*:*:*:*:*:*","matchCriteriaId":"E9486749-DA99-4937-8F24-4BA75DD131FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.266:*:*:*:*:*:*:*","matchCriteriaId":"D034435F-401F-47E7-A9AC-9A803C289F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.273:*:*:*:*:*:*:*","matchCriteriaId":"0879D0C9-D397-4EFA-96D3-F6923966AA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.274:*:*:*:*:*:*:*","matchCriteriaId":"A9582E5D-6924-4707-91B0-F395121A5F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.275:*:*:*:*:*:*:*","matchCriteriaId":"701FDD8C-B7C9-43D0-AE06-BEFFD3A7822E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.281:*:*:*:*:*:*:*","matchCriteriaId":"C86CB562-1BDE-4238-8C88-F1D735BAC6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.282:*:*:*:*:*:*:*","matchCriteriaId":"CC755D99-DA7E-4590-B747-A6EAFE7EE872"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.285:*:*:*:*:*:*:*","matchCriteriaId":"15F969FE-243B-4015-84FF-E3490BAC0BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.286:*:*:*:*:*:*:*","matchCriteriaId":"D93E5BF7-6E1B-474C-AABF-71FC548CB828"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.291:*:*:*:*:*:*:*","matchCriteriaId":"A23A9476-A56F-4D60-9F04-645B16840A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.292:*:*:*:*:*:*:*","matchCriteriaId":"154CC305-820A-4079-85A2-2C6E3AE26598"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.293:*:*:*:*:*:*:*","matchCriteriaId":"4E98D3D2-C999-4134-B34D-7278E52C8385"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.294:*:*:*:*:*:*:*","matchCriteriaId":"82D70C90-4D03-423B-B499-EB368049A5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.295:*:*:*:*:*:*:*","matchCriteriaId":"BDE26A64-F441-4724-99AF-4D94D741B070"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.296:*:*:*:*:*:*:*","matchCriteriaId":"FD0E5D29-A3B7-49A6-AC4E-38F0233611EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.297:*:*:*:*:*:*:*","matchCriteriaId":"0FF7F89C-D4DD-4058-9A9F-B7B976DFAB47"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.301:*:*:*:*:*:*:*","matchCriteriaId":"BD6B81BC-A032-4964-8F13-C485F160DE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.302:*:*:*:*:*:*:*","matchCriteriaId":"D49EFEB2-1F4B-4CA7-A082-20F41B980987"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.311:*:*:*:*:*:*:*","matchCriteriaId":"75726460-6DB3-48B7-B984-46F45953FEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.312:*:*:*:*:*:*:*","matchCriteriaId":"2B4D90A0-46AF-4D3C-8601-23AAE919AC95"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.313:*:*:*:*:*:*:*","matchCriteriaId":"199447EB-E134-42C7-B4D4-3A89A50F2CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.314:*:*:*:*:*:*:*","matchCriteriaId":"54E4AF59-9EBE-495E-936B-EED2BC213919"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.315:*:*:*:*:*:*:*","matchCriteriaId":"CEBB2E15-C99F-4293-AB93-51987A476068"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.321:*:*:*:*:*:*:*","matchCriteriaId":"D0188D54-45F0-4F35-8A73-76D90777C9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.322:*:*:*:*:*:*:*","matchCriteriaId":"B233AFD7-DFD0-4D28-8109-95E913918F08"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.323:*:*:*:*:*:*:*","matchCriteriaId":"B7C36E7E-6D3A-4222-A35F-E72B9DA2191C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.331:*:*:*:*:*:*:*","matchCriteriaId":"4900B370-4CF1-4E77-BDBD-374BAA01C61B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.332:*:*:*:*:*:*:*","matchCriteriaId":"F9C9E06A-39E6-4062-AB43-559396829107"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.1741:*:*:*:*:*:*:*","matchCriteriaId":"57313039-6B37-4DF9-85F0-77B97F187AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.1941:*:*:*:*:*:*:*","matchCriteriaId":"36F381A8-406E-46DB-9276-7E4284BFA44A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54014","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.directadmin.com/features.php?id=968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.directadmin.com/features.php?id=968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1527","sourceIdentifier":"cve@mitre.org","published":"2009-05-05T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object."},{"lang":"es","value":"Condición de carrera en la función ptrace_attach en kernel/ptrace.c en el kernel de Linux anterior a 2.6.40-rc4 permite a usuarios locales conseguir privilegios a través de la llamada PTRACE_ATTACH ptrace durante una ejecución de sistema que esta lanzando una aplicacion setuid, relacionada con el incorrecto bloqueo del objeto cred_exec_mutex."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.","lastModified":"2009-05-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.29","matchCriteriaId":"3871E973-1DCE-4C2D-8FF0-9330AF928297"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*","matchCriteriaId":"77B40D2B-9AAA-49A4-9C74-7A94A82DBCCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34977","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35120","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/04/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/54188","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34799","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1236","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50293","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/04/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/54188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/503610/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1528","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka \"HTML Object Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer versiones 6 y 7 para Windows XP SP2 y SP3; 6 y 7 para el servidor 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2, no sincroniza apropiadamente las peticiones AJAX, lo que permite a los atacantes remotos ejecutar código arbitrario mediante un gran número de llamadas simultáneas, asincrónicas XMLHttpRequest, también se conoce como \"HTML Object Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/54947","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/504206/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35222","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-037","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6260","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504206/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1529","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 7 para Windows XP SP2 y SP3; 7 para Server 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2, no maneja apropiadamente los objetos en la memoria, lo que permite a los atacantes remotos ejecutar código arbitrario llamando al método setCapture en una colección de objetos creados, también se conoce como \"Uninitialized Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*","matchCriteriaId":"9F916C0D-3B99-46F3-A7AE-BAF067361499"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"E69F8C21-5996-4083-A02A-F04AE948CEA9"}]}]}],"references":[{"url":"http://osvdb.org/54948","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/504205/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35223","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-036","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6295","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504205/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1530","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka \"HTML Objects Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de Uso de la Memoria Previamente Liberada en Microsoft Internet Explorer 7 para Windows XP SP2 y SP3; 7 para Server 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2 permite a los atacantes remotos ejecutar código arbitrario mediante la adición repetida de nodos de documentos HTML y el llamado a los Controladores de Eventos, lo que desencadena un acceso de un objeto que (1) no se inicializó apropiadamente o (2) se elimina, también se conoce como \"HTML Objects Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*","matchCriteriaId":"29EDE745-5A26-42BF-AFDE-7D985BB09D44"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*","matchCriteriaId":"9F916C0D-3B99-46F3-A7AE-BAF067361499"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"E69F8C21-5996-4083-A02A-F04AE948CEA9"}]}]}],"references":[{"url":"http://osvdb.org/54949","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/504209/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-038","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504209/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1531","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code via frequent calls to the getElementsByTagName function combined with the creation of an object during reordering of elements, followed by an onreadystatechange event, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka \"HTML Object Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 7 para Windows XP SP2 y SP3; 7 para Server 2003 SP2; 7 para Vista Gold, SP1 y SP2; y 7 para Server 2008 SP2 permite a los atacantes remotos ejecutar código arbitrario por medio de llamadas frecuentes a la función getElementsByTagName combinada con la creación de un objeto durante el reordenamiento de elementos, seguida por un evento onReadyStateChange, que desencadena un acceso de un objeto que (1) no se inicializó apropiadamente o (2) se elimina, también se conoce como \"HTML Object Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*","matchCriteriaId":"DA778424-6F70-4AB6-ADD5-5D4664DFE463"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*","matchCriteriaId":"BCE2197B-7C58-4693-B9BB-0B31EABB6B66"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"C4BFF042-5C0B-482A-915B-3B9A267D2D96"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*","matchCriteriaId":"1D12423F-FCCD-4F4C-9037-7607C1F1F99E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*","matchCriteriaId":"ACF75FC8-095A-4EEA-9A41-C27CFF3953FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/54950","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/504216/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35234","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-039","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6308","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504216/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1532","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via \"malformed row property references\" that trigger an access of an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"HTML Objects Memory Corruption Vulnerability\" or \"HTML Object Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 8 para Windows XP SP2 y SP3; 8 para Server 2003 SP2; 8 para Vista Gold, SP1 y SP2; y 8 para Server 2008 SP2 no maneja apropiadamente los objetos en la memoria, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de \"malformed row property references\" que desencadenan un acceso de un objeto que (1) no se inicializó apropiadamente o (2) se elimina, lo que conlleva a corrupción de la memoria, también se conoce como \"HTML Objects Memory Corruption Vulnerability\" o \"HTML Object Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*","matchCriteriaId":"3A118DC8-CD3A-461F-867E-5174F24FBAE9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*","matchCriteriaId":"1114016B-B51D-495D-96AC-A0E7992DA551"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"2127D10C-B6F3-4C1D-B9AA-5D78513CC996"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*","matchCriteriaId":"AB425562-C0A0-452E-AABE-F70522F15E1A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:*:*:*:*:*:*","matchCriteriaId":"BDD715BA-B0EB-4D42-BCB1-97B261459E52"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/54951","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504208/100/0/threaded","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022350","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"secure@microsoft.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-041","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6244","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://osvdb.org/54951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504208/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-1533","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T18:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka \"File Converter Buffer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer en los conversores de documentos Works para Windows en Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, y Works v8.5 y v9 permite a atacantes remotos ejecutar código arbitrario a través de un archivo .wps elaborado que provoca la corrupción de memoria , también conocido como \"Vulnerabilidad de desbordamiento de buffer en el conversor de ficheros\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"6D8158B4-CF89-4545-9EBF-6AB868D63648"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0579650D-24E9-46FF-8876-5164D4397E10"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx","source":"secure@microsoft.com"},{"url":"http://jvn.jp/en/jp/JVN70858401/index.html","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54939","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35371","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35184","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022354","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022355","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1543","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN70858401/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1534","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka \"Office Web Components Buffer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer en Office Web Components ActiveX Control en Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, y Visual Studio .NET 2003 SP1 permite a atacantes remotos ejecutar código de su elección mediante valores modificados en la propiedad, también conocido como \"Vulnerabilidad de desbordamiento de búfer en Office Web Components\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:biztalk_server:2002:*:*:*:*:*:*:*","matchCriteriaId":"44BFE3B9-3C8C-4747-AAC0-A10EED857C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2004:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"12FAB1BC-F8FB-4A14-8E38-703CF8E67B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2004:sp3:standard:*:*:*:*:*","matchCriteriaId":"BB4F1038-F652-4A76-874F-3FFAAF30AB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"64E8FCC6-B44E-4FA3-AE9E-9FB196D7CD7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2006:sp1:standard:*:*:*:*:*","matchCriteriaId":"91E957DC-91B8-470A-808C-9B2EA687B2A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*","matchCriteriaId":"F27860CB-929A-47F3-801E-3E69C53FA353"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"D86088BB-C81D-4CCE-B7D1-1280818D99A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*","matchCriteriaId":"7B654504-9098-4F7F-8CE7-696CF15BCA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"B07BEA1E-F032-4E63-8548-C98DD6E05AAA"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://osvdb.org/56916","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35992","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022708","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326","source":"secure@microsoft.com"},{"url":"http://osvdb.org/56916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1535","sourceIdentifier":"secure@microsoft.com","published":"2009-06-10T14:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as demonstrated by inserting %c0%af into a \"/protected/\" initial pathname component to bypass the password protection on the protected\\ folder, aka \"IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1122."},{"lang":"es","value":"La extensión de WebDAV en Microsoft Internet Information Services (IIS) v5.1 y v6.0 permite a atacantes remotos eludir los mecanismos de protección basados en URL, y listar carpetas o leer, crear o modificar archivos, a través de un %c0%af (Unicode / carácter) en una posición arbitraria en la URL, como se ha demostrado mediante la inserción de %c0%af en la ruta inicial de componente \"/protected/\" para evitar la protección por contraseña en la carpeta protected\\ , alias \"IIS v5.1 y v6.0 Vulnerabilidad de evasión de autenticación WebDAV\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*","matchCriteriaId":"25100F8C-58A0-49D5-8247-8CCD099A734B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:-:*","matchCriteriaId":"C5D2C681-EB06-4B72-BD34-47AEE35CC227"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:professional:*:-:*","matchCriteriaId":"81E8A3CB-9110-4D65-BCAE-261FF7135544"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9B4DF95D-B4B1-4FB6-9D27-A6D359EEACFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*","matchCriteriaId":"1D929AA2-EE0B-4AA1-805D-69BCCA11B77F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/att-0135/IIS_Advisory.pdf","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://isc.sans.org/diary.html?n&storyid=6397","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://view.samurajdata.se/psview.php?id=023287d6&page=1","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.attrition.org/pipermail/vim/2009-June/002192.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6029","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/att-0135/IIS_Advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://isc.sans.org/diary.html?n&storyid=6397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://view.samurajdata.se/psview.php?id=023287d6&page=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.attrition.org/pipermail/vim/2009-June/002192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1536","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka \"Remote Unauthenticated Denial of Service in ASP.NET Vulnerability.\""},{"lang":"es","value":"ASP.NET en Microsoft .NET Framework v2.0 SP1 y SP2 y v3.5 Gold y SP1, cuando ASP 2.0 es usado en modo integrado sobre IIS v7.0, no administra adecuadamente las peticiones de planificación, lo que permite a atacantes remotos provocar una denegación de servicio (parada de demonio) a través de una serie de peticiones HTTP manipuladas, también conocida como \"Vulnerabilidad de denegación de servicio remota no autenticada en ASP.NET\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/56905","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36127","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35985","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022715","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2231","source":"secure@microsoft.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/56905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1537","sourceIdentifier":"secure@microsoft.com","published":"2009-05-29T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.microsoft.com/technet/security/advisory/971778.mspx\r\n\r\n\"Microsoft is aware of limited, active attacks that use this exploit code. While our investigation is ongoing, our investigation so far has shown that Windows 2000 Service Pack 4, Windows XP, and Windows Server 2003 are vulnerable; all versions of Windows Vista and Windows Server 2008 are not vulnerable.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\""},{"lang":"es","value":"Vulnerailidad sin especificar en el filtro QuickTime Movie Parser en quartz.dll en DirectShow en Microsoft DirectX v7.0 hasta v9.0c en Windows 2000 SP4, Windows XP SP2 y SP3, y Windows Server 2003 SP2 permite a atacantes remotos ejecutar código de su elección a través de un fichero multimedia QuickTime manipulado, como se ha explotado libremente en Mayo de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*","matchCriteriaId":"459D411C-4994-41DB-9594-F460EADA3351"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4F01F75D-4C20-4DA2-BD3B-4A3BD466F773"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*","matchCriteriaId":"1BBFBDA6-90F5-4A8A-BD47-2DCA5CA8D5AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*","matchCriteriaId":"B2F096A3-DD19-4D54-94F4-027DBDF1A705"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*","matchCriteriaId":"70A8E96E-F752-43D2-83C3-877DE1042B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*","matchCriteriaId":"44C68B75-2B7A-450B-BA1B-03E77E03B59B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*","matchCriteriaId":"B2F096A3-DD19-4D54-94F4-027DBDF1A705"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*","matchCriteriaId":"70A8E96E-F752-43D2-83C3-877DE1042B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*","matchCriteriaId":"44C68B75-2B7A-450B-BA1B-03E77E03B59B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx","source":"secure@microsoft.com"},{"url":"http://isc.sans.org/diary.html?storyid=6481","source":"secure@microsoft.com"},{"url":"http://osvdb.org/54797","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35268","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/971778.mspx","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35139","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022299","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1445","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1886","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=6481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/971778.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1538","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka \"DirectX Pointer Validation Vulnerability.\""},{"lang":"es","value":"EL QuickTime Movie Parser Filter en quartz.dll en DirectShow en Microsoft DirectX v7.0 a la v9.0c sobre Windows 2000 SP4, Windows XP SP2 y SP3, y Windows Server 2003 SP2, realiza actualizaciones a punteros sin validar adecuadamente los valores de datos no especificados, lo que permite a atacantes remotos ejecutar código de su elección a través de un archivo \"Quicktime media\" manipulado, también conocido como \"Vulnerabilidad de validación de Puntero en DirectX\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/55844","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35600","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1886","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963","source":"secure@microsoft.com"},{"url":"http://osvdb.org/55844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1539","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"DirectX Size Validation Vulnerability.\""},{"lang":"es","value":"EL QuickTime Movie Parser Filter en quartz.dll en DirectShow en Microsoft DirectX v7.0 a la v9.0c sobre Windows 2000 SP4, Windows XP SP2 y SP3, y Windows Server 2003 SP2, no valida adecuadamente el tamaño sin especificar de los campos en los archivos \"Quicktime media\", lo que permite a atacantes remotos ejecutar código de su elección a través de un archivo manipulado, también conocido como \"Vulnerabilidad de validación de tamaño en DirectX\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/55845","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1886","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341","source":"secure@microsoft.com"},{"url":"http://osvdb.org/55845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1542","sourceIdentifier":"secure@microsoft.com","published":"2009-07-15T15:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka \"Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability.\""},{"lang":"es","value":"El Virtual Machine Monitor (VMM)  en Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, no impone los requisitos de la CPU (privilege-level) para todas las instrucciones de la maquina, lo que permite a usuarios del sistema invitado (guest) ejecutar código de su elección en modo kernel (kernel -mode) y obtener privilegios dentro del sistema invitado a través de aplicaciones manipuladas. También conocido como \"Vulnerabilidad de decodificación de instrucciones privilegiadas en Virtual PC y Virtual Server\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:2004:sp1:*:*:*:*:*:*","matchCriteriaId":"4B85AEB7-0AB3-4AFA-B589-74DF583225C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:2007:*:*:*:*:*:*:*","matchCriteriaId":"0E550D9F-C197-4EA1-A018-73C0E8B03E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:2007:*:x64:*:*:*:*:*","matchCriteriaId":"F61DD9A1-A925-4FA3-BD6A-708F039F7F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"98616FA1-76B2-40C1-806E-71A4D76CB5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:*:*:*:*:*:*","matchCriteriaId":"C5705C94-8B44-48D7-873B-1909FE2D020E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:x64:*:*:*:*:*","matchCriteriaId":"35C436EF-6A98-47F7-BA5E-2E4B8497045F"}]}]}],"references":[{"url":"http://secunia.com/advisories/35808","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022544","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1890","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1544","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka \"Workstation Service Memory Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de doble liberación en el servicio de estación de trabajo en Microsoft Windows permite aumentar sus privilegios a usuarios remotos autenticados a través de un mensaje RPC manipulado al sistema en Windows XP SP2 o SP3 o Server 2003 SP2, o producir una denegación de servicio a través de un mensaje RPC manipulado al sistema de Vista Gold, SP1, o SP2 o Server 2008 Gold o SP2, tambien conocido como \"Vulnerabilidad de corrupción de memoria del servicio de estación de trabajo\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*","matchCriteriaId":"D21D1DFE-F61B-407E-A945-4F42F86947B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-041","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6286","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1545","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed header in a crafted AVI file, aka \"Malformed AVI Header Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en la biblioteca Avifil32.dll en la funcionalidad de manejo de archivos de Windows Media en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1 y SP2, y Server 2008 Gold y SP2 permite a atacantes remotos ejecutar código arbitrario por medio de un encabezado con formato incorrecto en un archivo AVI creado, también se conoce como \"Malformed AVI Header Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*","matchCriteriaId":"D21D1DFE-F61B-407E-A945-4F42F86947B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/36206","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35967","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022711","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2233","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5412","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1546","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, or SP2, or Server 2008 Gold or SP2 system via a crafted AVI file, aka \"AVI Integer Overflow Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de enteros en la biblioteca Avifil32.dll en la funcionalidad de manejo de archivos de Windows Media en Microsoft Windows permite a los atacantes remotos ejecutar código arbitrario en un sistema Windows 2000 SP4 por medio de un archivo AVI creado, o causar una denegación de servicio en un sistema Windows XP SP2 o SP3, Server 2003 SP2, Vista Gold, SP1 o SP2, o Server 2008 Gold o SP2 por medio de un archivo AVI creado, también se conoce como \"AVI Integer Overflow Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*","matchCriteriaId":"D21D1DFE-F61B-407E-A945-4F42F86947B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/56909","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36206","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35970","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022711","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2233","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5930","source":"secure@microsoft.com"},{"url":"http://osvdb.org/56909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1547","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka \"Data Stream Header Corruption Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en Microsoft Internet Explorer v5.01 SP4, v6, v6 SP1, y v7  permite a atacantes remotos ejecutar código arbitrario a través de cabeceras de flujos de datos manipulados que inician una corrupción de memoria, también conocido como \"Vulnerabilidad de corrupción de cabecera de flujo de datos\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1548","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a read action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en BluSky CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"news_id\" en una acción \"read\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qsix:blusky_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"B0FABBD6-13ED-4E11-A6A8-CD81A8F79CA0"}]}]}],"references":[{"url":"http://osvdb.org/54221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34811","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1246","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8600","source":"cve@mitre.org"},{"url":"http://osvdb.org/54221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1549","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AGTC MyShop 3.2b allows remote attackers to bypass authentication and obtain administrative access setting the log_accept cookie to \"correcto.\""},{"lang":"es","value":"AGTC MyShop v3.2b, permite a atacantes remotos evitar la autenticación y obtener acceso como administrador estableciendo la cookie log_accept a \"correcto\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agtc:agtc_myshop:3.2b:*:*:*:*:*:*:*","matchCriteriaId":"2EA7E30B-7EF2-4A19-BA2C-6F2A81844258"}]}]}],"references":[{"url":"http://osvdb.org/54216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34968","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34808","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1245","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8599","source":"cve@mitre.org"},{"url":"http://osvdb.org/54216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1550","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to obtain the administrator login name and password via a direct request."},{"lang":"es","value":"Zakkis Technology ABC Advertise v1.0 no restringe adecuadamente el archivo admin.inc.php, lo que permite a atacantes remotos obtener el login y contraseña de administrador a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zakkis:abc_advertise:1.0:*:*:*:*:*:*:*","matchCriteriaId":"16C4C8E4-9D12-44D5-B68C-A2BD71DB81F3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50183","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8555","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1551","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) qte_web_path parameter to qte_web.php and the (2) qte_root parameter to bin/qte_init.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en Qt quickteam v2, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) qte_web_path a qte_web.php y  (2) qte_root parameter y bin/qte_init.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qt-cute:quickteam:2.0:*:*:*:*:*:*:*","matchCriteriaId":"37FBE06A-57A5-41A4-82FC-FC6F11486D4A"}]}]}],"references":[{"url":"http://osvdb.org/54217","source":"cve@mitre.org"},{"url":"http://osvdb.org/54218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34997","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1247","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8602","source":"cve@mitre.org"},{"url":"http://osvdb.org/54217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1552","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el controlador IGMP en SCO Unixware Release v7.1.4 Maintenance Pack 4, permite a atacantes remotos provocar una denegación de servicio (error irrecuperable del sistema) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:mp4:*:*:*:*:*:*","matchCriteriaId":"26CAE535-EADD-49E9-8B64-4A4335FA8BEB"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p535283/p535283.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54168","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34781","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50255","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p535283/p535283.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1553","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, or (6) webService/webServicesGeneral.jsf; or the name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Admin Console en Sun GlassFish Enterprise Server  v2.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de una consulta a (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, o (6) webService/webServicesGeneral.jsf; o del parámetro \"name\" a (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DBDD6781-CF9E-4ED3-861F-99217EE0711C"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=134","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://jvn.jp/en/jp/JVN73653977/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54249","source":"cve@mitre.org"},{"url":"http://osvdb.org/54250","source":"cve@mitre.org"},{"url":"http://osvdb.org/54251","source":"cve@mitre.org"},{"url":"http://osvdb.org/54252","source":"cve@mitre.org"},{"url":"http://osvdb.org/54253","source":"cve@mitre.org"},{"url":"http://osvdb.org/54254","source":"cve@mitre.org"},{"url":"http://osvdb.org/54255","source":"cve@mitre.org"},{"url":"http://osvdb.org/54256","source":"cve@mitre.org"},{"url":"http://osvdb.org/54257","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1","source":"cve@mitre.org"},{"url":"http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503236/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34824","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34914","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50453","source":"cve@mitre.org"},{"url":"https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://dsecrg.com/pages/vul/show.php?id=134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://jvn.jp/en/jp/JVN73653977/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1554","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATH_INFO, which is displayed on the 404 error page, as demonstrated by the PATH_INFO to theme/META-INF."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en ThemeServlet.java in Sun Woodstock v4.2 usado  en Sun GlassFish Enterprise Server y otros productos, permite a atacantes remotos inyectar secuencias de comandos web  o HTML de su elección a través de una cadena UTF-7 en PATH_INFO, lo que muestra un error 404 en la página web, como se ha demostrado mediante PATH_INFO a theme/META-INF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"772D2025-C240-45A5-9B55-2B7F5331444D"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:1.0:ur1:*:*:*:*:*:*","matchCriteriaId":"3152B8B7-3B48-492A-8A9E-3DD6638679EC"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:1.0:ur1_po1:*:*:*:*:*:*","matchCriteriaId":"CAFDA3BE-54A3-49F3-ABF1-76437AD2DBB6"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6AD5FD-8A44-4184-B5F5-9FC0DF24B475"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DBDD6781-CF9E-4ED3-861F-99217EE0711C"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7B2813A2-A847-45F5-80C9-95E1D82C36FD"},{"vulnerable":false,"criteria":"cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:woodstock:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4A1DA0-F06A-4A61-BADF-1840AB440D55"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=138","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/54220","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35006","source":"cve@mitre.org"},{"url":"http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503239/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34829","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50336","source":"cve@mitre.org"},{"url":"https://woodstock.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=4041","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://dsecrg.com/pages/vul/show.php?id=138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/54220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503239/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://woodstock.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=4041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1555","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a related issue to CVE-2008-4390."},{"lang":"es","value":"La video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24,  envía los datos de configuración en respuesta al comando Setup Wizard remote-management, lo que permite a atacantes remotos obtener información sensible como contraseñas leyendo el proceso en memoria SetupWizard.exe. Cuestión relacionada con el CVE-2008-4390."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*","matchCriteriaId":"69B11DD9-A05C-4209-8EEF-60330E2B31DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*","matchCriteriaId":"3EFFA763-8152-4085-A6EE-73F313676289"}]}]}],"references":[{"url":"http://secunia.com/advisories/34767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34596","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1556","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerability than CVE-2004-2507."},{"lang":"es","value":"img/main.cgi en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24, permite a usuarios autenticados remotamente leer archivos de su elección en img/ a través de un nombre de archivo en el parámetro \"next_file\", como se ha demostrado mediante la lectura de .htpasswd para obtener la contraseña de administrador. Una vulnerabilidad distinta de CVE-2004-2507."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*","matchCriteriaId":"69B11DD9-A05C-4209-8EEF-60330E2B31DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*","matchCriteriaId":"3EFFA763-8152-4085-A6EE-73F313676289"}]}]}],"references":[{"url":"http://secunia.com/advisories/34767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1557","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3) adm/file.cgi; or (4) the this_file parameter to adm/file.cgi."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados  en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"next_file\" a (1) main.cgi, (2) img/main.cgi, o (3) adm/file.cgi; o (4) el parámetro \"this_file\" a adm/file.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*","matchCriteriaId":"69B11DD9-A05C-4209-8EEF-60330E2B31DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*","matchCriteriaId":"3EFFA763-8152-4085-A6EE-73F313676289"}]}]}],"references":[{"url":"http://secunia.com/advisories/34767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34714","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50224","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1558","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en adm/file.cgi en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R22  y v1.00R24, permite a atacantes remotos leer ficheros de su elección a través de %2e. (codificación de \"..\") o sobre un nombre absoluto de ruta en el parámetro \"next_file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*","matchCriteriaId":"69B11DD9-A05C-4209-8EEF-60330E2B31DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*","matchCriteriaId":"3EFFA763-8152-4085-A6EE-73F313676289"}]}]}],"references":[{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34713","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50231","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1559","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter.  NOTE: traversal via a .. (dot dot) is probably also possible."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en adm/file.cgi en la video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware v1.00R24 y posiblemente v1.00R22, permite a atacantes remoto leer archivos de su elección a través de una ruta absoluta en el parámetro \"this_file\". NOTA: es posible que el salto de directorio se pueda realizar a través de la secuencia .. (punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*","matchCriteriaId":"69B11DD9-A05C-4209-8EEF-60330E2B31DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*","matchCriteriaId":"3EFFA763-8152-4085-A6EE-73F313676289"}]}]}],"references":[{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34713","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50231","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1560","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code."},{"lang":"es","value":"La video cámara inalámbrica  Cisco Linksys WVC54GCA con firmware  v1.00R22 y v1.00R24 almacena las contraseñas y las claves de red inalámbricas en texto plano en (1) pass_wd.htm y (2) Wsecurity.htm, lo que permite a atacantes remotos obtener información sensible leyendo el código fuente HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gc:1.00r22:*:*:*:*:*:*:*","matchCriteriaId":"D4C69CAF-596D-4DB4-95B6-842B3C7277F6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wvc54gc:1.00r24:*:*:*:*:*:*:*","matchCriteriaId":"EED0FC7A-A6BD-4708-A6D0-D82C1FE1596D"}]}]}],"references":[{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50410","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1561","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T16:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSFR) en administration.cgi  en el router  Cisco Linksys WRT54GC con firmware v1.05.7, permite a atacantes remotos secuestrar la conectividad de la intranet de usuarios de su elección para peticiones que modifican la contraseña de administrador a través de los parámetros \"sysPasswd\" y \"sysConfirmPasswd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wrt54gc:1.05.7:*:*:*:*:*:*:*","matchCriteriaId":"14D5B1F5-59CF-469F-B889-A802E6262341"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34805","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.falandodeseguranca.com/?p=17","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34616","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.falandodeseguranca.com/?p=17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1563","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-10-29T14:30:00.687","lastModified":"2023-11-07T02:03:56.927","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-1566","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-03T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions."},{"lang":"es","value":"Desbordamiento de entero en Roxio Easy Media Creator v9.0.136, y Roxio Creator 2010 en versiones anteriores a SP1 podría permitir a atacantes remotos ejecutar código arbitrariamente a través de una imagen con las dimensiones manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roxio:creator:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.136","matchCriteriaId":"BB2C89AD-B286-403A-AE02-CC70B8EE97FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roxio:easy_media_creator:9.0.136:*:*:*:*:*:*:*","matchCriteriaId":"EDBA6E0F-D6B9-4EFD-9EA9-1C852C06F785"}]}]}],"references":[{"url":"http://secunia.com/advisories/36069","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-38/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508165/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37183","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/3375","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54496","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/36069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-38/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508165/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1567","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-03T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value."},{"lang":"es","value":"Múltiples desbordamiento de búfer basados en pila en el control ActiveX Lateral Arts Photobox uploader v1.x anteriores a v1.3, y v2.2.0.6, que permite a atacantes remotos ejecutar codigo arbitrario a traves de una cadena URL larga para los valores de las propiedades (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:larts:uploader_activex_control:2.2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5C501F77-5B74-478E-9761-CEA767A8D806"}]}]}],"references":[{"url":"http://secunia.com/advisories/37138","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37492","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-41/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508169/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37187","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/3376","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3377","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/37138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-41/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508169/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1568","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-08T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to execute arbitrary code via a long target-frame parameter."},{"lang":"es","value":"esbordamiento de búfer basado en pila en ienipp.ocx en Novell iPrint Client v5.30, y probablemente otras versiones anteriores a v5.32, permite a atacantes remotos ejecutar código de su elección a través de un parámetro largo target-frame."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:5.30:*:*:*:*:*:*:*","matchCriteriaId":"47EE23ED-1241-4070-A652-C3C4E46656B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint_client:5.31:*:*:*:*:*:*:*","matchCriteriaId":"B2502FBC-4C55-49DE-9CCA-B9DC66F3C31B"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=29T3EFRky18~","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37169","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-40/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508289/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37242","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3429","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://download.novell.com/Download?buildid=29T3EFRky18~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-40/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508289/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1569","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-08T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to execute arbitrary code via vectors related to (1) Date and (2) Time."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Novell iPrint Client v4.38, v5.30, y probablemente otras versiones anteriores a v5.32 permite a atacantes remotos ejecutar código de su elección a través de vectores relacionados con (1) Date y (2) Time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.38:*:client:*:*:*:*:*","matchCriteriaId":"5DEEE521-1D76-4ED8-951E-058D9311C6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:5.30:*:client:*:*:*:*:*","matchCriteriaId":"1949289F-4AAC-4B6F-8FAE-64BEFC4FB3D8"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=29T3EFRky18~","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/35004","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37169","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-44/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508288/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37242","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3429","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://download.novell.com/Download?buildid=29T3EFRky18~","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-44/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508288/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1570","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-11-13T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función ReadImage en plug-ins/file-bmp/bmp-read.c en GIMP 2.6.7 puede permitir a atacantes remotos ejecutar código de su elección mediante un fichero BMP con valores de ancho y alto manipulados que dispararía un desbordamiento de búfer basado en memoria dinámica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gimp:gimp:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"210FA4BB-1E63-4CE4-88FB-53ACEC934C3F"}]}]}],"references":[{"url":"http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37232","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50737","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://secunia.com/secunia_research/2009-42/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-23.xml","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/59930","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0837.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0838.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507813/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37006","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3228","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3564","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1021","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=600484","source":"PSIRT-CNA@flexerasoftware.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54254","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290","source":"PSIRT-CNA@flexerasoftware.com","tags":["Tool Signature"]},{"url":"http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/secunia_research/2009-42/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/59930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0837.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0838.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507813/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=600484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-1572","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error."},{"lang":"es","value":"El  demonio BGP (bgpd) in Quagga v0.99.11 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una ruta AS que contiene elementos ASN cuya representación de cadena es mayor que la esperada, lo que provoca un error de aserción."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of zebra as shipped with Red Hat Enterprise Linux 2.1, and the versions of quagga as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-05-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99.11","matchCriteriaId":"D0ADB352-4A60-4B8E-A231-7498E0EE1A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*","matchCriteriaId":"CD7A8AD5-A315-4242-960C-05E792B30547"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*","matchCriteriaId":"6B83BCE2-24D0-4B5B-A034-62BFF1894AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*","matchCriteriaId":"FDD63DD9-1809-4CEC-AB69-955A7B127CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*","matchCriteriaId":"0A2AD1AD-DDE2-477B-8EFD-767B6FD8EDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.96.3:*:*:*:*:*:*:*","matchCriteriaId":"99BD881B-9B53-4E12-B083-87C9C87CDF62"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.96.4:*:*:*:*:*:*:*","matchCriteriaId":"F910313F-FFE1-470A-A9B6-8A854C73DC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.96.5:*:*:*:*:*:*:*","matchCriteriaId":"9B0A9232-968D-4D3E-82A0-F5CC858EAF48"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.97.0:*:*:*:*:*:*:*","matchCriteriaId":"CD5F4CFB-BE1F-4424-8D2F-B921704E3AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.97.1:*:*:*:*:*:*:*","matchCriteriaId":"3A55FF13-8E56-4A27-B7FD-A855735E1045"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.97.2:*:*:*:*:*:*:*","matchCriteriaId":"F7DDBC3B-99BB-4404-9A73-90ED6581D69A"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.97.3:*:*:*:*:*:*:*","matchCriteriaId":"AB09A713-E91E-44E7-8B82-F70F655A97B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.97.4:*:*:*:*:*:*:*","matchCriteriaId":"10173750-690B-4576-AB3F-11A0861AA78B"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.97.5:*:*:*:*:*:*:*","matchCriteriaId":"0EF8693A-D561-4D2E-BD60-5630601C6A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.0:*:*:*:*:*:*:*","matchCriteriaId":"BE43983A-73CB-41A5-889B-1AEA9A27F440"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.1:*:*:*:*:*:*:*","matchCriteriaId":"6EB589E9-85C0-4E87-856B-A2832383B129"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.2:*:*:*:*:*:*:*","matchCriteriaId":"7CF5EB8A-8E46-4490-BA88-03D4BED3EB84"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.3:*:*:*:*:*:*:*","matchCriteriaId":"C6445BEF-245C-47CE-9779-96C97CFD4DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.4:*:*:*:*:*:*:*","matchCriteriaId":"48D007FD-C1AD-477E-9AA5-DDB4522D3248"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.5:*:*:*:*:*:*:*","matchCriteriaId":"D6ADB9F6-B519-45D0-966F-F095372FBB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.98.6:*:*:*:*:*:*:*","matchCriteriaId":"6E914BAF-2E3A-415E-BAA7-FA02B4A22E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"55FCB7EC-8060-434B-B485-0DC7DBFE117D"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"9524E069-2A80-4068-9945-2752EF2126EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"9E1B30CC-478C-4BD1-AF4C-D126B8CCE8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"1D713119-F9C6-4656-92C9-A5B863A4B72F"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"1A5E99C8-3778-416B-915F-7335C72435B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"578DCE6D-3360-43DA-B22E-E0005A6AF388"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"E4D7B93B-0CF5-4CAF-B1F4-8A816A427BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"5FDAF214-1851-4DFC-ACAA-37D8CD83D323"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.9:*:*:*:*:*:*:*","matchCriteriaId":"B41BBCA6-237B-4CB6-9208-571D47251E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:quagga:quagga:0.99.10:*:*:*:*:*:*:*","matchCriteriaId":"FD6CAB29-56F9-4C54-97D8-CBB338658EB0"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=quagga-dev&m=123364779626078&w=2","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/34999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://thread.gmane.org/gmane.network.quagga.devel/6513","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1788","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:109","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/01/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/01/2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/54200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34817","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022164","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-775-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50317","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=quagga-dev&m=123364779626078&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/34999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://thread.gmane.org/gmane.network.quagga.devel/6513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/01/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-775-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1573","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T17:30:09.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments."},{"lang":"es","value":"xvfb-run v1.6.1 en Debian GNU/Linux, Ubuntu, Fedora 10 y posiblemente otros sistemas operativos, ubican la magic cookie (MCOOKIE) en la línea de comandos, lo que permite a usuarios locales obtener privilegios listando los procesos y sus argumentos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8919F1-CD33-437E-9627-69352B276BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"BA70E035-8475-4046-ABD7-5AE59F874EBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"84BB6CD8-43ED-4998-8D68-6934B93EA833"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:branden_robinson:xvfb-run:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3E4D5938-DC01-4CA6-A493-A34FB2EEEA14"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39834","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/05/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/05/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34828","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-939-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1185","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50348","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/05/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/05/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-939-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1574","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T17:30:09.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference."},{"lang":"es","value":"racoon/isakmp_frag.c en ipsec-tools anterior a v0.7.2, permite a atacantes remotos provocar una denegación de servicio (caída) a través de paquetes fragmentados sin carga, que lanza un deferencia a puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.1","matchCriteriaId":"BE498F5F-16FD-476B-8C6B-44F511A1EB22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.1:*:*:*:*:*:*:*","matchCriteriaId":"B4B6F6FD-EC31-4C7E-9DA5-6F09185BCB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2:*:*:*:*:*:*:*","matchCriteriaId":"7562F975-4035-44A7-94C1-C2AC45EF7202"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"00684A2E-376D-41C0-99A2-37114002CBBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"12D0B23A-CE0B-45B2-A077-86F70F5BFBB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5CF3626E-39A4-4DFA-BD87-9E8A884B49FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AEC97B47-AC72-4CFB-B088-F92C9B9918A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*","matchCriteriaId":"ADAAFB6A-A22F-4539-8B12-AD5BE5829208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"C23DEC80-8884-4C8E-92FD-7C8B5D7430E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc2:*:*:*:*:*:*","matchCriteriaId":"C63A048D-DA8F-495F-AF07-137A1777329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc3:*:*:*:*:*:*","matchCriteriaId":"33C0E99B-AA38-4A22-90C7-41C7B49E762B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc4:*:*:*:*:*:*","matchCriteriaId":"BBF6E87C-3A10-443C-8F5A-5B51F3F888AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc5:*:*:*:*:*:*","matchCriteriaId":"4EBFDCE2-FFF4-4A22-94E9-40115663CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7BC2543-F91E-40A0-AF3D-47A8EC7A5FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B05AF4-3F58-439D-BADD-C9758C4BBA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"7AB016E3-49FE-4ADF-8D4A-479D0D1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:*:*:*:*:*:*:*","matchCriteriaId":"00EA2BBE-4871-429C-A1A9-C956C0467804"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"1FFEBAAB-5991-480E-985D-064A2FECFD34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C5630CFB-58BF-4B58-90AB-B44793D91FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EF78AECE-073F-4CDE-B988-47E72637C6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0740E4E3-9888-48E2-B7A3-CF8376FBA90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D89CEEF7-3EE3-4CAA-92DC-C7D2E9376EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"02E57AC3-9656-4830-84E4-6972AC8D5012"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"85EF4DB2-4D4C-42F0-85E4-4FF39EB0019E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"3EC5FD67-B39E-4262-A48C-1F87E401C2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.7:*:*:*:*:*:*:*","matchCriteriaId":"4DD877C6-CBFE-483E-B556-56FCDA1BFC15"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35153","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35159","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35212","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35404","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-03.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4298","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1804","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:112","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/29/6","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/04/3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1036.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34765","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-785-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497990","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50412","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.html","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/29/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/04/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-785-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=497990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1575","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T17:30:09.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Drupal v5.x anterior a v5.17 y v6.x anterior a v6.11, usado en vbDrupal anterior a v5.17.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de secuencias con bytes UTF-8 previas a los meta tags Content-Type que se tratan como UTF-7 en Internet Explorer 6 y 7."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"45BE66AB-3491-42CB-8594-AB041D15EA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F6334858-DF62-467A-9126-6F0AD32D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A677D3A4-F15C-4287-94B3-4CAADA4679D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"24DAB8DE-2459-484C-88B5-9812CFBDC60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*","matchCriteriaId":"FD400243-3FFE-457C-A977-6688D9181FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*","matchCriteriaId":"2A2686FD-9643-4B8A-A8BF-C67120E44A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*","matchCriteriaId":"0F851EC4-6148-4C13-890F-8260D4DF5A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*","matchCriteriaId":"30282489-9168-4F7E-8465-1FE6521056B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6:*:*:*:*:*:*:*","matchCriteriaId":"3B892365-3060-4065-B887-B41820339AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6:beta1:*:*:*:*:*:*","matchCriteriaId":"EBB79C70-36C8-4F89-88DD-A071FB2F942A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"7954FAA5-0455-407F-B16F-CB1FD24F9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"B254CD4E-51A2-4E8D-9B59-FA5610F76683"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*","matchCriteriaId":"A4DF0926-E487-4F3B-B85B-2690127FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*","matchCriteriaId":"D05C77D9-E816-41A6-80DB-F4815980A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"}]}]}],"references":[{"url":"http://drupal.org/node/449078","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34980","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1792","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/54152","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1216","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50250","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/449078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1576","sourceIdentifier":"cve@mitre.org","published":"2009-05-06T17:30:09.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box.  NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks."},{"lang":"es","value":"Vulnerabilidad sin especificar en Drupal 5.x anterior a v5.17 y v6.x anterior a v6.11, usado en  vbDrupal anterior a v5.17.0, permite a atacantes remotos asistidos por el usuario obtener información sensible engañando a las víctimas para que visiten la página de inicio a través de una URL manipulada y provocando que los datos de los formularios sean enviados a un sitio controlado por el atacante. Posiblemente relacionado con múltiples caracteres \"/\" (Slash) que no son manejados adecuadamente  por includes/bootstrap.inc como ha sido demostrado usando el formulario de búsqueda. NOTA: esta vulnerabilidad puede ser aprovechada para llevar a cabo ataques de falsificación de petición en sitios cruzados (CSFR)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"45BE66AB-3491-42CB-8594-AB041D15EA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F6334858-DF62-467A-9126-6F0AD32D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A677D3A4-F15C-4287-94B3-4CAADA4679D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"24DAB8DE-2459-484C-88B5-9812CFBDC60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*","matchCriteriaId":"FD400243-3FFE-457C-A977-6688D9181FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*","matchCriteriaId":"2A2686FD-9643-4B8A-A8BF-C67120E44A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*","matchCriteriaId":"0F851EC4-6148-4C13-890F-8260D4DF5A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*","matchCriteriaId":"30282489-9168-4F7E-8465-1FE6521056B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"7954FAA5-0455-407F-B16F-CB1FD24F9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"B254CD4E-51A2-4E8D-9B59-FA5610F76683"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*","matchCriteriaId":"A4DF0926-E487-4F3B-B85B-2690127FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*","matchCriteriaId":"D05C77D9-E816-41A6-80DB-F4815980A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"}]}]}],"references":[{"url":"http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/449078","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34950","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34980","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1792","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/54153","source":"cve@mitre.org"},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/449078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1577","sourceIdentifier":"secalert@redhat.com","published":"2009-05-07T17:30:04.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función putstring en el archivo find.c en Cscope anteriores a v15.6 permite a los atacantes remotos asistidos por el usuario ejecutar arbitrariamente código a través de un (1) nombre de función largo o (2) un símbolo largo en un archivo de código fuente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:*:*:*:*:*:*:*:*","versionEndIncluding":"15.5","matchCriteriaId":"7D9324B0-3391-4D44-AA10-FAF870445F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:13.0:*:*:*:*:*:*:*","matchCriteriaId":"27476BD2-FC3B-46A1-8810-DB3DB29106C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.0bl2:*:*:*:*:*:*:*","matchCriteriaId":"17C00B4F-D84A-4CF6-B4BF-D0F574CBFD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.1:*:*:*:*:*:*:*","matchCriteriaId":"78590FBB-C9CE-42B7-83C9-1F5FAD11A2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.3:*:*:*:*:*:*:*","matchCriteriaId":"E821D0F7-D928-4C2F-89DE-7B46968A2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*","matchCriteriaId":"0837A120-86AE-4ABB-AB38-F3D573C5064B"}]}]}],"references":[{"url":"http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19","source":"secalert@redhat.com"},{"url":"http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35213","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200905-02.xml","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/05/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/10","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/9","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189666","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499174","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50366","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9837","source":"secalert@redhat.com"},{"url":"http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/05/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1578","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING)."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en SquirrelMail versiones anteriores a v1.4.18 permite a atacantes remotos inyectar web script o HTML a través de vectores envueltos en (1) determinadas cadenas encriptadas en cabeceras de correos electrónicos, relacionado con contrib/decrypt_headers.php; (2) PHP_SELF; y (3) la cadena \"query\" (también conocido como QUERY_STRING)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","matchCriteriaId":"B2FF0DF6-AEEC-4099-B1C4-19EDC1FDD564"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.17","matchCriteriaId":"B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2C2F0267-47D5-436F-B9F6-505CEC582AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"565E131D-56A9-46AB-800D-12B097FE3B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A2805F37-B8E6-4647-9E90-50763C7E4952"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*","matchCriteriaId":"284E543F-6AC3-45CD-8448-3A1D4D3DD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6C7E957E-81C0-4FA3-9944-5E514874BED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0DACB-F875-448B-86DF-D40531A2A762"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*","matchCriteriaId":"651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E11C84D0-13B5-4298-B9F3-BF5C6F927793"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*","matchCriteriaId":"DEE72FA1-E635-436B-A650-A8D4040925B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*","matchCriteriaId":"512F2AB5-EB24-4846-B924-377D040C131A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*","matchCriteriaId":"25F42A76-BF06-4DA9-8667-0E81D17B5B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*","matchCriteriaId":"02410BAB-C1D7-4883-A27B-C13A72707CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*","matchCriteriaId":"8509AAEE-225C-4907-884D-F9796ACA40F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DD41781D-1F7E-43A7-AD59-ADFE1D04D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78650B7E-9638-46FF-9656-38E8DFE3FA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4C1E1172-9D9E-439E-BD4B-4EF372344F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB15C5DD-2D76-47ED-883C-D1901B96F391"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*","matchCriteriaId":"E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*","matchCriteriaId":"ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"BA516843-2A45-4705-9669-4B719F722192"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C059835E-8FD9-40DF-BA6F-7E313E49F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E28A825-56F4-4EC5-9D62-661C0F4B477F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"545CD944-7C64-49E3-A32E-3388B5F3ECF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F22E1FA6-7C9C-4D01-A645-CF41939C1988"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F886B99-E996-4BF7-9BE3-14A6713A997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"65801122-2E5D-4244-9D37-5483F5C731F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5A29559D-0DB8-40C8-A6E6-4F37DDD27571"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C8F869F3-6D8D-4C95-95F7-5AE42C67362B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*","matchCriteriaId":"3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*","matchCriteriaId":"77776503-3258-400D-8404-233EAFA940AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B85F80F3-DC0E-4228-9FA3-D870BC2200D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"}]}]}],"references":[{"url":"http://download.gna.org/nasmail/nasmail-1.7.zip","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/60468","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37415","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40220","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1066.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34916","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-08","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-09","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3315","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500363","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50459","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50460","source":"cve@mitre.org"},{"url":"https://gna.org/forum/forum.php?forum_id=2146","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.gna.org/nasmail/nasmail-1.7.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gna.org/forum/forum.php?forum_id=2146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1579","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program."},{"lang":"es","value":"La función map_yp_alias en functions/imap_general.php en SquirrelMail versiones anteriores a v1.4.18 permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de intérprete de comandos en una cadena de nombre de usuario que está utilizada por el programa ypmatch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","matchCriteriaId":"B2FF0DF6-AEEC-4099-B1C4-19EDC1FDD564"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.17","matchCriteriaId":"B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2C2F0267-47D5-436F-B9F6-505CEC582AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"565E131D-56A9-46AB-800D-12B097FE3B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A2805F37-B8E6-4647-9E90-50763C7E4952"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*","matchCriteriaId":"284E543F-6AC3-45CD-8448-3A1D4D3DD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6C7E957E-81C0-4FA3-9944-5E514874BED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0DACB-F875-448B-86DF-D40531A2A762"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*","matchCriteriaId":"651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E11C84D0-13B5-4298-B9F3-BF5C6F927793"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*","matchCriteriaId":"DEE72FA1-E635-436B-A650-A8D4040925B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*","matchCriteriaId":"512F2AB5-EB24-4846-B924-377D040C131A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*","matchCriteriaId":"25F42A76-BF06-4DA9-8667-0E81D17B5B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*","matchCriteriaId":"02410BAB-C1D7-4883-A27B-C13A72707CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*","matchCriteriaId":"8509AAEE-225C-4907-884D-F9796ACA40F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DD41781D-1F7E-43A7-AD59-ADFE1D04D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78650B7E-9638-46FF-9656-38E8DFE3FA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4C1E1172-9D9E-439E-BD4B-4EF372344F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB15C5DD-2D76-47ED-883C-D1901B96F391"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*","matchCriteriaId":"E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*","matchCriteriaId":"ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"BA516843-2A45-4705-9669-4B719F722192"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C059835E-8FD9-40DF-BA6F-7E313E49F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E28A825-56F4-4EC5-9D62-661C0F4B477F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"545CD944-7C64-49E3-A32E-3388B5F3ECF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F22E1FA6-7C9C-4D01-A645-CF41939C1988"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F886B99-E996-4BF7-9BE3-14A6713A997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"65801122-2E5D-4244-9D37-5483F5C731F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5A29559D-0DB8-40C8-A6E6-4F37DDD27571"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C8F869F3-6D8D-4C95-95F7-5AE42C67362B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*","matchCriteriaId":"3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*","matchCriteriaId":"77776503-3258-400D-8404-233EAFA940AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B85F80F3-DC0E-4228-9FA3-D870BC2200D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"}]}]}],"references":[{"url":"http://download.gna.org/nasmail/nasmail-1.7.zip","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37415","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40220","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php?r1=13674&r2=13673&pathrev=13674","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13674","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1066.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34916","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-10","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3315","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500360","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50461","source":"cve@mitre.org"},{"url":"https://gna.org/forum/forum.php?forum_id=2146","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.gna.org/nasmail/nasmail-1.7.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php?r1=13674&r2=13673&pathrev=13674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gna.org/forum/forum.php?forum_id=2146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1580","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en SquirrelMail versiones anteriores a v1.4.18 permite a atacantes remotos secuestrar sesiones web a través de una cookie manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.17","matchCriteriaId":"B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2C2F0267-47D5-436F-B9F6-505CEC582AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"565E131D-56A9-46AB-800D-12B097FE3B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A2805F37-B8E6-4647-9E90-50763C7E4952"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*","matchCriteriaId":"284E543F-6AC3-45CD-8448-3A1D4D3DD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6C7E957E-81C0-4FA3-9944-5E514874BED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0DACB-F875-448B-86DF-D40531A2A762"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*","matchCriteriaId":"651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E11C84D0-13B5-4298-B9F3-BF5C6F927793"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*","matchCriteriaId":"DEE72FA1-E635-436B-A650-A8D4040925B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*","matchCriteriaId":"512F2AB5-EB24-4846-B924-377D040C131A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*","matchCriteriaId":"25F42A76-BF06-4DA9-8667-0E81D17B5B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*","matchCriteriaId":"02410BAB-C1D7-4883-A27B-C13A72707CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*","matchCriteriaId":"8509AAEE-225C-4907-884D-F9796ACA40F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DD41781D-1F7E-43A7-AD59-ADFE1D04D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78650B7E-9638-46FF-9656-38E8DFE3FA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4C1E1172-9D9E-439E-BD4B-4EF372344F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB15C5DD-2D76-47ED-883C-D1901B96F391"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*","matchCriteriaId":"E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*","matchCriteriaId":"ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"BA516843-2A45-4705-9669-4B719F722192"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C059835E-8FD9-40DF-BA6F-7E313E49F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E28A825-56F4-4EC5-9D62-661C0F4B477F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"545CD944-7C64-49E3-A32E-3388B5F3ECF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9F7F3531-E0EE-48AA-BCB4-872BEB853531"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F886B99-E996-4BF7-9BE3-14A6713A997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D4D1297B-EE36-46E2-8722-34F385A54751"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"9C3A6CFE-CFA4-4B48-9738-063A2B1025FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc2a:*:*:*:*:*:*","matchCriteriaId":"2664D22F-B0E6-48AB-BBBA-C653C1AF77A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"79E6734C-EE1C-40B6-9759-15298707A6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:r3:*:*:*:*:*:*","matchCriteriaId":"F66D66B1-992E-4EE0-A189-0974B96FE721"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"70484027-647C-47DF-85FD-3323F4685613"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*","matchCriteriaId":"CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3aa:*:*:*:*:*:*:*","matchCriteriaId":"C4AAFE2B-77AB-4AC3-A22C-C3C256E2E45A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BF6591E5-5F36-4663-85A6-9D870FD49FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:rc1:*:*:*:*:*:*","matchCriteriaId":"03D847B0-DE1D-49D7-9ED4-30C0A82209AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3A884536-4D27-4350-B815-AB4E625879DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:rc1:*:*:*:*:*:*","matchCriteriaId":"4429B95B-273A-45F3-A066-9AF548AC3FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BD89F143-EEBF-472D-9653-E7534F5799FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.8.4fc6:*:*:*:*:*:*:*","matchCriteriaId":"2A901766-B49B-4983-98AB-880B333C284B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B9851AD9-5093-4482-A632-487C6D104C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.9a:*:*:*:*:*:*:*","matchCriteriaId":"5BA5BA42-F53A-4E0D-B04C-D70D2291E408"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*","matchCriteriaId":"77776503-3258-400D-8404-233EAFA940AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:rc1:*:*:*:*:*:*","matchCriteriaId":"3893B3D9-BAA3-4FCD-BC58-C4B664E688B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*","matchCriteriaId":"A0C44025-C79D-4791-8EF6-3E26786E194E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40220","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34916","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-11","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500358","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50462","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squirrelmail.org/security/issue/2009-05-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1581","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message."},{"lang":"es","value":"functions/mime.php en SquirrelMail versiones anteriores a v1.4.18 no protege el contenido de la aplicación de Cascading Style Sheets (CSS) posicionado en mensajes de correo HTML, lo cual permite a atacantes remotos falsear la interfaz de usuario, y conducir ataques de secuencias de comandos en sitios cruzados (XSS) y phishing, a través de mensajes manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","matchCriteriaId":"B2FF0DF6-AEEC-4099-B1C4-19EDC1FDD564"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.17","matchCriteriaId":"B23AEC37-88CE-488D-B9D2-2B0322D0FC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2C2F0267-47D5-436F-B9F6-505CEC582AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"565E131D-56A9-46AB-800D-12B097FE3B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"86DB6243-3A4A-419E-B6C5-D61F5B0A1E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A2805F37-B8E6-4647-9E90-50763C7E4952"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3:*:*:*:*:*:*:*","matchCriteriaId":"284E543F-6AC3-45CD-8448-3A1D4D3DD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6C7E957E-81C0-4FA3-9944-5E514874BED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0DACB-F875-448B-86DF-D40531A2A762"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.3pre2:*:*:*:*:*:*:*","matchCriteriaId":"651432C3-1EE9-4BBA-A1CF-DCC9F19954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E11C84D0-13B5-4298-B9F3-BF5C6F927793"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre1:*:*:*:*:*:*:*","matchCriteriaId":"DEE72FA1-E635-436B-A650-A8D4040925B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.4pre2:*:*:*:*:*:*:*","matchCriteriaId":"512F2AB5-EB24-4846-B924-377D040C131A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*","matchCriteriaId":"25F42A76-BF06-4DA9-8667-0E81D17B5B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre1:*:*:*:*:*:*:*","matchCriteriaId":"02410BAB-C1D7-4883-A27B-C13A72707CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.5pre2:*:*:*:*:*:*:*","matchCriteriaId":"8509AAEE-225C-4907-884D-F9796ACA40F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DD41781D-1F7E-43A7-AD59-ADFE1D04D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78650B7E-9638-46FF-9656-38E8DFE3FA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4C1E1172-9D9E-439E-BD4B-4EF372344F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB15C5DD-2D76-47ED-883C-D1901B96F391"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*","matchCriteriaId":"E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*","matchCriteriaId":"ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"BA516843-2A45-4705-9669-4B719F722192"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C059835E-8FD9-40DF-BA6F-7E313E49F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E28A825-56F4-4EC5-9D62-661C0F4B477F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"545CD944-7C64-49E3-A32E-3388B5F3ECF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F22E1FA6-7C9C-4D01-A645-CF41939C1988"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F886B99-E996-4BF7-9BE3-14A6713A997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"65801122-2E5D-4244-9D37-5483F5C731F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5A29559D-0DB8-40C8-A6E6-4F37DDD27571"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C8F869F3-6D8D-4C95-95F7-5AE42C67362B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*","matchCriteriaId":"3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*","matchCriteriaId":"77776503-3258-400D-8404-233EAFA940AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B85F80F3-DC0E-4228-9FA3-D870BC2200D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40220","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/mime.php?r1=13667&r2=13666&pathrev=13667","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1066.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34916","source":"cve@mitre.org"},{"url":"http://www.squirrelmail.org/security/issue/2009-05-12","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500356","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50463","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/mime.php?r1=13667&r2=13666&pathrev=13667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squirrelmail.org/security/issue/2009-05-12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1582","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php."},{"lang":"es","value":"Million Dollar Text Links 1.0 no restringe apropiadamente el acceso administrativo para admin.home.php, lo que permite a los atacantes remotos evitar las restricciones previstas y ganar privilegios a través de una petición directa a admin.home.php después de visitar admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptarudemos:million_dollar_text_links:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A9209D4E-9E68-4ACC-B5BA-8D06D1CC1DFC"}]}]}],"references":[{"url":"http://osvdb.org/54204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34809","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50306","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8605","source":"cve@mitre.org"},{"url":"http://osvdb.org/54204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1583","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitrary web script or HTML via the (1) search form; (2) _expresion_de_busqueda, (3) letra, (4) estado_id, and (5) tema parameters to index.php; the (6) PATH_INFO to index.php; (7) unspecified parameters when editing a term as specified by the edit_id and tema parameters to index.php; and the (7) y, (8) ord, and (9) m parameters to sobre.php."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en TemaTres versiones 1.0.3 y 1.031, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio de los parámetros (1) formulario de búsqueda; (2) _expresion_de_busqueda, (3) letra, (4) estado_id y (5) tema en el archivo index.php; el (6) PATH_INFO en el archivo index.php; (7) parámetros no especificados en la edición de un término según lo especificado por los parámetros edit_id y tema en el archivo index.php; y los parámetros (7) y, (8) ord, y (9) m en el archivo sobre.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:r020:tematres:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"82636BD4-87EE-4E09-ADA0-72EB0F6383C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:r020:tematres:1.031:*:*:*:*:*:*:*","matchCriteriaId":"2823931E-7528-415E-85AD-A49544446EB4"}]}]}],"references":[{"url":"http://osvdb.org/54247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503252/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34830","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50343","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8615","source":"cve@mitre.org"},{"url":"http://osvdb.org/54247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503252/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1584","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php."},{"lang":"es","value":"Vulnerabilidad de inyección múltiples SQL en TemaTres 1.0.3 y 1.031, cuando magic_quotes_gpc es deshabilitada, permite a los atacantes remotos o usuarios remotos autenticados para ejecutar arbitrariamente comandos SQL a través de (1) mail, (2) password, y (3) el parámetro letra para index.php; (4) y (5) m parámetros para sobre.php; y el (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, y (10) parámetros xtmTema para xml.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:r020:tematres:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"82636BD4-87EE-4E09-ADA0-72EB0F6383C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:r020:tematres:1.031:*:*:*:*:*:*:*","matchCriteriaId":"2823931E-7528-415E-85AD-A49544446EB4"}]}]}],"references":[{"url":"http://osvdb.org/54245","source":"cve@mitre.org"},{"url":"http://osvdb.org/54246","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503252/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503256","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34830","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8615","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8616","source":"cve@mitre.org"},{"url":"http://osvdb.org/54245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503252/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1585","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_correo_electronico and (2) id_password parameters to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección múltiple SQL en TemaTres 1.031, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los parámetros (1) id_correo_electronico y (2) id_password para login.php. NOTA: la procedencia de esta información es deconocida, los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:r020:tematres:1.031:*:*:*:*:*:*:*","matchCriteriaId":"2823931E-7528-415E-85AD-A49544446EB4"}]}]}],"references":[{"url":"http://osvdb.org/54244","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1586","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la característica del importador NZB en GrabIt 1.7.2 Beta 3 y anteriores, que permite a los atacantes remotos ejecutar arbitrariamente código a través de referencias DTD manipulada en un elemento DOCTYPE en un archivo NZB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:*:beta3:*:*:*:*:*:*","versionEndIncluding":"1.7.2","matchCriteriaId":"63D3C24A-9303-4A37-B283-0B255B039C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"AF4FAFF4-AAAB-4487-99DC-93BB84214FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.5.1:beta:*:*:*:*:*:*","matchCriteriaId":"EFCE0B20-A57A-43CB-85E0-11FAECB4AEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.5.2:beta:*:*:*:*:*:*","matchCriteriaId":"C97E45F1-18EA-4259-867E-9C5339F2F43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.5.3:beta:*:*:*:*:*:*","matchCriteriaId":"D56088FE-7CE2-4061-8ADB-A77F3EC7DF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.6.1:beta:*:*:*:*:*:*","matchCriteriaId":"8ACA2866-0BB6-4D47-95B7-0AFF898D7D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.6.2:beta:*:*:*:*:*:*","matchCriteriaId":"280FAAD8-687C-43B4-9912-766AF3C3D074"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.7.1:beta:*:*:*:*:*:*","matchCriteriaId":"5D34BC0B-2402-4562-B1AA-CBC72C6EF5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.7.2:beta:*:*:*:*:*:*","matchCriteriaId":"B60949D3-D24E-44D2-B727-6B8DBC454B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:shemes:grabit:1.7.2:beta2:*:*:*:*:*:*","matchCriteriaId":"74D3B18C-2150-4ED1-8DB5-3F5EE156FE95"}]}]}],"references":[{"url":"http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503184/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34807","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022161","source":"cve@mitre.org"},{"url":"http://www.shemes.com/index.php?p=whatsnew","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50310","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8612","source":"cve@mitre.org"},{"url":"http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503184/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shemes.com/index.php?p=whatsnew","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1587","sourceIdentifier":"cve@mitre.org","published":"2009-05-07T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by setting the login_id, group_id, login_name, user_id, and user_type cookies to certain values."},{"lang":"es","value":"archivo index.php en PHP Site Lock 2.0 permite a los atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo las cookies login_id, group_id, login_name, user_id, and user_type a ciertos valores"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kalptarudemos:php_site_lock:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6C84B62E-0E3C-4AD4-BE15-A5F792FE07A5"}]}]}],"references":[{"url":"http://osvdb.org/54203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34995","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8604","source":"cve@mitre.org"},{"url":"http://osvdb.org/54203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1588","sourceIdentifier":"cve@mitre.org","published":"2009-05-08T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CGI RESCUE MiniBBS v8t anteriores a v8.95t, v8 anteriores a v8.95, v9 anteriores a v9.08, y v10 anteriores a v10.32 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CAE1BE50-D586-4144-BA8C-7A58A1CC3237"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs:9.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B785E-3253-4C8F-B4CA-C8C5EA21AB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs:10.0:*:*:*:*:*:*:*","matchCriteriaId":"F833D59B-0034-46C0-96B9-0B39937DA052"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN11396739/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34718","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50219","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN11396739/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1589","sourceIdentifier":"cve@mitre.org","published":"2009-05-08T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en CGI RESCUE MiniBBS22 anterior a 1.01 permite a atacantes remotos enviar correos electrónicos a destinatarios de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:cgi_rescue_minibbs22:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"FE5CC03A-6A0A-4D23-8462-38FD19CD9E23"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN36982346/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html","source":"cve@mitre.org"},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN36982346/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1590","sourceIdentifier":"cve@mitre.org","published":"2009-05-08T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form."},{"lang":"es","value":"Vulnerabilidad no especificada en CGI RESCUE FORM2MAIL anterior a v1.42 permite a atacantes remotos enviar correos electrónicos a destinatarios de su elección mediante un formulario web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:form2mail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.41","matchCriteriaId":"7B8CFF75-94F5-4446-AC63-1B436F268BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:form2mail:1.21:*:*:*:*:*:*:*","matchCriteriaId":"AF964ECF-BBBF-4C3F-8C89-C5C5879E6962"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN76370393/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54097","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34869","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN76370393/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1591","sourceIdentifier":"cve@mitre.org","published":"2009-05-08T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en CGI RESCUE Web Mailer anteriores a v1.04 permite a atacantes remotos inyectar cabeceras HTTP de su elección, y dirigir ataques de secuencias de comandos en sitios cruzados (XSS) o de partición de respuesta (response splitting), mediante secuencias CRLF (retorno de carro y salto de línea) en un formulario web no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:cgi_web_mailer:*:*:*:*:*:*:*:*","versionEndIncluding":"1.03","matchCriteriaId":"8A9065E7-5A8A-4ABA-BEF6-A82243800B8A"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN28020230/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35047","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN28020230/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1592","sourceIdentifier":"cve@mitre.org","published":"2009-05-08T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner.  NOTE: this might overlap CVE-2003-1368."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ElectraSoft 32bit FTP v09.04.24 permite a servidores FTP remotos ejecutar código de su elección mediante un \"banner\" olarge. NOTA: este podría coincidir con CVE-2003-1368."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electrasoft:32bit_ftp:09.04.24:*:*:*:*:*:*:*","matchCriteriaId":"C7485B20-DFD9-46D7-BDE1-B72EA071C104"}]}]}],"references":[{"url":"http://osvdb.org/54219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34993","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34822","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1263","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50337","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8611","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8614","source":"cve@mitre.org"},{"url":"http://osvdb.org/54219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1593","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T14:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element."},{"lang":"es","value":"Armorlogic Profense Web Application Firewall anteriores a v2.2.22, y v2.4.x anteriores a v2.4.4, no implementa apropiadamente el \"modelo negativo\", lo que permite a los atacantes realizar un ataque de ejecución de secuencias de comandos en sitios cruzados - XSS - a través de modificar etiquetas finales de un elemento SCRIPT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.21","matchCriteriaId":"4A5BDDC1-14DC-4D05-B3B5-766A5CB761EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*","matchCriteriaId":"15A5DFAE-BD74-448C-95E9-C10D1696BE43"}]}]}],"references":[{"url":"http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503649/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35053","source":"cve@mitre.org"},{"url":"http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50663","source":"cve@mitre.org"},{"url":"http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503649/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1594","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL."},{"lang":"es","value":"Armorlogic Profense Web Application Firewall anteriores a v2.2.22, y v2.4.x anteriores a v2.4.4, no implemente apropiadamente el \"modelo positivo\", lo que permite a los atacantes remotos evitar ciertos mecanismos de protección a través de %0A (codificación de nueva línea), como se demuestra por una %0A en un ataque URL de ejecución de secuencias de comandos en sitios cruzados - XSS"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.21","matchCriteriaId":"4A5BDDC1-14DC-4D05-B3B5-766A5CB761EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*","matchCriteriaId":"15A5DFAE-BD74-448C-95E9-C10D1696BE43"}]}]}],"references":[{"url":"http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503649/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35053","source":"cve@mitre.org"},{"url":"http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50662","source":"cve@mitre.org"},{"url":"http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503649/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1595","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T14:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action."},{"lang":"es","value":"La implementación jabber:iq:auth en IQAuthHandler.java de Ignite Realtime Openfire v3.6.5 permite a usuarios remotos autenticados cambiar las contraseñas de cuentas de usuario de su elección a través de un elemento \"username\" (nombre de usuario) modificado en la acción passwd_change."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.3","matchCriteriaId":"455B36AC-BD2F-4357-9806-BE8432BC9F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"20332EC7-FD3C-4118-8FE9-CF8DF62FC2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44EE43D4-190A-4188-AB48-34C87FA1CC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"73E425C2-E94D-41A9-A0A7-22498B138E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B1438E68-1149-49A8-AC38-4D65D19D7B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"57A6F7A2-1AFB-41DB-9C2D-BE0785BAC6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABD75603-FE40-47CB-9810-F91C983F8732"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E4CC033A-F03B-4486-A27D-042FF0D3AB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF90E1E8-1635-4A20-9EA1-4BAE1C63EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"972DEE02-8707-473D-9BB9-A6A04F4B239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F9819365-ACD9-4801-B277-9B6D2A9CF3BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"70B640A2-A662-4BDC-970E-D71F6C1AC7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DF31BC81-E6B0-4B98-95C1-27C4F163A146"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DC95549-3BC1-4296-9993-3C917FE895F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"664BCEB5-F38C-4FB2-95B3-E8F88FB8FC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D5EA88D8-C41E-4CE1-85EB-8A0A23811FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1B16CECC-131F-4463-B8CE-101BD597C210"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"650101D4-7395-4C4E-8862-84CE365259BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"04EA1DCB-633A-4942-B039-F68113885F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A848F149-C5EC-4E1E-B3EB-98066C5AE0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CE2746D5-0081-4065-97D0-2DBF5B8F00AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6B870602-8455-4DDD-8CEE-0A4016714E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE94D0C3-188D-42D1-B868-D32AF4D3432C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5B845B1D-DC2D-47F0-A3DF-32AE01DDB6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7A1F4DD7-1B60-4006-842E-AE286302247F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A469BBA3-5DD6-42B5-ABBD-A9342ADC703A"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.0a:*:*:*:*:*:*:*","matchCriteriaId":"7D89EA95-DC8B-4C47-A865-63C42EA63F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F9306708-219D-44A8-9FE3-B2EC8EF77DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8691783F-7F3C-4264-9030-F89B607C35A4"}]}]}],"references":[{"url":"http://osvdb.org/54189","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.igniterealtime.org/community/message/190280","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1531","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34804","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1237","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50292","source":"cve@mitre.org"},{"url":"http://osvdb.org/54189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.igniterealtime.org/community/message/190280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1596","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet."},{"lang":"es","value":"Ignite Realtime Openfire antes de v3.6.5 no implementa correctamente la propiedad de configuración de la consola register.password (alias canChangePassword), lo que permite eludir la política de seguridad a usuarios remotos autenticados, así como cambiar sus propias contraseñas a través de un paquete passwd_change IQ."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.5","matchCriteriaId":"65A725C1-F775-4A44-A855-4FB8A8BE77A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/34984","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/community/message/190280","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1532","source":"cve@mitre.org","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"http://www.osvdb.org/54189","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34804","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50291","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/34984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/community/message/190280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.igniterealtime.org/issues/browse/JM-1532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"http://www.osvdb.org/54189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1597","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""},{"lang":"es","value":"Mozilla Firefox ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"}]}]}],"references":[{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1598","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""},{"lang":"es","value":"Google Chrome ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"}]}]}],"references":[{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1599","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""},{"lang":"es","value":"Opera ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","matchCriteriaId":"3D89F03D-7980-4385-8EE1-30A1B70EE257"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"}]}]}],"references":[{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1600","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""},{"lang":"es","value":"Apple Safari ejecuta llamadas DOM en respuesta a un javascript en el atributo \"target\" (objetivo) de un elemento submit dentro de un formulario contenido en un fichero PDF en línea, lo que puede permitir a usuarios remotos evitar las restricciones de Adobe Acrobat JavaScript de acceder al documento objeto, como se ha demostrado en un wervidor web que permite subir ficheros PDF por usuarios no confiables, y tener un document.domain compartido entre el servidor web y este javascript. NOTA: el investigador ha informado de que la posición de Adobe es \"un fichero PDF es un contenido activo.\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"}]}]}],"references":[{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1601","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/365823\r\n\r\nA clean install of clamav-milter (0.95.1+dfsg-1ubuntu1.1) causes the root directory to become owned by the clamav user.\r\n\r\nThis was witnessed breaking ssh chroot environment.\r\n\r\nTEST CASE:\r\n- purge any existing clamav-milter installation, make sure you don't have any old /etc/init.d/clamav-milter init script around\r\n- check root directory's owner (should be root:root)\r\n- sudo apt-get install clamav-milter (the last one in Jaunty is 0.95.1+dfsg-1ubuntu1.1)\r\n- after installing the package, clamav-milter will start automatically (at least 'init.d/clamav-milter start' will execute)\r\n- check the root directory's owner:","cveTags":[],"descriptions":[{"lang":"en","value":"The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory."},{"lang":"es","value":"El script Ubuntu-clamav milter.init de clamav-milter antes de la versión v0.95.1+dfsg-1ubuntu1.2 en Ubuntu v9.04 establece la propiedad del directorio de trabajo actual a la cuenta clamav, lo que podría permitir eludir las restricciones de acceso a los usuarios locales a través de operaciones lectura o escritura o en este directorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"1AA1B57C-E00F-44E7-AB2E-24D689EC878C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35000","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34818","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-770-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50311","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/365823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-770-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/365823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1602","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumption) via multiple long SMTP commands, as demonstrated by HELO commands."},{"lang":"es","value":"Vulnerabilidad en el servidor de correo Pablo Software Solutions Quick 'n Easy Mail Server v3.3 que permite a usuarios remotos provocar una denegación de servicio (caída del servicio o excesivo consumo de CPU) a través de múltiples comandos SMTP largos como se ha demostrado con los comandos HELO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pablosoftwaresolutions:quick\\'n_easy_mail_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E0F4E151-3D52-462F-AD70-C5F3F21A26A4"}]}]}],"references":[{"url":"http://osvdb.org/54215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34814","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50299","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8606","source":"cve@mitre.org"},{"url":"http://osvdb.org/54215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1603","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted."},{"lang":"es","value":"Vulnerabilidad en src/tools/pkcs11-tool.c en pkcs11-tool de OpenSC v0.11.7. Cuando se utiliza con modulos PKCS#11 de terceras partes sin especificar, genera claves RSA con exponentes públicos incorrectos, lo que permite a usuarios remotos leer en texto claro mensajes que se pretendió que fueran encriptados."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensc-project:opensc:0.11.7:*:*:*:*:*:*:*","matchCriteriaId":"39AD15A8-CAB8-4C9C-896B-FB59465FCB58"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://secunia.com/advisories/35035","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35293","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35309","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36074","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200908-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:123","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2009-May/000025.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/08/1","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1295","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00095.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00097.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01432.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200908-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opensc-project.org/pipermail/opensc-announce/2009-May/000025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/08/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00097.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01432.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-1604","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack vectors related to /admin/remotecontrol/."},{"lang":"es","value":"Vulnerabilidad no especificada en LimeSurvey en sus versiones anteriores a la v1.82 que permite a usuarios remotos ejecutar comandos y obtener información confidencial a través de un vector de ataque desconocido relacionado con /admin/remotecontrol/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.80:*:*:*:*:*:*:*","matchCriteriaId":"8FED3FCC-EF18-4C93-B0ED-71D49B2B3EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.80:rc4:*:*:*:*:*:*","matchCriteriaId":"F17F04CC-4044-4A48-880B-9A946F3BB283"},{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.80\\+:*:*:*:*:*:*:*","matchCriteriaId":"97967070-D35E-4F10-A86A-12F9CF284ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.81:*:*:*:*:*:*:*","matchCriteriaId":"8DA98BBD-2A40-42EA-A26D-05C2F7FFCAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:limesurvey:limesurvey:1.81\\+:*:*:*:*:*:*:*","matchCriteriaId":"AC4D779A-A8AE-4170-8FAF-B443AD431D7F"}]}]}],"references":[{"url":"http://secunia.com/advisories/34946","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.limesurvey.org/content/view/169/1/lang%2Cen/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34785","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1219","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.limesurvey.org/content/view/169/1/lang%2Cen/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1605","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función loadexponentialfunc en mupdf/pdf_function.c de MuPDF en el paquete mupdf-20090223-win32. Cuando se utilizada en SumatraPDF v0.9.3 y versiones anteriores, permite a usuarios remotos ejecutar código de su elección a través de un fichero PDF modificado maliciosamente. NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.3","matchCriteriaId":"71864658-0498-4E97-A1F4-47AC4E2835B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE8A6DE-5EB6-47C5-BBCA-5ED94783414D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*","matchCriteriaId":"7E763B24-5035-476D-8244-D876707FE4B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*","matchCriteriaId":"678C49B5-A9F0-4A5C-8CDC-E85E5E509959"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*","matchCriteriaId":"084084EE-CD7D-4D26-9F92-D6C1363C1127"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*","matchCriteriaId":"968776E8-58DE-4D07-B81F-69D751E78569"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*","matchCriteriaId":"22988B78-E426-4885-8B1A-55CD875325BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*","matchCriteriaId":"8AB75661-4385-4C96-ADA6-5E57DF401CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BE3A563-DC97-4B03-939F-E183C612BBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FA284413-F016-4604-BFBA-8C26BED5AD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9:*:*:*:*:*:*:*","matchCriteriaId":"4EB1D911-1EA5-4231-8B2C-97B4346B865A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1640649C-D190-4FB5-BDC5-9A5B89945A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"568130AC-C49F-4C09-9336-C8E3F454C675"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1185","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=690555","source":"cve@mitre.org"},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=451373e028f82fa2f1cc2a6a669df31d85c877bd","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1606","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila y en montículo en el control ActiveX Dafolo DafoloControl (DafoloFFControl.dll) v1.108.6.195 permiten a atacantes remotos ejecutar código arbitrario a través un texto demasiado largo en alguno de los siguientes campos de propiedades: (1) baseURL, (2) kommune, (3) felter, (4) afdeling, (5) Banderas (6), HelpURL, (7) caburl, o (8) filename, o (9) a través de un argumento demasiado largo al método Open. NOTA: La procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dafolo:dafolocontrol:1.108.6:*:*:*:*:*:*:*","matchCriteriaId":"7D8C29AC-50D9-4B95-A9D3-3ABBB5340D63"}]}]}],"references":[{"url":"http://secunia.com/advisories/35017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34900","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50420","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50421","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50423","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1607","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el panel de administrador de phpForm.net LinkBase v2.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del nombre de usuario en un proceso de registro, cuya información no se maneja adecuadamente cuando el administrador accede al menú de usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkbase:linkbase:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA81FF43-E711-44AE-A27A-E8C45D64EF48"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34844","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50338","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1608","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields."},{"lang":"es","value":"Múltiples desbordamientos de búfer en MPLAB IDE v8.30 y posiblemente versiones anteriores. Permiten a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un fichero de proyecto .MCP con largos (1) FILE_INFO, (2) CAT_FILTERS y posiblemente otros campos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microchip:mplab_ide:8.30:*:*:*:*:*:*:*","matchCriteriaId":"30940343-3164-4F3F-B5AB-D6BEB9E1C458"}]}]}],"references":[{"url":"http://osvdb.org/54370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=654","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503400/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34897","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50419","source":"cve@mitre.org"},{"url":"http://osvdb.org/54370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.bkis.vn/?p=654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503400/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1609","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en admin/uploadform.asp en Battle Blog v1.25 que permite a usuarios remotos ejecutar código de su elección mediante la subida de un fichero con extensión de fichero ejecutable y accediendo a él mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:battleblog:battle_blog:1.25:*:*:*:*:*:*:*","matchCriteriaId":"0496228E-5295-424E-9421-328426C8BF04"}]}]}],"references":[{"url":"http://secunia.com/advisories/35023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34887","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50400","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1610","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request."},{"lang":"es","value":"admin/changepassword.php en Job Script Job Board Software v2.0 permite cambiar la contraseña del administrador a atacantes remotos y obtener así privilegios de administrador a través de una solicitud directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jobscript:job_script_job_board_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"20B0AE02-2F1F-4E6B-A20F-BADCB4F46059"}]}]}],"references":[{"url":"http://osvdb.org/54281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34874","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50380","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8639","source":"cve@mitre.org"},{"url":"http://osvdb.org/54281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1611","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ElectraSoft 32bit FTP v09.04.24 permite a servidores FTP remotos ejecutar código arbitrario a través de una respuesta 257 demasiado larga a un comando CWD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electrasoft:32bit_ftp:09.04.24:*:*:*:*:*:*:*","matchCriteriaId":"C7485B20-DFD9-46D7-BDE1-B72EA071C104"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34822","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34838","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1263","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8613","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1612","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute arbitrary code via a long argument to the OnBeforeVideoDownload method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 3.09.04.17 and earlier are also affected."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el control ActiveX de MPS.StormPlayer.1 en la biblioteca mps.dll versión 3.9.4.27 en Storm de Baofeng, permite a los atacantes remotos ejecutar código arbitrario por medio de un argumento largo en el método OnBeforeVideoDownload, como se explotó “in the wild” en abril y mayo de 2009. NOTA: algunos de estos datos fueron obtenidos de la información de terceros. NOTA: más tarde se informó que versiones 3.09.04.17 y anteriores también están afectadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.7.9_8:*:*:*:*:*:*:*","matchCriteriaId":"3F52CD8D-3166-4A06-BB43-B7DEE653FBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.7.9_10:*:*:*:*:*:*:*","matchCriteriaId":"BD543322-FB0F-45E0-9E93-347425B470BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.8:*:*:*:*:*:*:*","matchCriteriaId":"5BF09EE7-F241-4EDE-8266-FD2413C6E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.9:*:*:*:*:*:*:*","matchCriteriaId":"93399125-BFCD-4EEC-B187-3E89A8DB82D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:3.9.3_25:*:*:*:*:*:*:*","matchCriteriaId":"BEC200C6-F6EB-4F14-9D58-4112C8078B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:3.9.3_30:*:*:*:*:*:*:*","matchCriteriaId":"21F85752-B5F0-4360-AE95-ECC7B6F72BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:3.9.4_17:*:*:*:*:*:*:*","matchCriteriaId":"B5C704D6-6BF0-4C71-8AB8-35FC13C80FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:3.9.4_27:*:*:*:*:*:*:*","matchCriteriaId":"5EEA74EA-14ED-4586-B437-FF92D21A0132"}]}]}],"references":[{"url":"http://secunia.com/advisories/34944","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisrt.org/enblog/read.php?245","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34789","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/8579","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisrt.org/enblog/read.php?245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://www.exploit-db.com/exploits/8579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1613","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchterm or (2) email parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en el fichero leap.php de Leap CMS v0.1.4, cuando magic_quotes_gpc está desactivado, permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) searchterm o (2) email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8576","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1614","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en Leap CMS v0.1.4 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro msg (alias el mensaje a un comentario de un artículo) o (2) el parámetro searchterm (alias el formulario de búsqueda). NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1615","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files (aka Manage Files) request to the default URI, then accessing the file via a direct request."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin \r\nrestricciones en Leap CMS v0.1.4 permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable a través de una solicitud admin.system.files (alias Administrar Archivos) a la URI por defecto, para a continuación acceder al archivo a través de una solicitud directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8577","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1616","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el fichero docs/showdoc.php de Coppermine Photo Gallery (CPG), antes de la versión 1.4.22 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro css. Se trata de un vector diferente que CVE-2008-0505."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"BC1A0B6A-B8F7-4A2C-B290-FB4794D1D3F9"}]}]}],"references":[{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C59237.0.html","source":"cve@mitre.org"},{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C59247.0.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54145","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34782","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C59237.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.coppermine-gallery.net/index.php/topic%2C59247.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1617","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&lvl=1 value for the twLTadmin cookie."},{"lang":"es","value":"Teraway LiveHelp v2.0 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo a través de un valor userid=1&lvl=1 para la cookie twLTadmin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teraway:linktracker:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E79B2CF5-E8E7-4047-AF10-5532BE8FC07D"}]}]}],"references":[{"url":"http://secunia.com/advisories/34903","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8550","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1618","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie."},{"lang":"es","value":"Teraway LiveHelp v2.0 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo a través de un valor pwd=&lvl=1&usr=&alias=admin&userid=1 para la cookie TWLHadmin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teraway:livehelp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9FB23876-07AD-495D-856D-4DCBD8C69C75"}]}]}],"references":[{"url":"http://secunia.com/advisories/34802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8552","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1619","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the twFSadmin cookie to 1."},{"lang":"es","value":"Teraway FileStream v1.0 permite a atacantes remotos evitar la autenticación y obtener acceso administrativo estableciendo la cookie twFSadmin a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teraway:filestream:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D09179A-59FF-465D-8C18-5472365742B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/34818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8551","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1620","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the (1) nickname and (2) color parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en input.php en MataChat permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1)nickname (2)color."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mata:matachat:*:*:*:*:*:*:*:*","matchCriteriaId":"14A647BF-2124-4A0D-B49F-DC4F47394D94"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503014/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34722","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503014/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1621","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the route parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en OpenCart v1.1.8 permite a atacantes remotos leer archivos de su elección a través de un .. (punto punto) en el parámetro route."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opencart:opencart:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4C5896D2-BD35-45A6-98E5-27D6EE6C4E61"}]}]}],"references":[{"url":"http://secunia.com/advisories/34313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/532233/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34724","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8539","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/532233/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1622","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the order_sn parameter in an order_query action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en user.php en EcShop v2.5.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro order_sn en una acción order_query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecshop:ecshop:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"69763CE1-9892-4FCF-BA8D-A3ADFDCC9DBD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8548","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1623","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary web script or HTML via the PID parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Dew-NewPHPLinks v2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro PID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dew-code:dew-newphplinks:2.0:*:*:*:*:*:*:*","matchCriteriaId":"667913A3-8920-461D-B7FE-8F9ABBB41160"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1624","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the show parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Dew-NewPHPLinks v2.0 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dew-code:dew-newphplinks:2.0:*:*:*:*:*:*:*","matchCriteriaId":"667913A3-8920-461D-B7FE-8F9ABBB41160"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1625","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ln parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Thickbox Gallery v2 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de .. (punto punto) en el parámetro ln."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davlin:thickbox_gallery:2:*:*:*:*:*:*:*","matchCriteriaId":"546CDD37-8754-4167-9736-A1661A01A168"}]}]}],"references":[{"url":"http://secunia.com/advisories/34906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34741","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1626","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en public/specific.php en EZ-Blog anterior a Beta 2 20090427, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"category\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:will_kraft:ez-blog:*:beta2:*:*:*:*:*:*","versionEndIncluding":"-","matchCriteriaId":"5523211B-D87C-415B-AA00-6DE7DFA18C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:will_kraft:ez-blog:-:beta1:*:*:*:*:*:*","matchCriteriaId":"70E696F1-7233-48B4-BEF6-1CA212BC6888"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34729","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8547","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1627","sourceIdentifier":"cve@mitre.org","published":"2009-05-12T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbitrary code via a long .asf URL in the HREF attribute of a REF element in a .asx file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Streaming Download Project (SDP) Downloader v2.3.0 permite a atacantes remotos ejecutar código de su elección a través de una URL .asf larga en el atributo \"HREF\" de un elemento REF en un fichero .asx"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sdp_multimedia:streaming_download_project:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B61A8105-A81D-4E09-BDE8-0FB5FCDA41E7"}]}]}],"references":[{"url":"http://osvdb.org/54090","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34712","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8531","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8536","source":"cve@mitre.org"},{"url":"http://osvdb.org/54090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1628","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en mnet.exe en Unisys Business Information Server (BIS) 10 y 10.1 en Windows permite a atacantes remotos ejecutar código de su elección mediante un paquete TCP manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unisys:business_information_server:10:*:*:*:*:*:*:*","matchCriteriaId":"69152BF1-AFEF-49C1-93F1-0AF8EC37E1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:unisys:business_information_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"2E6686D0-67AE-46BE-85E8-3F6C48FAC8A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/Readme.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=808","source":"cve@mitre.org"},{"url":"ftp://ftp.support.unisys.com/pub/mapper/NT/BIS10.1/Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1629","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack."},{"lang":"es","value":"ajaxterm.js in AjaxTerm v0.10 y versiones anteriores genera IDs de sesión con números aleatorios predecibles basados en determinadas funciones JavaScript, lo cual hace más sencillo a atacantes remotos (1) secuestrar una sesión o (2) provocar una denegación de servicio (agotamiento de ID de sesión) a través de ataques por fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:antony_lesuisse:ajaxterm:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10","matchCriteriaId":"3B6FD790-D7B3-49BB-A79F-8B84928DEEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:antony_lesuisse:ajaxterm:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B884461C-97D0-48F0-9E88-F63E109FC9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:antony_lesuisse:ajaxterm:0.7:*:*:*:*:*:*:*","matchCriteriaId":"68CD90AC-E887-4330-82A2-092782A4FCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:antony_lesuisse:ajaxterm:0.8:*:*:*:*:*:*:*","matchCriteriaId":"4049CE69-FB1C-42A8-846F-F211D63028BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:antony_lesuisse:ajaxterm:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0FD0D43B-9252-442C-9270-00DEA7FD94F0"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42784","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-004.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/11/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503421/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50464","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/11/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503421/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1630","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver."},{"lang":"es","value":"La función nfs_permission en fs/nfs/dir.c en la implementación cliente  NFS en Linux kernel v2.6.29.3 y versiones anteriores, cuando atomic_open está activo, no comprueba la ejecución (también conocido como EXEC or MAY_EXEC) de permisos de bits, lo cual permite a usuarios locales evitar permisos y ejecutar ficheros, como lo demostrado por ficheros en un servidor de ficheros NFSv4."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1157.html .","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.29.3","matchCriteriaId":"F8F01798-4A0A-405B-A70E-C858868A49E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ECFD8D25-7FDF-48DF-8728-5875C44FFB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.nfs/26592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35106","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35298","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35847","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36051","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36327","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1809","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/13/2","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34934","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1331","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500297","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://article.gmane.org/gmane.linux.nfs/26592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/13/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1631","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files."},{"lang":"es","value":"El componente Mailer en Evolution v2.26.1 y versiones anteriores utiliza permisos de lectura para todos para el directorio .evolution, y determinados directorios y ficheros bajo .evolution/ relacionados con el correo local, lo cual permite a usuarios locales obtener información sensible a través de la lectura de esos ficheros."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue. By default, user home directories are created with mode 0700 permissions, which would not expose the ~/.evolution/ directory regardless of its own permissions.\n\nIf a user intentionally relaxes permissions on their home directory, they should be auditing all files and directories in order to not expose unwanted files to other local users.","lastModified":"2009-12-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*","versionEndIncluding":"2.26.1","matchCriteriaId":"0DAA1168-4962-46F2-BEF1-BCB537D154E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B10AA832-0C56-4447-BAAB-D6D1F56D59DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6D9FBE67-2901-426F-9CA6-70022077B2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B11C791D-6E3D-4C96-B5CE-A82D870F61D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"38225EC0-5966-4316-B45E-AB1BD4BB5328"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D3EBC9CD-DFBF-40E1-8F28-F64E27E8EBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"101552BA-C509-4767-901B-279C3B0C21F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.4:*:*:*:*:*:*:*","matchCriteriaId":"A3FBC98A-111A-4E78-AAA5-CF76B7B32D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"DA12263C-AD34-405E-B27B-6536DFD77093"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"180B84B3-8AF2-4C0F-BB49-789D4C403B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E1E9C9CC-FDEB-45C4-AF92-D3AE7DFEFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"44F21156-9E93-4936-B16F-1C243B937C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"29AB66CF-0B1B-4762-A596-4FC451977D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"600F1CB5-B0F8-443C-A25D-34B335931494"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7A7A5DBB-9259-4F0F-A7EA-A4E96D7B2C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.4:*:*:*:*:*:*:*","matchCriteriaId":"4CA640B6-B155-4503-BB05-4F17E6A71D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.6:*:*:*:*:*:*:*","matchCriteriaId":"40C26725-D869-49B0-8405-4472E1639799"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.12:*:*:*:*:*:*:*","matchCriteriaId":"2160DB09-250B-4BB4-A77D-79326EB9969C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:evolution:2.24:*:*:*:*:*:*:*","matchCriteriaId":"854DCABF-696A-4800-8B92-5CCB8F1B5333"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=581604","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/12/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34921","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=498648","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugzilla.gnome.org/show_bug.cgi?id=581604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/12/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=498648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1632","sourceIdentifier":"cve@mitre.org","published":"2009-05-14T17:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c."},{"lang":"es","value":"Múltiples fugas de memoria en Ipsec-tools versiones anteriores a v0.7.2 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de vectores envueltos (1) en la verificación de firma durante la autenticación de usuarios con certificados X.509, relacionado con la función eay_check_x509sign en src/racoon/crypto_openssl.c; y (2) la implementación NAT-Traversal (aka NAT-T) keepalive, relacionado con src/racoon/nattraversal.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.1","matchCriteriaId":"BE498F5F-16FD-476B-8C6B-44F511A1EB22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.1:*:*:*:*:*:*:*","matchCriteriaId":"B4B6F6FD-EC31-4C7E-9DA5-6F09185BCB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2:*:*:*:*:*:*:*","matchCriteriaId":"7562F975-4035-44A7-94C1-C2AC45EF7202"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"00684A2E-376D-41C0-99A2-37114002CBBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"12D0B23A-CE0B-45B2-A077-86F70F5BFBB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5CF3626E-39A4-4DFA-BD87-9E8A884B49FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AEC97B47-AC72-4CFB-B088-F92C9B9918A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*","matchCriteriaId":"ADAAFB6A-A22F-4539-8B12-AD5BE5829208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"C23DEC80-8884-4C8E-92FD-7C8B5D7430E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc2:*:*:*:*:*:*","matchCriteriaId":"C63A048D-DA8F-495F-AF07-137A1777329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc3:*:*:*:*:*:*","matchCriteriaId":"33C0E99B-AA38-4A22-90C7-41C7B49E762B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc4:*:*:*:*:*:*","matchCriteriaId":"BBF6E87C-3A10-443C-8F5A-5B51F3F888AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:rc5:*:*:*:*:*:*","matchCriteriaId":"4EBFDCE2-FFF4-4A22-94E9-40115663CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7BC2543-F91E-40A0-AF3D-47A8EC7A5FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B05AF4-3F58-439D-BADD-C9758C4BBA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"7AB016E3-49FE-4ADF-8D4A-479D0D1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"6B925C34-CB57-443E-8190-34D490377F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F534ABF0-F79F-4BDD-AD0C-705868AD72C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF7C24-5329-491C-B5F5-E2C2513B244C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4:*:*:*:*:*:*:*","matchCriteriaId":"69EE38D7-0EC3-4349-ADA6-121D0A0C2DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5:*:*:*:*:*:*:*","matchCriteriaId":"947B349F-6D8D-4EE2-8350-F544F8B152C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:*:*:*:*:*:*:*","matchCriteriaId":"00EA2BBE-4871-429C-A1A9-C956C0467804"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"1FFEBAAB-5991-480E-985D-064A2FECFD34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C5630CFB-58BF-4B58-90AB-B44793D91FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"001D8969-A212-4FD5-BF76-0C269EEB0959"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"EA224969-79DD-4908-8B72-ADEEE1126EE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6:*:*:*:*:*:*:*","matchCriteriaId":"7654CC3F-2EA0-484E-BA60-A5051DDB27B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EF78AECE-073F-4CDE-B988-47E72637C6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0740E4E3-9888-48E2-B7A3-CF8376FBA90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D89CEEF7-3EE3-4CAA-92DC-C7D2E9376EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"02E57AC3-9656-4830-84E4-6972AC8D5012"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"85EF4DB2-4D4C-42F0-85E4-4FF39EB0019E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"3EC5FD67-B39E-4262-A48C-1F87E401C2B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D9C46E0E-FABC-44A6-9FE4-E282100B392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.7:*:*:*:*:*:*:*","matchCriteriaId":"4DD877C6-CBFE-483E-B556-56FCDA1BFC15"}]}]}],"references":[{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c.diff?r1=1.11.6.4&r2=1.11.6.5&f=h","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c.diff?r1=1.6&r2=1.6.6.1&f=h","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=124101704828036&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35153","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35159","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35212","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35404","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-03.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=20090422151825.GB46988%40zeninc.net&forum_name=ipsec-tools-announce","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1804","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:114","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/12/3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1036.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34765","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-785-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10581","source":"cve@mitre.org"},{"url":"https://trac.ipsec-tools.net/ticket/303","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/crypto_openssl.c.diff?r1=1.11.6.4&r2=1.11.6.5&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/nattraversal.c.diff?r1=1.6&r2=1.6.6.1&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=124101704828036&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=20090422151825.GB46988%40zeninc.net&forum_name=ipsec-tools-announce","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/12/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-785-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://trac.ipsec-tools.net/ticket/303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1633","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T20:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el subsistema cifs en el kernel de Linux anterior a v2.6.29.4  permite a servidores remotos CIFS provocar una denegación de servicio (corrupción de memoria) y posiblemente tener otros impactos sin identificar a través de (1) una cadena Unicode mal formada, relacionado con el área de alineación de cadena Unicode en fs/cifs/sess.c; o (2) carateres largos _Unicode, relacionado con fs/cifs/cifssmb.c y la función cifs_readdir en fs/cifs/readdir.c."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1211.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1157.html .","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.29.4","matchCriteriaId":"9369E3E3-C1E6-43BB-AFBC-321034D58A31"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=124099284225229&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=124099371726547&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35217","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35226","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35298","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35847","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36327","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1809","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/14/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/14/4","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/15/2","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34612","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496572","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=124099284225229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=124099371726547&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/14/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/14/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/15/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1634","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T15:30:05.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors."},{"lang":"es","value":"El componente WebAccess en Novell GroupWise v7.x anterior a v7.03 HP3 y v8.x anterior a v8.0 HP2 no implementa adecuadamente los mecanismos de manejo de sesión, lo que permite a atacantes remotos conseguir acceso a cuentas de usuario a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*","matchCriteriaId":"422F4B8A-8133-4DE2-9749-41E3DE0031DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DD25DC76-F3BE-4A0E-86DC-D27F4948446E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*","matchCriteriaId":"C4D63B03-C0A1-4366-B853-0D36CA0E6912"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C52E2ABC-20AE-437A-83B0-2E0753787FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:hp1:*:*:*:*:*:*","matchCriteriaId":"97206FE4-E1F1-40EC-BC01-A0125FB3B20F"}]}]}],"references":[{"url":"http://secunia.com/advisories/35177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35066","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=472979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50688","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=472979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1635","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T16:48:42.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc), (2) style expressions in a message that contains an HTML file, or (3) vectors associated with incorrect protection mechanisms against scripting, as demonstrated using whitespace between JavaScript event names and values."},{"lang":"es","value":"Múltiples vulnerabilidades de tipo cross-site scripting (XSS) en el componente WebAccess en GroupWise de Novell versiones 7.x anteriores a 7.03 HP3 y versiones 8.x anteriores a 8.0 HP2, permiten a los atacantes remotos inyectar script web o HTML arbitrarios por medio de (1) el parámetro User.lang en la página de inicio de sesión (también se conoce como gw/webacc), (2) expresiones de estilo en un mensaje que contiene un archivo HTML, o (3) vectores asociados con mecanismos de protección incorrectos contra scripting, como es demostrado utilizando espacios en blanco entre los nombres y valores de eventos de JavaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A9FBB457-FDC0-485F-951A-C0A7661A92B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8661AFFB-5CAF-4D44-A617-E0330C764BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"CF66EFEE-DAB2-4455-96F2-50D3E9456485"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*","matchCriteriaId":"422F4B8A-8133-4DE2-9749-41E3DE0031DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DD25DC76-F3BE-4A0E-86DC-D27F4948446E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*","matchCriteriaId":"D861C5BE-825C-4EED-994A-9DE38AB6EA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*","matchCriteriaId":"1D75C8A8-8162-4160-9295-2DA4D710AD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*","matchCriteriaId":"C4D63B03-C0A1-4366-B853-0D36CA0E6912"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C52E2ABC-20AE-437A-83B0-2E0753787FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:hp1:*:*:*:*:*:*","matchCriteriaId":"97206FE4-E1F1-40EC-BC01-A0125FB3B20F"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35177","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022267","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503700/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503885/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35061","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35066","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=472987","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=474500","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=484942","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50689","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50691","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503700/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503885/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=472987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=474500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=484942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1636","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T15:30:05.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el componente the Internet Agent (tambien conocido como GWIA) en Novell GroupWise v7.x anteriores a v7.03 HP3 y v8.x anteriores v8.0 HP2 permite a atacantes remotos ejecutar código arbitrario a través de (1) una dirección de correo electrónico manipulada en una sesión SMTP o (2) un comando SMTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A9FBB457-FDC0-485F-951A-C0A7661A92B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8661AFFB-5CAF-4D44-A617-E0330C764BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"CF66EFEE-DAB2-4455-96F2-50D3E9456485"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*","matchCriteriaId":"422F4B8A-8133-4DE2-9749-41E3DE0031DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DD25DC76-F3BE-4A0E-86DC-D27F4948446E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*","matchCriteriaId":"C4D63B03-C0A1-4366-B853-0D36CA0E6912"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:8.0:hp1:*:*:*:*:*:*","matchCriteriaId":"97206FE4-E1F1-40EC-BC01-A0125FB3B20F"}]}]}],"references":[{"url":"http://osvdb.org/54644","source":"cve@mitre.org"},{"url":"http://osvdb.org/54645","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503724/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35064","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35065","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022276","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=478892","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=482914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50692","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50693","source":"cve@mitre.org"},{"url":"http://osvdb.org/54644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503724/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=478892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=482914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1637","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters."},{"lang":"es","value":"profile.php en Simple Customer v1.3 no requiere autenticación de administración, lo cual permite a atacantes remotos cambiar la dirección de correo electrónico y la contraseña del administrador a través de los parámetros \"email\" y \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplecustomer:simple_customer:1.3:*:*:*:*:*:*:*","matchCriteriaId":"8E61BB74-C185-455F-A1FB-56451C047D09"}]}]}],"references":[{"url":"http://osvdb.org/54280","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34872","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50379","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8638","source":"cve@mitre.org"},{"url":"http://osvdb.org/54280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1638","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login."},{"lang":"es","value":"Techno Dreams Job Career Package v3.0 permite a atacantes remotos evitar la autenticación y obtener acceso de administración \t\r\nmediante el establecimiento de la cookie JobCareerAdmin de inicio de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t-dreams:job_career_package:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AAC076E2-33E4-41B9-9BEB-762059CFCD01"}]}]}],"references":[{"url":"http://osvdb.org/54278","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34996","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50370","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8627","source":"cve@mitre.org"},{"url":"http://osvdb.org/54278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1639","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Nucleus Data Recovery Kernel Recovery for Novell v4.03 permite a atacantes asistidos por usuario ejecutar código de su elección a través de un fichero .NKNT manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nucleustechnologies:kernel_recovery:4.03:novell:*:*:*:*:*:*","matchCriteriaId":"8E2E0D7B-F372-4B9B-895C-5DB9FA73B49C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/34846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/34846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1640","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Nucleus Data Recovery Kernel Recovery for Macintosh v4.04 permite a atacantes asistidos por usuario ejecutar código de su elección a través de un fichero .AMHH manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nucleustechnologies:kernel_recovery:4.04:*:macintosh:*:*:*:*:*","matchCriteriaId":"C9FB2A8D-AEEE-4AEE-BEA3-589F70FE9364"}]}]}],"references":[{"url":"http://osvdb.org/54224","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Macintosh-v-4-04-Buffer-Overflow","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.insight-tech.org/xploits/KernelrecoveryforMacintoshv.4.04BufferOverflow.py","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/34846","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50345","source":"cve@mitre.org"},{"url":"http://osvdb.org/54224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Macintosh-v-4-04-Buffer-Overflow","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.insight-tech.org/xploits/KernelrecoveryforMacintoshv.4.04BufferOverflow.py","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/34846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1641","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Mini-stream Ripper v3.0.1.1 permiten a atacantes remotos ejecutar código de su elección a través de (1) una URL rtsp larga en un fichero .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un fichero .asx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:ripper:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C4F4D1F4-1928-47BC-8060-694755E8441E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34864","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50375","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8631","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1642","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file.  NOTE: the latter was also subsequently reported in \"prior to 3.1.3.7.\""},{"lang":"es","value":"Múltiples desbordamientos de búfer basado en pila en Mini-stream ASX to MP3 Converter 3.0.0.7 permiten que atacantes remotos ejecuten código arbitrario mediante (1) una URL rtsp larga en un archivo .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un archivo .asx. NOTA: sobre este último también se informó en \"anteriores a la 3.1.3.7\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:mini-stream_to_mp3_converter:3.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"51126A92-E438-44F7-910C-23768A36CBD9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34864","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50374","source":"cve@mitre.org"},{"url":"https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8629","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1643","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Sorinara Soritong MP3 Player v1.0 permite a atacantes remotos ejecutar código de su elección a través de un fichero .m3u manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sorinara:soritong_mp3_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"88A1C3ED-8DC2-4EB9-8B3C-DD22E6281153"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34863","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50398","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1644","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Sorinara Streaming Audio Player v0.9 permite a atacantes remotos ejecutar código de su elección a través de un fichero .pla manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sorinara:streaming_audio_player:0.9:*:*:*:*:*:*:*","matchCriteriaId":"92FCE893-D63E-45D4-BDAA-28B1E3AA1D75"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34861","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50369","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8625","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8640","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1645","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Mini-stream Easy RM-MP3 Converter v3.0.0.7 permiten a atacantes remotos ejecutar código de su elección a través de (1) una URL stsp larga en un fichero .ram y (2) una cadena larga en el atributo HREF de un elemento REF en un fichero .asx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:easy_rm-mp3_converter:3.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D3E07D7B-4A2C-40B1-8C3E-A11EC674085B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34864","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50376","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8633","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8634","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1646","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mini-stream RM Downloader v3.0.0.9 permite a atacantes remotos ejecutar código de su elección a través de una URL rtsp larga en un fichero .ram."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:mini-stream_rm_downloader:3.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"5B76CAF8-6A21-4D01-95CD-77B3F2E008AE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34860","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1647","sourceIdentifier":"cve@mitre.org","published":"2009-05-15T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en Ultrafunk Popcorn v1.87 permite a servidores POP3 remotos provocar una denegación de servicio (caída de aplicación) a través de una cadena larga en una respuesta +OK.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrafunk:popcorn:1.87:*:*:*:*:*:*:*","matchCriteriaId":"F089DBD7-FEE3-41F5-B32D-7E45C3F9A85B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34699","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1170","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8526","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1648","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services."},{"lang":"es","value":"El módulo YaST2 LDAP de yast2-ldap-server de SUSE Linux Enterprise Server v11 -también conocido como SLE11-, no activa el cortafuegos en determinadas circunstancias que incluyen reinicios durante las actualizaciones en línea, esto facilita a los atacantes remotos acceder a los servicios en red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:11:*:enterprise_desktop:*:*:*:*:*","matchCriteriaId":"A21C44DE-B976-437F-99F0-C4BB018C3121"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:11:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"B34E5287-ED2F-4BE2-8166-52B0108DCEC3"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1649","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the arch parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en arch.php en beLive v0.2.3 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"arch\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bicluc:belive:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA3119AC-5544-42FF-8E43-CB8555FB8516"}]}]}],"references":[{"url":"http://secunia.com/advisories/35059","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34968","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8680","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1650","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en photos.php en Shutter v0.1.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) albumID, (2) tagID, y (3) photoID de index.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenfourzero:shutter:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D5A11852-04AF-48A7-BEB0-3A21778780FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/35049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503493","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34967","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1651","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/member_details.php en 2daybiz Business Community Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2daybiz:business_community_script:*:*:*:*:*:*:*:*","matchCriteriaId":"433A8944-1E6D-4D6B-BB7D-736A712844AB"}]}]}],"references":[{"url":"http://osvdb.org/54494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34976","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8689","source":"cve@mitre.org"},{"url":"http://osvdb.org/54494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1652","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request."},{"lang":"es","value":"admin/adminaddeditdetails.php en Business Community Script no restringe adecuadamente el acceso, lo cual permite a atacantes remotos conseguir privilegios y añadir administradores a través de peticiones directas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2daybiz:business_community_script:*:*:*:*:*:*:*:*","matchCriteriaId":"433A8944-1E6D-4D6B-BB7D-736A712844AB"}]}]}],"references":[{"url":"http://osvdb.org/54493","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34976","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8689","source":"cve@mitre.org"},{"url":"http://osvdb.org/54493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1653","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the script parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en examples/tbs_us_examples_0view.php en TinyButStrong v3.4.0 permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro \"script\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinybutstrong:tinybutstrong:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9443B3CE-501E-4C03-BAB9-6CFE52C0D0FE"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50506","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8667","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1654","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary web script or HTML via the questionid parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en questiondetail.php en Easy Scripts Answer and Question Script permite a atacantes remotos inyectar web script o HTML a través del parámetro \"questionid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*","matchCriteriaId":"BCCC2FA6-9913-4232-A74D-07B1658198D9"}]}]}],"references":[{"url":"http://osvdb.org/54501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34975","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8690","source":"cve@mitre.org"},{"url":"http://osvdb.org/54501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1655","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en myaccount.php en Easy Scripts Answer y Question Script  permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de (1) el nombre de usuario (parámetro \"userid\") y (2) contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*","matchCriteriaId":"BCCC2FA6-9913-4232-A74D-07B1658198D9"}]}]}],"references":[{"url":"http://osvdb.org/54502","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34975","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8690","source":"cve@mitre.org"},{"url":"http://osvdb.org/54502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1656","sourceIdentifier":"cve@mitre.org","published":"2009-05-16T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka \"command injection vulnerability.\""},{"lang":"es","value":"Xerox WorkCentre y WorkCentre Pro v232, v238, v245, v255, v265, v275; y WorkCentre v5632, v5638, v5645, v5655, v5665, v5675, v5687, v7655, v7656, y v7675 permite a atacantes remotos ejecutar comandos de su elección a través de vectores de ataque desconocidos, también conocido como \"vulnerabilidad de inyección de comando\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:232:*:*:*:*:*:*:*","matchCriteriaId":"A7192AC1-4618-4C6C-BFFF-C6273F27C997"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:232:*:pro:*:*:*:*:*","matchCriteriaId":"DF466CEA-E094-4113-A381-130EE1AC321B"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:238:*:*:*:*:*:*:*","matchCriteriaId":"8B7975D5-BAD5-4354-930E-3FFEB41A11E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:238:*:pro:*:*:*:*:*","matchCriteriaId":"FA751FA5-E060-4C5B-9DB2-D89465A7043C"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:245:*:*:*:*:*:*:*","matchCriteriaId":"B9836D15-5A61-44B4-B442-500DC6E2748B"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:245:*:pro:*:*:*:*:*","matchCriteriaId":"2FFE7B1B-4F8D-4437-8C9A-F0E11E2CF3CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:255:*:*:*:*:*:*:*","matchCriteriaId":"DAAD7494-4F32-46FE-B320-1F06DA02081A"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:255:*:pro:*:*:*:*:*","matchCriteriaId":"2A3CE77F-1CDF-4E1C-8CBC-C107A2A0F12F"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:265:*:*:*:*:*:*:*","matchCriteriaId":"5EE43B88-9033-4AA1-8046-DE58FF02484B"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:265:*:pro:*:*:*:*:*","matchCriteriaId":"8E62E735-5432-4478-AF06-BF7A36BE64BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:275:*:*:*:*:*:*:*","matchCriteriaId":"885D96FF-CEED-4347-BC9F-228F2D4B8D90"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:275:pro:*:*:*:*:*:*","matchCriteriaId":"E010DD9E-0031-47CA-8CEC-FAACB5180C98"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5632:*:*:*:*:*:*:*","matchCriteriaId":"D26F3542-F758-4E46-B8BF-9E72448F6091"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5638:*:*:*:*:*:*:*","matchCriteriaId":"9E206503-ED89-4281-8B02-57B6F2ED6C7D"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5645:*:*:*:*:*:*:*","matchCriteriaId":"66CE7A70-8F68-4DFA-B2F0-FEFA1A084BC4"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5655:*:*:*:*:*:*:*","matchCriteriaId":"541DA578-0E64-4FDB-BFB2-52D40FF36F5A"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5665:*:*:*:*:*:*:*","matchCriteriaId":"95F5D811-6AF6-4F0C-9453-9398F2080AFB"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5675:*:*:*:*:*:*:*","matchCriteriaId":"17D0EF74-2943-4B7C-802F-924D62018DF8"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:5687:*:*:*:*:*:*:*","matchCriteriaId":"5835A11D-0D4A-4B5F-A97D-2C39BB87D6BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:*","matchCriteriaId":"D834AA44-1B04-42B2-9E31-0CF9202679B8"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7665:*:*:*:*:*:*:*","matchCriteriaId":"6297E5B9-28C5-4F7B-A60C-09287D381EDA"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:workcentre:7675:*:*:*:*:*:*:*","matchCriteriaId":"0C69CB8A-DD99-4C73-A789-FACD73316ADF"}]}]}],"references":[{"url":"http://osvdb.org/54457","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35101","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34984","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022238","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1328","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50558","source":"cve@mitre.org"},{"url":"http://osvdb.org/54457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1657","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en el plugin Starrating para b2evolution antes de v0.7.7 permiten a atacantes remotos ejecutar comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*","matchCriteriaId":"E867DDE0-B4EE-403A-B472-D2A128445B8B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:b2evolution:starrating_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.6","matchCriteriaId":"B5CA3A10-8A9B-4DB4-B5A5-CCA6C992BD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:b2evolution:starrating_plugin:0.6:*:*:*:*:*:*:*","matchCriteriaId":"AD8BBD5B-86C1-4334-8BD6-E09FA599FEE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:b2evolution:starrating_plugin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D2E9EF71-9FF3-47E8-B2EB-BE92EA84664C"},{"vulnerable":true,"criteria":"cpe:2.3:a:b2evolution:starrating_plugin:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DD0346A-3FB7-41FC-BA8B-E7F31AE162DA"}]}]}],"references":[{"url":"http://osvdb.org/54369","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35053","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34899","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50417","source":"cve@mitre.org"},{"url":"http://osvdb.org/54369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1658","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/admin.php en Realty Web-Base v1.0 de Realty Webware permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)usuario (username) y (2) password. Nota: algunas de estas informaciones se obtienen de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtywebware:realty_web-base:1.0:*:*:*:*:*:*:*","matchCriteriaId":"49D93444-1F4A-4FF4-A683-55B1BE321844"}]}]}],"references":[{"url":"http://osvdb.org/54372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35033","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50399","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8643","source":"cve@mitre.org"},{"url":"http://osvdb.org/54372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1659","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/."},{"lang":"es","value":"Vulnerabilidad de carga de archivos sin restricciones en admin/uploadimage.php en eLitius v1.0  permite a atacantes remotos saltarse las restricciones de acceso puestas y subir y ejecutar ficheros de su elección a través de un fichero de avatar con un tipo de contenido como image/gif, y a continuación solicitando el fichero en admin/banners."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intelliants:elitius:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0BE24D22-AB85-49A5-994D-CA8214BD4C47"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34813","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50305","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8603","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1660","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file entry in a .vpl file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en URUWorks ViPlay3 v3.0 y anteriores permite a atacantes remotos provocar una denegación de servicio (mediante caída de la aplicación) y posiblemente ejecutar código arbitrario a través de una entrada en un archivo .VPL"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:urusoft:viplay3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"25B4E5C8-388B-46B9-8B45-68DE3D12C2B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34877","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50403","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8644","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1661","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/ utopic.php en uTopic v1.0, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través del parámetro rating en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anoldman:utopic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E3DC1181-2B54-4AF2-8DC0-1D26AAC2AB2D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35051","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=261386&release_id=680474","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503422/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34907","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1288","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50428","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=261386&release_id=680474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503422/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1662","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) Password fields, as reachable from admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/login.php en Wright Way Services Recipe Script v5, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los campos (1) nombre de usuario y (2) password, como a los que se accede desde admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recipescript:recipe_script:5:*:*:*:*:*:*:*","matchCriteriaId":"8D57AC7C-01F8-402F-AFFD-9D8E917C20AC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34885","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50407","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8642","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1663","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/[username] directory."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin restricciones en myaccount.php en Easy scripts Answer and Question Script permite a atacantes remotos ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable para, a continuación, acceder a él a través de una solicitud directa al archivo en el directorio uploads/[nombre de usuario]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*","matchCriteriaId":"BCCC2FA6-9913-4232-A74D-07B1658198D9"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8690","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1664","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters."},{"lang":"es","value":"myaccount.php en Easy Scripts Answer y Question Script no verifica la contraseña actual antes de cambiar contraseña, lo que permite a atacantes remotos cambiar la contraseña de otros usuarios y obtener privilegios mediante la modificación de parámetros: userid,  txtpassword, y txtRpassword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*","matchCriteriaId":"BCCC2FA6-9913-4232-A74D-07B1658198D9"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8690","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1665","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T12:00:01.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields."},{"lang":"es","value":"myaccount.php en Easy Scripts Answer and Question Script permite a atacantes remotos eliminar aleatoriamente cuentas de usuario a través de una modificación en el parámetro userid sin especificar ningún parámetro adicional."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*","matchCriteriaId":"BCCC2FA6-9913-4232-A74D-07B1658198D9"}]}]}],"references":[{"url":"http://osvdb.org/54586","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50627","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8690","source":"cve@mitre.org"},{"url":"http://osvdb.org/54586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1666","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, and (3) CM_RecordingLocationDBC.dll, related to improper dereferencing.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabildiades no especificadas en CycloMedia CycloScopeLite v2.50.3.0 permite a atacantes remotos ejecutar codigo de su elección a través del método ReturnConnection en (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, y (3) CM_RecordingLocationDBC.dll, relativo a una desreferenciación inapropiada. NOTA: el origen de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyclomedia:cycloscopelite:2.50.3.0:*:*:*:*:*:*:*","matchCriteriaId":"07BFCAD1-761F-40D3-8B0F-0A3A770C63B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/35046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1667","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en CastRipper de Mini-stream versión 2.50.70, permite a los atacantes remotos ejecutar código arbitrario por medio de una entrada larga en un archivo .m3u, un vector diferente de CVE-2009-5137."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mini-stream:castripper:2.50.70:*:*:*:*:*:*:*","matchCriteriaId":"AC6E9D71-B555-45E0-8BF7-BAC7F3785921"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8660","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8661","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8662","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/8661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/8662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1668","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort) command without an active file transfer."},{"lang":"es","value":"TYPSoft FTP Server V1.11 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) enviando un comando ABOR (abortar) sin una transferencia de fichero activa.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:1.11:*:*:*:*:*:*:*","matchCriteriaId":"B4B3FAD7-8C90-4F05-8824-96752D4F0814"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34901","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022202","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8650","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1669","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per http://secunia.com/advisories/35072\r\n\"The vulnerability is confirmed in version 2.6.22 on Windows. Other versions may also be affected.\"","cveTags":[],"descriptions":[{"lang":"en","value":"The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"La función smarty_function_math en libs/plugins/function.math.php en Smarty v2.6.22 permite que atacantes, dependiendo del contexto, ejecutar comandos de su elección a través de metacaracteres en el atributo equation de la función math. NOTE: algunos de esos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smarty:smarty:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"7B95000D-10A0-4D15-946E-24E432C6A464"}]}]}],"references":[{"url":"http://osvdb.org/54380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35072","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35219","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34918","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-791-3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50457","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8659","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-791-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1670","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"user/index.php en TCPDB v3.8 no requiere autenticación administrativa, lo que permite a atacantes remotos añadir cuentas a través de vectores no específicos. NOTA: algunos de estos detalles se han obtenido de información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcpdb:tcpdb:3.8:*:*:*:*:*:*:*","matchCriteriaId":"3433803A-1D69-4DC0-A5E1-ED856554F684"}]}]}],"references":[{"url":"http://osvdb.org/54282","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34966","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34866","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50371","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8626","source":"cve@mitre.org"},{"url":"http://osvdb.org/54282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1671","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, or (5) launch method."},{"lang":"es","value":"Múltiple desbordamiento de búfer en el control ActiveX Deployment Toolkit en deploytk.dll v6.0.130.3 en Sun Java SE Runtime Environment (también conocido como JRE) v6 Update 13 permite a atacantes remotos ejecutar código de su elección a través de un argumento string largo sobre los métodos (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, o (5) launch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*","matchCriteriaId":"26826BB7-0EF6-439B-87F4-5BCCEA3A8907"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34931","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"https://www.exploit-db.com/exploits/8665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"https://www.exploit-db.com/exploits/8665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1672","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method."},{"lang":"es","value":"El control ActiveX Deployment Toolkit en deploytk.dll v6.0.130.3 en Sun Java SE Runtime Environment (también conocido como JRE) v6 Update 13 permite a atacantes remotos (1) ejecutar código arbitrario a través de una URL .jnlp  en el argumentos del método launch y posiblemente permita a atacantes remotos lanzar el proceso de instalación de JRE a través de (2) installLatestJRE y (3) método installJRE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*","matchCriteriaId":"26826BB7-0EF6-439B-87F4-5BCCEA3A8907"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34931","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50629","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1673","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argument of AT_FDCWD."},{"lang":"es","value":"El Kernel en Sun Solaris v9 permite a usuarios locales provocar una denegación de servicio (panic) llamando a fstat con un primer argumento de AT_FDCWD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"}]}]}],"references":[{"url":"http://osvdb.org/54464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35103","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35119","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-40-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257988-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-188.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34979","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022232","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1315","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1388","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50557","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6256","source":"cve@mitre.org"},{"url":"http://osvdb.org/54464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-40-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257988-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-188.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1674","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly a related issue to CVE-2009-1608."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Microchip MPLAB IDE v8.30 permite a atacantes remotos asistidos por usuarios, ejecutar código de su elección a través de un nombre de Path .cof largo en una sección [TOOL_SETTINGS] en un fichero .mcp, posiblemente relacionado con CVE-2009-1608."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microchip:mplab_ide:8.30:*:*:*:*:*:*:*","matchCriteriaId":"30940343-3164-4F3F-B5AB-D6BEB9E1C458"}]}]}],"references":[{"url":"http://secunia.com/advisories/35054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1675","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ElectraSoft 32bit FTP v09.04.24 permite a servidores FTP remotos ejecutar código de su elección a través de una réplica 227 larga a un comando PASV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electrasoft:32bit_ftp:09.04.24:*:*:*:*:*:*:*","matchCriteriaId":"C7485B20-DFD9-46D7-BDE1-B72EA071C104"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34838","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50337","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50644","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1676","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.127","lastModified":"2023-11-07T02:03:58.533","vulnStatus":"Rejected","evaluatorImpact":"Per http://www.microsoft.com/technet/security/advisory/971492.mspx\r\n\r\nAffected Software\r\n\r\nMicrosoft Internet Information Services 5.0\r\n\r\nMicrosoft Internet Information Services 5.1\r\n\r\nMicrosoft Internet Information Services 6.0","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1535.  Reason: This candidate is a duplicate of CVE-2009-1535.  Notes: All CVE users should reference CVE-2009-1535 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-1677","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's \"display name\" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php."},{"lang":"es","value":"Multiples vulnerabilidades de inyección de código estático en la función savefeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores permite (1) a usuarios remotos autenticados, inyectar código PHP de su elección en ficheros, introduciendo secuencias PHP en la configuración \"display name\" de las cuentas, y ejecutando boards/boards_rss.php, y podría permitir (2) a atacantes remotos inyectar código php de su elección en ficheros a través de la cabecera HTTP Host en una respuesta a boards/boards_rss.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"B2241EB6-A886-4C04-8632-997D6CA4F228"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"431C0A41-841E-48B2-88D3-B94A43F56D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA6E9A08-F938-4E3F-BA68-E307E839335B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5657A816-9C53-4D97-90C4-357FCCA7057D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8E3F9B77-302B-4EB0-B103-594CB366F880"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BAA2896F-D3E4-489D-A08F-7B2E926182C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA9025B9-B31C-4D82-9FA0-864C3F19C7A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/35057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503435","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34910","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50631","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1678","sourceIdentifier":"cve@mitre.org","published":"2009-05-18T18:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the version parameter to boards/boards_rss.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio transversal en la función saveFeed en rss/feedcreator.class.php en Bitweaver v2.6 y anteriores  permite a atacantes remotos crear o sobreescribir ficheros de su elección a través de un .. (punto punto) en el parámetro \"version\" sobre boards/boards_rss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"B2241EB6-A886-4C04-8632-997D6CA4F228"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A31BF87D-6D73-442A-9C6C-7926A2A3E8BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.1.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"431C0A41-841E-48B2-88D3-B94A43F56D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA6E9A08-F938-4E3F-BA68-E307E839335B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5657A816-9C53-4D97-90C4-357FCCA7057D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D6D44BA4-E55B-4E4A-B7CE-C5C347FB3902"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8E3F9B77-302B-4EB0-B103-594CB366F880"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BAA2896F-D3E4-489D-A08F-7B2E926182C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bitweaver:bitweaver:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA9025B9-B31C-4D82-9FA0-864C3F19C7A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/35057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503435","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34910","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1679","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy."},{"lang":"es","value":"El componente Profiles en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1, cuando instalan un perfil de configuración, puede reemplazar la política de contraseña desde Exchange ActiveSync por una política de contraseña débil, permitiendo a atacantes próximos físicamente eludir la política prevista."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55239","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35436","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1680","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history."},{"lang":"es","value":"Safari en n Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 no borra correctamente el historial de búsqueda cuando es borrada desde la configuración de la aplicación, permitiendo que atacantes próximos físicamente obtengan el historial de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55240","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35448","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1681","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct \"clickjacking\" attacks via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari anteriores a v4.0 no previene que páginas web sean cargadas en contenidos de terceros dentro de un \"submarco\", lo que permite a los atacantes remotos evitar la Política Original Misma y conduce a un ataque de \"clickjacking\" a través de un documento HTML manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35317","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1682","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate."},{"lang":"es","value":"Apple Safari antes de v4.0 no comprueba adecuadamente la revocación de certificados Extended Validation (EV), lo cual hace más fácil a atacantes remotos engañar a un usuario para aceptar un certificado no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54982","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35353","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022346","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1683","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted ICMP echo request, which triggers an assertion error related to a \"logic issue.\""},{"lang":"es","value":"El componente Telephony en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 permite a atacantes remotos provocar una denegación de servicio (reinicializar el dispositivo) mediante una petición de eco ICMP manipulada, disparando un error de aserción relacionado con un \"elemento lógico\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN87239696/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000040.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN87239696/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1684","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores a v4.0, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de un procesador de evento que lanza la ejecución de una secuencia de comandos en el contexto del próximo documento cargado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1685","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML by overwriting the document.implementation property of (1) an embedded document or (2) a parent document."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari antes de v4.0 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarios sobrescribiendo  la propiedad document.implementation de (1) un documento embebido o (2) un documento padre."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54983","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35319","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1686","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari antes de v4.0 no maneja adecuadamente constantes (alias const) declaradas en una operación de conversión de tipo durante el manejo de excepciones en JavaScript, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y cuelgue de aplicación) a través de un documento HTML elaborado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54984","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35311","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1687","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an \"offset of a NULL pointer.\""},{"lang":"es","value":"El JavaScript garbage collector en WebKit en Apple Safari anteriores a v4.0 no maneja adecuadamente la localización de fallos, lo que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (consumo de memoria y caída de aplicación) a través de un documento HTML manipulado que lanza acceso de escritura a un \"offset de un puntero NULL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54985","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35309","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10260","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1688","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is not the \"HTML 5 standard method.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores a v4.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores relativos a determinados contextos de seguridad un desarrollo que no es el \"método estándar HTML 5\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54986","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35320","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1689","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL, leading to security-context replacement."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores v4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores qeu implican la presentación de un formulario la direccion about:blank, referido a un reemplazo en un contexto de seguridad.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1690","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to \"recursion in certain DOM event handlers.\""},{"lang":"es","value":"Una vulnerabilidad de uso de memoria previamente liberada en WebKit, como es usado en Safari de Apple anterior a versión 4.0, iPhone OS versiones 1.0 hasta 2.2.1, iPhone OS para iPod touch versiones 1.1 hasta 2.2.1, Chrome de Google versión 1.0.154.53, y posiblemente otros productos, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) mediante el establecimiento de una propiedad no especificada de una etiqueta HTML que causa que los elementos secundarios se liberen y más adelante se tenga acceso cuando se produce un error HTML, relacionado con \"recursion in certain DOM event handlers\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"B669868B-F358-4D5B-9D64-4A462F261553"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*","matchCriteriaId":"4261E5C1-DC93-437E-B84F-A30380AFDC40"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"079BB54C-25FD-4B26-B171-368911960F76"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*","matchCriteriaId":"DF292FED-19A4-4031-9B1F-151C0146F3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*","matchCriteriaId":"5183082C-556F-479F-9FC1-42B59BBB840B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*","matchCriteriaId":"2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"7E7AA027-8CF9-49BD-A000-82880E41D622"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*","matchCriteriaId":"4FA51920-223B-4DF4-802C-188F5A8B0563"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"4385635D-46F2-4642-9C78-1346DC120492"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*","matchCriteriaId":"2C63C36E-1997-4F44-80AD-E665CE46A278"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"20DAE911-C037-4F10-82A3-EF42D5FB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*","matchCriteriaId":"02BFDD6F-B9C3-42BB-A84A-828193FAA137"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"CFD4325B-A86A-4C1B-930F-56C17FB6281D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"2904DEFA-7769-43DB-B3D0-B552AE8F06A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"D4CE4199-BBF5-4F42-8BBC-BD946079C912"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*","matchCriteriaId":"0AD5106E-CD7C-4952-A9B1-5F72D99276E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"34346F55-4972-427B-8F96-780FA91DB95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*","matchCriteriaId":"B7235341-983F-4578-98DC-39BC278A7556"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AE65CA8B-68CB-428C-AC32-6F9100F9E507"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*","matchCriteriaId":"BA5C2D75-4019-45EB-8AF9-A850B5349507"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AD136376-331D-494F-9D12-7E631546E8CB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54990","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11009","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1691","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript prototypes in other domains."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anterior a v4.0 permite a atacantes remotos inyectar secuencias de comandos web a su elección o HTML a través de vectores relacionados con el control insuficiente de acceso a los prototipos estándar de JavaScript en otros dominios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54989","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35330","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1692","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object."},{"lang":"es","value":"WebKit en Apple iPhone OS v1.0 hasta v2.2.1 e iPhone OS para iPod touch v1.1 hasta v2.2.1 permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) mediante una página web conteniendo un objeto HTMLSelectElement con un atributo \"length\" grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]}],"references":[{"url":"http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36977","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35446","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://bugs.webkit.org/show_bug.cgi?id=23319","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.webkit.org/show_bug.cgi?id=23319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1693","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a \"cross-site image capture issue.\""},{"lang":"es","value":"WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos leer imágenes desde sitios Web de su elección a través de un elemento CANVAS con una imagen SVG, relativo a \"Característica de captura de imagen en sitio cruzado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55004","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35331","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1694","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a \"cross-site image capture issue.\""},{"lang":"es","value":"WebKit en Apple Safari anterior a v4.0 no redirecciona correctamente, lo que permite a atacantes remotos leer las imágenes de sitios web a su eleccion a traves de vectores relacionados al elemento CANVAS y redirección, relacionado con una \"incidencia de captura de imagen de sitios cruzados.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55005","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35322","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1695","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page transition."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit de Apple Safari anterior a v4.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores que incluyen acceso a contenidos de marco después de finalizar la transición de una página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35328","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1696","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session."},{"lang":"es","value":"WebKit en Apple Safari anterior a v4.0 emplea números aleatorios predecibles en las aplicaciones JavaScript, esto simplifica a los servidores Web remotos seguir el comportamiento de un usuario de Safari en una sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55027","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1697","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en WebKit en Apple Safari anterior a v4.0. Permite a atacantes remotos inyectar cabeceras HTTP y saltarse la política \"Same Origin\" a través de un documento HTML manipulado, relativo a ataques de secuencias de comandos en sitios cruzados (XSS) que dependen de la comunicación con sitios Web arbitrarios dentro del mismo servidor Web, mediante el uso de XMLHttpRequest sin la cabecera Host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54992","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1698","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari anteriores a v4.0 no inicializa un puntero durante el proceso de llamada de función attr Cascading Style Sheets (CSS) con un argumento numérico largo, lo que permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de documentos HTML manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55006","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35588","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1128.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504173/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504295/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35318","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-032/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9484","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504173/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504295/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-822-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-032/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1699","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an \"XXE attack.\""},{"lang":"es","value":"La implementación de la hoja de estilo XSL en WebKit en Apple Safari anterior a v4.0 no maneja adecuadamente las entidades externas XML, lo cual permite a atacantes remotos leer ficheros arbitrarios a través de un DTD elaborado, como lo demuestra un fichero: ///etc/passwd URL en una declaración de entidad, relacionado con un \"ataque XXE\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"212BF588-5C81-4801-A76D-73FB1DE211EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"2.2.1","matchCriteriaId":"614C28E3-3645-4B20-95E5-42E7F123ADDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*","matchCriteriaId":"5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Broken Link","Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://osvdb.org/54972","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://scary.beasts.org/security/CESA-2009-006.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/06/apples-safari-4-fixes-local-file-theft.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35321","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/8907","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/54972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://scary.beasts.org/security/CESA-2009-006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://scarybeastsecurity.blogspot.com/2009/06/apples-safari-4-fixes-local-file-theft.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/8907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1700","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document."},{"lang":"es","value":"La implementación XSLT en WebKit en Apple Safari anteriores a 4.0 no trata apropiadamente las redirecciones, lo que permite a los atacantes remotos leer contenido XML desde páginas web arbitrarias a través de documentos manipudados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54973","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1701","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en la implementación en WebKit en Apple Safari anteriores a v4.0, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) destruyendo un elemento document.body que tiene un contenedor XML no especificado con elementos que soportan el atributo dir. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55008","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504172/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35325","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-033/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504172/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-033/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1702","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos inyectar secuencias de comandos web i HTML a traves de vctores relacionados con la gestion inadecuada de los objetos \"Location\" y \"History\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35327","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1703","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari anterior a v4.0 no prevé las referencias a archivos; URLs con elementos de (1) audio y (2) vídeo, lo que permite a atacantes remotos determinar la existencia de archivos de su elección a través de un documento HTML manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55009","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35333","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1704","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file."},{"lang":"es","value":"CFNetwork en Apple Safari anteriores a v4.0 malinterpreta los ficheros de imagen descargados como ficheros locales HTML en circunstancias sin especificar, lo que permite a atacantes remotos ejecutar código  JavaScript de forma arbitraria incluyendo este en un fichero de imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55010","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022343","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35344","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1705","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data."},{"lang":"es","value":"CoreGraphics en Apple Safari anteriores a v4.0 en Windows no utiliza adecuadamente la aritmética durante la inicialización automática de las fuentes TrueType, lo que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (consumo de memoria y caída de aplicación) a través de una fuente de datos manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54974","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35308","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1706","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie."},{"lang":"es","value":"La característica de Navegación Privada de Apple Safari anterior a v4.0 en Windows no elimina las cookies del almacenamiento de cookies alternativo en circunstancias no especificadas en relación con (1) la desactivación de la característica o (2) la salida de la aplicación, esto hace que sea más sencillo a los servidores Web remotos seguir a los usuarios mediante una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54997","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35346","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1707","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors."},{"lang":"es","value":"Condición de carrera en la implementación de \"Reset Safari\" en Apple Safari anteriores a la v4.0 en Windows permitiría a usuarios locales leer contraseñas web a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*","matchCriteriaId":"905F4A8A-49EE-40EB-983C-72C4AFBD98DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55012","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4456","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35352","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1708","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call."},{"lang":"es","value":"Apple Safari anterior a v4.0 no previene las llamadas al manejador URL  open-help-anchor por los sitios web, lo que permite a atacantes remotos abrir archivos de ayuda locales, ejecutar código de su elección u obtener información sensible a través de una llamada manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35351","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1709","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified \"caches.\""},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en la implementación de la recolección de basura en  WebCore en WebKit en Apple Safari anteriores a v4.0 que permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (corrupción de memoria dinámica y caída de la aplicación) a través de un elemento de animación SVG, en relación a objetos establecidos SVG, elementos indicadores SVG, el atributo targetElement, y \"caches\" no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55013","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35576","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:182","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1130.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-034/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10162","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/823-1/","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1130.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-034/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/823-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1710","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property."},{"lang":"es","value":"WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos suplantar en la pantalla del navegador el (1) nombre del equipo, (2) indicadores de seguridad, y otros elementos de la interface del usuario a través de un cursor personalizado junto a la propiedad hotspot de CSS3 modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55014","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35340","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51263","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1711","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari anterior a v4.0 no inicializa correctamente memoria para los objetos Attr DOM, lo cual permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de la aplicación) a través de un documento HTML elaborado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*","matchCriteriaId":"905F4A8A-49EE-40EB-983C-72C4AFBD98DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35310","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51265","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1712","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element."},{"lang":"es","value":"WebKit de Apple Safari anterior a v4.0 no previene la carga remota de los applets de Java locales, esto permite a atacante remotos ejecutar código de su elección, aumentar sus privilegios u obtener información sensible a través de un APPLET o elemento OBJECT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022345","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35350","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51266","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1713","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors."},{"lang":"es","value":"La funcionalidad XSLT en WebKit en Apple Safari anteriores a v4.0 no implementa adecuadamente la función \"document\", lo que permite a atacantes remotos leer (1) ficheros locales arbitrariamente (2) ficheros de diferentes zonas de seguridad a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54975","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51267","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1714","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Web Inspector en WebKit in Apple Safari anterior a v4.0, permite a atacantes asistidos por el usuario, inyectar secuencias comandos web o HTML de su elección y leer archivos locales, a través de vectores relacionado con caracteres de escape HTML inapropiados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55023","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35348","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51268","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1715","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Web Inspector en WebKit en Apple Safari anteriores a v4.0 permite a atacantes remotos ayudados por por el usuario inyectar secuencias de comandos web o HTML, y leer ficheros locales, a través de vectores relacionados con la ejecución de secuencias de comandos con privilegios incorrectos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*","matchCriteriaId":"905F4A8A-49EE-40EB-983C-72C4AFBD98DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54996","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35349","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1716","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files."},{"lang":"es","value":"CFNetwork en Apple Safari anterior a v4.0 sobre Windows, no protege adecuadamente los ficheros temporales de las descargas que crea, lo que permite a usuarios locales obtener información sensible leyendo éstos archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"D72FE38B-BD04-4FC7-AE41-6459CBDF207A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"A6EED222-BF5E-475A-B255-18041B4A5B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"7E203D81-FABE-4A63-8930-1DA15A86E113"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*","matchCriteriaId":"49875E29-AA30-4D96-9ED9-538823DD5E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"D6C733F3-F5D4-4CF1-866D-61FF9D81D1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C5471735-D9C0-491B-9A6A-07B39AA215CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"1E5C52F3-2109-40FD-9945-A9A9D42C076E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"151DEB6D-5857-4B0B-8449-5735768024A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*","matchCriteriaId":"AC7E7F65-8F3B-42F8-8B2D-9EA1CC4A4300"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"476EBE1F-66E1-4EF5-8344-BEDA97F306A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"480ED2AC-0DA4-44DA-A902-8534335077B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C9AD216D-0C95-4843-A1A1-C3C9A6219277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*","matchCriteriaId":"04B8652D-BE06-49CB-A636-8B53B2DF9168"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022342","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35347","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/35347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1717","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T16:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de entero en Terminal de Apple Mac OS X en sus versiones v10.5  anteriores a v10.5.7. Permite a atacantes remotos ejecutar código de su elección o ejecutar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de valores de tamaño manipulados en la secuencia de escape de redimensionamiento de xterm CSI[4, lo que provoca un desbordamiento de buffer de la memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-04","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022322","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504031/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35182","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50982","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504031/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1718","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T18:00:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page."},{"lang":"es","value":"Webkit de Apple Safari anterior a v4.0, permite a atacantes remotos con la ayuda del usuario obtener información sensible a través de vectores que utilizan eventos drag -arrastrar- y el arrastre de contenidos a través de una página Web manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*","versionEndIncluding":"4.0_beta","matchCriteriaId":"2AA3463B-FB1D-4957-A738-946399B1B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*","matchCriteriaId":"1F5F96DD-BD44-497B-A05E-326819BC46F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*","matchCriteriaId":"2B00DC91-9895-405E-B9B4-211ABC3728DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*","matchCriteriaId":"82C4A098-7EAC-4611-B621-3F0EB1B15960"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"56B016E7-C403-42AC-BF75-9BA723122A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*","matchCriteriaId":"83CFAFD2-630E-4DB9-B187-6918CFE3075C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*","matchCriteriaId":"F03B8DC9-B295-42A8-904F-3D1F827FFECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*","matchCriteriaId":"1876BC3B-B207-4E81-A0A7-259AFE6F2DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*","matchCriteriaId":"03BBCC9D-E160-4614-B2B8-6359FE644E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*","matchCriteriaId":"CDB6B46E-30E1-4E16-A941-F5E19AB34493"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*","matchCriteriaId":"E783789C-C5D4-47A2-A947-D19793B182E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"CE3C68CF-21A2-47D8-84F2-FD3219E90043"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"4D4AD962-D9AD-48E5-9B53-E3C1593D43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9270F5C4-63B9-48C5-9D6D-9CDA1461205C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1719","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer."},{"lang":"es","value":"Aqua Look and Feel para la implementación de Java en Java v1.5 en Mac OS X 10.5 permite a atacantes remotos ejecutar código arbitrario a través de una llamada a los indocumentados.\r\nEl constructor apple.laf.CColourUIResource con un valor manipulado en el primer argumento, lo que permite desreferenciar como puntero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0_11-b03:*:*:*:*:*:*:*","matchCriteriaId":"69FBB4CC-566A-450B-8A93-4755019F9EC0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3632","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504364/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35381","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35401","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51185","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504364/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1720","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:00:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de enteros en OpenEXR v1.2.2 y v1.6.1 permite a los atacantes dependientes del contexto provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados que provocan desbordamientos de búfer basados en memoria dinámica, relacionados con (1) al función Imf::PreviewImage::PreviewImage y (2) el contructor del compresor. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openexr:openexr:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7D0003E3-C50B-4C46-8A24-A874A5C137E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openexr:openexr:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"763A3838-4D7D-4221-963C-8A58560A03F6"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html","source":"cve@mitre.org"},{"url":"http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36032","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36123","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36753","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1842","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:190","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:191","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-831-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org"},{"url":"https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-831-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1721","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:00:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer."},{"lang":"es","value":"La implementación de la descompresión en la función Imf::hufUncompress en OpenEXR v1.2.2 y v1.6.1 permite a los atacantes dependientes del contexto provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores que provocan una estructura de punteros no inicializados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openexr:openexr:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7D0003E3-C50B-4C46-8A24-A874A5C137E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openexr:openexr:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"763A3838-4D7D-4221-963C-8A58560A03F6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.0:*:*:*:*:*:*:*","matchCriteriaId":"33910C38-56F2-4D36-BBA3-C88E163704B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.8","matchCriteriaId":"80C038E4-C24D-45E9-8287-C205C0C07809"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/36030","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36032","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36123","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36753","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1842","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:190","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:191","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35838","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-831-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2035","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/36030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-831-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-1722","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:00:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la implementación de compresión en OpenEXR versión 1.2.2, permite a los atacantes dependiendo del contexto causar una denegación de servicio (bloqueo de aplicación) o posiblemente ejecutar código arbitrario por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openexr:openexr:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7D0003E3-C50B-4C46-8A24-A874A5C137E1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36032","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36753","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1842","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:191","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35838","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-831-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org"},{"url":"https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-831-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openexr/openexr/blob/master/CHANGES.md#version-170-july-23-2010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1723","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T15:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062."},{"lang":"es","value":"CFNetwork en Apple Mac OS X v10.5 anterior a v10.5.8 coloca una URL incorrecta en una advertencia de certificado  en algunos escenarios de redirección 302, lo cual hace más fácil para los atacantes remotos engañar a un usuario para que visite un sitio web https arbitrario aprovechando una vulnerabilidad de redireccionamiento abierto, una cuestión diferente que CVE-2009-2062."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56846","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52418","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1724","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en WebKit en Safari de Apple anterior a versión 4.0.2, tal y como es usado en iPhone OS anterior a versión 3.1, iPhone OS anterior a versión 3.1.1 para iPod touch, y otras plataformas, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio de vectores relacionados con los objetos primarios y superiores."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the kdelibs packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n","lastModified":"2009-08-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"5C38B814-0E98-4BC7-9981-56F9EC1BFB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"BE457690-CB2B-42BD-B97C-E723AFD02FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55738","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3666","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35441","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1827","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1725","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari anterior a v4.0.2, no maneja adecuadamente las referencias de caracteres numéricos, lo que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un documento HTML manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the kdelibs packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-08-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"5C38B814-0E98-4BC7-9981-56F9EC1BFB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"BE457690-CB2B-42BD-B97C-E723AFD02FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55739","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35758","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36347","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3666","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=1002162","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=1002163","source":"cve@mitre.org"},{"url":"http://websvn.kde.org/?view=rev&revision=1002164","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35607","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022526","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1827","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513813","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5777","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00931.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00933.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=1002162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=1002163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websvn.kde.org/?view=rev&revision=1002164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-836-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-857-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00931.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00933.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1726","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image containing an embedded ColorSync profile."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en ColorSync en Apple Mac OS X v10.4.11 y v10.5 anterior a v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen manipulada que contiene un perfil ColorSync incrustado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56845","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40196","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4196","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4220","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1373","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1512","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59162","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7499","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1727","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en CoreTypes en Apple Mac OS X v10.5 anterior a v10.5.8 hace mas fácil a atacantes remotos asistidos por usuarios ejecutar código JavaScript arbitrario a través de una pagina web que ofrece una descarga con un valor Content-Type que no esta en la lista de posibles tipos de contenido inseguros para Safari."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56844","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52420","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1728","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image."},{"lang":"es","value":"Desbordamiento de Pila basado en búfer en Image RAW en Apple Mac OS X v10.5 anterior a v10.5.8, y v10.4 anterior a Digital Camera RAW Compatibility Update v2.6(actualización de compatibilidad con cámara digital RAW v2.6), permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen Canon RAW manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52423","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1729","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en Sun Java System Communications Express 6 2005Q4 (también conocido como v6.2) y v6.3 que permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro (1) abperson_displayName para uwc/abs/search.xml en la implementación añadir contacto en el componente libro de direcciones personales o el parámetros (2) temporaryCalendars para uwc/base/UWCMain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"FBA91911-ED19-46D7-971B-6EF9DA615B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:6.3:*:sparc:*:*:*:*:*","matchCriteriaId":"B65186B3-C977-43F3-BBC8-EC5B34FCE0F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:6.2:*:x86:*:*:*:*:*","matchCriteriaId":"80691D37-4CB9-4923-A7CB-BF827D1FBA3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:6.3:*:x86:*:*:*:*:*","matchCriteriaId":"D5580EF9-DA16-42FE-B0C9-5525F38C6298"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:6.2:*:linux:*:*:*:*:*","matchCriteriaId":"A8E7C46B-2200-48A1-8E9F-EEA79AF6B298"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_communications_express:6.3:*:linux:*:*:*:*:*","matchCriteriaId":"B9EC75A9-17BB-4B21-B2C6-01FD9D2C1A12"}]}]}],"references":[{"url":"http://osvdb.org/54609","source":"cve@mitre.org"},{"url":"http://osvdb.org/54610","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/May/0177.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32474","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2009/May/1022266.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122793-26-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258068-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/sun-communications-express","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503675/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34154","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34155","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1389","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50658","source":"cve@mitre.org"},{"url":"http://osvdb.org/54609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/May/0177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2009/May/1022266.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122793-26-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258068-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/sun-communications-express","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503675/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1730","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en NetMechanica NetDecision TFTP Server v4.2, permite a los atacantes remotos leer o modificar arbitrariamente archivos a través de una secuencia de salto de directorio en el comandos (1) GET o (2) PUT"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netmechanica:netdecision_tftp_server:4.2:*:*:*:*:*:*:*","matchCriteriaId":"78134BCD-15B2-42AF-8629-F684465915A9"}]}]}],"references":[{"url":"http://secunia.com/advisories/35131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35002","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50574","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1731","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en panel/index.php en MLFFAT v2.1 que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de una cookie de supervisor codificada en base64."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mlffat:mlffat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC01F84B-F780-45C9-BAAF-4C92ED78AD05"}]}]}],"references":[{"url":"http://securityreason.com/exploitalert/6198","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sebug.net/exploit/11292/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34982","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1308","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50526","source":"cve@mitre.org"},{"url":"http://securityreason.com/exploitalert/6198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sebug.net/exploit/11292/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1732","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en admin/usermanager en IPplan versión 4.91a permite a los atacantes remotos inyectar script web o HTML arbitrario mediante el parámetro grp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:richard_ellerbrock:ipplan:4.91a:*:*:*:*:*:*:*","matchCriteriaId":"14228614-7FE5-402B-8A02-BB2AFD2996B6"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/113/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/54600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35714","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1827","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35037","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/113/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1733","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en IPplan v4.91a permite a los atacantes remotos secuestrar la autenticación del administración, por peticiones que (1) cambian la contraseña, (2)añaden usuarios, o (3) borran usuarios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:richard_ellerbrock:ipplan:4.91a:*:*:*:*:*:*:*","matchCriteriaId":"14228614-7FE5-402B-8A02-BB2AFD2996B6"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/113/45/","source":"cve@mitre.org"},{"url":"http://osvdb.org/54601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50632","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/113/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1734","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listing_video.php en VidSharePro permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnisoftsol:vidsharepro:*:*:*:*:*:*:*:*","matchCriteriaId":"23F30391-E2EB-4E9A-A5A3-3E38F0161A7C"}]}]}],"references":[{"url":"http://osvdb.org/54598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8737","source":"cve@mitre.org"},{"url":"http://osvdb.org/54598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1735","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en VidSharePro, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro searchtxt. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnisoftsol:vidsharepro:*:*:*:*:*:*:*:*","matchCriteriaId":"23F30391-E2EB-4E9A-A5A3-3E38F0161A7C"}]}]}],"references":[{"url":"http://osvdb.org/54599","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50635","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8737","source":"cve@mitre.org"},{"url":"http://osvdb.org/54599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1736","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewCategory action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente GridSupport (GS) Ticket System (com_gsticketsystem) para Joomla! que permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro catid en la acción viewCategory para index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_gsticketsystem:*:*:*:*:*:*:*:*","matchCriteriaId":"E6A04942-E95F-4655-AC62-30606D3E6B96"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35025","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50624","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1737","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. (dot dot) in the dir parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en bom.php en MyPic v2.1 que permite a los atacantes remotos, listar archivos en directorios arbitrarios a través de .. (punto punto) en el parámetro dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:diqiye:mypic:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9C8789F-6CE1-42B4-92E9-6EF97FB480B0"}]}]}],"references":[{"url":"http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35092","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50621","source":"cve@mitre.org"},{"url":"http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1738","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in \"aggregator items.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Feed Block v6.x-1.x anteriores a v6.x-1.1, un módulo para Drupal, que permite a los usuarios remotos autenticados con permisos de administrador, inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados en \"aggregator items\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivanjaros:feed_block:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F52F6528-6695-41F6-A467-04A7895009E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivanjaros:feed_block:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6CBA9F82-D55C-4181-9BA1-944F6F1E78B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivanjaros:feed_block:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D932C90A-6A7F-4761-A13F-24AB2D47138C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivanjaros:feed_block:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"4812D146-36AB-40F4-AAD0-5CED5F78E401"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B1170D-AD33-4C7A-892D-63AC71B032CF"}]}]}],"references":[{"url":"http://drupal.org/node/453098","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/461706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35044","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54429","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34953","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50521","source":"cve@mitre.org"},{"url":"http://drupal.org/node/453098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/461706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1739","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username."},{"lang":"es","value":"PAD Site Scripts v3.6 permite a los atacantes remotos evitar la autenticación y obtener privilegios como otros usuarios, incluyendo privilegios administrativos, estableciendo el parámetro de la cookie authuser a un usuario válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeasycode:pad_site_scripts:3.6:*:*:*:*:*:*:*","matchCriteriaId":"E67B7D27-8236-4948-9A64-8895634231A2"}]}]}],"references":[{"url":"http://osvdb.org/54593","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35155","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35027","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50622","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8735","source":"cve@mitre.org"},{"url":"http://osvdb.org/54593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1740","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento múltiple de búfer basado en montículo en D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) v2.11.918.2006 que permite a los atacantes remotos ejecutar arbitrariamente código a través de un argumento largo para los métodos (1) SetFilePath y (2) SetClientCookie. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dlink:mpeg4_viewer_activex_control:2.11.918.2006:*:*:*:*:*:*:*","matchCriteriaId":"C2E8B846-84A2-4A92-B665-5EDDEF4A7568"}]}]}],"references":[{"url":"http://osvdb.org/54458","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35066","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34990","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50556","source":"cve@mitre.org"},{"url":"http://osvdb.org/54458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1741","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.php in DM FileManager v3.9.2, cuando magic_quotes_gpc es deshabilitado, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de los campos (1) Usuario y (2) Contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EC55C936-2850-4E42-BE95-81E3743FCD45"}]}]}],"references":[{"url":"http://osvdb.org/54597","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35167","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35035","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8741","source":"cve@mitre.org"},{"url":"http://osvdb.org/54597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1742","sourceIdentifier":"cve@mitre.org","published":"2009-05-20T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the \"UNIunionON\" string, which is collapsed into \"UNION\" by the filter_sql function."},{"lang":"es","value":"code.php en PC4Arb Pc4 Uploader v9.0 y anteriores, hace más fácil para atacantes remotos llevar a cabo ataques de inyección SQL a través de una secuencia de palabras clave manipuladas que son borradas desde un filtro en el parámetro id en una acción de un banner, como se demuestra a través de la cadena \"UniunionON\", lo que colapsa dentro \"UNION\" por la función filter_sql."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pc4arb:pc4_uploader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"4B561086-F1AB-41C8-BB09-91CD800C39F0"}]}]}],"references":[{"url":"http://osvdb.org/54572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35004","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50586","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8709","source":"cve@mitre.org"},{"url":"http://osvdb.org/54572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1743","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a ..\\ (dot dot backslash) sequence in a Hollywood FX Compressed Archive (.hfz) file.  NOTE: this can be leveraged for code execution by decompressing a file to a Startup folder.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en InstallHFZ.exe 6.5.201.0 en Pinnacle Hollywood Effects 6, un módulo en Pinnacle Systems Pinnacle Studio 12, permite a los atacantes remotos crear y sobrescribir archivos arbitrarios a través de un nombre de archivo que contiene la secuencia ..\\ (punto punto barra invertida) en una archivo Hollywood FX Compressed Archive (.hfz). NOTA: esto puede ser aprovechado para ejecución de código, descomprimiendo un archivo en las carpetas de inicio. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:pinnaclesys:pinnacle_hollywood_effects:6:*:*:*:*:*:*:*","matchCriteriaId":"39E2BECD-E8CF-4AC5-9726-DD2E2711F74F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pinnaclesys:pinnacle_studio:12:*:*:*:*:*:*:*","matchCriteriaId":"53BBC208-A112-4C12-B044-EF16770AB406"}]}]}],"references":[{"url":"http://osvdb.org/54430","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35078","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503476/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34936","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50510","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8670","source":"cve@mitre.org"},{"url":"http://osvdb.org/54430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503476/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1744","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T01:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service (application crash) via a crafted Hollywood FX Compressed Archive (.hfz) file."},{"lang":"es","value":"InstallHFZ.exe 6.5.201.0 en Pinnacle Hollywood Effects 6, un módulo en Pinnacle Systems Pinnacle Studio 12, permite a los atacantes remotos causar una denegación de servicio (caída de la aplicación) a través de un archivo manipulado Hollywood FX Compressed Archive (.hfz)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pinnaclesys:pinnacle_studio:12:*:*:*:*:*:*:*","matchCriteriaId":"53BBC208-A112-4C12-B044-EF16770AB406"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50856","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8670","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1745","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T15:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"Cortafuegos Armorlogic Profense Web Application anteriores a v2.2.22, y v2.4.x anteriores a v2.4.4, tiene un hash de la contraseña por defecto de root, y permite el acceso a root basado en password sobre SSH, lo que hace más fácil para atacantes remotos obtener acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.21","matchCriteriaId":"4A5BDDC1-14DC-4D05-B3B5-766A5CB761EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*","matchCriteriaId":"15A5DFAE-BD74-448C-95E9-C10D1696BE43"}]}]}],"references":[{"url":"http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503649/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50852","source":"cve@mitre.org"},{"url":"http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503649/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1746","sourceIdentifier":"cve@mitre.org","published":"2009-05-21T15:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action."},{"lang":"es","value":"Vulnerabilidad de injección SQL en berita.php en Dian Gemilang DGNews v3.0 Beta permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro id en una acción de detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:diangemilang:dgnews:3.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"0A9F9E60-1AA0-4A73-911A-6F5A88DED013"}]}]}],"references":[{"url":"http://osvdb.org/54658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35016","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8727","source":"cve@mitre.org"},{"url":"http://osvdb.org/54658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1747","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en 26th Avenue bSpeak v1.10\r\n, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro forumid en una acción POST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:26thavenue:bspeak:1.10:*:*:*:*:*:*:*","matchCriteriaId":"23B0B174-4743-455B-ACBA-ED228AC01910"}]}]}],"references":[{"url":"http://secunia.com/advisories/35139","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8751","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1748","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) webpages_form or (2) userman_form parameter."},{"lang":"es","value":"Multiples vulnerabilidades de salto de directorio en index.php en Catviz v0.4.0 Beta 1, permite a atacantes remotos leer  archivos de su elección a través de un .. (punto punto) en los parámetros (1) webpages_form o (2) userman_form parameter.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joost_horward:catviz:0.4.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"FD24AFF0-F3A3-4B8B-B9B6-E38BC8EA908A"}]}]}],"references":[{"url":"http://osvdb.org/54657","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35042","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8745","source":"cve@mitre.org"},{"url":"http://osvdb.org/54657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1749","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) userman_form and (2) webpages_form parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Catviz v0.4.0 beta 1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) userman_form y (2) webpages_form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joost_horward:catviz:0.4.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"FD24AFF0-F3A3-4B8B-B9B6-E38BC8EA908A"}]}]}],"references":[{"url":"http://osvdb.org/54656","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35042","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8745","source":"cve@mitre.org"},{"url":"http://osvdb.org/54656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1750","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de envío de archivo no restringido en VidSharePro, permite a atacantes remotos ejecutar código de su elección mediante la subida de un archivo  con extensión ejecutable, entonces accediendo a él a través de vectores no especificados.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnisoftsol:vidsharepro:*:*:*:*:*:*:*:*","matchCriteriaId":"23F30391-E2EB-4E9A-A5A3-3E38F0161A7C"}]}]}],"references":[{"url":"http://osvdb.org/54611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50625","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8730","source":"cve@mitre.org"},{"url":"http://osvdb.org/54611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1751","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:38.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en list_list.php en Realty Webware Technologies Web-Base v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtywebware:realty_web-base:1.0:*:*:*:*:*:*:*","matchCriteriaId":"49D93444-1F4A-4FF4-A683-55B1BE321844"}]}]}],"references":[{"url":"http://osvdb.org/54655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50646","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8748","source":"cve@mitre.org"},{"url":"http://osvdb.org/54655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1752","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:39.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"exJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2) addmessage2.asp, which allows remote attackers to gain privileges a direct request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"exJune Office Message System v1 no restringe el acceso de forma adecuada a (1) configure.asp y (2) addmessage2.asp, lo que permite a atacantes remotos obtener privilegios a través de una petición directa.  NOTE: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exjune:office_message_system:1:*:*:*:*:*:*:*","matchCriteriaId":"A6940CD4-76A8-4E88-AAB1-C36E6DFEDE20"}]}]}],"references":[{"url":"http://secunia.com/advisories/35172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50647","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8744","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1753","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:53:48.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified \"result file.\""},{"lang":"es","value":"Coccinelle v0.1.7 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre un \"fichero resultado\" no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emn:coccinelle:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E562DC4D-4ABB-4555-B581-8BBD0B1DF0EA"}]}]}],"references":[{"url":"http://packages.debian.org/changelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35459","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34848","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00731.html","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00731.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1754","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T15:30:05.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sharedUserId requests at an application's installation time, which allows remote user-assisted attackers to access application data by creating a package that specifies a shared user ID with an arbitrary application."},{"lang":"es","value":"La clase PackageManagerService en services/java/com/android/server/PackageManagerService.java en Android v1.5 a v1.5 CRB42 no comprueba adecuadamente los certificados de desarrollador durante el procesado de las peticiones sharedUserId en el momento de instalar aplicaciones, lo que permite a atacantes remotos acceder a datos de la aplicación mediante la creación de un paquete que especifique un sharedUserId con una aplicación de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8C354829-6BEB-4C67-972A-60367073753C"}]}]}],"references":[{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=5d6d773fab559fdc12e553d60d789f3991ac552c","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-006.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/22/14","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35090","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=5d6d773fab559fdc12e553d60d789f3991ac552c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/22/14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1755","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:40.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow."},{"lang":"es","value":"Error de superación del límite en la función packet_read_query_section en packet.c en nsd v3.2.1, y process_query_section en query.c en nsd v2.3.7, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de vectores no específicos que provocan el desbordamiento de búfer.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FA12233C-34CA-4A3B-AB2C-401829B8DA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8F345D78-50BC-4864-8B53-7B1A1835DBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"87F6182D-40D3-4C1E-BFB3-D40ED196EC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FA0327A1-9C84-46B7-860E-D44B5B9D92F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6AC9FC9E-AE68-4456-84E4-51E9E07958E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"81A138F0-65EA-445E-A20B-7D1693CF220F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B07B18F-6812-4081-859C-1F8528B90D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"11EA7531-BBFB-4F37-8A17-F7437F753A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1EDDA911-2FB6-433D-A283-086CF62366F6"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"452610BB-AD3B-4E11-B5A4-F0EDB01E83BE"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8C1FD4DE-683C-461F-B9E5-0C6AA44B3AC1"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"382C31E7-2975-45D9-8C46-CB9B2F07C6AA"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1E71B058-E805-421F-BD38-F1A4C626215E"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"10037B7D-EF60-455F-9FF1-6550D0E92FC6"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"EC7774E2-D0E8-4909-AF4E-54661D2C0973"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FCC85A36-702E-4B52-9938-CACEADECD68F"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"3D8E0AF8-5E1A-4D74-8942-35C9E2350132"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CC7104EE-D481-495E-B06E-ADBCC1A6ACA8"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8E347F8C-AB1F-4967-9C85-055214798ECE"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DEDA235-5B80-4816-86C5-C83A45878A3E"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"22BC2EBF-9241-4FE1-A730-9F9BB6E2777C"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3180CAA2-1518-4750-98DE-F64821297034"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"56BCFAEA-AC1F-4D3E-B473-A6081D423BEB"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CEA25A60-DD5F-4FE8-A6CC-1695232E3D95"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C326A66B-457E-4130-A214-ED265576F448"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"140464BA-39D7-4B63-92F9-9D6E09CFF6DE"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E86C924A-6CD8-4D9A-8CFC-E4AD4CC9331E"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A818B06C-8798-460D-AE5A-93162CB758A0"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3755E217-23CB-42EF-90E8-020D5796226B"},{"vulnerable":false,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F341E55C-DB91-4D7B-91AE-076525C52A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:nsd:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"760CF611-A8BF-4E96-9F21-0796FBC8A521"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/19/1","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1756","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:40.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments."},{"lang":"es","value":"SLiM Simple Login Manager versión 1.3.0, coloca la cookie magic (mcookie) de autoridad X en la línea de comando cuando se invoca xauth desde los archivos (1) app.cpp y (2) switchuser.cpp, que permite a los usuarios locales acceder a la sesión X mediante la enumeración del proceso y sus argumentos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simone_rota:slim_simple_login_manager:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6893FC98-7B50-494A-BE62-E3B27F44D572"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/54583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50611","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/54583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1757","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:40.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Transmission v1.5 anterior a v1.53 y v1.6 anterior a v1.61, permite a los atacantes remotos secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transmissionbt:transmission:1.50:*:*:*:*:*:*:*","matchCriteriaId":"C570DD0B-CB0D-4451-AC24-47853DCE4E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:transmissionbt:transmission:1.51:*:*:*:*:*:*:*","matchCriteriaId":"8976E88E-6F6C-4E77-87A4-8F1AAA854C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:transmissionbt:transmission:1.52:*:*:*:*:*:*:*","matchCriteriaId":"C53FAA2E-0DA8-4E61-A27F-B3A163664848"},{"vulnerable":true,"criteria":"cpe:2.3:a:transmissionbt:transmission:1.60:*:*:*:*:*:*:*","matchCriteriaId":"91A94B6D-5A85-413D-AE62-BF3AA92DF907"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2009/05/21/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.transmissionbt.com/index.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/21/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.transmissionbt.com/index.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1758","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:40.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in \"certain address ranges.\""},{"lang":"es","value":"La función hypervisor_callback en Xen, posiblemente anteriores a v3.4.0, como la que se aplica al kernel de linux v2.6.30-rc4, 2.6.18 y posiblemente otroas versiones permiten a aplicaciones del usuario guess provocar una denegación de servicio (kernel opps) en el sistema invitado mediante cuando se provoca un fallo de segmentación en \"determinados rangos de direcciones\"."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, and Red Hat Enterprise MRG. It was addressed in Red Hat Enterprise Linux 4 and 5 via https://rhn.redhat.com/errata/RHSA-2009-1132.html and https://rhn.redhat.com/errata/RHSA-2009-1106.html .","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:x86_32:*:*:*:*:*","matchCriteriaId":"A2B1B229-B325-4D8C-B326-1FF6D85891F5"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.1","matchCriteriaId":"07CFE66F-0105-42D4-80D5-427977D8757A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A61248-160C-42F4-A803-20948FEA72CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FE0D9D45-1F2E-4236-858B-BBA54B17C8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2AFDE72E-1997-48BA-A065-E0DD4ABE6E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5E1D892-3A6C-4CC4-8237-231E593884EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3C0C052-D6BA-4BC8-A64B-1A90CA572186"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"54C61369-9EED-45CD-943C-DF26E818F09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D791DFF8-173B-49DB-AA8C-C1BBB8DB3611"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.2:*:*:*:*:*:*:*","matchCriteriaId":"26281E48-3854-4C4B-8F71-2C2ED207F19C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B242BA78-F752-414B-8DB9-D24E241EAE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"717A9642-5033-47B1-B795-5676E950286B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B0E18B3B-B562-49DF-AA75-13445B54CD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3A9504C4-8826-40D8-823C-8E42F2453B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"92646AED-BF1E-4471-96A0-1926932AF4C8"}]}]}],"references":[{"url":"http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35093","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35298","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1809","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/14/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34957","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313","source":"cve@mitre.org"},{"url":"http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1759","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T11:52:40.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función btFiles::BuildFromMI  (trunk/btfiles.cpp) en Enhanced CTorrent (tambien conocido como dTorrent) v3.3.2 y probablemente anteriores, y CTorrent v1.3.4 permite a atacantes remotos provocar una denegación de servicio (caida) y posiblemente ejecución de código de su elección a través del un fichero Torrent que contenga una path muy largo.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rahul:dtorrent:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"635B8CC2-3E3C-4CDB-A410-EC21DB1CB83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rahul:dtorrent:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F338CE81-62C9-4FF1-B592-2435EDFE1B49"},{"vulnerable":true,"criteria":"cpe:2.3:a:rahul:dtorrent:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C453F7B5-A499-464C-B2C7-51D5CF0FE754"},{"vulnerable":true,"criteria":"cpe:2.3:a:rahul:dtorrent:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30840374-880E-4B76-B7DA-6EF056F6CEA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rahul:ctorrent:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D3A3FDFB-0B63-4194-8A4C-D56666086D1A"}]}]}],"references":[{"url":"http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36471","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1817","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/20/3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34584","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1092","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49959","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8470","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html","source":"cve@mitre.org"},{"url":"http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1760","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en src/torrent_info.cpp en Rasterbar libtorrent anteriores a v0.14.4, utilizado en firetorrent, qBittorrent, deluge Torrent, y otras aplicaciones, permite a los atacantes remotos crear o sobrescribir archivos arbitrarios a través de .. (punto punto) y ruta relativa parciales en una elemento lista Modo archivo múltiple en un archivo . torrent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*","versionEndIncluding":"0.14.3","matchCriteriaId":"1FEBE674-6758-43FB-9C81-A4BC9A8FCE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rasterbar_software:libtorrent:0:*:*:*:*:*:*:*","matchCriteriaId":"B5FE670D-DFE0-4D28-9D21-4779470CF32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rasterbar_software:libtorrent:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B6D3E0B5-C5FB-4C41-B5B6-B6DAC7153180"},{"vulnerable":true,"criteria":"cpe:2.3:a:rasterbar_software:libtorrent:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"3AD6C4EA-941D-4E69-8D3E-D44274524617"}]}]}],"references":[{"url":"http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35848","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-14.xml","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1815","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:139","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504151/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35262","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1534","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51008","source":"cve@mitre.org"},{"url":"http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504151/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1761","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error."},{"lang":"es","value":"El motor de mensajes en CA ARCserve Backup r12.0 y r12.0 SP1 para Windows permite a atacantes remotos producir una denegación de servicio (caída) a través de (1) un mensaje 0x13 invalido, el cual no es adecuadamente gestionado por el modulo ASCORE, o (2) un mensaje 0x3B con unos datos incompletos que inician un error RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r12.0:*:windows:*:*:*:*:*","matchCriteriaId":"B250F711-FE9E-4DC8-876B-5632976F1189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r12.0:sp1:windows:*:*:*:*:*","matchCriteriaId":"C3A626B1-BA2E-4942-BAE4-574F830B2321"}]}]}],"references":[{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504348/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504349/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35396","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022405","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1608","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51169","source":"cve@mitre.org"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504348/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504349/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1762","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T16:48:42.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página de acceso WebAccess  (también conocido como gw/webacc) en Novell GroupWise v7.x anteriores a v7.03 HP2 , permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de (1) GWAP.version o (2) parámetro User.Theme (también conocido como User.Theme.index)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FE640E9A-762B-4AF4-8677-818CBF16EA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A9FBB457-FDC0-485F-951A-C0A7661A92B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"8661AFFB-5CAF-4D44-A617-E0330C764BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"CF66EFEE-DAB2-4455-96F2-50D3E9456485"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*","matchCriteriaId":"422F4B8A-8133-4DE2-9749-41E3DE0031DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DD25DC76-F3BE-4A0E-86DC-D27F4948446E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DD0AA3F3-6BE4-4CCC-838F-E8BD1F06590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D3BCF9F-9CDA-4DFD-AC39-2624BCFAAD96"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*","matchCriteriaId":"86DB474F-D101-4210-9DC1-7230E9CAE80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*","matchCriteriaId":"D861C5BE-825C-4EED-994A-9DE38AB6EA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*","matchCriteriaId":"1D75C8A8-8162-4160-9295-2DA4D710AD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*","matchCriteriaId":"84293DF8-D11D-4CB4-99EC-EB60AF027B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*","matchCriteriaId":"C4D63B03-C0A1-4366-B853-0D36CA0E6912"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35177","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022267","source":"cve@mitre.org"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503700/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35061","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=484942","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503700/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=484942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1763","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T16:48:42.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv_108 on the x86 platform allows local users to gain privileges or cause a denial of service (filesystem or memory corruption) via unknown vectors."},{"lang":"es","value":"Vulerabilidad no específica en el slot driver de Solaris Secure Digital (también conocido como sdhost) en Sun OpenSolaris snv_105 hasta  snv_108 en la plataforma x86, permite a los usuarios locales obtener provilegios o provocar una denegación de servicio (corrupción del sistema de ficheros o memoria) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259408-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35069","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022271","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1410","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50687","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1764","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/ajax.asp in MaxCMS v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro id en una acción digg.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bokecc:maxcms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F156BFE9-5F2C-47CC-8298-066412BC10F2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34981","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50553","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8726","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1765","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langpref parameter to (1) data/modules/contactform/module_info.php, (2) data/modules/blog/module_info.php, and (3) data/modules/albums/module_info.php, different vectors than CVE-2008-3194."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en pluck v4.6.2, permite a atacantes remotos crear y ejecutar archivos de su elección a través de un .. (punto punto) en el parámtro langpref sobre (1) data/modules/contactform/module_info.php, (2) data/modules/blog/module_info.php, y (3) data/modules/albums/module_info.php, es un vector distinto a CVE-2008-3194."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pluck-cms:pluck:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3E7597-2215-4213-B377-92295EC50A4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35007","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8715","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1766","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en LightOpenCMS v0.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teozkr:lightopencms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"695282F0-6020-422F-91A0-5CBF944E56BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504101/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504101/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1767","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter."},{"lang":"es","value":"admin/edituser.php en 2daybiz Template Monster Clone no requiere autenticación administrativa, lo que permite a atacantes remotos modificar cuentas de su elección a través de los parámetros: (1) loginname, (2) password, (3) email, (4) firstname, o (5) lastname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2daybiz:template_monster_clone:-:*:*:*:*:*:*:*","matchCriteriaId":"E22BADE3-F86E-492F-9E7B-0F92B6D8C2BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/35090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34977","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50561","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8691","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1768","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en Rama Zaiten CMS v0.9.8 y anteriores, permite a atacantes remotos leer archivos de su elección a través de un .. (punto punto) en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ramazeiten:ramazaitencms0.9.7.5:*:*:*:*:*:*:*:*","matchCriteriaId":"1E144B4A-4789-438E-B374-06E999373979"},{"vulnerable":true,"criteria":"cpe:2.3:a:ramazeiten:ramazaitencms0.9.7.6:*:*:*:*:*:*:*:*","matchCriteriaId":"FBB60CF4-ED5F-400B-9C59-F5B07AE0E3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ramazeiten:ramazaitencms0.9.7.8:*:*:*:*:*:*:*:*","matchCriteriaId":"2858845F-9CBF-46C6-962C-9C288DD45596"},{"vulnerable":true,"criteria":"cpe:2.3:a:ramazeiten:ramazaitencms0.9.8:*:*:*:*:*:*:*:*","matchCriteriaId":"3AD3B11B-E3DF-4DE1-9113-4F7D18D708AC"}]}]}],"references":[{"url":"http://osvdb.org/54546","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35116","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34995","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50572","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8700","source":"cve@mitre.org"},{"url":"http://osvdb.org/54546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1769","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"La interfaz web en Open Computer and Software Inventory Next Generation (OCS Inventory NG) versión 1.01 genera diferentes mensajes de error dependiendo de si un nombre de usuario es válido, lo que permite a los atacantes remotos enumerar nombres de usuarios válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.01:*:*:*:*:*:*:*","matchCriteriaId":"1D9ACDD1-0586-47F1-9421-F4D176BF438E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529344","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35157","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=69","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35023","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00050.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00057.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00063.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=69","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00063.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1770","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/database/examples/addressbook.php in Flyspeck CMS v6.8, permite a atacantes remotos crear y ejecutar archivos locales de su elección a través de un .. (punto punto) en el parámetro lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flyspeck:flyspeck_cms:6.8:*:*:*:*:*:*:*","matchCriteriaId":"219D979F-2296-4C25-8514-F2E4EED0CFAD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35011","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1367","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1771","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the (1) users[fullname], (2) users[email], (3) users[role_id], (4) users[username], and (5) users[password] parameters."},{"lang":"es","value":"index.php en Flyspeck CMS v 6.8 no requiere autenticación administrativa para la acción updateExistingContent, lo que permite a atacantes remotos crear o modificar cuentas a través de los parámetros: (1) users[fullname], (2) users[email], (3) users[role_id], (4) users[username], y (5) users[password]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flyspeck:flyspeck_cms:6.8:*:*:*:*:*:*:*","matchCriteriaId":"219D979F-2296-4C25-8514-F2E4EED0CFAD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35011","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1367","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1772","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the re_route parameter to the login script."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en activeCollab v2.1 Corporate, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de del parámetro re_route sobre el script de autenticación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activecollab:activecollab:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A256ABB-5B9E-4E19-95C1-969560113A9C"}]}]}],"references":[{"url":"http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35079","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35022","source":"cve@mitre.org"},{"url":"http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1773","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message."},{"lang":"es","value":"activeCollab v2.1 Corporate permite a atacantes remotos conseguir información sensible a través de un valor erróneo en el parámetro re_route, sobre el script de autenticación, lo que revela el path de la instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activecollab:activecollab:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A256ABB-5B9E-4E19-95C1-969560113A9C"}]}]}],"references":[{"url":"http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35079","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35022","source":"cve@mitre.org"},{"url":"http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1774","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to example/index.php.  NOTE: this was originally reported as an issue affecting the do parameter, but traversal with that parameter might depend on a modified example/index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en plugins/ddb/foot.php en Strawberry v1.1.1, permite a atacantes remotos incluir y ejecutar archivos de su elección a través de un .. (punto punto) en el parámetro file sobre example/index.php. NOTA: esto fué originalmente reportado como una característica que afecta al parámetro do, pero transversalmente con este parámetro podría depender de una modificación de example/index.php. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strawberry:strawberry:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"91A62191-E066-49E4-B608-BF529E37E334"}]}]}],"references":[{"url":"http://secunia.com/advisories/28330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50562","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8681","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1775","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/applications.php, (2) admin/appsgroup.php, (3) admin/users.php, (4) admin/usersgroup.php, and (5) admin/tasks.php; (6) show parameter to admin/logs.php; and (7) mode parameter to admin/configuration-partial.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Ulteo Open Virtual Desktop v1.0 , permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro id sobre (1) admin/applications.php, (2) admin/appsgroup.php, (3) admin/users.php, (4) admin/usersgroup.php, y (5) admin/tasks.php; (6) parámetro show sobre admin/logs.php; y (7) parámetro mode sobre admin/configuration-partial.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ulteo:open_virtual_desktop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC4E3088-DD8C-4AF4-AC92-93B428C5D461"}]}]}],"references":[{"url":"http://secunia.com/advisories/34923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Ulteo-Open-Virtual-Desktop-v1-0-multiple-XSS","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/34927","source":"cve@mitre.org"},{"url":"http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=Ulteo-Open-Virtual-Desktop-v1-0-multiple-XSS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/34927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1776","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en FormMail.pl in Matt Wright FormMail v1.92 y posiblemente anteriores, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de direcciones URIs en los parámetros (1) request y (2) return_link_url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.92","matchCriteriaId":"4DE05358-2AA2-484F-A16A-AEFC8924F83A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35068","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503446/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34929","source":"cve@mitre.org"},{"url":"http://www.ush.it/team/ush/hack-formmail_192/adv.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503446/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ush.it/team/ush/hack-formmail_192/adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1777","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en FormMail.pl en Matt Wright FormMail v1.92 y posiblemente anteriores, permite a atacantes remotos inyectar cabeceras HTTP de su elección y llevar a cabo ataques de separación de respuesta HTTP a través del parámetro redirect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.92:*:*:*:*:*:*:*","matchCriteriaId":"45929A3B-C4BF-4E62-8F04-BA3A42960EE4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35068","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503446/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34929","source":"cve@mitre.org"},{"url":"http://www.ush.it/team/ush/hack-formmail_192/adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503446/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ush.it/team/ush/hack-formmail_192/adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1778","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la nueva característica de registro de nuevo usuario en BigACE CMS v2.5, cuando magic_quotes_gpc está desactivada, permite a atacantes remotos ejecutar comandos SQL de su elección a través de del parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigace:bigace_cms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"7150445D-BC67-4292-836E-552D91442671"}]}]}],"references":[{"url":"http://secunia.com/advisories/35063","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bigace.de/BIGACE-2.6.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bigace.de/Security-Fix-for-2.5.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503448/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bigace.de/BIGACE-2.6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bigace.de/Security-Fix-for-2.5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503448/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1779","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the form_include_template parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de fichero PHP remoto en admin.php en Frax.dk Php Recommend v1.3 y anteriores permite a atacantes ejecutar código PHP de su elección mediante una URL en el parámetro form_include_template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"A51944E8-682D-413D-8F47-FC322760FA0E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34909","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1287","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/8658","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/8658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1780","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters."},{"lang":"es","value":"admin.php en Frax.dk Php Recommend v1.3 y anteriores no requieren autenticación cuando se cambia la contraseña de los usuarios, lo que permite a atacantes remotos obtener privilegios administrativos mediante la modificación de los parámetros form_admin_user y form_admin_pass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"A51944E8-682D-413D-8F47-FC322760FA0E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34909","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1287","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/8658","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/8658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1781","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_config.php via the form_aula parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin.php en Frax.dk Php Recomended v1.3 y anteriores permite a atacantes remotos inyectar código PHP de su elección en phpre_config.php mediante el parámetro form_aula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"A51944E8-682D-413D-8F47-FC322760FA0E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34909","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1287","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/8658","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://www.exploit-db.com/exploits/8658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1782","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive."},{"lang":"es","value":"Múltiples productos antivirus F-Secure, incluidos: Anti-Virus for Microsoft Exchange v7.10 y anteriores; Internet Gatekeeper for Windows v6.61 y anteriores, Windows v6.61 y anteriores, y Linux v2.16 y anteriores; Internet Security 2009 y anteriores, Anti-Virus 2009 y anteriores, Client Security v8.0 y anteriores y otros; permiten a atacantes remotos saltar la detección de software malicioso mediante archivos (1) .ZIP y (2) .RAR manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:linux_servers:*:*:*:*:*","versionEndIncluding":"4.65","matchCriteriaId":"5AE96CC9-08DC-49F0-94C4-89810D8BFE01"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:inux_client_security:*:*:*:*:*","versionEndIncluding":"5.54","matchCriteriaId":"8651DBB2-EC4B-474E-8431-CD7252AC4862"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:linux_server_security:*:*:*:*:*","versionEndIncluding":"5.54","matchCriteriaId":"BD9FDABD-6F42-47E3-8424-559D5DD46EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:mime_sweeper:*:*:*:*:*","versionEndIncluding":"5.61","matchCriteriaId":"2012AC4D-0F75-4389-9165-28930368AE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:microsoft_exchange:*:*:*:*:*","versionEndIncluding":"6.62","matchCriteriaId":"AB4ED58A-B715-467B-A463-FB0BA3653FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:citrix_servers:*:*:*:*:*","versionEndIncluding":"7.00","matchCriteriaId":"863CFFAF-FD5B-4150-A063-CB2851D689BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:microsoft_exchange:*:*:*:*:*","versionEndIncluding":"7.0","matchCriteriaId":"29A9B0A7-FFB2-460B-8BCB-1C7D9DD55A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:microsoft_exchange:*:*:*:*:*","versionEndIncluding":"7.10","matchCriteriaId":"EC9E56D7-C642-46FB-8425-A3A7F22B62D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:windows_server:*:*:*:*:*","versionEndIncluding":"8.00","matchCriteriaId":"E829D765-4473-4D6E-AA51-7EC44CB09A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:-:workstations:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"ECE7F2A4-E673-4B59-BAC2-B3D01AD0E1A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:anti-virus:*:*:*:*:*:*:*:*","versionEndIncluding":"2009","matchCriteriaId":"732265B4-ED48-4C91-8C96-4E2A8D0DB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:client_security:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"0B1D2491-0097-40BA-9B35-AA0708A822BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:home_server_security:*:*:*:*:*:*:*:*","versionEndIncluding":"2009","matchCriteriaId":"90F7894C-9891-4E09-BE4B-DCA045361D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:*:-:linux:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"A0941F91-C6FF-492B-908C-51C46D373BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:*:-:linux_japanese:*:*:*:*:*","versionEndIncluding":"3.01","matchCriteriaId":"C8E837C1-A444-4573-8F8E-4488D2917BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:*:-:windows:*:*:*:*:*","versionEndIncluding":"6.61","matchCriteriaId":"06B35ABF-C401-4DF4-9935-55E797E60220"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_security:*:*:*:*:*:*:*:*","versionEndIncluding":"2009","matchCriteriaId":"2ECC7480-20F5-453B-A417-BB2B7BD198E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:*:*","versionEndIncluding":"7.01","matchCriteriaId":"FD234E72-8306-4262-A12A-1B5E18B34E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:*:*","versionEndIncluding":"7.02","matchCriteriaId":"162C76E3-5AB6-4C72-A47A-F2820ED8BF46"}]}]}],"references":[{"url":"http://secunia.com/advisories/35008","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34849","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022170","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022171","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022172","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50346","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1783","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive."},{"lang":"es","value":"Múltiples productos antivirus FRISK Software F-Prot, incluidos: Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows y otros, permiten a atacantes remotos saltar la detección de software malicioso mediante un fichero .CAB manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:exchange:*:*:*:*:*:*","matchCriteriaId":"E235C40F-068D-4529-910B-DFFC78D3E8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_on_ibm_zseries:*:*:*:*:*:*","matchCriteriaId":"EEF8C31A-2B41-41F2-91A3-2F16DE5B4119"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_file_servers:*:*:*:*:*:*","matchCriteriaId":"44F21EE4-5335-41D0-AB4B-CA36137772F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_mail_servers:*:*:*:*:*:*","matchCriteriaId":"EC65F491-E7B3-405F-B734-6AB4DA175735"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:linux_x86_workstations:*:*:*:*:*:*","matchCriteriaId":"5B4C47DB-7B40-4322-B41C-16F7FFC888BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:solaris_mail_servers:*:*:*:*:*:*","matchCriteriaId":"866B0D8C-6F5E-48A0-B891-C41B2A33DD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:windows:*:*:*:*:*:*","matchCriteriaId":"BCAF39F4-835D-4BAF-ACE3-3C39625EBBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_antivirus:*:windows_mail_servers:*:*:*:*:*:*","matchCriteriaId":"8AE486C5-CCE9-49EF-B8A3-FEF0BB0137AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_aves:*:*:*:*:*:*:*:*","matchCriteriaId":"C33C37C9-BC92-4BB4-AF0C-264384A63190"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-prot:f-prot_milter:*:*:*:*:*:*:*:*","matchCriteriaId":"E6D5B56C-C89D-42B4-BEB9-297C1DC0497B"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503393/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34896","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50427","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503393/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1784","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive."},{"lang":"es","value":"El motor de análisis AVG 8.5 323, como se usa en varios productos antivirus AVG, incluida la Edición de red antivirus, la Edición de Internet Security Netzwerk, la Edición de servidor para Linux / FreeBSD, la Edición antivirus SBS y otros permite a los atacantes remotos evitar la detección de malware a través de un (1) archivo RAR y (2) ZIP especialmente diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.156","matchCriteriaId":"5BA92C19-E04F-45FF-A0D1-50D639C6EBF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:6.0.710:*:*:*:*:*:*:*","matchCriteriaId":"ACBDC1AD-F439-49E0-8068-7BE3C4F44239"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.0:*:*:*:*:*:*:*","matchCriteriaId":"279AB9A2-1660-49C9-8AE8-26F7B0B6C51A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.0.251:*:*:*:*:*:*:*","matchCriteriaId":"FF6D8EA9-E270-4331-995C-D4D378988031"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.0.323:*:*:*:*:*:*:*","matchCriteriaId":"B0C61BD5-365F-4BC6-82E3-68B57B01B8D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.1.308:*:*:*:*:*:*:*","matchCriteriaId":"2862A586-9B51-4F73-A395-79B9B526E2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.1.407:*:*:*:*:*:*:*","matchCriteriaId":"D90909A9-4032-4604-8FE6-16374BA21BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.5.51:*:*:*:*:*:*:*","matchCriteriaId":"FA3D2B2C-1325-4712-97D3-AC3779B82210"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.5.448:*:*:*:*:*:*:*","matchCriteriaId":"D8722A8E-1848-44E6-BFC3-C16072976F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:7.5.476:*:*:*:*:*:*:*","matchCriteriaId":"0EDAD78A-7497-4EF3-8EE5-1C256BE931A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avg:avg_anti-virus:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4B85F998-DACB-46BC-9181-DF8D768D0C62"}]}]}],"references":[{"url":"http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503392/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34895","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50426","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503392/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1785","sourceIdentifier":"cve@mitre.org","published":"2009-05-22T20:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter to header.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Ulteo Open Virtual Desktop v1.0, permite a los atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro de error en header.php. NOTA: La procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ulteo:open_virtual_desktop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC4E3088-DD8C-4AF4-AC92-93B428C5D461"}]}]}],"references":[{"url":"http://secunia.com/advisories/34923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1786","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T15:30:05.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable."},{"lang":"es","value":"El subsistema malloc en libc en IBM AIX v5.3 y v6.1 permite a usuarios locales crear o sobrescribir ficheros de forma arbitraria a través de un ataque de enlace simbólico en el fichero log asociado con la variable de entorno MALLOCDEBUG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022261","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50121","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50129","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50139","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50445","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50447","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50500","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50517","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/54617","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35034","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1380","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50636","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9306","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1787","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T16:30:02.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHP Dir Submit (también conocido como WebsiteSubmitter y Submitter Script), permite a atacantes remotos evitar la autenticación y obtener privilegios de acceso como administrador a través de los parámetros (1) \"username\" y (2) \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpdirsubmit:php_dir_submit:*:*:*:*:*:*:*:*","matchCriteriaId":"F4D4E8BA-785F-4B02-AA66-8010C002EFC1"}]}]}],"references":[{"url":"http://secunia.com/advisories/35125","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35003","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1365","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8710","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1788","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T16:30:02.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en voc_read_header en libsndfile desde v1.0.15 hasta v1.0.19, cuando se utiliza en Winamp v5.552 y posiblemente otros programas multimedia, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente la ejecución arbitraria de código a través de un fichero VOC con una valor de cabecera no valido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"570D85F0-F757-488A-A059-54BF0810F1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"E28BC682-E6B1-4A63-9734-FDB6019B9AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"8823A84B-4694-4838-A877-AE66400B26BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4C2B0D1-AE8A-4978-85B0-C5E0ABE89E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"759BBF60-8964-4590-A5EB-F21EB4049E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*","matchCriteriaId":"5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"}]}]}],"references":[{"url":"http://secunia.com/advisories/35076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35443","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-09.xml","source":"cve@mitre.org"},{"url":"http://trapkit.de/advisories/TKADV2009-006.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1814","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:132","source":"cve@mitre.org"},{"url":"http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mega-nerd.com/libsndfile/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34978","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1324","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1348","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50541","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trapkit.de/advisories/TKADV2009-006.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mega-nerd.com/libsndfile/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1789","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T16:30:02.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807."},{"lang":"es","value":"mod/server.mod/servmsg.c en Eggheads Eggdrop y Windrop v1.6.19 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de un PRIVMSG manipulado que crea una cadena vacía que provoca una copia de longitud de cadena negativa. NOTA: esta vulnerabilidad existe por una incorrecta corrección del CVE-2007-2807."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B949FDB5-004E-4D1A-B231-B12B0530D8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"122A9276-FBAE-4ACB-8B57-1F11316AE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"38C0C2B5-D834-481B-B0F4-52815D5F05D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0DA76910-DA6A-431E-A4D3-65F67B06DE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"ADC43937-427B-440C-9057-81B030F703CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"0B9BC3A5-F83F-4A54-8F1D-01A26F4CE7FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"85C89850-5063-4A3F-AD36-A7BB9C277196"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B027835C-D277-404A-8663-B11DAD15200A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"2468A8A0-0916-40AF-B666-37F4E09D2F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"A2FAD548-8685-4C1B-85EB-EDA5A3490A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"591CEC1D-0E78-4F06-897E-5EFC6C3EB22D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"8AFEFA8F-E0BD-4B16-91F0-0D0CCAFD9A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"846E8578-2E43-40FB-AFBE-8002B3C6360F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"A966576E-C1E1-413B-9BC7-13A581F8C278"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.14:*:*:*:*:*:*:*","matchCriteriaId":"EC103352-44FE-4629-9E78-4398B8E621C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"392B2FDA-0BB1-4525-B892-96074BCD68D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.16:*:*:*:*:*:*:*","matchCriteriaId":"2A36497B-FC48-458D-9637-E5FD49DAD515"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.17:*:*:*:*:*:*:*","matchCriteriaId":"19B44064-F334-42C0-AC66-B82DC2227857"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.18:*:*:*:*:*:*:*","matchCriteriaId":"344C8A04-1E35-4F1D-8283-3E520867489C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"641DAB73-091A-45E2-850D-EB3E852645FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.19","matchCriteriaId":"3ACCBBE9-03EC-496E-8163-1BEC53651211"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.19","matchCriteriaId":"2F67FC40-34BD-4266-85F8-10CEEE66C377"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.4.4:*:final:*:*:*:*:*","matchCriteriaId":"8D6C2110-D8D8-4864-A556-E907B98E185F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F3D82640-7F8A-45F8-9B41-A09BB37B62A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4:*:final:*:*:*:*:*","matchCriteriaId":"58730915-EE80-4CDF-9196-CC96B7835C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4:rc1:*:*:*:*:*:*","matchCriteriaId":"BD84BF3B-F6D9-41CA-9A2C-F09F6F00B39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"D83AD2BC-CD73-4A85-8E12-E15EEE74D85F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4a:*:*:*:*:*:*:*","matchCriteriaId":"3774084D-7BB9-4F70-BDB3-FE7796EE513B"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.0:*:final:*:*:*:*:*","matchCriteriaId":"0C86A3CE-5522-4924-B2B9-2C81710BEF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"537EA552-06C8-4AFE-960D-468A70157318"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.0:rc1-rel2:*:*:*:*:*:*","matchCriteriaId":"4112B1DF-6883-45B4-823A-145275FE672A"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"98797B0A-5979-493D-968F-ED20F26F9EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.2\\+bindsfix:*:*:*:*:*:*:*","matchCriteriaId":"5239C772-554E-4E90-904C-499D419E87FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D43A10B-66AE-429B-B939-E3862D4F1EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.4:sr1:*:*:*:*:*:*","matchCriteriaId":"75918B14-B217-47D1-988C-B47CFA6D142F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"3115178C-6CF4-45B5-A84F-2D770DAFC600"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"57740B2C-08DA-41E2-9F1B-69789A32DC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"8D02A42B-C8A5-46D4-9E59-F06D3490DCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"02DFF7AE-89EF-4E1B-8EF6-D6505EC5CDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"D566B296-E828-4FF5-A6CC-3A4216EF4200"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"7380F17C-1AA5-4A02-A9FD-B7A45EE612CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"CB09FFB8-9A04-4874-823D-5140D2F0AC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"4D8D2814-F718-4EDE-B56F-D392FB7B534F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.16:*:*:*:*:*:*:*","matchCriteriaId":"CFCAF4B0-4C86-4C47-9C31-CFBAFFB8B739"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.17:*:*:*:*:*:*:*","matchCriteriaId":"8DBC15B0-5E0A-4B6D-AAE9-C25E59450BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.18:*:*:*:*:*:*:*","matchCriteriaId":"AC921FD5-53F7-4430-8EFA-E7363597099A"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.19\\+ctcpfix:*:*:*:*:*:*:*","matchCriteriaId":"E1724543-C2ED-48F3-8DEC-61CA586CB505"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778","source":"cve@mitre.org"},{"url":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54460","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35104","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35690","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1826","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34985","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8695","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1790","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T16:30:02.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CGI RESCUE Trees anterior a v2.11 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de parámetros inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_rescue:rescue:*:2.10:*:*:*:*:*:*","versionEndIncluding":"cgi_rescue_trees","matchCriteriaId":"1AF8749D-1396-48F6-BB81-C54D8CBD5C33"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN28521500/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54545","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35123","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34999","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50579","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN28521500/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1791","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T17:30:02.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en aiff_read_header en libsndfile desde v1.0.15 hasta v1.0.19, como se utiliza en Winamp v5.552 y posiblemente otros programas multimedia, permite a atacantes remotos producir una denegación (caída de aplicación) y posiblemente la ejecución de código de modo arbitrario a través de un fichero AIFF con un valor de cabecera no valido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"570D85F0-F757-488A-A059-54BF0810F1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"E28BC682-E6B1-4A63-9734-FDB6019B9AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"8823A84B-4694-4838-A877-AE66400B26BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4C2B0D1-AE8A-4978-85B0-C5E0ABE89E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"759BBF60-8964-4590-A5EB-F21EB4049E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*","matchCriteriaId":"5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"}]}]}],"references":[{"url":"http://secunia.com/advisories/35076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35443","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200905-09.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1814","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:132","source":"cve@mitre.org"},{"url":"http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mega-nerd.com/libsndfile/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34978","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1324","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50541","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200905-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mega-nerd.com/libsndfile/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1792","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."},{"lang":"es","value":"La función system.openURL en StoneTrip Ston3D StandalonePlayer (tambien conocido como S3DPlayer StandAlone) v1.6.2.4 y v1.7.0.1 y WebPlayer (también conocido como S3DPlayer Web) v1.6.0.0 permite a atacantes remotos ejecutar comandos de su elección a através de de metacaracteres del intérprete de comandos en el primer argumento (el argumento sURL.)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"52C5D62C-CCD9-44A1-B120-15B462A14802"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonetrip:s3dplayer_standalone:1.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8FBC588-1328-47C7-8F41-33C969FF6373"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B41CBD9C-064D-41C0-9FDE-E1A6C4278A06"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"52C5D62C-CCD9-44A1-B120-15B462A14802"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B41CBD9C-064D-41C0-9FDE-E1A6C4278A06"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4C56F007-5F8E-4BDD-A803-C907BCC0AF55"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"52C5D62C-CCD9-44A1-B120-15B462A14802"}]}]}],"references":[{"url":"http://secunia.com/advisories/35256","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/StoneTrip-S3DPlayers","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503887/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/StoneTrip-S3DPlayers","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503887/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1796","sourceIdentifier":"cve@mitre.org","published":"2009-05-26T22:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Portal Server v6.3.1, v7.1, y v7.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores relacionados con una pagina de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5079DD4A-F14E-4ABD-B5DA-4DC75135EF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:linux:*:*:*:*:*","matchCriteriaId":"9701D793-7080-4272-B657-C17B5CEBE20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:sparc:*:*:*:*:*","matchCriteriaId":"E5AFFD01-488F-43DE-BAAD-8D77AB2AEE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:x86:*:*:*:*:*","matchCriteriaId":"4BA6693B-153C-4A7B-BE2C-3897F9B74346"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A29331A7-9D72-489D-A8DF-5B4C18A19692"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"A67F6B05-8B6D-4C48-8094-01600589863E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:sparc:*:*:*:*:*","matchCriteriaId":"79E7CFAA-1CBF-4671-8602-E1160F25504C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:x86:*:*:*:*:*","matchCriteriaId":"0E4E8DC1-130F-40EB-9C7F-E951C457406D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:*:*:*:*:*:*","matchCriteriaId":"83D63923-869B-4156-BBED-DFB417B19420"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:linux:*:*:*:*:*","matchCriteriaId":"3BDF3AEA-DD1C-4BE1-A8B1-CEA5A5F6DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:sparc:*:*:*:*:*","matchCriteriaId":"FAA736B8-818E-4F17-BE10-BA8BDD08A41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:x86:*:*:*:*:*","matchCriteriaId":"CCF640FC-9D89-4B02-B6FA-C789FDFD37C4"}]}]}],"references":[{"url":"http://osvdb.org/54705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35221","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35082","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022273","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1411","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50704","source":"cve@mitre.org"},{"url":"http://osvdb.org/54705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1797","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to hijack the authentication of (1) administrator or (2) device users for requests that create new administrative users or have unspecified other impact."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Network Management Card (NMC) para dispositivos American Power Conversion (APC) Switched Rack PDU (también conocido como Rack Mount Power Distribution) y otros dispositivos permite a atacantes remotos secuestrar la autenticación de (1) administradores o (2) usuarios del dispositivo para hacer peticiones que crean nuevos usuarios administradores o tienen otros impactos no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:network_management_card:*:*:*:*:*:*:*:*","matchCriteriaId":"B549D2FA-E74F-4674-8D2E-B8C605EE0FD2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:switched_rack_pdu:*:*:*:*:*:*:*:*","matchCriteriaId":"6CCDBFB0-6726-4988-A59E-234C88EB04D0"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/111/45/","source":"cve@mitre.org"},{"url":"http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/166739","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://holisticinfosec.org/content/view/111/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/166739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1798","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Network Management Card (NMC) para dispositivos American Power Conversion (APC) Switched Rack PDU (también conocido como Rack Mount Power Distribution) y otros dispositivos permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección medisnte vectores no especificados. NOTA: el vector login_username para Forms/login1 está ya cubierto por CVE-2009-4406."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:network_management_card:*:*:*:*:*:*:*:*","matchCriteriaId":"B549D2FA-E74F-4674-8D2E-B8C605EE0FD2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:switched_rack_pdu:*:*:*:*:*:*:*:*","matchCriteriaId":"6CCDBFB0-6726-4988-A59E-234C88EB04D0"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/111/45/","source":"cve@mitre.org"},{"url":"http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/166739","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://holisticinfosec.org/content/view/111/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/166739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1799","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1 alpha, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) gallery_category or (2) gallery_show parameter to example.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la función getGalleryImage en st_admin/gallery_output.php en ST-Gallery 0.1 alpha, cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) gallery_category o (2) gallery_show para example.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian-thiele:st-gallery:0.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"0D52278C-53A6-464D-85B4-771FCEC201FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124171333011782&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34875","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50378","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8636","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124171333011782&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1800","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote attackers to execute arbitrary code via a long argument to the CreateChinagames method, as exploited in the wild in April and May 2009.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control 1.x ActiveX Chinagames CGAgent en CGAgent.dll, tal como se distribuye en Chinagames iGame 2009, permite a atacantes remotos ejecutar código de su elección mediante un argumento largo a el método CreateChinagames, como se ha explotado libremente en Abril de 2009. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chinagames:igame:2009:*:*:*:*:*:*:*","matchCriteriaId":"607B31FB-237D-4057-8ABC-CB83DB3C3F43"}]}]}],"references":[{"url":"http://bbs.pediy.com/showthread.php?t=87615","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35005","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisrt.org/enblog/read.php?245","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34871","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bbs.pediy.com/showthread.php?t=87615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisrt.org/enblog/read.php?245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-1801","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the (1) display parameter to reports.php, the (2) order and (3) extdisplay parameters to config.php, and the (4) sort parameter to recordings/index.php. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en FreePBX v2.5.1, y otras v2.4.x, v2.5.x, y versiones pre-release v2.6.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1) del parámetro display a reports.php, (2) el order y (3) el parámetro extdisplay a config.php, y (4) el parámetro sort a recordings/index.php. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*","matchCriteriaId":"455E97D6-B069-49D6-B510-3D4112A9E1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"BF1E1278-3114-4BD1-B589-30B5313C9502"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"32D216B0-31D6-4288-8773-FB2438944492"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"11ACC1C9-A2C3-41CA-B608-C474B642A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"D8A021AB-A142-4DAD-9EB0-2352C625D8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"9C0B173F-2161-4E40-A712-90DA6B997820"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"613A39A4-976E-4535-9408-533F957F7F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B5B657C6-A2DF-432A-9F46-1157C630CB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9734B50E-BEA8-41DF-835F-7B15A9BB31E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E9645D4F-BB03-49AD-AE79-6FE990BF18FE"}]}]}],"references":[{"url":"http://freepbx.org/trac/ticket/3660","source":"cve@mitre.org"},{"url":"http://osvdb.org/54259","source":"cve@mitre.org"},{"url":"http://osvdb.org/54260","source":"cve@mitre.org"},{"url":"http://osvdb.org/54261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34772","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34857","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50361","source":"cve@mitre.org"},{"url":"http://freepbx.org/trac/ticket/3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1802","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en FreePBX 2.5.1, y otros 2.4.x, 2.5.x, y versiones pre-lanzamiento 2.6.x, permiten a atacantes remotos secuestrar la autenticación de administradores en peticiones que crean una nueva cuenta de administrador o tener otros impactos no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*","matchCriteriaId":"455E97D6-B069-49D6-B510-3D4112A9E1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"BF1E1278-3114-4BD1-B589-30B5313C9502"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"32D216B0-31D6-4288-8773-FB2438944492"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5:*:*:*:*:*:*:*","matchCriteriaId":"5B2C1156-93B6-4D71-8D9C-ED6FC6C0AE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"11ACC1C9-A2C3-41CA-B608-C474B642A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"D8A021AB-A142-4DAD-9EB0-2352C625D8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"9C0B173F-2161-4E40-A712-90DA6B997820"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"613A39A4-976E-4535-9408-533F957F7F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B5B657C6-A2DF-432A-9F46-1157C630CB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9734B50E-BEA8-41DF-835F-7B15A9BB31E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E9645D4F-BB03-49AD-AE79-6FE990BF18FE"}]}]}],"references":[{"url":"http://freepbx.org/trac/ticket/3660","source":"cve@mitre.org"},{"url":"http://osvdb.org/54262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34772","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34857","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://freepbx.org/trac/ticket/3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1803","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"FreePBX v2.5.1, v2.4.x, v2.5.x, y pre-release v2.6.x, genera distintos errores tras intentos de login fallidos dependiendo de si la cuenta de usuario existe o no, lo que permite a atacantes remotos listar nombres de usuarios váalidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*","matchCriteriaId":"455E97D6-B069-49D6-B510-3D4112A9E1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"BF1E1278-3114-4BD1-B589-30B5313C9502"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"32D216B0-31D6-4288-8773-FB2438944492"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5:*:*:*:*:*:*:*","matchCriteriaId":"5B2C1156-93B6-4D71-8D9C-ED6FC6C0AE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"11ACC1C9-A2C3-41CA-B608-C474B642A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"D8A021AB-A142-4DAD-9EB0-2352C625D8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"9C0B173F-2161-4E40-A712-90DA6B997820"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"613A39A4-976E-4535-9408-533F957F7F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B5B657C6-A2DF-432A-9F46-1157C630CB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9734B50E-BEA8-41DF-835F-7B15A9BB31E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E9645D4F-BB03-49AD-AE79-6FE990BF18FE"}]}]}],"references":[{"url":"http://freepbx.org/trac/ticket/3660","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34772","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34857","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://freepbx.org/trac/ticket/3660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1804","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/index.php en VideoScript.us YouTube Video Script permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) username and (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videoscript:youtube_video_script:-:*:*:*:*:*:*:*","matchCriteriaId":"C616E299-17C5-40EC-A587-A791BA127939"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34868","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50373","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1805","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build 147997, VMware ESXi 3.5, and VMware ESX 3.0.2, 3.0.3, and 3.5, when the Descheduled Time Accounting Service is not running, allows guest OS users on Windows to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el controlador VMware Descheduled Time Accounting en VMware Workstation v6.5.1 y anteriores, VMware Player v2.5.1 y anteriores, VMware ACE v2.5.1 y anteriores, VMware Server v1.x anteriores a v1.0.9 build 156507 y v2.x anteriores a v2.0.1 build 156745, VMware Fusion v2.x anteriores a v2.0.2 build 147997, VMware ESXi v3.5, y VMware ESX v3.0.2, v3.0.3, y v3.5, cuando el servicio Descheduled Time Accounting no se está ejecutando, permite a usuarios invitados del sistema operativo en Windows provocar una denegación de servicio mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"8D249F86-E463-4AB1-BEEE-0828D5A2D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F20A8E8-E07D-41B2-899F-2ABA9DD1C2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"700C0BB4-2272-4405-9D9A-A636E3D22461"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CFC82A8C-E561-4E35-A84D-66A4D6C90264"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D346E48-887C-4D02-BFD3-D323B7F3871C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D9C6150A-2DF3-4F7B-B024-0F3DBB686124"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.3_build_54075:*:*:*:*:*:*:*","matchCriteriaId":"E2B6602F-EF25-4E20-B4AA-955C026F7AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40192EE1-A300-42C3-BC98-286C9E5A281E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87291B27-442C-4CAB-94A1-67FC766486EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B04862-4377-422E-931A-B17FE1CA1884"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C35B6730-F05B-4B62-B4DE-07C61A4924F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8E1A5AA-BD9F-4263-B7C6-E744323C4D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9D22E40D-C362-49FD-924C-262A64555934"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.1_build_55017:*:*:*:*:*:*:*","matchCriteriaId":"9D438AB9-825C-4A9B-A3FF-55F2E5743B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A48CEB4-5864-4A0F-B14C-CFE4699C3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78957047-FB9F-4D1D-B3D9-91257A6B4D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A04DB52-C66C-4AA9-9D6F-9D2DC202C5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"280033C5-90EF-4825-A87D-B23650D8C71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"78322B97-DBE0-4C7E-9826-11727254500E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B6F7416-E694-4EC9-9FE5-0C24448ECB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"4004A38A-01A6-41BE-84EB-1D7C7FAD0214"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8E18541B-36B6-40A7-9749-FA47A10379C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"BC1C154A-3869-4189-A781-D3071D54143F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E76D03A3-DB55-48A2-B5A5-64002D28B95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1EAC68CA-DCA3-4399-807D-E7AC67C9C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"47B13A58-1876-4322-AC25-107D43BABD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D04A928-4421-4BEE-9500-7398E4DB929B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6F2F6AF4-5987-43BC-9183-5DF7D6DE1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"088450C4-9C6F-4651-8D59-C36F1B0601BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AA35C066-90A9-4DE2-A97A-38A6CFC59A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"462EEAD5-A78C-4381-847E-B6F1BE4CB379"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E666A5E4-4CDD-4915-B0F3-C63998D01846"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7AD12A-26C9-48AD-A32A-0F56545DF8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73C45BB0-C0DB-42B8-A238-B81D836CF91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"297226F7-05CB-4721-9D02-51FE2919D2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1D3F9D4D-2116-49A7-9292-AF6B4456E175"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AD2EAA90-B24A-45E7-B99F-DA3554A16F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"446F2959-C42B-403B-AE1C-BA7D305C60CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"B24C0071-58F9-4971-951B-7AA12294F7D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73EC33AB-E92A-4AA8-A523-C341133BB515"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53197903-0614-4460-8944-C1B5257D71A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*","matchCriteriaId":"EB051A5C-5F66-4732-949A-48B0FDE4AFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F037B05F-6F92-4BE1-B672-F677CBEFD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*","matchCriteriaId":"87489138-7756-453C-A149-F2C4F95EFF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42049891-38B7-4BB7-8DA5-A87169E2D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"07139DF7-C36B-4FED-8558-7FA49BE0BCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E0D7307-5946-45DC-88D3-6BC72EF50184"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1","matchCriteriaId":"E4D69FD9-F162-4623-A475-9FA7A3A6DF30"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBF029A-103D-4BB6-B037-25EC2224DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"35A717A5-60C2-4470-943E-CA53781D4B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0E8FBC02-7F2F-4AEF-A5A3-E283D192937C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*","matchCriteriaId":"29AA2B37-BF5F-4AC5-844D-34CF56EC621C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"07131E56-53EE-4CE1-A135-050792EA3C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"86334051-8763-4CD9-9480-CAEAE756DFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"66596F04-9C2E-4091-85A7-40239F3F920E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0E831531-60FE-4DFC-994E-7409E6C69D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.2.1:patch1:*:*:*:*:*:*","matchCriteriaId":"4C1A275E-2152-4A37-8CFE-34E8900E3426"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B7A688A2-3E9C-4AA3-832B-300A5A311C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"89098CFF-4696-4BD9-9BC9-D7C2D92FE729"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A30DFFE7-EB73-4A88-A23B-9B386C091314"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.1_build_5289:*:*:*:*:*:*:*","matchCriteriaId":"25F1481E-A07D-4913-BCF3-630561F0FBC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6C230D-7BAA-4A77-9E96-B1B994F4AAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AD0FE7C5-2C46-4B59-9242-A03B986C07DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2_build_8848:*:*:*:*:*:*:*","matchCriteriaId":"FC8F9694-8556-4990-A867-592D6A927498"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2_build_8848:r4:*:*:*:*:*:*","matchCriteriaId":"0C605123-69F9-44AC-A17E-3C728059E628"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5:*:*:*:*:*:*:*","matchCriteriaId":"37595A89-52C5-4699-A463-C9D91B91716B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53FBB074-4EAC-4CEC-AFC5-33C66B135F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*","matchCriteriaId":"41B54C61-FB19-4900-A635-2F6B63BEC88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CF9F67-DE1A-4CB0-B3AB-B28DC8C02C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"525D50A3-2943-4B96-B354-F81F814A7707"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.0_build_13124:*:*:*:*:*:*:*","matchCriteriaId":"B4BCB22F-7B9A-493B-AE19-18D0C15EA778"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"294B621F-6C1A-4571-AE13-49495680D255"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.1_build_19175:*:*:*:*:*:*:*","matchCriteriaId":"33D6D4DD-13D2-4EA0-A7D7-367C3809ABAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"FCF51A7F-59DA-4F64-A4F7-3A250C950D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7BA47458-E783-4A6A-ABF1-59E8D87E9B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3:42958:*:*:*:*:*:*","matchCriteriaId":"559D2177-ECB9-4AFF-A8B4-BCB47A1B4637"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:*","matchCriteriaId":"51C6D608-64DE-4CC4-9869-3342E8FD707F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.3_build_42958:*:*:*:*:*:*:*","matchCriteriaId":"DDEAB605-03F6-4968-8A48-126C7C711043"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"16A1141D-9718-4A22-8FF2-AEAD28E07291"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.4_build_44386:*:*:*:*:*:*:*","matchCriteriaId":"AE2ADE72-4F19-4E73-AC3E-7038FE0D38B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D75ED54E-8E55-48BF-A52E-19FCCE895C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.5_build_56455:*:*:*:*:*:*:*","matchCriteriaId":"B27D214D-2BEF-4445-802A-5E02E9E5E5CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B53297E3-0C74-421B-8058-DAF7357D421A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDEFCEF-F943-449B-91D8-A8CB290C7AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"97957D6F-0249-4814-8755-5C4537B58E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"89329F80-7134-4AB2-BDA3-E1B887F633B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4408849A-21F1-40F5-A528-0BD47E1BF823"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.1_build_55017:*:*:*:*:*:*:*","matchCriteriaId":"0692E537-A36E-470B-BECE-A17D531B925C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9938CB4F-96D1-4852-9694-28A93E13AA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCB61760-87FD-4E60-ADC6-407EFA13773C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FBDE6D5-7131-421A-BABE-32F281615597"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"89AA4FEF-FF8F-4706-89BC-8396F7614EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFC6B629-30B3-4C45-B5E9-1B4310F186FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/35269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503912/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35141","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022300","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0007.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1452","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6130","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503912/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1806","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS) partitions.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad sin especificar en IBM Hardware Management Console (HMC) 7 release v3.4.0 SP2, cuando la memoria activa compartida es utilizada, tiene un impacto y vectores de ataque desconocidos, relacionado con una partición de memoria compartida y una pila de memoria compartida con particiones de paginación virtual I/O de servidores (VIOS) \r\nredundantes. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hardware_management_console:7.3.4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"439903D2-9407-4358-BB27-E1250500EE0E"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011","source":"cve@mitre.org"},{"url":"http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35113","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4671","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50910","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1807","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009."},{"lang":"es","value":"Vulnerabilidad sin especificar en Config.dll en productos Baofeng  v3.09.04.17 y anteriores permite a atacantes remotos ejecutar código de su elección llamando al método SetAttributeValue, como se ha explotado libremente en Abril y Mayo de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:*:*:*:*:*:*:*:*","versionEndIncluding":"3.09.04.17","matchCriteriaId":"562E2843-2197-4945-8141-DC06F55D6F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.7.9_8:*:*:*:*:*:*:*","matchCriteriaId":"3F52CD8D-3166-4A06-BB43-B7DEE653FBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.7.9_10:*:*:*:*:*:*:*","matchCriteriaId":"BD543322-FB0F-45E0-9E93-347425B470BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.8:*:*:*:*:*:*:*","matchCriteriaId":"5BF09EE7-F241-4EDE-8266-FD2413C6E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:2.9:*:*:*:*:*:*:*","matchCriteriaId":"93399125-BFCD-4EEC-B187-3E89A8DB82D2"}]}]}],"references":[{"url":"http://www.cisrt.org/enblog/read.php?245","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1392","source":"cve@mitre.org"},{"url":"http://www.cisrt.org/enblog/read.php?245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1808","sourceIdentifier":"cve@mitre.org","published":"2009-05-28T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call."},{"lang":"es","value":"Microsoft Windows XP SP3 permite a usuarios locales provocar una denegación de servicio (caída de sistema) haciendo una llamada SystemParametersInfo SPI_SETDESKWALLPAPER con un argumento \"pvParam\" terminado incorrectamente, seguido por una llamada SystemParametersInfo SPI_GETDESKWALLPAPER"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:home:*:*:*:*:*","matchCriteriaId":"D586C749-9D00-4546-9941-CCFBD41BAABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:media_center:*:*:*:*:*","matchCriteriaId":"72AF15F9-4AE2-40FE-A598-1284BA3A06D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:professional:*:*:*:*:*","matchCriteriaId":"471B4ADA-8627-48BC-B13F-FF5F38F55C9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:tablet_pc:*:*:*:*:*","matchCriteriaId":"21BCA9B5-A8B0-4273-8C5E-665E118695DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:x64:*:*:*:*:*","matchCriteriaId":"1BBAA93E-FF26-4C28-9515-A444FCD4B853"}]}]}],"references":[{"url":"http://secunia.com/advisories/35323","source":"cve@mitre.org"},{"url":"http://www.ragestorm.net/blogs/?p=78","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35120","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022330","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50903","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ragestorm.net/blogs/?p=78","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1809","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php, (2) the Page parameter in a List action to modules/ereignis.php, (3) the Kontext parameter in a Search action to modules/kategorie.php, or (4) the image parameter to modules/image.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en myColex v1.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1)el parámetro year en modules/kalender.php, (2) el parámetro Page en una acción List en modules/ereignis.php, (3) el parámetro Kontext en una acción Search en modules/kategorie.php, o (4) el parámetro image en modules/image.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collector:mycolex:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"26F45192-F9E0-444F-AE18-29DDCFE38F01"}]}]}],"references":[{"url":"http://secunia.com/advisories/35112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34997","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1344","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1810","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) medium.php, (4) person.php, or (5) schlagwort.php in modules/, related to classes/class.perform.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en myColex v1.4.2 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro formUser(también conocido con el campo Name) en common/login.php, y permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro ID en una acción Detail en (2) kategorie.php, (3) medium.php, (4) person.php, o (5) schlagwort.php en modules/, relacionado con classes/class.perform.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collector:mycolex:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"26F45192-F9E0-444F-AE18-29DDCFE38F01"}]}]}],"references":[{"url":"http://secunia.com/advisories/35111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34997","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1344","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1811","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php, (2) the Kontext parameter in a Search action to modules/kategorie.php, (3) the image parameter to modules/image.php, or (4) the ID parameter in a Detail action to modules/sitzung.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en myGesuad v0.9.14 (también conocido como v0.9) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1) el parámetro Page en una acción List en modules/ereignis.php, (2) el parámetro Kontext en una acción Search en modules/kategorie.php, (3) el parámetro image en modules/image.php, o (4) el parámetro ID en una acción Detail en modules/sitzung.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collector:mygesuad:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"9F74413D-2C26-4E50-AFC2-8F52FEF61199"}]}]}],"references":[{"url":"http://secunia.com/advisories/35136","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34998","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1345","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8708","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1812","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) budget.php, (4) zahlung.php, or (5) adresse.php in modules/, related to classes/class.perform.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en myGesuad v0.9.14 (también conocido como v0.9)permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro formUser (también conocido como el campo de nombre) en common/login.php, y permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través del parámetro ID en una acción Detail en (2) kategorie.php, (3) budget.php, (4) zahlung.php, o (5) adresse.php en modules/, relacionado con classes/class.perform.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collector:mygesuad:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"9F74413D-2C26-4E50-AFC2-8F52FEF61199"}]}]}],"references":[{"url":"http://secunia.com/advisories/35110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34998","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1345","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8708","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1813","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field)."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/index.php en Submitter Script v2 permite a atacantes remotos ejecutar comandos SQL de su elección a través de (1) el parámetro uNev (también conocido como campo de nombre de usuario) o (2) el parámetro uJelszo (también conocido como el campo de contraseña)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:submitterscript:submitterscript:2:*:*:*:*:*:*:*","matchCriteriaId":"57D33C1F-B087-4F02-83DB-02A94099416C"}]}]}],"references":[{"url":"http://osvdb.org/54475","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34970","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50552","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8683","source":"cve@mitre.org"},{"url":"http://osvdb.org/54475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1814","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the profile.php vector is already covered by CVE-2006-0074."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mail.php en PHPenpals v1.1 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ID\". NOTA: el vector profile.php start_date/reserve.php ya ha sido tratado en CVE-2006-0074."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jevontech:phpenpals:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"20159690-6CFE-4577-B115-5A4D792E172B"}]}]}],"references":[{"url":"http://secunia.com/advisories/18269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8706","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1815","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Sonic Spot Audioactive Player 1.93b allows remote attackers to execute arbitrary code via a long string in a playlist file, as demonstrated by a long .mp3 URL in a .m3u file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Sonic Spot Audioactive Player v1.93b permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un fichero playlis, como se ha demostrado en ficheros largos .mp3 URL en un .m3u"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicspot:audioactive_player:1.93b:*:*:*:*:*:*:*","matchCriteriaId":"730D7D96-7DF2-429F-9718-35888C022742"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34987","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8698","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8701","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1816","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in My Game Script 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the username field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php in My Game Script v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user (también conocido como el campo de nombre de usuario). NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros.\r\n\r\n\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mygamescript:my_game_script:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB986441-6178-4368-8A05-A1A2AD01B445"}]}]}],"references":[{"url":"http://osvdb.org/54459","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34963","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50528","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8676","source":"cve@mitre.org"},{"url":"http://osvdb.org/54459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1817","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .m3u or (2) .m3l playlist file."},{"lang":"es","value":"Múltiple desbordamiento de búfer en DigiMode Maya v1.0.2 permite a atacantes remotos ejecutar código de su elección a través de una cádena larga en un fichero mal formado (1) .m3u o (2) .m3l playlist"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digimode10:maya:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"161B407E-600E-4053-BA8B-EC0FB3BD0410"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34960","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50533","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8677","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1818","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/admin_manager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an m_username cookie in an add action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/admin_manager.asp en MaxCMS v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través de una cookie m_username en una acción add."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxcms:maxcms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2A159CA-F32B-45BA-BDA6-F285C6535E90"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50513","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8672","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1819","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en product.php en 2daybiz Custom T-shirt Design Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2daybiz:custom_t-shirt_design_script:*:*:*:*:*:*:*:*","matchCriteriaId":"0A17E088-42D5-4DC2-8F4D-F419152DC566"}]}]}],"references":[{"url":"http://secunia.com/advisories/35114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1341","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8702","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1820","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en product.php en 2daybiz Custom T-shirt Design Script permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2daybiz:custom_t-shirt_design_script:*:*:*:*:*:*:*:*","matchCriteriaId":"0A17E088-42D5-4DC2-8F4D-F419152DC566"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1341","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8702","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1821","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for databases/webblogmanager.mdb."},{"lang":"es","value":"DMXReady Registration Manager v1.1 almacena información sensible bajo la raíz web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de base de datos a través de una petición directa a databases/webblogmanager.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:registration_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"885A9272-DCCB-44B8-95A8-263B7CB90FD0"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50915","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8705","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1822","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) imgcaptcha.php or (2) mp3captcha.php in assets/captcha/includes/captchaform/, or (3) assets/captcha/includes/captchatalk/swfmovie.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de fichero PHP en el componente InterJoomla ArtForms (com_artforms) v2.1b7 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de el parámetro mosConfig_absolute_path en imgcaptcha.php o (2) mp3captcha.php en assets/captcha/includes/captchaform/, o (3) assets/captcha/includes/captchatalk/swfmovie.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gonzalo_maser:com_artforms:2.1b7:*:*:*:*:*:*:*","matchCriteriaId":"40E18AC0-71D1-4251-90A2-9DA5C1650CCE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34986","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1823","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.7 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML by modifying a document head, before the Content-Type META element, to contain crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, a related issue to CVE-2009-1575."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Print (también conocido como versiones Printer, e-mail y PDF) v5.x anteriores a v5.x-4.7 y v6.x anteriores a v6.x-1.7, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección modificando la cabecera de un documento, antes del elemento Content-Type META, contiene secuencias UTF-8 byte manipuladas que se tratan como UTF-7 en Internet Explorer 6 and 7, un caso relacionado con CVE-2009-1575."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*","matchCriteriaId":"13532942-BC0A-4B25-9FE3-679E5A698F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B1DFE95-5788-4C00-8D24-FD2068352293"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A35122AE-7CAB-4AB1-88E7-EAF882618E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD3428DA-1459-4B1F-A19B-C66F8FB75BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"9ABFF4E5-8F49-4AC4-8CEB-F502E6882087"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA7EF9D6-39D2-4922-B516-44B31E38DB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"030BC1EE-8ED5-4955-AD4B-1745690ABB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"989C2B4B-2CAA-4F85-899B-2E85C7C1AD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"F18D750A-6F98-4A72-B040-9A448EC007BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"5029B78B-0160-4547-9934-19A891AB2652"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"FE82C4B9-F7F2-424F-9AF9-9D945FD563EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0F5EE5-217D-40BF-BEF8-224FBDFB8E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*","matchCriteriaId":"C88506DA-94A1-4559-BCD8-D6DA9D438AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*","matchCriteriaId":"7B0A448C-470C-4AA9-BAB5-8EAC14A6141E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*","matchCriteriaId":"D315DA5E-3012-4F25-8C7D-21C2BA172A13"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*","matchCriteriaId":"961AEFF7-499F-4709-BB2F-BB623A4CE19F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"7267D96A-43CC-418B-B115-DE77154BCDAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"9302C93E-C85F-4EA3-8BE2-3575592B50B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"03EC0689-1246-4E34-948B-6380BB2BAC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"746A3749-36A4-49EA-B705-922B9D260CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.4:*:*:*:*:*:*:*","matchCriteriaId":"2ECD6FD0-0A42-4445-9524-DE02E568FF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.5:*:*:*:*:*:*:*","matchCriteriaId":"3DCB040D-45EC-4E44-8D66-4C796247EBB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:5.x-4.6:*:*:*:*:*:*:*","matchCriteriaId":"ED8F5659-A54C-4956-A7F0-6DF982CC7CC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F41A6973-2C38-418D-A16F-93F77F902206"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"9D6DF7D4-0992-4677-BA0A-860F329E6D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"0E8A1B8F-021C-4558-880F-9E7FCFE2D323"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"CF939A54-5458-4FD5-916D-301CD3B57F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*","matchCriteriaId":"3FF7248F-2CD2-4551-AD81-3207FE1D45A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*","matchCriteriaId":"CD956162-E836-4777-8346-DF6DAA100A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"82398A3C-DB58-42DE-BC16-56D92FAB55B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"33406F84-81BF-492E-9C22-171311E519A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB084C5-BE56-4128-8A5D-8F536B276A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"7F6B609E-4AD4-46CD-B9C7-5D0690B83326"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"0EFCA9EB-0A08-4FC2-BF40-DA3BD154DEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:print:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"F8244420-574B-48C0-A714-F122A0788170"}]}]}],"references":[{"url":"http://drupal.org/node/461674","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34954","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1320","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50523","source":"cve@mitre.org"},{"url":"http://drupal.org/node/461674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1824","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet Security 9.4.3202.9 and earlier, ArcaVir 2009 System Protection 9.4.3203.9 and earlier, and ArcaBit 2009 Home Protection 9.4.3204.9 and earlier, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \\Device\\ps_drv containing arbitrary kernel addresses, as demonstrated using the (1) 0x2A7B802B and possibly (2) 0x2A7B8004 and (3) 0x2A7B802F IOCTLs."},{"lang":"es","value":"El controlador de Kernel ps_drv.sys en ArcaBit ArcaVir 2009 Antivirus Protection v9.4.3201.9 y anteriores, ArcaVir 2009 Internet Security v9.4.3202.9 y anteriores, ArcaVir 2009 System Protection v9.4.3203.9 y anteriores, y ArcaBit 2009 Home Protection v9.4.3204.9 y anteriores, permite a usuarios locales obtener privilegios a través de una petición METHOD_NEITHER IOCTL manipulada en \\Device\\ps_drv que contiene direcciones de Kernel arbitrarias, como se ha demostrado utilizando el (1) 0x2A7B802B y posiblemente (2) 0x2A7B8004 y (3) 0x2A7B8004 IOCTLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcabit:arcavir_2009_antivirus_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.3201.9","matchCriteriaId":"D6FA1FD6-1798-487B-AE30-16B1C8426C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:arcabit:arcavir_2009_home_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.3204.9","matchCriteriaId":"115CF860-C225-4AFC-ACE5-24A30E591A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:arcabit:arcavir_2009_internet_security:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.3202.9","matchCriteriaId":"20878584-D85E-4B24-98C3-0ED50D018361"},{"vulnerable":true,"criteria":"cpe:2.3:a:arcabit:arcavir_2009_system_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.3203.9","matchCriteriaId":"9C278D41-EA2B-468B-AECE-18771DFF6F9F"}]}]}],"references":[{"url":"http://ntinternals.org/ntiadv0814/PsDrv_Exp.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ntinternals.org/ntiadv0814/ntiadv0814.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35260","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35100","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1428","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8782","source":"cve@mitre.org"},{"url":"http://ntinternals.org/ntiadv0814/PsDrv_Exp.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://ntinternals.org/ntiadv0814/ntiadv0814.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1825","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T20:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action."},{"lang":"es","value":"modules/admuser.php en myColex v1.4.2 no requiere autenticación administrativa, lo que permite a usuarios autenticados remotamente listar las cuentas de usuarios a través de una acción Find."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collector:mycolex:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"26F45192-F9E0-444F-AE18-29DDCFE38F01"}]}]}],"references":[{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1344","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8707","source":"cve@mitre.org"},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1826","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action."},{"lang":"es","value":"modules/admuser.php en myGesuad v0.9.14 (también conocido como v0.9) no requiere autenticación administrativa, lo que permite a usuarios autenticados remotamente listar las cuentas de usuarios a través de una acción Find."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collector:mygesuad:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"9F74413D-2C26-4E50-AFC2-8F52FEF61199"}]}]}],"references":[{"url":"http://www.collector.ch/download/mygesuad-0.9.zip","source":"cve@mitre.org"},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1345","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8708","source":"cve@mitre.org"},{"url":"http://www.collector.ch/download/mygesuad-0.9.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.collector.ch/drupal5/?q=node/39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1827","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a large value in the r (aka Radius) attribute of a circle element, related to an \"unclamped loop.\""},{"lang":"es","value":"El componente SVG en Mozilla Firefox v3.0.4 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) a través de un valor largo en el r (también conocido como Radius) atributo de un elemnto \"circle\", relacionado con un \"bucle sin fijado\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-05/0270.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-05/0271.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-05/0272.html","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/04/advisory-firefox-dos-condition.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503825/100/0/threaded","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=393832","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=465615","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50721","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8794","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-05/0270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-05/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-05/0272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.zoller.lu/2009/04/advisory-firefox-dos-condition.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503825/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=393832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=465615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1828","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1) a META element specifying automatic page refresh or (2) a JavaScript onLoad event handler for a BODY element. NOTE: it was later reported that earlier versions are also affected."},{"lang":"es","value":"Mozilla Firefox v3.0.10 permite a atacantes remotos provocar una denegación de servicio (bucle infinito, cuelgue de aplicación y consumo de memoria) a través de un elemento KEYGEN en conjunción con (1) un elemento META especificando página de refresco automático o (2) un gestor de evento onLoad JavaScript para un elemento BODY."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0247.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0263.html","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3194/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503876/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35132","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=469565","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50838","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5928","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8822","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0263.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.zoller.lu/2009/04/advisory-firefox-denial-of-service.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3194/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503876/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=469565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1829","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets."},{"lang":"es","value":"Vulnerabilidad sin especificar en el analizador PCNFSD en Wireshark v0.8.20 hasta v1.0.7 permite a atacantes remotos provocar una denegación de servicio (caída) a través de paquetes PCNFSD manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.20:*:*:*:*:*:*:*","matchCriteriaId":"C934EF8B-1B73-412E-9874-E1AC0223506B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"}]}]}],"references":[{"url":"http://osvdb.org/54629","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35224","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37477","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0095","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:125","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35081","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022274","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1408","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-03.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50686","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9270","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1830","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long search query."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Soulseek v156 and v157 NS permite a atacantes remotos ejecutar código de su elección a través de una petición de búsqueda larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slsknet:soulseek:156:*:*:*:*:*:*:*","matchCriteriaId":"58D9949A-9AE9-4061-A7D1-C2A17D5E7B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:slsknet:soulseek:157_ns:*:*:*:*:*:*:*","matchCriteriaId":"7A2FF66A-D1C6-4269-8A17-36D80CB9235D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0210.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35091","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1427","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8777","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8804","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0210.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1831","sourceIdentifier":"cve@mitre.org","published":"2009-05-29T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow."},{"lang":"es","value":"El módulo de Nullsoft Modern Skins Support (biblioteca gen_ff.dll) en Winamp de Nullsoft anterior a versión 5.552, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo MAKI diseñado, que desencadena una extensión de signo incorrecta, un desbordamiento de enteros y un desbordamiento de búfer en la región stack de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.55","matchCriteriaId":"4D8F363B-DB47-4691-9821-7F351D6F43B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*","matchCriteriaId":"5785692F-D8FA-4D49-8872-CB8B2F173557"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*","matchCriteriaId":"A6E85C52-1974-4F83-89AE-BB29FC897E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*","matchCriteriaId":"CB082F8B-A052-4D82-9D73-2BB35FBA19F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"}]}]}],"references":[{"url":"http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35052","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50664","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8767","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8770","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8772","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8783","source":"cve@mitre.org"},{"url":"http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8783","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1832","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving \"double frame construction.\""},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.11, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 permite a atacantes remotos producir una denegacion de servicio (corrupcion de servicio y caida de aplicacion) o posiblemente ejecutar codigo arbitrario a traves de vectores que incluyen \"construccion de doble marco\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://osvdb.org/55148","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022376","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-24.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35371","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022397","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=484031","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503569","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10237","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=484031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1833","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors."},{"lang":"es","value":"El motor JavaScript en Mozilla Firefox anterior a v3.0.11, Thunderbird anterior a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar codigo arbitrario a traves de vectores relacionados con  (1) js_LeaveSharpObject, (2) ParseXMLSource, y (3) una cierta aserción en  jsinterp.c;  y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://osvdb.org/55152","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55153","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55154","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35428","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1022376","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-24.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35372","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022397","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=369696","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=426520","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=427196","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=487204","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503570","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11487","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=369696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=426520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=427196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=487204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1834","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \\u115A through \\u115E characters."},{"lang":"es","value":"Vulnerabilidad de truncado visual en netwerk/dns/src/nsIDNService.cpp en Mozilla Firefox anterior a v3.0.11 y SeaMonkey anterior a v1.1.17 permite a atacantes remotos sustituir la barra de direcciones a través de un IDN con caracteres Unicode inválidos que son mostrados como espacios en blanco, como se demostró en los caracteres desde \\u115A hasta \\u115E."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"}]}]}],"references":[{"url":"http://osvdb.org/55162","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-25.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35388","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479413","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503573","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10436","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1835","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.11 y SeaMonkey anteriores a v1.1.17 asocian documentos locales con un dominio de nombres externo localizado después de la subcadena \"file://\" en una URL, lo que permite a atacantes remotos ayudados por el usuario leer cookies de forma arbitraria a través de un documento HTML manipulado, como se demostró mediante una URL con file://examplo.com/C:/ al principio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"}]}]}],"references":[{"url":"http://osvdb.org/55161","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35428","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-26.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35391","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=491801","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503576","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9803","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=491801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1836","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.11, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 utilizan la cabecera HTTP del servidor para determinar el contexto de un documento facilitado mediante una respuesta CONNECT no 200 desde un servidor proxy, lo que permite a atacantes \"man-in-the-middle\" ejecutar secuencias de comandos web arbitrarios mediante la modificación de la respuesta CONNECT, también conocido como ataque \"forzado SSL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://osvdb.org/55160","source":"secalert@redhat.com"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"secalert@redhat.com"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-27.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35380","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022396","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479880","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503578","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1837","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object."},{"lang":"es","value":"Condición de carrera en la función NPObjWrapper_NewResolve en modules/plugin/base/src/nsJSNPRuntime.cpp en xul.dll en Mozilla Firefox v3 anteriores a v3.0.11 podría permitir a atacantes remotos ejecutar código arbitrario a través de una pagina de transición durante la carga de un applet de Java, relacionado con una vulnerabilidad uso-después-de-liberación para asociar memoria con un objeto Java destrozado."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.11","matchCriteriaId":"AE40ED6D-6842-4235-B78C-0E2D221C8916"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*","matchCriteriaId":"7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"941713DB-B1DE-4953-9A9C-174EAFDCB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F87B994-28E4-4095-8770-6433DE9C93AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://secunia.com/advisories/34241","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/secunia_research/2009-19/","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-28.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504260/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35360","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022386","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=486269","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503579","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10628","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/34241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/secunia_research/2009-19/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504260/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=486269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-1838","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler."},{"lang":"es","value":"La implementación de la recolección de basura en Mozilla Firefox anteriores a v3.0.11, Thunderbird anteriores a v2.0.0.22, y SeaMonkey anteriores a v1.1.17 fija un elemento del documento del propietario a \"null\" en circunstancias sin especificar, lo que permite a atacantes remotos ejecutar JavaScript con privilegios chrome a traves de un manipulador de eventos manipulado, relacionado con un contexto incorrecto para este manipulador de eventos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://osvdb.org/55157","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35428","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-29.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35383","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022397","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489131","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503580","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1839","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a \"file-URL-to-file-URL scripting\" attack."},{"lang":"es","value":"Mozilla Firefox v3 anteriores a v3.0.11 asocia incorrectamente un principal con un fichero: URL cargada a través de la barra de direcciones, lo que permite a atacantes remotos con la colaboración del usuario evitar la restricciones de acceso previstas y leer ficheros a través de un documento HTML manipulado, también conocido como ataque de \"secuencia de comandos fichero-URL-a-fichero-URL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*","matchCriteriaId":"0F72BFD4-000D-4B07-8261-C9F6839AD150"}]}]}],"references":[{"url":"http://osvdb.org/55163","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-30.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35386","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479943","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503581","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9256","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-30.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1840","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a \"web bug\" in an e-mail message, or web script or an advertisement in a web page."},{"lang":"es","value":"Mozilla Firefox anterior a v3.0.11, Thunderbird, y SeaMonkey no comprueban la politica de contenidos antes de cargar un fichero de secuencia de comandos que este en un documento XUL, lo que permite a atacantes remotos evitar las restricciones de acceso previstas a través de un documento HTML manipulado, como se demostró mediante un \"web bug\" en un mensaje de correo electrónico, o secuencias de comandos web o un anuncio en una página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*","matchCriteriaId":"0F72BFD4-000D-4B07-8261-C9F6839AD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://osvdb.org/55158","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-31.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022379","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=477979","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503582","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51076","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9448","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=477979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1841","sourceIdentifier":"secalert@redhat.com","published":"2009-06-12T21:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter."},{"lang":"es","value":"js/src/xpconnect/src/xpcwrappedjsclass.cpp en Mozilla Firefox anterior a v3.0.11, Thunderbird anterior a v2.0.0.22, y SeaMonkey anterior a v1.1.17 permite a atacantes remotos ejecutar secuencias de comandos web de forma arbitraria con los privilegios de un objeto \"chrome\", como se ha demostrado en la barra lateral del navegador y el FeedWriter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.19","matchCriteriaId":"850345D6-2085-4EC4-AE47-FC8E265C61D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://osvdb.org/55159","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35331","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35428","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35536","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35561","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35602","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35882","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-32.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35373","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022397","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479560","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503583","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9815","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/55159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=503583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1842","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main/tracking/userLog.php en Francisco Burzi PHP-Nuke v8.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante la cabecera \"HTTP Referer\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D4DB1D99-9F35-43A2-AD72-4B495B5F31BE"}]}]}],"references":[{"url":"http://gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35117","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50818","source":"cve@mitre.org"},{"url":"http://gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1843","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parameter to (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, and (f) question.php; and the (2) order_number parameter to (g) answers.php and (h) question.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Flash Quiz Beta v2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"quiz\" en (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, y (f) question.php; y el parámetro (2) order_number parameter en (g) answers.php y (h) question.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glenn_mcgurrin:flash_quiz:beta2:*:*:*:*:*:*:*","matchCriteriaId":"F1C061D1-8173-411E-AC3F-6B67BBD13FAA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503701/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35060","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503701/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1844","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the \"HTML exports of books\" feature; and (2) allow remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary.  NOTE: vector 1 exists because of an incomplete fix for CVE-2009-1575."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en Drupal v5.x anteriores a v5.18 y v6.x anteriores a v6.12 permite (1) a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de su elección a través de secuencias UTF de 8 bytes que son tratadas como UTF 7 bytes por Internet Explorer 6 y 7, ya que no son manejadas de forma adecuada por la característica \"HTML exports of books\"; y (2) permite a usuarios remotos autenticados con una taxonomía de permisos de administrador, inyectar inyectar secuencias de comandos web o HTML de su elección a través del texto de ayuda de un vocabulario de su elección. NOTA: El vector (1) existe, debido a una solucion incompleta de la CVE-2009-1575."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*","matchCriteriaId":"FD400243-3FFE-457C-A977-6688D9181FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*","matchCriteriaId":"2A2686FD-9643-4B8A-A8BF-C67120E44A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*","matchCriteriaId":"0F851EC4-6148-4C13-890F-8260D4DF5A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*","matchCriteriaId":"30282489-9168-4F7E-8465-1FE6521056B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*","matchCriteriaId":"7F91E944-26C4-4886-B9B9-F32BD15569BB"}]}]}],"references":[{"url":"http://drupal.org/node/461886","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35282","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1808","source":"cve@mitre.org"},{"url":"http://drupal.org/node/461886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1845","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ajax/updatecheck.php en Lussumo Vanilla v1.1.5 y v1.1.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"RequestName\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"54FDD129-FE07-40B7-A3AB-43DD888DFB53"},{"vulnerable":true,"criteria":"cpe:2.3:a:lussumo:vanilla:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E6223303-36BD-4938-BA50-FF57D6ECEB52"}]}]}],"references":[{"url":"http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/9524/vanilla-118-released/#Item_0","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35234","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503847/100/0/threaded","source":"cve@mitre.org"},{"url":"http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lussumo.com/community/discussion/9524/vanilla-118-released/#Item_0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503847/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1846","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the THEME_FOLDER parameter to (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, and (5) Structure/homepage.php in themes/."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en SiteX v0.7.4 Build 418 y anteriores permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar los caracteres .. (punto punto) en el parámetro \"THEME_FOLDER\" en (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, y (5) Structure/homepage.php en themes/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.4","matchCriteriaId":"2953F919-509E-40A3-95EF-16C317A90682"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.6.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"951E33C7-198C-498D-AF83-FCD236062151"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.7.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"FE848393-6934-4109-9351-082CD8CDCCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.7.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"D745639E-E4A5-4A2A-AD21-FE58D46E48F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6417454F-0B3C-4CE4-83B5-6DFADD0E4A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.7.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"8E2C715F-7D4F-4CBD-9D4F-88F070682F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.7.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"A9208853-CB93-45B8-A27B-3B6883446A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bjsintay:sitex:0.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"53D22B7D-5FD1-42FD-B9FE-FE1AE36A7D6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35122","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8816","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1847","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fiche parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Easy PX 41 CMS v9.0 B1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro \"fiche\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easypx41:easy_px_41_cms:9.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"2861C708-0AEE-44DD-9585-A5D0FEEEE0BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35252","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1848","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JoomlaMe AgoraGroups (también conocido como AG o com_agoragroup) v0.3.5.3 para Joomla!, permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción groupdetail sobre index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlame:com_agoragroup:0.3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8F171888-BD18-4760-B6EE-1CBDB5BAB45A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35118","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1849","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en función Monitor_Bandwidth en PRTG Traffic Grapher v6.2.2.977 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.977","matchCriteriaId":"7EB46CD8-7E79-48E6-ACA8-58646CD5DFD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.7.139:*:*:*:*:*:*:*","matchCriteriaId":"EF160BB3-D13E-46A6-8223-524440C3F993"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.8.154:*:*:*:*:*:*:*","matchCriteriaId":"858DE93A-F8D5-421F-9A9A-407F0FC60890"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.256:*:*:*:*:*:*:*","matchCriteriaId":"1FBE495A-FAAD-4DE8-913D-CAC6F8B5F29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.257:*:*:*:*:*:*:*","matchCriteriaId":"E9FCC4E3-BB37-4BC9-9046-06952FC2571A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.265:*:*:*:*:*:*:*","matchCriteriaId":"7510E041-535F-4925-B7DA-3E34C59EC1CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.266:*:*:*:*:*:*:*","matchCriteriaId":"42B8D289-3CC2-49C3-82ED-20A80CCD824E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.356:*:*:*:*:*:*:*","matchCriteriaId":"FA086843-99C5-489F-8036-3DCCE7046A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.357:*:*:*:*:*:*:*","matchCriteriaId":"9E35BEC0-4FEE-48D9-9748-72C76B2330DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.363:*:*:*:*:*:*:*","matchCriteriaId":"E1103E40-44D6-47CB-AA49-69454FB5AA8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.364:*:*:*:*:*:*:*","matchCriteriaId":"E733A72C-C955-43A0-82FA-018859620751"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.385:*:*:*:*:*:*:*","matchCriteriaId":"DB0961E2-BDEA-4F4E-BF99-91E468CD5E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.386:*:*:*:*:*:*:*","matchCriteriaId":"737308B8-F130-4C5E-A7E8-11BB93EF1FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.470:*:*:*:*:*:*:*","matchCriteriaId":"42EAD7DC-3EE5-4CA2-BC65-CC3AEA65DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.471:*:*:*:*:*:*:*","matchCriteriaId":"D464FD9D-EBC7-44CE-85FA-02F78CA98ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.498:*:*:*:*:*:*:*","matchCriteriaId":"D05A59D2-BA10-4165-93FC-43B8C204871D"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.505:*:*:*:*:*:*:*","matchCriteriaId":"3975137E-8EE2-4190-92EA-13A40DD01454"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.510:*:*:*:*:*:*:*","matchCriteriaId":"7F3BFEC7-FD2F-40EE-B9FF-BF386E5A803E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.522:*:*:*:*:*:*:*","matchCriteriaId":"687C3053-7089-475F-A276-01A01A17ACFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.534:*:*:*:*:*:*:*","matchCriteriaId":"C0C3C6AB-CBEC-4F19-9AC7-858DDF2B5DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.562:*:*:*:*:*:*:*","matchCriteriaId":"0B95DF35-45CE-497E-8602-061E1C84DD0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.566:*:*:*:*:*:*:*","matchCriteriaId":"480EB1A5-54EC-4089-9D96-62D39C58BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.300:*:*:*:*:*:*:*","matchCriteriaId":"8DE4A952-49D7-4D56-A7F6-C18641BBFA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.310:*:*:*:*:*:*:*","matchCriteriaId":"9C8D0B8B-DB77-498D-AEDC-566A0A87DC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.356:*:*:*:*:*:*:*","matchCriteriaId":"31119ED0-80F5-41DE-B8AF-AC443791B58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.379:*:*:*:*:*:*:*","matchCriteriaId":"AC55092F-F428-48ED-8345-DCD620B2BFE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.398:*:*:*:*:*:*:*","matchCriteriaId":"86A62E3B-2727-4B5F-BF8C-52099F901C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.0.452:*:*:*:*:*:*:*","matchCriteriaId":"61DB3915-E534-44E4-87F5-63D614B7899A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.1.474:*:*:*:*:*:*:*","matchCriteriaId":"C4539CCB-6727-4068-93AA-601EF54818BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.548:*:*:*:*:*:*:*","matchCriteriaId":"79AD54E2-8F65-47E5-805E-EE249D44A148"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.549:*:*:*:*:*:*:*","matchCriteriaId":"1A40DC9A-6AFB-47F3-BD83-CB046F3EB73D"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.559:*:*:*:*:*:*:*","matchCriteriaId":"8EC50905-5919-4F54-94DD-081FAF99DCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.560:*:*:*:*:*:*:*","matchCriteriaId":"060873E0-FECA-49AD-A116-78F8979853E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.565:*:*:*:*:*:*:*","matchCriteriaId":"CD1A2C75-B4C8-42C7-B28A-E82BAFC893C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.566:*:*:*:*:*:*:*","matchCriteriaId":"EF5742D1-8BA7-4FBC-8F8F-E62D5551F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.574:*:*:*:*:*:*:*","matchCriteriaId":"DAF7EF38-CD51-4A73-AFC2-1F3669C6276A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.575:*:*:*:*:*:*:*","matchCriteriaId":"F9B65DA1-587C-497F-9950-9D809C5AAE2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.581:*:*:*:*:*:*:*","matchCriteriaId":"DECA3D57-6886-49AD-AA8C-1BFC2B95AC9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.582:*:*:*:*:*:*:*","matchCriteriaId":"04789BF9-8D3B-4DBB-A5D1-EE1422FF5609"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.687:*:*:*:*:*:*:*","matchCriteriaId":"8EEDDEEA-0DB1-4F70-B92D-B08CA65E7893"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.738:*:*:*:*:*:*:*","matchCriteriaId":"89C9927F-9723-4BA8-8AEE-09C1835D33EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.739:*:*:*:*:*:*:*","matchCriteriaId":"D5A56729-2F74-43F7-A9B6-33E765C581A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.758:*:*:*:*:*:*:*","matchCriteriaId":"BCB7985A-0484-4741-9A39-78105AE1B690"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.759:*:*:*:*:*:*:*","matchCriteriaId":"BE5D7BD1-9F60-4C85-9E23-7DB1D6F14F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.812:*:*:*:*:*:*:*","matchCriteriaId":"A296F328-B1B4-4B95-AEA9-DC7A899852EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.813:*:*:*:*:*:*:*","matchCriteriaId":"8D933F67-548C-438A-96F5-42706125123E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.833:*:*:*:*:*:*:*","matchCriteriaId":"985A84B5-1EA8-4939-AE5A-DDF3BF24530E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.834:*:*:*:*:*:*:*","matchCriteriaId":"F19FDECF-1D4C-41A6-828F-933E47E21419"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.862:*:*:*:*:*:*:*","matchCriteriaId":"D0E9B0D4-D408-4383-9B0E-D931B350A035"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.863:*:*:*:*:*:*:*","matchCriteriaId":"EB6222BC-C31B-4168-AC89-DB34F85115C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.255:*:*:*:*:*:*:*","matchCriteriaId":"523BA24F-AEF3-401B-A4C8-4AE2A6F1FA77"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.256:*:*:*:*:*:*:*","matchCriteriaId":"AF35DFBC-ABFE-4776-A9FE-4ED1FD4DA7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.258:*:*:*:*:*:*:*","matchCriteriaId":"3AE82434-3D52-4DD6-860B-A259F55CB86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.259:*:*:*:*:*:*:*","matchCriteriaId":"C4DE8E48-D315-42F1-933D-4048F8C868CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.261:*:*:*:*:*:*:*","matchCriteriaId":"F75EDE82-5D59-462A-8792-FE7585F03673"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.262:*:*:*:*:*:*:*","matchCriteriaId":"9F7B8FF0-5E19-4527-947D-124B6E4BDF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.284:*:*:*:*:*:*:*","matchCriteriaId":"628D9547-8661-4FB5-A5D7-593B93CDF666"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.285:*:*:*:*:*:*:*","matchCriteriaId":"E23AAC1E-6081-46D4-9B91-DBA79656642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.332:*:*:*:*:*:*:*","matchCriteriaId":"2BED3603-BD98-4C6D-AD86-C0E8FDAF530E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.333:*:*:*:*:*:*:*","matchCriteriaId":"BEC7F90A-0DE4-4D70-8CC7-2313DDA5791A"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.335:*:*:*:*:*:*:*","matchCriteriaId":"27FE080A-B2EF-415C-A6A6-762C8DDBF959"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.336:*:*:*:*:*:*:*","matchCriteriaId":"593B0A84-0DFC-414F-8A34-6C8790876EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.393:*:*:*:*:*:*:*","matchCriteriaId":"0456E733-F112-4B54-AECC-32EC933F5920"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.394:*:*:*:*:*:*:*","matchCriteriaId":"3E53FD0B-DD3F-4C66-97C1-04609556286F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.417:*:*:*:*:*:*:*","matchCriteriaId":"BFFCC4D4-682E-480C-B1F8-83DB43B6B9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.441:*:*:*:*:*:*:*","matchCriteriaId":"8786AC61-7441-4E3E-AE9F-E985D737BD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.442:*:*:*:*:*:*:*","matchCriteriaId":"678CAD17-2B48-4C29-B025-AF0D3A51DA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.450:*:*:*:*:*:*:*","matchCriteriaId":"199E6F79-1EAE-458A-A6FB-A60C3D211751"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.451:*:*:*:*:*:*:*","matchCriteriaId":"3D11D880-AC3B-433B-82E2-88E6F11ACD4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.585:*:*:*:*:*:*:*","matchCriteriaId":"0557C778-CE93-4494-96A4-F5FCD30C1009"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.586:*:*:*:*:*:*:*","matchCriteriaId":"9657EEAB-9901-4AFA-B136-84AF9394242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.601:*:*:*:*:*:*:*","matchCriteriaId":"0EB7DDF4-6E0B-41E7-8853-6A92E5557768"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.602:*:*:*:*:*:*:*","matchCriteriaId":"4871FE92-DF4D-44B6-9A36-6F3B04F46A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.625:*:*:*:*:*:*:*","matchCriteriaId":"D673D1D0-174A-4C89-85B4-14674DE2DF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.626:*:*:*:*:*:*:*","matchCriteriaId":"34AC3B6A-F9AE-4E9F-9FEC-A2CB8519F774"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.675:*:*:*:*:*:*:*","matchCriteriaId":"97DE6BC8-9C96-4484-A316-6DF8D14D5973"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.676:*:*:*:*:*:*:*","matchCriteriaId":"D7649A66-3DA0-4B8E-9600-55F973015887"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.683_beta:*:*:*:*:*:*:*","matchCriteriaId":"236A9603-3512-4E2F-9219-B2A7618BC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.750:*:*:*:*:*:*:*","matchCriteriaId":"DC47944B-1875-4E78-BD04-9A5B42B946DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.751:*:*:*:*:*:*:*","matchCriteriaId":"7BDACFEB-6371-4410-B1CC-73444DABD7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.753:*:*:*:*:*:*:*","matchCriteriaId":"92F4B6B4-3929-4615-BB24-B7A9162D39FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.754:*:*:*:*:*:*:*","matchCriteriaId":"758DBBC9-840F-449A-92B2-CF57618C2D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.756:*:*:*:*:*:*:*","matchCriteriaId":"A0BBBDC5-2E05-418B-B304-50A13EB7DDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.757:*:*:*:*:*:*:*","matchCriteriaId":"670477DE-6EA7-40F6-95CB-890F5AE95EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.854:*:*:*:*:*:*:*","matchCriteriaId":"CA10F36E-8CB5-47CB-966B-A8EA437582E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.855:*:*:*:*:*:*:*","matchCriteriaId":"52209A39-851A-4EED-9F82-336A5289BD7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.907:*:*:*:*:*:*:*","matchCriteriaId":"88F1D13B-DEA2-4FAC-BDE3-CC5BDBDCF314"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.908:*:*:*:*:*:*:*","matchCriteriaId":"468F35D5-9E88-40FB-B59B-0FCC65D561FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.950:*:*:*:*:*:*:*","matchCriteriaId":"97A41779-9099-40FB-840B-77CA6E0EC3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.951:*:*:*:*:*:*:*","matchCriteriaId":"F03F66F5-5964-4D6E-9FA8-9A16A7E925CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.957:*:*:*:*:*:*:*","matchCriteriaId":"2EC3282B-7F9D-4733-9885-A62EF09BC4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.958:*:*:*:*:*:*:*","matchCriteriaId":"A54E0D31-6FC6-40D9-AD6E-3E1A04188627"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.963:*:*:*:*:*:*:*","matchCriteriaId":"FCFF0A3D-E902-4337-B934-C04F481C78FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.964:*:*:*:*:*:*:*","matchCriteriaId":"98DAB8C9-8DBD-4BD5-A165-DEC63206C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:paessler:prtg_traffic_grapher6.0.5.416:*:*:*:*:*:*:*:*","matchCriteriaId":"34B19C37-5393-432D-98BF-4261528C92B0"}]}]}],"references":[{"url":"http://blog.bkis.com/?p=704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.paessler.com/support/kb/questions/prtg6history","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35128","source":"cve@mitre.org"},{"url":"http://blog.bkis.com/?p=704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.paessler.com/support/kb/questions/prtg6history","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1850","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en PhpBugTracker v1.0.3 permite que atacantes remotos ejecutar comandos SQL de su elección a tracés del parámetro password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0297FBB7-1C0F-40E4-9CEE-3EC6FCE32B99"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35101","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50752","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8808","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1851","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en include.php en phpBugTracker v1.0.4 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"username\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"DF93E6C1-91C6-4212-8D72-A20FC038CFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3BA80E-DCDB-4626-9432-2D9C4A174974"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3B150B31-055A-481E-BE37-974873D8CA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"46680DAC-C1E6-4D8F-A98A-C95A9245CECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5125EEFE-782B-4C91-8F1F-6D978A0B72DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5BD640E3-B782-4C19-BDB0-408F88C38797"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AA146ADC-6FCD-4D48-92D2-267808A97900"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0732EFEF-8637-491E-AF11-564FE3C6B7E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"153F372C-838F-4B9C-AB38-C6004D0B0E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"29D95754-6DF1-46AF-A926-B1284246E033"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"02A33199-2806-4C02-8B18-D4A28B420213"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"98CFE7AD-074F-4654-8DB1-4D3B2C41A4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E082D90C-2CAD-4F11-A073-C4F59A17FAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"82BCF58C-71DE-4647-B6F4-0F9D5FFFAF3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B69D4976-25F3-4F7A-BCD9-10BFA8104C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"178541BF-BB04-4EEE-BFDE-DE18B34A75E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"BC5BFAE1-CF8F-44B9-89B2-DD5516F12424"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"834BB5B8-6D35-4472-9BE9-8B2854EAA2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BB976AE8-32EC-42E4-B322-1486EE2DB2A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4B68B176-77CC-47BC-9652-D198AF537322"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DA30267F-FD6F-413E-8A07-BA900751C163"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"191454A8-1398-4F9A-95FD-68FA5B8161C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"571B8160-444F-449C-BD44-E906B258FD27"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"7D24C18E-94BB-4B37-85E2-BA5AB85BBE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4DE262CB-5CA3-44F8-86D5-9935EECF366C"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D2D6258F-08EC-439E-A2DA-F220EC660887"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"61386352-BC17-4B68-9730-647175A6E40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"3D6E5F7F-173A-4DE3-BA1B-E2F809ECF306"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"2B5DB887-5E14-4331-88B0-414501D5EA11"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0:*:*:*:*:*:*:*","matchCriteriaId":"78B0A940-44AA-414E-BA14-F8A480ECDA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18B9C1A9-D65B-4AF4-8154-248D8A92E347"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0297FBB7-1C0F-40E4-9CEE-3EC6FCE32B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:1.x:dev1:*:*:*:*:*:*","matchCriteriaId":"5FCE2423-CD30-48C3-A0B9-187FB1AF77C4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35125","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1852","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields."},{"lang":"es","value":"Múltiples vulnerabilidades de de inyección SQL en raphiks MyForum v1.3, permite que atacantes remotos ejecuten comandos SQL de su elección a través de los campos (1) Username y (2) Password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:graphiks:myforum:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6593767F-16EC-4BC5-8FD7-3C9D090540AE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35096","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50749","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8803","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1853","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action."},{"lang":"es","value":"Múltiples vulnerabilidades de de inyección SQL en index.php en Kensei Board v2.0 Beta (también conocida como v2.0.0b) y anteriores, permite que atacantes remotos ejecuten comandos SQL de su elección a través de los parámetros (1) f y (2) t en una acción showforum."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kenseiboard:kensei_board:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0b","matchCriteriaId":"AA75E3C3-5575-4547-A12B-5FDFA4D7178C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kenseiboard:kensei_board:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C12BB605-4499-4FCE-91DC-EE4ED1A104D8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50747","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1854","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1."},{"lang":"es","value":"Million Dollar Text Links v1.0 permite a atacantes remotos saltarse la autenticación y obtener acceso  administrativo fijando el valor de la cookie userid a 1.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsnx:million_dollar_text_links:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F251FF9-877E-49E4-AAEB-2CD519586A9A"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8813","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1855","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Reader versión 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versión 8 y Acrobat versiones 8 anteriores a 8.1.6 y Reader versión 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, podría permitir a los atacantes ejecutar código arbitrario por medio de un archivo PDF que contiene un archivo de modelo U3D malformado con un bloque de extensión diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504229/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35282","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-042","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504229/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1856","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento entero en Reader versión 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versión 8 y Acrobat versiones 8 anteriores a 8.1.6 de Adobe, y Reader versión 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, permite a los atacantes causar una denegación de servicio o posiblemente ejecutar código arbitrario por medio de un archivo PDF que contiene parámetros en el filtro FlateDecode, lo que desencadena un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35294","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51021","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1857","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font."},{"lang":"es","value":"Reader versión 7 y Acrobat versiones 7 anteriores a 7.1.3 de Adobe, Reader versión 8 y Acrobat versiones 8 anteriores a 8.1.6 y Reader versión 9 y Acrobat versiones 9 anteriores a 9.1.2 de Adobe, permite a los atacantes causar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código arbitrario por medio de un documento PDF con una fuente TrueType diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-25.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504239/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35296","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguardcenter.com/advisory/FGA-2009-25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504239/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1858","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption."},{"lang":"es","value":"El filtro JBIG2 en Adobe Reader v7 y Acrobat v7 anterior a v7.1.3, Adobe Reader v8 y Acrobat 8 anterior a v8.1.6, y Adobe Reader v9 y Acrobat 9 anterior a v9.1.2, permitiría a atacantes remotos ejecutar código arbitrario a través de vectores inespecíficos que inician la corrupción de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35298","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51016","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1859","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption."},{"lang":"es","value":"Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader v8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2 podría permitir a atacantes ejecutar código arbitrario a través de vectores inespecíficos que inician la corrupción de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35289","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1860","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T01:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content."},{"lang":"es","value":"Vulnerabilidad sin especificar en Adobe Shockwave Player anterior a v11.5.0.600 permite a atacantes remotos ejecutar código de su elección a través de contenido Shockwave Player 10 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5.0.596","matchCriteriaId":"2ACBD5E4-ED8C-4CCB-B71F-96F1B3B8CF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*","matchCriteriaId":"C61B9485-2A42-4C95-9A10-3F1102E4EBBD"}]}]}],"references":[{"url":"http://secunia.com/advisories/35544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-08.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35469","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022440","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1861","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en memoria dinámica en Adobe Reader v7 y Acrobat v7 anteriores a v7.1.3, Adobe Reader v8 y Acrobat v8 anteriores a v8.1.6, y Adobe Reader v9 y Acrobat v9 anteriores a v9.1.2, podría permitir a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de un fichero PDF con un stream JPX (también conocido como JPEG2000) que inicia la corrupción de la memoria dinámica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35655","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022361","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/568153","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35295","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/568153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-161A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1862","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T20:30:00.233","lastModified":"2025-10-22T01:15:34.447","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.kb.cert.org/vuls/id/259425\r\n\r\n\"Adobe Flash is a widely deployed multimedia platform typically used to provide content in web sites. Adobe Flash Player, Reader, Acrobat, and other Adobe products include Flash support.\r\n\r\nAdobe Flash Player contains a code execution vulnerability. An attacker may be able to trigger this vulnerability by convincing a user to open a specially crafted Flash (SWF) file. The SWF file could be hosted or embedded in a web page or contained in a Portable Document Format (PDF) file. If an attacker can take control of a website or web server, trusted sites may exploit this vulnerability.\r\n\r\nThis vulnerability affects Adobe Flash versions 9.0.159.0 and 10.0.22.87 and earlier 9.x and 10.x versions. Adobe Reader 9, Acrobat 9, and other Adobe products (including Photoshop CS3, PhotoShop Lightroom, Freehand MX, Fireworks) provide Flash support independent of Flash Player. As of 2009-07-22, Adobe Reader 9.1.2 includes Flash 9.0.155.0, which is likely vulnerable to issues addressed by Flash 9.0.159.0\"","cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.","cisaVulnerabilityName":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009."},{"lang":"es","value":"Vulnerabilidad sin especificar en Adobe Reader , Acrobat de la v9.x a la v9.1.2 y Adobe Flash Player v9.x a la v9.0.159.0 y v10.x a la v10.0.22.87, permite a atacantes remotos ejecutar código de su elección a través de (1)una aplicación flash manipulada en un archivo .pdf o (2) un archivo .swf. Relacionado con el authplay.dll, como se ha explotado públicamente en julio del 2009."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.1.2","matchCriteriaId":"B9BDD6C1-0E21-40D1-9C94-C8D79F6AA217"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.1.2","matchCriteriaId":"D3D940BB-0388-471A-9691-CABE00466068"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.0.159.0","matchCriteriaId":"452F2EAC-9EFB-4899-8F2F-A1EE2B796BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndIncluding":"10.0.22.87","matchCriteriaId":"5113E8EC-D47F-4BAE-855E-915FA8870AE1"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://bugs.adobe.com/jira/browse/FP-1265","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=6847","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://news.cnet.com/8301-27080_3-10293389-245.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-03.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/259425","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35759","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://bugs.adobe.com/jira/browse/FP-1265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=6847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://news.cnet.com/8301-27080_3-10293389-245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/259425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/35759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1862","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-1863","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a \"privilege escalation vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados, relacionados con una vulnerabilidad de escalada de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35900","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52179","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1864","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35904","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1865","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a \"null pointer vulnerability.\""},{"lang":"es","value":"Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalizar la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados, relacionados con una vulnerabilidad de puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35906","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52182","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1866","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56774","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35901","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52186","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1867","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a \"clickjacking vulnerability.\""},{"lang":"es","value":"Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite que atacantes engañen al usuario para (1) pulsar en un enlace o (2) completar un diálogo, relacionado con una vulnerabilidad de \"clickjacking\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56775","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35905","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52183","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1868","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados relacionados con el análisis sintáctico de una URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35902","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52185","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1869","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer."},{"lang":"es","value":"Desbordamiento de entero en Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) o posiblemente ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56777","source":"cve@mitre.org"},{"url":"http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html","source":"cve@mitre.org"},{"url":"http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505467/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35907","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52181","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505467/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1870","sourceIdentifier":"cve@mitre.org","published":"2009-07-31T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a \"local sandbox vulnerability.\""},{"lang":"es","value":"Adobe Flash Player versiones anteriores a v9.0.246.0 y v10.x anteriores a v10.0.32.18, y Adobe AIR versiones anteriores a v1.5.2, permite que atacantes obtengan información sensible mediante vectores involucrados con el almacenamiento de un fichero SWF en el disco duro, relacionados con una vulnerabilidad en la \"sandbox\" local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"14F82070-F701-4F73-9E69-D694B0618B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697E64F5-0150-4542-B3C3-7443A00E8DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*","matchCriteriaId":"A4D16ACA-65FF-4FBD-818D-DF1606539687"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C2F45DC-32D8-4152-B090-C764B1998C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*","matchCriteriaId":"15DDE65E-ED35-42B6-A139-BB6F571B5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.22.87","matchCriteriaId":"C344DE1F-E67B-4B5D-9C2F-9E118C6220B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*","matchCriteriaId":"C00E5438-DBD7-4A47-8E5F-0D3946EA3102"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54D250C7-E7DE-491C-9FE3-F9F77C971B24"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3864","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35890","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35908","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52180","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1872","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Adobe ColdFusion Server 8.0.1 y anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) startRow para administrator/logviewer/searchlog.cfm o (2) mediante la cadena de petición para wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm o (4) administrator/enter.cfm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.1","matchCriteriaId":"2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"73DAF349-B29C-44D0-818B-8D665D2B35EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"7095177E-CF72-4B79-8FF4-DB9C4353CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D003D474-8CC0-4C68-917B-FD750A029E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E13C3EA-3137-4C41-BB77-BC2625E2C905"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*","matchCriteriaId":"98E63512-A7F5-404B-B334-FA1433BA1A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"720437A6-66D3-4DD6-A40F-23FC107AD710"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"53A802EA-FB56-4FBC-91C5-B824A8034FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"8B70C03A-1B4B-46D9-99CB-45EFB2109F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD8C938D-8194-4E86-AAB1-9AA984D81C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*","matchCriteriaId":"427F0A38-747D-42FC-88D5-48926487EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"DB570811-F637-4E86-8A0E-73F2F9B29126"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"7424F3BC-B8A0-4A45-8E36-16A10D0AD745"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*","matchCriteriaId":"8E7948AA-CB18-4666-B469-871F0680134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*","matchCriteriaId":"810E1B9C-E32F-4788-8705-67F855DC9EE6"}]}]}],"references":[{"url":"http://osvdb.org/57182","source":"cve@mitre.org"},{"url":"http://osvdb.org/57183","source":"cve@mitre.org"},{"url":"http://osvdb.org/57184","source":"cve@mitre.org"},{"url":"http://osvdb.org/57185","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=122","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505803/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/57182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505803/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1873","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the logfile parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en logging/logviewer.jsp en la consola de administración en Adobe JRun Application Server 4 Updater 7 permite a usuarios remotos autenticados leer ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"logfile\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"92AEE969-DBA5-4240-850B-E34CEC231052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:jrun:4.0:updater7:*:*:*:*:*:*","matchCriteriaId":"3F67F854-FE93-480F-B84A-C0EF9706F582"}]}]}],"references":[{"url":"http://osvdb.org/57186","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=152","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505808/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9443","source":"cve@mitre.org"},{"url":"http://osvdb.org/57186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505808/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1874","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos (XSS) en Management Console en Adobe JRun v4.0 permite a atacantes remotos inyectar script web o HTML a su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"92AEE969-DBA5-4240-850B-E34CEC231052"}]}]}],"references":[{"url":"http://osvdb.org/57187","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=151","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505804/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/57187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505804/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1875","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877."},{"lang":"es","value":"Múltiples vulnerabilidades de Ejecución de secuencias de comandos en sitios cruzados (XSS)  en Adobe ColdFusion v8.0.1 y anteriores permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores no especificados. Se trata de una vulnerabilidad diferente a CVE-2009-1877."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.1","matchCriteriaId":"2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"73DAF349-B29C-44D0-818B-8D665D2B35EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"7095177E-CF72-4B79-8FF4-DB9C4353CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D003D474-8CC0-4C68-917B-FD750A029E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E13C3EA-3137-4C41-BB77-BC2625E2C905"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*","matchCriteriaId":"98E63512-A7F5-404B-B334-FA1433BA1A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"720437A6-66D3-4DD6-A40F-23FC107AD710"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"53A802EA-FB56-4FBC-91C5-B824A8034FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"8B70C03A-1B4B-46D9-99CB-45EFB2109F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD8C938D-8194-4E86-AAB1-9AA984D81C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*","matchCriteriaId":"427F0A38-747D-42FC-88D5-48926487EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"DB570811-F637-4E86-8A0E-73F2F9B29126"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"7424F3BC-B8A0-4A45-8E36-16A10D0AD745"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*","matchCriteriaId":"8E7948AA-CB18-4666-B469-871F0680134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*","matchCriteriaId":"810E1B9C-E32F-4788-8705-67F855DC9EE6"}]}]}],"references":[{"url":"http://osvdb.org/57188","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1876","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a \"double-encoded null character vulnerability.\""},{"lang":"es","value":"Adobe ColdFusion v8.0.1 y anteriores podrían permitir a atacantes obtener información sensible a través de vectores no especificado, esto es relativo a la \"vulenrabilidad del caracter NU¨LL doblemente codificado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.1","matchCriteriaId":"2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"73DAF349-B29C-44D0-818B-8D665D2B35EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"7095177E-CF72-4B79-8FF4-DB9C4353CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D003D474-8CC0-4C68-917B-FD750A029E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E13C3EA-3137-4C41-BB77-BC2625E2C905"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*","matchCriteriaId":"98E63512-A7F5-404B-B334-FA1433BA1A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"720437A6-66D3-4DD6-A40F-23FC107AD710"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"53A802EA-FB56-4FBC-91C5-B824A8034FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"8B70C03A-1B4B-46D9-99CB-45EFB2109F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD8C938D-8194-4E86-AAB1-9AA984D81C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*","matchCriteriaId":"427F0A38-747D-42FC-88D5-48926487EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"DB570811-F637-4E86-8A0E-73F2F9B29126"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"7424F3BC-B8A0-4A45-8E36-16A10D0AD745"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*","matchCriteriaId":"8E7948AA-CB18-4666-B469-871F0680134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"}]}]}],"references":[{"url":"http://osvdb.org/57189","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1877","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Adobe ColdFusion 8.0.1 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados, una vulnerabilidad diferente que CVE-2009-1875."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.1","matchCriteriaId":"2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"73DAF349-B29C-44D0-818B-8D665D2B35EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"7095177E-CF72-4B79-8FF4-DB9C4353CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D003D474-8CC0-4C68-917B-FD750A029E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E13C3EA-3137-4C41-BB77-BC2625E2C905"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*","matchCriteriaId":"98E63512-A7F5-404B-B334-FA1433BA1A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"720437A6-66D3-4DD6-A40F-23FC107AD710"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"53A802EA-FB56-4FBC-91C5-B824A8034FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"8B70C03A-1B4B-46D9-99CB-45EFB2109F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD8C938D-8194-4E86-AAB1-9AA984D81C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*","matchCriteriaId":"427F0A38-747D-42FC-88D5-48926487EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"DB570811-F637-4E86-8A0E-73F2F9B29126"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"7424F3BC-B8A0-4A45-8E36-16A10D0AD745"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*","matchCriteriaId":"8E7948AA-CB18-4666-B469-871F0680134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*","matchCriteriaId":"810E1B9C-E32F-4788-8705-67F855DC9EE6"}]}]}],"references":[{"url":"http://osvdb.org/57190","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1878","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en Adobe ColdFusion v8.0.1 y versiones anteriores, que permite a los atacantes remotos, secuestrar una sesión web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.1","matchCriteriaId":"2E1F57AD-3FE8-45F5-ACAC-0AA2FE5FF74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"73DAF349-B29C-44D0-818B-8D665D2B35EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"7095177E-CF72-4B79-8FF4-DB9C4353CDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D003D474-8CC0-4C68-917B-FD750A029E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:linux:*:*:*:*:*","matchCriteriaId":"1E13C3EA-3137-4C41-BB77-BC2625E2C905"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.0:*:solaris:*:*:*:*:*","matchCriteriaId":"98E63512-A7F5-404B-B334-FA1433BA1A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"720437A6-66D3-4DD6-A40F-23FC107AD710"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"53A802EA-FB56-4FBC-91C5-B824A8034FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"8B70C03A-1B4B-46D9-99CB-45EFB2109F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"FD8C938D-8194-4E86-AAB1-9AA984D81C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:6.1:*:solaris:*:*:*:*:*","matchCriteriaId":"427F0A38-747D-42FC-88D5-48926487EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"31D67D32-16BD-437C-8423-4704364EE737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*","matchCriteriaId":"FEF92A65-AE47-4A8B-BCBF-E8839A88A1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"B9C93E8B-6AD0-473C-9161-C71E03BFDEC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"DB570811-F637-4E86-8A0E-73F2F9B29126"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"7424F3BC-B8A0-4A45-8E36-16A10D0AD745"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B015715F-9672-480E-B0AA-968D8C9070D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:7.2:unknown:mx:*:*:*:*:*","matchCriteriaId":"8E7948AA-CB18-4666-B469-871F0680134A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*","matchCriteriaId":"DD6C1877-7412-4FBE-9641-334971F9D153"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*","matchCriteriaId":"810E1B9C-E32F-4788-8705-67F855DC9EE6"}]}]}],"references":[{"url":"http://osvdb.org/57191","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1879","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified requiredMajorVersion value, allows remote attackers to inject arbitrary web script or HTML via the query string."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.template.html en las plantillas express-install en el SDK de Adobe Flex en versiones anteriores a la 3.4, cuando la versión de Flash instalada es anterior a la especificada en el valor requiredMajorVersion, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la cadena de petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flex_sdk:*:*:*:*:*:*:*:*","versionEndExcluding":"3.4","matchCriteriaId":"1127C241-FDFC-4094-A041-9644D0FFF65B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022748","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gdssecurity.com/l/b/2009/08/20/adobe-flex-3-3-sdk-dom-based-xss/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505948/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52608","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gdssecurity.com/l/b/2009/08/20/adobe-flex-3-3-sdk-dom-based-xss/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1880","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) model.php and (2) config.php with timestamps before 20090521."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MT312 REP-BBS permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con (1) model.php y (2) config-php con timestamp anteriores a 20090521."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mt312:rep-bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"87CAD9CC-AA99-4992-AB8D-CCAD750F95E6"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN01115659/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000033.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35251","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN01115659/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1881","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to model.php with a timestamp before 20090521."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en MT312 IMG-BBS permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con model.php con un time stamp anterior a 20090521."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mt312:img-bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"CB34B3D6-32A6-418A-98BD-2FA2E0794515"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN70836284/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000034.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35275","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN70836284/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-1882","sourceIdentifier":"cve@mitre.org","published":"2009-06-02T15:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de entero en la función XMakeImage en magick/xwindow.c en ImageMagick v6.5.2-8 permite a atacantes remotos producir una denegación de servicio (caída) y posiblemente ejecutar arbitraria a través de un fichero TIFF manipulado, lo que inicia el desbordamiento de búfer. NOTA: Algunos detalles fueron obtenidos de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.5.2-8:*:*:*:*:*:*:*","matchCriteriaId":"35578647-CFFF-4005-9C4C-111B7B1EFFE5"}]}]}],"references":[{"url":"http://imagemagick.org/script/changelog.php","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/54729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35382","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36260","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37959","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/55721","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201311-10.xml","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2010-0074","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1858","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/08/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/514516/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35111","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1449","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/784-1/","source":"cve@mitre.org"},{"url":"http://imagemagick.org/script/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033833.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201311-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2010-0074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/08/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/514516/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/784-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1883","sourceIdentifier":"secalert@redhat.com","published":"2009-09-18T10:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage."},{"lang":"es","value":"La función z90crypt_unlocked_ioctl en el controlador z90crypt del kernel de Linux v2.6.9, no realiza una comprobaciónd e capacidad en la operación Z90QUIESCE, esto permite a usuarios locales elevar los privilegios euid 0 para forzar una parada en el controlador."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect kernel packages as shipped in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 1.\n\nIt was addressed in Red Hat Enterprise Linux 4 via https://rhn.redhat.com/errata/RHSA-2009-1438.html .\n\nThis issue has been rated as having moderate security impact.\n\nIt is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2009-09-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36759","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/15/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/15/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=505983","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9513","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/15/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=505983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1884","sourceIdentifier":"secalert@redhat.com","published":"2009-08-19T17:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en la función bzinflate en Bzip2.xs en el módulo Compress-Raw-Bzip2 anterior a v2.018 para Perl permite a atacantes dependientes de contexto producir una denegación de servicio (cuelgue de aplicación o caída) a través de un stream comprimido de bzip2 que inicia un desbordamiento de búfer, una situación parecida a CVE-2009-1391."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.017","matchCriteriaId":"6C58C65A-621E-4EF4-ACD2-2B26ED08EA48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_10:*:*:*:*:*:*:*","matchCriteriaId":"60FA80AE-D536-4323-9628-514C262DA129"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_12:*:*:*:*:*:*:*","matchCriteriaId":"B324E22C-0273-42C5-BF76-4C54AF6578A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_14:*:*:*:*:*:*:*","matchCriteriaId":"CD46A223-9CB9-48A4-B52D-8621B87AAAA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"B51D3C0F-0537-4240-841B-70B21DBD4C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"3D5A547D-5E85-4257-A71D-63078C5FF30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"86CB8226-B0EC-4CB9-9678-6B127679A31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.05:*:*:*:*:*:*:*","matchCriteriaId":"2F2C6E05-1CD8-4450-A101-3C2270A64B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.06:*:*:*:*:*:*:*","matchCriteriaId":"D38E1A94-AA44-48AE-84A4-5C64451DFE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.08:*:*:*:*:*:*:*","matchCriteriaId":"79442C31-96B2-4CEA-9AEB-DB7F332E938C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.09:*:*:*:*:*:*:*","matchCriteriaId":"802DF28F-724C-49E8-920E-E6CBA8E296DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.010:*:*:*:*:*:*:*","matchCriteriaId":"C5C1D31B-123E-4294-81B6-46E4241C16DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.011:*:*:*:*:*:*:*","matchCriteriaId":"A3F7EC80-16B6-4754-A8BE-28782D2FDC86"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.012:*:*:*:*:*:*:*","matchCriteriaId":"9FA78C9F-1925-4435-BFBD-129836C12238"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.014:*:*:*:*:*:*:*","matchCriteriaId":"8E299424-8560-4DCF-BDC1-8F88F0E7E8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.015:*:*:*:*:*:*:*","matchCriteriaId":"3026DDC6-DDCF-4244-A657-B45FAA6E4942"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/36386","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36415","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200908-07.xml","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36082","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=281955","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518278","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52628","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00982.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00999.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=281955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00982.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00999.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1885","sourceIdentifier":"secalert@redhat.com","published":"2009-08-11T18:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in \"simply nested DTD structures,\" as demonstrated by the Codenomicon XML fuzzing framework."},{"lang":"es","value":"Vulnerabilidad de agotamiento de pila en validators/DTD/DTDScanner.cpp en Apache Xerces C++ v2.7.0 y v2.8.0 permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de vectores que incluyen el uso de paréntesis anidados y unos valores de byte no validos en \"estructuras simples anidadas DTD\", como se demostro en Codenomicon XML fuzzing framework."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-1885\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future xerces-c packages update in Red Hat Enterprise MRG 1.1 may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-08-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"00E71C8D-D4DF-4F54-8CF8-D2AA67AC5690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"1C868E93-96F3-4199-83C8-B5055629911A"}]}]}],"references":[{"url":"http://secunia.com/advisories/36201","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp?r1=781488&r2=781487&pathrev=781488&view=patch","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=781488","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"secalert@redhat.com"},{"url":"http://www.codenomicon.com/labs/xml/","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:223","source":"secalert@redhat.com"},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35986","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2196","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515515","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52321","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01001.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01099.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01136.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01150.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp?r1=781488&r2=781487&pathrev=781488&view=patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=781488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.codenomicon.com/labs/xml/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01099.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01150.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1886","sourceIdentifier":"secalert@redhat.com","published":"2009-06-25T01:30:01.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en client/client.c en smbclient en Samba v3.2.0 hasta v3.2.12 podría permitir dependiendo del contexto a atacantes ejecutar código de su elección a través del formato de cadena especificado en un nombre de fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-06-29T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"}]}]}],"references":[{"url":"http://secunia.com/advisories/35539","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35573","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35606","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36918","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1823","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:196","source":"secalert@redhat.com"},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2009-1886.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35472","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022441","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1664","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=6478","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51328","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2009-1886.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=6478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1887","sourceIdentifier":"secalert@redhat.com","published":"2009-06-26T18:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309."},{"lang":"es","value":"agent/snmp_agent.c en snmpd en net-snmp 5.0.9 en Red Hat Enterprise Linux (RHEL) 3 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una petición SNMP GETBULK manipulada que dispara un error de división por 0. NOTA: esta vulnerabilidad existe debido a una corrección incorrecta para CVE-2008-4309."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C872A9B0-0B3C-47B2-82F5-344BEBA221CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:156","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1124.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=506903","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8426","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9716","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1124.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=506903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-1888","sourceIdentifier":"secalert@redhat.com","published":"2009-06-25T01:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory."},{"lang":"es","value":"La función acl_group_override en smbd/posix_acls.c en smbd en Samba v3.0.x anterior a v3.0.35, v3.1.x y v3.2.x anterior a v3.2.13, y v3.3.x anterior 3.3.6, cuando el modo de fichero dos está habilitado, permite a atacantes remotos modificar la lista de control de acceso para ficheros a través de vectores relacionados con acceso de lectura a memoria sin inicializar."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect Red Hat Enterprise Linux 3.\n\nIt was addressed in Red Hat Enterprise Linux 4 and 5 via RHSA-2009:1529:\nhttps://rhn.redhat.com/errata/RHSA-2009-1529.html\n","lastModified":"2009-10-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.31","versionEndIncluding":"3.0.35","matchCriteriaId":"EC3937D6-7AD9-4319-92E9-C6A01927A167"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.13","matchCriteriaId":"0D1C58C8-7E57-4C73-9C6D-5A8512A31276"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"2425AB5F-EB80-45AF-88CA-4A1A29824BF4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://secunia.com/advisories/35539","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35573","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35606","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1823","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:196","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch","source":"secalert@redhat.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.3.5-CVE-2009-1888.patch","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2009-1888.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35472","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022442","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1664","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51327","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/ftp/patches/security/samba-3.3.5-CVE-2009-1888.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2009-1888.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1889","sourceIdentifier":"secalert@redhat.com","published":"2009-07-01T13:00:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory."},{"lang":"es","value":"La implementación del protocolo OSCAR  en Pidgin anterior a v2.5.8 no interpreta el tipo de mensaje ICQWebMessage como tipo ICQSMS, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un mensaje web ICQ manipulado que lanza una asignación de una gran cantidad de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.7","matchCriteriaId":"3B3467B6-656E-4749-B70B-820049084F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"777EF35C-195A-4784-986D-3811CF1DCF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*","matchCriteriaId":"F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E593BFF0-650E-4EDB-BF65-C509C8A807C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*","matchCriteriaId":"01256F83-6E67-409A-B99A-6E27E83DA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"}]}]}],"references":[{"url":"http://developer.pidgin.im/ticket/9483","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://pidgin.im/pipermail/devel/2009-May/008227.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/35693","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35697","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35706","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37071","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1139.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35530","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-796-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1749","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508738","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51448","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/ticket/9483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://pidgin.im/pipermail/devel/2009-May/008227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1139.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-796-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1890","sourceIdentifier":"secalert@redhat.com","published":"2009-07-05T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests."},{"lang":"es","value":"La función stream_reqbody_cl de mod_proxy_http.c en el módulo mod_proxy del Servidor HTTP de Apache anterior a v2.3.3, cuando está configurado un proxy inverso, no maneja adecuadamente un flujo de datos que exceda el valor de Content-Length (Longitud del Contenido), esto permite a atacantes remotos provocar una denegación de servicio (consumo de la CPU) a través de una solicitud manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.12","matchCriteriaId":"8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"941713DB-B1DE-4953-9A9C-174EAFDCB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F87B994-28E4-4095-8770-6433DE9C93AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/55553","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35691","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35721","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35793","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35865","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37152","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=790587&r2=790586&pathrev=790587","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?revision=790587","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=790587&r2=790586&pathrev=790587","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=790587","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0142","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91259","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:149","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1156.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507852/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507857/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35565","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022509","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-802-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb33be0aa9bd8cac9536293e3821dcd4cf8180ad95a8036eedd46365e%40%3Cusers.mina.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12330","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8616","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9403","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1148.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/55553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/35865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=790587&r2=790586&pathrev=790587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?revision=790587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=790587&r2=790586&pathrev=790587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=790587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507852/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507857/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-802-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb33be0aa9bd8cac9536293e3821dcd4cf8180ad95a8036eedd46365e%40%3Cusers.mina.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1891","sourceIdentifier":"secalert@redhat.com","published":"2009-07-10T15:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption)."},{"lang":"es","value":"El módulo mod_deflate en Apache httpd v2.2.11 y anteriores comprime archivos de gran tamaño  hasta finalizar incluso después de que la conexión de red asociada está cerrada, lo cual permite a atacantes remotos provocar una denegación de servicio (consumo de CPU)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.64","matchCriteriaId":"838655CB-43E7-4BDA-A80C-2314C9870717"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.12","matchCriteriaId":"8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"941713DB-B1DE-4953-9A9C-174EAFDCB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F87B994-28E4-4095-8770-6433DE9C93AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/55782","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35721","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35781","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35793","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35865","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0142","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:149","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1156.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507857/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022529","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-802-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1841","source":"secalert@redhat.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=509125","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12361","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8632","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9248","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1148.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/55782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507857/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-802-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=509125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1892","sourceIdentifier":"secalert@redhat.com","published":"2009-07-17T16:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests."},{"lang":"es","value":"dhcpd en ISC DHCP v3.0.4 y v3.1.1, cuando se utilizan de forma simultánea el identificador de cliente dhcp y la configuración de hardware ethernet, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de una petición no especificada."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  Red Hat Enterprise Linux 3, 4, and 5 provide earlier versions of ISC DHCP which are not vulnerable to this issue.","lastModified":"2009-07-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1269D9FF-C497-4FA5-90DA-302A9FC1EB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.4_b1:*:*:*:*:*:*:*","matchCriteriaId":"34BCCA79-76A8-494A-94CA-BB8FA11891DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.4_b2:*:*:*:*:*:*:*","matchCriteriaId":"5442D329-81D5-4891-A063-FC6A07D7E1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.4_b3:*:*:*:*:*:*:*","matchCriteriaId":"14F64C1F-92E7-4190-9472-046F34C28539"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"22D732C6-F89B-4FCA-A949-3F67B4E7A7F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/35830","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35851","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36457","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37342","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1833","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:154","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35669","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51717","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1893","sourceIdentifier":"secalert@redhat.com","published":"2009-07-17T16:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the \"dhcpd -t\" command."},{"lang":"es","value":"La función configtest en la secuencia de comandos de inicio del DHCPD en Red Hat para DHCP 3.0.1 en Red Hat Enterprise Linux (RHEL) 3 permite a usuarios locales sobrescribir ficheros de su elección a través de un ataque de enlace simbólico sobre un fichero temporal no especificado, relativo al comando \"dhcpd -t\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:as:*:*:*:*:*","matchCriteriaId":"327FEE54-79EC-4B5E-B838-F3C61FCDF48E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:es:*:*:*:*:*","matchCriteriaId":"056C1C15-D110-4309-A9A6-41BD753FE4F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:ws:*:*:*:*:*","matchCriteriaId":"08392974-5AC1-4B12-893F-3F733EF05F80"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1E94449B-6FB0-4E4D-9D92-144A1C474761"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc10:*:*:*:*:*:*","matchCriteriaId":"6824B249-D222-4F29-8C29-E92071F12621"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc11:*:*:*:*:*:*","matchCriteriaId":"2F7A3F32-C297-4331-9B8D-1CF8F3D32315"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc12:*:*:*:*:*:*","matchCriteriaId":"B4959ABA-9F2E-4003-9566-DBE3177AE233"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc13:*:*:*:*:*:*","matchCriteriaId":"0CE2A3CA-EFB6-4547-BED8-CAC39156F10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc14:*:*:*:*:*:*","matchCriteriaId":"5DE205EE-F708-4E4A-A861-EBF6D3C062F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"BD8EBBF0-A61B-4FF0-B055-9BA2A21617A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc5:*:*:*:*:*:*","matchCriteriaId":"B3141202-993D-4E80-9EAD-ACA6C1343D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc6:*:*:*:*:*:*","matchCriteriaId":"6E0768D1-37D3-4C17-A3A9-94EA237392AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc7:*:*:*:*:*:*","matchCriteriaId":"F167B922-DD9E-4DD1-BB8F-B232711BACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc8:*:*:*:*:*:*","matchCriteriaId":"4E23602E-FFA1-49E2-BF4C-BC5D074517B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp:3.0.1:rc9:*:*:*:*:*:*","matchCriteriaId":"8DA200FE-D261-4532-AC63-1208611AFE46"}]}]}],"references":[{"url":"http://secunia.com/advisories/35831","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022554","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1154.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35670","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510024","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51718","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11597","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6440","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1894","sourceIdentifier":"secalert@redhat.com","published":"2009-07-17T16:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink."},{"lang":"es","value":"Condición de carrera en PulseAudio v0.9.9, v0.9.10, y v0.9.14 permite a usuarios locales conseguir privilegios a través de vectores que implican la creación de \"hard links\", relativo a fijar la configuración de LD_BIND_NOW a 1, y entonces, llamar a execv con el objetivo /proc/self/exe symlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulseaudio:pulseaudio:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"3B3F828E-51A2-4B02-8E74-449AAF5D1534"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulseaudio:pulseaudio:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"8C7A5FDE-F1D3-4872-8FEA-422187E170F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulseaudio:pulseaudio:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"EFD34EC3-9E40-411C-9BF7-279B93EAE73D"}]}]}],"references":[{"url":"http://blog.cr0.org/2009/07/old-school-local-root-vulnerability-in.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35868","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35886","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35896","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200907-13.xml","source":"secalert@redhat.com"},{"url":"http://taviso.decsystem.org/research.html","source":"secalert@redhat.com"},{"url":"http://www.akitasecurity.nl/advisory.php?id=AK20090602","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1838","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:152","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:171","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/505052/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35721","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/usn-804-1","source":"secalert@redhat.com"},{"url":"https://admin.fedoraproject.org/updates/pulseaudio-0.9.10-1.el5.2","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510071","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51804","source":"secalert@redhat.com"},{"url":"http://blog.cr0.org/2009/07/old-school-local-root-vulnerability-in.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://taviso.decsystem.org/research.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.akitasecurity.nl/advisory.php?id=AK20090602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505052/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/usn-804-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://admin.fedoraproject.org/updates/pulseaudio-0.9.10-1.el5.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1895","sourceIdentifier":"secalert@redhat.com","published":"2009-07-16T15:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR)."},{"lang":"es","value":"El subsistema de personalidad en el Linux kernel anterior a v2.6.31-rc3 tiene establecido que PER_CLEAR_ON_SETID no borre las banderas ADDR_COMPAT_LAYOUT y MMAP_PAGE_ZERO cuando ejecuta un programa setuid o setgid, lo que facilita a usuarios locales aprovechar los detalles del uso actual de memoria para (1) llevar a cabo ataques de deferencia a punteros NULOS, (2) evitar el mecanismo de protección mmap_min_addr o (3) rechazar  aleatoriamente el espacio en la capa  de direcciones (ASLR)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"EA80C8C8-30E5-4DC6-B3CC-2BA506FBEC8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6","source":"secalert@redhat.com"},{"url":"http://patchwork.kernel.org/patch/32598/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35801","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36045","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36054","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36116","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/55807","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35647","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1866","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/bugs/cve/2009-1895","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/32598/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/55807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/bugs/cve/2009-1895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1896","sourceIdentifier":"secalert@redhat.com","published":"2009-08-10T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least one of the listed jar files is trusted, which allows context-dependent attackers to execute arbitrary code without the untrusted-code restrictions via a crafted application, related to NetX."},{"lang":"es","value":"La Java Web Start framework en IcedTea de OpenJDK en versiones anteriores a v1.6.0.0-20.b16.fc10 de Fedora 10, y anteriores a 1.6.0.0-27.b16.fc11 en Fedora 11, confía en toda una aplicación cuando al menos uno de los ficheros jar listados es confiable, lo que permite a atacantes depedientes del contexto ejecutar código de su elección sin restricciones de código no confiable a través de una aplicación modificada, relacionado con NetX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":false,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0.0","matchCriteriaId":"2B741611-EC22-410E-805F-010EB68FE309"}]}]}],"references":[{"url":"http://secunia.com/advisories/36162","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512101","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1897","sourceIdentifier":"secalert@redhat.com","published":"2009-07-20T17:30:54.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks gcc option is omitted, allows local users to gain privileges via vectors involving a NULL pointer dereference and an mmap of /dev/net/tun, a different vulnerability than CVE-2009-1894."},{"lang":"es","value":"La función tun_chr_poll en drivers/net/tun.c en el subsistema tun del kernel de Linux v2.6.30 y v2.6.30.1, cuando se omite la opción -fno-delete-null-pointer-checks en gcc, permite a atacantes locales obtener privilegios a través de vectores que implican desreferenciacion de punteros NULL y un nmap de /dev/net/tun, es una vulnerabilidad diferente a CVE-2009-1894."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-1897\n\nThe flaw only affects the Red Hat Enterprise Linux 5.4 beta kernel, which includes a backport of the upstream bug fix introducing this flaw (git commit 33dccbb0). This issue did not affect the final released Red Hat Enterprise Linux 5.4 kernel.  It is also possible to mitigate this flaw by ensuring that the permissions for /dev/net/tun is restricted to root only.\n\nThis issue does not affect any other released kernel in any Red Hat product.","lastModified":"2009-09-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html","source":"secalert@redhat.com"},{"url":"http://article.gmane.org/gmane.linux.network/124939","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13","source":"secalert@redhat.com"},{"url":"http://grsecurity.net/~spender/cheddar_bay.tgz","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://isc.sans.org/diary.html?storyid=6820","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/7/6/19","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35839","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/17/1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1925","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512284","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51803","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://article.gmane.org/gmane.linux.network/124939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://grsecurity.net/~spender/cheddar_bay.tgz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://isc.sans.org/diary.html?storyid=6820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/7/6/19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/17/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1898","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network."},{"lang":"es","value":"la página de \"secure login\" en el componente Administrative console en IBM WebSphere Application Server (WAS)v6.0.2 anterior a v6.0.2.35 no redirecciona a una página https hasta que recibe una petición http, lo que facilita a atacantes remotos la lectura de los contenidos de las sesiones WAS capturando paquetes de la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.33","matchCriteriaId":"37136805-596C-4FE4-896C-15FFF1E109D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"}]}]}],"references":[{"url":"http://secunia.com/advisories/35301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK77010","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35405","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51170","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK77010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1899","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authenticated users to obtain sensitive information via unknown use of the wsadmin scripting tool, related to a \"security exposure in wsadmin.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Management/Repository en IBM WebSphere Application Server (WAS) v6.0.2 anterior a 6.0.2.35 tiene un impacto y vectores de ataque desconocidos. Relacionado con \"exposición de seguridad en wsadmin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.33","matchCriteriaId":"37136805-596C-4FE4-896C-15FFF1E109D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"}]}]}],"references":[{"url":"http://secunia.com/advisories/35301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK77495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35405","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52075","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK77495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1900","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool."},{"lang":"es","value":"El Configservice APIs en el  Administrative Console component en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.35, permite a atacantes obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.33","matchCriteriaId":"37136805-596C-4FE4-896C-15FFF1E109D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"}]}]}],"references":[{"url":"http://secunia.com/advisories/35301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35405","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51171","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52077","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK84999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1901","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits \"non-standard http methods,\" which has unknown impact and remote attack vectors."},{"lang":"es","value":"El componente Security en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.35 permite ·métodos http no estándares\" que tienen vectores de ataque e impacto desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2.33","matchCriteriaId":"37136805-596C-4FE4-896C-15FFF1E109D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK73246","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35405","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51173","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK73246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1902","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference."},{"lang":"es","value":"El procesador multipart en ModSecurity anterior a v2.5.9, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición multipart form datapost con un \"part header name\" perdido, lo que provoca una deferencia a puntero nulo (NULL)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.9","matchCriteriaId":"4ADDC663-AE89-4AFF-84EA-698613A17A12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34256","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34311","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35687","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=667542&group_id=68846","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/52553","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/501968","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34096","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0703","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49212","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8241","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/34256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=667542&group_id=68846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/52553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/501968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1903","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T17:00:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PDF XSS protection feature in ModSecurity before 2.5.8 allows remote attackers to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method."},{"lang":"es","value":"La funcionalidad de protección de PDF XSS en ModSecurity anterior a v2.5.8, permite a atacantes remotos provocar una denegación de servicio (caída del httpd Apacche) a través de una petición a un archivo PDF que no emplea el método GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trustwave:modsecurity:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.8","matchCriteriaId":"69C158C1-C19E-4913-9ED1-3E54E83285A2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://secunia.com/advisories/34256","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34311","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35687","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-02.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=667538","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/52552","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34096","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0703","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49211","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=667538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/52552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/34096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/0703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00487.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00529.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1904","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T21:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type."},{"lang":"es","value":"La librería BigDecimal en Ruby v1.8.6 anteriores p369 y v1.8.7, anteriores a p173 permite a los atacantes dependientes del contexto causar una denegación de servicio (caída de la aplicación) a través de un argumento de cadena de caracteres que representa un número largo, como se demuestra por un intento de conversión al tipo de dato Float."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"876B2575-4F81-4A70-9A88-9BEE44649626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532689","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=273213","source":"cve@mitre.org"},{"url":"http://github.com/NZKoz/bigdecimal-segfault-fix/tree/master","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://groups.google.com/group/rubyonrails-security/msg/fad60751e2b9b4f6?dmode=source","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://mail-index.netbsd.org/pkgsrc-changes/2009/06/10/msg024708.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55031","source":"cve@mitre.org"},{"url":"http://redmine.ruby-lang.org/issues/show/794","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35593","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35699","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35937","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37705","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200906-02.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.430805","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://weblog.rubyonrails.org/2009/6/10/dos-vulnerability-in-ruby/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:160","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1140.html","source":"cve@mitre.org"},{"url":"http://www.ruby-forum.com/topic/189071","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35278","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022371","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-805-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1563","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/bugs/385436","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/bugs/cve/2009-1904","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51032","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9780","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00731.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=273213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://github.com/NZKoz/bigdecimal-segfault-fix/tree/master","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://groups.google.com/group/rubyonrails-security/msg/fad60751e2b9b4f6?dmode=source","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-index.netbsd.org/pkgsrc-changes/2009/06/10/msg024708.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://redmine.ruby-lang.org/issues/show/794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200906-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.430805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2009/6/10/dos-vulnerability-in-ruby/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-forum.com/topic/189071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-805-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/bugs/385436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/bugs/cve/2009-1904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00731.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1905","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T21:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors."},{"lang":"es","value":"El componente Code Infrastructure en IBM DB2 v8 anterior a FP17 v9.1, anterior a FP7, y v9.5 anterior a FP4, cuando están activadas la seguridad LDAP (aka IBMLDAPauthserver) y las vinculaciones (bind) anónimas, permite a atacantes remotos evitar la autenticación mediante contraseña y establecer una conexión con la base de datos a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"8A94F484-424C-4DF3-9327-95CFC7B4A83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp4:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"D205DCFE-B7B2-424F-9C50-AE7E9250F2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*","versionEndIncluding":"9.5","matchCriteriaId":"DED8AD3B-99A5-4531-8762-A80B22B05C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fix_pack15:*:*:*:*:*:*","matchCriteriaId":"7D94A061-0B20-4FCA-B2C0-1564F7EF0113"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/31787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022319","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32268","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32272","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32273","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35171","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36540","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50909","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/31787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21318189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1906","sourceIdentifier":"cve@mitre.org","published":"2009-06-03T21:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party DataDirect JDBC driver 3.7.32."},{"lang":"es","value":"El componente DRDA Services en IBM DB2 v9.1 anterior a FP7 y v9.5 anterior a FP4, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de una dirección IPv6 en el testigo de correlación  en la cadena APPID, como se ha demostrado enviando una cadena APPID por el controlador de terceros DataDirect JDBC v3.7.32."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"FA8ABABB-F84D-41F0-A894-56911AF6E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"}]}]}],"references":[{"url":"http://secunia.com/advisories/35235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38874","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35171","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1907","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en claroline/linker/notfound.php en Claroline v1.8.11 permite a los atacante remoto inyectar arbitrariamente una secuencia de comandos web o HTML a través de la cabecera HTTP Referer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claroline:claroline:1.8.11:*:*:*:*:*:*:*","matchCriteriaId":"5AEDBF98-5293-4FAF-BC4D-18A9B1D50EE1"}]}]}],"references":[{"url":"http://forum.claroline.net/viewtopic.php?f=69&t=16193&p=42102#p42099","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503365/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34883","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1022198","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50404","source":"cve@mitre.org"},{"url":"http://forum.claroline.net/viewtopic.php?f=69&t=16193&p=42102#p42099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503365/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1022198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1908","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS en) en Skip v1.0.2 y anteriores, y v1.1RC2 anteriores a versiones v1.1RC,permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"6627567A-C9A1-4E36-869D-B6742879B1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:*:rc:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"3594018B-142D-4248-86D3-8407EAA977D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"BB302414-BA9A-4C74-B9F6-6ECEB624D919"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2BD612E3-9D4C-4927-BAD7-219FA007C3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B0DEEDB5-8F0B-4935-AC17-4A44CDC57B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ED3E5318-0969-445B-9358-9D080D745183"}]}]}],"references":[{"url":"http://dev.openskip.org/redmine/issues/show/677","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN43233160/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html","source":"cve@mitre.org"},{"url":"http://portal.openskip.org/top/releasenote-ver1-0-0","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34898","source":"cve@mitre.org"},{"url":"http://dev.openskip.org/redmine/issues/show/677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN43233160/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://portal.openskip.org/top/releasenote-ver1-0-0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1909","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Skip v1.0.2 y anteriores, y v1.1RC2 anteriores a versiones 1.1RC, permite a los atacantes ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"6627567A-C9A1-4E36-869D-B6742879B1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:*:rc:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"3594018B-142D-4248-86D3-8407EAA977D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:*:rc2:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"BB302414-BA9A-4C74-B9F6-6ECEB624D919"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2BD612E3-9D4C-4927-BAD7-219FA007C3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B0DEEDB5-8F0B-4935-AC17-4A44CDC57B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openskip:skip:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ED3E5318-0969-445B-9358-9D080D745183"}]}]}],"references":[{"url":"http://dev.openskip.org/redmine/issues/show/677","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN03114223/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html","source":"cve@mitre.org"},{"url":"http://portal.openskip.org/top/releasenote-ver1-0-0","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34898","source":"cve@mitre.org"},{"url":"http://dev.openskip.org/redmine/issues/show/677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN03114223/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://portal.openskip.org/top/releasenote-ver1-0-0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1910","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in RTWebalbum 1.0.462 allows remote attackers to execute arbitrary SQL commands via the AlbumId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en RTWebalbum v1.0.462 permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro AlbumId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rafal_kucharski:rtwebalbum:1.0.462:*:*:*:*:*:*:*","matchCriteriaId":"1B0FD519-40B1-43A3-8393-2E2981498573"}]}]}],"references":[{"url":"http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/","source":"cve@mitre.org"},{"url":"http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/index.php?view=log","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35022","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503374/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34888","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50406","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8648","source":"cve@mitre.org"},{"url":"http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rtwebalbum.svn.sourceforge.net/viewvc/rtwebalbum/index.php?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503374/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1911","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en .include/init.php (también conocido como admin/_include/init.php) en QuiXplorer v2.3.2 y anteriores, utilizado en TinyWebGallery v1.7.6 y anteriores, permite a los atacantes remotos, incluir y ejecutar arbitrariamente archivos locales a través de ..(punto punto) en el parámetro \"lang\" para admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.6","matchCriteriaId":"EA7075F8-B97F-4B8D-8BB4-A4990FFA1604"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC860783-7018-4421-8ACE-6F6C522E41DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"21630514-7C0A-4B74-8E3A-4F32F9366EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.01:*:*:*:*:*:*:*","matchCriteriaId":"C5E4CEDD-095B-40E1-9AD5-419CC63CAA50"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"50C5722B-0221-4CE2-84E9-C4A6007DFB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"634AAE01-C70F-4B79-9FFB-E902AED7A6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.02:*:*:*:*:*:*:*","matchCriteriaId":"0D2F0E0E-D32E-49C0-8710-B93E9D825925"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"91115B08-3533-4027-B80A-3CDFDC38A915"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.3:*:*:*:*:*:*:*","matchCriteriaId":"CFE1A1DE-DD29-4A96-B483-1CA2B5AA59F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.03:*:*:*:*:*:*:*","matchCriteriaId":"1F0C7694-9978-4F85-8B81-A5AA558780BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.3a:*:*:*:*:*:*:*","matchCriteriaId":"26CDEB37-98C9-42AD-BC50-415FEF0E5943"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"C5A20998-E0B8-4AA4-9525-16451E163EDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.3c:*:*:*:*:*:*:*","matchCriteriaId":"4F8E7335-EEA2-42AB-BFB3-D2F00303419F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.04:*:*:*:*:*:*:*","matchCriteriaId":"D3EE4A5E-DE0F-45E1-8950-53A1C35AEF15"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4:*:*:*:*:*:*:*","matchCriteriaId":"FEF8C28C-3AE4-4031-949A-B120097B93EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"08EB1FD6-A790-40D0-A931-EAD9983D983C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E6D0D3-10F2-4D8C-BC26-BA4AB513B33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"16028F35-AE2B-4C10-96C5-8C3ABBD59B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"372DA1CA-691A-4510-9ECE-86B4914ABE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E99F2224-6DF4-4E8F-B5AD-6D474C4F27D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"99C0289F-F5D6-46D1-9D5F-4BBB7762E396"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"864C47CE-7BE4-4927-83F1-F563C3E12034"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"04274BC9-E353-4FD9-8BB6-7F431453B95C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A9BA5727-3AD1-4169-8E94-231BD2CAFD24"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.05:*:*:*:*:*:*:*","matchCriteriaId":"73AD8BD9-03BB-4E89-9D4D-50D095C38F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7468212F-EB58-4E20-888B-679D4242AC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.0.1_15.08.2006:*:*:*:*:*:*:*","matchCriteriaId":"9D00E3AF-4649-4AE6-AD50-1166BC89FC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.0.2_17.08.2006:*:*:*:*:*:*:*","matchCriteriaId":"4B0E1423-82D3-42E8-B90E-E0A2DECF9948"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.1_03.09.2006:*:*:*:*:*:*:*","matchCriteriaId":"511C256A-649F-47AD-88A7-4DF6CCAB4DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.2.1_20.09.2006_1000:*:*:*:*:*:*:*","matchCriteriaId":"A35930C6-663F-49A8-9C05-5F9CC985ABE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.2.2_21.09.2006_1000:*:*:*:*:*:*:*","matchCriteriaId":"19C91295-E4A9-45B8-916F-7A34BF553611"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.2_17.09.2006_1000:*:*:*:*:*:*:*","matchCriteriaId":"0028B129-B45A-46A8-BD09-D3F8B383B9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.3.1_11.10.2006_1000:*:*:*:*:*:*:*","matchCriteriaId":"A1B7DE42-BE41-4827-966F-BFE294CD9F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.3.2_12.10.2006_1000:*:*:*:*:*:*:*","matchCriteriaId":"2D2C36F4-9F45-4E37-923A-5A3650132997"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.3_08.10.2006_1000:*:*:*:*:*:*:*","matchCriteriaId":"F324A21B-69A7-4618-BB0B-0A5BF85A8655"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.4_13.10.2006:*:*:*:*:*:*:*","matchCriteriaId":"B2772FF4-E46F-4859-B7B1-BA1E2966BEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.5.5_30.10.2006_2200:*:*:*:*:*:*:*","matchCriteriaId":"660D356C-164C-47DA-8DB4-9E45DD876FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.6:*:*:*:*:*:*:*","matchCriteriaId":"080E4F0F-16E8-402F-9A11-2326469D65C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC23AAE-37F6-4842-9BB7-E46BB6348B1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"48F8B14D-F020-4C93-A9A6-EEBF14A910B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"2FFFABF7-960A-4BB9-BCCC-C7CB4FCEA946"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.6.3.4:*:*:*:*:*:*:*","matchCriteriaId":"09EE1C8F-F520-4E77-BF1E-CDFC4F33FD5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FB1A7E5B-A04E-48E2-8761-11C8661C1D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8412E8AF-BDB8-4DCF-AFEA-E3E69F37DC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.2-18.04.2008:*:*:*:*:*:*:*","matchCriteriaId":"9B77756A-09FA-4B82-BF4F-FB15EEB66F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3-12.05.2008:*:*:*:*:*:*:*","matchCriteriaId":"153B15B9-280D-437A-B605-73879A0A1CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12116393-BFD8-473F-956F-5F6C0B27C63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"363CC2F1-493E-42EB-ABF5-AECBBAEE64DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1591D7EE-1188-4EF4-8271-00B1F54EC92A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"6546FC7A-5392-4741-B942-EACC360C958D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3E0B254B-F9CF-4484-B7BE-331D009DDDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E3CCB8A7-BA0E-46AF-90FC-C2AE98A570F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"754912C5-01EF-4F98-9AF7-FFC4FEC5A5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1E3FAC1D-008A-4088-86EC-8A96DBDA8614"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0EFCC874-3498-4F1A-8B51-DCA83B4C2B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"38D8EFE9-B6A9-44BC-9041-2E1CCE8FB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinywebgallery:tinywebgallery:1.7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D30C4A2A-6759-474C-82EC-FFD97BFCEA1A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.2","matchCriteriaId":"CE67329A-7862-470A-AF78-DA135587E442"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"354BBE12-96AA-4F3C-8B51-CFE80E4808D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FCFC487-FDA2-4D26-8140-1F16BAA7A658"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B19E0034-0B67-4A71-83E8-98A148FF89F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F06FAD64-5233-44BB-9FDA-ED019967B7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E9541428-5609-43FE-BF9B-49414E64D0B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:1.6:*:*:*:*:*:*:*","matchCriteriaId":"1AE410E3-E0AB-4C47-AB4A-7290460BB9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF42BE37-1569-4D22-9302-B1F5AB12C0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DFF152CB-58C1-4B9A-87E0-16A7E9EFF7EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:2.2:*:*:*:*:*:*:*","matchCriteriaId":"83892CE6-D168-4B03-94C8-CE167326FA60"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3907B16C-0DEC-40AE-BB6F-5E6317E083BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:claudio_klingler:quixplorer:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D221E893-172F-49F7-BA83-149F88BADB7C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503396/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34892","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.tinywebgallery.com/forum/viewtopic.php?t=1653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50408","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8649","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503396/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.tinywebgallery.com/forum/viewtopic.php?t=1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1912","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en src/func/language.php en webSPELL v4.2.0e y anteriores, permite a los atacantes remotos incluir y ejecutar arbitrariamente archivos locales .php a través de ..(punto punto) en una cookie de lenguaje. NOTA: esto puede ser aprovechado por una inyección SQL incluyendo awards.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.0e","matchCriteriaId":"FA50D95F-FD41-4CB8-B57B-C2B22679CA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8511CDAC-8292-4696-A0BE-7DC321CF6500"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"BE172AFC-0C9B-4128-862C-7F46026E5BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.1:*:*:*:*:*:*:*","matchCriteriaId":"37CE7D68-2638-4ED7-AFA5-8B9FC398B5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.01.00:*:*:*:*:*:*:*","matchCriteriaId":"97E9ED52-3AF4-4215-A828-B8D4EE9A597A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F5B8975-C514-457E-95FE-84FF3C44275F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.01.01:*:*:*:*:*:*:*","matchCriteriaId":"D16B895D-B1C0-4727-A06C-518F7E22421C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.01.02:*:*:*:*:*:*:*","matchCriteriaId":"5EF027B3-CC1B-48C1-9EED-E5A3A2CD585A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9B5F7643-A1B4-4195-A59B-33F3F9D31C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.2.0c:*:*:*:*:*:*:*","matchCriteriaId":"45223AEF-D151-4C08-993F-1537BC02DA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:webspell:webspell:4.2.0d:*:*:*:*:*:*:*","matchCriteriaId":"63DDF25B-8DEE-4406-800F-FF05C64BD9F3"}]}]}],"references":[{"url":"http://osvdb.org/54295","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54296","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34862","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.webspell.org/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.webspell.org/index.php?site=files&file=30","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.webspell.org/index.php?site=news_comments&newsID=130","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50395","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8622","source":"cve@mitre.org"},{"url":"http://osvdb.org/54295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.webspell.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.webspell.org/index.php?site=files&file=30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.webspell.org/index.php?site=news_comments&newsID=130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1913","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magic_quotes_gpc is disabled and dotclear authentication is used, allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en manager.php en LuxBum v0.5.5, cuando magic_quotes_gpc es deshabilitado y la atenticación \"dotclear\" es utilizada, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro \"username\" en una acción \"login\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luxbum:luxbum:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"27AC8E82-6410-4E3D-82F3-598E7C14F205"}]}]}],"references":[{"url":"http://secunia.com/advisories/35032","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50405","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8645","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1914","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_resource function."},{"lang":"es","value":"La función pci_register_iommu_region de arch/sparc/kernel/pci_common.c del kernel de Linux anterior a v2.6.29 en la plataforma sparc64, permite a usuarios locales provocar una denegación de servicio (caída del sistema), al leer el fichero /proc/iomem. Está relacionado con punteros no iniciados  y la función request_resource."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for the Linux kernel on the SPARC64 architecture.","lastModified":"2009-06-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.28.10","matchCriteriaId":"6E29A038-1FE8-42C7-9788-BDBD1136F6AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c","source":"cve@mitre.org"},{"url":"http://osvdb.org/54908","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36051","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35415","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51196","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=192d7a4667c6d11d1a174ec4cad9a3c5d5f9043c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1915","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en URL Search Hook (ICQToolBar.dll) en ICQ v6.5, permite a atacantes remotos provocar una denegación de servicio (caída persistente) y posiblemente la ejecución de código de su elección a través de un acceso directo de un fichero .URL a Internet, lo que provoca una caída al navegar por una carpeta que contiene este archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:icq:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2DFE7914-6DA6-4A0E-B9C2-719DD148F938"}]}]}],"references":[{"url":"http://osvdb.org/54893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503935/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35150","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50858","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8832","source":"cve@mitre.org"},{"url":"http://osvdb.org/54893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1916","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter."},{"lang":"es","value":"dig.php en GScripts.net DNS Tools, permite a atacantes remotos la ejecución de comandos de su elección a través de meta-caracteres de consola en el parámetro \"ns\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gscripts:dns_tools:*:*:*:*:*:*:*:*","matchCriteriaId":"9FE79F01-6B31-466B-9512-CFBDD79CF22A"}]}]}],"references":[{"url":"http://secunia.com/advisories/34773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34559","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8454","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1917","sourceIdentifier":"secure@microsoft.com","published":"2009-07-29T17:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v6 SP1; Internet Explorer 6 para Windows XP SP2 y SP3 y Server 2003 SP2; e Internet Explorer 7 y 8 for Windows XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, no maneja adecuadamente los intentos de acceso a objetos eliminados de la memoria, lo que permite a atacantes remotos la ejecución de código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad de corrupción de Memoria en objetos HTML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*","matchCriteriaId":"A74985B6-BCA5-49E3-878B-77D7FA43070C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35831","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022611","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2033","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6072","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1918","sourceIdentifier":"secure@microsoft.com","published":"2009-07-29T17:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle table operations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the getElementsByTagName method, aka \"HTML Objects Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v5.01 SP4 y v6 SP1; Internet Explorer 6 para Windows XP SP2 y SP3 y Server 2003 SP2; e Internet Explorer 7 y 8 for Windows XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, no maneja adecuadamente las operaciones  con tablas, lo que permite a atacantes remotos la ejecución de código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad de corrupción de Memoria en objetos HTML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*","matchCriteriaId":"A74985B6-BCA5-49E3-878B-77D7FA43070C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/505523/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35826","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022611","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2033","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-047","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5524","source":"secure@microsoft.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=953693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1919","sourceIdentifier":"secure@microsoft.com","published":"2009-07-29T17:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via an HTML document containing embedded style sheets that modify unspecified rule properties that cause the behavior element to be \"improperly processed,\" aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v5.01 SP4 y v6 SP1; Internet Explorer 6 para Windows XP SP2 y SP3 y Server 2003 SP2; e Internet Explorer 7 y 8 for Windows XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2, no maneja adecuadamente los intentos para acceder a objetos eliminados en memoria, lo que permite a atacantes remotos la ejecución de código de su elección a través de un documento HTML manipulado que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad de corrupción de Memoria No Inicializada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*","matchCriteriaId":"A74985B6-BCA5-49E3-878B-77D7FA43070C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/505524/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022611","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2033","source":"secure@microsoft.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-048","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5660","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/505524/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1920","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before execution, which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption, aka \"JScript Remote Code Execution Vulnerability.\""},{"lang":"es","value":"El motor de secuencias de comandos JScript v5.1, v5.6, v5.7, y v5.8 en JScript.dll en Microsoft Windows, utilizado en Internet Explorer, no carga apropiadamente dentro de  memoria secuencias de comandos decodificada o  anteriores a la ejecución, lo que permite a los atacantes remoto ejecutar arbitrariamente código a través de una página web manipulada que lanza una corrupción de memoria, también conocido como \"Vulnerabilidad de ejecución remota de código JScript\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1922","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka \"MSMQ Null Pointer Vulnerability.\""},{"lang":"es","value":"El servicio de cola de mensajes de Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, y Vista Gold no valida de forma adecuada los datos de una petición inespecífica IOCTL en el modo de usuario antes de pasar esta petición al modo kernel, lo que permite a usuarios locales conseguir un aumento de privilegios a través de una petición manipulada, también conocido como \"Vulnerabilidad de puntero nulo MSMQ\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://en.securitylab.ru/lab/PT-2008-09","source":"secure@microsoft.com"},{"url":"http://osvdb.org/56901","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36214","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505691/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022714","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-040","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6109","source":"secure@microsoft.com"},{"url":"http://en.securitylab.ru/lab/PT-2008-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505691/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1923","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka \"WINS Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el componente servicio de nombres de Internet (WINS) para Microsoft Windows 2000 SP4 y Server 2003 SP2 en Windows, permite a los atacantes remotos ejecutar arbitrariamente código a través de un paquete de replicación WINS manipulado que lanza un cálculo incorrecto de longitud de búfer, también conocido como \"Vulnerabilidad de desbordamiento de búfer WINS basado en memoria dinámica\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"4D5F7729-A095-43DF-BF2F-B4B6938087FA"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6410","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1924","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka \"WINS Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en el el componente Windows Internet Name Service (WINS) para Windows 2000 SP4, permite a los partners (compañeros) de replicación WINS remota la ejecución de código de su elección a través de estructuras de datos manipuladas en un paquete, también conocida como  \"Vulnerabilidad de desbordamiento de entero en WINS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*","matchCriteriaId":"3C0C7D2B-0AA5-4E82-B58B-2668A0EAC2E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"4D5F7729-A095-43DF-BF2F-B4B6938087FA"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1925","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka \"TCP/IP Timestamps Code Execution Vulnerability.\""},{"lang":"es","value":"La implementación de TCP/IP en Microsoft Windows Vista Gold, SP1, y SP2 y en Server 2008 Gold y SP2 no maneja adecuadamente la información de estado, permitiendo a atacantes remotos ejecutar código de su elección al enviar paquetes a un servicio en escucha, y así provocar una malinterpretación de un campo no especificado como un puntero a función, también conocido como \"TCP/IP Timestamps Code Execution Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6374","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1926","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka \"TCP/IP Orphaned Connections Vulnerability.\""},{"lang":"es","value":"Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1 y SP2, y Server 2008 Gold y SP2 permiten a los atacantes remotos provocar una denegación de servicio (interrupción de TCP) por medio de una serie de sesiones TCP que tienen datos pendientes y un tamaño de ventana de recepción (1) pequeña o (2) cero y permanecen en el estado FIN-WAIT-1 o FIN-WAIT-2 indefinidamente, también se conoce como \"TCP/IP Orphaned Connections Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*","matchCriteriaId":"C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://osvdb.org/57797","source":"secure@microsoft.com"},{"url":"http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/506331/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/36269","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965","source":"secure@microsoft.com"},{"url":"http://osvdb.org/57797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506331/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1928","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) on Windows Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via a malformed (1) LDAP or (2) LDAPS request, aka \"LSASS Recursive Stack Overflow Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad de consumo de pila en el servicio Active Directory en Microsoft Windows v2000 SP4, Server v2003 SP2, y Server v2008 Gold y SP2; Active Directory Application Mode (ADAM) en Windows XP SP2 y SP3 y Server v2003 SP2; y Active Directory Lightweight Directory Service (AD LDS) en Windows Server v2008 Gold y SP2 permite a atacantes remotos causar una denegación de servicio (cuelgue de sistema) a través de peticiones manipuladas(1)LDAP o (2)LDAPS, como \"vulnerabilidad de desbordamiento de pila recursiva LSASS\" ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*","matchCriteriaId":"5AEA67EA-C788-4CF2-9246-01475302238E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-066","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5890","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1929","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka \"Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control Microsoft Terminal Services Client ActiveX cuando se corre RDP v6.1 en Windows XP SP2, Vista SP1 o SP2, o Server 2008 Gold o SP2; o v5.2 o v6.1 en Windows XP SP3; permite a atacantes remotos ejecutar código de forma arbitraria a través de parámetros sin especificar mediante métodos desconocidos, también conocido como \"Vulnerabilidad de desbordamiento de búfer en el control ActiveX en la conexión a escritorio remoto\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*","matchCriteriaId":"D21D1DFE-F61B-407E-A945-4F42F86947B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/56912","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36229","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35973","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022709","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2238","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329","source":"secure@microsoft.com"},{"url":"http://osvdb.org/56912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1930","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka \"Telnet Credential Reflection Vulnerability,\" a related issue to CVE-2000-0834."},{"lang":"es","value":"El servicio Telnet en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2 permite a los servidores Telnet remotos ejecutar arbitrariamente código en máquinas cliente remplazando las credenciales NTLM de un usuario cliente, también conocido como \"Vulnerabilidad Reflejo de Credencial Telnet\", un asunto relativo a CVE-2000-0834."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*","matchCriteriaId":"D21D1DFE-F61B-407E-A945-4F42F86947B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://osvdb.org/56904","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36222","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022716","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/35993","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2237","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-042","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6302","source":"secure@microsoft.com"},{"url":"http://osvdb.org/56904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1932","sourceIdentifier":"cve@mitre.org","published":"2009-06-04T20:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow."},{"lang":"es","value":"Múltiples desbordamientos de entero en las funciones  (1) user_info_callback, (2) user_endrow_callback, (3) gst_pngdec_task  en(ext/libpng/gstpngdec.c) enn GStreamer Good Plug-ins (también conocido como gst-plugins-good or gstreamer-plugins-good) v0.10.15, permite a atacante remotos provocar una denegación de servicio y posiblemente la ejecución de código de su elección a través de un archivo PNG manipulado lo que lanza un desbordamiento de entero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gstreamer:good_plug-ins:0.10.15:*:*:*:*:*:*:*","matchCriteriaId":"D530EC6B-860D-4A13-99F6-BE52F6A593D5"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/54827","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35205","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35777","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35897","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1839","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:130","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1123.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35172","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1506","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10798","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/54827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1123.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1933","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T16:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors."},{"lang":"es","value":"Kerberos in Sun Solaris 8, 9, y 10, y OpenSolaris anterior a snv_117, no administra adecuadamente las credenciales de caché, lo que permite a usuarios locales acceder a puntos de montaje \"Kerberized NFS\" y recursos compartidos \"Kerberized NFS\" a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_107","matchCriteriaId":"193ABD0A-63E6-40C2-83B8-28DD57578CFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_116","matchCriteriaId":"DBA048BA-7DEB-4B74-90FD-4ABEE29969C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_116","matchCriteriaId":"7312C64F-4DA3-4382-82B7-BB47733CB03D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/35341","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35414","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252787-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-210.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35205","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1499","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1559","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252787-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-210.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1934","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T16:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Reverse Proxy Plug-in en Sun Java System Web Server v6.1 anterior a SP11, permite a atacantes remotos la inyección de código web y HTML de su elección a través de una consulta de cadena en situaciones resultantes de un error \"502 Gateway\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:aix:*:*:*:*:*","matchCriteriaId":"C432A6A6-E063-49F5-9784-0E34B5F843EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:aix:*:*:*:*:*","matchCriteriaId":"389FD567-59F5-47C3-B000-E916357889DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:aix:*:*:*:*:*","matchCriteriaId":"A58B50D0-CBEA-43D5-9537-E9418B13CDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:aix:*:*:*:*:*","matchCriteriaId":"131D4D0F-D73B-434A-845E-9788EE48915B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:aix:*:*:*:*:*","matchCriteriaId":"698DCBEF-41C5-474E-BE60-0BC285A89B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:aix:*:*:*:*:*","matchCriteriaId":"D0518BE3-1E9A-4974-9805-E70CB95ADC40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:aix:*:*:*:*:*","matchCriteriaId":"A53CE597-7827-4BDD-A922-23829485A1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:aix:*:*:*:*:*","matchCriteriaId":"566250FE-D1E1-43CE-9255-99B8AC1FD0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:aix:*:*:*:*:*","matchCriteriaId":"9A6494E5-72D1-43E0-ABEE-16D23D167801"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:aix:*:*:*:*:*","matchCriteriaId":"1AD96005-4158-4962-BD8E-3CED7CF3E900"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp3:aix:*:*:*:*:*","matchCriteriaId":"725A8D67-7742-4BE2-AADE-E76BC880A9E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:hp_ux:*:*:*:*:*","matchCriteriaId":"43511DA8-A07B-4927-9FB2-CF2429BC50C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:hp_ux:*:*:*:*:*","matchCriteriaId":"F84E3EFA-4013-4538-A32B-59B4EE874D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:hp_ux:*:*:*:*:*","matchCriteriaId":"2E956D83-8463-4A5C-9D7F-CED9A43E3C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:hp_ux:*:*:*:*:*","matchCriteriaId":"84E5E3A8-1938-4CB4-9673-196F4E6D37C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:hp_ux:*:*:*:*:*","matchCriteriaId":"E2281A43-3C8D-470F-8F95-B63AA5F27BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:hp_ux:*:*:*:*:*","matchCriteriaId":"98952019-7F68-4A6B-810C-829A82A472E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:hp_ux:*:*:*:*:*","matchCriteriaId":"4E3A50B8-050E-401E-8B7C-700B3B478FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"92F78B4D-89AC-4941-9E32-8FD21F3DC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:hp_ux:*:*:*:*:*","matchCriteriaId":"B80D8913-987A-4316-BC53-16236B4356F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:hp_ux:*:*:*:*:*","matchCriteriaId":"3E69834C-A381-4AC6-B42E-F19E199D5A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp3:hp_ux:*:*:*:*:*","matchCriteriaId":"57A273B7-CDB6-4F47-AFE3-3864DCC01E4A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:linux:*:*:*:*:*","matchCriteriaId":"99520DA9-10F0-43E8-8A77-2FDA676922C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:linux:*:*:*:*:*","matchCriteriaId":"5165C493-78EC-44FC-9401-4BC9BB4D857B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:linux:*:*:*:*:*","matchCriteriaId":"7A4F803A-14B6-47FB-92C6-7E4BE435A2C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:linux:*:*:*:*:*","matchCriteriaId":"7276CA8E-4DEC-4B84-8D3B-1F59AE192987"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:linux:*:*:*:*:*","matchCriteriaId":"9CE812CB-48A5-44AB-AB92-420C1F9B8396"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:linux:*:*:*:*:*","matchCriteriaId":"8C227B78-F34D-48B3-B150-EA91B6CA74FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:linux:*:*:*:*:*","matchCriteriaId":"1004FBF0-AD2A-45A0-A4D7-E24EFC41A558"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"88A61895-37FC-462F-928D-65BF02A0676D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:linux:*:*:*:*:*","matchCriteriaId":"DE360D60-0894-4E3F-AE2A-A135C4382D3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:linux:*:*:*:*:*","matchCriteriaId":"361DF0F9-1808-495E-8189-BFBC3AD082F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp3:linux:*:*:*:*:*","matchCriteriaId":"2DD5222B-BFF5-4FFF-BD91-5B2CBDE14312"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:windows:*:*:*:*:*","matchCriteriaId":"A7BDC9E6-87C4-4AE1-AEAD-518CCFF853E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:windows:*:*:*:*:*","matchCriteriaId":"A018481B-EB48-4C4E-A1E4-324DCC437441"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:windows:*:*:*:*:*","matchCriteriaId":"B0FEC983-91A6-4708-8308-B77B0FD2D9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:windows:*:*:*:*:*","matchCriteriaId":"431D609A-AA61-4C7C-8F4A-8B01DB2E32E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:windows:*:*:*:*:*","matchCriteriaId":"37CBE122-47ED-4659-B15A-55FAF15BA63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:windows:*:*:*:*:*","matchCriteriaId":"E3866A08-0CFA-473D-BBE5-4736282A6446"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:windows:*:*:*:*:*","matchCriteriaId":"4541C58C-45F1-4F17-82B9-E33BE693D8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:windows:*:*:*:*:*","matchCriteriaId":"3B3825DF-E190-4B15-8160-CAFACDDE7686"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:windows:*:*:*:*:*","matchCriteriaId":"91B10E76-4D66-42B2-BC3B-86F158078CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:windows:*:*:*:*:*","matchCriteriaId":"D2311610-C676-4F41-8F64-224C074C8295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp3:windows:*:*:*:*:*","matchCriteriaId":"A3C45222-B840-446B-ADF3-08C09A8B52CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:sparc:*:*:*:*:*","matchCriteriaId":"A280F4D8-13D9-407B-A5C7-E85D7E83A142"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:sparc:*:*:*:*:*","matchCriteriaId":"348671B8-279F-426B-A00B-5948297EDFFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:sparc:*:*:*:*:*","matchCriteriaId":"45088B1A-D4C7-4FA9-AE39-5B0D2941A8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:sparc:*:*:*:*:*","matchCriteriaId":"55BC4F3F-51D0-432A-96D5-65C7599F9832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:sparc:*:*:*:*:*","matchCriteriaId":"C434356D-DAB3-4B78-B1D2-AEB8EC69CE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:sparc:*:*:*:*:*","matchCriteriaId":"300FA553-5FE3-4036-B80B-C4806C865660"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:sparc:*:*:*:*:*","matchCriteriaId":"D35923A0-BF2C-400F-BE43-A13B67E4ED89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"4DB66630-4A2A-44F2-971C-3B353F687868"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:sparc:*:*:*:*:*","matchCriteriaId":"CB79BECF-1413-438F-9741-CC3BE256E1C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:sparc:*:*:*:*:*","matchCriteriaId":"ACAFC237-58BC-4CB1-948C-A2D9B3742809"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp3:sparc:*:*:*:*:*","matchCriteriaId":"4B0293BA-6694-4FD0-93FE-7F674AA2A604"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:x86:*:*:*:*:*","matchCriteriaId":"80CB7673-2A98-434B-99A3-24DB4686CDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:x86:*:*:*:*:*","matchCriteriaId":"6BBCB1B9-965D-41C9-81A4-A7470AE46D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp48:x86:*:*:*:*:*","matchCriteriaId":"B2F944E7-F894-42D8-8167-BCC2DEE10BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:x86:*:*:*:*:*","matchCriteriaId":"09FB3270-1242-4EE9-86B7-7B841DEF2533"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:x86:*:*:*:*:*","matchCriteriaId":"70901AC0-E2E5-4C8C-B903-105AF7528D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:x86:*:*:*:*:*","matchCriteriaId":"440814EC-4215-4ACB-912F-DA75C5CD1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:x86:*:*:*:*:*","matchCriteriaId":"17466643-0B26-4D65-B2FD-C958D906BE91"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:x86:*:*:*:*:*","matchCriteriaId":"DF9C742B-C0C4-46D5-A7DA-025852069BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:x86:*:*:*:*:*","matchCriteriaId":"3378607F-5EF7-4C11-8254-6A44A03B8BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:x86:*:*:*:*:*","matchCriteriaId":"7ACFC436-5A5C-4E31-957F-ED5127ECDB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp3:x86:*:*:*:*:*","matchCriteriaId":"D5E51FAA-1DD4-478F-B439-D344C33AE355"}]}]}],"references":[{"url":"http://osvdb.org/54872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-211.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35204","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50951","source":"cve@mitre.org"},{"url":"http://osvdb.org/54872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-211.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1935","sourceIdentifier":"secteam@freebsd.org","published":"2009-06-18T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and 6.3 through 6.4 allows local users to bypass virtual-to-physical address lookups and read sensitive information in memory pages via unspecified vectors."},{"lang":"es","value":"Desbordamiento de entero en la función pipe_build_write_buffer (sys/kern/sys_pipe.c) en la característica de escritura directa en la implementación del filtro en FreeBSD v7.1 hasta v7.2 y v6.3 hasta v6.4, permite a usuarios locales saltarse las búsquedas de direcciones virtual-to-physical, y leer información sensible en paginas de memoria a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*","matchCriteriaId":"9A1D9D46-75E4-4742-9CF3-2B063B6B7504"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*","matchCriteriaId":"72C2BE9D-91E1-48E9-9326-39CF583A57E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*","matchCriteriaId":"8E08DCB9-9064-4DB7-B43A-7B415882EB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*","matchCriteriaId":"06FB0EEA-254E-4A1F-99E7-058FCD518E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*","matchCriteriaId":"14D72C9B-EEB0-4605-BEA2-F77092129245"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52DBF406-9C77-4DDA-AB7D-40FAE40023D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*","matchCriteriaId":"20A31C9A-A928-4C9B-BB49-0E53227746DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*","matchCriteriaId":"99FB7443-F942-402A-9104-64677EAF014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*","matchCriteriaId":"C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*","matchCriteriaId":"E9A75104-5A3E-485E-B4EC-0873C942731C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*","matchCriteriaId":"8B573401-DC6F-4AFE-92F5-D96F785D2107"}]}]}],"references":[{"url":"http://osvdb.org/55044","source":"secteam@freebsd.org"},{"url":"http://secunia.com/advisories/35398","source":"secteam@freebsd.org","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc","source":"secteam@freebsd.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.freebsd.org/patches/SA-09:09/pipe.patch","source":"secteam@freebsd.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35279","source":"secteam@freebsd.org"},{"url":"http://www.securitytracker.com/id?1022365","source":"secteam@freebsd.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51109","source":"secteam@freebsd.org"},{"url":"http://osvdb.org/55044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.freebsd.org/patches/SA-09:09/pipe.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1936","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500."},{"lang":"es","value":"_functions.php de cpCommerce v.1.2.x, posiblemente incluyendo la 1.2.9, envía una redirección pero no finaliza cuando es llamado directamente, lo que permite a atacantes remotos evitar el mecanismo de protección para evitar los ataques de inclusión de ficheros remotos y de salto de directorio, ejecutar código PHP o leer archivos de su elección, a través del parámetro GLOBALS[prefix], un vector de ataque diferente al CVE-2003-1500."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpcommerce_project:cpcommerce:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.9","matchCriteriaId":"47DF7292-D606-4D4E-A8B0-F1475210AF26"}]}]}],"references":[{"url":"http://secunia.com/advisories/35245","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35103","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8790","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/35245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1937","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 \"no database\" (aka flat) and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the (1) commentname (aka Author), (2) commentemail (aka Email), and (3) commentmessage (aka Comment) parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en funcionalidad de realizar comentarios de LightNEasy v2.2.1 \"no database\" (sin base de datos o \"flat\") and 2.2.2 SQLite. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de los parámetros (1) \"commentname\" (autor), (2) \"commentemail\" (dirección de correo) y (3) \"commentmessage\" (comentario).  NOTA: algunos de estos detalles han sido obtenidos de información proveniente de terceras partes"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:2.2.1:*:no_database:*:*:*:*:*","matchCriteriaId":"F4B08A25-69F3-4396-B9B6-37BB0B2B7DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:lightneasy:lightneasy:2.2.2:*:sqlite:*:*:*:*:*","matchCriteriaId":"EBFCAB31-D17F-4C40-A81B-66B0C7500EAF"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1081-intern0t-lightneasy-2-2-2-html-injection-vulnerability.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504092/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35229","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1081-intern0t-lightneasy-2-2-2-html-injection-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504092/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1938","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Joomla! v.1.5.x hasta la v1.5.10. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque no especificados relacionados con la salida de la base de datos y el panel de administración de \"frontend\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"302D47E2-CFA8-438C-82DB-335319454448"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"94B01AD8-2B71-4A6A-8932-E61B0FE54246"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1058A361-4B10-4D7C-B789-64A38FE7E201"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D548B3C9-483F-492C-A6BB-694B7217FEE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9813E813-2983-4471-9E56-6F254810A66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A4F4F9E7-BA44-4235-A246-DB6C432C3873"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"495BD724-45BE-4214-B120-3A83BD9AD11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B29D3E39-7B43-4D19-B39F-2EB56E30F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5F155C3B-AAF5-4393-A964-E655113D84DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"731CC868-70FC-44A0-8CC2-D0A4AC5CE094"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/297-20090602-core-frontend-xss.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/54868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35189","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1497","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50923","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/297-20090602-core-frontend-xss.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/54868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1939","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en plantilla \r\nJA_Purity para Joomla! v1.5.x hasta v1.5.10 permite a atacantes remotos inyectar HTML y secuencias de comandos web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"16F243A8-5513-4BB7-AB55-5A715D5AE546"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"F95550B4-3620-42D8-99AC-369126CDDFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BC0429EF-3848-4E72-999E-719DB54A7429"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F12537ED-A4EB-40F9-AC00-B796169E114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B29D3E39-7B43-4D19-B39F-2EB56E30F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5F155C3B-AAF5-4393-A964-E655113D84DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"731CC868-70FC-44A0-8CC2-D0A4AC5CE094"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/296-20090602-core-japurity-xss.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35189","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1497","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50922","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/296-20090602-core-japurity-xss.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/54870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1940","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el panel panel administrador del componente com_users de Joomla! en las versiones v.1.5.x hasta la v1.5.10. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque no especificados.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B29D3E39-7B43-4D19-B39F-2EB56E30F737"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5F155C3B-AAF5-4393-A964-E655113D84DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"731CC868-70FC-44A0-8CC2-D0A4AC5CE094"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/295-20090601-core-comusers-xss.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54869","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35189","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1497","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50924","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/295-20090601-core-comusers-xss.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1941","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt."},{"lang":"es","value":"PAD Site Scripts v3.6 almacena información sensible bajo la carpeta raiz del servicio web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener información sensible a través de peticiones directas a dbbackup.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpeasycode:pad_site_scripts:3.6:*:*:*:*:*:*:*","matchCriteriaId":"E67B7D27-8236-4948-9A64-8895634231A2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50911","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8850","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1942","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a module for Drupal, allows remote authenticated users, with create quizzes or quiz questions access, to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el modulo para Drupal, Quiz v5.x, v6.x-2.x anterior a v6.x-2.2, v6.x-3.x anterior a v6.x-3.0, permite a usuarios remotos autenticados con acceso a la creación de cuestionarios o acceso a las preguntas de los cuestionarios, se podría inyectar secuencias de comandos web o HTML a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:5.x:*:*:*:*:*:*:*","matchCriteriaId":"F1300BA4-0341-40A2-A580-4CEF4D70E930"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"FBAB35A7-147B-4EB2-B5E3-C1A1A205CC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"2C6466C8-070E-403D-A44D-4719BCB66ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"D18685B6-CC2B-4B82-8523-787E36D0856F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D902AFF-0677-4299-9B7E-1082F7ABF979"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A34B6BBC-243C-4BE5-B069-20A2C2F9727C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"38A5A7C7-869B-4FCC-A94E-12B3A09D94CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"55DDDB0A-D9BE-46E6-A26C-E8F88ACC3692"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"6288701C-B559-4EE4-A5B3-48B779A1BD7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"70267A32-8329-417A-967E-8844E6CE6942"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"6B51E500-6694-42A4-B3B9-FB15562CBA47"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"71A9F973-592A-41D7-AECD-80A633595277"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"753F8DDB-DF9E-4B4C-9CA1-2A20510D57E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-3.x:dev:*:*:*:*:*:*","matchCriteriaId":"C18710D5-4138-4D97-AD0E-68489E4D305F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:quiz:6.x-3.x:rc2:*:*:*:*:*:*","matchCriteriaId":"0E62D2DB-67CE-4747-B81C-DF1B8BC6D201"}]}]}],"references":[{"url":"http://drupal.org/node/481270","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/481274","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/481308","source":"cve@mitre.org"},{"url":"http://osvdb.org/54880","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35345","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35199","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/481270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/481274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/481308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/54880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-1943","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el servicio IKE (ireIke.exe) en SafeNet SoftRemote anterior a v10.8.6, permite a atacantes remotos ejecutar código de su elección a través de una petición larga UDP al puerto 62514."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:*:*:*:*:*:*:*:*","versionEndIncluding":"10.8.5","matchCriteriaId":"73F3BFF9-3B88-4AD1-B9FC-C0A3AAD9D826"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1E58D092-7AEE-4930-BA65-6ABDCEA81941"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"B27AA9E6-544A-485F-9E44-9F66937AFCA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"3F911EB9-18A7-4B47-B8F1-A6E1A076D47B"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2C67DB6B-7FCB-400B-B269-0C0F710DC3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"56B5B449-9A76-4D62-9B1F-1D108D0ABCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:8.0:*:*:*:*:*:*:*","matchCriteriaId":"56CABA49-A4B1-41B2-A0C5-7F8CDDC253BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.7.7:*:*:*:*:*:*:*","matchCriteriaId":"C1457398-B204-4997-8091-EC943C4E1D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4525CF5B-5F19-4B0F-A068-B5D0557474F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FC36359D-D57D-4CA0-B858-944593461DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.2:*:*:*:*:*:*:*","matchCriteriaId":"79BA9352-5194-4F72-94DB-10696EA6E9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.3:*:*:*:*:*:*:*","matchCriteriaId":"B977AD44-76F4-4D43-9B06-D52046721AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote1.4:*:*:*:*:*:*:*:*","matchCriteriaId":"B0E7D346-1F64-486D-A13F-FDA432A466A0"}]}]}],"references":[{"url":"http://osvdb.org/54831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35280","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503981/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35154","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022316","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1472","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-024/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50880","source":"cve@mitre.org"},{"url":"http://osvdb.org/54831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-024/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1944","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AIMP v2.51 Build 330 permite a los atacantes remotos ejecutar arbitrariamente a través de un fichero MP3 con una etiqueta larga ID3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aimp:aimp:2.51:*:*:*:*:*:*:*","matchCriteriaId":"3962078F-C5C3-4063-A940-E300D5107BBF"}]}]}],"references":[{"url":"http://osvdb.org/54812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35295","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://zeroscience.org/codes/aimp2_poc.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50875","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8837","source":"cve@mitre.org"},{"url":"http://osvdb.org/54812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://zeroscience.org/codes/aimp2_poc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1945","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the event_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en webCal3_detail.asp en WebCal v3.04 permite a los atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro envent_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tzo:webcal:3.04:*:*:*:*:*:*:*","matchCriteriaId":"C7D67B07-92A7-4DEA-B16A-B409A194FD4C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35286","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50905","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1946","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the forumspath parameter."},{"lang":"es","value":"Inclusión remota de fichero PHP en latestposts.php de AdaptBB 1.0, cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro forumspath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adaptbb:adaptbb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"52F879E3-0E12-416E-886C-7CCD2C9A1C7C"}]}]}],"references":[{"url":"http://osvdb.org/54832","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35315","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50893","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8851","source":"cve@mitre.org"},{"url":"http://osvdb.org/54832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1947","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función UnbDbEncode en unb_lib/database.lib.php en Unclassified NewsBoard (UNB) v.1.6.4, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Query\" en una acción de búsqueda a forum.php. Vector distinto de CVE-2005-3686."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsboard:unclassified_newsboard:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"6D7BF479-F568-458D-AC15-9E9D23D1F82A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35183","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50876","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1948","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to (1) read arbitrary recently-modified files via a .. (dot dot) in the GLOBALS[filename] parameter or (2) include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[UTE][__tplCollection][a][file] parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en forum.php en Unclassified NewsBoard (UNB) 1.6.4, cuando register_globals esta activado y magic_quotes_gpc desactivado, permite a los atacantes remotos (1) leer ficheros recientes de forma arbitraria a través de ..(punto punto) en el parámetro GLOBALS[nombre de fichero] o (2) incluir y ejecutar ficheros locales a través de un ..(punto punto) en el parámetro GLOBALS[UTE][__tplCollection][a][file]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unclassified:newsboard:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"0F786CD1-87EB-468C-8988-65F04CB0BACC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35183","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50877","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50878","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1949","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message."},{"lang":"es","value":"import_wbb1.php en Unclassified NewsBoard  (UNB) v1.6.4 permite a atacantes remotos obtener información sensible a través de una petición directa que muestra el directorio de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unclassified:newsboard:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"0F786CD1-87EB-468C-8988-65F04CB0BACC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35183","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50879","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1950","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL commands via the mesajid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en yorum.asp en WebEyes Guest Book 3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mesajid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ahmet_donmez:webeyes_guest_book:3:*:*:*:*:*:*:*","matchCriteriaId":"C0691C10-4181-4F41-84BE-BA108D4D8ECE"}]}]}],"references":[{"url":"http://secunia.com/advisories/35290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8859","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1951","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en PropertyMax Pro FREE v0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"pl\" en una acción \"mi\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:propertymaxpro:propertymax_pro_free:0.3:*:*:*:*:*:*:*","matchCriteriaId":"EE4398A7-F574-4B56-BF8D-BC81C146AAFB"}]}]}],"references":[{"url":"http://secunia.com/advisories/35289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1952","sourceIdentifier":"cve@mitre.org","published":"2009-06-05T21:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la funcionalidad de autenticación administrativa de PropertyMax Pro FREE v0.3, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) username -nombre de usuario- y (2) password -contraseña-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:propertymaxpro:propertymax_pro_free:0.3:*:*:*:*:*:*:*","matchCriteriaId":"EE4398A7-F574-4B56-BF8D-BC81C146AAFB"}]}]}],"references":[{"url":"http://secunia.com/advisories/35289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1953","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors."},{"lang":"es","value":"IBM FileNet Content Manager v4.0, v4.0.1, y 4.5, usado en IBM WebSphere Application Server (WAS) y Oracle BEA WebLogic Application Server, cuando el \"listener\" (aplicación a la escucha)CE Web Services tiene una configuración WSEAF determinada, no restringe adecuadamente el uso de un \"Subject\" cacheado, lo que permite a atacantes remotos obtener acceso con credenciales de usuarios autenticados recientemente, a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_content_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A3053EC9-6BCE-44CF-8CB7-432E91C3356D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_content_manager:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0EEDD182-2A22-44AB-A325-57C307819C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:filenet_content_manager:4.5:*:*:*:*:*:*:*","matchCriteriaId":"19EF97D8-1C12-4E03-B3A6-D477A991DA02"}]}]}],"references":[{"url":"http://secunia.com/advisories/35347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21389281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35228","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1512","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21389281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1954","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli."},{"lang":"es","value":"Vulnerabilidad sin especificar en portmapper  (también conocido como portmap) en IBM AIX v5.3, permite a atacantes provocar una denegación de servicio (cuelgue de demonio) a través de vectores desconocidos, relacionado con libtli."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/aix/efixes/iz50802/IZ50802.53TL8SP6.epkg.Z","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35211","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51167","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/aix/efixes/iz50802/IZ50802.53TL8SP6.epkg.Z","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ50802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1955","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564."},{"lang":"es","value":"El parseador XML en el interfaz apr_xml_* en xml/apr_xml.c en Apache APR-util anteriores a v1.3.7 tal y como es utilizado en los módulos mod_dav y mod_dav_svn en el servidor HTTP de Apache, permite a atacantes remotos producir una denegación de servicio (agotamiento de memoria) a través de un documento XML manipulado que contiene un gran numero de referencias anidadas, como se demostró en la petición PROPFIND, una vulnerabilidad similar a CVE-2003-1564."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-776"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.7","matchCriteriaId":"13B90E83-A762-4896-9E77-908FBA4B154A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.2","matchCriteriaId":"8333C974-DF5B-4098-A766-EB8D875817F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*","matchCriteriaId":"743CBBB1-C140-4FEF-B40E-FAE4511B1140"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"E290BD43-5AB2-4641-B4AC-BC99FFBF7833"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.12","matchCriteriaId":"8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=apr-dev&m=124396021826125&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/34724","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35284","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35360","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35395","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35444","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35487","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35565","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35710","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35797","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35843","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36473","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=781403","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0123","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1812","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:131","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1107.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1108.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506053/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35253","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-786-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1907","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8842","source":"cve@mitre.org","tags":["Exploit","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=apr-dev&m=124396021826125&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/34724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.538210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=781403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK88342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506053/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-786-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/8842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-1956","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input."},{"lang":"es","value":"Error de superación de límite (off-by-one) en la función apr_brigade_vprintf de Apache APR-util anterior a v1.3.5 en plataformas big-endian, permite a atacantes remotos obtener información sensible o provocar una denegación de servicio (caída de la aplicación) a través de una entrada manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"16176496-B955-4F98-A395-9709C927D9BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.12","matchCriteriaId":"8BBBCFC4-2CFE-42A2-BE6F-2710EB3921A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34724","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35284","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35395","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35487","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35565","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35710","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35797","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35843","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37221","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=768417","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/dev%40apr.apache.org/msg21591.html","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/dev%40apr.apache.org/msg21592.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:131","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/06/1","source":"cve@mitre.org","tags":["Exploit","Mailing List","Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1107.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1108.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35251","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-786-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1907","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504390","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11567","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12237","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129190899612998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200907-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svn.apache.org/viewvc?view=rev&revision=768417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK88341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK91241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/dev%40apr.apache.org/msg21591.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/dev%40apr.apache.org/msg21592.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/06/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-786-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-787-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1957","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers \"an incomplete state,\" followed by a CREATE_CHILD_SA request."},{"lang":"es","value":"charon/sa/ike_sa.c del demonio charon de strongSWAN anterior a v4.3.1, permite a atacantes remotos provocar una denegación de servicio (referenca a puntero nulo y caída) a través de una solicitud IKE_SA_INIT no válida que provoca \"un estado incompleto\", seguido de una solicitud CREATE_CHILD_SA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"A0771FD2-9FB2-4F00-AFB3-B44D124FC5C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A60B8687-A72A-4AF6-BDE9-795A1AC2F98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FD5EA677-BC73-4139-BF09-ADE65C2502A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68B10EB8-0A5B-4C63-9A7D-2F034C286E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3F13A264-EA51-4B92-B102-5316E45DB32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"406E1E6C-EA61-4FB8-9B0F-CE823046B09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F31D56AC-D037-42AE-B70F-C7700929DDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"43A3A15C-122A-4564-A2E3-CB0E7C314797"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6806075C-2433-4CCB-919B-27979C79C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3809AE25-E840-4DB3-879E-F678305EC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"959DA882-CC63-45F7-BF08-55F38DD8E999"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9313C88D-1C24-4623-87B4-ECA8285E28A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"08474171-A617-4163-BEAD-AA14F53A2BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5516113A-F0F6-478F-95F7-9B4FB2DC68B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7D5E9376-3ED9-4A3D-83CE-7E1725F8F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59BFC4CB-91E9-4181-A390-F0CE0D12EE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"339E325D-B76C-400C-B332-7CA675C4F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*","matchCriteriaId":"F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C78E4DAD-B255-4666-927F-D82AC7396FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9B602806-1420-4640-AD17-A2FEFDA6A967"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A203ADA7-54C9-4F37-A254-0A5378BB9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E1C417F-C18A-4902-B409-09DD023974B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"235DBD81-E542-4FF7-A620-1872DC81D618"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"489F9DFA-5B24-4206-A306-0BAE849C2D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"382D76A4-C2C6-4C1C-A0C0-757C372154DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E4BD021C-FDAC-4938-9390-D455577D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"A977F561-D324-48EA-BAC5-66920F6BD584"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3D09EEB6-386C-4A73-BC08-4243BDC49EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBE3B5F4-063F-4AE9-B589-932751182101"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24F75943-1327-4868-88D5-917D06BCF5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4BE9083-EF34-4B1A-A139-E779E9704F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"ABC07651-4412-40B7-A6C2-9CBCC010CBE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"EC0D725F-4161-45BA-B1CE-99C2A75B7220"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0050370A-4CF0-4772-B287-DD05C5827E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5518A917-D5D1-4985-BF71-B1A34BD3D5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"778D7442-F54A-47DF-B87B-3CFA3CF08799"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16984E6E-7CA8-4DC3-B800-FFE007617FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C85F0BE-7E89-4B79-A036-9238785BE705"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C794994-9367-4BBB-8940-BBB44B7C1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"082272D3-0FE4-4959-978A-FFF795B52CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"8DFEF9B3-C7F7-4588-A174-FAFD39C04116"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"64C5AB11-3B59-4677-B544-28A22C413C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E595C454-4456-477A-BE51-75CEAB547E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6A40E983-4721-48FF-9EFB-702BA78DCB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"59E7FA4C-69EE-4225-99FF-0EAB4A6C0049"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1DDF25EB-5509-4D79-8D26-A1CA1092089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A558368F-D9B1-49DF-A64F-95909A4EE7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"74348E15-FF47-4B4D-B062-2EAE3141C84F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"90985506-224F-4AE2-899E-93CA64025396"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3386A9-3740-4861-84B0-AAAC5C01378E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4E823F7-7162-440E-A113-7B1F437BF508"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1D1DEE61-13CB-4810-81B6-2AEBF13619CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D6D82E08-D6BF-41E3-9C3D-52552C8753CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF06C431-DE35-4CCD-9DCE-ED9EE6A17464"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6C826191-A68F-4E02-945B-73F35AA580F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A316AF53-7E95-4E4F-8E50-22145F144CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7D3F068-778E-4BB7-AB22-368714BE1BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"96330C24-C1AB-4B00-A3CC-5CCD291E0069"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"BEF630C7-2AAB-4106-BAC9-AAE6FF278E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BF58206E-3086-45AC-91B6-032EF55D5552"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"7D636603-65D5-45DB-AF7F-DD01B3932914"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C41F9E10-000D-4F3B-BEA6-DEE87405B89B"}]}]}],"references":[{"url":"http://download.strongswan.org/CHANGES4.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35296","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36922","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35178","source":"cve@mitre.org"},{"url":"https://lists.strongswan.org/pipermail/users/2009-May/003457.html","source":"cve@mitre.org"},{"url":"http://download.strongswan.org/CHANGES4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.strongswan.org/pipermail/users/2009-May/003457.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1958","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector."},{"lang":"es","value":"charon/sa/tasks/child_create.c en el demonio charon en strongSWAN anteriores a v4.3.1 conmuta el test NULL por cargas destructivas TSi y TSr, lo que permite a los atacantes remotos causar una denegación de servicio a través de una petición IKE__AUTH sin un (1) TSi o (2) un selector de tráfico TSr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.9","matchCriteriaId":"A6739FBA-95D4-4C8F-B320-F27856A4D832"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A60B8687-A72A-4AF6-BDE9-795A1AC2F98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FD5EA677-BC73-4139-BF09-ADE65C2502A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68B10EB8-0A5B-4C63-9A7D-2F034C286E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3F13A264-EA51-4B92-B102-5316E45DB32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"406E1E6C-EA61-4FB8-9B0F-CE823046B09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F31D56AC-D037-42AE-B70F-C7700929DDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"43A3A15C-122A-4564-A2E3-CB0E7C314797"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6806075C-2433-4CCB-919B-27979C79C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3809AE25-E840-4DB3-879E-F678305EC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"959DA882-CC63-45F7-BF08-55F38DD8E999"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9313C88D-1C24-4623-87B4-ECA8285E28A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"08474171-A617-4163-BEAD-AA14F53A2BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5516113A-F0F6-478F-95F7-9B4FB2DC68B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7D5E9376-3ED9-4A3D-83CE-7E1725F8F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59BFC4CB-91E9-4181-A390-F0CE0D12EE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"339E325D-B76C-400C-B332-7CA675C4F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.0a:*:*:*:*:*:*:*","matchCriteriaId":"F90373CD-E5C7-46BE-8C5F-22D3DE12A3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B8C12F9-A14F-4BC5-A2CC-18DADE8454C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C78E4DAD-B255-4666-927F-D82AC7396FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9B602806-1420-4640-AD17-A2FEFDA6A967"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A203ADA7-54C9-4F37-A254-0A5378BB9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E1C417F-C18A-4902-B409-09DD023974B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"235DBD81-E542-4FF7-A620-1872DC81D618"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"489F9DFA-5B24-4206-A306-0BAE849C2D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"382D76A4-C2C6-4C1C-A0C0-757C372154DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E4BD021C-FDAC-4938-9390-D455577D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C90B1AC8-4C97-49B8-B82B-6F2FF295FDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"A977F561-D324-48EA-BAC5-66920F6BD584"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2EBD1B4B-E11F-46D0-A7AE-5E0749F6E216"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3D09EEB6-386C-4A73-BC08-4243BDC49EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBE3B5F4-063F-4AE9-B589-932751182101"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6AFD8D5D-7FB7-4B25-B1F2-7850348A6924"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24F75943-1327-4868-88D5-917D06BCF5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4BE9083-EF34-4B1A-A139-E779E9704F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"ABC07651-4412-40B7-A6C2-9CBCC010CBE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"EC0D725F-4161-45BA-B1CE-99C2A75B7220"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0050370A-4CF0-4772-B287-DD05C5827E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5518A917-D5D1-4985-BF71-B1A34BD3D5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"778D7442-F54A-47DF-B87B-3CFA3CF08799"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16984E6E-7CA8-4DC3-B800-FFE007617FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C85F0BE-7E89-4B79-A036-9238785BE705"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C794994-9367-4BBB-8940-BBB44B7C1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"082272D3-0FE4-4959-978A-FFF795B52CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"8DFEF9B3-C7F7-4588-A174-FAFD39C04116"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"64C5AB11-3B59-4677-B544-28A22C413C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E595C454-4456-477A-BE51-75CEAB547E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6A40E983-4721-48FF-9EFB-702BA78DCB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"59E7FA4C-69EE-4225-99FF-0EAB4A6C0049"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1DDF25EB-5509-4D79-8D26-A1CA1092089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A558368F-D9B1-49DF-A64F-95909A4EE7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"74348E15-FF47-4B4D-B062-2EAE3141C84F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"90985506-224F-4AE2-899E-93CA64025396"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3386A9-3740-4861-84B0-AAAC5C01378E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4E823F7-7162-440E-A113-7B1F437BF508"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1D1DEE61-13CB-4810-81B6-2AEBF13619CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D6D82E08-D6BF-41E3-9C3D-52552C8753CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF06C431-DE35-4CCD-9DCE-ED9EE6A17464"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6C826191-A68F-4E02-945B-73F35AA580F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A316AF53-7E95-4E4F-8E50-22145F144CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"C7D3F068-778E-4BB7-AB22-368714BE1BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"96330C24-C1AB-4B00-A3CC-5CCD291E0069"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"BEF630C7-2AAB-4106-BAC9-AAE6FF278E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"BF58206E-3086-45AC-91B6-032EF55D5552"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"7D636603-65D5-45DB-AF7F-DD01B3932914"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7A4D6E89-5313-4016-8A7E-036579330DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95A8E226-FCEC-4545-A628-24F5A8103BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F5267BCC-A51C-4F3B-840C-49EF9C2A15F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8CDCDB4B-2DF5-4394-B33A-08A4B6604D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"66206A52-373C-4DBB-A3D7-2A7569C0181E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C41F9E10-000D-4F3B-BEA6-DEE87405B89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F37DFE8-2996-4904-B733-7BAECA95CB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"155EB8F5-7C3C-4293-91EE-62DA561DA54A"}]}]}],"references":[{"url":"http://download.strongswan.org/CHANGES4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35296","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36922","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35178","source":"cve@mitre.org"},{"url":"https://lists.strongswan.org/pipermail/users/2009-May/003457.html","source":"cve@mitre.org"},{"url":"http://download.strongswan.org/CHANGES4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.strongswan.org/pipermail/users/2009-May/003457.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1959","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en loa función event_wallops en fe-common/irc/fe-events.c en irssi v0.8.13, permite a los servidores de IRC remotos provocar una denegación de servicio (caída) a través de un comando vacío, lo que lanza un lectura de búfer por debajo de un byte (one-byte) o por el desbordamiento de búfer inferior de un byte (one-byte)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"1FFA993F-4826-4937-B51D-438CFF4E08EE"}]}]}],"references":[{"url":"http://bugs.irssi.org/index.php?do=details&task_id=662","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36152","source":"cve@mitre.org"},{"url":"http://www.irssi.org/ChangeLog","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:133","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/29/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35399","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022410","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-800-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1596","source":"cve@mitre.org"},{"url":"http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51184","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html","source":"cve@mitre.org"},{"url":"http://bugs.irssi.org/index.php?do=details&task_id=662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.irssi.org/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/29/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-800-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1960","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php.  NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs."},{"lang":"es","value":"inc/init.php de DokuWiki 2009-02-14, rc2009-02-06 y rc2009-01-30, cuando register_globals está habilitado, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través del parámetro config_cascade[main][default][] de doku.php. NOTA: también es posible una inclusión remota de fichero PHP en PHP v5 que utilice URLs ftp://."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokuwiki:dokuwiki:2009-02-14:*:*:*:*:*:*:*","matchCriteriaId":"0C1517AA-3CF0-4B87-BC19-09D1E58EDFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dokuwiki:dokuwiki:rc2009-01-30:*:*:*:*:*:*:*","matchCriteriaId":"3DB7EDB7-794F-4180-93B4-1C15D754F3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dokuwiki:dokuwiki:rc2009-02-06:*:*:*:*:*:*:*","matchCriteriaId":"71C079F7-4C88-4D24-9392-4BA7816DA6B5"}]}]}],"references":[{"url":"http://bugs.splitbrain.org/index.php?do=details&task_id=1700","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki%3Ba=commitdiff%3Bh=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35095","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8781","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8812","source":"cve@mitre.org"},{"url":"http://bugs.splitbrain.org/index.php?do=details&task_id=1700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki%3Ba=commitdiff%3Bh=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1961","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions."},{"lang":"es","value":"El código de doble bloqueo del inodo de fs/ocfs2/file.c del kernel de Linux v2.6.30 anterior a v2.6.30-rc3, v2.6.27 anterior a v2.6.27.24, v2.6.29 anterior a v2.6.29.4 y puede que otras versiones anteriores a v2.6.19; permite a usuarios locales provocar una denegación de servicio (prevención de creación y borrado de ficheros) a través de una serie de llamadas al sistema anidadas que provocan un bloqueo mutuo -deadlock- entre las funciones generic_file_splice_write, splice_from_pipe y ocfs2_file_splice_write."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5. It was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1157.html","lastModified":"2009-07-15T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.7,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.19","matchCriteriaId":"D7346ED4-8185-4408-BE3C-C242CE8BB11C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"2.6.27.24","matchCriteriaId":"04980CC6-D46C-4DD4-A0B1-7B18822AFE8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"2.6.29.4","matchCriteriaId":"7DA28DF5-A572-475C-BCE8-09B70A808FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35390","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35847","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36051","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022307","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/29/2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/30/1","source":"cve@mitre.org","tags":["Exploit","Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/1","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35143","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/29/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/03/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-793-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-1962","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T01:00:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID."},{"lang":"es","value":"Xfig en Debian GNU/Linux, posiblemente v3.2.5, permite a usuarios locales leer y escribir archivos de su elección a través de un enlace simbólico a los ficheros temporales (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] donde [PID] es el ID (identificador) del proceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfig:xfig:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BD269541-F1A0-4FFD-BFB6-423BC806D076"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*","matchCriteriaId":"F5114DA3-FBB9-47C4-857B-3212404DAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*","matchCriteriaId":"4D5F5A52-285E-4E7E-83B8-508079DBCEAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*","matchCriteriaId":"674BE2D9-009B-46C5-A071-CB10368B8D48"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*","matchCriteriaId":"703486E5-906B-4BDB-A046-28D4D73E3F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"ABB5AC0D-2358-4C8E-99B5-2CE0A678F549"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"38B37184-BA88-44F1-AC9E-8B60C2419111"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*","matchCriteriaId":"0D8C9247-3E18-4DD9-AF5B-B2996C76443F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*","matchCriteriaId":"0EEA2CDD-7FCD-461E-90FC-CDB3C3992A32"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"D7B877A8-5318-402E-8AE1-753E7419060F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"A3938420-087D-4D92-A2F8-EAE54D9837EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:s\\/390:*:*:*:*:*","matchCriteriaId":"0331E302-352E-457D-BF75-3C12AD5E206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"10F42CF8-FB98-4AFC-96C5-FD7D442B0FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:alpha:*:*:*:*:*","matchCriteriaId":"CF03E406-5B00-4C49-9705-45DCDB4008DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:amd64:*:*:*:*:*","matchCriteriaId":"7020CA7E-FB01-4F6D-9BA7-A0D88980C21E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:arm:*:*:*:*:*","matchCriteriaId":"234806CB-272F-4EFA-9FBB-C031A9C3D71C"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:armel:*:*:*:*:*","matchCriteriaId":"2A76BD7E-C96E-4279-A55A-5DC5EDB49A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:hppa:*:*:*:*:*","matchCriteriaId":"636EE19C-B240-463C-A283-F4E78D99717E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"421F6F87-777E-411F-9F68-1CA0D6F70451"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"29D886A2-920A-4FA6-9499-E0C25A178783"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:m68k:*:*:*:*:*","matchCriteriaId":"04376A10-26EB-400E-B2A1-F5C594A026DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:mips:*:*:*:*:*","matchCriteriaId":"D9595A0F-BF18-4C50-B7FD-61685A83D8C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"47A7B824-7355-4F51-9316-B1EB3D9EB9AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:powerpc:*:*:*:*:*","matchCriteriaId":"2E6CFC20-96B6-46B2-9DD7-024E0775757A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:s\\/390:*:*:*:*:*","matchCriteriaId":"9403840E-C30B-44F1-A115-BA0A00520EA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:sparc:*:*:*:*:*","matchCriteriaId":"1D65FD67-8F21-4BEE-BD29-FDF69B9A437B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35320","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:244","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34328","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/04/01/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1963","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Foundation en Oracle Database v11.1.0.6 permite a usuarios remotos autenticados afectar a la integridad y la disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B2AF3BD5-BA86-485A-9E78-A5F95B1ECEBA"}]}]}],"references":[{"url":"http://osvdb.org/55885","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35677","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51751","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1964","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Workspace Manager en  Oracle Database  v10.2.0.4, permite a usuarios autenticados remotamente  comprometer la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://osvdb.org/59115","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36755","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1965","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\nThis vulnerability only affects the Windows platform.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Foundation Layer en Oracle Database v9.2.0.8 y v10.1.0.5 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36760","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1966","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1967."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Config Management en (1) Oracle Database 11.1.0.7 y (2) Oracle Enterprise Manager 10.2.0.4 permite a usuarios remotos autenticado afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1967."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"449A3C99-2798-4EF3-883B-5A0146E6E2E9"}]}]}],"references":[{"url":"http://osvdb.org/55887","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35676","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51752","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1967","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Config Management en (1) Oracle Database 11.1.0.7 y (2) Oracle Enterprise Manager 10.2.0.4 permite a usuarios remotos autenticado afectar la confidencialidad y la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1966."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"449A3C99-2798-4EF3-883B-5A0146E6E2E9"}]}]}],"references":[{"url":"http://osvdb.org/55888","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35692","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51753","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1968","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors.  NOTE: the previous information was obtained from the July 2009 CPU.  Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups parameter in search/query/search."},{"lang":"es","value":"La vulnerabilidad no especificada en el componente Secure Enterprise Search en Database de Oracle versión 10.1.8.3, permite a los atacantes remotos afectar a la integridad por medio de vectores desconocidos. NOTA: la información anterior fue obtenida de la CPU de julio de 2009. Oracle no ha comentado sobre las afirmaciones de un investigador establecido de que se trata de cross-site scripting (XSS) por medio del parámetro search_p_groups en el archivo search/query/search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BDA21D58-967C-4011-AE13-CEE6E91DB721"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0110.html","source":"secalert_us@oracle.com"},{"url":"http://dsecrg.com/pages/vul/show.php?id=125","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55892","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35681","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51754","source":"secalert_us@oracle.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dsecrg.com/pages/vul/show.php?id=125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1969","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Auditing en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4, y v11.1.0.7 que permite a los usuarios remotos autenticados afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://osvdb.org/55894","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35689","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51755","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1970","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Listener en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.7 permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0991."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://osvdb.org/55891","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35683","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51756","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1971","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Data Pump en Oracle Database v10.1.0.5, v10.2.0.3, y v11.1.0.7 permite a los usuarios remotos autenticados comprometer la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36754","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1972","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Auditing de Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, v10.2.0.4 y v11.1.0.7 , permite a usuarios autenticados en remoto comprometer la integridad. Está relacionado con DBMS_SYS_SQL y DBMS_SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36758","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1973","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Virtual Private Database en Oracle Database v10.1.0.5, v10.2.0.4, y v11.1.0.7 permite a los usuario remotos autenticados afectar la confidencialidad y integridad en relación a las políticas VPD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://osvdb.org/55890","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35687","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022560","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51757","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1974","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package."},{"lang":"es","value":"Vulnerabilidad inespecífica en WebLogic Server component en BEA Product Suite v10.3, v10.0 MP1, v9.2 MP3, v9.1, v9.0, v8.1 SP6, y v7.0 SP7 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Servlet Container Package."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*","matchCriteriaId":"6859E096-4FA7-4797-B2D6-C5CE15D2078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0B8AB045-051A-477E-B2F7-4057826C43F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*","matchCriteriaId":"A7390B6A-7944-4509-B499-5B51DB9BF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*","matchCriteriaId":"193516AD-8096-4A6E-9C4B-4B9717DD7021"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://osvdb.org/55906","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35674","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51758","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1975","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente WebLogic Server component en BEA Product Suite v10.3 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad, relacionada con WLS Console Package."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35673","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022561","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51759","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1976","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente servidor HTTP en Oracle Application Server v10.1.2.3 permite a atacantes remotos afectar ala integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"}]}]}],"references":[{"url":"http://osvdb.org/55896","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35688","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022567","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51760","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1977","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows attackers to bypass authentication via unknown vectors involving the username parameter and login.php."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup v10.2.0.3 permite a los atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través e vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"42091C54-567D-4626-98EA-41B568965B23"}]}]}],"references":[{"url":"http://osvdb.org/55903","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35672","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022565","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-058/","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51761","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-058/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1978","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows remote authenticated users to execute arbitrary code with SYSTEM privileges via vectors involving property_box.php."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.3 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos. NOTA: la información anterior se obtuvo de la CPU de Oracle de Julio de 2009. Oracle no ha comentado sobre las alegaciones de un investigador independiente que esta vulnerabilidad permite a usuarios remotos autenticados ejecutar código arbitrario con privilegios de SYSTEM a través de vectores que implican a property_box.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"42091C54-567D-4626-98EA-41B568965B23"}]}]}],"references":[{"url":"http://osvdb.org/55904","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35678","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022565","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-059/","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51762","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-059/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1979","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n# The CVSS Base Score is 10.0 only for Windows. For Linux, Unix and other platforms, the CVSS Base Score is 7.5, and the impacts for Confidentiality, Integrity and Availability are Partial+.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2009 CPU.  Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Network Authentication en Oracle Database v10.1.0.5 y v10.2.0.4 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores no conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://blogs.conus.info/node/28","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/59110","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/archive/1/507598/100/0/threaded","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36747","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://blogs.conus.info/node/28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507598/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1980","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Application Object Library en Oracle E-Business Suite v11.5.10.2, v12.0.6, y v12.1 permite a lo usuario remotos autenticados afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*","matchCriteriaId":"E6678372-9E85-49A8-BAEC-8B9E82DA4D1D"}]}]}],"references":[{"url":"http://osvdb.org/55898","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35686","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022562","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51763","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1981","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Highly Interactive Client en Siebel Product Suite v7.5.3, v7.7.2, v7.8.2, v8.0.0.5, y v8.1.0 permite a usuarios locales afectar a la confidencialidad y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.0},"baseSeverity":"LOW","exploitabilityScore":2.7,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise_suite:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C73DB85A-44E3-4C2D-8159-B452DAAB3833"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise_suite:7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4AEE5A7E-4FA2-411A-B2BE-43FEDA96E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise_suite:7.8.2:*:*:*:*:*:*:*","matchCriteriaId":"BBB2043C-79B2-42EA-8664-757BCC637DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise_suite:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"54ED5AFA-964A-4E56-B778-56B1372C1647"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:siebel_enterprise_suite:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BDE84459-D89A-4963-AAB0-61E91AD1681B"}]}]}],"references":[{"url":"http://osvdb.org/55908","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35698","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022564","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51764","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1982","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Oracle Applications Framework en Oracle E-Business Suite v11.5.10.2 y v12.0.6 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"}]}]}],"references":[{"url":"http://osvdb.org/55900","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35693","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022562","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51765","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1983","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Oracle iStore component en Oracle E-Business Suite v11.5.10.2, v12.0.6, y v12.1 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*","matchCriteriaId":"E6678372-9E85-49A8-BAEC-8B9E82DA4D1D"}]}]}],"references":[{"url":"http://osvdb.org/55901","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35697","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022562","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51766","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1984","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente Application Install component en Oracle E-Business Suite v11.5.10.2, v12.0.6, y v12.1 permite a usuarios locales afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con el administrador de parches."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*","matchCriteriaId":"E6678372-9E85-49A8-BAEC-8B9E82DA4D1D"}]}]}],"references":[{"url":"http://osvdb.org/55899","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35690","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022562","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51767","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1985","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"The CVSS Base Score is 10.0 only for Windows. For Linux, Unix and other platforms, the CVSS Base Score is 7.5, and the impacts for Confidentiality, Integrity and Availability are Partial+.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Network Authentication en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5 y v10.2.0.4, permite a atacantes remotos  comprometer la confidencialidad, disponibilidad  e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://osvdb.org/59111","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36745","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1986","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecifica en Oracle Applications Manager component en Oracle E-Business Suite v11.5.10.2 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"}]}]}],"references":[{"url":"http://osvdb.org/55902","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35695","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022562","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51768","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1987","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en PeopleSoft Enterprise PeopleTools - Enterprise Portal component en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.49.21 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.21:*:*:*:*:*:*:*","matchCriteriaId":"5CC7947C-BEFF-4E99-9986-963459D5B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.21:*:*:*:*:*:*:*","matchCriteriaId":"EDD19EEC-1187-4765-AAC7-EE083E2A277E"}]}]}],"references":[{"url":"http://osvdb.org/55909","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35691","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022566","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51769","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1988","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HRMS eProfile Manager en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19 y 9.0 Bundle 9 permite a usuarios autenticados remotos afectar a la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"B431E05A-B8C1-40C6-96D7-62E540FA4776"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle19:*:*:*:*:*:*","matchCriteriaId":"F1C73ED2-4404-459D-A731-3D36F2999371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle9:*:*:*:*:*:*","matchCriteriaId":"D4658ADF-EA83-41F0-99C0-08EAE3E64702"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"5BB1FADD-188C-498F-B789-39EAE57DB92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle19:*:*:*:*:*:*","matchCriteriaId":"4FC707DE-D053-48B0-A8BA-01651384F2B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:bundle9:*:*:*:*:*:*","matchCriteriaId":"F7B21990-7957-4582-A91A-73AF9856B829"}]}]}],"references":[{"url":"http://osvdb.org/55910","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/35696","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1022566","source":"secalert_us@oracle.com"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51770","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1989","sourceIdentifier":"secalert_us@oracle.com","published":"2009-07-14T23:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise FMS en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33 y 9.0 Bundle 24 permite a usuarios autenticados remotos afectar a la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"B431E05A-B8C1-40C6-96D7-62E540FA4776"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle14:*:*:*:*:*:*","matchCriteriaId":"42F9F31D-3074-4418-9566-5DB6C4367EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:*:*:*:*:*:*:*","matchCriteriaId":"AA7FAE18-AEFE-4BD6-ABAC-03EF9C61CCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"5BB1FADD-188C-498F-B789-39EAE57DB92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.9:bundle14:*:*:*:*:*:*","matchCriteriaId":"04347985-3F19-4D42-9390-06DE1B3E6992"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0B4851-1897-414C-B7D2-4C158D648629"}]}]}],"references":[{"url":"http://osvdb.org/55911","source":"secalert_us@oracle.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35776","source":"secalert_us@oracle.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35694","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022566","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"secalert_us@oracle.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/55911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1990","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Business Intelligence Enterprise Edition en Oracle Application Server v10.1.3.4.1 permite a usuarios locales afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ABC710DC-5B41-4DE4-9D75-D467E1245093"}]}]}],"references":[{"url":"http://osvdb.org/59117","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37099","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36749","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023058","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1991","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC.  NOTE: the previous information was obtained from the October 2009 CPU.  Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Text en Oracle Database v9.2.0.8, v9.2.0.8DV, v10.1.0.5, y v10.2.0.4 permite a los usuarios remotos autenticados comprometer la confidencialidad e integridad, relativo a CTXSYS.DRVXTABC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*","matchCriteriaId":"37C10722-4CC7-4C06-8DBC-4D96307DB41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]}]}],"references":[{"url":"http://osvdb.org/59113","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36748","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1992","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\nThis vulnerability only affects the Windows platform.\r\n\r\nThe following Oracle Database Server vulnerability included in this Critical Patch Update affects client-only installations: CVE-2009-1992.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database v9.2.0.8, v10.1.0.5 y v10.2.0.4, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"432A3020-9977-4A10-9CDA-3A71E83F63F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36742","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1993","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"Overview of Oracle Application Express\r\n\r\nOracle Application Express is a rapid web application development tool for the Oracle Database. In Oracle Database releases up to and including 10g Release 2, Oracle Application Express was separately installed from a Companion CD supplied with the Oracle Database CD set or from a package downloaded from an Oracle web site. If you have not installed Oracle Application Express from the companion CD or from a packaged download from an Oracle web site, no further action is required. From Oracle Database 11g onwards, Oracle Application Express is included in the default installation of the Oracle Database.\r\n\r\nIf you have Oracle Application Express installed in an Oracle Database home, then refer to Critical Patch Update October 2009 Patch Availability Document for Oracle Products, My Oracle Support Note 881382.1 for the version to be installed. \"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Application Express en Oracle Database v3.0.1, permite a usuarios autenticados remotamente comprometer la confidencialidad e integridad. Relacionado con el FLOWS_030000.WWV_EXECUTE_IMMEDIATE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A8C4BDA-F35D-416B-8C19-BE75DE4CF664"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36759","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1994","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Spatial en Oracle Database v10.1.0.5 permite a usuarios autentificados remotamente afecta la confidencialidad, integridad y disponibilidad, relacionado con MDSYS.PRVT_CMT_CBK."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03A522A3-07D7-481F-A538-EA3D13256F63"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36744","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1995","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Advanced Queuing en Oracle Database v10.2.0.4 y v11.1.0.7, permite a usuarios autenticados remotamente comprometer la confidencialidad e integridad. Relacionado con el SYS.DBMS_AQ_INV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://osvdb.org/59109","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36752","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1997","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Authentication en Oracle Database v10.2.0.3 y v11.1.0.7 permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ED41086B-840A-4B39-B249-461A4B00B57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36751","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1998","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Communications Order y Service Management de Oracle Industry Applications v2.8.0, v6.2.0, v6.3.0 y v6.3.1, permite a usuarios autenticados en remoto comprometer la confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"54AFA253-F629-4207-99CA-3E2C26C4D24B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"81DF6C0B-AEE7-48C5-807F-07384B86C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BE52D3AB-5E7A-4A35-96EE-28C351DDDA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"59BC9765-896C-4898-AEC8-787A0E77B810"}]}]}],"references":[{"url":"http://osvdb.org/59114","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36775","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023060","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-1999","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"Fixed in all supported versions. No patch provided in this Critical Patch Update.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Intelligence Enterprise Edition en versiones no específicas en Oracle Application Server permite a los atacantes remotos comprometer la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"}]}]}],"references":[{"url":"http://osvdb.org/59118","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37099","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36746","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023058","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://osvdb.org/59118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-2000","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente   Authentication en Oracle Database v10.1.0.7, permite a atacantes remotos comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36756","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-2001","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PL/SQL en Oracle Database v10.2.0.4 y 11.1.0.7 permite a los usuarios remotos autenticados comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4AC251D-9313-4A54-9623-51DC0AEC46FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDEDE937-C3D7-421C-9F70-F546AB823E1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37027","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36743","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023057","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://secunia.com/advisories/37027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-2002","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente  WebLogic Portal en BEA Product Suite v8.1.6, v9.2.3, v10.0.1, v10.2.1, y v10.3.1.0.0 permite a atacantes remotos afectar en la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C0AE14A8-253D-4093-8856-0D686CDF6EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FC0ABBCC-A586-490D-A9ED-2A641E197F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A4E81EB8-8581-45F2-BE9B-05E97B2DF4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9BD10E5-868A-47F3-88F4-21902B6E803B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4B2B7E0E-66C1-4F01-AB1B-05050DF7C047"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36774","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023062","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-2003","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to \"admin.\""},{"lang":"es","value":"Password Protector SD v1.3.1 de Ascad Networks permite a usuarios remotos evitar la autenticación y obtener acceso de administrador asignando las cookies (1) c7portal y (2) cookname a \"admin.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ascadnetworks:password_protector_sd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"29F629D3-5F1F-4A1B-9AC4-D356DB9C2EC8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/34930","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2004","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) student and (2) course parameters, a different vector than CVE-2007-2902."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en main/mySpace/myStudents.php de Dokeos 1.8.5 permiten a usuarios remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"student\" (estudiante) y (2) \"course\" (curso), un vector de ataque diferente al descrito en CVE-2007-2902."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"EC93EA9A-727E-41DF-BB6C-EFD976EF0042"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/112/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50501","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/112/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2005","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en Dokeos v1.8.5 y posiblemente versiones anteriores permiten a usuarios remotos secuestrar la autenticación de víctimas no especificadas y añadir entradas en la agenda personal a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"EC93EA9A-727E-41DF-BB6C-EFD976EF0042"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/112/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://holisticinfosec.org/content/view/112/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2006","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php.  NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Dokeos v1.8.5, y posiblemente versiones anteriores, permiten a usuarios remotos inyectar codigo web script o código HTML a través de (1) el parámetro search_term de main/auth/courses.php, (2) los parámetros frm_title y (3) frm_content en una acción de objeto de nueva agenda personal, (4) el parámetro title y (5) tutor_name en una acción de nuevo curso y (6) los parámetros student y (7) course de main/mySpace/myStudents.php. NOTA: los vectores de ataque (2) y (3) sólo pueden ser explotados a través de una vulnerabilidad distinta de falsificación de petición en sitios cruzados (CSRF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"EC93EA9A-727E-41DF-BB6C-EFD976EF0042"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/112/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50498","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50502","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/112/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2007","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Dokeos v1.8.5, y posiblemente versiones anteriores, permiten a usuarios remotos (1) leer porciones de ficheros de su elección a través de las secuencias de caracteres .. (punto punto) y ..\\ (punto punto barra invertida) en el parámetro lang de main/exercice/hotspot_lang_conversion.php y (2) leer ficheros de su elección a través de los caracteres .. (punto punto) en el parámetro doc_url de main/exercice/Hpdownload.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"EC93EA9A-727E-41DF-BB6C-EFD976EF0042"}]}]}],"references":[{"url":"http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50503","source":"cve@mitre.org"},{"url":"http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/34928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2008","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uInfo parameter to main/tracking/userLog.php and the (2) course parameter to main/mySpace/lp_tracking.php, a different vector than CVE-2009-2006.2."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Dokeos v1.8.5 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"uInfo\" a main/tracking/userLog.php y (2) \"course\" a main/mySpace/lp_tracking.php. Vector distinto de CVE-2009-2006."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"EC93EA9A-727E-41DF-BB6C-EFD976EF0042"}]}]}],"references":[{"url":"http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html","source":"cve@mitre.org"},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51141","source":"cve@mitre.org"},{"url":"http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2009","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Dokeos v1.8.5 y posiblemente versiones anteriores, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"curdirpath\" a main/document/slideshow.php y  (2) \"file\" a main/exercice/testheaderpage.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dokeos:dokeos:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"EC93EA9A-727E-41DF-BB6C-EFD976EF0042"}]}]}],"references":[{"url":"http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html","source":"cve@mitre.org"},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51140","source":"cve@mitre.org"},{"url":"http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2010","sourceIdentifier":"cve@mitre.org","published":"2009-06-08T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Haudenschilt Family Connections CMS (FCMS) v1.9 y anteriores, permite a usuarios autenticados ejecutar comandos SQL de su elección a través de los parámetros (1) \"thread\" a messageboard.php, (2) \"member\" a profile.php, (3) \"pid\" a gallery/index.php, y (4) \"fcms_login_id cookie\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"9E3BC0B4-9DA5-49B3-BAE1-B05014167EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4A3DC010-D142-4DEB-B425-04B8E10D9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"505E59AC-08C9-4D13-8470-76191D73F6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CBA041C5-5FF4-46A8-9F1D-74025E742EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:0.6:*:*:*:*:*:*:*","matchCriteriaId":"D025AEE2-75AF-4959-9E78-E9AB6E163664"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:0.8:*:*:*:*:*:*:*","matchCriteriaId":"0F32130D-8C69-4E23-BC2D-985AF5D41E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:0.9:*:*:*:*:*:*:*","matchCriteriaId":"E84E4E37-EAD0-4069-9A23-12941E8E3B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"8C009F6D-C0CB-4CE9-9B0A-9532167FBAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C4790A62-6E63-4D9A-87FF-2D1020E7C7E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haudenschilt:family_connections_cms:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B944B953-EA7F-4B7D-A8B7-6A7807851ACC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503477/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34935","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8671","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503477/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2011","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T21:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method."},{"lang":"es","value":"Worldweaver DX Studio Player v3.0.29.0, v3.0.22.0, v3.0.12.0, y probablemente otras versiones anteriores a la v3.0.29.1, cuando es utilizado como plug-in de Firefox, no restringe el acceso al metodo shell.execute JavaScript API, lo que permite a atacantes remotos ejecutar comandos arbitrarios a través de el fichero .dxstudio que invoca este método."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxstudio:dx_studio_player:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.29.0","matchCriteriaId":"040E646F-230E-49F9-85F0-3349DC090ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dxstudio:dx_studio_player:3.0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"247B99AB-854D-4405-A9A1-1AD427052761"},{"vulnerable":true,"criteria":"cpe:2.3:a:dxstudio:dx_studio_player:3.0.22.0:*:*:*:*:*:*:*","matchCriteriaId":"1CCDE21B-3AE2-4AC5-B414-FC7052D13611"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/DXStudio-player-firefox-plugin","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/504195/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35273","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1561","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51035","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/DXStudio-player-firefox-plugin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/504195/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2012","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T17:30:10.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en idmap en Sun OpenSolaris snv_88 a snv_110, cuando el servidor CIFS está habilitado, permite a atacantes remotos provocar una denegación de servicio (caída del demonio idpmapd y parada de idmapd) mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:sparc:*:*:*:*:*:*","matchCriteriaId":"D05BBA43-DF35-4B0C-BCA7-3D0D7AA4802D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:x86:*:*:*:*:*:*","matchCriteriaId":"FB134C5D-D0FF-436C-8304-5CED1EC54A7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-260508-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35252","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1519","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-260508-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2013","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bin/aps_browse_sources.php en Frontis v3.9.01.24 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"source_class\" en una acción browse_classes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontisgroup:frontis:3.9.01.24:*:*:*:*:*:*:*","matchCriteriaId":"56D97C94-2DB6-4C2E-84A5-080EFE7A9D66"}]}]}],"references":[{"url":"http://secunia.com/advisories/35369","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1531","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2014","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente ComSchool (com_school) v1.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"classid\" en una acción showclass a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_school:1.4:*:*:*:*:*:*:*","matchCriteriaId":"22104252-F150-45B8-A85F-9EA699469B44"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35257","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50988","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2015","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/file_includer.php en el componente Ideal MooFAQ (com_moofaq) v1.0 para Joomla! permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro \"file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ideal:com_moofaq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C4976D60-448F-4514-81B2-5222E82A19A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/35370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35259","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1530","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8898","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2016","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en products.php en Virtue Shopping Mall permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_shopping_mall:*:*:*:*:*:*:*:*","matchCriteriaId":"FCDE2F05-92BC-4600-B8B0-35A818896B36"}]}]}],"references":[{"url":"http://secunia.com/advisories/35374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1527","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8894","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2017","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en products.php en Virtue Book Store permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_book_store:*:*:*:*:*:*:*:*","matchCriteriaId":"9C08C8B3-CB62-4207-B03C-9F22CB38731D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35375","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1526","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8893","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2018","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en Jared Eckersley MyCars, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"authuserid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaredeckersley:mycars:*:*:*:*:*:*:*:*","matchCriteriaId":"389CA0C9-51FC-4390-B07B-109CC7441394"}]}]}],"references":[{"url":"http://secunia.com/advisories/35281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50985","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2019","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news_detail.php en Virtue News Manager permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"nid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_news_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"F9A794E8-8B1B-471F-A33A-9040E64CCF6A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2020","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en news_detail.php en Virtue News Manager permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"nid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_news_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"F9A794E8-8B1B-471F-A33A-9040E64CCF6A"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8901","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2021","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php en Virtue Classifieds permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro category."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"036EDD51-FC03-48E4-887E-A8D7585F7731"}]}]}],"references":[{"url":"http://secunia.com/advisories/35376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2022","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb."},{"lang":"es","value":"fipsCMS Light v2.1 almacena información sensible en la raíz del directorio web con insuficiente control de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener información sensible a través de una petición directa a _fipsdb/db.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fipsasp:fipscms_light:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3663D798-A005-45DB-9D4D-06945784F568"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50987","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8890","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2023","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the current_currency parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Shop-Script Pro v2.12, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro current_currency."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shop-script:shop-script:2.12:-:pro:*:*:*:*:*","matchCriteriaId":"7430B79D-EB68-4BCD-8543-7F02216AA444"}]}]}],"references":[{"url":"http://secunia.com/advisories/33634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8906","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2024","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt."},{"lang":"es","value":"Vlad Titarenko ASP VT Auth v1.0 almacena información sensible sensible bajo la raiz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar la base de datos y obtener nombres de usuario y contraseñas a través de una petición directa para zHk8dEes3.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vt.rovno:asp_vt_auth:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D60F678E-980F-4CA5-A96E-A2F4CFDE332F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50986","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8889","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2025","sourceIdentifier":"cve@mitre.org","published":"2009-06-09T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values."},{"lang":"es","value":"admin/login.php en DM FileManager v3.9.2, permite a atacantes remotos evitar la autenticación y obtener acceso como administradores estableciendo con valores determinados las cookies (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EC55C936-2850-4E42-BE95-81E3743FCD45"}]}]}],"references":[{"url":"http://secunia.com/advisories/35167","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8903","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2026","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función de búsqueda de \"token\" (testigo) en la librería dtscore de los servicios Data Transport Services de CA Software Delivery r11.2 C1, C2, C3, y SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; y CA IT Client Manager r12."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:advantage_data_transport:3.0:c1:*:*:*:*:*:*","matchCriteriaId":"5E6409A3-4F03-4CED-9A2E-2DE7B5EE624E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:it_client_manager:r12:*:*:*:*:*:*:*","matchCriteriaId":"C31688D4-1C99-4764-A913-564E0FEB1E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:software_delivery:r11:c1:*:*:*:*:*:*","matchCriteriaId":"8E14834E-9E56-4036-B89C-E6F0E6775E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:software_delivery:r11:c2:*:*:*:*:*:*","matchCriteriaId":"F59A43E7-02A9-4656-A4C4-FE01DCE5E615"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:software_delivery:r11:c3:*:*:*:*:*:*","matchCriteriaId":"F3DE142E-A7C8-4280-9677-AE167FA3ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:software_delivery:r11:sp4:*:*:*:*:*:*","matchCriteriaId":"4FD0F14E-A31D-4A2C-A464-A7DAC1CB2180"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:unicenter_software_delivery:4.0:c3:*:*:*:*:*:*","matchCriteriaId":"D546AF2C-34D9-4C7A-A2F1-F766D1CAA3E2"}]}]}],"references":[{"url":"http://osvdb.org/56834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022688","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505557/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35984","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2195","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-052/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52322","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/56834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505557/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-052/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2027","sourceIdentifier":"cve@mitre.org","published":"2009-06-10T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method."},{"lang":"es","value":"El instalador en Apple Safari anterior a v4.0 en Windows permite a usuarios locales obtener privilegios marcando un cuadro (checkbox) que especifica que aplicación ejecutar después de la instalación, en relación con un método de compresión sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F1F650EC-4778-4233-9CF5-2B809CE4C799"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"A588615E-EE35-4E19-8BDA-598ED9664686"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"3E61C168-482B-412A-97E8-B1C651797EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"32024B14-B4F7-466E-AEF2-0D3A7E8E1060"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"D137F48A-E670-4BDB-B003-C6BB2A33F250"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"85AB4EDB-408D-4D2F-95BE-B578455EFA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"0B256D38-257B-4C3D-9EA5-2255BF3A329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"158AEA23-B5DB-4CBC-8391-2D97233A8E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*","matchCriteriaId":"77F31F4B-5305-4D75-9277-95EF99A969A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*","matchCriteriaId":"BDE11F09-3D57-4CF0-8165-90FB234CC403"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*","matchCriteriaId":"99118352-6845-4704-B4A3-F98E8C06E0FD"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51290","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2028","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to \"Adobe internally discovered issues.\""},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en cualwuier Adobe Reader 7 d Acrobat 7 anterior a v7.1.3, Ie 8 anterior a v8.1.6, y Adobe Reader 9 y Acrobat 9 anterior a v9.1.2 tiene vectores de ataque y un impacto desconocido relacional con \"cuestiones Adobe internally discovered\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"}]}]}],"references":[{"url":"http://secunia.com/advisories/35496","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35734","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2029","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denial of service (NIS+ daemon hang) via unspecified vectors related to NIS+ callbacks."},{"lang":"es","value":"Vulnerabilidad sin especificar en rpc.nisd en Sun Solaris v8 a la  v10, y  OpenSolaris anterior snv_104, permite a usuarios autenticados remotamente provocar una denegación e servicio( caída de demonio NIS+) a través de vectores no especificados relacionados con las llamadas de NIS+ ñ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_103","matchCriteriaId":"3ED96136-3180-4DA8-9203-BBECC1BD8B69"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_103","matchCriteriaId":"932F40C2-8664-4FD8-A06A-7103EABCD4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-67-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256748-1","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35276","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1566","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6331","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-67-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256748-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2030","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unknown impact and attack vectors related to \"XML SECURITY PATCH.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en la funcionalidad de comprobación de XML Digital Signature en JVA-RUN en JDK versión 6.0 en IBM OS/400 i5/OS versiones V5R4M0 y V6R1M0, presenta un impacto y vectores de ataque desconocidos relacionados con \"XML SECURITY PATCH\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os\\/400:v5r4m0:*:*:*:*:*:*:*","matchCriteriaId":"745A6192-A7F2-4C72-9885-3C89C3A0A07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os\\/400:v6r1m0:*:*:*:*:*:*:*","matchCriteriaId":"1F176C69-F5B0-4027-B1E7-B5634EA3E42E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35356","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas2741c96b7c573b81a862575cc003c726e","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas2e858199605d67111862575cc003c7276","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2009-June/002190.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35265","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1536","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51005","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas2741c96b7c573b81a862575cc003c726e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas2e858199605d67111862575cc003c7276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.attrition.org/pipermail/vim/2009-June/002190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2031","sourceIdentifier":"cve@mitre.org","published":"2009-06-11T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes."},{"lang":"es","value":"smbfs en Sun OpenSolaris snv_84 hasta snv_110, cuando permisos de montaje por defecto son utilizados, permite a los usuarios locales leer arbitrariamente archivo, y listar arbitrariamente directorios, en volúmenes CIFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35306","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1569","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2032","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en PDshopPro, cuando se descarga antes de 20070308 , permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través del parámetro \"search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pagedowntech:pdshoppro:*:*:*:*:*:*:*:*","matchCriteriaId":"2226CB68-401B-44D1-B9E5-7546427D33CE"}]}]}],"references":[{"url":"http://osvdb.org/55020","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2033","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Yogurt v0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"msg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ricardo_alexandre_de_oliveira_staudt:yogurt:0.3:*:*:*:*:*:*:*","matchCriteriaId":"2FFAE406-18F9-4D30-8126-6493BA6FF353"}]}]}],"references":[{"url":"http://osvdb.org/55097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35324","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8932","source":"cve@mitre.org"},{"url":"http://osvdb.org/55097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2034","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en writemessage.php en Yogurt v0.3, cuando register_globals esta activado, lo que permite a usuarios remotos autenticados ejecutar comandos SQL de forma arbitraria a través del parámetro \"original\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ricardo_alexandre_de_oliveira_staudt:yogurt:0.3:*:*:*:*:*:*:*","matchCriteriaId":"2FFAE406-18F9-4D30-8126-6493BA6FF353"}]}]}],"references":[{"url":"http://osvdb.org/55098","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35324","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8932","source":"cve@mitre.org"},{"url":"http://osvdb.org/55098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2035","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en el modulo de Drupal, Services v6.x anteriores a v6.x-0.14, cuando el acceso \"key-based\" esta activado, permitiría a atacantes remotos leer y añadir claves y acceso no autorizado a servicios a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:services_module_for_drupal:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-0.13","matchCriteriaId":"C7180372-7F26-4D32-A036-CD7D4255C494"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:services_module_for_drupal:6.x-0.12:*:*:*:*:*:*:*","matchCriteriaId":"F99E48DF-F2DE-482C-9BFB-08A3A19011AD"}]}]}],"references":[{"url":"http://drupal.org/node/487784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488004","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54999","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/33371","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35292","source":"cve@mitre.org"},{"url":"http://drupal.org/node/487784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/33371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2036","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Open Biller v0.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geekbill:open_biller:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2888E027-0C59-4AE4-A79E-677B0A1A7B97"}]}]}],"references":[{"url":"http://osvdb.org/55103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504231/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8927","source":"cve@mitre.org"},{"url":"http://osvdb.org/55103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504231/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2037","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) GLOBALS[SKIN] parameter to index.php and the (2) skin parameter to admin/admin.php."},{"lang":"es","value":"Múltiples vulnerabilides de salto de directorio en Online Grades & Attendance v3.2.5 y anteriores, y posiblemente v3.2.6, cuando register_globals esta activado, permite a atacantes remotos incluir y ejecutar ficheros locales a través de ..(punto punto) en los parámetros (1)\"GLOBALS[SKIN]\" en index.php y (2) \"skin\"  en admin/admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.5","matchCriteriaId":"66A9518B-57E3-4223-BDE1-5A2E492A6BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.6","matchCriteriaId":"9F61C8A3-260A-4DB1-8807-F38FBE881B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C7852F48-E340-4582-A818-44179F683A65"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50901","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50902","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8853","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2038","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges."},{"lang":"es","value":"Vulnerabilidad inespecífica en el modulo Finnish Bank Payment v2.2 para osCommerce tiene impacto y vectores de ataque desconocidos relacionados con los cargos del banco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B19A5485-0FFE-4284-9630-9F379C1223F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:finnish_bank_payment:*:*:*:*:*:*:*:*","matchCriteriaId":"C42BF0DB-FB42-4533-A899-3BF478AB9C50"}]}]}],"references":[{"url":"http://addons.oscommerce.com/info/5485","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35385","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51007","source":"cve@mitre.org"},{"url":"http://addons.oscommerce.com/info/5485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2039","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders."},{"lang":"es","value":"Vulnerabilidad inespecífica en el modulo Luottokunta anteriores a v1.3 para osCommerce tiene un impacto y unos vectores de ataque relacionados con los pedidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B19A5485-0FFE-4284-9630-9F379C1223F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:luottokunta:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C7AC701D-E8D5-4DC7-9ED0-2FAF53F3ABF3"}]}]}],"references":[{"url":"http://addons.oscommerce.com/info/3698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35191","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50925","source":"cve@mitre.org"},{"url":"http://addons.oscommerce.com/info/3698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2040","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T18:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request."},{"lang":"es","value":"admin/options.php en Grestul v1.2 no posee restricciones de acceso adecuadas, lo que permite a atacantes remotos evitar la autenticación y crear cuentas administrativas a través de la accion manage_admin en una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grestul:grestul:1.2:*:*:*:*:*:*:*","matchCriteriaId":"505A1394-5135-475B-83D6-1DB31B654A0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50999","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8902","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2041","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T20:30:00.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en A51 D.O.O. activeCollab v0.7.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos, una vulnerabilidad diferente de CVE-2009-1772."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activecollab:activecollab:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2949C4ED-9C1B-4E49-99D5-9B08053C9370"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN55752635/index.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55099","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51190","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN55752635/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2042","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via \"out-of-bounds pixels\" in the file."},{"lang":"es","value":"libpng anteriores a v1.2.37 no parsea adecuadamente 1-bit de imágenes entrelazadas con valores de ancho que no son divisibles por 8, lo que produce que libpng incluya bits sin inicializar en ciertas filas del fichero PNG lo que permitiría atacantes remotos leer trozos de memoria sensible a través de \"pixeles fuera de rango\" en el fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been addressed in Red Hat Enterprise Linux 3, 4, and 5 via https://rhn.redhat.com/errata/RHSA-2010-0534.html.","lastModified":"2010-07-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.35","matchCriteriaId":"AABEC89B-60F1-4ECB-AA31-FA1BC8C1A8FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:0.89c:*:*:*:*:*:*:*","matchCriteriaId":"9427E9C7-0B51-4066-9428-BE48D8BAD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:0.95:*:*:*:*:*:*:*","matchCriteriaId":"DE45B563-07B8-4F4E-80B4-C73216DF7295"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D6B3DAF-DF99-48B2-8E7C-BE8E043D4C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"29050958-EFD8-4A79-9022-EF72AAD4EDB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B3CB33B1-71B2-4235-A2C1-FCAEA9844A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta17:*:*:*:*:*:*","matchCriteriaId":"AA9ED9B2-D9D4-4200-B387-21A893453E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:beta18:*:*:*:*:*:*","matchCriteriaId":"3983C9FC-7546-41BE-8E22-B3471DF9F3AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"BFAB3DFB-58B7-4713-B88B-26424D639B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"2131F2BB-80E3-46A0-A0D8-4450C625A525"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35F2B503-1516-465D-A558-9932BDB3457D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta1:*:*:*:*:*:*","matchCriteriaId":"C686308E-1A71-40E5-BCDE-5144217D41A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta2:*:*:*:*:*:*","matchCriteriaId":"D1F37F93-8BE1-4716-B35D-1CB2629867A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta3:*:*:*:*:*:*","matchCriteriaId":"AF4127BB-2A91-4243-B3ED-10D945B6995A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:beta4:*:*:*:*:*:*","matchCriteriaId":"E09AAB1F-14FB-42E9-8983-30D2164EA0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:rc1:*:*:*:*:*:*","matchCriteriaId":"50190A04-5CF2-400E-BAE4-9C7F177ECFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"BA94EAAA-A4D2-4E36-BC69-BBE9644FE970"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta1:*:*:*:*:*:*","matchCriteriaId":"AFB264E6-1640-459C-8DD0-C9D72124F125"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta10:*:*:*:*:*:*","matchCriteriaId":"2A6E3454-14E2-43C8-8E71-1E800FCBE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta2:*:*:*:*:*:*","matchCriteriaId":"BA610E96-CE50-46B0-B695-F4A5FA77AB73"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta3:*:*:*:*:*:*","matchCriteriaId":"30459EAB-E65B-4487-A90F-389477F0BA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta4:*:*:*:*:*:*","matchCriteriaId":"E89FFA90-6AB5-4587-8F40-E7001E4DD470"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta5:*:*:*:*:*:*","matchCriteriaId":"A2FDACC8-7BFD-477E-A79A-C933CB5C8EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta6:*:*:*:*:*:*","matchCriteriaId":"9139F742-A946-4D2F-9C14-95216C06ED4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta7:*:*:*:*:*:*","matchCriteriaId":"0DBCDA70-BB1B-4408-A2F3-ADB7A7B77A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta8:*:*:*:*:*:*","matchCriteriaId":"AA4D368C-C167-4CF3-9013-FFC297D1D977"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:beta9:*:*:*:*:*:*","matchCriteriaId":"D3571DD2-5200-48AE-83C9-B1DFF3A1FEAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:rc1:*:*:*:*:*:*","matchCriteriaId":"782DFA55-BB92-41CD-A4DF-D986C387EB8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:rc2:*:*:*:*:*:*","matchCriteriaId":"2601CCF9-3A89-4EEF-9941-894AEAF89F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F3A7C96C-8FBB-42B4-937E-3321C939CC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.10:beta1:*:*:*:*:*:*","matchCriteriaId":"BFE11FC5-8A49-434E-B828-AE7C011B03CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"265EC12C-6239-4367-9769-73AC999556F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94084356-D39B-41B2-AC24-0ADAD0BF5988"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:beta1:*:*:*:*:*:*","matchCriteriaId":"6DA772E3-B022-4F5E-8D43-C0BE64F187D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:beta2:*:*:*:*:*:*","matchCriteriaId":"C6589696-904B-4F7B-84F7-0E8D2F0ACFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:beta3:*:*:*:*:*:*","matchCriteriaId":"F5CF8EED-F09B-4AB8-A0F1-1F8DBB5385BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:rc1:*:*:*:*:*:*","matchCriteriaId":"C3909436-175A-4DC7-956F-C0905DA579FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"086C6335-7872-46A7-AEB1-9BE5AE5A788C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:beta1:*:*:*:*:*:*","matchCriteriaId":"CB0532A8-3F66-49D3-95BF-2E78DB6EC471"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:rc1:*:*:*:*:*:*","matchCriteriaId":"FED11C9F-4E2D-4364-AEEC-43E61531BA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"FF8233B1-04A0-4E25-97EE-CF466B48A12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"FA714E7E-05EF-4598-9324-887BC66C675E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"C5CF3B73-D3B9-4D76-B411-C837BCE0806E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:rc1:*:*:*:*:*:*","matchCriteriaId":"CEC7C52B-0D8D-4509-B9B5-B12E54EA3A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:rc2:*:*:*:*:*:*","matchCriteriaId":"AB0514ED-C8F8-4F15-A40F-04D643F3DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.15:rc3:*:*:*:*:*:*","matchCriteriaId":"D77DCDC0-29DD-4BC8-BE30-3A348963F821"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D1752D91-3468-4E22-B60F-6789B3CBD7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F433AA7E-A780-4D45-AD1A-5A4CE1F3FCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.17:rc1:*:*:*:*:*:*","matchCriteriaId":"C4338C87-B3CB-4CA7-BFAA-ADA1D919F203"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"93E210A7-489B-4EA7-A840-599523157DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"B37565FA-72F5-4063-8D7A-97BC269F020B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc1:*:*:*:*:*:*","matchCriteriaId":"434AED09-680D-43BC-B9CA-E78028035CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc2:*:*:*:*:*:*","matchCriteriaId":"009AF32A-19B9-4E56-B5D2-2D19082EF102"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc3:*:*:*:*:*:*","matchCriteriaId":"2643AA61-AB01-4252-8E50-81D5C74F8707"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.19:rc5:*:*:*:*:*:*","matchCriteriaId":"02552E07-D9C8-4DF8-AD63-B3A7B5C2C2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"BC8FA821-818E-4BC7-834B-94EB5C042390"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"F3FBF3D3-95A6-4869-8A69-F0E5ECA40220"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.21:rc1:*:*:*:*:*:*","matchCriteriaId":"425B207B-D11B-468B-A2C6-BDF276AE4264"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.21:rc2:*:*:*:*:*:*","matchCriteriaId":"F8B0055B-D0F1-4D8C-AE96-06315FFCC602"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"D07785D0-E995-4208-AB8C-43B320D291F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.22:rc1:*:*:*:*:*:*","matchCriteriaId":"A42AC8B9-BEB2-4495-8A42-2AEDB29A3DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"152DDD6E-CF56-4E1C-BE4D-C7BC0FD9B08C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.23:rc1:*:*:*:*:*:*","matchCriteriaId":"76C2D14E-FD1C-430A-AC08-D61F997D8BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C036011A-9AE1-423C-8B73-188B9BA20FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F008946C-43E9-4ECD-AE9F-486A4686AE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6A4D6BB0-8E1A-49A4-BBC9-CBFA252C92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CFE1DB59-0A60-432B-9D88-906C4FE6D6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"C111BDD4-2A52-4FB7-8D21-6049A10BCDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"6B33807C-8E7B-4A04-BE92-59C1B845AD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B1614466-8EAC-4404-A674-EFFE0FFFBDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"663C6EE5-5B5E-4C0F-9E7F-D0E1DA9AF9EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta1:*:*:*:*:*:*","matchCriteriaId":"FF2D5068-5BF3-425C-8B1A-E12E3D3CD8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta2:*:*:*:*:*:*","matchCriteriaId":"BF4F7833-4F88-4C54-AEC7-3C4FB797AE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta3:*:*:*:*:*:*","matchCriteriaId":"F2A973ED-CA5B-4A18-ACAB-1542E3866896"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:beta4:*:*:*:*:*:*","matchCriteriaId":"FA737702-6335-42F9-99B9-856D531B70F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"8EAD9719-2736-40AE-BBEB-8BA627E8DF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"62693E5F-2EF6-49B5-9946-42CE61F4ACFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8051459E-94D3-4D4A-9D40-CC9475DDB00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta1:*:*:*:*:*:*","matchCriteriaId":"65ACA253-BDE7-4CAE-8F74-71EBA4728358"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"9C776F58-A76E-4ED3-825B-52ADFB38D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta3:*:*:*:*:*:*","matchCriteriaId":"FF62B46E-37C4-426A-8854-E961BEB543E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta4:*:*:*:*:*:*","matchCriteriaId":"C5EDDB54-70C6-41D0-AC5C-C10F8D107964"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta5:*:*:*:*:*:*","matchCriteriaId":"CAEAB037-F146-444F-A867-D08BD48DA6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:beta6:*:*:*:*:*:*","matchCriteriaId":"4962A86F-C9F5-4F03-AFCD-D2E6FD08BD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"47CF2A43-2D15-4D70-A424-C12053D1A6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"42056C63-69A7-43CF-828C-0C3E365702D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"C6577A0A-B689-424E-BAAE-BD5DF2615311"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:rc6:*:*:*:*:*:*","matchCriteriaId":"511E1319-C882-4761-ACD5-84617B78578E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9A3E3BF3-4376-4692-A515-A7B6593F28F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"9E83B68F-B0E2-4C37-A711-1714652AB961"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"4F17A4B7-99C2-407A-9536-4B54EDC02899"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"F854F244-78C9-46C6-8862-1DA58912FCE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta4:*:*:*:*:*:*","matchCriteriaId":"9A4C883A-A2A3-4D5F-8114-CE9220FFF7B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta5:*:*:*:*:*:*","matchCriteriaId":"3544F0FF-3EEE-4902-B412-EB57D6AE7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta6:*:*:*:*:*:*","matchCriteriaId":"5F428FF4-21A8-4605-AFCD-E78F43E46AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:beta7:*:*:*:*:*:*","matchCriteriaId":"7132AA21-DC2F-4493-9BCC-27E3D8F075AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc1:*:*:*:*:*:*","matchCriteriaId":"B65F8362-934F-452D-8E86-0DB2E3C7B43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc2:*:*:*:*:*:*","matchCriteriaId":"934D0AB5-62FB-4EC1-971A-A1BA8EEAD008"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.10:rc3:*:*:*:*:*:*","matchCriteriaId":"5891F237-D1DB-4CCE-8A8B-D10E7EDCB926"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"AB6AF9D5-CE60-4FC9-91AB-E243F0D429E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta1:*:*:*:*:*:*","matchCriteriaId":"E114E18D-2882-4843-9356-279C69ABCBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta2:*:*:*:*:*:*","matchCriteriaId":"5E271694-B8C8-4BCF-8B4A-0425BA50EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta3:*:*:*:*:*:*","matchCriteriaId":"E36CC085-34FF-4B84-8628-74BEEC686C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:beta4:*:*:*:*:*:*","matchCriteriaId":"06793BE6-3370-4FCB-A400-C6AF95D1E66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc1:*:*:*:*:*:*","matchCriteriaId":"DE742D36-3A33-4316-8326-FA2F1B228E83"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc2:*:*:*:*:*:*","matchCriteriaId":"25D0C5E1-4D8D-42EE-8C94-12D442181DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc3:*:*:*:*:*:*","matchCriteriaId":"3326F984-8312-4E7F-A269-0A06FAC8BE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.11:rc5:*:*:*:*:*:*","matchCriteriaId":"290CF6FC-3BD6-4974-9DEC-188B79DC816A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"7F848FA5-9682-454F-A9DE-671C4401F15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:beta1:*:*:*:*:*:*","matchCriteriaId":"782ABB64-C2F2-4326-A69F-75E514055C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:rc1:*:*:*:*:*:*","matchCriteriaId":"0EF9CEE2-8DB6-480F-970C-E19FEF31D0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.13:rc2:*:*:*:*:*:*","matchCriteriaId":"28C13A65-C0D6-4904-8C92-E5233D7E5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"C4B83678-98A1-440E-950C-4A27995C7294"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:beta1:*:*:*:*:*:*","matchCriteriaId":"38993FC7-12DD-4D75-8EC6-719C0AD66191"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:beta2:*:*:*:*:*:*","matchCriteriaId":"0CAF82B9-020B-48FD-BE3D-70B8A7A8CDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.14:rc1:*:*:*:*:*:*","matchCriteriaId":"C43481DF-59C5-4E9B-8CB9-49E4873B7263"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"FB9EEE31-479A-4370-BF00-C26C1AF502B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta1:*:*:*:*:*:*","matchCriteriaId":"BFFC71CB-0B01-4A34-85B8-8A27C1E7D451"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta2:*:*:*:*:*:*","matchCriteriaId":"EC53C1C7-ED9C-44C2-B446-0426E4C92D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta3:*:*:*:*:*:*","matchCriteriaId":"B996835E-97DB-47B1-80B9-BE757680CAFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta4:*:*:*:*:*:*","matchCriteriaId":"AC7256E6-502A-47A5-A692-90162AA40AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta5:*:*:*:*:*:*","matchCriteriaId":"53E7BDBC-5BF8-4BA3-959D-1D16ACD558D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:beta6:*:*:*:*:*:*","matchCriteriaId":"79B6B4A0-9B7E-4835-9F82-2B1D1AF955AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc1:*:*:*:*:*:*","matchCriteriaId":"27BBC74C-51A3-48BB-B867-3A5F58AD8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc2:*:*:*:*:*:*","matchCriteriaId":"3DEDAB32-9D5C-4F12-B9E4-ABEA615DC11B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc3:*:*:*:*:*:*","matchCriteriaId":"C3DA5585-140C-4F27-8654-BCFCB12659B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc4:*:*:*:*:*:*","matchCriteriaId":"AA8F6085-9769-44DE-8E43-FAB7C7791A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.15:rc5:*:*:*:*:*:*","matchCriteriaId":"5A4D700F-AA36-4A5B-8BD3-3BD9A452D743"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"95EABD7D-1F18-4FA5-BAA9-F8D69129E531"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:beta1:*:*:*:*:*:*","matchCriteriaId":"D6045135-54AF-4B83-9279-47BB1DB67172"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:beta2:*:*:*:*:*:*","matchCriteriaId":"DBB7D1F1-7959-4459-827C-90B193F58269"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"62A6F2F0-E088-458F-813F-5B45EA01B77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"65B836CA-3740-48B0-966B-21E65EF3D636"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:beta1:*:*:*:*:*:*","matchCriteriaId":"96308F2E-E2DE-4C0F-B0A6-7FDFFF67A0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:beta2:*:*:*:*:*:*","matchCriteriaId":"7A21785C-989F-4E72-932B-E77892EF492A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc1:*:*:*:*:*:*","matchCriteriaId":"0D832C4A-0793-4B64-944D-086CF614CAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc2:*:*:*:*:*:*","matchCriteriaId":"7C8E2232-7077-4CE4-9141-80F2F744F0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc3:*:*:*:*:*:*","matchCriteriaId":"38CDA418-F580-4625-9D84-F01EA5D0FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.17:rc4:*:*:*:*:*:*","matchCriteriaId":"D0FB8DC5-ABD5-41BE-99EC-E610504D6F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"3988FA1B-18D9-46AA-87BA-A6B01D4F4B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"51A46409-7AC6-45DB-B92D-29988C445BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta1:*:*:*:*:*:*","matchCriteriaId":"53B41406-956A-48C9-9CDA-D7257D19E6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta10:*:*:*:*:*:*","matchCriteriaId":"B100CFD4-788C-44BF-A55D-225F72314A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta11:*:*:*:*:*:*","matchCriteriaId":"7B6BFCBC-F3E9-4CDD-833F-01D51594B0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta12:*:*:*:*:*:*","matchCriteriaId":"589DC20E-E642-4BC7-83CD-01323D7F6236"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta13:*:*:*:*:*:*","matchCriteriaId":"6A9B81C1-EAF8-44B6-A4FD-2568FFBB6FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta14:*:*:*:*:*:*","matchCriteriaId":"22EBF19B-7E53-4627-AE87-6B7C4ACD88F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta15:*:*:*:*:*:*","matchCriteriaId":"43744C82-D271-4BF3-9AD8-A48C1B5BA33F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta16:*:*:*:*:*:*","matchCriteriaId":"FD68995C-816C-4E25-B8B3-0BC808490D73"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta17:*:*:*:*:*:*","matchCriteriaId":"6EDC3AE7-569F-4016-B35E-E8B8B3456959"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta18:*:*:*:*:*:*","matchCriteriaId":"17068432-BFE0-4BE1-A86B-7D6562D18103"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta19:*:*:*:*:*:*","matchCriteriaId":"A0F0F2AF-748A-411A-8B95-45A04800FF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta2:*:*:*:*:*:*","matchCriteriaId":"945C0B80-E562-4495-849E-23EE406D2EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta20:*:*:*:*:*:*","matchCriteriaId":"5E91B287-CDFC-4791-95D5-54AC847877D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta21:*:*:*:*:*:*","matchCriteriaId":"1F09C15E-E20C-473D-AF13-5509669DA8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta22:*:*:*:*:*:*","matchCriteriaId":"36FD7096-C215-4CCA-B0BE-244E9708E947"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta23:*:*:*:*:*:*","matchCriteriaId":"4AC8DAFE-64A5-47C6-BE99-093E744181B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta24:*:*:*:*:*:*","matchCriteriaId":"C075C36D-D191-4165-A2A8-A8BA6AD93862"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta25:*:*:*:*:*:*","matchCriteriaId":"F7E9A4DE-C0B7-4951-97D2-26EFFE065A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta26:*:*:*:*:*:*","matchCriteriaId":"6B9FC583-AA79-4ED1-924B-DE58FBB88385"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta27:*:*:*:*:*:*","matchCriteriaId":"727FA534-FB49-4784-A56E-D709071FFEE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta28:*:*:*:*:*:*","matchCriteriaId":"17628553-688B-4574-9B2A-035937225DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta29:*:*:*:*:*:*","matchCriteriaId":"E96F2F5A-A881-4EDC-965F-43984EA06151"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta3:*:*:*:*:*:*","matchCriteriaId":"26E9442B-FCA7-42A3-9E73-343D9FF11985"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta30:*:*:*:*:*:*","matchCriteriaId":"1EB24053-49FC-488C-8DC4-12F5A485EC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta31:*:*:*:*:*:*","matchCriteriaId":"653700ED-B2E3-4DD1-99A1-ED0B4504E628"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta32:*:*:*:*:*:*","matchCriteriaId":"2C9B4D07-8B90-4932-8A37-D204995E85E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta33:*:*:*:*:*:*","matchCriteriaId":"D9F43544-D08D-4733-AE0D-A6C5742275D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta4:*:*:*:*:*:*","matchCriteriaId":"101240B5-FAC7-4D47-9C4A-840D06E082EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta5:*:*:*:*:*:*","matchCriteriaId":"608088FF-8EED-4F05-96EA-0E23F669C078"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta6:*:*:*:*:*:*","matchCriteriaId":"82401AB8-5432-4D75-ADC2-A310132EB9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta7:*:*:*:*:*:*","matchCriteriaId":"CECEDABC-F229-43F7-9795-9E87198424D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta8:*:*:*:*:*:*","matchCriteriaId":"712E5798-A0FC-44E7-972A-D2EF66F5C793"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:beta9:*:*:*:*:*:*","matchCriteriaId":"82690AE3-BFFA-4616-AE30-35A6D21DFC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4D0082F7-DDD3-4266-B604-D1E2958ABAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc2:*:*:*:*:*:*","matchCriteriaId":"00A32AD4-38C7-41BE-8042-9BCED336AA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc3:*:*:*:*:*:*","matchCriteriaId":"BC96DBDE-15A7-4C63-8C71-AA5CD158E306"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc4:*:*:*:*:*:*","matchCriteriaId":"834A6D33-2334-4361-92CE-8AECAF3614CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc5:*:*:*:*:*:*","matchCriteriaId":"AFC3A80A-4C35-419F-B576-40A3FAD37723"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.19:rc6:*:*:*:*:*:*","matchCriteriaId":"D0FCC174-9216-433D-A5CB-A7C275DD9D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"09E2B608-6C70-446F-A3A7-369048D99855"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta01:*:*:*:*:*:*","matchCriteriaId":"01EF52B3-BAD3-4E0C-B19C-3465A036B025"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta02:*:*:*:*:*:*","matchCriteriaId":"1685F3BF-635D-43DD-855D-7666D807AE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta03:*:*:*:*:*:*","matchCriteriaId":"BAA8FF97-98D2-425F-935C-36951DFEE029"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:beta04:*:*:*:*:*:*","matchCriteriaId":"1CEE9078-6B9F-4BA1-A6BE-25743B02FE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc1:*:*:*:*:*:*","matchCriteriaId":"BE1A8933-9958-458B-A511-D018B7CA7D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc2:*:*:*:*:*:*","matchCriteriaId":"100BF4B6-2A63-416A-B19F-722A9B44F126"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc3:*:*:*:*:*:*","matchCriteriaId":"4DD8FB59-2260-4343-B4D6-279ED7D7D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc4:*:*:*:*:*:*","matchCriteriaId":"FDDCE2DE-94B7-460D-8BBB-26ACA4847807"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc5:*:*:*:*:*:*","matchCriteriaId":"A812C450-8E1F-4667-99EC-7237E1E319E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.20:rc6:*:*:*:*:*:*","matchCriteriaId":"AD94AB7F-B7CF-42B0-AB71-23F42F3F1067"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"5AA00AE0-F447-4361-AA37-0C98BDE491E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:beta1:*:*:*:*:*:*","matchCriteriaId":"28F79E9F-4AA1-451A-8819-CAF21DB2C990"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:beta2:*:*:*:*:*:*","matchCriteriaId":"7E1C14E8-5644-4B5F-8894-092187B1EE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc1:*:*:*:*:*:*","matchCriteriaId":"77C9B755-140B-4DBF-8BF1-80431C0F9A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc2:*:*:*:*:*:*","matchCriteriaId":"599CE5F2-5D31-4A9D-86A0-9CFD3A34B193"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.21:rc3:*:*:*:*:*:*","matchCriteriaId":"5460DA6B-6F81-4B8C-9D8F-DB946E3F33EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"21DACE94-FBDC-4A3D-8DD6-E62D18F5EE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta1:*:*:*:*:*:*","matchCriteriaId":"45E92521-FE62-4940-B194-A8482538401B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta2:*:*:*:*:*:*","matchCriteriaId":"6DF7D5B4-A8BD-4F3B-8DB3-D5AB94086A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta2-1.2.21:*:*:*:*:*:*","matchCriteriaId":"B0A244FC-545E-4041-B922-B1B640E7E371"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta3:*:*:*:*:*:*","matchCriteriaId":"40F8973E-8150-4834-8D9B-370F3664E894"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta3-1.2.21:*:*:*:*:*:*","matchCriteriaId":"B9C93F2F-533D-4563-95F2-E94A2CCE9C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta4:*:*:*:*:*:*","matchCriteriaId":"73045C50-73FE-4162-8E8B-7721131E4396"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:beta4-1.2.21:*:*:*:*:*:*","matchCriteriaId":"C89DFAAD-279A-462D-BF72-D75CC24E72E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:rc1:*:*:*:*:*:*","matchCriteriaId":"1879D7C8-ABF1-4ECE-BBC7-71978695D4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.22:rc1-1.2.21:*:*:*:*:*:*","matchCriteriaId":"1B27B3A2-04E1-4261-AA70-30EE2AA934F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"220A02AF-6ADA-4B75-BC81-40B2D847029A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta01:*:*:*:*:*:*","matchCriteriaId":"CA60D3F3-149B-4A76-9F35-4A0A127ADF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta01-1.2.22:*:*:*:*:*:*","matchCriteriaId":"EAC54968-17ED-422E-9C78-65E4E167C76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta02:*:*:*:*:*:*","matchCriteriaId":"3D625A71-5F2D-446A-BD69-1470B4127DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta02-1.2.22:*:*:*:*:*:*","matchCriteriaId":"896E65A3-D814-4C58-8BD8-B10A2C812FC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta03:*:*:*:*:*:*","matchCriteriaId":"00C85EF8-8D8A-4ED8-B55B-2182421626CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta03-1.2.22:*:*:*:*:*:*","matchCriteriaId":"E07CE422-8047-4248-A36C-11E22A889D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta04:*:*:*:*:*:*","matchCriteriaId":"6D65DCF8-D9A6-4A9E-8171-C52E12EB1476"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta04-1.2.22:*:*:*:*:*:*","matchCriteriaId":"65BEA559-944B-4E32-9F74-323CE7EA4FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta05:*:*:*:*:*:*","matchCriteriaId":"C5114A9B-263F-4BBF-9A6A-F6E0900CDD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:beta05-1.2.22:*:*:*:*:*:*","matchCriteriaId":"61EEC899-A9DC-44E4-8984-88DCBF733B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:rc01:*:*:*:*:*:*","matchCriteriaId":"4CD12B3A-27B6-4BD4-90B5-874B677689FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.23:rc01-1.2.22:*:*:*:*:*:*","matchCriteriaId":"F22010B9-E18B-45DB-9316-8F56A535D1BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"ECEB8F61-195E-41DE-90CE-22854055E9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta01:*:*:*:*:*:*","matchCriteriaId":"27988956-B3F4-428A-B369-C5E01A2F9102"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta01-1.2.23:*:*:*:*:*:*","matchCriteriaId":"84979A32-27E2-4A77-8245-47C6E61CE439"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta02:*:*:*:*:*:*","matchCriteriaId":"B4D45B16-C278-4ABF-8B91-CFA0AB384290"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta02-1.2.23:*:*:*:*:*:*","matchCriteriaId":"118582C6-A677-4FFB-9782-17BD35EE1973"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta03:*:*:*:*:*:*","matchCriteriaId":"247153A0-CF83-4D6E-A657-5D8D217D8EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:beta03-1.2.23:*:*:*:*:*:*","matchCriteriaId":"6F43AC37-27DE-4A6D-A8FE-138B4DA8E4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:rc01:*:*:*:*:*:*","matchCriteriaId":"53D03C1D-684A-4BA5-841B-C414AD244DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.24:rc01-1.2.23:*:*:*:*:*:*","matchCriteriaId":"D0DBDAB9-0F52-4A84-B262-F23E869D30CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"D0F72B91-1F7F-41EB-ABC8-1B50AFEC70EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta01:*:*:*:*:*:*","matchCriteriaId":"9F89EDB5-A195-479B-BEFB-E0A186A4A9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta02:*:*:*:*:*:*","matchCriteriaId":"02BAC6A6-FBE9-48CD-9B4E-FC570684922B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta03:*:*:*:*:*:*","matchCriteriaId":"E695F515-AE7E-48AB-999C-75B62BEA0BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta04:*:*:*:*:*:*","matchCriteriaId":"D448D4A5-D827-4FF8-BAC1-E25FD8F01C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta05:*:*:*:*:*:*","matchCriteriaId":"935F2297-6CB4-4ABB-9F4D-F11708CDC069"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:beta06:*:*:*:*:*:*","matchCriteriaId":"25ED23F7-DF30-46B2-99EF-3924E22C1870"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:rc01:*:*:*:*:*:*","matchCriteriaId":"6FB56358-46E4-4999-A311-5E1819A6D5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.25:rc02:*:*:*:*:*:*","matchCriteriaId":"F508CFA5-5602-445C-9E18-71B6A625F9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"111091B9-CBAE-4FC7-8B97-7D2345BFCB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta01:*:*:*:*:*:*","matchCriteriaId":"897D42F6-202B-425A-BF0D-76D1A74D8E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta02:*:*:*:*:*:*","matchCriteriaId":"50300181-3691-4EA2-B779-1C9CF59E08FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta03:*:*:*:*:*:*","matchCriteriaId":"CABA31D9-9EC0-4447-9C5E-8BC5DF5F431D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta04:*:*:*:*:*:*","matchCriteriaId":"D4568552-91F6-4E05-ADA5-4127CBD4D3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:beta05:*:*:*:*:*:*","matchCriteriaId":"D72D51C0-1044-4A74-823F-7123340FB9BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.26:rc01:*:*:*:*:*:*","matchCriteriaId":"947395DE-A911-47B3-983D-B5D23672068D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"1CAA1090-C1C7-43A2-BD44-065572D226B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"2FD92305-91BF-4984-A029-8FA83CBF1A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:*","matchCriteriaId":"31EE280F-D76D-478B-ADD6-D5F2C7574A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:*","matchCriteriaId":"747314F7-A515-41FF-8095-62A9F05F0DEA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000090.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35524","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39215","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39251","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200906-01.xml","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://ubuntu.com/usn/usn-913-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2032","source":"cve@mitre.org"},{"url":"http://www.libpng.org/pub/png/libpng.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:063","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35233","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0007.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1510","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0637","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0682","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0847","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50966","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00218.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00630.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000090.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200906-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-913-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.libpng.org/pub/png/libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00630.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2043","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T21:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to interaction with TinyMCE."},{"lang":"es","value":"nsViewManager.cpp en Mozilla Firefox desde v3.0.2 hasta v3.0.10 permite a atacantes remotos producir una denegación de servicio (desreferencia a un puntero NULL y caída de aplicación) a través de vectores relacionados con la interacción con TinyMCE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35413","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490425","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488570","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51197","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=488570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2044","sourceIdentifier":"cve@mitre.org","published":"2009-06-12T21:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element."},{"lang":"es","value":"Mozilla Firefox 3.0.10 y anteriores en Linux permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un URI para una imagen GIF en el atributo \"BACKGROUND\" de un elemento \"BODY\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"E05337C3-04A1-4403-84BE-78FCDF83448D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504214","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35280","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=496265","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51037","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://e-rdc.org/v1/news.php?readmore=137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=496265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2045","sourceIdentifier":"psirt@cisco.com","published":"2009-06-25T01:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed payload in a UDP packet to port 37000, related to the xvcrman process, aka Bug ID CSCsj47924."},{"lang":"es","value":"El firmware de Cisco Video Surveillance Stream Manager anterior a v5.3, utilizado en Cisco Video Surveillance Services Platforms y Video Surveillance Integrated Services Platforms, permite a atacantes remotos provocar una denegación de servicio (reinicio) a través de una carga útil mal formada en un paquete UDP al puerto 37000, relacionada con el proceso xvcrman, también conocido como Bug ID CSCsj47924."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:video_surveillance_stream_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"CFAE3825-B3DD-42C9-83A5-B26194C9A3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:video_surveillance_stream_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9D063112-AD7E-44C9-BF8E-2DD6DCD3DF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:video_surveillance_stream_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"D52D0F1B-08C7-40D3-A94E-2DDB5FFB86EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:video_surveillance_integrated_services_platform:*:*:*:*:*:*:*:*","matchCriteriaId":"A6A05B20-2E02-497F-9599-2D96549B0236"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022446","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2046","sourceIdentifier":"psirt@cisco.com","published":"2009-06-25T01:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497."},{"lang":"es","value":"El servidor Web embebido en la cámara IP de Cisco Video Surveillance 2500 Series con firmware anterior a v2.1 permite a atacantes remotos leer ficheros de su elección a través una petición (1) http o (2) https, relacionada con el (a) Servidor Web de cámara SD (b) Servidor HTTP de cámara inalámbrica, también conocido como Bug IDs CSCsu05515 y CSCsr96497."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:video_surveillance_2500_series_ip_camera:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"83469337-0A72-443E-84E9-F58F1741B7CC"}]}]}],"references":[{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35478","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022445","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2047","sourceIdentifier":"psirt@cisco.com","published":"2009-07-16T15:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el interfaz de administración en Cisco Customer Response Solutions (CRS) anteriores a v7.0(1) SR2 en el servidor Cisco Unified Contact Center Express (también conocido como CCX) permite a los usuarios remotos autenticados leer, modificar y borrar ficheros arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:3.5:*:*:*:*:*:*:*","matchCriteriaId":"4C6F8BA2-EA5E-4E90-8390-2D29E8FAB4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E010B8C0-06BF-42C9-8AE6-8A0A6696EC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:4.1:*:*:*:*:*:*:*","matchCriteriaId":"98203DF7-2B21-4D7F-B32C-E9E6C24E1A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:4.5:*:*:*:*:*:*:*","matchCriteriaId":"629B1A0E-A13F-4209-B070-960392893299"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13E6B9D0-5F88-4F48-A313-D478FB9919FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F979F18-29A6-433C-91A4-0042EC275CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8F6008EC-FB15-43B3-8B09-3BFB28536EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:customer_response_applications:3.5:*:*:*:*:*:*:*","matchCriteriaId":"B5DC9FD7-0716-456C-895F-74BC7866C520"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_qm:3.5:*:*:*:*:*:*:*","matchCriteriaId":"8BC0CC96-C3DD-4564-8323-3EAB9ACBFF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"AD62E8B9-9715-4217-864F-C54F1DEE835F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"32F36940-BF16-4C7C-A24C-D923AF333709"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F2BE86CE-EF95-4841-B145-DFA4D0E0EF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"369C0FF7-BC46-400E-AC61-F97BAFDE14FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"6883E046-DA9D-4402-A22B-31140D6C8054"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(5a\\):*:*:*:*:*:*:*","matchCriteriaId":"ED3C91A3-E343-4FAC-85D7-649C7ECE6E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"51E21F75-530E-4399-B8EC-1E933711D6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6273D50B-8D2B-4F5A-B4F3-2CC86F5B730F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"AB3F5DF8-E9A7-4812-8677-BDCE4679ED9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"DBAF3470-5AF5-4B26-AA92-A92E908A52E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:7.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"A8CDC6A2-319F-4C83-8042-BEF6C9FD1C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BA09955E-62F4-4098-8FFF-C61D33EB8AB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"EBA8057F-7E31-4F9D-992E-621DCD7C4089"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1568EE5B-716D-439B-9017-8498C9353B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BCFA9981-ED56-4D5B-AF82-1BCC551FE02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:3.0:*:*:*:*:*:*:*","matchCriteriaId":"71082BE9-AF48-460A-9127-4D5D6DBA02F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CDFDB400-1557-4A6D-A40F-00271A666A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E744A286-EA75-4E20-8503-12217FE0F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D4B5083B-0782-4668-B88A-A6DB65A4AFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F3782F66-76E2-4912-AA16-CB552A8C4ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A26B5F10-147A-4C32-BE98-F24407E4973F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E4FAEE-BE07-45D8-A7F4-92668CA9BF8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:7.0:*:*:*:*:*:*:*","matchCriteriaId":"73CA4024-4F80-466A-9383-9A68E2FAC995"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:7.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"53C79246-3D29-4A8E-94DD-8771964B7E4F"}]}]}],"references":[{"url":"http://osvdb.org/55936","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/35861","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35706","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022569","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/1913","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51731","source":"psirt@cisco.com"},{"url":"http://osvdb.org/55936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2048","sourceIdentifier":"psirt@cisco.com","published":"2009-07-16T15:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en el interfaz de administración en Cisco Customer Response Solutions (CRS) anteriores a v7.0(1) SR2 en el servidor Cisco Unified Contact Center Express (también conocido como CCX) permite a los usuarios remotos autenticado inyectar arbitrariamente una secuencia de comandos web o HTML en la base de datos CCX a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:3.5:*:*:*:*:*:*:*","matchCriteriaId":"4C6F8BA2-EA5E-4E90-8390-2D29E8FAB4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E010B8C0-06BF-42C9-8AE6-8A0A6696EC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:4.1:*:*:*:*:*:*:*","matchCriteriaId":"98203DF7-2B21-4D7F-B32C-E9E6C24E1A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:4.5:*:*:*:*:*:*:*","matchCriteriaId":"629B1A0E-A13F-4209-B070-960392893299"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13E6B9D0-5F88-4F48-A313-D478FB9919FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F979F18-29A6-433C-91A4-0042EC275CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:crs:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8F6008EC-FB15-43B3-8B09-3BFB28536EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:customer_response_applications:3.5:*:*:*:*:*:*:*","matchCriteriaId":"B5DC9FD7-0716-456C-895F-74BC7866C520"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_qm:3.5:*:*:*:*:*:*:*","matchCriteriaId":"8BC0CC96-C3DD-4564-8323-3EAB9ACBFF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"AD62E8B9-9715-4217-864F-C54F1DEE835F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"32F36940-BF16-4C7C-A24C-D923AF333709"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F2BE86CE-EF95-4841-B145-DFA4D0E0EF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"369C0FF7-BC46-400E-AC61-F97BAFDE14FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"6883E046-DA9D-4402-A22B-31140D6C8054"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.0\\(5a\\):*:*:*:*:*:*:*","matchCriteriaId":"ED3C91A3-E343-4FAC-85D7-649C7ECE6E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"51E21F75-530E-4399-B8EC-1E933711D6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:4.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6273D50B-8D2B-4F5A-B4F3-2CC86F5B730F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"AB3F5DF8-E9A7-4812-8677-BDCE4679ED9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"DBAF3470-5AF5-4B26-AA92-A92E908A52E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ccx:7.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"A8CDC6A2-319F-4C83-8042-BEF6C9FD1C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BA09955E-62F4-4098-8FFF-C61D33EB8AB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"EBA8057F-7E31-4F9D-992E-621DCD7C4089"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1568EE5B-716D-439B-9017-8498C9353B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_contact_center_express:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BCFA9981-ED56-4D5B-AF82-1BCC551FE02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:3.0:*:*:*:*:*:*:*","matchCriteriaId":"71082BE9-AF48-460A-9127-4D5D6DBA02F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CDFDB400-1557-4A6D-A40F-00271A666A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E744A286-EA75-4E20-8503-12217FE0F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D4B5083B-0782-4668-B88A-A6DB65A4AFCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F3782F66-76E2-4912-AA16-CB552A8C4ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A26B5F10-147A-4C32-BE98-F24407E4973F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E4FAEE-BE07-45D8-A7F4-92668CA9BF8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:7.0:*:*:*:*:*:*:*","matchCriteriaId":"73CA4024-4F80-466A-9383-9A68E2FAC995"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_ip_ivr:7.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"53C79246-3D29-4A8E-94DD-8771964B7E4F"}]}]}],"references":[{"url":"http://osvdb.org/55937","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/35861","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35705","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022569","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/1913","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51730","source":"psirt@cisco.com"},{"url":"http://osvdb.org/55937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080ae04b2.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2049","sourceIdentifier":"psirt@cisco.com","published":"2009-07-30T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)SXI2, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (device reload) by using an RFC4271 peer to send a malformed update, aka Bug ID CSCta33973."},{"lang":"es","value":"Cisco IOS v12.0(32)S12 hasta v12.0(32)S13 y v12.0(33)S3 hasta v12.0(33)S4, v12.0(32)SY8 hasta v12.0(32)SY9, v12.2(33)SXI1 hasta v12.2(33)SXI2, v12.2XNC hasta v12.2(33)XNC2, v12.2XND hasta v12.2(33)XND1, y v12.4(24)T1; y IOS XE v2.3 hasta v2.3.1t y v2.4 hasta v2.4.0; cuando el enrutado RFC4893 BGP está habilitado, lo que permite a los atacantes remoto causar una denegación de servicio (recarga del dispositivo) usando un par RFC4271 para enviar una actualización malformado, también conocido como Bud ID CSCta33973."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)s12:*:*:*:*:*:*:*","matchCriteriaId":"7F505B0A-E9E0-4CF3-B85B-70EEE71314F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)s13:*:*:*:*:*:*:*","matchCriteriaId":"ED66A91B-6429-4983-8167-07DECA601916"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)sy8:*:*:*:*:*:*:*","matchCriteriaId":"0F288884-3DB7-474D-B56B-120E2DB7975A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9:*:*:*:*:*:*:*","matchCriteriaId":"A29860C6-75E6-43A4-8BF5-E6ABF2040B0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(33\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"AF0C8019-BDDA-4019-AF64-352EFFAC9036"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(33\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"9BCFE974-9D9A-443D-A55D-6A2CBF96EC4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi1:*:*:*:*:*:*:*","matchCriteriaId":"4627BEF7-CEEB-4CBC-8620-4D9C5A7F7C30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(33\\)sxi2:*:*:*:*:*:*:*","matchCriteriaId":"866E9A29-97D8-41E1-81BE-73FAF1B5E2DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4\\(24\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"2A6AD6E5-EBB0-44D8-A63C-EFF7260E4CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.3:*:*:*:*:*:*:*","matchCriteriaId":"91895083-E6C5-432A-BF41-8D157E539C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*","matchCriteriaId":"57F6EF3B-2F31-4449-9B2A-9114D41BBC6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.4:*:*:*:*:*:*:*","matchCriteriaId":"4964AB2C-E255-4844-8DD9-FFFC9512B7C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D0B52CA-3834-4435-A3E1-9684A41E6405"}]}]}],"references":[{"url":"http://secunia.com/advisories/36046","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35860","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022619","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2082","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6853","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/36046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080aea4c9.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2050","sourceIdentifier":"psirt@cisco.com","published":"2009-08-27T17:00:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message, aka Bug ID CSCsi46466."},{"lang":"es","value":"Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) anteriores a v6.1(1) permite a los atacantes remotos causar una denegación de servicio (parada servicio de voz) a través de cabeceras malformadas en un mensaje SIP, también conocido como Bug ID CSCsi46466."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1\\(1\\)","matchCriteriaId":"955CAD70-C632-4317-9B5D-89B68AAD1C8D"}]}]}],"references":[{"url":"http://osvdb.org/57452","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36495","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2051","sourceIdentifier":"psirt@cisco.com","published":"2009-08-27T17:00:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987."},{"lang":"es","value":"Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) v4.x, v5.x anteriores a v5.1(3g), v6.x anteriores v6.1(4), y v7.x anteriores v7.1(2) permite a los atacantes remotos causar una denegación de servicio (parada del servicio de voz) a través de mensajes malformados SIP INVITE que lanzan una llamada incorrecta a la función sipSafeStrlen, también conocida como Bug ID CSCsz40392."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3g\\)","matchCriteriaId":"B48B0779-7796-45D2-8967-459F562A6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1\\(1\\)","versionEndExcluding":"6.1\\(4\\)","matchCriteriaId":"98AF7F97-8702-4E7B-BDE4-BD5A3114FDF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1\\(2\\)","matchCriteriaId":"96DB29BF-9A40-4591-BE41-C519B86C2EEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionStartIncluding":"12.2","versionEndIncluding":"12.4","matchCriteriaId":"FBB64D7E-7C96-4A3D-BA83-60EE8D5DFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0","versionEndIncluding":"15.1","matchCriteriaId":"537031DB-5ADF-475E-BFFA-9092652BF2B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.6.1","matchCriteriaId":"2DEE9D2D-BE50-4216-8F7E-CB6F46880E08"}]}]}],"references":[{"url":"http://osvdb.org/57453","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36498","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2052","sourceIdentifier":"psirt@cisco.com","published":"2009-08-27T17:00:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to \"tracking of network connections,\" aka Bug IDs CSCsq22534 and CSCsw52371."},{"lang":"es","value":"Unified Communications Manager de Cisco (también conocido como CUCM, anteriormente CallManager) versión 4.x, versión 5.x anterior a 5.1 (3g), versión 6.x anterior a 6.1 (4), versión 7.0 anterior a 7.0 (2) y versión 7.1 anterior a 7.1 (2); y Unified Presence de Cisco  versión 1.x, versión 6.x anterior a 6.0 (6) y versión 7.x anterior a 7.0 (4); permite a los atacantes remotos causar una denegación de servicio (interrupción de los servicios TCP) por medio de una gran cantidad de conexiones TCP, relacionadas con el  \"tracking of network connections,\" también conocida como Bug Id. CSCsq22534 y CSCsw52371."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3g\\)","matchCriteriaId":"B48B0779-7796-45D2-8967-459F562A6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1\\(1\\)","versionEndExcluding":"6.1\\(4\\)","matchCriteriaId":"98AF7F97-8702-4E7B-BDE4-BD5A3114FDF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.0\\(2\\)","matchCriteriaId":"70FFE57A-3D1F-4310-87F5-CEE420125357"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1\\(2\\)","matchCriteriaId":"96DB29BF-9A40-4591-BE41-C519B86C2EEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/36498","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37039","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023018","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36676","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2915","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2053","sourceIdentifier":"psirt@cisco.com","published":"2009-08-27T17:00:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236."},{"lang":"es","value":"Cisco Unified Communications Manager (también conocido, formalmente CallManager) v4.x, v5.x anteriores a v5.1(3g), v6.x anteriores a v6.1(4), v7.0 anteriores a v7.0(2a)su1, y v7.1 anteriores a v7.1(2) permite a los atacantes remotos causar una denegación de servicio (agotamiento del descriptor de fichero y parada SCCP) a través de la inundación de paquetes TCP, también conocido como Bug ID CSCsx32236."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.1\\(3g\\)","matchCriteriaId":"B48B0779-7796-45D2-8967-459F562A6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1\\(1\\)","versionEndExcluding":"6.1\\(4\\)","matchCriteriaId":"98AF7F97-8702-4E7B-BDE4-BD5A3114FDF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.0\\(2a\\)su1","matchCriteriaId":"906EED24-1D35-4952-AFCA-D7D5223F66D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1\\(2\\)","matchCriteriaId":"96DB29BF-9A40-4591-BE41-C519B86C2EEF"}]}]}],"references":[{"url":"http://osvdb.org/57455","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36498","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2054","sourceIdentifier":"psirt@cisco.com","published":"2009-08-27T17:00:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689."},{"lang":"es","value":"Cisco Unified Communications Manager (también conocido como CUCM, formalmente CallManager) v4.x, v5.x anteriores a v5.1(3g), v6.x anteriores a v6.1(4), v7.0 anteriores a v7.0(2a)su1, y v7.1 anteriores a v7.1(2a)su1 permite a los atacantes remotos causar una denegación de servicio (agotamiento de la descripción del fichero y parada SIP) a través de una inundación de paquetes TCP, también conocido como Bug ID CSCsx23689."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.1\\(3g\\)","matchCriteriaId":"4C7C8DA6-9BAD-4ECB-8901-F1527C8710D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.1\\(4\\)","matchCriteriaId":"8E11B055-9625-4A00-8252-6E1660037F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.0\\(2a\\)su1","matchCriteriaId":"906EED24-1D35-4952-AFCA-D7D5223F66D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1","versionEndExcluding":"7.1\\(2a\\)su1","matchCriteriaId":"307FB584-44E5-4A1C-B219-E438D9C0CF5C"}]}]}],"references":[{"url":"http://osvdb.org/57456","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36498","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36499","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"psirt@cisco.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2055","sourceIdentifier":"psirt@cisco.com","published":"2009-08-19T17:30:01.047","lastModified":"2025-10-22T01:15:34.683","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009."},{"lang":"es","value":"Cisco IOS XR desde la v3.4.0 hasta la v3.8.1 permite a atacantes remotos producir una denegación de servicio (reset de sesión) a través de el mensaje BGP UPDATE con un atributo invalido, como se demostró el 17 de Agosto de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*","matchCriteriaId":"75538529-611A-43B5-AC4D-089C4E2E2ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"00DA2581-F618-4F2A-AB65-DA23DF51AF89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"81797938-F953-42BE-B287-AA48B9860AF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92AED038-C73F-4499-B064-F01D80DB0C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*","matchCriteriaId":"F992D03D-1DB8-44C1-B59D-1C09A32A2C91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5F15240-6323-4766-801A-D887F3EA8A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D99DC1CF-78DC-4E59-98BA-DD84702D6467"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0B9FA754-E3D2-4D80-8F4B-41139973D9FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F497A05C-2FC5-427D-8036-2476ACA956C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1131A524-AA7A-4C94-9FFE-54546EA7D2CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"46D1A634-D39C-4305-8915-4AA289FB68EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"21BAB799-3150-46D8-AEA3-9FCC73203221"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"99042285-94AC-4C57-8EAA-EE63C678A94A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2E752AA9-CC1C-44B6-A916-A3C76A57F05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"96F48419-AF66-4B50-ACBF-9E38287A64FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"}]}]}],"references":[{"url":"http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html","source":"psirt@cisco.com","tags":["Mailing List"]},{"url":"http://securitytracker.com/id?1022739","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://securitytracker.com/id?1022739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-2055","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-2056","sourceIdentifier":"psirt@cisco.com","published":"2009-08-21T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path."},{"lang":"es","value":"Cisco IOS XR 3.8.1 y versiones anteriores permite a atacantes remotos autenticados provocar una denegación de servicio (caida de proceso) mediante vectores relacionados con un mensaje BGP UPDATE con muchos números AS al comienzo de la ruta AS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:M/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"MULTIPLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":6.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"1A71883C-A3DF-4FB3-8BA9-61A0E4DFD2F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.0:*:*:*:*:*:*:*","matchCriteriaId":"904CA41E-8168-41DE-AE84-941962A7BB71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778F5573-0741-442F-AFFA-937053F8280C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.1:*:*:*:*:*:*:*","matchCriteriaId":"9B4F71CB-B8D6-44AA-B0E8-E6EC92F4273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ADF0D7F5-7A9C-4E58-A9DB-33BF13CE135D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8D69F8FA-D58A-4F53-86D8-A20C73E9B299"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C46BE68F-FFA9-4DF0-B407-1F5576047B6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A88B45F0-B1D1-4680-A29E-2C8A167573D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2.3:*:crs-1:*:*:*:*:*","matchCriteriaId":"FBBD93B6-100E-481D-AE0A-FE65971A2280"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2.3:*:prp:*:*:*:*:*","matchCriteriaId":"E20FBF42-CC47-40E8-94A4-F6323886151C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"265062D1-20BB-4B51-9407-AAA8F83A4D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.2.50:*:*:*:*:*:*:*","matchCriteriaId":"9FDF9D75-6713-427F-A65F-1D59911A410B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AD331C50-DB93-4001-B56A-C1012F894CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*","matchCriteriaId":"75538529-611A-43B5-AC4D-089C4E2E2ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"00DA2581-F618-4F2A-AB65-DA23DF51AF89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"81797938-F953-42BE-B287-AA48B9860AF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92AED038-C73F-4499-B064-F01D80DB0C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*","matchCriteriaId":"F992D03D-1DB8-44C1-B59D-1C09A32A2C91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5F15240-6323-4766-801A-D887F3EA8A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D99DC1CF-78DC-4E59-98BA-DD84702D6467"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0B9FA754-E3D2-4D80-8F4B-41139973D9FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A8BC298-4AF9-4281-9AD9-0D8F621E46B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F497A05C-2FC5-427D-8036-2476ACA956C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1131A524-AA7A-4C94-9FFE-54546EA7D2CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"46D1A634-D39C-4305-8915-4AA289FB68EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7:*:*:*:*:*:*:*","matchCriteriaId":"F2FE436B-2117-4FB4-B550-8454848D1D58"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"21BAB799-3150-46D8-AEA3-9FCC73203221"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"99042285-94AC-4C57-8EAA-EE63C678A94A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2E752AA9-CC1C-44B6-A916-A3C76A57F05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"96F48419-AF66-4B50-ACBF-9E38287A64FA"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022756","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2057","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."},{"lang":"es","value":"Microsoft Internet Explorer anteriores a v8 utiliza una cabecera HTTP Host para determinar el contexto de un documento proporcionado por una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXIÓN, también conocida como un ataque \"forzado SSL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"C26125C2-2476-43E8-8878-8C1A5A8B244F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*","matchCriteriaId":"FED6949F-54D0-4D36-B6A8-59EBFA2611E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*","matchCriteriaId":"226A1B77-A80E-4ADE-8318-749CD1AD7CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"59EB6841-0427-479B-8771-06DF62EE3C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B9D82B89-456D-41CB-A894-B6A22FB4415D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*","matchCriteriaId":"2E21CE6E-2B33-4225-B1DC-C19F1D578040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1B26CE22-E730-4247-853E-5E640DB3ECB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*","matchCriteriaId":"0A652453-AB5F-405C-ABDE-CE1B54FEACED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*","matchCriteriaId":"141080AB-48DE-4885-BAB6-6F0937ABD49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*","matchCriteriaId":"EB758D76-B7F6-4E87-B88D-620443655CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*","matchCriteriaId":"28655AC5-1512-4F45-9963-CA26F73981CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*","matchCriteriaId":"C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*","matchCriteriaId":"BEC05584-F553-4D29-9C46-C9EE5F0CB166"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*","matchCriteriaId":"B108A86E-8387-446C-B823-BE6FCAE747A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*","matchCriteriaId":"BA3F79B8-512A-4B88-868C-7C4ADFD223C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*","matchCriteriaId":"078C3A86-C9F8-4A19-9DDC-1065B54E640F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*","matchCriteriaId":"9030923C-356E-4FAB-8E64-03D462B4DB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*","matchCriteriaId":"DC0FFABC-8BED-4838-85FE-406DC9CF9B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*","matchCriteriaId":"C9DB4A00-4F70-4189-81BD-9318C52DF2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*","matchCriteriaId":"FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*","matchCriteriaId":"61125B09-23AA-4D5A-8332-6B5CCD80C7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*","matchCriteriaId":"3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*","matchCriteriaId":"D4690B85-86B9-448E-9249-B3885DEDC60E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*","matchCriteriaId":"D91F4C80-3B1B-45BD-966F-C9DBF98B875D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*","matchCriteriaId":"F65E0DC1-40F6-4252-945A-A972343D1E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*","matchCriteriaId":"8C07C1A9-1A94-4653-8C57-6FCFC25854E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*","matchCriteriaId":"EDC57519-AD96-4ECF-A5B2-4E45F7D55298"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*","matchCriteriaId":"37DE3DE6-A355-41F2-BF5E-E7526449E753"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*","matchCriteriaId":"5DB24B4F-44FF-4F0F-90FA-240A34B9599F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*","matchCriteriaId":"919A6551-DB18-49BD-AB92-4C453B3B728F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*","matchCriteriaId":"C512DAB3-2720-42D2-B27E-28F30FE0FE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*","matchCriteriaId":"CB90458F-1F2B-4F4C-88C6-4B670787D126"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*","matchCriteriaId":"6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*","matchCriteriaId":"4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CFF390-FF33-45CA-BC96-C6766491C616"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*","matchCriteriaId":"F4336F0E-75FE-4592-9D98-4F689804956E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*","matchCriteriaId":"8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*","matchCriteriaId":"01BD2A05-3FCE-4C5D-8228-968630F27E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*","matchCriteriaId":"BF0EC334-AEAD-43CA-A609-C027060F4F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*","matchCriteriaId":"BAF320BE-F022-4E0E-9815-B8AEED87B384"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*","matchCriteriaId":"75532B2D-6814-4D20-8AEB-E7DFD66B6423"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*","matchCriteriaId":"83802E30-8E7D-4CAB-B8FC-10056CF833D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*","matchCriteriaId":"314538E8-48EC-4869-9074-2A1F5B7CBB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*","matchCriteriaId":"F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*","matchCriteriaId":"93F47C82-E767-47A8-88DE-417B004ED7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"BCE2555F-C4BE-482F-8DD9-976D2026058C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*","matchCriteriaId":"7CBF9B51-5AF4-4317-9768-21D866AC7990"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:*","matchCriteriaId":"61F352FE-C22E-4B33-A46F-77A164B5DABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:*","matchCriteriaId":"5ACD5A44-0926-4A1B-9900-1E7CC0A561C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:*","matchCriteriaId":"3E16BEF4-71AA-4E23-B438-D25FFABDB646"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:*","matchCriteriaId":"1F32702E-F955-4DDB-B235-7C47E882453C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:*","matchCriteriaId":"6FA2B4AD-C04D-4A6B-8570-5A2F5489F750"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*","matchCriteriaId":"506711D9-6E57-4EED-8628-36C7F2324040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"ED471260-0272-431F-A91E-AC2883D92497"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"86584E3F-3B0D-4018-A186-E59F3B01CA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*","matchCriteriaId":"0E6E1020-1017-4670-9316-27C79F1E2698"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*","matchCriteriaId":"37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*","matchCriteriaId":"35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*","matchCriteriaId":"53D75496-8594-44DB-B5C4-EA3CABD6551A"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2058","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."},{"lang":"es","value":"Apple Safari anteriores a v3.2.2 utiliza una cabecera HTTP Host para determinar el contexto de un documento proporcionado por una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXIÓN, también conocida como un ataque \"forzado SSL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"B6E139B2-65BD-4416-9D99-48E132BEC3A5"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51193","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2059","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."},{"lang":"es","value":"Opera, posiblemente anteriores a v9.25, utiliza una cabecera HTTP Host para determinar el contexto de un documento propocionado por una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web modificando la respuesta CONEXIÓN, también conocida como un ataque \"forzado SSL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.22","matchCriteriaId":"11F806C7-C64E-4EE7-96B1-E625CE121A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2060","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack."},{"lang":"es","value":"src/net/http/http_transaction_winhttp.cc en Google Chrome anteriores a v1.0.154.53 utiliza una cabecera Host HTTP para determinar el contexto de un documento proporcionado en una respuesta de CONEXIÓN (1) 4xx o (2) 5xx desde un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comando web modificando esta respuesta de CONEXIÓN, también conocida como un ataque \"forzado SSL\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.52","matchCriteriaId":"A7105F0E-97F8-4C84-82FB-1DE9ABD07AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=7338","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=8473","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=11669","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479880","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51194","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=7338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/chromium/issues/detail?id=8473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=11669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2061","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site."},{"lang":"es","value":"Mozilla Firefox anterior a v3.0.10 procesa una respuesta 3xx CONEXIÓN HTTP anteriores a una negociación SSL con éxito, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web, en un contexto de página https, modificando esta respuesta de CONEXIÓN a una redirección específica 302 a un página web https arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.9","matchCriteriaId":"E45109F0-313F-4112-A570-85D484ACB3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51203","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2062","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site."},{"lang":"es","value":"Apple Safari anteriores a v3.2.2 procesa una respuesta de CONEXIÓN HTTP anterior a una negociación SSL con éxito, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web en un página con contexto https, modificando esta respuesta de CONEXIÓN a una redirección 302 específica a una página web https arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"7F6BD2EE-4CD1-4F19-9710-FEE247C69521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*","matchCriteriaId":"63FEA310-C6F2-4F2A-ABA8-6468308E3569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51202","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2063","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site."},{"lang":"es","value":"Opera, posiblemente en versiones anteriores a v9.25, procesa una respuesta 3xx HTTP CONNECT antes de un proceso de handshake SSL exitoso, lo que permitiría a atacantes \"man-in-the-middle\" ejecutar secuencias de comandos web, en un contexto de un sitio https, mediante la modificación de la respuesta CONNECT hacia una redirección inespecífica a un sitio web https arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.24","matchCriteriaId":"E074E753-D7B5-49DB-8FE4-294F92047027"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51204","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2064","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""},{"lang":"es","value":"Microsoft Internet Explorer 8, y posiblemente otras versiones, detecta contenido http en páginas web https solamente en marcos de alto nivel que usan https, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web, en un contexto de una página https, modificando una página http que incluya un iframe https que referencia a un archivo de secuencia de comandos en un sitio http, relativo a páginas \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:beta2:*:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"BFF1D247-1AF2-44C6-81D2-9C868A62BC00"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*","matchCriteriaId":"59159262-BA89-46B9-B16F-0CC6A5502C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730:*:*:*:*:*:*:*","matchCriteriaId":"E3B85C32-02F5-43F5-8BBB-5A240F99BAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:beta1:*:*:*:*:*:*","matchCriteriaId":"06E95EE4-23D8-40F7-9DFF-6C835AB62AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8.0b:*:*:*:*:*:*:*","matchCriteriaId":"21CCF994-2F4D-44FE-89F7-0F92734D5AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC33FCB-8A30-497E-8369-D6A0A30EEB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F51C049-0E1B-42DE-898D-E18B350EE7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5354582-A1D1-46CB-A05A-A086820C1013"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8075385C-29C6-4E2D-938A-CD1444892609"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3168D511-6FFD-40D0-B46B-352C6A1CF34C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:2002:*:*:*:*:*:*:*","matchCriteriaId":"87D57619-255D-46DD-9C32-E4B7F5F3689A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pocket_ie:2003:*:*:*:*:*:*:*","matchCriteriaId":"E6284FCA-2362-42A2-A9FE-E6E385191E4D"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51186","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2065","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""},{"lang":"es","value":"Mozilla Firefox 3.0.10, y posiblemente otras versiones, detecta contenido http en páginas https únicamente cuando el marco (frame) de nivel superior usa https, lo que permite a atacantes \"hombre-en-medio\" (man-in-the-middle o MITM) ejecutar secuencias de comandos web de su elección, en un contexto de sitio https, modificando una página http para incluir un iframe https que referencia al archivo en un sitio http con la secuencia de comandos. Relacionado con \"Páginas HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.9","matchCriteriaId":"E45109F0-313F-4112-A570-85D484ACB3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51189","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2066","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""},{"lang":"es","value":"Apple Safari detecta contenido http en páginas https únicamente cuando el marco (frame) de nivel superior usa https, lo que permite a atacantes \"hombre-en-medio\" (man-in-the-middle o MITM) ejecutar secuencias de comandos web de su elección, en un contexto de sitio https, modificando una página http para incluir un iframe https que referencia al archivo en un sitio http con la secuencia de comandos. Relacionado con \"Páginas HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"7F6BD2EE-4CD1-4F19-9710-FEE247C69521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*","matchCriteriaId":"63FEA310-C6F2-4F2A-ABA8-6468308E3569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51187","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2067","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""},{"lang":"es","value":"Opera detecta contenido http en una página https, sólo cuando el marco de alto nivel utiliza https, lo que permite a los atacantes \"hombre en el medio\" ejecutar arbitrariamente una secuencia de comandos web, en un contexto de página https, modificando una página http incluya un iframe https referenciando a un archivo de secuencia de comandos en una página http, en relación a páginas \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.22","matchCriteriaId":"11F806C7-C64E-4EE7-96B1-E625CE121A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35403","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2068","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""},{"lang":"es","value":"Google Chrome detecta contenido http en páginas https únicamente cuando el marco (frame) de nivel superior usa https, lo que permite a atacantes \"hombre-en-medio\" (man-in-the-middle o MITM) ejecutar secuencias de comandos web de su elección, en un contexto de sitio https, modificando una página http para incluir un iframe https que referencia al archivo en un sitio http con la secuencia de comandos. Relacionado con \"Páginas HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*","matchCriteriaId":"40073FD8-6E5A-4770-837A-CAF0C8FD2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F071C3F7-A3C4-475D-8843-B52F2DB7C56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"1CBC39B3-4106-4B28-8AFB-4F4B5B5119D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"763CEF7F-AAB2-4C16-BDC2-E5F864111592"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*","matchCriteriaId":"B66F0EC7-452C-4847-B028-5086FE657440"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*","matchCriteriaId":"5F966486-485B-4B0D-9BE1-F1D39CB08863"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*","matchCriteriaId":"A32E4272-6CEF-4C1C-BDA2-96863E8301DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*","matchCriteriaId":"47B21D05-A906-44B5-AEDA-73D383B905E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*","matchCriteriaId":"E0BA115B-C42E-4794-90BC-778B0C85CE73"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*","matchCriteriaId":"00ED2069-849A-4E62-88B3-323A8682F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*","matchCriteriaId":"7C0F2643-923D-4072-B5A4-6321066C3AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*","matchCriteriaId":"C5830888-AE31-4C80-A923-EA83B4464859"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D45E22AA-46A6-42F3-9E5B-95958163EF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*","matchCriteriaId":"655604B2-773D-4F94-951B-6E17E123EFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5E856FB7-7315-4ABF-A835-0BEF9BA10DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*","matchCriteriaId":"DE22CFC5-1607-4FF1-8681-24AE2C167C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*","matchCriteriaId":"CCF854C3-7C1A-4B0D-B27D-10B52B9C41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*","matchCriteriaId":"9C27A748-0792-499F-A3A1-3C9528A5AD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*","matchCriteriaId":"E606F772-09E2-40F1-84C1-1A5B2BBD2FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*","matchCriteriaId":"4500A623-BD2C-461A-B862-2C51BD25BE71"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*","matchCriteriaId":"E5E77793-94BC-47D8-B2D1-D3B020DEF93C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*","matchCriteriaId":"C0EC8D15-02D5-4988-85FD-50B1ABCC7B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*","matchCriteriaId":"BC32B83A-4E91-4D1D-8051-35F339E61A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF315DF-C0C9-468C-8C7E-C4547AF431FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"63114EE0-54F7-4418-9B9E-C37BB2869F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"CF5C9CB9-6396-415D-AC64-312F47A76177"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"C8F3056A-14B5-411F-8FE8-80AF5605001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4CF6B223-8575-40C7-9EDA-BDDCF6ABDBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B5159296-AD9C-4199-B5DF-539EE61D45A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*","matchCriteriaId":"BE952E7C-EBDC-4652-95C3-C308BBEF1FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*","matchCriteriaId":"EE616514-882C-4ED2-BB0C-1248B8316ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*","matchCriteriaId":"00A6FD59-C258-4A49-81C9-F6E58FB30117"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*","matchCriteriaId":"DADA8A93-4DF4-4C95-860E-65CA46B12DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*","matchCriteriaId":"F9EF0387-AEFC-40BC-A7C8-28F175844CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*","matchCriteriaId":"BB1B176A-1200-4E75-BFC0-AA5F87E2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*","matchCriteriaId":"911B0336-02CE-426C-ABFF-8CFD3BC146CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*","matchCriteriaId":"26FC4ABB-EDA9-426D-ADC9-E7DABEB8A64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B5435A52-0F9D-41AC-9FF9-93A512D0103C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"790C5B0D-9A06-4C0C-BBBF-9B4C17857213"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*","matchCriteriaId":"620666CE-AABB-4A36-9566-425F2C810F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"BD72F9AF-EFD5-408B-9FC3-6341F92B39B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*","matchCriteriaId":"2590789F-F333-4AD0-82B4-D6D9B9E0F5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*","matchCriteriaId":"355242B3-33ED-4B65-8373-3CDC6C556B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*","matchCriteriaId":"A685E97D-3B0F-4C69-8124-F3AB26905124"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*","matchCriteriaId":"E4FDEC39-7B53-4AD9-9EDF-D95860264345"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CE7F056E-BB13-4453-8065-C18E6171AC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*","matchCriteriaId":"0221A7DE-9F8F-46A4-B609-1F10D2606370"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"A3089B27-E279-46B8-91C3-2040DBEBC281"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*","matchCriteriaId":"7433778F-DE4F-48A7-8AF7-8DBD17DC4C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*","matchCriteriaId":"02178B82-3805-4B7C-B341-4F4E280B4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*","matchCriteriaId":"7FA8888D-6CC5-4ED8-9907-0B9709F2980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.30:*:*:*:*:*:*:*","matchCriteriaId":"431AE65C-5A7A-48D3-8A73-EC20CC86CB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*","matchCriteriaId":"8A860F7C-F2FF-40A9-88DA-35766836A8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*","matchCriteriaId":"47871B2C-F6DA-4C92-BA15-90BA8FE3F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D7E2EA7B-19D5-4A6A-88BE-BEEEAA792536"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*","matchCriteriaId":"8E50D780-F507-49BC-8C34-477C6A7C3741"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*","matchCriteriaId":"3BA7025B-BBB5-43BC-AB6E-E41E56430AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*","matchCriteriaId":"5E33873C-DFD6-4450-8A9A-31CF2437E5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:7.55:*:*:*:*:*:*:*","matchCriteriaId":"CDC4A969-1099-4F99-AA39-0BDB7654044C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*","matchCriteriaId":"00336594-FE61-4815-B52F-90BE545E9428"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"262ADE2E-4E91-4BA3-AAAD-A1B3A18EAAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"587EBDA2-C0F1-469B-A9A9-68634CF058A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9CCE749D-8553-4365-A8C5-A6C9037FEAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*","matchCriteriaId":"38F2F078-9620-4ED1-BA42-44C167DEF2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*","matchCriteriaId":"A006AB3D-3228-4980-A45C-F331E8236867"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*","matchCriteriaId":"625DF977-9C3A-4904-BF77-DE1CE7C9AA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B1FD-140F-43BF-963F-55C6929DE68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*","matchCriteriaId":"244D2B12-5C3A-4007-B93C-0194417C00A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"C1C64664-5B10-48E4-A457-56DBC8EB30D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*","matchCriteriaId":"85AD3AC7-F403-4A80-B56B-D32DF61A708A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*","matchCriteriaId":"DADC950D-2542-43B3-BC71-FFE3AD76E29B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*","matchCriteriaId":"62EFDBC5-7ADB-4F66-8F0A-B234FC9C9B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*","matchCriteriaId":"B57ECE1A-72DE-4E9C-B762-2935A964277F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*","matchCriteriaId":"B8C204EE-8435-4CCA-B08C-60E702441AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*","matchCriteriaId":"B766176F-E80A-433A-AC30-1A1265FCDE53"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51192","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2069","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request."},{"lang":"es","value":"Microsoft Internet Explorer anterior a 8 muestra un certificado cacheado para una página de respuesta CONEXIÓN (1) 4xx o (2) 5xx por un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" suplantar una página https permitiendo al navegador obtener un certificado válido desde esta página, durante una petición, y enviando al navegador una página de repuesta 502 manipulada sobre la subsiguiente petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"C26125C2-2476-43E8-8878-8C1A5A8B244F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*","matchCriteriaId":"FED6949F-54D0-4D36-B6A8-59EBFA2611E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*","matchCriteriaId":"226A1B77-A80E-4ADE-8318-749CD1AD7CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"59EB6841-0427-479B-8771-06DF62EE3C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B9D82B89-456D-41CB-A894-B6A22FB4415D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*","matchCriteriaId":"2E21CE6E-2B33-4225-B1DC-C19F1D578040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1B26CE22-E730-4247-853E-5E640DB3ECB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*","matchCriteriaId":"0A652453-AB5F-405C-ABDE-CE1B54FEACED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*","matchCriteriaId":"141080AB-48DE-4885-BAB6-6F0937ABD49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*","matchCriteriaId":"EB758D76-B7F6-4E87-B88D-620443655CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*","matchCriteriaId":"28655AC5-1512-4F45-9963-CA26F73981CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*","matchCriteriaId":"C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*","matchCriteriaId":"BEC05584-F553-4D29-9C46-C9EE5F0CB166"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*","matchCriteriaId":"B108A86E-8387-446C-B823-BE6FCAE747A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*","matchCriteriaId":"BA3F79B8-512A-4B88-868C-7C4ADFD223C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*","matchCriteriaId":"078C3A86-C9F8-4A19-9DDC-1065B54E640F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*","matchCriteriaId":"9030923C-356E-4FAB-8E64-03D462B4DB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*","matchCriteriaId":"DC0FFABC-8BED-4838-85FE-406DC9CF9B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*","matchCriteriaId":"C9DB4A00-4F70-4189-81BD-9318C52DF2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*","matchCriteriaId":"FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*","matchCriteriaId":"61125B09-23AA-4D5A-8332-6B5CCD80C7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*","matchCriteriaId":"3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*","matchCriteriaId":"D4690B85-86B9-448E-9249-B3885DEDC60E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*","matchCriteriaId":"D91F4C80-3B1B-45BD-966F-C9DBF98B875D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*","matchCriteriaId":"F65E0DC1-40F6-4252-945A-A972343D1E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*","matchCriteriaId":"8C07C1A9-1A94-4653-8C57-6FCFC25854E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*","matchCriteriaId":"EDC57519-AD96-4ECF-A5B2-4E45F7D55298"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*","matchCriteriaId":"37DE3DE6-A355-41F2-BF5E-E7526449E753"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*","matchCriteriaId":"5DB24B4F-44FF-4F0F-90FA-240A34B9599F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*","matchCriteriaId":"919A6551-DB18-49BD-AB92-4C453B3B728F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*","matchCriteriaId":"C512DAB3-2720-42D2-B27E-28F30FE0FE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*","matchCriteriaId":"CB90458F-1F2B-4F4C-88C6-4B670787D126"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*","matchCriteriaId":"6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*","matchCriteriaId":"4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CFF390-FF33-45CA-BC96-C6766491C616"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*","matchCriteriaId":"F4336F0E-75FE-4592-9D98-4F689804956E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*","matchCriteriaId":"8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*","matchCriteriaId":"01BD2A05-3FCE-4C5D-8228-968630F27E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*","matchCriteriaId":"BF0EC334-AEAD-43CA-A609-C027060F4F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*","matchCriteriaId":"BAF320BE-F022-4E0E-9815-B8AEED87B384"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*","matchCriteriaId":"75532B2D-6814-4D20-8AEB-E7DFD66B6423"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*","matchCriteriaId":"83802E30-8E7D-4CAB-B8FC-10056CF833D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*","matchCriteriaId":"314538E8-48EC-4869-9074-2A1F5B7CBB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*","matchCriteriaId":"F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*","matchCriteriaId":"93F47C82-E767-47A8-88DE-417B004ED7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"BCE2555F-C4BE-482F-8DD9-976D2026058C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*","matchCriteriaId":"7CBF9B51-5AF4-4317-9768-21D866AC7990"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:*","matchCriteriaId":"61F352FE-C22E-4B33-A46F-77A164B5DABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:*","matchCriteriaId":"5ACD5A44-0926-4A1B-9900-1E7CC0A561C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:*","matchCriteriaId":"3E16BEF4-71AA-4E23-B438-D25FFABDB646"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:*","matchCriteriaId":"1F32702E-F955-4DDB-B235-7C47E882453C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:*","matchCriteriaId":"6FA2B4AD-C04D-4A6B-8570-5A2F5489F750"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*","matchCriteriaId":"506711D9-6E57-4EED-8628-36C7F2324040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"ED471260-0272-431F-A91E-AC2883D92497"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"86584E3F-3B0D-4018-A186-E59F3B01CA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*","matchCriteriaId":"0E6E1020-1017-4670-9316-27C79F1E2698"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*","matchCriteriaId":"37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*","matchCriteriaId":"35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*","matchCriteriaId":"53D75496-8594-44DB-B5C4-EA3CABD6551A"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35411","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2070","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request."},{"lang":"es","value":"Opera muestra un certificado cacheado para una página de respuesta de CONEXIÓN (1) 4xx o (2) 5xx a través de un servidor proxy, lo que permite a los atacantes \"hombre en el medio\" suplantar una página https permitiendo a un navegador obtener un certificado válido de esta página, durante una petición, y enviado al navegador una página de respuesta 502 manipulada  sobre la subsiguiente petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*","matchCriteriaId":"4545786D-3129-4D92-B218-F4A92428ED48"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35411","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2071","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request."},{"lang":"es","value":"Google Chrome anteriores a v1.0.154.53 muestra un certificado cacheado para una página de respuesta de CONEXIÓN (1) 4xx o (2) 5xx a través de un servidor proxy, lo que permite a un atacante \"hombre en el medio\" suplantar un sitio https permitiendo a un navegador obtener certificados válidos desde este sitio durante una petición, y enviando al navegador una página de respuesta 502 manipulada sobre una subsiguiente petición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.52","matchCriteriaId":"A7105F0E-97F8-4C84-82FB-1DE9ABD07AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=7338","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=8473","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=11669","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35411","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479880","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=7338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/chromium/issues/detail?id=8473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=11669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2072","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server."},{"lang":"es","value":"Apple Safari no requiere un certificado cacheado antes de mostrar el icono del candado para una página https, lo que permite a los atacantes \"hombre en el medio\" suplantar una página web https enviando al navegador una página de respuesta de CONEXIÓN manipulada para una petición https enviada a través de un servidor proxy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"7F6BD2EE-4CD1-4F19-9710-FEE247C69521"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*","matchCriteriaId":"63FEA310-C6F2-4F2A-ABA8-6468308E3569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"}]}]}],"references":[{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35411","source":"cve@mitre.org"},{"url":"http://research.microsoft.com/apps/pubs/default.aspx?id=79323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2073","sourceIdentifier":"cve@mitre.org","published":"2009-06-15T19:30:05.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el router inalámbrico Linksys WRT160N hardware 1 y firmware v1.02.2 permite a los atacantes remotos secuestrar la autenticación de otros usuarios por peticiones no especificadas a través de vectores desconocidos, como se demuestra usando privilegios y acciones de administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wrt160n:1.02.2:*:*:*:*:*:*:*","matchCriteriaId":"A907D6E1-8C43-45D5-9793-6A901EAD34D4"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/109/45/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34448","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0982","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49775","source":"cve@mitre.org"},{"url":"http://holisticinfosec.org/content/view/109/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/53414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2074","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Nodequeue v5.x anteriores a v5.x-2.7 y v6.x anteriores a v6.x-2.2, un modulo para Drupal, permite a usuarios remotos autenticados con permisos administrativos taxonómicos inyectar secuencias de comandos web o HTML de forma arbitraria a través de nombres de vocabulario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.0-rc:*:*:*:*:*:*:*","matchCriteriaId":"C59A8003-108E-4CEE-8643-21A5CA506888"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1356CA81-07AA-4B03-B700-0EAFE7090C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E1358F53-FA20-401C-9E77-E3D1332E63A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"BF0DE709-A162-4F45-8B1B-D9F64187D2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"CF0836BD-F39F-4D52-BC9C-87CAC0B611F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"2F0986D3-E9ED-4E2C-B333-333A74EAC8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"9B42E88C-AB90-42B0-A204-8A669AA86658"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"5B378A03-D1FB-4686-AEF0-311DA2068463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"1C86D228-A6B2-4100-887C-17A588B1A1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"5074D9CA-A46C-450A-9DA3-72DC450BE104"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:6.x-2.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"0B93A8B0-4632-4076-93DC-EBA79896A68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:6.x-2.0-rc2:*:*:*:*:*:*:*","matchCriteriaId":"6609DD41-8A17-474A-9186-24A2944E636B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:nodequeue:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"DEA3BFD6-5693-4121-BB71-44836D7579C2"}]}]}],"references":[{"url":"http://drupal.org/node/488092","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488102","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/488104","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lampsecurity.org/drupal-nodeque-xss-vulnerability","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35305","source":"cve@mitre.org"},{"url":"http://drupal.org/node/488092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/488104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lampsecurity.org/drupal-nodeque-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2075","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors."},{"lang":"es","value":"Nodequeue v5.x anteriores a v5.x-2.7 y v6.x anteriores a v6.x-2.2, un modulo para Drupal, nos restringe adecuadamente cuando se visualizan los títulos de nodo, lo que tiene un impacto y vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E1A90DB-635D-4A05-ADD7-15E1C01A4EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:beta:*:*:*:*:*:*","matchCriteriaId":"DE77F629-B229-4AEE-A06F-F2885852EF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc:*:*:*:*:*:*","matchCriteriaId":"9F76812A-92C6-4F4E-B2C2-E56A9F826711"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0154052F-5DE8-4ED0-8FB4-C829A86E794D"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"E9FDCE77-A34B-4500-9128-41BDCE75DEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"5B232515-E371-4796-BCAC-0EE0549C828C"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A43F993-DFA9-486C-8E9C-4EBC3F3E144E"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"1441EF70-52F6-4240-9B1E-8DF173AE7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BB1395A-C7EA-42CA-960A-993A73563C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"073BEE1E-5E92-466F-BBC9-DBE1D0B8C268"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:5.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"4D3008BB-7DE4-455F-B68C-379709209AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"466E3FAC-A4DE-470D-8EA7-AA1ABFE65785"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"4ADC438A-6C22-4F46-8955-34B24449B44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"A821D8D0-5E9A-4B44-898F-192134DE4CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"797476D5-AA18-43A8-827D-FB60993573F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc3:*:*:*:*:*:*","matchCriteriaId":"9FB85B7E-EDA3-403C-A9C5-1C08F4C78571"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:nodequeue:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"6CB3B2F2-0B91-4063-AD80-8D4D88B94651"}]}]}],"references":[{"url":"http://drupal.org/node/488092","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488102","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488104","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35305","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/488092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2076","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature.  NOTE: vector 2 is only exploitable by users with administer views permissions."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Views v6.x anteriores a v6.x-2.6, un modulo de Drupal, permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrariamente a través de (1) filtros que se muestran en la interfaz administrativa de usuario Views y el (2) parámetro \"view name\" en la característica de personalizar vistas. NOTA: vector 2 es únicamente explotable por usuarios con permisos administrativos de vistas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB48B703-BFDC-4BC2-AADB-1D5877BD6F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"9D4CAFA5-CB7B-475B-9278-2C5576934FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"258F8CAF-E1A5-43D8-B515-4C5A5E541CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"E67C9A56-E67D-4517-8956-4354D62A506B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"8E28C97B-E461-4CC7-9751-EBF46B93F84F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:views:6.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"CBA2AF1A-C62A-4AEB-8704-E9671C9285E5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/488068","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488082","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lampsecurity.org/drupal-views-xss-vulnerability","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35304","source":"cve@mitre.org"},{"url":"http://drupal.org/node/488068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lampsecurity.org/drupal-views-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2077","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries."},{"lang":"es","value":"Drupal v6.x anteriores a v6.x-2.6, un modulo de Drupal, permite a usuarios autenticados evitar las restricciones de acceso y (1) leer contenido sin publicar de usuarios anónimos cuando una vista esta configurada para mostrar contenido, y (2) leer contenido privado en peticiones generadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"83414EC6-8EB7-4315-8CBD-4A636C2AA221"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"8AB72D39-36A0-45B3-B754-BE0586A70ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"BF66A326-E339-42D3-B930-5F1BBC12EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"F2056B71-0789-4472-B777-E6D0D679ED73"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"9FFE2EA1-46C4-43C2-8C0B-88D8F8459628"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"743C9847-4192-40CD-ADD2-261608E00BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3342C5AC-6693-461D-9170-080AFF29E05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"28B8A701-0DC1-4159-8A5C-4B100D1366A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"7B69E676-A056-4A03-893C-82F9648C6AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"344B872A-6B72-45DA-A0D3-ED04EBF40AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D2B1D17D-B06B-4801-AEBA-98B782AE18E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D11D3B74-4D1D-46A1-8EF3-C9CEA3E47C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F567110E-A23C-42E8-9B76-1E872FCDC147"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"47415DF9-80EB-4ACE-87A2-9B1FA4D3E772"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"9F8DE5A9-38B3-4696-A141-D300FF68291B"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"48806155-F591-49A7-8258-31E8B7E917D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B376B96-3A17-446B-80AC-A6408120D950"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"0B36D36B-9EA4-441C-813C-8D99405B5F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"457E23F8-7961-410D-8E8A-030116889002"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"50F929B4-BBDA-4E83-98BF-A8F3650A7445"},{"vulnerable":true,"criteria":"cpe:2.3:a:angrydonuts:views:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"9809F86C-3887-4922-9203-DB0CAAC03D03"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/488068","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488082","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35304","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/488068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/488082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2078","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Booktree v5.x anteriores a v5.x-7.3 y v6.x anteriores a v6.x-1.1, un modulo de Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del (1)titulo del nodo y (2) cuerpo del nodo en una pagina árbol root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"BFA9D8E8-E20C-4131-90CA-EC49A8FA2FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"1482E7E5-2D58-4238-9686-26236C5FFA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F4FBF6D-56C5-4FD7-9FC6-E7120FB788CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"D4D4AB34-F67D-46E7-B6DB-7CB03C413EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"B726C19F-9653-423A-A411-591AEDC3B440"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"8E0FEEB8-6DA5-47DC-AF67-D68B2B96A655"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-7.0:*:*:*:*:*:*:*","matchCriteriaId":"09DDD2AD-F8C8-4534-B084-FB764C3C8E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-7.1:*:*:*:*:*:*:*","matchCriteriaId":"0DF6F4FC-5376-4849-9C59-23C5DCF8D9F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:5.x-7.2:*:*:*:*:*:*:*","matchCriteriaId":"F34584E7-A0F8-4C52-B3F0-B87C27B2D516"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"7664EE52-AE96-44E1-89B2-9F54C9E4FA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:heine.familiedeelstra:booktree:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"11791885-AF1E-4D31-B300-B2653B51F7D2"}]}]}],"references":[{"url":"http://drupal.org/node/487810","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/487812","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/487828","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35287","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/487810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/487812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/487828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2079","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el interfaz de la pagina administrativa en el gestor Taxonomy v5.x anteriores a v5.x-1.2 y v6.x anteriores a v6.x-1.1, un modulo de Drupal, permite a usuarios autenticados, con privilegios de administrador en Taxonomy  o con la posibilidad de etiquetado libre para añadir términos taxonómicos, inyectar secuencias de comandos web o HTML a través de (1) nombres de vocabulario, (2) sinónimos y (3) nombres de temporada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_manager:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"393C3759-0FF6-4FCF-A6E6-881B3248E187"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_manager:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"3A325723-8470-46D8-93FE-FF5545CBDF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_manager:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA9BEFC2-8CFA-4ACC-A48F-1505B188C3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_manager:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"64E8FFAE-3EAD-4319-A1C4-3946AC3551FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:taxonomy_manager:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"46E7CA3C-FC06-4FF5-AD61-043B57320C77"}]}]}],"references":[{"url":"http://drupal.org/node/487602","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/487620","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/487818","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35286","source":"cve@mitre.org"},{"url":"http://drupal.org/node/487602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/487620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/487818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2080","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action."},{"lang":"es","value":"admin.php en MRCGIGUY The Ticket System v2.0, no restringe adecuadamente el acceso, lo que permite a atacantes remotos (1) obtener información sobre la configuración a través de una acción \"editconfig\" o (2) modificar la contraseña de administrador a través del parámetro \"id\" en una acción \"editop\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrcgiguy:the_ticket_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AF7C1FB-07D9-49C2-B6F3-0A606AE180BA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35350","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51029","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8917","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2081","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en help.php en phpWebThings v1.5.2 y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"module\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"7C13415B-8752-4CDE-B566-73F9F22BBC96"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F2E20D-4AA9-41CE-AF0A-28DCB65C947E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.2:*:*:*:*:*:*:*","matchCriteriaId":"566463D1-B366-408C-B27A-0450C6C3AE6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.2b:*:*:*:*:*:*:*","matchCriteriaId":"1526ABB2-DBD2-4080-8944-61F9ABDA75D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.3:*:*:*:*:*:*:*","matchCriteriaId":"20B1FA8A-8A72-4986-B6F0-F0AED7ACA7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.4:*:*:*:*:*:*:*","matchCriteriaId":"26ACF325-11B6-49C3-B85F-33256E3FDDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E87432E8-E5ED-4746-BBC9-C519F364FBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EBF75D6A-33B7-4B74-8148-3F1AAA8E7DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"604FE388-8339-4EB1-848E-B21F96FE691D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"33F2C338-BBF1-4FAD-8D1C-1B2D4D72644F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"E0D45F83-BD58-4145-A89D-25B81D442DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D302871A-63CF-4B49-A180-CD44E941971C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E207E3F4-FC8F-4931-BF9C-40C2C516B500"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"49D54FDD-2EC5-40C7-ACD7-B4D56B27F7D6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8928","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2082","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T21:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en insidepage.php en Creative Web Solutions Multi-Level CMS v1.21 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"catid\". NOTA: algunos de estos detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:creative_web_solutions:multi-level_cms:1.21:*:*:*:*:*:*:*","matchCriteriaId":"140F9961-AF76-4F2D-800A-A6ADA3E1C0C7"}]}]}],"references":[{"url":"http://osvdb.org/54571","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35018","source":"cve@mitre.org"},{"url":"http://osvdb.org/54571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2083","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T21:00:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via \"Parent and related terms.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la pagina de detalle de datos de un periodo en el administrador Taxonomy v5.x anteriores a v5.x-1.2, un modulo de Drupal, permite a usuarios autenticados, con privilegios de administrador de taxonomías o la capacidad para utilizar los términos de \"etiquetado libre\" y \"añadir taxonomía\", inyectar secuencias de comandos web o HTML a través de \"términos padre y relacionados\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mattias_hutterer:taxonomy_manager:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"68E26226-B9E5-48F0-9A8E-E0C24E6F0906"},{"vulnerable":true,"criteria":"cpe:2.3:a:mattias_hutterer:taxonomy_manager:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"4CD2BF2A-AC98-4F58-87D3-4F8CB7D8A7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mattias_hutterer:taxonomy_manager:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A9C94DBE-CF9C-4D97-9422-EE85A50A19B4"}]}]}],"references":[{"url":"http://drupal.org/node/487620","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/487818","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35286","source":"cve@mitre.org"},{"url":"http://drupal.org/node/487620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/487818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/35391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2084","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges."},{"lang":"es","value":"Simple Linux Utility for Resource Management (SLURM) v1.2 y v1.3 anteriores a v1.3.14 no fija adecuadamente los grupos suplementarios antes de invocar (1) sbcast del demonio slurmd o (2) strigger del demonio slurmctld, lo cual permitiría a usuarios locales de SLURM modificar ficheros y ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.13","matchCriteriaId":"C9AE0C29-C3BC-4DAF-9BF5-8368CD8A2DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB012F15-7F26-4F7B-A3EF-E9095263FB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1365FB71-BDEB-43C7-B24E-AB6BD34E8BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"525C67BB-E419-4708-80A2-A836095ED14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F26CC8EA-E281-4574-BE67-59E2483ADDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D9163DBD-297C-4AFC-A2F7-9E8C1DF4C5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"2F5F515B-3D4B-4102-9DB0-91F32D762683"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D0E40A66-BBED-43EE-A10E-5F760D8BF142"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9244BB47-99C8-44F4-98EF-08AD919A2E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"48096152-AB4E-407A-9BDE-946B7ACA90BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2CB5CC10-E295-4A65-8A58-A9509B72A6EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"AA619348-A9A8-4CCF-BA49-300691CFE6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"AA5AE726-573F-42BF-A3B0-DDDC04983318"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"73158CC3-2D7D-45CA-9CF1-5681E2F2B3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"92E2C20C-65D2-457F-B3C6-9BD3955B2491"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34831","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1776","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34638","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1128","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50126","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50127","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/34638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2085","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB)."},{"lang":"es","value":"El componente Security en IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 y v7.0 anterior a v7.0.0.5  no maneja adecuadamente  la Aserción de Identidad (Identity Assertion) con CSIv2 Security, lo que permite a atacantes remotos evitar las restricciones de acceso establecidas con CSIv2 a través de vectores que involucran la \"Enterprise JavaBeans\" (EJB)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2B009FD6-9352-4329-B67A-8155FB379889"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK83097","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52076","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK83097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2086","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.517","lastModified":"2023-11-07T02:04:04.550","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1900.  Reason: This candidate is a duplicate of CVE-2009-1900.  Notes: All CVE users should reference CVE-2009-1900 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2087","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors."},{"lang":"es","value":"la funcionalidad Web Services en IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 y v7.0 anterior a v7.0.0.5, en ciertas circunstancias e involucrando al archivo ibm-webservicesclient-bind.xmi y a la personalización de la encriptación de la contraseña, usa una ofuscación de contraseña débil, lo que permite a usuarios locales provocar una denegación de servicio (fallo en el despliegue) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2B009FD6-9352-4329-B67A-8155FB379889"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK79275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52078","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK79275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2088","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when SPNEGO Single Sign-on (SSO) and disableSecurityPreInvokeOnFilters are configured, allows remote attackers to bypass authentication via a request for a \"secure URL,\" related to a certain invokefilterscompatibility property."},{"lang":"es","value":"El componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v6.1 anterior a v6.1.0.25 y v7.0 anterior a v7.0.0.5, cuando SPNEGO Single Sign-on (SSO) y disableSecurityPreInvokeOnFilters son configurados, permite a los atacantes remotos evitar la autenticación a través de una petición a una \"URL segura\", relativa a cierta propiedad invokefilterscompatibility."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2B009FD6-9352-4329-B67A-8155FB379889"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24022479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK77465","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52079","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24022479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK77465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2089","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file."},{"lang":"es","value":"El componente Migration en IBM WebSphere Application Server (WAS) v6.1 anteriores a v6.1.0.25 y v7.0 anteriores a v7.0.0.5, cuando cuando la traza está habilitada y una migración de 6.0 a 7.0 ha sucedido, lo que permite a los usuarios remotos autenticados obtener información sensible leyendo un archivo Migration Trace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2B009FD6-9352-4329-B67A-8155FB379889"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK80337","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36156","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52081","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK80337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2090","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en wsadmin en el componente System Management/Repository en IBM WebSphere Application Server (WAS) v7.0 anteriores a v7.0.0.5, permite a los atacantes remotos evitar las restricciones de acceso previstas para Java Management Extensions (JMX) Management Beans (aka MBeans), y causar una denegación de servicios (parada del demonio), a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36153","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52082","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2091","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El componente System Management/Repository en IBM WebSphere Application Server (WAS) v7.0 anteriores a v7.0.0.5 en z/OS utiliza permisos de ficheros débiles para nuevas aplicaciones, lo que permite a los atacantes remotos obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK83308","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36157","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52083","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK83308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2092","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors."},{"lang":"es","value":"IBM WebSphere Application Server (WAS) v7.0 anteriores a v7.0.0.5 no lee apropiadamente el parámetro portletServingEnabled en ibm-portlet-ext.xmi, lo que permite a los atacantes remotos evitar las restricciones de acceso previstas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/34461","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36155","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52375","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2093","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la consola en IBM WebSphere Partner Gateway (WPG) Enterprise v6.0 anteriores a FP8, v6.1 anteriores a FP3, v6.1.1 anteriores a FP2, y v6.2 anteriores FP1 permite a los usuarios remotos autenticados ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"AF9BA887-4EC6-4BC1-87F8-1FB15C36FD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.0.0:fp7:*:*:*:*:*:*","matchCriteriaId":"1DC9F5DB-0CC0-4F2C-8B40-C3F1E2C80D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"69E55335-9BDD-451B-A610-9389F072279D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"63F561F2-344E-4AA7-A58B-34970DF97A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC33F02F-2381-4A6F-B322-B22E416B6887"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"465A6CF3-DAB2-4DD2-8633-96217629E768"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.1.1:fp1:*:*:*:*:*:*","matchCriteriaId":"99A89D4A-5B8E-444E-BCDD-6F84457848AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.2:*:*:*:*:*:*:*","matchCriteriaId":"6FA79605-3256-4E52-89B0-CE16873B4E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_partner_gateway:6.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"49FF0FBF-AA8D-4FCF-A49D-B7B457524DDC"}]}]}],"references":[{"url":"http://secunia.com/advisories/36295","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21382117","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2292","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52393","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21382117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2094","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T18:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM WebSphere Commerce v6.0 Enterprise anteriores a v6.0.0.8, cuando Trace es habilitado, permite a usuarios locales obtener información sensible a través de vectores desconocidos.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.5},"baseSeverity":"LOW","exploitabilityScore":2.7,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C21677D0-CF4E-4958-83A7-EF8C3AF4B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"1FE46C0C-A5D0-4A0D-A936-67F5DB0799BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAF24659-1284-4762-925C-4879B56AC386"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"9DB9943D-6E0E-4044-B758-73442EC791FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"162FF755-CFF5-4AF2-B5D4-AEBA107DD93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:enterprise:*:*:*:*:*","matchCriteriaId":"268E0C2C-E334-45EB-A716-F9A51EF75B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4783F5D2-0709-4E5B-B6B7-DF7823E928CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:enterprise:*:*:*:*:*","matchCriteriaId":"5F496166-6606-4A90-AC87-E18EEEDBE0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8EB6E277-36B8-483E-8F9E-34D350BBB0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:enterprise:*:*:*:*:*","matchCriteriaId":"B4485290-DA10-4FE5-B7E2-F9CAFE801E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"40A7EA48-BCC0-41BD-975D-0C01B6066BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:enterprise:*:*:*:*:*","matchCriteriaId":"4E59F3DB-5005-4CB4-85C4-B8167260E801"}]}]}],"references":[{"url":"http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52398","source":"cve@mitre.org"},{"url":"http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2095","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter.  NOTE: when allow_url_fopen is disabled, directory traversal attacks are possible to include and execute arbitrary local files."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero en template/simpledefault/admin/_masterlayout.php en Mundi Mail v0.8.2, cuando \"register_globals\" está activado, permite a atacantes remotos la ejecución de código PHP de su elección a través de una URL en el parámetro \"top\". NOTA: cuando \"allow_url_fopen\" está desactivados, los ataques de salto de directorio son posibles para incluir y ejecutar de manera local cualquier archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mundi_king:mundi_mail:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0A68F992-68D0-4092-A94F-2E18BD12F648"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8948","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2096","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en house/listing_view.php en phpCollegeExchange v0.1.5c, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"itemr\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*","matchCriteriaId":"DF73C771-F42D-4226-9FE2-2533CD969AB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8962","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2097","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog (aka Smart Catalog) allows remote attackers to execute arbitrary SQL commands via the search_text parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en system/application/controllers/catalog.php en  Zoki Soft Zoki Catalog (también conocido como Smart Catalog), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"search_text\". NOTA: algunos de estos detalles son obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zokisoft:zoki_catalog:*:*:*:*:*:*:*:*","matchCriteriaId":"0D3D59CF-C69D-49EB-8336-E9A9F64D7FDD"}]}]}],"references":[{"url":"http://secunia.com/advisories/35476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504311/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504311/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2098","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  topicler.php en phPortal v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:micheal_glazer:phportal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B6B8A931-BF54-4A38-A1CC-0FFF60A68D1C"}]}]}],"references":[{"url":"http://osvdb.org/55177","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35387","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8966","source":"cve@mitre.org"},{"url":"http://osvdb.org/55177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2099","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el  componente  iJoomla RSS Feeder (com_ijoomla_rss) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\" en una acción \"xml\"  al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ijoomla:com_rssfeeder:*:*:*:*:*:*:*:*","matchCriteriaId":"F393B87D-1A8D-40C2-9B77-1998BB36609A"}]}]}],"references":[{"url":"http://osvdb.org/55113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35454","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35379","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8959","source":"cve@mitre.org"},{"url":"http://osvdb.org/55113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2100","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente JoomlaPraise Projectfork (com_projectfork) v2.0.10 para Joomla!, permite a atacantes remotos leer archivos de su elección a través de secuencias de salto de directorio en el parámetro \"section\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlapraise:com_projectfork:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E07C9FD8-1CA2-4707-9265-B9599E7AD617"}]}]}],"references":[{"url":"http://osvdb.org/55176","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35378","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8946","source":"cve@mitre.org"},{"url":"http://osvdb.org/55176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2101","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en archive.php en TorrentVolve v1.4, cuando \"registers_globals\" está activado, permite a atacantes remotos eliminar archivos de su elección a través de ..(punto punto) en el parámetro \"deleteTorrent\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:castro_xl:torrentvolve:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4860EE61-7ABA-412E-BAA6-9D86F07D9F9E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51088","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8931","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2102","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Jumi (com_jumi) v2.0.3 y posiblemente otras versiones, para Joomla, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"fileid\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:com_jumi:com_jumi:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AF1739E1-7164-4D81-AA0C-ABBF96A6CECA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/55112","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35465","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35384","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8968","source":"cve@mitre.org"},{"url":"http://osvdb.org/55112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2103","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Frontend MP3 Player (fe_mp3player) v0.2.3 y anteriores para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grundell:frontend_mp3_player:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A70D73BB-7A7B-44C2-82F8-50D4C41443BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grundell:frontend_mp3_player:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9DAD0485-A833-4D18-929B-FF4C5B45C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grundell:frontend_mp3_player:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8FF7258B-D6BD-4737-AD08-8E39CEF050D5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"}]}]}],"references":[{"url":"http://osvdb.org/55123","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35484","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/fe_mp3player/0.2.4/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35394","source":"cve@mitre.org"},{"url":"http://osvdb.org/55123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/fe_mp3player/0.2.4/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2104","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos cruzados(XSS) en la extensión Modern Guestbook / Comenting System (ve_guestbook) v2.7.1 y anteriores para TYPO3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"9910B221-2948-4FE7-A989-4599C281A0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"C03D4FCF-04AA-4BD7-A830-BA697C513299"},{"vulnerable":true,"criteria":"cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"098141D5-BA03-471D-9FA7-BF96F6609288"},{"vulnerable":true,"criteria":"cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.0","matchCriteriaId":"3498A23E-E1CD-4ED9-8D78-A29DB70FB8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:udo_von_eynern:modern_guest_book_commenting_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"F9767331-890F-449E-BF86-BE2D87BBE162"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://osvdb.org/55122","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35483","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35397","source":"cve@mitre.org"},{"url":"http://osvdb.org/55122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2105","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en la extensión de la base de datos Reference (t3references) versión 0.1.1 y anteriores para TYPO3 permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kasper_skrhj:references_database:*:*:*:*:*:*:*:*","versionEndIncluding":"01.1","matchCriteriaId":"0B1516D8-7B8E-4BEB-920D-20F72AD8BD33"}]}]}],"references":[{"url":"http://osvdb.org/55120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/t3references/0.1.2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35392","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/55120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/t3references/0.1.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2106","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Virtual Civil Services (civserv) v 4.3.2 y versiones previas para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.2","matchCriteriaId":"4836293B-FBE4-40AB-A64B-81D60709E6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"3F40379A-95CD-4362-9766-C14670182AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"9B69B1CC-0E41-4733-A8CA-51E20562A463"},{"vulnerable":true,"criteria":"cpe:2.3:a:projektseminar_proservice_wwu:virtual_civil_services:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B55F3379-6C4B-4647-923A-ACD57EC05E35"}]}]}],"references":[{"url":"http://osvdb.org/55121","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35479","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/civserv/4.3.3/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-007/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35395","source":"cve@mitre.org"},{"url":"http://osvdb.org/55121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/civserv/4.3.3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-007/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2107","sourceIdentifier":"cve@mitre.org","published":"2009-06-17T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid parameter names that are not properly handled when triggered on a column; (4) bookmark parameter in an edit action; or (5) email parameter in a remember action."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en index.php en Webmedia Explorer (webmex) v5.09 y v5.10, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los manejadores de eventos como \"onmouseover\" en los parámetros  (1) \"search\" o (2) \"tag\"; (3) nombres de parámetros inválidos de su elección que no son manejados adecuadamente cuando se lanzan sobre una columna; (4) parámetro \"bookmark\" en una acción \"edit\" o (5) el parámetro \"email\" en una acción \"remember\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.09:*:*:*:*:*:*:*","matchCriteriaId":"0459DB91-ABD6-4E92-AFEF-D39BDCA23E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmediaexplorer:webmedia_explorer:5.10:*:*:*:*:*:*:*","matchCriteriaId":"3ED2B3FE-0C12-42F9-B344-8C7C1E5A4DCD"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1123-intern0t-webmedia-explorer-cross-site-scripting-vulnerability.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504307/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35368","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://forum.intern0t.net/intern0t-advisories/1123-intern0t-webmedia-explorer-cross-site-scripting-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504307/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2108","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments."},{"lang":"es","value":"git-daemon en git v1.4.4.5 hasta v1.6.3 permite a atacantes remotos provocar una denegación de servicio (bucle infinito y agotamiento de CPU) a través de una una petición que contenga argumentos no reconocidos extra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"EA8EC58A-89AD-4BA3-B057-3DA6B5E0FD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC291EB-F083-4E66-B61B-50723E0E8A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0756E43B-F13B-4EB4-89B3-9A7A6CA6DDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"23E68B79-8E0C-4001-AECD-ED0AF81825B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6FAC3AF5-D66D-4972-B2C7-9D1CD784884A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE75459-E53B-4E3A-B94A-3A7DA916A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0A51E31C-06CD-463F-BF7D-F14979AB492B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D198227B-3B53-4C29-985E-2596C0909A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E6347CFA-DC5A-4C0F-A516-02E6BBEDA3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B4474571-24EB-4D53-8A61-D77E560B0ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8B6544F7-D835-45C5-9645-AFEA9F264DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"43E47006-A44B-4BE1-AD6B-CF869C79A2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"569F2502-3023-44F6-8767-4DA465B3C754"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4CDF10E4-F882-4BD6-AA56-B56CEC28D1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"909E71D3-A5E4-47AF-B9F4-2A05A4129EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"73FFB1CD-1C79-4DD8-BCAB-1FCA8D99C89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4124F148-9281-4465-9E16-67DE47E1F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"22F07209-3FC5-4AA4-B9BF-18F32D7F402F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C43D08FF-7871-481D-A648-015F4DCF68E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"03769CFD-3A5F-4C5E-B548-6B8F7EFFDE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4F2433A7-3333-407D-8147-9AC736049590"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"585B9665-B422-418D-9AEC-65E65D24621B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7DA2677B-1237-4D22-A51E-3A67B6AA9F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6642BE-13B4-40F8-BFD4-AD1E55B1A3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:*","matchCriteriaId":"2EBCE67F-34AC-4635-A2DF-E0C304FAB8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:*","matchCriteriaId":"197F9E88-DE20-44B5-B159-8E7BC3986E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3C668BD7-C4E3-4A12-9987-E565250E2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"92A161E8-6CB8-40FF-9D90-00664185F69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"B20EFCED-EC50-4A9B-970B-E29CDBDAABDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"361F32F0-8009-40D2-BC14-74AE90CDB36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:*","matchCriteriaId":"67535E99-5DD8-4F90-9DB1-5415201E94E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:*","matchCriteriaId":"F3163CEC-C0D5-401E-93C3-6A5316630FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:*","matchCriteriaId":"8DA19E8C-34DE-4721-88E2-B97774E855E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:*","matchCriteriaId":"BA11029F-E4F7-4D4A-817C-A7CC5AD4E872"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:*","matchCriteriaId":"8A42B9B9-7B29-429D-9ABC-736CCC038813"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"63530521-E600-4326-B057-162E6635554B"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0715BCFB-5EAA-4812-BB59-7210CB6670FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A8CEFC6C-0066-4331-A7A8-02047A19206A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BF45A2CE-0E19-477F-9393-B8AAD158D285"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3095075A-5A99-4718-9E5E-56D442A14EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc1:*:*:*:*:*:*","matchCriteriaId":"49D8DA6B-C306-455E-BAF1-0C5C2E1F33B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6881163A-4097-4BAE-A84A-82D819BBF304"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5:rc3:*:*:*:*:*:*","matchCriteriaId":"BF31FA87-A8B8-46A1-8945-CB2613FE3B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"32E6B6B9-BD9A-4DF2-8DDC-B2A55431B3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9C0605BA-481D-4E71-8D57-A99F8CDB7492"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:*","matchCriteriaId":"FF740C26-5EB6-4184-93C3-DAC38F01CE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"668F528C-50BC-4944-9DC3-95D0413D2359"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E3D715F7-34D2-4D1D-B49B-74AF4D7D7C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"6DF925DE-031A-451F-83A6-1B355D364358"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"31BE5F63-902F-4326-B38B-96D692F86B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AECFAEA8-3B87-4BFE-98A3-58F5129D9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D6228681-1150-4B80-AFB0-451BAEB393A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E807BBE3-A2EC-4EA2-8222-7A02D03848D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C7122491-D55D-451B-A2BC-D87D283A504E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"D6C7B6C0-BE57-44E3-AFEE-C4EF2A721ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"05F3F78A-C8A5-4F5C-89FA-418A88A8DBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.6:rc0:*:*:*:*:*:*","matchCriteriaId":"F6DA2D48-4F72-4811-870A-4E2B99B4361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.6:rc2:*:*:*:*:*:*","matchCriteriaId":"278CD0BC-81AC-4EEE-8437-2981F94B40B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.5.6.6:rc3:*:*:*:*:*:*","matchCriteriaId":"B9DAAE30-324D-4D36-AAA9-0DEA6F2A986E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8B8F4980-EC18-4DBA-8950-82F1B81FC008"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12C5DE96-2748-4A9F-A321-D6AD3091C3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B3E7D230-166E-434D-B425-01D6EC159A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"3BDC47F7-47D6-4780-B637-BF646D522ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A600049E-2E7D-4A05-926B-C6A4F26496AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"52406E96-C133-4EE9-BF80-D2327DFEFC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B08816A4-C2D8-40BE-BD46-D9A3A6BBED0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BAEBEDEF-54BD-4974-AE96-ABCF85508379"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"11EE6977-784D-49C9-A1EF-740F5225CF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1237CF62-B0FC-463E-BD89-7CE4EA6BE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4B271C19-57A4-4C55-93F6-D2E8DBB77227"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3969527E-386C-4847-BE40-9248334F0CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"270B17C7-68D3-4EBE-B7FA-228EBF68AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"A1220F4F-68A2-45DC-A713-5E5623F09BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.1:rc4:*:*:*:*:*:*","matchCriteriaId":"DFECB8C5-534D-4795-A6E0-6918CFAC8F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9B2A1CA7-7E39-4B44-9BE7-7CA2189FDE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6CAC62E-587A-420E-BA87-1DD7521DE041"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"DB9EF84C-AFDD-47F7-A4CF-9248F576AE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C103628E-6386-4FD1-9C9F-006C2A66D8C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"62E9E5D3-7409-47E3-8D80-6EEA07E75307"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8438B6E4-82D7-4802-967A-0B57A0FB3C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BEA315FC-51F6-4F3B-B5BE-65EC19C04C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AE4C1753-6B09-48DB-86EF-FED3227775E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"8B7B30E6-0CCC-4CD1-942C-E5D41F457A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3:rc1:*:*:*:*:*:*","matchCriteriaId":"2077E2D4-C924-4B9F-81C3-3415DC3A64B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"6F118777-F3D1-4F3B-8708-E9A1DA26B09F"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3:rc3:*:*:*:*:*:*","matchCriteriaId":"875D5BB6-4AEB-47C7-9E82-532BB917ADFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3:rc4:*:*:*:*:*:*","matchCriteriaId":"1194FF74-89D6-4D5A-A5A9-E13127978FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"24B2004A-F5EB-4510-A60A-AD1C407CCB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:git:git:1.6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2DD783B5-72E2-4FE3-B5A3-0325E60BE2B3"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.comp.version-control.git/120733","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/55034","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35437","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35730","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-05.xml","source":"cve@mitre.org"},{"url":"http://thread.gmane.org/gmane.comp.version-control.git/120724","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:155","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/12/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35338","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022398","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1579","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51083","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01045.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01056.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01126.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://article.gmane.org/gmane.comp.version-control.git/120733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/55034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://thread.gmane.org/gmane.comp.version-control.git/120724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/12/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2109","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) language parameter to charts.php and the (2) fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en FretsWeb v1.2, permite a atacantes remotos leer ficheros de su elección a través de varias secuencias de salto de directorio en (1) parámetro languaje sobre chart.php y (2) parámetro de la cookie fretsweb_languaje sobre vectores no especificados, posiblemente relacionados con admin/common.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fretsweb_project:fretsweb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB5BDF39-E38E-4A3E-A96A-E052DD67E8C3"}]}]}],"references":[{"url":"http://osvdb.org/55166","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/55196","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8979","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/55166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/55196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2110","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the u parameter to (1) full.php, (2) index.php, and (3) contact.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en DB Top Sites v1.0, cuando está desactivada la opción magic_quotes_gpc, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un valor .. (punto punto) en el parámetro u sobre (1)full.php, (2)index.php y (3) contact.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jnmsolutions:db_top_sites:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D3B55958-480D-4898-A617-7282A06F9D1A"}]}]}],"references":[{"url":"http://osvdb.org/55116","source":"cve@mitre.org"},{"url":"http://osvdb.org/55117","source":"cve@mitre.org"},{"url":"http://osvdb.org/55118","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51120","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8952","source":"cve@mitre.org"},{"url":"http://osvdb.org/55116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2111","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en add_reg.php en DB Top Sites v1.0 permite  a atacantes remotos inyectar código PHP de su elección mediante los parámetros (1) url y (2) location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jnmsolutions:db_top_sites:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D3B55958-480D-4898-A617-7282A06F9D1A"}]}]}],"references":[{"url":"http://osvdb.org/55119","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51121","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8951","source":"cve@mitre.org"},{"url":"http://osvdb.org/55119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2112","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/page_bottom.php en phpFK v7.03, c permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro _FORUM[settings_design_style]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frank-karau:phpfk:7.03:*:*:*:*:*:*:*","matchCriteriaId":"7CF21E8A-ACCB-4347-B43C-077A43EDDE6E"}]}]}],"references":[{"url":"http://osvdb.org/55195","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8975","source":"cve@mitre.org"},{"url":"http://osvdb.org/55195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2113","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in FretsWeb 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) name parameter to player.php and the (2) hash parameter to song.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en FretsWeb v1.2, permite a atacantes remotos  ejecutar comandos SQL de su elección a través de los parámetros (1) name sobre player.php y (2) y hash sobre song.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fretsweb_project:fretsweb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB5BDF39-E38E-4A3E-A96A-E052DD67E8C3"}]}]}],"references":[{"url":"http://osvdb.org/55167","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/55168","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=966939","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/8980","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/55167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/55168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=966939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.exploit-db.com/exploits/8980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2114","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en admin.php en SkyBlueCanvas v1.1 r237, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) mgroup, (2) mgr, (3) objtype, (4) id, y (5) dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3911B26-8926-4D53-ABFE-6BC2054C26C4"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504302/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51165","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/55115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504302/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2115","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message."},{"lang":"es","value":"admin.php en SkyBlueCanvas v1.1 r237 permite a administradores remotos autenticados conseguir información sensible a través de un parámetro id no válido, lo que revela el path de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3911B26-8926-4D53-ABFE-6BC2054C26C4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504302/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504302/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2116","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en archive.php en admin.php en SkyBlueCanvas v1.1 r237, permite a administradores remotos autenticados listar el contenido del directorio mediante un .. (punto punto) en el parámetro dir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skybluecanvas:skybluecanvas:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3911B26-8926-4D53-ABFE-6BC2054C26C4"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504302/100/0/threaded","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1120-intern0t-skybluecanvas-1-1-r237-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504302/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2117","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username."},{"lang":"es","value":"uye_paneli.php en phPortal 1.0 permite a atacantes remotos saltar la autenticación y conseguir acceso administrativo, fijando la cookie kulladi a un nombre de usuario válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phportal:phportal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CE4552C-EC2A-40B7-811C-FD7ECD2E8392"}]}]}],"references":[{"url":"http://osvdb.org/55192","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8981","source":"cve@mitre.org"},{"url":"http://osvdb.org/55192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2118","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en IrfanView v4.23, cuando las opciones de resampleo o de ajustar a pantalla permite a atacantes remotos ejecutar código de su elección a través de una imagen TIFF 1 BPP manipulada, lo que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*","matchCriteriaId":"FC85E443-08AE-4222-9807-9C2514713C54"}]}]}],"references":[{"url":"http://osvdb.org/55150","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35359","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.irfanview.com/main_history.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35423","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/55150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.irfanview.com/main_history.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2119","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos cruzados(XSS) en el interface de autenticación de F5 FirePass SSL VPN v5.5 hasta v5.5.2 y 6.0 hasta v6.0.3 , permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de  un campo password manipulado. NOTA: algunos de estos detalles se han obtenido de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:5.5:*:*:*:*:*:*:*","matchCriteriaId":"7C2AE5BB-5D4B-4CA3-BB28-2BE9A4974CE2"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B7ABAF45-EB5E-44C9-AF4D-EDF741BABCE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4976941E-BDAA-4AD2-AB70-7B4A2E134246"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:6.0:*:*:*:*:*:*:*","matchCriteriaId":"01AFA837-B856-482A-8192-5E92FD40EA65"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D7AA0609-9A3B-4C83-8DE6-2589152F8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7093053B-97DB-4B45-9E36-5A52A28CDCE1"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:firepass_ssl_vpn:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8BA897F6-03C3-4182-B288-6F9C1337C10E"}]}]}],"references":[{"url":"http://osvdb.org/55040","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35426","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504232/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35312","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022387","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1570","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51064","source":"cve@mitre.org"},{"url":"https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf","source":"cve@mitre.org"},{"url":"http://osvdb.org/55040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504232/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2120","sourceIdentifier":"cve@mitre.org","published":"2009-06-18T21:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors.  NOTE: vector 1 requires administrative access."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en TekBase All-in-One v3.1, permite a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de los parámetros (1) ids sobre admin.php, (2) y sobre members.php, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tekbase:tekbase_all-in-one:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F7FF4BD3-4A8B-4027-83DD-8C27F786B8AC"}]}]}],"references":[{"url":"http://osvdb.org/55190","source":"cve@mitre.org"},{"url":"http://osvdb.org/55191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35481","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8977","source":"cve@mitre.org"},{"url":"http://osvdb.org/55190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2121","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response."},{"lang":"es","value":"Desbordamiento de búfer en el núcleo del navegador en Google Chrome en versiones anteriores a la v2.0.172.33 permite a los servidores HTTP remotos causar una denegación de servicio (mediante caida de la aplicación) o posiblemente ejecutar código arbitrario a través de una respuesta HTTP modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.172","matchCriteriaId":"CB4CEFCB-98C7-4061-8199-C72EA4120614"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=14508","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35462","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022429","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1656","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51307","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=14508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://googlechromereleases.blogspot.com/2009/06/stable-beta-update-security-fix.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2122","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewimg.php en la extensión (plugin) Paolo Palmonari Photoracer v1.0 para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paolo_palmonari:photoracer_plugin_for_wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"496FD23B-F489-47DE-8607-464C1B4A64A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/35450","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35382","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51152","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8961","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2123","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) inUser (aka Username) and (2) inPass (aka Password) parameters to (a) inc/login.ei, reachable through login.php; and the (3) id parameter to (b) show_bug.php and (c) show_activity.php.  NOTE: it was later reported that vector 3c also affects 1.2.2."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Elvin versión 1.2.0, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio de los parámetros (1) inUser (también se conoce como nombre de usuario) y (2) inPass (también se conoce como contraseña) en (a) archivo inc/login.ei, accesible por medio del archivo login.php; y el parámetro (3) id en los archivos (b) show_bug.php y (c) show_activity.php. NOTA: más tarde se informó que el vector 3c también afecta a la versión 1.2.2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"84469C04-A695-4041-8D07-C0B429B4C8CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35486","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2124","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en page.php en Elvin v1.2.0 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"84469C04-A695-4041-8D07-C0B429B4C8CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35486","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8953","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2125","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs."},{"lang":"es","value":"delete_bug.php en Elvin versión anterior a v1.2.1 no requiere permisos administrativos, permitiendo que usuarios autenticados remotamente saltar las restricciones de acceso previstas y borrar fallos de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"1D6C3C9B-611F-4322-84EF-95B5411944F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"52C7E357-B728-452A-BACC-8102B81500E5"}]}]}],"references":[{"url":"http://bugs.elvinbts.org/show_bug.php?id=50","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55101","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.elvinbts.org/show_bug.php?id=50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2126","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title (aka subject) field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en close_bug.php en Elvin versiones anteriores a v1.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo \"title\" (también conocido como \"subject\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"1D6C3C9B-611F-4322-84EF-95B5411944F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"52C7E357-B728-452A-BACC-8102B81500E5"}]}]}],"references":[{"url":"http://bugs.elvinbts.org/show_bug.php?id=49","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55100","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.elvinbts.org/show_bug.php?id=49","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2127","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en show_activity.php en Elvin 1.2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"84469C04-A695-4041-8D07-C0B429B4C8CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35486","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8953","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2128","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en close_bug.php en Elvin versiones anteriores a v1.2.1 permite a atacantes remotos ejecutar comandos SQL de su elección utilizando el campo \"title\" (también conocido como \"subject\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"1D6C3C9B-611F-4322-84EF-95B5411944F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"52C7E357-B728-452A-BACC-8102B81500E5"}]}]}],"references":[{"url":"http://bugs.elvinbts.org/show_bug.php?id=49","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.elvinbts.org/show_bug.php?id=49","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2129","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en login.php en Elvin v1.2.0 permite a atacantes remotos secuestrar la autenticación de usuarios de su elección mediante una acción \"logout\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"84469C04-A695-4041-8D07-C0B429B4C8CA"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2130","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request."},{"lang":"es","value":"Elvin v1.2.0 permite a atacantes remotos leer el código fuente PHP de (1) login.ei, (2) jump_bug.ei, o (3) create_account.ei en inc/ mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"84469C04-A695-4041-8D07-C0B429B4C8CA"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8953","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2131","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php, and then posting a comment associated with a picture."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en images v1.7.7 y anteriores permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección al utilizar un parámetro \"user-homepage\" manipulado en \"member.php\", y posteriormente hacer comentarios asociados con una imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.7","matchCriteriaId":"2784E829-29B6-49D4-981B-58D5E050023D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"5F1EA256-97EB-4FCF-A31E-DCC1C49AA801"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"1D979480-B42C-4213-B36E-D99DA55EE6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1726F108-46EA-4CCF-A635-85F681E14471"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.6:*:*:*:*:*:*:*","matchCriteriaId":"9DDDCA47-89BD-4262-9567-731F9875D2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"9EDBC8A3-6C85-4915-B658-F7129CF82BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*","matchCriteriaId":"AB41A1A3-69D5-4175-BF6C-285C0C9990E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"9029C35C-D961-419A-A79F-9EFACAD2560A"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CD8FBCEC-1F99-4DF1-A9E5-CFE353D2D359"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"729F3EA5-9289-435E-92BD-1C12E839988A"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"F7B51C8F-0710-4C7A-A08B-FE940CFF12D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E5D3F1-18E8-4E5C-BBCD-55AC38A06028"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"EC0556E8-324C-4B4C-9B4C-75EDAA1F3EB2"}]}]}],"references":[{"url":"http://osvdb.org/55092","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35427","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.4homepages.de/forum/index.php?topic=15186.0","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35342","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1582","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51090","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8936","source":"cve@mitre.org"},{"url":"http://osvdb.org/55092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.4homepages.de/forum/index.php?topic=15186.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2132","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en global.php en 4images versión anterior a v1.7.7, cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro \"l\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.6","matchCriteriaId":"CF94F6C2-538E-4F28-86EA-2B9239854C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"5F1EA256-97EB-4FCF-A31E-DCC1C49AA801"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"1D979480-B42C-4213-B36E-D99DA55EE6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1726F108-46EA-4CCF-A635-85F681E14471"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.6:*:*:*:*:*:*:*","matchCriteriaId":"9DDDCA47-89BD-4262-9567-731F9875D2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"9EDBC8A3-6C85-4915-B658-F7129CF82BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*","matchCriteriaId":"AB41A1A3-69D5-4175-BF6C-285C0C9990E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"9029C35C-D961-419A-A79F-9EFACAD2560A"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CD8FBCEC-1F99-4DF1-A9E5-CFE353D2D359"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"729F3EA5-9289-435E-92BD-1C12E839988A"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"F7B51C8F-0710-4C7A-A08B-FE940CFF12D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E5D3F1-18E8-4E5C-BBCD-55AC38A06028"}]}]}],"references":[{"url":"http://bbs.wolvez.org/topic/56/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35427","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.4homepages.de/forum/index.php?topic=15186.0","source":"cve@mitre.org"},{"url":"http://bbs.wolvez.org/topic/56/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.4homepages.de/forum/index.php?topic=15186.0","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2133","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T18:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) sort parameter to pivot/index.php, (3) the value of a check array parameter in a delete action to pivot/index.php, (4) the element name in a check array parameter in a delete action to pivot/index.php, (5) the edituser parameter in an edituser action to pivot/index.php, (6) the edit parameter in a templates action to pivot/index.php, (7) the blog parameter in a blog_edit1 action to pivot/index.php, (8) the cat parameter in a cat_edit action to pivot/index.php, (9) a certain form field in a doaction=1 request to pivot/index.php, (10) the url field in a my_weblog edit_prefs action to pivot/user.php, or (11) the username (aka name) field in a my_weblog reg_user action to pivot/user.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Pivot v1.40.4 y v1.40.7 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"menu\" o (2) \"sort\" en pivot/index.php, (4) el elemento \"name\" en el parámetro \"check array\" en una acción \"delete\" de pivot/index.php, (5) el parámetro \"edituser\" en la acción \"edituser\" en pivot/index.php, (6) el parámetro \"edit\" en una acción \"templates\" en pivot/index.php, (7) el parámetro \"blog\" en una acción \"blog_edit1\" en pivot/index.php, (8) el parámetro \"cat\" parameter en una acción \"cat_edit\" en pivot/index.php, (9) cierto campo de fromulario en una petición \"doaction=1\" en pivot/index.php, (10) el campo \"url\" en una acción \"my_weblog edit_prefs\" de pivot/user.php, o (11) el campo \"username\" (también conocido como name) en una acción \"my_weblog reg_user\" en pivot/user.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivot:pivot:1.40.4:*:*:*:*:*:*:*","matchCriteriaId":"8E253FAF-6007-4054-B5C9-2027AF79CC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivot:pivot:1.40.7:*:*:*:*:*:*:*","matchCriteriaId":"8FD12249-43AF-4456-A6CF-040AC68272B5"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55085","source":"cve@mitre.org"},{"url":"http://osvdb.org/55086","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504300/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51098","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51099","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8941","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/55085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504300/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2134","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message."},{"lang":"es","value":"pivot/tb.php en Pivot v1.40.4 y v1.40.7 permite a atacantes remotos obtener información sensible mediante un parámetro \"url\" inválido, revelando la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pivot:pivot:1.40.4:*:*:*:*:*:*:*","matchCriteriaId":"8E253FAF-6007-4054-B5C9-2027AF79CC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:pivot:pivot:1.40.7:*:*:*:*:*:*:*","matchCriteriaId":"8FD12249-43AF-4456-A6CF-040AC68272B5"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504300/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8941","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1119-intern0t-pivot-1-40-4-7-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504300/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2135","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local users to cause a denial of service (panic) via unspecified vectors related to a race between the port_dissociate and close functions."},{"lang":"es","value":"Múltiples condiciones de carrera en el Solaris Event Port API en Sun Solaris v10 y OpenSolaris versiones anteriores a snv_107 permite a usuarios locales provocar una denegación de servicio (panic) mediante vectore no especificados relacionados con una carrera entre las funciones \"port_dissociate\" y \"close\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_106","matchCriteriaId":"83CC1166-056F-444B-B497-DC8BA37B7768"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_106","matchCriteriaId":"F318C593-6E6C-4014-855D-13D6E5C2496F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://osvdb.org/55231","source":"cve@mitre.org"},{"url":"http://osvdb.org/55232","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35279","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35437","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022422","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1634","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51284","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5906","source":"cve@mitre.org"},{"url":"http://osvdb.org/55231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2136","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1\r\n\r\n\"Note 2: A system is only vulnerable to this issue if it is using a GigaSwift Ethernet Adapter (CE) interface (ce(7D)) which has been configured to accept jumbo frames, and hardware checksumming is enabled.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames."},{"lang":"es","value":"Vulnerabilidad no especificada en la pila de red TCP/IP en Sun Solaris v10, y en OpenSolaris snv_01 hasta snv_82 y snv_111 hasta snv_117, cuando se utiliza un interfaz Cassini GigaSwift Ethernet Adapter (también conocido como CE), permite a atacantes remotos provocar una denegación de servicio (panic) mediante vectores relacionados con tramas grandes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://osvdb.org/55233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2555","source":"cve@mitre.org"},{"url":"http://osvdb.org/55233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257008-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2137","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value."},{"lang":"es","value":"Fuga de memoria en el controlador del dispositivo proveedor criptográfico Ultra-SPARC T2 (también conocido como n2cp) en Sun Solaris v10, y OpenSolaris snv_54 hasta snv_112, permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de memoria) mediante vectores no especificados relacionados con un valor grande en \"keylen\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://osvdb.org/55234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35403","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258828-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258828-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2138","sourceIdentifier":"cve@mitre.org","published":"2009-06-19T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the returnto parameter to login.php or (2) the returnto parameter in a delete action to news.php.  NOTE: this can be leveraged for cross-site scripting (XSS) by redirecting to a data: URI."},{"lang":"es","value":"Múltiples vulnerabilidades de redirección abierta en TBDev.NET v01-01-08 permite a atacantes remotos redirigir a los usuarios a sitios web de su elección y dirigir ataques de phishing mediante (1) el parámetro \"returnto\" de loging.php o (2) el parámetro \"returnto\" en la acción de borrar de news.php. NOTA: esto puede ser aprovechado por secuencias de comandos en sitios cruzados (XSS) redirigiendo a una data:URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tbdev:tbdev.net:*:*:*:*:*:*:*:*","matchCriteriaId":"87B9DD35-9B9F-4197-A29C-A4F203303F7F"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8942","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.exploit-db.com/exploits/8942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2139","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238."},{"lang":"es","value":"Hay un desbordamiento de búfer en la región heap de la memoria en svtools/source/filter.vcl/wmf/enhwmf.cxx en Go-oo versiones 2.xy 3.x anterior a 3.0.1, anteriormente ooo-build y relacionado con OpenOffice.org (OOo), permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo EMF creado, un problema similar al CVE-2008-2238."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of openoffice.org and openoffice.org2 packages as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D4F46C7F-E645-4F87-B897-431039A17BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2693A016-B0D3-4B14-9EAF-D79623931CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BB2CB19D-E988-4757-A06C-C10FA529822B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A76AAD8-2ACB-44C4-895A-FBA85058FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71982BDE-67C3-4BEF-B878-CD5701F48983"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"229AB3A5-5ED7-4B43-9116-E432BC139481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"ECD5BBAD-8555-4C89-9168-4DB54636D13A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2EA0695-7A9E-44C4-AF0C-070F4B974989"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E4E3D4EA-25F3-4EB9-A1E4-AD10315B6CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A78642E4-BBF6-4593-9666-42ED2145107E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3BA9E3C2-AF95-48D4-9329-7D0C424DCC1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4F711CC8-3DD6-479B-AC6A-1AB3D90DE1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"64366513-9A88-4D89-BB29-5B91781AA51C"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125258116800739&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125265261125765&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125363445702917&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1880","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36291","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125258116800739&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125265261125765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125363445702917&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2140","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238."},{"lang":"es","value":"Múltiples desbordamientos de búfer de memoria dinámica en cppcanvas/source/mtfrenderer/emfplus.cxx de Go-oo v2.x y v3.x en versiones anteriores a v3.0.1, previamente llamado ooo-build y relacionado con OpenOffice.org (OOo), permiten a atacantes remotos ejecutar código de su elección a través de un fichero EMF+ modificado. Una vulnerabilidad similar a la CVE-2008-2238."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:go-oo:go-oo:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6E878677-3E1E-4986-884F-20F3D89F87AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:go-oo:go-oo:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6C3FD1AF-3397-4D17-877D-B4053112F874"},{"vulnerable":true,"criteria":"cpe:2.3:a:go-oo:go-oo:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7C9505A5-CC6A-44CC-AC59-FF9B767153B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:go-oo:go-oo:3.0:*:*:*:*:*:*:*","matchCriteriaId":"274B998D-61B2-41FC-9D88-74C2D4EA4401"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125258116800739&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125265261125765&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125363445702917&w=2","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/ooo-build/ooo-build/commit/?id=49b4e38571912a7d28c4044e5b2bd57e51c77d55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125258116800739&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125265261125765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125363445702917&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2141","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web script or HTML via (1) the returnto parameter to makepoll.php, (2) the returnto parameter in a delete action to polls.php, or the (3) Info or (4) Avatar field to my.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TBDev.NET 01-01-08 permiten a usuarios remotos inyectar codigo web script o código HTML de su elección a través de (1) el parámetro returnto de makepoll.php, (2) el parámetro returnto de una acción de borrado de polls.php y (3) el campo Info o (4) Avatar de my.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tbdev:tbdev.net:*:*:*:*:*:*:*:*","matchCriteriaId":"87B9DD35-9B9F-4197-A29C-A4F203303F7F"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35378","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8942","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1121-intern0t-tbdev-01-01-2008-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2142","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) senha parameters."},{"lang":"es","value":"Múltiples vulnerabilidad de inyección SQL en admin/index.asp en Zip Store Chat v4.0 y v5.0 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) \"login\" y (2) \"senha\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zipstore:zip_store_chat:4.0:*:*:*:*:*:*:*","matchCriteriaId":"09B639DB-731C-4FE8-A967-4691C76FBD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:zipstore:zip_store_chat:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8B418B-26CF-4D65-A61B-3065B79C8E65"}]}]}],"references":[{"url":"http://secunia.com/advisories/35417","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8935","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2143","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de fichero remoto PHP en firestats-wordpress.ph del plugin FireStats de WordPress en sus versiones anteriores a 1.6.2-stable. Permite a usuarios remotos ejecutar código PHP de su elección a través de una URL en el parámetro fs_javscript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:*:stable:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"3864C442-3C86-4849-B578-82BF3B0EAF25"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"CDE6D957-B6BC-48BB-8271-A8BE8CE7A16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"11F9730D-2D80-4980-BCDA-7D9C8A60C4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"C8B30AC1-BED9-4AF2-8577-EE0ACCF6A381"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.3-beta:*:*:*:*:*:*:*","matchCriteriaId":"CC277E53-0EA6-4724-B37B-8CD5AA906198"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.4-beta:*:*:*:*:*:*:*","matchCriteriaId":"D6E2D9C9-7BFB-45F0-8392-32610DB22EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.5-beta:*:*:*:*:*:*:*","matchCriteriaId":"C7666EAE-155A-46CA-B680-C11A625CA554"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.6-beta:*:*:*:*:*:*:*","matchCriteriaId":"4FE46205-1069-4EE2-9403-4051692C7EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.7-beta:*:*:*:*:*:*:*","matchCriteriaId":"A59D6986-EF12-4D72-A4FF-12E56EE4D178"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.8-beta:*:*:*:*:*:*:*","matchCriteriaId":"1228D9C7-2113-46B0-A552-DF5C19B2E92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"5CA097B0-1C72-405F-8A0B-741410AE2ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.0:*:*:*:*:*:*:*","matchCriteriaId":"563247B6-73E5-4244-8241-3F23C796A85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F008C5BC-640F-4DB6-B348-453D9AE169C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"EAB57CB7-DD1C-4602-AF04-4B33A026EE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.0.2:rc3:*:*:*:*:*:*","matchCriteriaId":"73F97B76-4A8D-46AA-9C8C-8F66209A8ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.0.2:stable:*:*:*:*:*:*","matchCriteriaId":"31604ECC-AAB0-4703-859E-2C751EAFBD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"B7E00CBE-AF27-4AA1-85D8-1B43175A8E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"6928328B-B3D2-49CA-B316-9F4C8244E92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"0AC31A7A-F7B6-42BE-92EB-BC80C6E6BBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.3:rc4:*:*:*:*:*:*","matchCriteriaId":"79ED5467-41E3-47C3-861E-C3A4EAB68724"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.4:rc5:*:*:*:*:*:*","matchCriteriaId":"63B2FD18-E414-4C73-8FD4-530CBA220750"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.5:stable:*:*:*:*:*:*","matchCriteriaId":"8291513A-E222-4C6D-AA9D-C0FE81A1DBE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.6:stable:*:*:*:*:*:*","matchCriteriaId":"6A7CD8AA-DE2D-4738-8F46-A860319AB99C"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.7:stable:*:*:*:*:*:*","matchCriteriaId":"B0F809B6-D0D6-468D-9F5E-B70CA40D25DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.1.8:stable:*:*:*:*:*:*","matchCriteriaId":"A28BBF25-6063-4D97-8108-6EC7099C33ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.2.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"F20A5587-4C56-4F8F-A7D5-850F1CE893BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D64BC51F-DE97-4712-B80B-97D72B73BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.2.2:rc2:*:*:*:*:*:*","matchCriteriaId":"5C3DEF83-6DAA-4E84-9022-B52A9CD84352"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"32C2D594-ADE2-494B-B60F-13BF1139E59B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.2.4:stable:*:*:*:*:*:*","matchCriteriaId":"76BC2452-4C98-4EA0-BE3C-2146C1BBA368"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"1B0ED678-74B6-4FCA-A841-96408EEA9005"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"54302F44-00C0-4A28-A350-1F8FB05D9699"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"C7BAE293-DA65-45DC-81E5-7C7D44480517"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.3-beta:*:*:*:*:*:*:*","matchCriteriaId":"F93BABAE-B7A7-4B7F-8F3F-24AF206D26F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.4:rc1:*:*:*:*:*:*","matchCriteriaId":"67AF857D-A116-4C05-99DA-350C017EB665"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.5:rc2:*:*:*:*:*:*","matchCriteriaId":"FDFF47A8-6F99-4F2C-AFC4-5ACF69C451DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.3.6:stabe:*:*:*:*:*:*","matchCriteriaId":"869E6E88-E159-446D-BEB3-585A88674B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4A40ED88-02AF-45F0-BB42-826789A16C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.4.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"BC8E571E-16BA-476D-92B7-42FEC94CE925"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.4.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"AC9739F0-6748-4A86-9A71-94262F205BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.4.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"D97A6524-F671-47C1-A96A-5123158EE356"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"76DF36C4-5A50-4B85-BFA4-C1571036BD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.4.4:stable:*:*:*:*:*:*","matchCriteriaId":"BF98BC94-B207-41E9-9BA2-F2F73C8A4008"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5:*:*:*:*:*:*:*","matchCriteriaId":"88A96892-379C-4583-B0F4-5457E82D9D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"F7F94179-58C7-462E-882D-B94435CD907A"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"7BB9F970-7307-4539-A1A0-2DD14D333A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"D8CA6FF0-CD5B-435C-ADD3-4C28293DE70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.3:rc1:*:*:*:*:*:*","matchCriteriaId":"D3E66F67-951D-4104-AC1D-E6106C4197F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"7B14DE75-DCBF-4D29-AC8C-64B005A0BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.5:rc3:*:*:*:*:*:*","matchCriteriaId":"A881746E-715B-4186-9D25-33F8E25B8344"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.7:rc1:*:*:*:*:*:*","matchCriteriaId":"4B8F8A5D-A836-40B3-9069-7CB249C797BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.8:rc2:*:*:*:*:*:*","matchCriteriaId":"B364FC45-77AC-4C0B-AA37-A97610F05FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.9:rc3:*:*:*:*:*:*","matchCriteriaId":"D43B703A-73B9-40D0-93AA-22C1E04C8098"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.10:rc4:*:*:*:*:*:*","matchCriteriaId":"CFDDA5E1-AE01-4A24-A8EA-1EC7EAA71C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.11:stable:*:*:*:*:*:*","matchCriteriaId":"1269D6F0-7782-4B70-8A72-AC864A629257"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.5.12:stable:*:*:*:*:*:*","matchCriteriaId":"B18F9AD0-6FD6-45B7-A686-C777F6EF46EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6:*:*:*:*:*:*:*","matchCriteriaId":"EE568395-643C-4261-BCC2-CDDFCF44039E"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8F99809A-95DF-4066-9589-83885CBF4661"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0648CC68-2E6C-4BF9-A30B-9B5BEF72D705"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0EE87737-44E2-4477-95E6-2199CCFC06DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1A0B9641-0674-4E23-8436-30C6B7C4241B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"56A858FF-4F5D-409C-8DC8-65B1680AF220"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:stable:*:*:*:*:*:*","matchCriteriaId":"09AD7D16-6A82-4AAE-B8F9-D74FACF5CF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"34B435D3-AFAB-4A33-B9EC-9C647A615712"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"D85F8E8A-F19C-48FC-BFD3-B8DE60B2D1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EECD5EA0-58F8-4A8C-8C55-C8504AFB1F45"}]}]}],"references":[{"url":"http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8945","source":"cve@mitre.org"},{"url":"http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2144","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el plugin FireStats en sus versiones anteriores a 1.6.2-stable de WordPress permite a usuarios remotos ejecutar comandos SQL de su elección a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:*:stable:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"E834AA0F-78A7-4C21-AF11-DA09482B4614"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"ED13B729-A9FF-4045-ACD2-4B2F254173AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"6CEA2DDD-745A-4559-AB55-237604BC862D"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"CD2B1DE5-0AC5-43A2-AAB8-FFFA0235E983"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.3-beta:*:*:*:*:*:*:*","matchCriteriaId":"85000821-FFEB-4172-BD92-F6C3A9F7E7DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.4-beta:*:*:*:*:*:*:*","matchCriteriaId":"58531C75-B209-4456-B61E-C212879F6DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.5-beta:*:*:*:*:*:*:*","matchCriteriaId":"1FC78A4E-CDE7-465B-AB24-3A4F1D47CE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.6-beta:*:*:*:*:*:*:*","matchCriteriaId":"B0942444-A2A6-45EE-93D2-E1A36CBA5FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.7-beta:*:*:*:*:*:*:*","matchCriteriaId":"9668A006-8EAC-480A-AEA1-9DB5EB3BDD59"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.8-beta:*:*:*:*:*:*:*","matchCriteriaId":"B3D1C55D-77F1-428B-900E-FC9A707B8A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"3CCD33F6-492C-4A63-A67F-E775564EEA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.0:*:*:*:*:*:*:*","matchCriteriaId":"78180E71-45AE-4DCC-BBEC-A102E392BB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"42F502F3-12EC-4CD3-ADEA-B77E7275944E"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"8AA33956-2F76-49ED-82A4-C5B50538C5CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.0.2:rc3:*:*:*:*:*:*","matchCriteriaId":"CCE1CB60-B9D0-4EDE-BEF2-FCF3015047ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.0.2:stable:*:*:*:*:*:*","matchCriteriaId":"43CBFABF-1751-44DA-814B-E9979C85FE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"54B0F88F-2108-4A66-B95D-E633BC4495F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"4D2AC337-B91E-4F76-9C26-4113651E6C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"12E0E879-2551-4EB8-9CB5-5DC679E58095"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.3:rc4:*:*:*:*:*:*","matchCriteriaId":"2932101C-AD8A-45DC-9834-22132B0E9E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.4:rc5:*:*:*:*:*:*","matchCriteriaId":"CC2D01A0-1A37-462C-AA10-31E0AC3D09E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.5:stable:*:*:*:*:*:*","matchCriteriaId":"CD952288-BA3B-43C7-9D0F-0A1C188334F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.6:stable:*:*:*:*:*:*","matchCriteriaId":"F9CF38E1-CDB6-4A82-AC14-4FCAD9C978BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.7:stable:*:*:*:*:*:*","matchCriteriaId":"C27D5D73-5703-4DD2-BA3F-801A05E31F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.1.8:stable:*:*:*:*:*:*","matchCriteriaId":"566A5E2D-FF35-4354-A054-9D0028B75BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.2.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"3FAEAFE0-4768-404D-ACFF-344C40777503"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D163C9BE-33A0-48CE-AB37-D64454F1AFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.2.2:rc2:*:*:*:*:*:*","matchCriteriaId":"3448D772-6C68-4D0D-AED4-888D99B231DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"36613FE7-A554-4056-B714-471013A35C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.2.4:stable:*:*:*:*:*:*","matchCriteriaId":"8DE9ED08-9006-4961-971B-06C3CEA49458"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"3A3AB32B-A9DD-463C-98FA-AA017E43C0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"87180A73-A925-4D90-896A-B25176C37B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"8795EAF1-18C1-482B-8656-180162DAD828"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.3-beta:*:*:*:*:*:*:*","matchCriteriaId":"5C84E75B-40D3-4A69-8E20-ADE1DDEAE66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.4:rc1:*:*:*:*:*:*","matchCriteriaId":"26BA547B-145F-4CEA-909D-23A850D0FA7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.5:rc2:*:*:*:*:*:*","matchCriteriaId":"BABAF387-0758-4F21-BD63-F2AA5A66069A"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.3.6:stable:*:*:*:*:*:*","matchCriteriaId":"932A8BE4-1911-4E10-8E13-DF19C70E388C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B40F57A1-B0DB-4E91-8A8C-AE7BF6FBA9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.4.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"5B339B69-E720-408A-9581-29A89914E1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.4.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"9B450CC8-96D1-42A4-970F-522180063491"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.4.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"3E8DE124-1344-497C-A88C-6BF3F3511B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"7FB55923-22D5-42AA-A1A8-A355E4D74557"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.4.4:stable:*:*:*:*:*:*","matchCriteriaId":"D8020B0B-4630-4AC4-A550-32C3DEBFDE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5:*:*:*:*:*:*:*","matchCriteriaId":"DF4BC758-5BA9-4EA4-AD2B-36BB980458A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"F44EA1CF-2326-4EBF-8D6C-6FD8E6A5D93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.1-beta:*:*:*:*:*:*:*","matchCriteriaId":"CDFD7E8E-10AE-4C55-8AF6-058A5DC89D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.2-beta:*:*:*:*:*:*:*","matchCriteriaId":"5E247C0B-030B-4EDB-A0E8-1E21D1379CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.3:rc1:*:*:*:*:*:*","matchCriteriaId":"2A8AD03D-B664-4B9F-8F55-BD55B8CFEB3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"0B6D5C49-0F49-4987-82AB-0234C08D421F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.5:rc3:*:*:*:*:*:*","matchCriteriaId":"B485D62A-91F9-4B60-B43F-625C23F28809"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.6-beta:*:*:*:*:*:*:*","matchCriteriaId":"2F0B95AE-1A78-49BF-B0F7-AC2083CE6C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.7:rc1:*:*:*:*:*:*","matchCriteriaId":"8D39C430-25BF-498B-85C2-54028D591B49"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.8:rc2:*:*:*:*:*:*","matchCriteriaId":"22CA6661-3DD2-4474-9B83-7F04E4A379D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.9:rc3:*:*:*:*:*:*","matchCriteriaId":"FCB32DF8-ED42-40EE-AF6F-37B264CB1440"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.10:rc4:*:*:*:*:*:*","matchCriteriaId":"10D7FF58-8139-4E3E-B59D-0F2909B5FE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.5.12:stable:*:*:*:*:*:*","matchCriteriaId":"7D31D76B-5505-4421-B7F4-854523326507"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.6:*:*:*:*:*:*:*","matchCriteriaId":"4E108764-791B-4ADD-9F57-46BA575C70F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.6.0:stable:*:*:*:*:*:*","matchCriteriaId":"8C65DADE-051C-4B67-8CC1-B1836553329C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.6.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"7781843F-C9AF-4925-8456-36A9FA0AF675"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:1.6.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"CDD9BC1A-82FE-43A5-AC60-48DD0617DACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:firestats:11.5.11:stable:*:*:*:*:*:*","matchCriteriaId":"4C365F10-CD01-4D70-9655-756FFEBBDD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0648CC68-2E6C-4BF9-A30B-9B5BEF72D705"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0EE87737-44E2-4477-95E6-2199CCFC06DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1A0B9641-0674-4E23-8436-30C6B7C4241B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firestats:firestats:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"56A858FF-4F5D-409C-8DC8-65B1680AF220"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2145","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the (a) NodeID and (b) action parameters to the default URI, and the (c) NodeID parameter to the default URI for the admin section; and allow remote authenticated users to inject arbitrary web script or HTML via the (d) Title (aka page name) and (e) Url fields in a (1) new or (2) modified page."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en transLucid v1.75 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetros (a) nodeid y (b) action a la URI por defecto, y el parámetro (c) nodeid a la URI por defecto de la sección de administración, y permiten a los usuarios remotos autenticados inyectar HTML o Scripts Web arbitrarios a través de los campos (d) Title (alias nombre de página) y (e) Url en una página (1) nueva o (2) modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pantha:translucid:1.75:*:*:*:*:*:*:*","matchCriteriaId":"9D32551E-C76C-4844-B2A9-E367198E5877"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1122-intern0t-translucid-1-75-multiple-vulnerabilities.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8943","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1122-intern0t-translucid-1-75-multiple-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2146","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct request to a modified filename under cache/modules/Emails/, as demonstrated using .php as the entire original name."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en la caracteristica Compose Email del módulo Emails in Sugar Community Edition (también conocido como SugarCRM) versión anterior a 5.2f permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable, posteriormente accediendo al fichero mediante una petición directa a un fichero modificado del directorio cache/modules/Emails/, como se ha demostrado al usar .php como el nombre completo original"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:*:*:sugar_community_edition:*:*:*:*:*","versionEndIncluding":"5.2e","matchCriteriaId":"C30BBF2D-8BF5-4DF5-8A8A-8F066DE61FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"6FEB4B61-0F95-45CA-AB7A-BA07FF2FCA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.0.0h:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"B23F68DA-DFB0-42E1-959A-F7A68AA83BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.0.0k:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"0C7E5228-8F94-42EA-B0E0-A52E0F05A933"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.1.0:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"6E29C3D7-E58A-4F9D-9C2D-9215EBF9F3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.1.0-beta:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"FF69D1EA-2B23-4A9A-A535-A4C59C7DBBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.1c:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"DC04A89E-5379-41B3-BF84-87A2AEB62ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"F0114CAC-A8F4-489C-818E-DB4E068DAB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"25E6CA5B-18F8-4C81-A436-6A7FA0E8B45D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35361","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sugarforge.org/frs/download.php/5598/Sugar_CommunityEdition_ReleaseNotes_5.2f.pdf","source":"cve@mitre.org"},{"url":"http://www.ush.it/team/ush/hack-sugarcrm_520e/adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sugarforge.org/frs/download.php/5598/Sugar_CommunityEdition_ReleaseNotes_5.2f.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ush.it/team/ush/hack-sugarcrm_520e/adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2147","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en fdown.php en phpWebThings v1.5.2 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"7C13415B-8752-4CDE-B566-73F9F22BBC96"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F2E20D-4AA9-41CE-AF0A-28DCB65C947E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.2:*:*:*:*:*:*:*","matchCriteriaId":"566463D1-B366-408C-B27A-0450C6C3AE6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.2b:*:*:*:*:*:*:*","matchCriteriaId":"1526ABB2-DBD2-4080-8944-61F9ABDA75D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.3:*:*:*:*:*:*:*","matchCriteriaId":"20B1FA8A-8A72-4986-B6F0-F0AED7ACA7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.4:*:*:*:*:*:*:*","matchCriteriaId":"26ACF325-11B6-49C3-B85F-33256E3FDDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E87432E8-E5ED-4746-BBC9-C519F364FBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EBF75D6A-33B7-4B74-8148-3F1AAA8E7DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"604FE388-8339-4EB1-848E-B21F96FE691D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"33F2C338-BBF1-4FAD-8D1C-1B2D4D72644F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"E0D45F83-BD58-4145-A89D-25B81D442DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D302871A-63CF-4B49-A180-CD44E941971C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"921E79A6-ABC9-4804-B016-7049F13C905C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E207E3F4-FC8F-4931-BF9C-40C2C516B500"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebthings:phpwebthings:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"49D54FDD-2EC5-40C7-ACD7-B4D56B27F7D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/35396","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35336","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51094","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2148","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news/index.php en Campus Virtual-LMS permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:campusvirtualcomputrade:campus_virtual-lms:*:*:*:*:*:*:*:*","matchCriteriaId":"C0DED872-4A0E-4C43-9EEE-5ECA33220B6F"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8937","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2149","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the (1) courseid parameter to enrolments/step1.php, or the (2) search or (3) siteid parameter to files/shared_list.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Campus-Virtual-LMS permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetro (1) courseid en enrolments/step1.php, o  los parámetros (2) 'search' o (3) 'siteID' a files/shared_list.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:campusvirtualcomputrade:campus_virtual-lms:*:*:*:*:*:*:*:*","matchCriteriaId":"C0DED872-4A0E-4C43-9EEE-5ECA33220B6F"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8937","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/8937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2150","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a (2) ADD or (3) DELETE action to enrolments/step2.php."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en Campus Virtual-LMS. Permiten a usuarios remotos (1) secuestrar la autenticación de usuarios aleatorios para peticiones que finalizan una sesión a través de login/logout.php, y secuestrar la sesión de ciertos usuarios a través de las acciones (2) ADD o (3) DELETE de enrolments/step2.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:campusvirtualcomputrade:campus_virtual-lms:*:*:*:*:*:*:*:*","matchCriteriaId":"C0DED872-4A0E-4C43-9EEE-5ECA33220B6F"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8937","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2151","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the newlang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en AdaptWeb v0.9.2 permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en el parámetro 'newlang'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adaptweb:adaptweb:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"0EF503BF-330F-4ED8-9BDE-8AE33527AE47"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8954","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2152","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a TopicosCadastro1 action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en a_index.php en AdaptWeb v0.9.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"CodigoDisciplina\" en una acción TopicosCadastro1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isabela_gasparini:adaptweb:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"5836AD93-D590-47FA-9969-9CA56F209D25"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8954","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2153","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en Impleo Music Collection v2.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios mediante el parámetro 'sort'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sappy.dk:impleo_music_collection:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BBCE29E2-D9DA-4E26-B571-20FF1BF965D8"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8947","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2154","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T14:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/login.php en Impleo Music Collection v2.0,cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sappy.dk:impleo_music_collection:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BBCE29E2-D9DA-4E26-B571-20FF1BF965D8"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8947","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2155","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en report/ReportViewAction.do en WebNMS Free Edition v5 permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro \"type\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:webnms:5:-:free:*:*:*:*:*","matchCriteriaId":"BB855BB7-FD81-40C9-95B9-48C4114D12BA"}]}]}],"references":[{"url":"http://osvdb.org/55188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51250","source":"cve@mitre.org"},{"url":"http://osvdb.org/55188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2156","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Title field to requests.php, related to viewrequests.php; and (2) the Torrent Name field to torrents-upload.php, related to the logging of torrent uploads; and allow remote attackers to inject arbitrary web script or HTML via (3) the ttversion parameter to themes/default/footer.php, the (4) SITENAME and (5) CURUSER[username] parameters to themes/default/header.php, (6) the todayactive parameter to visitorstoday.php, (7) the activepeople parameter to visitorsnow.php, (8) the faq_categ[999][title] parameter to faq.php, and (9) the keepget parameter to torrents-details.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TorrentTrader Classic v1.09 permiten a usuarios remotos inyectar codigo web script o código HTML a través de (1) el campo Title de requests.php (relacionado con viewrequests.php), (2) el campo \"Torrent Name\" (nombre del torrent) de torrents-upload.php (relacionado con el registro de las subidas de torrents), (3) el parámetro ttversion de themes/default/footer.php, (4) los parámetros SITENAME y (5) CURUSER[username] de themes/default/header.php, (6) el parámetro todayactive de visitorstoday.php, (7) el parámetro activepeople de visitorsnow.php, (8) el parámetro faq_categ[999][title] de faq.php, y el parámetro (9) keepget de torrents-details.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*","matchCriteriaId":"9B591D51-69F4-4A00-85DD-CF5DCD197DCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35369","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51144","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51145","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2157","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via (1) the origmsg parameter to account-inbox.php; the categ parameter to (2) delreq.php and (3) admin-delreq.php; (4) the choice parameter to index.php; (5) the id parameter to modrules.php in an edited (aka edit) action; the (6) user, (7) torrent, (8) forumid, and (9) forumpost parameters to report.php; (10) the delmp parameter to take-deletepm.php; (11) the delreport parameter to takedelreport.php; (12) the delreq parameter to takedelreq.php; (13) the clases parameter to takestaffmess.php; and (14) the warndisable parameter to takewarndisable.php; and allow remote attackers to execute arbitrary SQL commands via (15) the wherecatin parameter to browse.php, (16) the limit parameter to today.php, and (17) the where parameter to torrents-details.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en TorrentTrader Classic v1.09 permiten a los usuarios remotos autenticados ejecutar comandos SQL a través de los parámetros (1) origmsg en account-inbox.php; el parámetro Categ en (2) delreq.php y (3) admin-delreq.php , (4) el parámetro choice en  index.php; (5), el parámetro id en modrules.php en una accion de edicción (es decir, al hacer un edit), los parámetros (6) user (7), torrent, (8) forumid, y (9) forumpost para report.php; (10), el parámetro delpm en take-deletepm.php; (11) el parámetro delreport en takedelreport.php; (12) el parámetro delreq a takedelreq.php; (13), el parámetro clases en takestaffmess.php, y (14) el parámetro warndisable a takewarndisable.php. Mientras que otras permiten a atacantes remotos ejecutar comandos SQL a través del parámetro (15) wherecatin en browse.php, (16) el parámetro limit en today.php, y (17) el parámetro where en torrent-details.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*","matchCriteriaId":"9B591D51-69F4-4A00-85DD-CF5DCD197DCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35369","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51143","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51178","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51179","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51180","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51181","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2158","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack."},{"lang":"es","value":"account-recover.php de TorrentTrader Classic v1.09 selecciona contraseñas aleatorias de un conjunto insuficientemente grande, lo que facilita a usuarios remotos el obtener una contraseña a través de un ataque de fuerza bruta."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader_project:torrenttrader:1.09:*:*:*:*:*:*:*","matchCriteriaId":"610D011C-0FA6-458D-B67D-BE76C6B83BA9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35369","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51150","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8958","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2159","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/."},{"lang":"es","value":"backup-database.php en TorrentTrader Classic v1.09 no requiere autenticación administrativa, permitiendo que atacantes remotos creen y descarguen una base de datos de respaldo mediante una petición directa y posteriormente recuperando un fichero .gz del directorio backups/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*","matchCriteriaId":"9B591D51-69F4-4A00-85DD-CF5DCD197DCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35369","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51147","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2160","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obtain other potentially sensitive information via a direct request to check.php."},{"lang":"es","value":"TorrentTrader Classic v1.09 permite a atacantes remotos (1) obtener información de la configuración mediante una petición directa a phpinfo.php, que llama a la función phpinfo; y permite a atacantes remotos (2) obtener otra información potencialmente sensible mediante un una petición directa a check.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*","matchCriteriaId":"9B591D51-69F4-4A00-85DD-CF5DCD197DCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35369","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51149","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2161","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter, in conjunction with a modified component name."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en backend/admin-functions.php de TorrentTrader Classic v1.09. Cuando se usa en un sitio web que no distingue mayúsculas y minúsculas, permite a usuarios remotos incluir y ejecutar archivos locales a través de los caracteres .. (punto punto) en el parámetro ss.uri junto con un nombre de componente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torrenttrader:torrenttrader_classic:1.09:*:*:*:*:*:*:*","matchCriteriaId":"9B591D51-69F4-4A00-85DD-CF5DCD197DCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35369","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51146","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504294/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-74.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2162","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo PukiWikiMod MANIAC 1.6.6.2 y anteriores para XOOPS permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.6.2","matchCriteriaId":"7B5043DC-1598-474D-857A-A555F2FD1314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"97824B66-C39D-475D-A429-62BC7635CC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6FA2C9B8-6E67-4CA3-92D3-F7822E9E2347"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"02F33879-778C-4005-AFCD-E30227389D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AC947603-0A55-4FDA-A8C5-22B67531800A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"9D68E1C9-C9EB-41F9-A889-AC01D2B2A1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"A1937262-41C4-4C7F-9BDB-B8028736450E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A0FE1DF-6FB2-49BA-A0BD-B22D91CCB939"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"16D47500-E9C6-48A8-9EFC-47C3809748F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"76E8153D-DEF7-4DC8-B19B-9F6D3DEEEB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"93AF50CC-8D82-44F9-8607-80C4C4652CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"50CB588C-30AA-4E24-8DCA-5006C5C4FAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"28566651-CBF5-4CEF-A3CF-FD83B5EB8A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E26C76E9-E130-4EA7-B6DF-B408BC15839F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ishii:pukiwikimod:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"B7BEEB3E-F7F6-466A-9622-A8D648CBA832"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN12244807/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000041.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55189","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://xoops.hypweb.net/wiki/6005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51260","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN12244807/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://xoops.hypweb.net/wiki/6005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2163","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the sc_error parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sitecore CMS versiones anteriores a v6.0.2 Update-1 090507 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"sc_error\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:cms:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2","matchCriteriaId":"40923C49-775A-49A3-BDC4-264838748CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:cms:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"20271A9D-C591-4206-AF17-9170BA32C70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:cms:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FADD8B45-3408-454B-BB24-C9E51CDC05D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:cms:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"926DE827-2E52-40F5-927B-0B18CF57FE76"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1082-intern0t-sitecore-net-6-0-0-cross-site-scripting-vulnerability.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504093/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504132/100/0/threaded","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1082-intern0t-sitecore-net-6-0-0-cross-site-scripting-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504093/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504132/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2164","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the code parameter to activate.php or (2) the dest parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Kjtechforce mailman beta1, cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"code\" en activate.php o (2) el parámetro \"dest\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kjtechforce:mailman:beta1:*:*:*:*:*:*:*","matchCriteriaId":"05ACE637-3A64-461F-8D7C-C1E3F7B18EE8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504136/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8884","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8885","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504136/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2165","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id."},{"lang":"es","value":"Serena Bach de SerendipityNZ (SimpleBoxes) v2.20R y anteriores, 3.00 beta023 y versiones anteriores  a la v3.x usa un identificador de sesión predecible, lo que facilita a atacantes remotos secuestrar la sesión a través de un id modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:*:*:*:*:*:*:*:*","versionEndIncluding":"2.20r","matchCriteriaId":"75F8771D-4334-4333-8160-5355B067EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:1.18r:*:*:*:*:*:*:*","matchCriteriaId":"A7962E28-D16E-488F-AA38-A3D0193D0493"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:1.19r:*:*:*:*:*:*:*","matchCriteriaId":"A489E8CC-5B8B-49E7-AAC0-DDFA202BCE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:2.05r:*:*:*:*:*:*:*","matchCriteriaId":"79A67B19-F6CB-4451-A1E2-D8E95E752181"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:2.08d:*:*:*:*:*:*:*","matchCriteriaId":"B136BFFA-B2A6-4658-8778-AA74686BF652"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:2.09r:*:*:*:*:*:*:*","matchCriteriaId":"0D4AE0BC-73FD-4EF6-9963-1D7AFCFEAE7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:serendipitynz:serene_bach:3.00:beta023:*:*:*:*:*:*","matchCriteriaId":"F9C94ECC-875D-41DF-876E-D67A0DA6CC25"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN20689557/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000035.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://serenebach.net/log/sb221R.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35254","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN20689557/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://serenebach.net/log/sb221R.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2166","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en cvs.php en OCS Inventory NG versiones anteriores a v1.02.1 para Unix permite a atacantes remotos leer ficheros de su elección indicando la ruta de directorio completa en el parámetro \"log\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"8C51BBFA-8405-4499-A743-8458318281F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C9C9D8DD-6505-4903-9181-26223DA65DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3E915093-BDDA-4A75-A0D0-819246D94249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*","matchCriteriaId":"F8B28BF3-C16C-458A-BC9B-23631D2B7623"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.01:*:*:*:*:*:*:*","matchCriteriaId":"1D9ACDD1-0586-47F1-9421-F4D176BF438E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc1:*:*:*:*:*:*","matchCriteriaId":"73D26134-3129-432B-AA9E-5062E2792F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc2:*:*:*:*:*:*","matchCriteriaId":"A113F25A-CC82-428A-AA56-16BBA3D3C736"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc3:*:*:*:*:*:*","matchCriteriaId":"C0FCAE6C-0F9F-4B8A-97B4-2EF4ED76C5FF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A7C398-5356-45D6-AA5C-53E63BC88DCA"}]}]}],"references":[{"url":"http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504047/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50946","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8868","source":"cve@mitre.org"},{"url":"http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504047/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2167","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en cpanel/login.php en EgyPlus 7ammel (también conocido como 7ml) v1.0.1 y anteriores, cuando está inhabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) \"username\" y (2) \"password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egyplus:7ammel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"DCB957D6-BD45-4B52-9C26-534624E6CE67"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/1491","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50935","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8865","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2168","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters."},{"lang":"es","value":"cpanel/login.php en EgyPlus 7ammel (también conocico como 7ml) v1.0.1 y anteriores envía una redirección al navegador web pero no sale cuando las credenciales proporcionadas son incorrectas, permitiendo a atacantes remotos saltar la autenticación al proporcionar parámetros \"username\" y \"password\" aleatorios."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egyplus:7ammel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"DCB957D6-BD45-4B52-9C26-534624E6CE67"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8865","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/8865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2169","sourceIdentifier":"cve@mitre.org","published":"2009-06-22T22:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the FtpDownloadFile method.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX PDFVIEWER.PDFViewerCtrl.1 (pdfviewer.ocx) en Edraw PDF Viewer Component versiones anteriores a v3.2.0.126 permite a atacantes remotos crear y sobrescribir ficheros de su elección mediante un argumento de URL en el argumento FtpConnect y un argumento de fichero objetivo en el método FtpDownloadFile. NOTA: esto puede ser aprovechado para ejecutar código al escribir el fichero en una carpeta de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edraw:pdf_viewer_component:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.0","matchCriteriaId":"836CE22D-C8EE-4B48-99EA-9EE126E16092"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2170","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T16:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Mahara v1.0 antes de v1.0.12 y v1.1 antes de v1.1.5 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8B49D797-AF1B-4F7E-A71D-AABD0F802912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68167317-977B-48EE-9320-2A4539A93B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB25DF09-D88F-4633-9956-D64E3497153F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E32430EE-5F2B-4936-A297-2DF55CC22937"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1CC0259C-E628-4BBA-9D97-41A130B1E741"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"974F2D63-488C-41D7-A627-BF9B085A8D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E26420D4-20D8-4D6D-88B5-C74F39B88720"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"321475F4-1548-4FD1-BED9-12D944388FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F37005DE-BB31-4738-AC49-C3C2022AE8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8FA6F03B-F449-424E-A856-5BE5FB98814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7EFDC009-9CEB-450C-8704-CA73B147F220"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1:*:*:*:*:*:*:*","matchCriteriaId":"199ABBC1-BBAC-41BA-B70F-7B95C99D9B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"831676A2-1A33-4605-A5F4-97FAC8A1BB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"84652E40-1C88-438D-BCA1-4FF4C069F9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"08F53776-5F58-4C20-8FE7-9DF06F1704A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"79228F92-00A8-4B74-A914-11BDF9641F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F7FB1F02-A03F-45E5-8D26-C007C10EE97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A09C63AC-15A8-4722-B18E-98A86EC8A856"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"62452677-EE4C-4E5E-9DD2-D11C4211DA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"92848F08-EBFC-4579-A088-EC15D0B3EE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"894C07CE-BDF4-4652-9591-6DB6877582F2"}]}]}],"references":[{"url":"http://mahara.org/interaction/forum/topic.php?id=752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://mahara.org/interaction/forum/topic.php?id=752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2171","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact."},{"lang":"es","value":"Mahara v1.1 antes de v1.1.5 no realiza comprobaciones de permisos al guardar una vista que contiene objetos, lo que permite a los usuarios remotos autenticados leer el objeto de otro usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1:*:*:*:*:*:*:*","matchCriteriaId":"199ABBC1-BBAC-41BA-B70F-7B95C99D9B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"92848F08-EBFC-4579-A088-EC15D0B3EE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"894C07CE-BDF4-4652-9591-6DB6877582F2"}]}]}],"references":[{"url":"http://mahara.org/interaction/forum/topic.php?id=753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://mahara.org/interaction/forum/topic.php?id=753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2172","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows remote registered users to inject arbitrary web script or HTML via the station parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en forum/radioandtv.php en el complemento reproductor de radio y televisión para vBulletin permite inyectar HTML o scripts Web arbitrarios a los usuarios registrados remotos a través del parámetro 'station'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dream:radio_and_tv_player_addon_for_vbulletin:*:*:*:*:*:*:*:*","matchCriteriaId":"8992264D-B8D3-4BB0-994F-59B5F5274A6E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*","matchCriteriaId":"4628EC50-A591-4A9B-8E62-70D8A0865CCD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35385","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8965","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2173","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) via a crafted HTTP request to TCP port 28012."},{"lang":"es","value":"La característica de juego en red en Carom3D v5.06 permite a usuarios remotos autenticados causar una denegación de servicio (mediante bloqueo de la aplicación) a través de una petición HTTP modificada al puerto TCP 28012."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gameis:carom3d:5.06:*:*:*:*:*:*:*","matchCriteriaId":"AA00A010-1E6A-47E8-A84B-B1FD9CBB8737"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51219","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8971","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2174","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message."},{"lang":"es","value":"GUPnP v0.12.7 permite a atacantes remotos provocar una denegación de servicio (con caída de la aplicación) a través de un mensaje vacío (1) de suscripción (2) o de control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gupnp:gupnp:0.12.7:*:*:*:*:*:*:*","matchCriteriaId":"8D9E729A-3113-4D05-9F5A-5F45D0A3E779"}]}]}],"references":[{"url":"http://bugzilla.openedhand.com/show_bug.cgi?id=1604","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55128","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35390","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1597","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugzilla.openedhand.com/show_bug.cgi?id=1604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2175","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the (1) xcf2pnm and (2) xcf2png utilities, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image that causes a conversion to a location \"above or to the left of the canvas.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en la función flattenIncrementally en el archivo flatten.c en xcftools versión 1.0.4, al ser accesible desde (1) xcf2pnm y (2) xcf2png, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de una imagen creada que genera una conversión a una ubicación \"above or to the left of the canvas.\" NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:henning_makholm:xcftools:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22ACF73C-8990-4AAC-A613-4419EAA3D08E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533361","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050526.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050542.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050562.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55187","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/43883","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050526.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050542.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/43883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2176","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) list parameter to code/confirm.php and the (2) template parameter to code/display.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en fuzzylime (cms) v3.03a y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos incluir y ejecutar archivos locales a través de secuencias de salto de directorio en (1) la lista de parámetros de code/confirm.php y (2) el parámetro de template de code/display.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03a:*:*:*:*:*:*:*","matchCriteriaId":"FBFDACDE-0390-42CE-B363-E38D99EB687B"}]}]}],"references":[{"url":"http://osvdb.org/55182","source":"cve@mitre.org"},{"url":"http://osvdb.org/55183","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35418","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51205","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8978","source":"cve@mitre.org"},{"url":"http://osvdb.org/55182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2177","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a \"....//\" (dot dot) in the s parameter, which is collapsed into a \"../\" value."},{"lang":"es","value":"El archivo code/display.php en fuzzylime (cms) versiones 3.03a y anteriores, cuando magic_quotes_gpc está desactivado, permite a los atacantes remotos conducir ataques de salto de directorio y sobrescribir archivos arbitrarios por medio de un \"....//\" (punto punto) en el parámetro s, que se contrae en un valor \"../\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03a:*:*:*:*:*:*:*","matchCriteriaId":"FBFDACDE-0390-42CE-B363-E38D99EB687B"}]}]}],"references":[{"url":"http://osvdb.org/55184","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35418","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51206","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8978","source":"cve@mitre.org"},{"url":"http://osvdb.org/55184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2178","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en website.php en phpDatingClub v3.7 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro 'page'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpdatingclub:3.7:*:*:*:*:*:*:*","matchCriteriaId":"CB52A6F3-E7B8-4094-B4BA-B94367FA2B2D"}]}]}],"references":[{"url":"http://osvdb.org/55316","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8990","source":"cve@mitre.org"},{"url":"http://osvdb.org/55316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2179","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en search.php en phpDatingClub v3.7 permite a atacantes remotos ejecutar comandos SQL a través del parámetro sform[day] ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w2b:phpdatingclub:3.7:*:*:*:*:*:*:*","matchCriteriaId":"CB52A6F3-E7B8-4094-B4BA-B94367FA2B2D"}]}]}],"references":[{"url":"http://osvdb.org/55315","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8990","source":"cve@mitre.org"},{"url":"http://osvdb.org/55315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2180","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en upfiles/index.php en PC4 Uploader v10.0 y anteriores permite a atacantes remotos leer ficheros arbitrarios a través de (1) un .. (punto punto) o (2) una ruta absoluta en el parámetro 'file'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pc4arb:pc4_uploader:10.0:*:*:*:*:*:*:*","matchCriteriaId":"B51235AF-1AB0-4482-9B27-7FA7200C6613"}]}]}],"references":[{"url":"http://osvdb.org/55314","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8988","source":"cve@mitre.org"},{"url":"http://osvdb.org/55314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2181","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en admin-files/templates/list_dir.php en Campsite v3.3.0 RC1 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro listbasedir."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1531D980-977D-4077-9D37-0F7ACBD19CD1"}]}]}],"references":[{"url":"http://osvdb.org/55313","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8995","source":"cve@mitre.org"},{"url":"http://osvdb.org/55313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2182","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/."},{"lang":"es","value":"Multiples vulnerabilidades de inclusión remota de fichero PHP en Campsite v3.3.0 RC1 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro GLOBALS [g_campsiteDir] en (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, y (6), set-author.php en admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; ( 9) CommandProcessor.php; (10) index.php en admin-files/article_import;  (11) add.php, (12) add_move.php, (13) autopublish.php, y (14) autopublish_del.php en admin-files/articles/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1531D980-977D-4077-9D37-0F7ACBD19CD1"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/8995","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2183","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de directorio en admin-files/ad.php en Campsite v3.3.0 RC1 permite a atacantes remotos leer y posiblemente ejecutar archivos locales a través de un .. (punto punto) en el parámetro GLOBALS [g_campsiteDir]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:campware.org:campsite:3.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1531D980-977D-4077-9D37-0F7ACBD19CD1"}]}]}],"references":[{"url":"http://osvdb.org/55312","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8995","source":"cve@mitre.org"},{"url":"http://osvdb.org/55312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2184","sourceIdentifier":"cve@mitre.org","published":"2009-06-23T21:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded \"/\" (slash) in the file parameter."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta (path) absoluta en el archivo forcedownload.php en Media Photo Host de Gravy versión 1.0.8, permite a los atacantes remotos leer archivos arbitrarios por medio de una \"/\" (barra diagonal) codificada en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravy-media:media_photo_host:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"199F8355-A209-4F49-95BA-72405207A0B1"}]}]}],"references":[{"url":"http://osvdb.org/55280","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35518","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51299","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8996","source":"cve@mitre.org"},{"url":"http://osvdb.org/55280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2185","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T02:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string."},{"lang":"es","value":"El analizador ASN.1 pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) en (a) strongSwan v2.8 anterior a v2.8.10, v4.2 anterior a v4.2.16, y v4.3 anterior a v4.3.2; y  (b) openSwan v2.6 anterior a v2.6.22 y v2.4 anterior a v2.4.15 permite a atacantes remotos provocar una denegación de servicio (caída del demonio IKE pluto) a través de un certificado X.509 con (1) Nombres Caracterizados Relativos (RDNs) (2) una cadena UTCTIME manipulada, o (3) una cadena GENERALIZEDTIME manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5518A917-D5D1-4985-BF71-B1A34BD3D5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"778D7442-F54A-47DF-B87B-3CFA3CF08799"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16984E6E-7CA8-4DC3-B800-FFE007617FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C85F0BE-7E89-4B79-A036-9238785BE705"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C794994-9367-4BBB-8940-BBB44B7C1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"082272D3-0FE4-4959-978A-FFF795B52CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"8DFEF9B3-C7F7-4588-A174-FAFD39C04116"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"02A38BCE-66F9-49F9-8C48-DB3DA9E7054D"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"8E18EB62-1042-4F26-9EC3-B7EEA2182716"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C89C6007-3A8D-427D-8BE3-047DD52DE196"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7A4D6E89-5313-4016-8A7E-036579330DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"95A8E226-FCEC-4545-A628-24F5A8103BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1B944D80-A8B9-4034-A95B-BA92ADC8D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"F5267BCC-A51C-4F3B-840C-49EF9C2A15F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8CDCDB4B-2DF5-4394-B33A-08A4B6604D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"66206A52-373C-4DBB-A3D7-2A7569C0181E"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F654D3C4-D3A3-41E1-A0D8-3A384319AE08"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C41F9E10-000D-4F3B-BEA6-DEE87405B89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F37DFE8-2996-4904-B733-7BAECA95CB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"155EB8F5-7C3C-4293-91EE-62DA561DA54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"E42B67A3-8650-426F-A8E8-DCA4180D787A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"384C0CAE-8AC3-47AA-9F1C-9DE6779CA583"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F7841F42-1226-43C4-A007-88847925D872"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"77930F86-13FF-4787-A39F-2D00110AFBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7B1ADD64-2503-4EED-9F6F-E425A3406123"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A3067BE9-4314-42BD-8131-89C4899F7D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E00CA6E5-1F63-4D59-BA72-0F8697671718"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C35A2049-8502-41F2-894E-E39AEBEB6816"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD82E956-8C8E-4B38-9E82-4AA9AEFE6891"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2D0F0EA4-A0DF-48CC-9B42-465A36945503"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.03:*:*:*:*:*:*:*","matchCriteriaId":"78325087-599F-448B-8C47-570914FF6C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.04:*:*:*:*:*:*:*","matchCriteriaId":"059CFA5C-B262-47AF-94A6-8E74AFB19204"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.05:*:*:*:*:*:*:*","matchCriteriaId":"12F25627-235B-4312-80A4-4E36DE0E72A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.06:*:*:*:*:*:*:*","matchCriteriaId":"B3E70B88-6348-42BB-AE96-46BDB1F3C6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.07:*:*:*:*:*:*:*","matchCriteriaId":"12A9DF25-48E8-4D52-A267-1BE0437E9000"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.08:*:*:*:*:*:*:*","matchCriteriaId":"C986533F-E320-46FA-A9F7-DAFDB1A0628A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.09:*:*:*:*:*:*:*","matchCriteriaId":"7C77DED4-2696-4172-92B7-43034E61F845"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2EDCCFDA-99A8-4590-99F1-95F3A5AD70B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"BED1BA7D-B603-49D4-9080-4A9FEC056A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"9E8EB86B-2DD9-4C4B-9C9A-E88B2C458C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"207B98DB-5962-4F62-AF5B-D48EF0C0E2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"DFB65639-AE3A-4984-93F9-2A8100DCEE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"B8921D08-FBA3-4C0A-8944-362909C5EB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"3FBD5312-E44F-4996-AA29-AFED53A90E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"E1B24C96-47DF-4FA2-8DF4-8241F4964F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"A5067B83-AB9E-4819-B5A2-B14A96EB54C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"773B9BB2-0F65-4604-AF2C-8AC396DDC094"},{"vulnerable":true,"criteria":"cpe:2.3:a:xelerance:openswan:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"AA892169-0079-48D9-AEF5-641748CE1BF2"}]}]}],"references":[{"url":"http://download.strongswan.org/CHANGES2.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://download.strongswan.org/CHANGES4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://download.strongswan.org/CHANGES42.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35698","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35804","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36950","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37504","source":"cve@mitre.org"},{"url":"http://up2date.astaro.com/2009/07/up2date_7404_released.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1898","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"cve@mitre.org"},{"url":"http://www.ingate.com/Relnote.php?ver=481","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1138.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35452","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022428","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1706","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1829","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3354","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11079","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00337.html","source":"cve@mitre.org"},{"url":"http://download.strongswan.org/CHANGES2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://download.strongswan.org/CHANGES4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://download.strongswan.org/CHANGES42.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2009/07/up2date_7404_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ingate.com/Relnote.php?ver=481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1138.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00337.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2186","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T01:30:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that \"was previously resolved in Shockwave Player 11.0.0.465.\""},{"lang":"es","value":"Una vulnerabilidad no especificada en Adobe Shockwave Player anterior a la versión 11.0.0.465 permite que los atacantes remotos ejecuten código arbitrario por medio de vectores desconocidos, una vulnerabilidad diferente de CVE-2009-1860, relacionada con un problema anterior que \"was previously resolved in Shockwave Player 11.0.0.465.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.0.0.456","matchCriteriaId":"849BA45D-66E6-495A-B81C-22B49B59212C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"}]}]}],"references":[{"url":"http://www.adobe.com/support/security/bulletins/apsb09-08.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2187","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T01:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages."},{"lang":"es","value":"Múltiples fugas de memoria en el (1) IP e (2) implementación de multidifución IPv6 en el Kernel en Sun Solaris v10, y OpenSolaris snv_67 hasta snv_93, permite a usuarios locales provocar una denegación de servicio (consumo de memoria) a través de vectores relacionados con la asociación de mensajes ARP con mensajes (a) DL_ENABMULTI_REQ  y (b) DL_DISABMULTI_REQ"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6709252","source":"cve@mitre.org"},{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6731600","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35552","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35474","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6709252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6731600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2188","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with crafted EXIF metadata."},{"lang":"es","value":"Desbordamiento de búfer en ImageIO en Apple Mac OS X v10.5 anterior a v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de una imagen con metadatos EXIF manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56842","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3733","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52386","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2190","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many connections to an inetd-based launchd service."},{"lang":"es","value":"launchd en Apple Mac OS X v10.5 anterior a v10.5.8 permite a atacantes remotos provocar una denegación de servicio (corte de servicio individual) haciendo muchas conexiones a un servicio lanzado basado en inetd-based."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022672","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52425","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2191","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in an application name."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la ventana de inicio de sesión (Login Window) en Apple Mac OS X v10.4.11 y v10.5 anterior a v10.5.8 permite a atacantes ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de especificadores de formato de cadena en un nombre de aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52428","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2192","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a \"logic issue.\""},{"lang":"es","value":"MobileMe en Apple Mac OS X 10.5 anterior a v10.5.8 no elimina adecuadamente las credenciales al salir del panel de preferencias, lo cual hace más fácil para los atacantes secuestrar una sesión MobileMe a través de vectores no especificados, relacionado con una \"cuestión lógica\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56839","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52432","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2193","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted AppleTalk response packet."},{"lang":"es","value":"Desbordamiento de búfer en el núcleo de Apple Mac OS X v10.5 anteriores a v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída del sistema) a través de un paquete de respuesta AppleTalk manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52435","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2194","sourceIdentifier":"cve@mitre.org","published":"2009-08-06T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service (system crash) by placing file descriptors in messages sent to a socket that has no receiver, related to a \"synchronization issue.\""},{"lang":"es","value":"Apple Mac OS X v10.5 anterior a v10.5.8 no comparte correctamente los descriptores de archivos sobre sockets locales, lo cual permite a usuarios locales provocar una denegación de servicio (caida del sistema) mediante la colocación de descriptores de archivo en los mensajes enviados a un socket que no tiene el receptor, relaccionado con una \"incidencia de sincronización\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"AA12DDA2-6B31-4BB2-BDAC-8DDB7726491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56836","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022672","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52439","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-218A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2195","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers."},{"lang":"es","value":"Desbordamiento de búfer en WebKit en Apple Safari anteriores a v4.0.3, permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (caída de la aplicación) a través de un número punto-flotante manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*","matchCriteriaId":"1CC1878A-7B92-4DA4-B239-243DCE90E152"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"C27DF35F-2121-4219-B7F0-81D26863D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*","matchCriteriaId":"63FEA310-C6F2-4F2A-ABA8-6468308E3569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0_beta:528.16:*:*:*:*:*:*","matchCriteriaId":"48644B6B-501A-4DAB-BD69-F6ADA4D36549"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4beta:*:*:*:*:*:*:*","matchCriteriaId":"CDA27C19-7F59-4406-9055-1FDFC426F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*","matchCriteriaId":"04C977D9-26B7-4731-B8E1-CA44EB387B9A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3733","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36023","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022717","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2196","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Apple Safari 4 anteriores a v4.0.3 que permite a los servidores web remotos colocar un sitio web arbitrario en la vista \"Top Sites\", y posiblemente conducir un ataque de phishing, a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*","matchCriteriaId":"1CC1878A-7B92-4DA4-B239-243DCE90E152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36EA71E0-63F7-46FF-AF11-792741F27628"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36022","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022718","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2198","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users."},{"lang":"es","value":"Apple GarageBand anterior a v5.1 reconfirura Safari aceptando todas las cookies sin importar el nombre de dominio, lo que hace que sea más sencillo para los servidores Web remotos seguir a los usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.2","matchCriteriaId":"F0AA3FD0-0103-4584-8D1D-2D8A105354AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:garageband:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B069491-5102-4BCB-8090-C3120898C14B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:garageband:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C261362F-E7A5-4C21-9D3E-550D30640AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:garageband:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4B16C1BB-7605-4B93-90E5-F480D71C2B45"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:garageband:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EB160CA-FF32-4198-A06A-2AD26790A1DA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56738","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35926","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022649","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2141","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52248","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/56738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2199","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs."},{"lang":"es","value":"Una vulnerabilidad de lista negra incompleta en WebKit en Safari de Apple anterior a versión 4.0.3, como es usado en iPhone OS anterior a versión 3.1, iPhone OS anterior a  versión 3.1.1, para iPod touch y otras plataformas, permite a atacantes remotos falsificar nombres de dominio en URL y posiblemente conducir ataques de phishing, por medio de homoglifos no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"C27DF35F-2121-4219-B7F0-81D26863D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"BE457690-CB2B-42BD-B97C-E723AFD02FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3733","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36026","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022719","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2200","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document."},{"lang":"es","value":"WebKit en Apple Safari anteriores a v4.0.3 no restringe apropiadamente el esquema URL del atributo pluginspage de un elemento EMBED, lo que permite a los atacantes remotos asistidos por usuarios lanzar un archivo arbitrario: URLs y obtener información sensible a través de un documento HTML manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*","matchCriteriaId":"1CC1878A-7B92-4DA4-B239-243DCE90E152"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"C27DF35F-2121-4219-B7F0-81D26863D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*","matchCriteriaId":"63FEA310-C6F2-4F2A-ABA8-6468308E3569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0_beta:528.16:*:*:*:*:*:*","matchCriteriaId":"48644B6B-501A-4DAB-BD69-F6ADA4D36549"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4beta:*:*:*:*:*:*:*","matchCriteriaId":"CDA27C19-7F59-4406-9055-1FDFC426F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*","matchCriteriaId":"04C977D9-26B7-4731-B8E1-CA44EB387B9A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3733","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36024","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022720","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2201","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog."},{"lang":"es","value":"La característica de pantalla compartida en la aplicación Admin en  Apple Xsan anterior a v2.2, ubica en texto plano el nombre de usuario y la contraseña en una URL dentro de un mensaje de error, lo que permite a atacantes que se encuentren cerca físicamente, el obtener las credenciales leyendo dicho mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xsan:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"089C95C5-26EC-4199-B73C-A3C92BF568F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xsan:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C5897F93-F78D-42CB-9882-00769B3411D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xsan:1.2:*:*:*:*:*:*:*","matchCriteriaId":"539F122F-FBB5-45DE-8CB4-EEE5E35B4548"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xsan:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3AA03C6F-A7AA-4759-AD7B-A6365ACBA801"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36673","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3797","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36385","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022904","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2644","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53232","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2202","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file."},{"lang":"es","value":"Apple QuickTime anterior a v7.6.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un fichero de película H.264 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:-:mac:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"FBBE7D6D-5D75-48D9-AF41-E57D1E1B913D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*","versionEndIncluding":"7.6.1","matchCriteriaId":"C4D2A738-C558-4FF4-AD8B-B24213FB3A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"6ED97A46-DE85-4019-AE15-CDFF0E1371F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36328","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53127","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2203","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file."},{"lang":"es","value":"Desbordamiento de búfer en Apple QuickTime en versiones anteriores a la v7.6.4 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de un fichero de video MPEG-4 modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.2","matchCriteriaId":"19679D07-BB28-4E47-A0A1-0D5BFBED823B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"6ED97A46-DE85-4019-AE15-CDFF0E1371F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:-:mac:*:*:*:*:*","matchCriteriaId":"181ABD08-3AFB-492B-B59F-FF971B6DF759"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"B907F62E-696E-41C6-9748-F16D0D96982C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36328","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2204","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente CoreTelephony en Apple iPhone anterior a 3.0.1, permite a atacantes remotos ejecutar  código de su elección, obtener coordenadas GPS o activar el micrófono a través de un SMS que provoca una corrupción de memoria, como se demostró por Charlie Miller en la SyScan '09 en Singapur."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"F636A8C6-38F5-476B-BBDC-144B70957A72"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html","source":"cve@mitre.org"},{"url":"http://news.cnet.com/8301-1009_3-10278472-83.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022626","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/55687","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35569","source":"cve@mitre.org"},{"url":"http://www.syscan.org/Sg/program.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.cnet.com/8301-1009_3-10278472-83.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT3754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/55687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syscan.org/Sg/program.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2205","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el Java Web Start Command Launcher en Java para Mac OS X v10.5 anterior a la actualización 5, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*","matchCriteriaId":"0DA315DB-10DF-4D18-A575-37A70F9AFD3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.4:*:21:*:*:*:*:*:*","versionEndIncluding":"2","matchCriteriaId":"CA48B4BD-D73D-406E-A2CB-40AFD586A6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.4:2:*:*:*:*:*:*:*","matchCriteriaId":"2D939C2B-44CB-4FFF-A3A1-AE34CF5EEC9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.4:2:16:*:*:*:*:*:*","matchCriteriaId":"C456DD9A-A666-4F58-A62E-31783674B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.4:2:18:*:*:*:*:*:*","matchCriteriaId":"E5B0BBE8-D809-47D4-BE97-89DC01AAA9A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.5:*:19:*:*:*:*:*:*","versionEndIncluding":"0","matchCriteriaId":"3BC5B357-2264-4E59-BB14-8FEFD6BC5F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.6:*:13:*:*:*:*:*:*","versionEndIncluding":"0","matchCriteriaId":"B7F07B54-7C97-46EF-8D6E-6DF25E01344C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.6:0:*:*:*:*:*:*:*","matchCriteriaId":"3921FB86-2E5A-4756-B59F-0F093B28590A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.6:0:05:*:*:*:*:*:*","matchCriteriaId":"750853B2-5D03-48D2-A6A8-6084312D1C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:java_1.6:0:07:*:*:*:*:*:*","matchCriteriaId":"E286B78C-E651-483F-8778-DE22A5197C91"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022820","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2206","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted (1) AAC or (2) MP3 file, as demonstrated by a ringtone with malformed entries in the sample size table."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región heap de la memoria en la biblioteca AudioCodecs en el componente CoreAudio en iPhone OS anterior a versión 3.1, y iPhone OS anterior a versión 3.1.1 para iPod touch, de Apple, permiten a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo (1) AAC o (2) MP3 diseñado, como es demostrado mediante un tono de llamada con entradas malformadas en la tabla de tamaño de muestra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"BE457690-CB2B-42BD-B97C-E723AFD02FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"340C4071-1447-477F-942A-8E09EA29F917"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"2B1A9F14-4F3A-4B85-9050-84B51D59C9A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*","matchCriteriaId":"88FA2602-DDAB-4E23-A3D2-FB712970AAD1"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506464/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36338","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022869","source":"cve@mitre.org"},{"url":"http://www.trapkit.de/advisories/TKADV2009-007.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53180","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506464/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trapkit.de/advisories/TKADV2009-007.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2207","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages."},{"lang":"es","value":"El componente MobileMail en Apple iPhone OS v3.0 y v3.0.1, y iPhone OS v3.0 para iPod touch, lista mensajes de correo electrónico borrados en los resultados de búsqueda de Spotlight, lo que permitiría a usuarios locales obtener información sensible mediante la lectura de estos mensajes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"F07B3FE7-96B3-493A-A230-5642BA11FBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36337","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53182","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2208","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T02:00:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU."},{"lang":"es","value":"FreeBSD v6.3, v6.4, v7.1, y v7.2 no respeta los permisos sobre SIOCSIFINFO_IN6 IOCTL, lo que permite a usuarios locales modificar o deshabilitar interfaces de red IPv6, como se ha desmostrado modificando el MTU."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*","matchCriteriaId":"9A1D9D46-75E4-4742-9CF3-2B063B6B7504"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p11:*:*:*:*:*:*","matchCriteriaId":"14C10691-0BAB-45EF-9050-BED05B70660F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p6:*:*:*:*:*:*","matchCriteriaId":"311F47DD-E224-4E10-A767-79B2B4B33023"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p8:*:*:*:*:*:*","matchCriteriaId":"F2D1E2AB-5AA2-403F-B547-44747B50C970"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:release_p9:*:*:*:*:*:*","matchCriteriaId":"E9738883-5FB9-4261-9388-D01660ED64DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*","matchCriteriaId":"72C2BE9D-91E1-48E9-9326-39CF583A57E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*","matchCriteriaId":"53D1AD5E-4007-4AFA-A18B-69D1AC055C00"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*","matchCriteriaId":"06BFEE54-DBF3-4546-AE57-2C25FC9F0F04"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*","matchCriteriaId":"BE1FC1A8-E499-45A0-B89A-5BFA24727DBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*","matchCriteriaId":"8E08DCB9-9064-4DB7-B43A-7B415882EB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*","matchCriteriaId":"E4A5E6FF-617E-4173-A948-F3728454A012"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*","matchCriteriaId":"06FB0EEA-254E-4A1F-99E7-058FCD518E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*","matchCriteriaId":"14D72C9B-EEB0-4605-BEA2-F77092129245"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*","matchCriteriaId":"52DBF406-9C77-4DDA-AB7D-40FAE40023D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*","matchCriteriaId":"20A31C9A-A928-4C9B-BB49-0E53227746DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*","matchCriteriaId":"99FB7443-F942-402A-9104-64677EAF014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p4:*:*:*:*:*:*","matchCriteriaId":"305A4C3D-C63D-4D1F-80FF-549182A0D9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*","matchCriteriaId":"C2A31704-E99F-4DBE-ABA4-EC3E566DE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:release-p6:*:*:*:*:*:*","matchCriteriaId":"E634CDF4-F77B-4917-A452-907A771B5B0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*","matchCriteriaId":"E9A75104-5A3E-485E-B4EC-0873C942731C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*","matchCriteriaId":"8B573401-DC6F-4AFE-92F5-D96F785D2107"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*","matchCriteriaId":"60D40129-108B-421B-9990-6C6F381C96AD"}]}]}],"references":[{"url":"http://secunia.com/advisories/35410","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35285","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022367","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2209","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T02:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rscms_mod_newsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rscms_mod_newsview.php en RS-CMS v2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rs-cms:rs-cms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B966F2A9-74A3-4239-A9F0-16C1288268F6"}]}]}],"references":[{"url":"http://osvdb.org/55325","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51304","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9000","source":"cve@mitre.org"},{"url":"http://osvdb.org/55325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2210","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type."},{"lang":"es","value":"Mozilla Thunderbird en versiones anteriores a la 2.0.0.22 y SeaMonkey en versiones anteriores a la 1.1.17 permiten a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecutar código de su elección mediante mensaje de correo eléctronico multipart/alternative que contenga una parte text/enhanced que dispara el acceso a un tipo de objeto incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.16","matchCriteriaId":"DE872814-DA94-417A-99E4-0E01E4554E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.21","matchCriteriaId":"E03AD36E-7C5B-4A60-AE19-29F3AF780333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://secunia.com/advisories/35561","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35602","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35633","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35882","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022433","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-33.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1134.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35461","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=495057","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51315","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-33.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1134.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=495057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2211","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el servidor CQWeb en IBM Rational ClearQuest 7.0.0 en versiones anteriores a la 7.0.0.6 y 7.0.1 en versiones anteriores a la 7.0.1.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0:*:*:*:*:*:*:*","matchCriteriaId":"37B059D3-5A21-48FA-8D9D-F0DEB8CBB909"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"677DFFEC-D128-4F26-994E-02BBDC2CFA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6BE76312-2E8E-4559-ACBB-9089B64C6E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"741C008D-917B-44BB-AB20-6A662668B526"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"70B52763-5940-4249-BEB4-C14C008DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"23E2844B-40BA-48F1-8E2E-C0534078D186"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEB65A10-EE74-43DF-8D05-B39551F57D2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2212","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) password via unspecified vectors."},{"lang":"es","value":"El servidor CQWeb en IBM Rational ClearQuest 7.0.0 en versiones anteriores a la 7.0.0.6 y 7.0.1 en versiones anteriores a la 7.0.1.5 permite a atacantes descubrir el (1) nombre de usuario o (2) la contraseña mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E60F687F-99A1-43C2-90F8-6F56265A2E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"676DB969-3FF3-4EFA-8B50-9753BAC80EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8CE6CA8-1504-46FA-8A36-FFDBD1BBE5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"677DFFEC-D128-4F26-994E-02BBDC2CFA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6BE76312-2E8E-4559-ACBB-9089B64C6E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4525242E-6B9A-4F6F-B506-93C92958CA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"70B52763-5940-4249-BEB4-C14C008DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"23E2844B-40BA-48F1-8E2E-C0534078D186"}]}]}],"references":[{"url":"http://secunia.com/advisories/35564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2213","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions."},{"lang":"es","value":"La configuración por defecto en las características de seguridad globales en el appliance Citrix NetScaler Access Gateway con el firmware Enterprise Edition 9.0, 8.1 y versiones anteriores especifica la opción \"Allow for the Default Authorization Action\" lo que puede permitir a usuarios remotos autenticados evitar las restricciones de acceso previstas."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"FD2AF148-E1B5-427B-97E2-AEEC59D72162"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DAA4BFC4-A82E-4820-AB97-2EF9D9EA9276"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B80F696E-74A8-432C-BA31-6CE158B4DB82"},{"vulnerable":true,"criteria":"cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.0:*:*:*:*:*:*:*","matchCriteriaId":"CAD93B7C-E6C1-42F0-8963-C33EF0F6B88D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*","matchCriteriaId":"4D5D5DFC-F456-4085-BE20-13BD38301B04"}]}]}],"references":[{"url":"http://support.citrix.com/article/CTX118770","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35422","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1641","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51274","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.citrix.com/article/CTX118770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2214","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an unspecified request."},{"lang":"es","value":"El servicio Secure Gateway en Citrix Secure Gateway v3.1 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU) mediante una petición no especificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:secure_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"77F094EC-671D-46E0-97BF-D330FF58A3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:secure_gateway:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F461C114-699E-4037-8B9A-B3D8581C5FE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/35503","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX121172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35421","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022420","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1633","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX121172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2215","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the fatal_error page and unspecified other components."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en URD en versiones anteriores a la 0.6.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores relacionados con la página fatal_error y otros componentes no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:urdland:urd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.1","matchCriteriaId":"113AA5D5-8DF1-4880-A18C-BE7EA83DF532"},{"vulnerable":true,"criteria":"cpe:2.3:a:urdland:urd:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA6C1F38-72E3-4051-936A-EECA2AC2363A"},{"vulnerable":true,"criteria":"cpe:2.3:a:urdland:urd:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"FE325A66-3991-4A29-885D-590CCD969FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:urdland:urd:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"657BAA82-CEB4-48A9-9A24-A3BEE90D918E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=692011","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=692011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2216","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en CMD_REDIRECT en DirectAdmin v1.33.6 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la URI en una petición view=advanced."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.33.6","matchCriteriaId":"AA576CCB-A4AC-4E51-BC47-743E4E31CFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.33.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FCB9E0-080C-4A2F-8B7B-6C0F589A43BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.33.2:*:*:*:*:*:*:*","matchCriteriaId":"6D0976B8-EE27-4EB5-B2C0-913BB4D16989"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.33.3:*:*:*:*:*:*:*","matchCriteriaId":"F53FC595-DAAF-44C4-96D5-567009DEE71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.33.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF4323A-6951-40B1-A7E0-BA8740D18139"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbmc-software:directadmin:1.292:*:*:*:*:*:*:*","matchCriteriaId":"154CC305-820A-4079-85A2-2C6E3AE26598"}]}]}],"references":[{"url":"http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35450","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51292","source":"cve@mitre.org"},{"url":"http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2217","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en NBBC en versiones anteriores a la v1.4.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante una URL inválida en una etiqueta img BBCode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"1255B632-08A0-442A-8BBC-620BCC22A124"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A379F4E-7FE9-413D-BE4D-737ADC34EBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.0:rc:*:*:*:*:*:*","matchCriteriaId":"9773626C-373C-421E-A7DC-C830DC70E28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A6F53BA0-50B6-4919-ACCB-5F267D84717E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"FF65D79B-34AA-4E52-B7D3-4E4320D78C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"B8763967-049B-444D-8E21-F0EE53E9CCC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"F7FA9B8D-40B4-4D72-AB5E-E5B492C3F967"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9B9A5E01-DB94-40EB-8ED0-92556C92BF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.2:*:*:*:*:*:*:*","matchCriteriaId":"833464F5-DE0D-4449-8BEA-10B20180B9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.3:*:*:*:*:*:*:*","matchCriteriaId":"CE8C0DE3-16AE-400C-BE8C-712051605CE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7C12B1AE-8224-46C0-97A6-FA4B4720D471"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C33EB404-D435-4B55-8D09-1F73837E1B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C7BC4740-229B-4C02-AED4-06081F091160"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"94ACF855-6AA6-4088-BF28-E935EE8B2BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"8923E353-25B8-4DDF-8D25-221A6C0CB155"},{"vulnerable":true,"criteria":"cpe:2.3:a:phantom-inker:nbbc:alpha:*:*:*:*:*:*:*","matchCriteriaId":"18188783-3F67-4DDB-8136-C5B9F03B1053"}]}]}],"references":[{"url":"http://osvdb.org/55266","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/message.php?msg_id=7455625","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/forum/message.php?msg_id=7456208","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2809888&group_id=235382&atid=1096820","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51288","source":"cve@mitre.org"},{"url":"http://osvdb.org/55266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/message.php?msg_id=7455625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/forum/message.php?msg_id=7456208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2809888&group_id=235382&atid=1096820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2218","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, or (4) house/myrents.php; or (5) allbooks.php, (6) home.php, or (7) mybooks.php in books/.  NOTE: house/myrents.php was also separately reported as a local file inclusion issue."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en phpCollegeExchange 0.1.5c, cuando está habilitado register_globals, permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro home para (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, (4) house/myrents.php, (5) allbooks.php, (6) home.php, o (7) mybooks.php in books/. NOTA: house/myrents.php fue además reportado de manera separada como un problema de inclusión de fichero local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*","matchCriteriaId":"DF73C771-F42D-4226-9FE2-2533CD969AB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9008","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2219","sourceIdentifier":"cve@mitre.org","published":"2009-06-25T23:14:15.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSION[handle] parameter to (a) home.php, (b) books/allbooks.php, or (c) books/home.php; or the (2) home parameter to (d) i_head.php or (e) i_nav.php, or (f) allbooks.php, (g) home.php, or (h) i_nav.php in books/."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phpCollegeExchange 0.1.5c permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) _SESSION[handle] para (a) home.php, (b) books/allbooks.php, o (c) books/home.php; o el parámetro (2) home para (d) i_head.php (e) i_nav.php, (f) allbooks.php, (g) home.php, o (h) i_nav.php in books/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_degner:phpcollegeexchange:0.1.5c:*:*:*:*:*:*:*","matchCriteriaId":"DF73C771-F42D-4226-9FE2-2533CD969AB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9008","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2220","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the template_path parameter to (1) masthead.inc.php, (2) toppanel.inc.php, and (3) contact.inc.php in templates/mytribiqsite/tribiq-CL-9000/includes; and the use_template_family parameter to (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTE: the tribal-GPL-1066/includes/header.inc.php vector is already covered by CVE-2008-4894."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Tribiq CMS 5.0.12c, cuando register_globals está activado y magic_quotes_gpc está deshabilitado, permiten a atacantes remotos incluir y posiblemente ejecutar ficheros de su elección mediante secuencias de salto de directorio en el parámetro template_path a (1) masthead.inc.php, (2) toppanel.inc.php y (3) contact.inc.php en templates/mytribiqsite/tribiq-CL-9000/includes; y el parámetro use_template_family a (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTA: el vector tribal-GPL-1066/includes/header.inc.php ya ha sido tratado en CVE-2008-4894."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tribiq:tribiq_cms:5.0.12c:*:*:*:*:*:*:*","matchCriteriaId":"B3A3C527-A995-4D59-A24E-ABA925AE0D1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35535","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9012","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35484","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2221","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHP-I-BOARD 1.2 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:php-i-board:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"6BA98EB6-4EAF-440E-B295-E1FA8842B07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:php-i-board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C050F3A-5157-4261-B369-1EE00589ACB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:php-i-board:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5AA5B33F-CC62-4E84-BAE7-FD4A51B52418"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN20219071/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html","source":"cve@mitre.org"},{"url":"http://php.s3.to/bbs/bbs8.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/jp/JVN20219071/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.s3.to/bbs/bbs8.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2222","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en PHP-I-BOARD 1.2 y versiones anteriores permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en vectores no especificados, probablemente en relación con el correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:php-i-board:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"6BA98EB6-4EAF-440E-B295-E1FA8842B07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:php-i-board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C050F3A-5157-4261-B369-1EE00589ACB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:php-i-board:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5AA5B33F-CC62-4E84-BAE7-FD4A51B52418"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN32788272/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html","source":"cve@mitre.org"},{"url":"http://php.s3.to/bbs/bbs8.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/jp/JVN32788272/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.s3.to/bbs/bbs8.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2223","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter.  NOTE: remote file inclusion attacks may be possible."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en locms/smarty.php en LightOpenCMS 0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante un .. (punto punto) en el parámetro cwd. NOTA: puede ser posible realizar también ataques de inclusión remota de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teozkr:lightopencms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"695282F0-6020-422F-91A0-5CBF944E56BF"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9015","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2224","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en ang/shared/flags.php en AN Guestbook 0.7.8, ,cuando register_globals está activado, permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro g_lang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:an_guestbook:an_guestbook:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"8687976D-A3AB-4487-863A-A7BB51533295"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2009-June/002196.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35486","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2009-June/002196.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2225","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted (1) m3u or (2) pls playlist file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en SureThing CD/DVD Labeler 5.1.616 trial version permite a atacantes remotos con la ayuda del usuario ejecutar código de su elección mediante un fichero de playlist manipulado (1) m3u o (2) pls. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surething:surething_cd\\/dvd_labeler:5.1.616:-:trial:*:*:*:*:*","matchCriteriaId":"5DA9D8AB-4EC7-4751-B7F0-F5F6CA007F21"}]}]}],"references":[{"url":"http://osvdb.org/55297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/43852","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51331","source":"cve@mitre.org"},{"url":"http://osvdb.org/55297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/43852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2226","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T15:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Let's PHP! Tree BBS 2004/11/23 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php.s3:tree_bbs:*:*:*:*:*:*:*:*","versionEndIncluding":"2004\\/11\\/23","matchCriteriaId":"FB68A617-EB08-4D2E-B9CA-370EC34F553B"}]}]}],"references":[{"url":"http://jvn.jp/jp/JVN93827000/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000044.html","source":"cve@mitre.org"},{"url":"http://php.s3.to/bbs/bbs6.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/jp/JVN93827000/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://php.s3.to/bbs/bbs6.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2227","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Bopup Communication Server de B Labs versión 3.2.26.5460, permite a los atacantes remotos ejecutar código arbitrario por medio de una petición diseñada al puerto TCP 19810."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blabsoft:bopup_communication_server:3.2.26.5460:*:*:*:*:*:*:*","matchCriteriaId":"0EBE34A8-9E4F-4EEF-B201-0032CE4CD815"}]}]}],"references":[{"url":"http://osvdb.org/55275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9002","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51305","source":"cve@mitre.org"},{"url":"http://osvdb.org/55275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2228","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via the url parameter in a redirect action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en engine.php in Kasseler CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro url en una acción redirect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"A532D8D2-AD71-488B-844D-80499C875D14"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35457","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2229","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter during a download action, a different vector than CVE-2008-3087.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en engine.php en Kasseler CMS 1.3.5 lite permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro file durante una acción de descarga, un vector diferente que CVE-2008-3087. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kasseler-cms:kasseler_cms:1.3.5:*:lite:*:*:*:*:*","matchCriteriaId":"01A6535A-E9B5-4965-AA2C-E24AD8617AF7"}]}]}],"references":[{"url":"http://secunia.com/advisories/35523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8997","source":"cve@mitre.org"},{"url":"http://www.kasseler-cms.net/engine.php?do=attach&file=uploads/forum/17555/1.3.5_to_1.3.6.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kasseler-cms.net/forum/showtopic/1929/2.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35457","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kasseler-cms.net/engine.php?do=attach&file=uploads/forum/17555/1.3.5_to_1.3.6.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kasseler-cms.net/forum/showtopic/1929/2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2230","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en inc/datahandlers/user.php en MyBB (alias MyBulletinBoard) antes de v1.4.7 permite a atacantes remotos autenticados ejecutar comandos SQL de su elección a través del parámetro birthdayprivacy ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.6","matchCriteriaId":"8605C19E-93AA-4344-9F02-18D6042D3310"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"858E3AD8-8A7C-4B33-A2AA-3C543D46E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0F3B187F-D0C5-4001-B877-3B0122784BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D04152D8-60BE-4362-BF68-688DE53A066C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"98789943-2C7D-404E-B61E-04C436C1681C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"678B50B3-D151-40ED-8CAA-C12FC5BA4520"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*","matchCriteriaId":"64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"59C3A929-B608-42FC-BB31-7599146E8CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6F4409B6-9F4D-4136-BA74-43736215A122"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D70B64CF-6EF1-487A-9617-68F904ACE727"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"94EC0E67-111A-4989-A311-6B051D37CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"7F962969-76AF-4CB2-BD20-A02D703B01C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D6942A9C-55E6-4A87-903F-3C8314EA4EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"1DC39A88-9F34-4119-8404-8495735290DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7A15A18B-E4DB-4622-977B-3AA495E2F39A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4494C452-BB14-4180-A26E-572752FA6111"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6FD3E97-2E37-4FE3-83A7-13E489BDFF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A8C6BC25-C1BB-4640-9CC5-F10C0C119C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"04247BE7-8EF5-4A9C-AD27-F29611FA4A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9593588E-1FCC-42E0-9E8D-0A96386C3126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"66A6AF1A-7099-4987-AB45-DA363F29327C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"29F3FD0D-25AB-4D1B-871C-2545FD13EA76"}]}]}],"references":[{"url":"http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mybboard.net/download/104","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35458","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1653","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mybboard.net/download/104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2231","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record in a MIDAS cookie."},{"lang":"es","value":"MIDAS 1.43 permite a atacantes remotos eludir la autenticación y obtener acceso de administración mediante un registro de cuenta de administración en una cookie MIDAS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mid.as:midas:1.43:*:*:*:*:*:*:*","matchCriteriaId":"69403DDB-69F1-4606-A4BF-145E0ED5624B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8987","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51281","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2232","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the size_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en image.php en Softbiz Banner Ad Management Script permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"size_id\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbizscripts:banner_ad_management_script:*:*:*:*:*:*:*:*","matchCriteriaId":"CE58DFBC-AA94-40A0-AAB2-B4860A2ECE89"}]}]}],"references":[{"url":"http://secunia.com/advisories/35549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35453","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2233","sourceIdentifier":"cve@mitre.org","published":"2009-06-26T18:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awse_logged cookie to 1."},{"lang":"es","value":"La interfaz de administración en AWScripts.com Gallery Search Engine 1.5 permite a atacantes remotos eludir la autenticación y obtener acceso de administración mediante la configuración de la cookie awse_logged a 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awscripts:gallery_search_engine:1.5:*:*:*:*:*:*:*","matchCriteriaId":"194C45BE-17CE-4DA5-804C-99ACF4311112"}]}]}],"references":[{"url":"http://secunia.com/advisories/35513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8994","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51276","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2234","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:55.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter ($PHP_AUTH_USER) and (2) Password parameter ($PHP_AUTH_PW)."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin.php en VICIDIAL Call Center Suite v2.0.5-173 permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) Username ($PHP_AUTH_USER) y (2) Password ($PHP_AUTH_PW)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vicidial:call_center_suite:2.0.5-173:*:*:*:*:*:*:*","matchCriteriaId":"13284FDE-955F-48EE-93DE-AA3288D53B3E"}]}]}],"references":[{"url":"http://www.eflo.net/vicidial/security_fix_admin_20090522.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.exploit-db.com/exploits/8755","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35056","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50665","source":"cve@mitre.org"},{"url":"http://www.eflo.net/vicidial/security_fix_admin_20090522.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.exploit-db.com/exploits/8755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2235","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:55.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en page.php en Your Articles Directory permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourarticlesdirectory:your_articles_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"272BD15B-48D4-4E33-B1FF-09A32B285071"}]}]}],"references":[{"url":"http://secunia.com/advisories/35192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8762","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2236","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:55.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en yad-admin/login.php en Your Article Directory permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"txtAdminEmail\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourarticlesdirectory:your_articles_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"272BD15B-48D4-4E33-B1FF-09A32B285071"}]}]}],"references":[{"url":"http://secunia.com/advisories/35192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8761","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35059","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2237","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:59.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions)."},{"lang":"es","value":"Vulnerabilidad no especificada en Views Bulk Operations 5.x-1.x antes de 5.x-1.4 y 6.x-1.x ante de 6.x-1.7, un modulo para Drupal, permite a atacantes remotos evitar las restricciones de acceso previstas y modificar \"nodos o clases de nodos\" mediante vectores desconocidos, probablemente relacionado con procedimientos registrados (alias acciones)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"2449F487-D201-4013-B0D4-3D83265E7F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"539260B1-1779-4020-9034-BF8E01D87652"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"C8B77FCD-74E2-48E6-BEDD-702E7CAAF2FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"973F9818-ADD0-41C2-9F41-14346F3E5286"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B337BA-2904-4D32-BB31-4395FDE73E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F4D6AED-090F-4883-8140-1EF244757D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"3B467064-1F6E-4571-92A6-6AAA599382DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"CDE0970F-3691-4344-ADEB-75F02B694522"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:views_bulk_operations:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"54E93443-9E9C-44D3-9B3F-70CAA28A9E23"}]}]}],"references":[{"url":"http://drupal.org/node/468450","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35051","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50659","source":"cve@mitre.org"},{"url":"http://drupal.org/node/468450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2238","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:47:59.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXReady Registration Manager 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/webblogmanager."},{"lang":"es","value":"Vulnerabilidad de subida de fichero sin restricción en includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp en DMXReady Registration Manager 1.1 permite a atacantes remotos ejecutar código de su elección subiendo un fichero con extensión ejecutable y luego, accediendo a él mediante una petición directa al fichero en assets/webblogmanager."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:registration_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"885A9272-DCCB-44B8-95A8-263B7CB90FD0"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503648/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50651","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503648/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2239","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:48:02.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3) casino_videopoker (com_casino_videopoker) components 0.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en los componentes (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack)y (3) casino_videopoker (com_casino_videopoker) v0.3.1 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"Itemid\" para index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_casiino_blackjack:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D2FF1ABE-88DE-42BF-BAA7-3CB226042B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_casino_videopoker:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5EEB4BA8-A15A-4698-9B82-27EFC7F62A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:com_casinobase:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F537A077-E2E4-470F-B44B-8D936A36C551"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35041","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50645","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2240","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:48:02.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AD2000 free-sw leger (alias Web Conference Room Free) v1.6.4 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ad2000:free-sw_leger:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.4","matchCriteriaId":"B7A5B39B-CE14-4F24-B3B7-E0DA25960A6E"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN57036470/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35148","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ad2000.co.jp/service/index.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35068","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN57036470/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ad2000.co.jp/service/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2241","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:48:06.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.asp en ASP Inline Corporate Calendar inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"keyword\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:*:*:*:*:*:*:*:*","matchCriteriaId":"03ED8AAE-FEB4-4FCE-9D54-AAC246DDB55A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35054","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2242","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:48:06.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en active_appointments.asp in ASP Inline Corporate Calendar permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"order\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:*:*:*:*:*:*:*:*","matchCriteriaId":"03ED8AAE-FEB4-4FCE-9D54-AAC246DDB55A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35054","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2243","sourceIdentifier":"cve@mitre.org","published":"2009-06-27T18:48:06.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the sortby parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en active_appointments.asp en ASP Inline Corporate Calendar permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"sortby\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aaronoutpost:asp_inline_corporate_calendar:*:*:*:*:*:*:*:*","matchCriteriaId":"03ED8AAE-FEB4-4FCE-9D54-AAC246DDB55A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2254","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:11.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a \"SQL Execution\" issue."},{"lang":"es","value":"Zen Cart v1.3.8a, v1.3.8 y anteriores no solicita una autenticación administrativa para admin/sqlpatch.php, lo que permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"query_string\" en una ejecución, en conjunción con un PATH_INFO de password_forgotten.php, relacionado con el caso \"ejecución SQL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.8a","matchCriteriaId":"37FB73EA-495B-4C6C-99D2-E10F26AB7A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8C929C74-3510-4A89-96CF-2109271008E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B3D1E7B9-BE05-4F16-8A3C-F0E8B23FF585"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*","matchCriteriaId":"C27DEB51-7745-4B5A-9E23-5491526E857E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*","matchCriteriaId":"96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*","matchCriteriaId":"82CED1DF-15F5-47A2-9C70-F276B466167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"BDB743EA-A17B-406C-81CE-64A52FBB5966"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1BE00024-0295-43BE-8123-56526197B58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"AE050A6F-DF2A-47E8-8188-59BC00C11E70"}]}]}],"references":[{"url":"http://secunia.com/advisories/35550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9005","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55343","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35468","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.zen-cart.com/forum/attachment.php?attachmentid=5965","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=130161","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.zen-cart.com/forum/attachment.php?attachmentid=5965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=130161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2255","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:19.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images/."},{"lang":"es","value":"Zen Cart v1.3.8a, v1.3.8 y anteriores no requiere autenticación como administrador para el acceso a admin/record_company.php, lo que permite a atacantes remotos ejecutar código de su elección subiendo un archivo php a través del parámetro \"record_company_image\" junto con \"PATH_INFO\" de  password_forgotten.php, y después accediendo a este archivo a través de una petición directa al fichero en images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.8a","matchCriteriaId":"37FB73EA-495B-4C6C-99D2-E10F26AB7A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8C929C74-3510-4A89-96CF-2109271008E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B3D1E7B9-BE05-4F16-8A3C-F0E8B23FF585"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.0d:*:*:*:*:*:*:*","matchCriteriaId":"C27DEB51-7745-4B5A-9E23-5491526E857E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.1d:*:*:*:*:*:*:*","matchCriteriaId":"96BA0248-CF20-4DF4-AF6B-4E9CACE8109B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.2.4d:*:*:*:*:*:*:*","matchCriteriaId":"82CED1DF-15F5-47A2-9C70-F276B466167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"BDB743EA-A17B-406C-81CE-64A52FBB5966"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1BE00024-0295-43BE-8123-56526197B58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"AE050A6F-DF2A-47E8-8188-59BC00C11E70"}]}]}],"references":[{"url":"http://secunia.com/advisories/35550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9004","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55344","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35467","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.zen-cart.com/forum/attachment.php?attachmentid=5965","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=130161","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51316","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.zen-cart.com/forum/attachment.php?attachmentid=5965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=130161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2256","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg."},{"lang":"es","value":"La interfaz web administrativa en Netgear DG632 con el firmware 3.4.0_ap permite a atacantes remotos producir una denegación de servicio (caída web) a través de una petición HTTP POST a cgi-bin/firmwarecfg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:dg632:3.4.0_ap:*:*:*:*:*:*:*","matchCriteriaId":"8578D2D2-207E-484E-9D9B-DF16C6AFB4DB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022403","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8964","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504341/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504345/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.tomneaves.co.uk/Netgear_DG632_Remote_DoS.txt","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/8964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504341/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504345/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tomneaves.co.uk/Netgear_DG632_Remote_DoS.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2257","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, and possibly (7) indextop.htm in html/."},{"lang":"es","value":"El interfaz web administrativo en Netgear DG632 con firmware v3.4.0_ap, permite a atacantes remotos evitar la autenticación a través de una petición directa a (1) gateway/commands/saveconfig.html, (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, y posiblemente (7) indextop.htm en html/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:dg632:3.4.0_ap:*:*:*:*:*:*:*","matchCriteriaId":"8578D2D2-207E-484E-9D9B-DF16C6AFB4DB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022404","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8963","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504312/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504312/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2258","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en cgi-bin/webcm en el interfaz web administrativo en Netgear DG632 con el  firmware v3.4.0_ap permite a atacantes remotos mostrar directorios arbitrarios a través de ..(punto punto) en el parámetro \"nextpage\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:dg632_firmware:3.4.0_ap:*:*:*:*:*:*:*","matchCriteriaId":"83E623FB-2533-420C-9BD2-B7951417B962"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:dg632:-:*:*:*:*:*:*:*","matchCriteriaId":"C788C83C-2F5D-4F96-9799-B355DE07B184"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022404","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8963","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504312/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504312/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tomneaves.co.uk/Netgear_DG632_Authentication_Bypass.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2259","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.890","lastModified":"2023-11-07T02:04:05.853","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2608.  Reason: This candidate is a duplicate of CVE-2009-2608.  Notes: All CVE users should reference CVE-2009-2608 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2260","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.920","lastModified":"2025-11-04T22:15:52.483","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"stardict v3.0.1, cuando Enable Net Dict es configurado, envía el contenido del portapapeles a servidor del diccionario, lo que permite a atacantes remotos obtener información sensible esnifando la red."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of stardict as shipped with Red Hat Enterprise Linux 5.","lastModified":"2009-07-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stardict:stardict:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"94554E16-F0A1-4244-BFBC-E5508A0FBCDF"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504583","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00121.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2025/08/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00121.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2261","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command."},{"lang":"es","value":"PeaZIP v2.6.1, v2.5.1 y anteriores en Windows permite a atacantes remotos ayudados por un usuario ejecutar comandos de forma arbitraria a través de un archivo .zip con un fichero .txt que contenga el carácter | (pipe)  y un comando."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:*:-:windows:*:*:*:*:*","versionEndIncluding":"2.5.1","matchCriteriaId":"5BAE717F-F1E3-4ED7-ABF4-0278FC38EB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.0:-:windows:*:*:*:*:*","matchCriteriaId":"9C97585D-254F-4424-B191-4F883B30C14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.1:-:windows:*:*:*:*:*","matchCriteriaId":"82C44B04-593E-4CF0-AD42-BB334E176DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.2:-:windows:*:*:*:*:*","matchCriteriaId":"C79B5F2E-D0F5-4577-8E21-3418255C501C"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.3:-:windows:*:*:*:*:*","matchCriteriaId":"36EC5D88-5737-42CF-8AB2-4078308F6708"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.4:-:windows:*:*:*:*:*","matchCriteriaId":"78AC93CC-DCA4-45BC-9E38-DD806A41EA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.5:-:windows:*:*:*:*:*","matchCriteriaId":"1B4C50DF-A187-42BF-8F7F-2A4C69B86B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.6:-:windows:*:*:*:*:*","matchCriteriaId":"C8412BD8-82A6-4377-8544-A9273C36FF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.7:-:windows:*:*:*:*:*","matchCriteriaId":"D19E5CFB-33DB-4C7B-BAFB-9E1F9CDEB1F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.8:-:windows:*:*:*:*:*","matchCriteriaId":"DB6E2722-06D2-4A60-A221-65CE5AE856EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.8.1:-:windows:*:*:*:*:*","matchCriteriaId":"87C4FA36-D1BA-4FF1-98AE-092506C40567"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.8.2:-:windows:*:*:*:*:*","matchCriteriaId":"851D02FB-A9C2-440B-88EA-AB70B5B1BF56"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.9:-:windows:*:*:*:*:*","matchCriteriaId":"D7FE0505-9806-4E66-A352-3283070AFE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.9.1:-:windows:*:*:*:*:*","matchCriteriaId":"F52F4946-4CEC-4EB4-B0F4-B0A12BE4667D"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.9.2:-:windows:*:*:*:*:*","matchCriteriaId":"05AEFE1A-936E-4BE6-AEBE-2AC1BFAD4EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.9.3:-:windows:*:*:*:*:*","matchCriteriaId":"361139AF-BC1D-4EE6-9878-EEEDB3DACDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.10:-:windows:*:*:*:*:*","matchCriteriaId":"D3DE44AF-831C-4D53-8DA0-161024DD326A"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:1.11:-:windows:*:*:*:*:*","matchCriteriaId":"CBFB9E61-2A80-4751-B9DA-22DC5E3DD458"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.0:-:windows:*:*:*:*:*","matchCriteriaId":"7695DB23-94EF-430B-8E8C-1D928C86E34F"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.1:-:windows:*:*:*:*:*","matchCriteriaId":"C464C2C6-4408-40E4-AB5D-D3A1DD78EEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.2:-:windows:*:*:*:*:*","matchCriteriaId":"229CC0A8-3CA9-4537-B0FC-299A8ACF0D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.3a:-:windows:*:*:*:*:*","matchCriteriaId":"0C5EA38A-9EF7-44CC-8F33-E74098728227"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.4:-:windows:*:*:*:*:*","matchCriteriaId":"7032AB0A-10D4-4627-A374-69AD38EDA4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"B74D1D52-D8C4-41DF-B8E1-A761DCC87C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:giorgio_tani:peazip:2.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"9F78BDEE-0EB3-45CE-BFE8-E1896C378468"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8881","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2262","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:21.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter.  NOTE: the installation instructions specify deleting the install/ folder."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en install/di.php en AjaxPortal v3.0 permite a atacantes remotos ejecutar código PHP arbitrario a traves de una URL en el parámetro \"pathtoserverdata\". NOTA: Las instrucciones de instalación especifican el borrado de la carpeta install/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myiosoft:ajaxportal:3.0:*:*:*:*:*:*:*","matchCriteriaId":"65D28AB1-A48F-480C-8590-048197F0D6B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504618/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504618/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2263","sourceIdentifier":"cve@mitre.org","published":"2009-06-30T10:30:22.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Awesome PHP Mega File Manager v1.0 permite a atacantes remotos incluir y ejecutar ficheros locales de forma arbitraria a través de ..(punto punto) en el parámetro \"page\". NOTA: en algunas situaciones, esto puede ser ayudado mediante la inclusión remota de fichero mediante el uso de una ruta de fichero compartido UNC o un ftp, ftps o una URL ssh2.sftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awesomephp:mega_file_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F3C8CA5D-6C4B-4194-A315-D282CE9EF190"}]}]}],"references":[{"url":"http://secunia.com/advisories/35545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9025","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2265","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en FCKeditor anterior a v2.6.4.1, permiten a atacantes remotos crear ficheros ejecutables en directorios de su elección a través de secuencias de salto de directorio en la entrada de módulos conectores no especificados, tal como se ha explotado en Julio 2009. Está relacionado con el fichero de navegación y el directorio editor/filemanager/connectors/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.4","matchCriteriaId":"5A935AD9-DB0B-47A9-8F5E-9FF2A3310865"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A396BB3-7329-4522-8C5F-99CCA41C9DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0_fc:*:*:*:*:*:*:*","matchCriteriaId":"97BEB138-2E35-4770-BA2B-D78FFC6E6CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"DD08F2AA-D782-419D-945C-D241EB18CBB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"B6F9F4D2-0A3E-49D6-9A58-D9BCDF492E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"CF47BD2F-7AC9-490E-9289-9C259FE4F231"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.1:*:*:*:*:*:*:*","matchCriteriaId":"490C6198-FDA6-45BF-B12F-6F9A52B6F1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"83806F80-BA69-4098-A4F6-1F9577871EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D2823302-CCF1-438B-B962-6EE49D371A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3:*:*:*:*:*:*:*","matchCriteriaId":"43FBB64C-5D5D-43D0-A4B9-B08F0012B9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3:beta:*:*:*:*:*:*","matchCriteriaId":"28B4FB08-9605-4D05-98B6-844F701BFA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"95BF5CD1-7D68-4FBE-8116-23B4D1415B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EE69FFCF-D442-492F-A5F6-56A02E4E9299"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"31A4C3CC-27E5-4962-85B2-404EAF434B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4:*:*:*:*:*:*:*","matchCriteriaId":"665C47D7-40EC-4F52-8EA0-0886EE8A9345"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2271D898-7973-412C-8EA2-EBFD22ABF25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6834FFFF-F463-4F01-BB13-46705B9933A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"68C583B7-5A09-4849-A1E1-600C87854A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F45886E0-9D00-42B4-AF12-87EFED09765C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.5:beta:*:*:*:*:*:*","matchCriteriaId":"72159C7B-3F8E-440F-8248-3A5A991957B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"631C1D5A-191E-40D7-A6E4-25C184314527"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6:*:*:*:*:*:*:*","matchCriteriaId":"2D47CE1F-04A6-4961-B0B3-5A3EC403EE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2C7527-3513-4B72-8C8D-295A3A8BAD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E18F60E3-3723-40F3-A632-C3B8B6157682"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E99B8429-1EBC-483D-87B6-281E2C49E35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.3:beta:*:*:*:*:*:*","matchCriteriaId":"05B5740F-05C0-4155-BC11-50DE6F8285DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.4:beta:*:*:*:*:*:*","matchCriteriaId":"B9D86941-B839-43CC-A97E-CA52339A9871"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=6724","source":"cve@mitre.org"},{"url":"http://mail.zope.org/pipermail/zope-dev/2009-July/037195.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/163271/Adobe-ColdFusion-8-Remote-Command-Execution.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35909","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=695430","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1836","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-007.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504721/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022513","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1813","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1825","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00710.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00750.html","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=6724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.zope.org/pipermail/zope-dev/2009-July/037195.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/163271/Adobe-ColdFusion-8-Remote-Command-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=695430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504721/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00710.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2266","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T17:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie."},{"lang":"es","value":"OXID eShop v4.x anterior a v4.1.4-21266, v3.x, y v2.x, permite a atacantes remotos obtener información sensible (detalles de sesión y orden del histórico de otros usuarios) a través de una cookie manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"2.7.0.3","matchCriteriaId":"B419C941-7801-40D4-B2BD-BD164714373B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:*:*:professional:*:*:*:*:*","versionEndIncluding":"3.0.4.1","matchCriteriaId":"76797267-F284-43E9-9B4B-76FCF0D5CF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:community:*:*:*:*:*","matchCriteriaId":"35418237-65BC-4D9A-BBF0-B493AE5D614C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:enterprise:*:*:*:*:*","matchCriteriaId":"F0FFF17B-3157-4EC7-8771-0E80DC660AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:professional:*:*:*:*:*","matchCriteriaId":"B1DF3C0C-7C52-4CCF-852B-547E967C297D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:community:*:*:*:*:*","matchCriteriaId":"88F9BFE8-1F36-401E-B61E-05094B40DC2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:enterprise:*:*:*:*:*","matchCriteriaId":"78EABFE9-C31D-4010-85ED-2F4695CEEDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:professional:*:*:*:*:*","matchCriteriaId":"09F5D5DA-2667-4EC7-BC17-7A5EDD555E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:community:*:*:*:*:*","matchCriteriaId":"EC8BD657-13BE-4AA8-97CF-BACA19D09BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:enterprise:*:*:*:*:*","matchCriteriaId":"F137D711-4793-41D7-8F93-18A9CB5BBE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:professional:*:*:*:*:*","matchCriteriaId":"D7478417-B8F4-471E-8FDF-E4F0AE201306"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:community:*:*:*:*:*","matchCriteriaId":"06FF6116-54F6-4891-B625-155F4390F20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:enterprise:*:*:*:*:*","matchCriteriaId":"1788B08F-7904-4922-868A-DD3F080D420C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:professional:*:*:*:*:*","matchCriteriaId":"74A7D3CB-5183-4191-88BC-2D9005078C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:community:*:*:*:*:*","matchCriteriaId":"677CFAC0-64FF-46BE-92EE-4F23EB2A86BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:enterprise:*:*:*:*:*","matchCriteriaId":"34A9F0DE-D85A-4D22-A2C9-6627D1240E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:professional:*:*:*:*:*","matchCriteriaId":"A1CBE1A6-B4B1-4DEA-9BC0-0E341D3EEDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:community:*:*:*:*:*","matchCriteriaId":"8E9A0B9A-0514-4ACE-95AB-7B270C9CDD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:enterprise:*:*:*:*:*","matchCriteriaId":"13FCEFC1-F560-4DB6-B5F7-9B66B72B8E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:professional:*:*:*:*:*","matchCriteriaId":"3906AE67-EF4D-41EF-BF38-3159223FBF30"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:community:*:*:*:*:*","matchCriteriaId":"2D1FDBC8-7451-483E-BE6C-1B95596233C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:enterprise:*:*:*:*:*","matchCriteriaId":"70ABDEB3-A81F-4D63-B2AE-D86C63BC07FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:professional:*:*:*:*:*","matchCriteriaId":"279D75B5-88C3-4B6F-986E-244F4135F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.0-17976:*:community:*:*:*:*:*","matchCriteriaId":"09C1716A-0B38-4E1D-9E1A-FD0E5E06A1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.0-17976:*:enterprise:*:*:*:*:*","matchCriteriaId":"E2C078EE-8AE9-4CB5-B5F2-A35C824B99CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.0-17976:*:professional:*:*:*:*:*","matchCriteriaId":"5830331E-8B65-4EDF-BF6C-9907F73C65E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.1-18442:*:professional:*:*:*:*:*","matchCriteriaId":"D51ABC69-676C-410D-8D63-884A614396BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.2-18998:*:community:*:*:*:*:*","matchCriteriaId":"91680B03-7671-4A9F-8366-EB27BFAA64C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.2-18998:*:enterprise:*:*:*:*:*","matchCriteriaId":"D460A617-8ECD-4EFD-A9D8-46A262AB57BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.2-18998:*:professional:*:*:*:*:*","matchCriteriaId":"140C7C21-60D3-4C0A-B964-56F27C53C384"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.3-19918:*:community:*:*:*:*:*","matchCriteriaId":"E72F522A-6901-4B41-9ADD-4F66A495F0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.3-19918:*:enterprise:*:*:*:*:*","matchCriteriaId":"F288FEDB-3AAD-4A4A-8526-9844EE0E5328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.3-19918:*:professional:*:*:*:*:*","matchCriteriaId":"32FDCF5F-6AE0-4AD3-833C-159348FBF125"}]}]}],"references":[{"url":"http://www.oxidforge.org/wiki/Security_bulletins/2009-003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oxidforge.org/wiki/Security_bulletins/2009-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2267","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register."},{"lang":"es","value":"VMware Workstation v6.5.x anteriores a v6.5.3 build 185404, VMware Player v2.5.x anteriores a v2.5.3 build 185404, VMware ACE v2.5.x anteriores a v2.5.3 build 185404, VMware Server v1.x anteriores a v1.0.10 build 203137 and v2.x anteriores a v2.0.2 build 203138, VMware Fusion v2.x anteriores a v2.0.6 build 196839, VMware ESXi v3.5 y v4.0, y VMware ESX v2.5.5, v3.0.3, v3.5 y v4.0, cuando el modo Virtual-8086 es usado, no asigna adecuadamente el código de excepción para una excepción de fallo de página (también conocido como #PF), lo que permite a usuarios del SO anfitrión obtener privilegios en el SO anfitrión especificando un valor modificado para el registro cs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E62960B2-91AE-4DD7-8085-9BA6BCB84473"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B037838B-072E-4676-9E5D-86F5BC207512"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B6F7416-E694-4EC9-9FE5-0C24448ECB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"889DE9BE-886F-4BEF-A794-5B5DE73D2322"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6BDAA7C8-8F2F-4037-A517-2C1EDB70B203"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8E18541B-36B6-40A7-9749-FA47A10379C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A6DA47C9-3D1A-49A7-8976-AE05D6730673"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"692CC131-5C6C-4AD6-B85C-07DF21168BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"617EFBFF-D047-4A0B-ACB6-83B27710F6F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F1D0DF91-17E8-45D4-B625-737FE50C23CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"62DA49FA-6657-45B5-BF69-D3A03BA62A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73EC33AB-E92A-4AA8-A523-C341133BB515"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53197903-0614-4460-8944-C1B5257D71A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F037B05F-6F92-4BE1-B672-F677CBEFD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42049891-38B7-4BB7-8DA5-A87169E2D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"07139DF7-C36B-4FED-8558-7FA49BE0BCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E0D7307-5946-45DC-88D3-6BC72EF50184"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"89699BB6-9E41-41DC-B597-B45CA05313A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2786E370-6108-4695-B0A8-9F19D8E3C0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3C2AAA6D-A31D-43A7-AB2F-FBF9815A9745"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6CFDD84-A482-42C2-B43F-839F4D7F1130"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"541D77A2-99C5-4CDB-877F-7E83E1E3369E"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023082","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507539/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36841","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3062","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507539/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2268","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://secunia.com/advisories/35651\r\n\r\n\"NOTE: This only affects Sun Java System Access Manager if Cross-Domain Single Sign-On (CDSSO) functionality is enabled.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el Cross-Domain Controller (CDC) servlet en Sun Java System Access Manager v6 2005Q1, v7 2005Q4, y v7.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6:*:*:*:*:*:*:*","matchCriteriaId":"51EDB8CC-FD50-468F-BF06-91F415E1532D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:linux:*:*:*:*:*","matchCriteriaId":"6FAE06D6-34FF-45CA-9CD9-841817E787FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"C45AE084-74CB-47C7-8103-EBDEE2C3A2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"97A8B7AC-8343-4CDB-8757-12648D0C5B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"84B5BE3F-27E7-4B3B-BD7B-A614DA625A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"3BE405DA-2ACF-4935-99D9-2E8940FBA279"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"3566E0BB-A6B9-49A0-9B6C-918A1F11CE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.0_2005q1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"0A666DA6-E83C-4B37-913E-3FAD7B9EE4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D88350FE-285D-4144-B7DC-5E1F8579CC56"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:hp-ux:*:*:*:*:*","matchCriteriaId":"2807FF5E-F638-4F08-B34C-4532C1BC9908"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:linux:*:*:*:*:*","matchCriteriaId":"34B7F28D-CBA5-44F7-AE6E-5EEB0EAF63B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:solaris10_x86:*:*:*:*:*","matchCriteriaId":"7A0F58C0-642D-4FC2-94B6-35D3CA936DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:solaris9_x86:*:*:*:*:*","matchCriteriaId":"85E0C292-E453-4F14-915A-41AB7FBF21F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*","matchCriteriaId":"B7821A43-2549-4B75-A201-95A3AC58E8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0B5B089E-62AC-44E5-9462-DC439C7AA8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"4CCDA95C-0EFF-4CF4-8CC6-EF110F0DAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"28F24915-078C-4E4B-B173-671F0ABF9656"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"AD06B92E-C23C-4648-A585-14FC54538FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"4930E838-993A-4DA1-B504-4675EE20CF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"2A857F82-4146-48E9-8568-19393AC3856B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"2D28C8EF-7525-48A0-A13A-EA95479A3B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*","matchCriteriaId":"36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"B56B9BD3-2708-46C3-850D-865599F88BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"B6391170-5831-4303-85E5-A51BB431E788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"745D8651-B97C-48A9-AE4F-603A34516919"}]}]}],"references":[{"url":"http://secunia.com/advisories/35651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256568-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020343.1-1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256568-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020343.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2269","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Empire CMS v5.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"bid\" a la URI por defecto bajo e/tool/gbook/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phome_empire:phome_empire_cms:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8C65FD0F-73B6-4FB0-9BCD-AB9F451ACFEF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504652/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504652/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2270","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en member/uploads_edit.php en dedecms v5.3, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una doble extensión en su nombre, después accediendo al mismo a través de vectores no especificados, como se ha demostrado con el nombre de archivo .jpg.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dedecms:dedecms:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BC5ABE83-353D-4675-B62D-E3EA95BD458D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504653/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504653/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2271","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"El Huawei D100 tiene (1) una contraseña de administrador por defecto para acceder al interfaz web sin forzar el cambio de esta contraseña; y (2) tiene una contraseña por defecto de administrador para el interfaz telnet; lo que facilita el acceso a los atacantes remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*","matchCriteriaId":"4A83378E-CAC4-4D97-A765-6DA634B1194A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35638","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2272","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors."},{"lang":"es","value":"El Huawei D100 almacena las credenciales de la cuenta de administrador en texto plano en una cookie, lo que permite a atacantes dependientes del contexto obtener información sensible (1) leyendo la cookie, (2) rastreando la red en busca de cabeceras HTTP y posiblemente mediante el uso de otros vectores no especificados."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:d100_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3888666F-8B81-4535-A654-A9F5A5C3C5CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*","matchCriteriaId":"4A83378E-CAC4-4D97-A765-6DA634B1194A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2273","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"La  configuración  por defecto del componente Wi-Fi del Huawei D100 no emplea cifrado, lo que facilita a atacantes remotos el conseguir información sensible espiando la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:d100_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3888666F-8B81-4535-A654-A9F5A5C3C5CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*","matchCriteriaId":"4A83378E-CAC4-4D97-A765-6DA634B1194A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2274","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents."},{"lang":"es","value":"El Huawei D100 permite a atacantes remotos obtener información sensible a través de una petición directa a  (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, o (3) lancfg.asp en en/. Relacionado con el uso de JavaScript para proteger los contenidos contra la lectura de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:d100:-:*:*:*:*:*:*:*","matchCriteriaId":"4A83378E-CAC4-4D97-A765-6DA634B1194A"}]}]}],"references":[{"url":"http://secunia.com/advisories/35638","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504645/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2275","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. (dot dot) in the domain parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en frontend/x3/stats/lastvisit.html en cPanel, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"domain\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","matchCriteriaId":"DCA10E29-1DDD-44D8-A7D9-74BE0315CE4E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9039","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35518","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022490","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51426","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2276","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en voteforus.php en la extensión Vote For Us v1.0.1 y anteriores para  PunBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"out\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:biglle:vote_for_us_extension:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"7EB70F3A-EC40-4978-ADDB-D10968B6D8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:biglle:vote_for_us_extension:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97E71A83-39E3-4BED-9600-D14C87FD4013"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9058","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2281","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840."},{"lang":"es","value":"Múltiples desbordamiento de búfer basados en memoria dinámica en la función readPostBody en cgiutil.c de mapserv en MapServer v4.x hasta v4.10.4 y v5.x anteriores a v5.4.2, permite a atacantes remotos ejecutar código de su elección a través de (1) una cabecera de HTTP \"Content-Length\" manipulada o (2) una petición HTTP larga, relacionado con un desbordamiento de entero que provoca una desbordamiento de búfer basado en memoria dinámica. NOTA: Esta vulnerabilidad existe por un corrección incompleta de CVE-2009-0840."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7362D32E-07AF-4DFB-A7EE-B92A2949FCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"16812C55-8E9F-4035-92E6-D2C7AF4F5B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5C11F257-809F-4F7C-B5B1-5D407B983DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3AFFE501-B4E0-4352-8C8D-44531E8A6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"426DC6E0-2DA2-4815-B08B-EE2CF20AE3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEE70D8-0EC2-4855-81C8-9FECCD9C16BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE55464C-FD27-47BF-9941-26EE7968BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E01A6111-3A73-4033-8333-4929A6A22CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CE4F9152-4BA9-4742-9041-9707BB4B505F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F27BB1D-165E-4414-AB9B-5BBDF4268F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9305883D-8626-448C-8B1A-074158F518DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04D30449-7EEB-42C4-9F11-4E6EE39C18F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DE53FF73-329B-4384-B636-2F4050778FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B52B92DB-535F-45B7-AF32-B97216A4C4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C410FF2E-E1C6-4238-94ED-3EC6389C961D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"279DE3C1-7BEB-43A4-A91B-06D3A53C30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*","matchCriteriaId":"279EDC4E-87CC-48ED-B735-84F96DC5796E"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*","matchCriteriaId":"53AB964F-61BD-4EC5-8469-7DB371154455"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C27C5F5A-6B68-4723-809B-C482238F9647"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"43CFB610-77A2-436E-ADD0-C0D647AF56DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"ED26BFDF-0C8C-4BEF-BB2D-FA7ADB95AFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E86BD-2358-46D5-BBB5-147168001578"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*","matchCriteriaId":"C6257B30-61DC-4838-92E6-D9938224BFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:4.10.4:*:*:*:*:*:*:*","matchCriteriaId":"3F28AEC9-4A65-4C66-90B2-4B3B83B2C91D"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C661B582-E2F6-4E91-A47C-E91CCB0ECF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"7E60110D-1CED-47BE-8565-FE858BEFF44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8B061F26-EF3F-48CC-A974-5B49A622C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"0870B801-E121-47D8-9C88-B01C7AB6ED3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"B0F320C0-1A33-4768-9BB1-09C6554A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"81C28558-F40D-48B9-B98C-F30709C89AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"DCEF61F4-F4CE-4E33-A67C-17B1D0185BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"65E266D2-C1F2-4400-9E41-AEB2F116C733"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9161B916-5EED-46C4-8E0C-515A0B6D2902"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C9689CB4-A70C-42D7-91E0-68057D9D4779"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6767A7E5-7A2C-452D-A6EB-9C61B43DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"119B427D-87AC-4DD8-AD13-B8CFC847A947"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"57221C0B-EE09-4EB6-AE21-3C31393EB922"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74EEC8BC-A00F-4DCF-B787-5B95699DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"D9030BE8-663A-4F46-B255-0AEBFD790DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4A456E60-8073-4726-AC77-573DCA877FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5A6832D8-7E2B-457A-ABBC-09761DD73ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"38513CAF-212E-495E-844F-09554FAC0B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"20037250-ACD8-4425-898E-A5E857E3D159"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"6173ECB3-07D7-43D7-8B0A-C524C5E9F231"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"753D71D6-4535-475D-96F1-42217F9ADE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"517783AC-5678-48B9-A3FE-BEDCE1176651"},{"vulnerable":true,"criteria":"cpe:2.3:a:osgeo:mapserver:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"577E45A9-D259-4DD3-803F-459640673865"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"203F6A08-17BF-4F82-82C5-E0653C2100F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E939104D-9765-4DBF-AA1D-97EBBE515972"},{"vulnerable":true,"criteria":"cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"93188DA2-4137-4291-9FDC-469D933C9602"}]}]}],"references":[{"url":"http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT","source":"cve@mitre.org"},{"url":"http://trac.osgeo.org/mapserver/ticket/2943","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/01/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/01/6","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.osgeo.org/mapserver/ticket/2943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/01/6","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2282","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors."},{"lang":"es","value":"El demonio Virtual Network Terminal Server (vntsd) para Logical Domains (también conocido como LDoms) en Sun  Solaris 10, OpenSolaris snv_41 a la snv_108, sobre plataformas SPARC no validan la autorización para el acceso como invitado a la consola, lo que permite a los controladores de dominio locales obtener privilegios como invitado del dominio a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:sparc:*","versionStartIncluding":"snv_41","versionEndIncluding":"snv_108","matchCriteriaId":"B66593B0-4817-459F-A941-A513EA31CF2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:sparc:*","matchCriteriaId":"2B10E22E-B81A-4CB0-98E3-EFEC090E9592"}]}]}],"references":[{"url":"http://secunia.com/advisories/35547","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141778-01-1","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262708-1","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/55329","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35502","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/35547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141778-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262708-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/55329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/35502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2283","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruxados (XSS) en help jsp scripts en Sun Java Web Console v3.0.2 a la v3.0.5, y Sun Java Web Console en Solaris 10, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2E0D3747-9ACD-40F4-9433-823489249416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"1533E3FF-D600-42D5-9E85-B1059871D14A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:solaris8_sparc:*:*:*:*:*","matchCriteriaId":"514EAF6E-AA16-4488-9681-5BE4CDB093A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:solaris8_x86:*:*:*:*:*","matchCriteriaId":"B75F441A-A601-4498-A1AC-8C229CC20151"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:solaris9_sparc:*:*:*:*:*","matchCriteriaId":"58FB5260-0C6E-458E-96B3-821E87A5461E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"1E394A83-4A9B-4C5F-8BB1-F02A11DDE0CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DD7786C0-4367-4224-BDA9-C5A0F466A6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:linux:*:*:*:*:*","matchCriteriaId":"97486A99-BAED-4037-A3F2-6D612441F851"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:solaris9_sparc:*:*:*:*:*","matchCriteriaId":"684C5517-C9DE-46D8-B2B1-10B41241C525"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:solaris9_x86:*:*:*:*:*","matchCriteriaId":"ED02804C-9C67-4327-9CC0-E04D64586AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"F0CA6D39-929A-47B8-8E7C-F9FA3EB39E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C77A7094-D272-4A30-B79A-FE9D0301FA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:linux:*:*:*:*:*","matchCriteriaId":"1DE7D4BA-AB64-4940-AA58-6A987F2B0231"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:solaris9_sparc:*:*:*:*:*","matchCriteriaId":"41F49B2D-DE7D-4D19-A89B-5B3F90929321"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:solaris9_x86:*:*:*:*:*","matchCriteriaId":"24C0BC37-E25E-4CA5-9BA1-D3F05ED62A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"82432AD2-0E2D-41ED-B79D-C36704D531D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"642641D5-A711-42AC-BA14-2EA789844EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.5:*:linux:*:*:*:*:*","matchCriteriaId":"136D5CB1-9F76-4D9E-A867-699D64EEA352"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.5:*:solaris9_sparc:*:*:*:*:*","matchCriteriaId":"D8A27771-0D5A-4A4E-8CC1-8D69001BD346"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.5:*:solaris9_x86:*:*:*:*:*","matchCriteriaId":"9A1775BB-BBD0-4513-A4FF-A3EAFE060592"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_console:3.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"358DF675-DF21-44DA-9715-07E2D954DE8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/35597","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-03-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262428-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262428-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2284","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin anterior a v3.2.0.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de un favorito con una sentencia SQL manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.0","matchCriteriaId":"CBEB6E81-2E97-45FF-9764-C50820F33B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"784EF815-B20A-4D26-8FCA-04BCBAD65BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"91ABFE90-9D9D-40FD-A2ED-A7021DFCC301"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2:*:*:*:*:*:*:*","matchCriteriaId":"40B0D6C2-AF9E-4395-861D-64502D82589A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9C3663CE-AF25-4A0A-811E-DE58B7E5D934"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"6F14B08F-6583-4686-B534-616D42B7D90B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"D4CD5425-79A4-4506-8BDA-299449EB51DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F754BBA9-765F-4BDE-9AF3-3DA4300B17C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7A136E97-05EA-4ADF-82F5-E2D0C7737D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"53AE58C1-CB8C-415F-BF58-BD356D3AC000"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F666B78D-5DC9-4256-8A23-A4021AE7044A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"229DE8B7-489B-4848-B1BE-2339CB771573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D9BC58E6-CA26-4760-A6A4-D65184A50539"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"ACE7C97E-60C6-417F-86F7-963ADE52A895"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"ADDE752A-19A1-4910-9C56-0FDFFA367E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3FF189AE-9485-4F8C-AAAE-25088DF6F964"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre2:*:*:*:*:*:*:*","matchCriteriaId":"643C7F9B-B8C5-4C76-B706-F8CB5A800936"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"560BC57D-BDCE-4479-9847-6DB53A89FFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4859644F-E5FF-4AE4-B16D-CC2243964D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"48888218-B238-4F0D-A4C2-E9877D3F3A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A393256A-A5BE-4467-8058-E9CA5D626D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9C4839-2356-4630-BDB3-4A0171F3A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6F6E3468-78AF-471C-A09E-1ACCC6867256"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DF345665-3C1D-4F44-B648-B695D88267BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"F2C525B9-636F-49B9-B528-50AEB0E98F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*:*:*:*:*:*:*","matchCriteriaId":"DFB3EBBF-E696-48D1-B3BA-B3C88C050F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"74632C65-6711-4425-A43F-CCF1664C8542"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl1:*:*:*:*:*:*:*","matchCriteriaId":"BD740315-190A-43B7-8399-9B72FA592AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_pl3:*:*:*:*:*:*:*","matchCriteriaId":"794AE77E-843C-4CB4-9462-E4FE8C4C2896"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E291BCAA-E2B5-4127-92DA-0BD48EACB6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3B51601C-EDDC-41B7-82E9-EA4E7745F935"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_dev:*:*:*:*:*:*:*","matchCriteriaId":"704C4359-A80E-456F-AA69-D188E4DFDBA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"DCE1E983-6EA4-4E0F-B7F8-B0070F8A3752"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D7BD9F5E-B01D-4F1E-8BC2-F140ACF1472F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"5DAB33AF-D8A9-444F-AC69-FACCFA0EEB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.3_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D1600D28-5583-4FA2-835F-BCE10813DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"EAEA71B2-99EE-4975-A46B-A38112CD4F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl1:*:*:*:*:*:*:*","matchCriteriaId":"80AAD482-064D-4CFB-A1AE-49095036485A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl2:*:*:*:*:*:*:*","matchCriteriaId":"33423F75-0F5A-49F6-BF70-66DC2CE39E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*","matchCriteriaId":"6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl4:*:*:*:*:*:*:*","matchCriteriaId":"CD3C5C9D-A802-40F3-B3CE-593CFED745CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D8FE9713-54BE-4A70-82F8-03B8E1915E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7:*:*:*:*:*:*:*","matchCriteriaId":"0611660F-F060-453C-8BE2-1599FE3FF9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"2887738D-57A8-4E43-8498-5C8D0FAAA030"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"892F5D72-1814-48A5-8CCA-A74EE9D633CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"E25A359B-8FFD-4941-9419-4E99373D9588"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"1F79633E-19C0-4448-92F1-7C291C9CCD6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"FBD9FD0D-2786-43BB-938B-A45D9B60E08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"4D3CE1C3-59FF-457F-8579-996CA60CF6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"60F2B3C2-0EDB-48D3-92BC-B1CA0E41F230"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9852676-A91F-4FD6-A734-BF7E048411FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FC64B22B-E415-4510-A0DF-CE4763A423D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"12375469-DD81-42BE-8BC0-FCAB0D2D6253"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FCEF6246-C393-41BE-BABC-840585795D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.1_dev:*:*:*:*:*:*:*","matchCriteriaId":"E384B8D4-C72C-4D3D-A25F-26FB5F1D4B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A2ACC829-CF64-4F20-8827-AA95002A6F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"05D4C98E-D127-40EB-BE71-A6BB91D4392C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C26B2DE-669F-4F79-99AE-3210662AAB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9:*:*:*:*:*:*:*","matchCriteriaId":"E4B64201-5B5B-4D22-B341-C601DC54BFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"44DA3E88-1572-484D-A4DB-A99EF7D73129"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E65F392-A841-461A-921C-91F40330F3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5A7F2F4E-7DCC-43F8-BB69-BE553C2F8F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1CDE3326-8B3F-4C3A-BA40-6F91CDFAFA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"36C4A673-5ACD-4D1A-A780-5CD279230051"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_dev:*:*:*:*:*:*:*","matchCriteriaId":"0534C39C-A421-4C97-8A96-A74ABFA78B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9BD0DFB0-92F1-4914-A637-A2EBCE0A9BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E6354257-6B1A-4729-9EE2-19D3CD2AD62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4686B445-3843-4173-8565-16BF364EF911"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"1519A451-0EC8-4718-991D-948572C08410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"9ACAA116-2853-456B-BC9C-B036A0F99FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A8AF5A1A-328E-43A1-8C41-0DAB1F337FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B3130CFD-FF94-48D2-BF9A-D7FDD3CD6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA8D87A-D161-4CC4-8E71-FD2407EA247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E6C869A-0307-40D9-85D6-05453B6BEA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CABB8831-0951-4E3B-B983-FC390A622FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEE37166-AC6C-473A-8266-38417C6F2167"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC01AB6-A640-45FF-8971-593A49AD3694"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.01:*:*:*:*:*:*:*","matchCriteriaId":"65D9D3A9-CC69-40B7-9FBF-9A18A4342FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C15B2C-D4A9-4946-8EB9-B6C131D6E8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"439ED5A5-7720-4FB4-AFE9-D6F2625D98D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"795B4F23-BA5E-466B-9FC3-C7A00A110774"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"F57B4C9F-FF70-44D4-9577-FE6C4BC69828"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EC1F099-04AC-4210-8477-07B21E087162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"D86CCE3D-61C1-4A9D-8A54-3D14B9C5BCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*","matchCriteriaId":"346DF9C7-40BE-44FD-BB5A-23F60616E97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B00F4D78-34C3-4934-8AFA-B7283388B246"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0rc1:*:*:*:*:*:*:*","matchCriteriaId":"8F3A44D6-F174-428E-8456-5B7B093D7A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*","matchCriteriaId":"BDA3305E-CBC2-4469-923F-29EDA0402CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1rc1:*:*:*:*:*:*:*","matchCriteriaId":"EF6D9CF4-C9D6-4CDE-86F4-BA46913CE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*","matchCriteriaId":"40CE5E7C-A965-492F-AE85-535C3E5F1B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3rc1:*:*:*:*:*:*:*","matchCriteriaId":"CD5CB748-A953-4CAD-B8F9-21F43D2992E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"52F3DA64-2099-4A4F-9F38-F28255F47BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4rc1:*:*:*:*:*:*:*","matchCriteriaId":"A4843917-B7B1-4871-AE2B-2219C6EB85F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*","matchCriteriaId":"D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5rc1:*:*:*:*:*:*:*","matchCriteriaId":"A217F2AE-185D-4385-8804-475DB12CFA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*","matchCriteriaId":"4EFCA67E-49E1-41FF-8B40-0209FF7893FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AF4BA83-50C0-4D90-9755-CC99A0FF987E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6rc1:*:*:*:*:*:*:*","matchCriteriaId":"CC99B93D-2171-40DE-90B3-61D6DB9F6D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*","matchCriteriaId":"8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A26E7D37-FA99-42EA-8E19-ED2343E8E70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A982E152-5A20-4A3A-9A98-6CF9EEF9141A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA11353-1DD1-4593-84E8-1D3CBB2C2166"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0C19FB-60DF-440F-9A32-B9C62EBA9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9716FC40-F759-4D24-9604-7A2DB32A8F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:*:*:*:*:*:*:*","matchCriteriaId":"5899F407-1D31-452A-954C-966895ED7D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"EDFDEFBE-E512-4B0C-BBEC-8FCA29228DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"D6583C3A-EB4E-4F8C-ADFD-1B19E879414C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1-rc1:*:*:*:*:*:*:*","matchCriteriaId":"6DFB2783-EB5A-42AD-97FC-1BB226527BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F21917E9-A820-4A5F-B38B-E3E0F79A380C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"CFAD5F7D-AA93-46B7-996B-B0761143B334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*","matchCriteriaId":"F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3-rc1:*:*:*:*:*:*:*","matchCriteriaId":"78CCE83F-6B8F-4ADA-8E11-8C93BB10C66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0284F72-2126-4BE8-90CA-82D2E4B3E96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C24AEFB1-7070-4F9B-BCDA-60F33C17D536"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4-rc2:*:*:*:*:*:*:*","matchCriteriaId":"310C264A-5657-450F-979E-6EE2B83B5900"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"62E60F6F-C855-45BF-8840-398FA62626EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5-rc1:*:*:*:*:*:*:*","matchCriteriaId":"B0ABF8B6-91C3-466E-B974-E1D7400E1ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"1DD4EF8B-EA44-46F2-9C28-1D9D1D8BA2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"665E32EA-D728-43E4-B646-DAE408A1ECF3"}]}]}],"references":[{"url":"http://secunia.com/advisories/35649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35715","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:192","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2285","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327."},{"lang":"es","value":"Desbordamiento de búfer inferior en la función LZWDecodeCompat en libtiff v3.8.2, permite a atacantes dependientes de contexto provocar una denegación de servicio (caída) a través de una imagen TIFF. Vulnerabilidad distinta de CVE-2008-2327."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"60A24DC5-2DF5-4CA2-A0CD-BE0650CA6F5B"}]}]}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2065","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35866","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35883","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38241","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39135","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-03.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4004","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4013","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4070","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4105","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1835","source":"cve@mitre.org"},{"url":"http://www.lan.st/showthread.php?t=1856&page=3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/22/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/23/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/29/5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1159.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1637","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2727","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/797-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html","source":"cve@mitre.org"},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lan.st/showthread.php?t=1856&page=3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/22/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/23/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/29/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1159.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/797-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2286","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file.  NOTE: this issue only affects compface on distributions that used a certain patch."},{"lang":"es","value":"Desbordamiento de búfer en compface v1.2 y anteriores, permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída) a través de una declaración larga en un archivo .xbm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:james_ashton:compface:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"2270E50C-E7A0-4883-9D93-5CD911B2F603"},{"vulnerable":true,"criteria":"cpe:2.3:a:james_ashton:compface:1.4:*:*:*:*:*:*:*","matchCriteriaId":"AB40AF41-63CA-4810-A997-995C3B44F10C"},{"vulnerable":true,"criteria":"cpe:2.3:a:james_ashton:compface:1.5:*:*:*:*:*:*:*","matchCriteriaId":"54DFA3B2-8285-471C-9A8D-EFE461E5F547"},{"vulnerable":true,"criteria":"cpe:2.3:a:james_ashton:compface:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9C3DBC63-3F05-4373-B1F5-F85FDEB61408"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/29/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/29/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/03/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35863","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/29/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/06/29/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/03/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2287","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function."},{"lang":"es","value":"La funciónkvm_arch_vcpu_ioctl_set_sregs en el KVM en el Kernel Linux v2.6 anterior a v2.6.30, ejecutado sobre plataformas x86, no valida la \"page table root\" (raíz de tabla de páginas)  en una llamada  KVM_SET_SREGS, lo que permite a usuarios locales provocar una denegación de servicio (cuelgue o caída) a través de un valor cr3 manipulado, lo que lanza un deferencia a puntero NULL en la función gfn_to_rmap."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise MRG.","lastModified":"2009-07-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.30","matchCriteriaId":"2968B5F6-9BCE-4A5C-B640-94A483AC1F82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf76358b327368f80c0805e6370c68%3Bhb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=59839dfff5eabca01cc4e20b45797a60a80af8cb","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35675","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36045","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36054","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/30/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf76358b327368f80c0805e6370c68%3Bhb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=59839dfff5eabca01cc4e20b45797a60a80af8cb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2288","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters."},{"lang":"es","value":"statuswml.cgi en Nagios v3.1.1, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres de consola en los parámetros (1) ping o (2) Traceroute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0","matchCriteriaId":"19A78517-7672-4267-924E-1C18F41B10C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA91B05-9578-46D8-A21C-4E3C4AB4936A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b1:*:*:*:*:*:*:*","matchCriteriaId":"52432776-C9C6-4CA7-B3D9-87513CBA5716"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"601958D5-B393-4EFA-9A6F-A5A04A95F4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0b4:*:*:*:*:*:*:*","matchCriteriaId":"2DCEFBFC-38BD-4F78-B068-1A90C6199CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A847327-D74E-460C-9F6F-E04C9B77E0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0879A39F-7C92-4FD3-9FEF-2E7C4F2C0444"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A91E463-D239-4853-8A63-E01EE7DB319F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"0073F69B-C5FA-470A-BA95-9C4E8033F5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.7:*:*:*:*:*:*:*","matchCriteriaId":"1121E86B-13EB-4DE3-816A-002C6DC15A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F7A5D5AC-9E4C-4F3B-A16A-C6DD18DD8D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DDCA77EF-1020-4068-9CDC-5CF3B0CD66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"751C46D5-877F-454B-8488-BBCA10CA4930"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"F4754494-17BE-496E-A7B8-453B3028CC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"CD15E8FA-04D3-4625-BEA5-9F5CC0337699"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"713C5F3E-AA57-4F52-AC0A-9B1F25C25580"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"0AFABA9F-4A45-4150-AED1-897267076A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"830BB564-82FD-4519-A8EA-DCDF74F2BC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9A975310-9591-4EBF-B987-CA43433B4C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8653D6A2-4B5B-4F1D-A898-8F81F29C6FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"D18649FF-8838-432E-93B8-3F8B82B0DEA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta6:*:*:*:*:*:*","matchCriteriaId":"9375EA90-0763-4817-8C7D-2D7E116E043F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:beta7:*:*:*:*:*:*","matchCriteriaId":"C02C2F95-2AC2-4E0C-B5D0-785CDF1EDB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"12E7BC34-65F0-4DD6-8809-F05320955479"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"390CFA92-68AE-4DE9-A199-1B7290A82168"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"1E56F249-3E6A-4764-8CAE-D3E5B6A86AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"953745B7-1381-47F5-8012-E699EFA065CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"87A8A3DA-61AF-4369-ACB0-7D54EEB1DAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"40B7525F-EEE1-4537-BCE6-15DF3E348FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6B831C72-C932-4B8C-8B16-C3BC2672AF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC5BB3C9-BBC6-43D8-830A-38020F50B148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BC9E1C24-9907-44F4-9166-5C679F05DF12"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35688","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35692","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39227","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"cve@mitre.org"},{"url":"http://tracker.nagios.org/view.php?id=15","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1825","source":"cve@mitre.org"},{"url":"http://www.nagios.org/development/history/core-3x/","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022503","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-795-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0750","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126996888626964&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200907-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tracker.nagios.org/view.php?id=15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nagios.org/development/history/core-3x/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-795-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2289","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Arcade Trade Script v1.0 beta, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"q\" en una acción \"gamelist\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadetradescript:arcade_trade_script:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"7C858EBA-41EF-4211-9A0D-05D2FEF8A63D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503801/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503801/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2290","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) account or (2) event task to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Boy Scout Advancement (com_bsadv) v0.3 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en (1) \"account\" o (2) \"event task\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kim_eckert:com_bsadv:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3","matchCriteriaId":"D58FD58E-C8D6-4B86-BABF-C2CE19269BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kim_eckert:com_bsadv:0.0:*:*:*:*:*:*:*","matchCriteriaId":"1723059B-4727-4CF3-803F-D467ADDF7BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kim_eckert:com_bsadv:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1A06E8E4-7EB4-4433-92F3-30169E5EB320"},{"vulnerable":true,"criteria":"cpe:2.3:a:kim_eckert:com_bsadv:0.2:*:*:*:*:*:*:*","matchCriteriaId":"69F11D78-6657-4D27-A192-6CA30EC0CE6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/503794/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35087","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503794/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2291","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when \"Allow users to login using their e-mail address\" is enabled, allows remote blocked users to bypass intended access restrictions via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el módulo para Drupal LoginToboggan v6.x-1.x anterior a v6.x-1.5, cuando \"Se permite el login de usuarios usando la dirección de correo electrónico\", permite a usuarios remotos bloqueados evitar las restricciones de acceso a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"9CA1B3B3-F3E0-4201-853D-2CF762A843B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1275432-7063-4AC4-88AD-39C4E803997C"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"1DECE092-9862-4EF2-9343-9AE75492C5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"CA09DE25-32A1-4F73-88C1-6A3C2FD71AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"75263666-2F4E-4291-ACED-EF2A30337E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-1.x:*:dev:*:*:*:*:*","matchCriteriaId":"C8E2341C-890D-47BD-97CE-85A0D397415D"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:logintoboggan:6.x-2.x:*:dev:*:*:*:*:*","matchCriteriaId":"921A742C-7A0F-4BC7-9909-D0312EE90318"}]}]}],"references":[{"url":"http://drupal.org/node/461662","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/461682","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35081","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54428","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34945","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1312","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/461662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/461682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2292","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Appleple a-News v2.32, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:appleple:a-news:2.32:*:*:*:*:*:*:*","matchCriteriaId":"B4437BD9-DB4E-4976-93E5-F8C8AC20D342"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN42927215/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000030.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.appleple.com/news/index.php?ID=170","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50679","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN42927215/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.appleple.com/news/index.php?ID=170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/54636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2293","sourceIdentifier":"cve@mitre.org","published":"2009-07-01T13:00:01.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter."},{"lang":"es","value":"Optimum Web Design Tutorial Share v3.5.0 y anteriores, permite a atacantes remoto evitar la autenticación y obtener acceso como administradores modificando el parámetro \"usernamed\" en una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tutorial-share:tutorial_share:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0","matchCriteriaId":"D6F1B7E8-9047-4A86-8324-BDECAB89D8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tutorial-share:tutorial_share:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6A234D92-68AC-4803-B09E-7549E01D03E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tutorial-share:tutorial_share:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"14935102-5E68-4D05-A0FB-DD881AF80F54"}]}]}],"references":[{"url":"http://osvdb.org/54704","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8766","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35075","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50685","source":"cve@mitre.org"},{"url":"http://osvdb.org/54704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2294","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values."},{"lang":"es","value":"Desbordamiento de entero en la función Png_datainfo_callback de Dillo v2.1 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de una imagen PNG con el valor modificado (1) ancho o (2) alto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"ED82B0BA-5C9C-4D63-8418-3B45DC8504FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D8FFAC5E-77BD-4BF3-8906-FDF240C8E5C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0DCC27FB-CEA9-4AA5-9A2C-4A4BD7D3B1A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4B31B232-9C62-4FCF-99B8-7C154AF82349"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"61E3A452-0124-4C50-8BBC-64C34C743EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C50FE697-0933-40E3-95BF-C07157E46112"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"47F81343-8538-402B-A5B6-CED15AA2FCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D8859A15-05AB-4883-BA0E-DD96DB2EBE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.42:*:*:*:*:*:*:*","matchCriteriaId":"7B3C6AF7-C4C1-4BD7-A1F2-8CAD91E28F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.0.43:*:*:*:*:*:*:*","matchCriteriaId":"7BE17AFD-F40D-43DB-B45B-222C9262BEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3ED11811-287D-4860-9FDC-2DA5E79514E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D555945-9CD8-4C64-88C9-7165B2F9F6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"735EAB61-5A0B-4FA6-9336-D9DD279996D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"086FA8E2-AB31-4A16-A817-6DDE3D6CF1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1E7DB3E1-3697-4000-B10A-BD9699406CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EE29B322-482D-4F67-88AB-A71FC1343876"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.3:*:*:*:*:*:*:*","matchCriteriaId":"109B06EE-5761-47F7-924D-FCBA32E8D76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F44478CC-17C3-4F1B-AA62-D38148429C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B36E45EF-2659-40BA-B4B8-8BE85BE0A302"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.4:*:*:*:*:*:*:*","matchCriteriaId":"AB0EFCAE-417F-4BA2-B47D-C3798658C857"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"14DF2E87-8CB6-41EE-AE17-93CA27A8B5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"26B89365-6959-4647-A589-994E0060FFB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6:*:*:*:*:*:*:*","matchCriteriaId":"033E89CE-2EE6-41C0-9146-0F1B56C798B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8A0F574E-EB2B-4014-A17F-15C7A31947F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"AE4AB244-DBC9-4CC4-A6F4-A387E516CA1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"26DE54F9-49D5-4994-B666-047F4A0BA243"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"598E7C2A-2BF1-4CD6-A3E6-9547F17E04FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"7DBEA2E6-481F-44FA-8D40-1DBC452A5DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"A7933C08-CB36-41A3-94FA-6F594771D8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.7:*:*:*:*:*:*:*","matchCriteriaId":"AE50669F-DA11-4F51-BD86-0EDC451045AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"75B1797D-CD5F-4875-8FBF-31488BD40282"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6A4A558A-B9DF-44E8-81C9-6925AD22B173"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"436855BE-C8EA-46A0-8B8C-3F0F437285E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"874E4818-DA1A-4D8E-9E32-45011FF4856E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8:*:*:*:*:*:*:*","matchCriteriaId":"D29B4FC0-C665-4AD7-AB97-E4A743230F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A1ACF40C-4A44-451C-934E-1EC11AF6C5EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A7293FB7-4E6F-4ADA-B4A1-2C21BDC0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"E5BB7C24-A110-4204-AF2E-EDEBF58BE252"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"C8F8EDA4-EFDA-47F1-928A-22442DA2355E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.5:pre-dw-design1:*:*:*:*:*:*","matchCriteriaId":"062D40F5-C0E6-44B2-B573-CB846FE72819"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.5:pre-dw-design2:*:*:*:*:*:*","matchCriteriaId":"179E7B4D-6818-4722-9113-2EC3453A5F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.5:pre-dw-design3:*:*:*:*:*:*","matchCriteriaId":"82E27AD6-F43B-4000-A251-770C5FFCC91A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dillo:dillo:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"65DE3B84-383A-4952-ABA1-02099E9693F0"}]}]}],"references":[{"url":"http://osvdb.org/55656","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35647","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-008.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504727/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/55656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504727/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2295","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function."},{"lang":"es","value":"Múltiples desbordamientos de búfer en CamlImages  v2.2 y anteriores, podría permitir a atacantes dependientes del contexto ejecutar código de su elección a través de una imagen PNG manipulada con unos valores de ancho y largo elevados, lo que provoca un desbordamiento de búfer basado en memoria dinámica (heap) en las funciones (1) read_png_file o (2) read_png_file_as_rgb24."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jun_furuse:camlimages:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"DF09EF32-C7EB-44CA-A8DE-F5E661D23AC3"}]}]}],"references":[{"url":"http://secunia.com/advisories/35819","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1832","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504696/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35556","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1874","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504696/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2296","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors."},{"lang":"es","value":"El módulo NFSv4 server kernel en Sun Solaris 10, y OpenSolaris anteriores a snv_119, no implemente apropiadamente nfs_portmon, lo que permite a los atacantes remotos acceso a archivos compartidos, leído, creados y modificados arbitrariamente, a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"A674E851-57CE-4712-854E-C3DA87D61D7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_95","matchCriteriaId":"2DF29037-97A8-4C4C-8602-44922802CB55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_118","matchCriteriaId":"22BE2D7A-8B1C-47C9-A979-D14E034022DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_118","matchCriteriaId":"68420843-8254-4CDC-BF84-BCCEBA174512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/55519","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42550","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35546","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022492","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51450","source":"cve@mitre.org"},{"url":"https://support.avaya.com/css/P8/documents/100058487","source":"cve@mitre.org"},{"url":"http://osvdb.org/55519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.avaya.com/css/P8/documents/100058487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2297","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, related to a \"TX panic.\" NOTE: this issue exists because of a regression in earlier kernel patches."},{"lang":"es","value":"Vulnerabilidad no especificada en el subsistema udp en el kernel en Sun Solaris 10, y OpenSolaris snv_90 hasta snv_108, cuando Solaris Trusted Extensions es habilitado, lo que permite a los atacantes remotos causar una denegación de servicio (panic) a través de vectores no especificado relacionados con la función crgetlabel, relativo a \"TX panic.\" NOTA: este asunto existe por una regresión en parches de kernel anteriores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/35579","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2298","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a CGI request to webappmon.exe.  NOTE: this may overlap CVE-2009-1420."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en rping en HP OpenView Network Node Manager (OV NNM) v7.53 en Linux permite a los atacantes remotos ejecutar arbitrariamente código a través de vectores no especificados, posiblemente relativos a peticiones CGI para webappmon.exe. NOTA: esto puede substituir a CVE-2009-1420."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2299","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data."},{"lang":"es","value":"Artofdefence Hyperguard Web Application Firewall (WAF) módulo anterior a v2.5.5-11635, v3.0 anterior a v3.0.3-11636, y v3.1 anteriores a v3.1.1-11637, un módulo para el Apache HTTP Server, permite a loa atacantes remotos causar una denegación de servicio (consumo de memoria) a través de una petición HTTP con un valor largo Content-Length pero no datos POST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hyperguard_web_application_firewall_project:hyperguard_web_application_firewall:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.5-11635","matchCriteriaId":"1807EA11-DBA6-4364-899B-F62D6DE88057"},{"vulnerable":true,"criteria":"cpe:2.3:a:hyperguard_web_application_firewall_project:hyperguard_web_application_firewall:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.0.3-11636","matchCriteriaId":"7AD94D69-DD65-4C4B-A0D9-BAE8B4461869"},{"vulnerable":true,"criteria":"cpe:2.3:a:hyperguard_web_application_firewall_project:hyperguard_web_application_firewall:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"3.1.1-11637","matchCriteriaId":"78A4B7DB-F76E-422F-B6FD-23560E828BAF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"5A6CD1F4-4C0E-4989-A2B3-DC086E8E80A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/35645","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504680/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/35645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504680/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2300","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request."},{"lang":"es","value":"El interfaz de administración en phion airlock Web Application Firewall (WAF) v4.1-10.41 no trata adecuadamente peticiones CGI, específicamente con parámetros de ancho y alto grande para una imagen, lo que permite a los atacantes remotos ejecutar arbitrariamente comandos o causar una denegación de servicios (consumo de recursos) a través de una petición manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phion:airlock_web_application_firewall:4.1-10.41:*:*:*:*:*:*:*","matchCriteriaId":"213294C0-AC95-4C92-842D-0A6DF0BCCF27"}]}]}],"references":[{"url":"http://secunia.com/advisories/35641","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504681/100/0/threaded","source":"cve@mitre.org"},{"url":"https://techzone.phion.com/hotfix_HF4112","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504681/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techzone.phion.com/hotfix_HF4112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2301","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/."},{"lang":"es","value":"El radware AppWall Web Application Firewall (WAF) v1.0.2.6, con Gateway v4.6.0.2, permite a los atacantes remotos leer código fuente a través de una petición directa a (1) funcs.inc, (2) defines.inc, o (3) msg.inc en Management/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:radware:appwall:1.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"B68C7849-B142-42C4-8C07-0581BA46FDFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radware:gateway:4.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"733EBD27-1EFB-4346-A956-91287D048BAD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504682/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504682/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2302","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo index.php en Topsites PHP de Aardvark versiones 5.2.0 y anteriores, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro q en una acción search. NOTA: más tarde se informó que la versión 5.2.1 también está afectada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.0","matchCriteriaId":"AB296624-CB68-4E12-8560-59C56542A422"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"02BB4B5A-0D58-4696-AF23-8B8A5295FAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CA47010-FD73-4897-A580-4AAE589FE904"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*","matchCriteriaId":"01F8A0E7-7087-46AF-B2EB-29CDA8FD0CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"969B3A92-77E2-4CD5-AA50-604CF12DB668"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C282DA40-217E-4FA1-825E-6EE380F20940"}]}]}],"references":[{"url":"http://secunia.com/advisories/41985","source":"cve@mitre.org"},{"url":"http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504574/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/514423/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35506","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51391","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/514423/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2303","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message."},{"lang":"es","value":"index.php en Aardvark Topsites PHP v5.2.1 y anteriores que permiten a los atacantes remotos obtener información sensible a través de un valor entero negativo para el parámetro start en una acción search, lo que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.1","matchCriteriaId":"CC6EBC91-6369-460F-84B2-26E9255F9D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"02BB4B5A-0D58-4696-AF23-8B8A5295FAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CA47010-FD73-4897-A580-4AAE589FE904"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*","matchCriteriaId":"01F8A0E7-7087-46AF-B2EB-29CDA8FD0CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"969B3A92-77E2-4CD5-AA50-604CF12DB668"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C282DA40-217E-4FA1-825E-6EE380F20940"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"151788A4-3F7E-42E7-B15E-EB7FB19D3AC6"}]}]}],"references":[{"url":"http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504574/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51392","source":"cve@mitre.org"},{"url":"http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2304","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message."},{"lang":"es","value":"index.php en Aardvark Topsites PHP v5.2.0 y anteriores que permite a los atacantes remotos obtener información sensible a través del nombre de una cuenta no existente en el parámetro u en una acción rate, lo que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.0","matchCriteriaId":"AB296624-CB68-4E12-8560-59C56542A422"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"02BB4B5A-0D58-4696-AF23-8B8A5295FAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CA47010-FD73-4897-A580-4AAE589FE904"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8DD9D097-C3E0-4CB3-A802-15D1F807B0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5:*:*:*:*:*:*:*","matchCriteriaId":"01F8A0E7-7087-46AF-B2EB-29CDA8FD0CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"969B3A92-77E2-4CD5-AA50-604CF12DB668"},{"vulnerable":true,"criteria":"cpe:2.3:a:avatic:aardvark_topsites_php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C282DA40-217E-4FA1-825E-6EE380F20940"}]}]}],"references":[{"url":"http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504574/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51392","source":"cve@mitre.org"},{"url":"http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504574/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2305","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\\ (slash slash dot backslash) sequences."},{"lang":"es","value":"La tarjeta de la cámara de seguridad ARD-9808 DVR permite a los atacantes remotos, causar una denegación de servicio a través de la composición de una URI larga de composición //.\\ (barra barra punto contrabarra)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armassa:ard-9808_software:*:*:*:*:*:*:*:*","matchCriteriaId":"A09C31E9-0E6D-42B9-8C1C-CED88A764D3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:armassa:ard-9808:*:*:*:*:*:*:*:*","matchCriteriaId":"707CA487-97E8-44A9-AAE3-A91456D67BEA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35671","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9067","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2306","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini."},{"lang":"es","value":"La tarjeta de la cámara de seguridad ARD-9808 DVR guarda información sensible bajo la cuenta de administrador web con control de acceso insuficiente, lo que permite a los atacantes remotos descargar un archivo que contenga nombres de usuarios y contraseñas a través de una petición directa para dvr.ini."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armassa:ard-9808_software:*:*:*:*:*:*:*:*","matchCriteriaId":"A09C31E9-0E6D-42B9-8C1C-CED88A764D3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:armassa:ard-9808:*:*:*:*:*:*:*:*","matchCriteriaId":"707CA487-97E8-44A9-AAE3-A91456D67BEA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35671","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9066","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2307","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo CWGuestBook v2.1 y anteriores para MAXdev MDPro (también conocido como MD-Pro), permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro rid en una acción viewrecords para modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxdev:cwguestbook:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"69CCF6FD-5900-4425-A44A-6EFB9F3D7A5C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*","matchCriteriaId":"91B05377-4F3B-46F2-80AA-1175A344F6BD"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51478","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2308","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the (1) in or (2) out parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en affiliates.php del módulo Affiliation (también conocido como Affiliates) v1.1.0 y anteriores para PunBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"in\" o (2) \"out\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punres:affiliates_mod:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"4359BE72-D905-4D00-B08A-6BD27CE07FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:punres:affiliates_mod:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"54BF6E51-01A6-417D-8F6D-86523D6E87A6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9055","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55478","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51437","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0906-exploits/punbbaffiliations-blindsql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0906-exploits/punbbaffiliationsin-blindsql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2309","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via the tag parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ndex.php en Codice CMS 2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"tag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codice-cms:codice_cms:2:*:*:*:*:*:*:*","matchCriteriaId":"23599D37-8028-4AF0-A1DE-884BE99D0F1E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8272","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34208","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2310","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en include/get_read.php en Extensible-BioLawCom CMS (X-BLC) v0.2.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"section\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bow_der_kleine:x-blc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.0","matchCriteriaId":"8E3A816F-AA8E-4C34-BFF4-F53723876F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bow_der_kleine:x-blc:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7BBBA43D-F686-40B5-99FA-3C588EBC1146"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8258","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34197","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49352","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2311","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el el complemento rGallery v1.2.3  para WoltLab Burning Board (WBB3), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"userID\" el página RGalleryUserGallery al  index.php. Vector distinto del CVE-2008-4627."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:selbstzweck:rgallery_plugin:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A9BEB1C5-5C45-49CA-B20E-C8B128CAB458"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:woltlab:burning_board:*:*:*:*:*:*:*:*","matchCriteriaId":"EC273A0A-B0E7-4C9D-9AE5-85542E9A205B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34194","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49351","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2312","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges."},{"lang":"es","value":"SmartFilter Web Gateway Security v4.2.1.00 almacena las credenciales de usuario en texto plano y no tiene los permisos de seguridad adecuados para el archivo config.txt, lo que permite a usuarios locales elevar sus privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:smartfilter:4.2.1.00:*:*:*:*:*:*:*","matchCriteriaId":"BE3DF88C-BB46-4F93-8B58-09DE930C1D97"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49338","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2313","sourceIdentifier":"cve@mitre.org","published":"2009-07-02T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en Jinzora Media Jukebox v2.8 y anteriores, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"26A8F87F-5371-412F-898F-96D52EB24E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BB97F8D7-E5BB-4CD4-BDDF-E37ED37A9CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.2:*:*:*:*:*:*:*","matchCriteriaId":"64BE0B56-24C9-4175-89CC-F1CB05857794"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1D1988A-AFF1-4FCC-9EAC-C6E3A5C92AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.3:pre:*:*:*:*:*:*","matchCriteriaId":"E909F9F2-9942-404B-84B1-58BF249784C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.3:pre_2:*:*:*:*:*:*","matchCriteriaId":"797A0784-0532-4D3D-97B3-2E98E9D8777C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5B30BB38-B039-4947-8B4D-AFD4A83E5F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E700B87E-4F56-485A-A603-7C2E8F80CAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.5:*:*:*:*:*:*:*","matchCriteriaId":"D4168161-5C1B-41B4-88B5-2BD1B295A176"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"47926B39-0E2A-4A6D-82D9-1C98FFA30540"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.7:*:*:*:*:*:*:*","matchCriteriaId":"BAFB0E0C-1BDA-4A36-8828-4E8D65C66B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"7FA08A88-D353-47B0-ACA2-7B8DC8487208"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"93AEEC92-721E-48A3-BEE9-38DC00EBA2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.9:*:*:*:*:*:*:*","matchCriteriaId":"D2CCAACC-6256-4541-8D6F-524776433DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E1F8886A-CAE7-41CA-B2BD-BA72838E10CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"81B4FB9D-FBB0-4CD0-ACE5-B846563D5F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"4392BCA1-7992-44E6-9371-71C0A2682C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"00D73683-A58F-4014-8814-95A1B043C94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"F55B2254-768A-40C3-B69C-EE3095F937FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C840D223-52D3-4886-8EF0-49A29FF24489"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:1.1:*:*:*:*:*:*:*","matchCriteriaId":"41C86E24-7E72-4D3A-BD4D-5A31F72D138C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.0:*:*:*:*:*:*:*","matchCriteriaId":"057F9E08-4626-40F5-883D-6663E80E502B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F685683F-C5D6-41D1-97C3-6793DD0F26BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"7F4D6D4F-AA64-43DA-8BFE-25BA521AE988"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FFD31704-6221-4EA1-93C9-37136173EB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C0D96D8A-86AF-4EC9-9D78-E0BA5C7B146A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"68602878-B464-408A-98AE-DC41FBE5A758"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D3FF6B75-791E-414A-BF82-A434523107D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3ADF0129-A1AA-4D93-8D41-4FD3826B46D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A7FFB3E2-F20A-4562-A177-08A0BD0D9563"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"88FED132-0372-4BBD-90AF-64A3A10D8654"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"501C1F8E-4559-451E-8BC8-9273194FE061"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"224EBEB4-409F-429A-BFF8-A2D88794A158"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"940C145E-3D17-4237-99DB-CFA478503FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"728B4AC0-6F82-4C28-9527-F35451C03EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"2F0D61DB-8EEE-4931-8568-758147286763"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"FE62D449-0ECD-4B66-9A50-EE0ADB849E0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BEE34F97-DFED-4291-BB64-470B797F7308"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6504D56C-C3EE-46BB-9C70-4F54C8758FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.6:*:*:*:*:*:*:*","matchCriteriaId":"1A14BFE0-038A-4C00-AF80-30CDAA27CC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D08F2736-751E-463D-9CC5-AEAD46EE62B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.7:*:*:*:*:*:*:*","matchCriteriaId":"3150552A-634A-4CF8-AFE4-DBE2BA6003D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jinzora:jinzora:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"91B8ECF5-B1F1-44AA-B01B-58A84F2E58FA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8278","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2314","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors."},{"lang":"es","value":"Condición de carrera en la Sun Lightweight Availability Collection Tool v3.0 de Solaris 7 hasta 10 , permite a usuarios locales sobrescribir ficheros de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:lightweight_availability_collection_tool:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A19444C-672B-4338-A0A3-A3606DC49807"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F830AE29-6AC0-4C78-A637-E69BA63FAF9A"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://osvdb.org/55559","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35707","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261408-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020599.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35568","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022510","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1772","source":"cve@mitre.org"},{"url":"http://osvdb.org/55559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020599.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2315","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.467","lastModified":"2023-11-07T02:04:06.350","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2204.  Reason: This candidate is a duplicate of CVE-2009-2204.  Notes: All CVE users should reference CVE-2009-2204 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2316","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in (1) the self-service UI interface or (2) the console interface. NOTE: it was later reported that 4.6.0 is also affected by the first vector."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IBM Tivoli Identity Manager (ITIM) v5.0, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección al introducir una URL no especificada en (1) la interfaz del propio servicio UI o (2) la interfaz de la consola."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_identity_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D36671F-4B3C-4E23-B1EC-7CF4AA17C08A"}]}]}],"references":[{"url":"http://osvdb.org/55550","source":"cve@mitre.org"},{"url":"http://osvdb.org/55551","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36119","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54310","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54311","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55518","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24023640","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24023929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35566","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022508","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1774","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2106","source":"cve@mitre.org"},{"url":"http://osvdb.org/55550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24023640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24023929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2317","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access."},{"lang":"es","value":"El  Axesstel MV 410R tiene una contraseña de administrador por defecto, y no se obliga al cambio de contraseña, lo que facilita el acceso a atacantes remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://osvdb.org/55680","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org"},{"url":"http://osvdb.org/55680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2318","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116."},{"lang":"es","value":"El Axesstel MV 410R, permite a atacantes remotos provocar una denegación de servicio mediante una avalancha de paquetes SYN. Vulnerabilidad relacionada con CVE-1999-0116."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2319","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network."},{"lang":"es","value":"La configuración por defecto del componente Wi-Fi de Axesstel MV 410R no emplea cifrado, esto facilita a los atacantes remotos obtener información sensible espiando la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2320","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript."},{"lang":"es","value":"La interfaz web de Axesstel MV 410R permite del lado del cliente la ejecución de código JavaScript para la validación de entrada, lo que permite a atacantes remotos el envío de datos manipulados, y posiblemente tenga otro impacto desconocido, a través de un cliente que no procesa JAvaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2321","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string."},{"lang":"es","value":"cgi-bin/sysconf.cgi del Axesstel MV 410R, permite a atacantes remotos provocar una denegación de servicio (reinicio de la configuración) a través de una cadena de consulta RESTORE=RESTORE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://osvdb.org/55681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org"},{"url":"http://osvdb.org/55681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2322","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en cgi-bin/sysconf.cgi del Axesstel MV 410R, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2323","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery (CSRF) attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script."},{"lang":"es","value":"El interfaz web del Axesstel MV 410R, redrecciona a los usuarios a la página visitada previamente tras la ejecución de algunas secuencias de comandos CGI, lo que facilita a atacantes remotos evitar la detección de ataques de falsificación de petición en sitios cruzados (CSFR), como se ha demostrado mediante una redirección en la secuencia de comandos cgi-bin/wireless.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axesstel:mv_410r:*:*:*:*:*:*:*:*","matchCriteriaId":"19511BCC-9DAD-4342-99B5-163DABC3A432"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2324","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory."},{"lang":"es","value":"Múltiples vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en FCKeditor anterior a v2.6.4.1, permite a atacantes remotos inyectar secuencias de comandos Web o HTML utilizando componentes en el directorio samples (también conocido como _samples)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.4","matchCriteriaId":"5A935AD9-DB0B-47A9-8F5E-9FF2A3310865"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A396BB3-7329-4522-8C5F-99CCA41C9DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0_fc:*:*:*:*:*:*:*","matchCriteriaId":"97BEB138-2E35-4770-BA2B-D78FFC6E6CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"DD08F2AA-D782-419D-945C-D241EB18CBB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0rc2:*:*:*:*:*:*:*","matchCriteriaId":"B6F9F4D2-0A3E-49D6-9A58-D9BCDF492E90"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.0rc3:*:*:*:*:*:*:*","matchCriteriaId":"CF47BD2F-7AC9-490E-9289-9C259FE4F231"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.1:*:*:*:*:*:*:*","matchCriteriaId":"490C6198-FDA6-45BF-B12F-6F9A52B6F1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"83806F80-BA69-4098-A4F6-1F9577871EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D2823302-CCF1-438B-B962-6EE49D371A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3:*:*:*:*:*:*:*","matchCriteriaId":"43FBB64C-5D5D-43D0-A4B9-B08F0012B9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3:beta:*:*:*:*:*:*","matchCriteriaId":"28B4FB08-9605-4D05-98B6-844F701BFA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"95BF5CD1-7D68-4FBE-8116-23B4D1415B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EE69FFCF-D442-492F-A5F6-56A02E4E9299"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"31A4C3CC-27E5-4962-85B2-404EAF434B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4:*:*:*:*:*:*:*","matchCriteriaId":"665C47D7-40EC-4F52-8EA0-0886EE8A9345"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2271D898-7973-412C-8EA2-EBFD22ABF25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6834FFFF-F463-4F01-BB13-46705B9933A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"68C583B7-5A09-4849-A1E1-600C87854A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F45886E0-9D00-42B4-AF12-87EFED09765C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.5:beta:*:*:*:*:*:*","matchCriteriaId":"72159C7B-3F8E-440F-8248-3A5A991957B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"631C1D5A-191E-40D7-A6E4-25C184314527"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6:*:*:*:*:*:*:*","matchCriteriaId":"2D47CE1F-04A6-4961-B0B3-5A3EC403EE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2C7527-3513-4B72-8C8D-295A3A8BAD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E18F60E3-3723-40F3-A632-C3B8B6157682"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E99B8429-1EBC-483D-87B6-281E2C49E35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.3:beta:*:*:*:*:*:*","matchCriteriaId":"05B5740F-05C0-4155-BC11-50DE6F8285DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fckeditor:fckeditor:2.6.4:beta:*:*:*:*:*:*","matchCriteriaId":"B9D86941-B839-43CC-A97E-CA52339A9871"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2009-007.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504721/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022513","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504721/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2325","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the side parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Clicknet CMS v2.1, permite a atacantes remotos leer ficheros de su elección a través de .. (punto punto) en el parámetro side."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clicknet:clicknet_cms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6F4532AA-6A12-4A6E-8C6C-18B4CD1BF767"}]}]}],"references":[{"url":"http://secunia.com/advisories/35607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9037","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55484","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1736","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51427","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2326","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an auto action or (2) the topic parameter to message.php.  NOTE: vector 2 can be leveraged for a cross-site scripting (XSS) attack."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en KerviNet Forum v1.1 y anteriores, permie a atacantes remotos ejecutar comandos SQL de su elección a través de  (1) la cookie enter_parol cookie a index.php en una acción auto o (2) el parámetro \"topic\"  a message.php.  NOTA: el vector 2 puede ser aprovechado para una ataque de ejecución de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E247F110-1648-462A-AF0E-2BA9BE46888F"}]}]}],"references":[{"url":"http://osvdb.org/55693","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9068","source":"cve@mitre.org"},{"url":"http://osvdb.org/55693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2327","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_variant1 parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en add_voting.php de KerviNet Forum v1.1 y anteriores, permite a usuarios autenticados en remoto inyectar secuencias de comandos Web o HTML a través del parámetro v_variant1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E247F110-1648-462A-AF0E-2BA9BE46888F"}]}]}],"references":[{"url":"http://osvdb.org/55676","source":"cve@mitre.org"},{"url":"http://osvdb.org/55695","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9068","source":"cve@mitre.org"},{"url":"http://osvdb.org/55676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2328","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL injection attacks via the del_user_id parameter."},{"lang":"es","value":"admin/edit_user.php en KerviNet Forum v1.1 y anteriores, no requiere autenticación como administrador, lo que permite a atacantes remotos eliminar cuentas de su elección y llevar a cabo ataques SQL a través del parámetro \"del_user_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E247F110-1648-462A-AF0E-2BA9BE46888F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9068","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2329","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (3) voting.php, (4) topics_search.php, (5) topics_list.php, (6) top_part.php, (7) quick_search.php, (8) quick_reply.php, (9) moder_menu.php, (10) messages_list.php, (11) menu.php, (12) head.php, (13) forums_list.php, (14) forum_statistics.php, (15) forum_info.php, or (16) birthday.php in include_files/, which reveals the installation path in an error message."},{"lang":"es","value":"KerviNet Forum v1.1 y anteriores, permite a atacantes remotos obtener información sensible a través de una solicitud directa a (1) admin/head.php o (2) voting_diagram.php, (3) voting.php, (4) topics_search.php, (5) topics_list.php, (6) top_part.php, (7) quick_search.php, (8) quick_reply.php, (9) moder_menu.php, (10) messages_list.php, (11) menu.php, (12) head.php, (13) forums_list.php, (14) forum_statistics.php, (15) forum_info.php o (16) birthday.php de include_files/; lo cual revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_kervin:kervinet_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"E247F110-1648-462A-AF0E-2BA9BE46888F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9068","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2330","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/admin_menu.php de CMS Chainuk v1.2 y anteriores, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro menu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"A3888C3E-9A85-4787-A623-5B4343E9AC4F"}]}]}],"references":[{"url":"http://osvdb.org/55674","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9069","source":"cve@mitre.org"},{"url":"http://osvdb.org/55674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2331","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary PHP code (1) into settings.php via the menu parameter to admin_settings.php or (2) into a content/=NUMBER.php file via the title parameter to admin_new.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de código estático en CMS Chainuk v1.2 y anteriores, permite a atacantes remotos inyectar código PHP de su elección (1) dentro de settings.php a través del parámetro \"menu\" a admin_settings.php o (2) dentro de un archivo  content/=NUMBER.php a través del parámetro \"title\" a admin_new.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"A3888C3E-9A85-4787-A623-5B4343E9AC4F"}]}]}],"references":[{"url":"http://osvdb.org/55672","source":"cve@mitre.org"},{"url":"http://osvdb.org/55673","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9069","source":"cve@mitre.org"},{"url":"http://osvdb.org/55672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2332","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to index.php or (2) a nonexistent folder name in the id parameter to admin/admin_delete.php, which reveals the installation path in an error message."},{"lang":"es","value":"CMS Chainuk v1.2 y anteriores, permite a atacantes remotos obtener información sensible a través de (1) un parámetro id de index.php modificado o (2) un nombre de carpeta que no exista en el parámetro id de admin/admin_delete.php; esto revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"A3888C3E-9A85-4787-A623-5B4343E9AC4F"}]}]}],"references":[{"url":"http://osvdb.org/55670","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55671","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9069","source":"cve@mitre.org"},{"url":"http://osvdb.org/55670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/55671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2333","sourceIdentifier":"cve@mitre.org","published":"2009-07-05T16:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the menu parameter to admin/admin_menu.php, and the id parameter to (2) index.php and (3) admin/admin_edit.php; and (4) delete arbitrary local files via a .. (dot dot) in the id parameter to admin/admin_delete.php.  NOTE: vector 2 can be leveraged for static code injection by sending a crafted menu parameter to admin/admin_menu.php, and then sending an id=../menu.csv request to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en CMS Chainuk v1.2 y anteriores, permite a atacantes remotos añadir y ejecutar archivos de su elección a través de ..(punto punto) en los parámetros (1) \"menu\" a admin/admin_menu.php, el  \"id\" a (2) index.php and (3) admin/admin_edit.php; eliminar archivos de su elección a través  de ..(punto punto) en el parámetro \"id\" a admin/admin_delete.php.  NOTA: el vector 2 puede ser aprovechado para la inyección de código estático enviando  el parámetro \"menu\" manipulado a admin/admin_menu.php, y a continuación, enviando una petición  id=../menu.csv request al  index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cms.tut.su:cms_chainuk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"A3888C3E-9A85-4787-A623-5B4343E9AC4F"}]}]}],"references":[{"url":"http://osvdb.org/55666","source":"cve@mitre.org"},{"url":"http://osvdb.org/55667","source":"cve@mitre.org"},{"url":"http://osvdb.org/55668","source":"cve@mitre.org"},{"url":"http://osvdb.org/55669","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9069","source":"cve@mitre.org"},{"url":"http://osvdb.org/55666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2334","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T21:00:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service."},{"lang":"es","value":"wp-admin/admin.php en WordPress y WordPress MU antes de v2.8.1 no requiere autenticación administrativa para acceder a la configuración de un plugin, lo cual permite a atacantes remotos especificar un archivo de configuración en la página de parámetros para obtener información sensible o modificar este archivo, como se demostró por los ficheros (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, y (5) wp-ids/ids-admin.php. NOTA: esto puede ser aprovechados para vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) y denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"68895399-32D7-43DE-945B-B9BD29DA5B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*","matchCriteriaId":"C3C33D37-2FFF-4DE5-B260-E090F4E6377B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"3E4139FE-7C43-44AC-856F-226E1194D936"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*","matchCriteriaId":"FC499ABC-D1A6-4A9B-A06B-12C8275462DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*","matchCriteriaId":"5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*","matchCriteriaId":"056E641C-9322-4BEE-97B4-FE16DE8D7336"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*","matchCriteriaId":"ADB42CEF-E12D-4DB0-8536-FD393D3697A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*","matchCriteriaId":"C4AF89F9-AE67-49B5-ACF0-3A645C454E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"90C9AFEE-BCD7-4B4D-8F22-98747524F17D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"175B2515-E212-4347-8C04-13E110D70C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"BD571A4D-1D9C-4925-AE99-9128421213F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"7B553469-0D8B-48AD-8EFF-3DC469262977"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*","matchCriteriaId":"FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*","matchCriteriaId":"C516C041-B945-4992-8104-E20B3B6CECDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E85A88D7-07A1-4A8C-88B5-057AD9C675E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*","matchCriteriaId":"AFBD4E49-EA17-4FFD-AF9C-950E542555A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*","matchCriteriaId":"6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*","matchCriteriaId":"4C4229BC-1646-4202-92B8-FC718D557518"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*","matchCriteriaId":"947635DB-A86E-45F0-B946-559202C49503"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEABEFD-E248-42B7-B99E-FFDEE27F7064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:*","matchCriteriaId":"46B86AD1-967D-4C8E-BD31-C2A2197B1E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*","matchCriteriaId":"94ADC624-E43E-4F1D-8525-F6903943C932"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"06A25444-2680-4379-B2CA-9858B6AF71CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4801D56C-5ED6-4648-A0C9-EB4D06786A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A777651-D2B2-47E0-A13C-BD667635F3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1503C4CB-5D58-4523-860C-4B637AD91CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1253161D-F1C8-46D6-B970-20335071500E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"CEE401B3-6291-4EA8-8800-0350BAC0B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"79F41AFB-596E-4FFA-AC46-E563122A9D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2912D04D-A004-4842-8EF0-B51DAAA5FD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A77286DE-D583-4359-8962-439583BE9BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D5ED66D3-5D12-42CE-8B98-6A2984DAC7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB3E9E3-1341-4F34-B6D1-5DF9F3B1D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B0EA81B6-0254-404D-8A2B-80C027383FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"738C3727-FCA0-4C7B-B6D6-2FC14987706A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8149192C-167C-4459-8C20-355DE0FF2921"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"EBC1B2B1-C8EE-47A4-BE44-CAC1A6CD432E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.5a:*:*:*:*:*:*:*","matchCriteriaId":"82E6D03D-0547-4CAB-A1CF-AEAC82634437"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EF5136FA-5060-4448-9874-3DF375467ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F534621-ED5F-46D0-A893-D0C6DAACB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F1930525-806B-49B1-A18E-189D41E5885C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"330826FD-833C-4BB4-8293-2812956496B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"555E7E8A-3632-416B-889E-68E98AABE8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6:*:*:*:*:*:*:*","matchCriteriaId":"75674DE5-229D-4359-B29C-E18BBC76E188"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAE70A19-919A-4478-B97B-EEF9FA29BECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"70524981-C0ED-4915-B0F3-A9F5D4865A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6E9450D1-B817-4A38-A46F-05FCB6692A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3AA78384-3133-442A-B135-192440FB1745"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022528","source":"cve@mitre.org"},{"url":"http://wordpress.org/development/2009/07/wordpress-2-8-1/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9110","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55712","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/55715","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35584","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html","source":"cve@mitre.org"},{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/development/2009/07/wordpress-2-8-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/55715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2335","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T21:00:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.  NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for \"user convenience.\""},{"lang":"es","value":"WordPress y WordPress MU anterior a v2.8.1 expone un comportamiento diferente para un intento fallido de acceso en función de si existe la cuenta de usuario, lo cual permite a atacantes remotos enumerar nombres de usuario válidos. NOTA: el proveedor informa de que cuestiona la importancia de esta incidencia, indicando que el comportamiento existe para conveniencia del usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndExcluding":"2.8.1","matchCriteriaId":"513237CD-92E3-46CD-8221-88F36B243101"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","versionEndExcluding":"2.8.1","matchCriteriaId":"1327C621-452A-4BA4-B2E7-28AE4533DCC1"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022528","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9110","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/55713","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35581","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/55713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2336","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T21:00:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.  NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for \"user convenience.\""},{"lang":"es","value":"El interfaz de correo olvidado en WordPress y WordPress MU anterior a v2.8.1 muestra diferentes comportamientos para una petición de contraseña dependiendo de si existe la cuenta de usuario, lo cual permite a atacantes remotos enumerar los nombres de usuario válidos. NOTA: el fabricante informa cuestionando la importancia de esta incidencia,indicando que este comportamiendo se da por conveniencia para el usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndExcluding":"2.8.1","matchCriteriaId":"513237CD-92E3-46CD-8221-88F36B243101"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","versionEndExcluding":"2.8.1","matchCriteriaId":"1327C621-452A-4BA4-B2E7-28AE4533DCC1"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022528","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9110","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/55714","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35581","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/55714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2337","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spam_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en includes/module/book/index.inc.php de w3b|cms Gaestebuch Guestbook Module v3.0.0, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro spam_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:w3bcms:w3bcms:*:*:*:*:*:*:*:*","matchCriteriaId":"4FDEE753-87E8-42E7-9F7D-60C2AF1A7529"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3bcms:gaestebuch_guestbook_module:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"60FC2603-ECD2-4564-BFBE-D522F153FE60"}]}]}],"references":[{"url":"http://osvdb.org/53614","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8396","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34477","source":"cve@mitre.org"},{"url":"http://www.w3bcms.de/2.news/54.kommentare/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49853","source":"cve@mitre.org"},{"url":"http://osvdb.org/53614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.w3bcms.de/2.news/54.kommentare/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2338","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/startmodules.inc.php de FreeWebshop.org v2.2.9 R2, permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de .. (punto punto) en el parámetro lang_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebshop:freewebshop:2.2.9:r2:*:*:*:*:*:*","matchCriteriaId":"7FAC18FB-545A-432A-B1C0-8B7ED62E9822"}]}]}],"references":[{"url":"http://secunia.com/advisories/34707","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8446","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34538","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2339","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Rentventory permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro product."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rentventory:rentventory:-:*:*:*:*:*:*:*","matchCriteriaId":"73D3B580-AF25-45B6-993D-CA9DC3AC1AF3"}]}]}],"references":[{"url":"http://osvdb.org/55555","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9081","source":"cve@mitre.org"},{"url":"http://osvdb.org/55555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2340","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName (aka User Name) parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php  de Opial v1.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro txtUserName. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D17DD783-6541-487C-A2D7-5A3AC3142023"}]}]}],"references":[{"url":"http://osvdb.org/55560","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35560","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2341","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en albumdetail.php de Opial v1.0 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro albumid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shalwan:opial:1.0:*:*:*:*:*:*:*","matchCriteriaId":"74E0DCAF-FC37-4489-AA56-B1D7162F489C"}]}]}],"references":[{"url":"http://osvdb.org/55561","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9080","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35562","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2342","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php (también conocido como página de login)de Content Management Made Easy (CMME) v1.22  y anteriores, permite a atacantes remotos inyectar código web o HTML a su elección a través del campo nombre de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:*:*:*:*:*:*:*:*","versionEndIncluding":"1.21","matchCriteriaId":"F6F5F426-B5D9-4852-9A99-7A1CC97EF07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.02:*:*:*:*:*:*:*","matchCriteriaId":"DFC22F7C-B77B-4E7D-B7A5-C23DF080CF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.03:*:*:*:*:*:*:*","matchCriteriaId":"69496B41-06D4-4520-9B96-CA52340BCAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.06:*:*:*:*:*:*:*","matchCriteriaId":"A9FF586F-9FCE-44FD-86B4-BBD5D8960082"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.07:*:*:*:*:*:*:*","matchCriteriaId":"CAA93DF4-E422-45C6-947D-72C39527503A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.08:*:*:*:*:*:*:*","matchCriteriaId":"7E78D4A3-1065-4209-ABA7-E37DC506738B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.09:*:*:*:*:*:*:*","matchCriteriaId":"C291A60C-22B5-4BC2-9FD5-8C45EAFD7CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.10:*:*:*:*:*:*:*","matchCriteriaId":"58B5A1DE-2725-4CE8-B72B-94B40B2D292C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.11:*:*:*:*:*:*:*","matchCriteriaId":"0A585CC6-497B-4570-8CE9-78D3A25E2A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.12:*:*:*:*:*:*:*","matchCriteriaId":"63FA730E-6D1F-4F8B-A4CA-FF5A0B4CAC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.18:*:*:*:*:*:*:*","matchCriteriaId":"CDA0E7F0-E4E4-4E49-90A2-A8899545D46C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_oesterholt:cmme:1.19:*:*:*:*:*:*:*","matchCriteriaId":"F67A768C-F508-4DFA-8F19-DD81F45A6CAA"}]}]}],"references":[{"url":"http://secunia.com/advisories/35610","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694724","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2500186&group_id=215535&atid=1034058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2343","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en people.php de Zoph v0.7.0.6 y anteriores, permite a atacantes remotos inyectar código web o HTML a su elección a través de vectores no especificados. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.0.5","matchCriteriaId":"1E5A6F89-921F-4505-ACC9-888A14F2AE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A6C51D78-6B7B-4726-BBC5-1597BEBAEC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.4:*:*:*:*:*:*:*","matchCriteriaId":"53C4F1CF-B2BB-48B2-83F4-0520E5C9ACD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.5:*:*:*:*:*:*:*","matchCriteriaId":"856E1497-3819-440B-8062-57FCCFD0E666"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AF492E31-36B8-4F14-AF80-43484C26C96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.6:*:*:*:*:*:*:*","matchCriteriaId":"81989ECB-5AD1-42BB-A54D-06F1D1F6BF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7:*:*:*:*:*:*:*","matchCriteriaId":"5AB3829B-49A8-4B73-88E3-B37D0C396FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"13ABB946-E3B3-4CA7-8A0A-ACAC4C030785"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4590D940-90BA-4726-A800-93A96D2FD26E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E06FA133-F834-4155-9837-848DAC44C777"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoph:zoph:0.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"934D81AD-8143-4B0F-928F-1DA47754924B"}]}]}],"references":[{"url":"http://osvdb.org/55554","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35700","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694128","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35567","source":"cve@mitre.org"},{"url":"http://www.zoph.org/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zoph.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2344","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components."},{"lang":"es","value":"La interfaz de administración web en Sourcefire Defense Center (DC) y 3D Sensor anteriores a v4.8.2 permiten a usuarios autentificarse para obtener privilegios a través de un valor $admin para los parametros de administración en una acción de edición de admin/user/user.cgi y otros componentes no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:3d_sensor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.1","matchCriteriaId":"7F78FF4A-7E52-48AC-BA6C-134A2CF16E4C"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:3d_sensor:4.8:*:*:*:*:*:*:*","matchCriteriaId":"B8C912A2-516B-4812-9202-015A181D2768"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:3d_sensor:4.8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C8573E9A-5F6A-4A31-AC29-47A5021AECF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:3d_sensor:4.8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"997B953B-7DCC-4707-8BEE-95218461864D"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:defense_center:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.1","matchCriteriaId":"D2902AF6-3F68-4FC7-8012-64BD406367FA"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:defense_center:4.8:*:*:*:*:*:*:*","matchCriteriaId":"981AB37C-4308-4339-A024-583CB09D9703"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:defense_center:4.8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FC3E2566-A460-4D7E-9991-B026B407F600"},{"vulnerable":true,"criteria":"cpe:2.3:h:sourcefire:defense_center:4.8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"64DBAB25-4691-4225-9AA4-66E93F31A93B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504694/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35553","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022500","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504694/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2345","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components."},{"lang":"es","value":"Multiples vulnerabilidades tipo inyección SQL en versiones de ClanSphere anteriores a v.2009.0.1 permiten a atacantes remotos ejecutar comandos SQL a su elección a través de parámetros no especificados al módulo gbook y otros componentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:*:*:*:*:*:*:*:*","versionEndIncluding":"2009.0","matchCriteriaId":"9D37828F-460B-45A0-A9BB-2ED8ACF78A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4:*:*:*:*:*:*:*","matchCriteriaId":"3B498CF2-0ED8-497E-9375-5C7E31941095"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.1:*:*:*:*:*:*:*","matchCriteriaId":"91ED323B-9626-46F5-AFA9-98C3705A502F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5036F226-B242-485D-95F9-3A4218AC4C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5C8E2F6F-2A34-4335-93FA-5EB054BFEAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2007.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A2C73C22-D21C-4BAF-B945-C83F08D56AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2008:*:*:*:*:*:*:*","matchCriteriaId":"5FC5B7AF-964C-412B-8CE2-17B03AC34026"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2008.1:*:*:*:*:*:*:*","matchCriteriaId":"22458DE4-F715-4ECE-9FF1-08F0AC430C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2008.2:*:*:*:*:*:*:*","matchCriteriaId":"E5A55ADA-F556-4C25-8415-208E9E68ACCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2008.2.1:*:*:*:*:*:*:*","matchCriteriaId":"30B73D07-06C5-4466-8157-82DE5304E7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2009.0:rc1:*:*:*:*:*:*","matchCriteriaId":"96F6E5E6-C61A-411C-B179-E301DF4AB7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2009.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A3E469F4-FC52-4151-AB6F-F41B3E0BA72E"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2009.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D85C9E29-3771-4BEF-BDBD-09933D7F8087"}]}]}],"references":[{"url":"http://secunia.com/advisories/35694","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.clansphere.net/index/news/view/id/405/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35576","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1794","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.clansphere.net/index/news/view/id/405/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2346","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263."},{"lang":"es","value":"La implementación del protocolo IAX2 en Asterisk Open Source v1.2.x antes de v1.2.35, v1.4.x antes de v1.4.26.2, v1.6.0.x antes de v1.6.0.15, v1.6.1.x antes de v1.6.1.x; Business Edition vB.x.x antes de que vB.2.5.10, vC.2.x antes vC.2.4.3 y vC.3.x antes de C.3.1.1; y S800i v1.3.x antes de v1.3.0.3 permite a atacantes remotos causar una denegación de servicio iniciando muchos intercambios de mensajes IAX2. Se trata de una aunto relacionado con la CVE-2008-3263."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.2:*:business:*:*:*:*:*","matchCriteriaId":"524CF00B-1B36-4C1F-80B4-28349891669B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.1.3.3:*:business:*:*:*:*:*","matchCriteriaId":"2942FA48-42CE-4E67-A5BF-7852652EDE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.2.0:*:business:*:*:*:*:*","matchCriteriaId":"4160A834-9194-474C-819B-60627E470D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.2.1:*:business:*:*:*:*:*","matchCriteriaId":"D81F6E55-80F1-4770-9FF0-305EEEF3C4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.1:*:business:*:*:*:*:*","matchCriteriaId":"087DC9EC-0DF2-48AE-BB62-8DDF95C3EC56"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.2:*:business:*:*:*:*:*","matchCriteriaId":"471032A5-5EB6-44D1-91C8-BEA42C1E205A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.3:*:business:*:*:*:*:*","matchCriteriaId":"6FEB3FCA-065E-4C32-A4C7-F2C79F214F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.4:*:business:*:*:*:*:*","matchCriteriaId":"636D765F-C47B-4762-9419-D7B51FA38AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.5:*:business:*:*:*:*:*","matchCriteriaId":"36F29EE8-E05F-4F0A-B0FA-66C551856C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.3.6:*:business:*:*:*:*:*","matchCriteriaId":"CEAA72FE-E13C-4363-AF5C-7D1CEEE2FA77"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.1:*:business:*:*:*:*:*","matchCriteriaId":"3BAD5B3E-80FC-4B23-BD51-41D17BFA9C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.3:*:business:*:*:*:*:*","matchCriteriaId":"0B09EFBF-B8AD-455F-8F47-7C8F52371214"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.4:*:business:*:*:*:*:*","matchCriteriaId":"4CF18A17-E16D-4529-9705-6E2333C89CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.5:*:business:*:*:*:*:*","matchCriteriaId":"1ED6AC46-E485-4D0A-BFC1-3DEED113B9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.6:*:business:*:*:*:*:*","matchCriteriaId":"25A4B8D6-373F-442B-978A-61E53EEA9870"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.8:*:business:*:*:*:*:*","matchCriteriaId":"30D7485F-109D-46B9-8E6E-52E963080BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:b.2.5.9:*:business:*:*:*:*:*","matchCriteriaId":"D5C22240-282C-4B10-8CAE-CC07E5784C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.0_beta7:*:business:*:*:*:*:*","matchCriteriaId":"D0A87D63-35F5-47D7-893B-E8B179B16C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.0_beta8:*:business:*:*:*:*:*","matchCriteriaId":"95C1809E-9031-483F-B873-160284FA71D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.6:*:business:*:*:*:*:*","matchCriteriaId":"E35C336A-A786-476B-8B9F-E682D999B6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.6.1:*:business:*:*:*:*:*","matchCriteriaId":"8121721B-EBC6-44EA-86D6-7B0FF1C8FF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.6.2:*:business:*:*:*:*:*","matchCriteriaId":"1E76B3DD-5C38-4323-9F24-9327CC4E6FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.8.1:*:business:*:*:*:*:*","matchCriteriaId":"EB75A0FE-9D22-4DDB-909C-C87036328499"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.10.3:*:business:*:*:*:*:*","matchCriteriaId":"75003D80-231D-4AC4-8346-4D4E4C8643E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.10.4:*:business:*:*:*:*:*","matchCriteriaId":"A04E037D-7F3F-4387-818D-1D618885AAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.1.10.5:*:business:*:*:*:*:*","matchCriteriaId":"2CACA83A-4D1E-458D-BA30-3C138FB848E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.2.1.2.1:*:business:*:*:*:*:*","matchCriteriaId":"32D447AB-DAF1-4F70-8686-156C0ACDAE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.2.3:*:business:*:*:*:*:*","matchCriteriaId":"6A958EDA-6FB8-447B-B190-8802C9DC9D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.2.3.3:*:business:*:*:*:*:*","matchCriteriaId":"30FDE355-2209-46D4-A4E9-4DF7B128014F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.2.4.2:*:business:*:*:*:*:*","matchCriteriaId":"9CCDC56D-22F0-4617-A2FE-A23889F9C9AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk:c.3.1.0:*:business:*:*:*:*:*","matchCriteriaId":"E6B4EC4D-957C-4A93-B65C-10114845A226"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E62D108C-862D-4BDB-BE37-285AA4C9C59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"CF1422F3-829D-498C-83A6-02989DFB70A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBEB9D69-A404-4053-92F9-CAC3481AFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E816CCDB-4169-4F09-AE87-E467F4BE7685"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:netsec:*:*:*:*:*:*","matchCriteriaId":"65223182-1675-462C-AF67-4A48760A63F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"107DA2D8-FE7C-4B70-856D-43D58B988694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:netsec:*:*:*:*:*:*","matchCriteriaId":"02D5E6DF-7C9C-479F-986B-D5C8A144ACB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:netsec:*:*:*:*:*:*","matchCriteriaId":"68AF6200-1385-449F-A00E-2BACEE16450B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5C14614F-4E27-40A6-9E56-2B1DBB10330B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:netsec:*:*:*:*:*:*","matchCriteriaId":"61C0769F-6739-41D2-ADD8-924AC04C5F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7A2F2F5A-66FD-4057-917C-66332A88D83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:netsec:*:*:*:*:*:*","matchCriteriaId":"8EF13987-5767-4FED-9584-63D74B0A30A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"399B0206-B48B-46EF-8CA6-A6E5A2550B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:netsec:*:*:*:*:*:*","matchCriteriaId":"C57C1324-E11A-4B2B-9722-A4A63AEF0497"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"26E9760F-C0EB-47BB-8DA4-CC7815099DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:netsec:*:*:*:*:*:*","matchCriteriaId":"EE6D9718-D57D-48F6-A2B1-CECAFFCDDFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6BD915CD-A7D3-4305-A6C0-290C648A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:netsec:*:*:*:*:*:*","matchCriteriaId":"3249AB40-2058-42E9-9A33-64E434E5BB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"0CF6584D-A7BB-4BD5-8232-9293FEE4A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"174D6B56-7D0F-46F0-849A-FD05CB348FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"938F545A-F8A7-455E-8E5A-2B5454B6CE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:netsec:*:*:*:*:*:*","matchCriteriaId":"E7C0897A-C841-4AAB-A6B3-1FCF7A99A60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*","matchCriteriaId":"21612C17-7368-4108-B55B-5AB5CA6733E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"A149F8C2-3DA5-44B2-A288-3482F3975824"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"9462B320-B69D-409D-8DCC-D8D6CA1A757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"BEA0014A-659B-4533-A393-6D4ADC80EB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"346C9F65-B5FB-4A75-8E1B-137112F270D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"7EFEE380-0C64-4413-AF3A-45ABC8833500"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"8CA18FC6-1480-400E-A885-8CDAE45AA7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"93741261-378B-4C02-8D68-0E5F39128375"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"72375576-F857-4585-A677-A326D89A65B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"BE47A547-26E7-48F9-B0A6-2F65E04A1EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"E1AEB744-FCF2-4A41-8866-9D1D20E6C6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"51E5EB34-30AD-4E81-8BD4-4AB905E52B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"4359322B-08D0-4710-A9C3-54BD4A17B800"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:*","matchCriteriaId":"78F84DF4-DBA7-430C-AF17-F52024EF80D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:*","matchCriteriaId":"34266614-3588-485C-A609-37823F8499AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.30.4:*:*:*:*:*:*:*","matchCriteriaId":"DD299B8E-D912-4B67-85C3-79CFF4C4F3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"9890504F-AA2E-44E9-8510-BFFD75FD6D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.32:*:*:*:*:*:*:*","matchCriteriaId":"38CF30B7-832F-40D4-8DA2-47B55BAC78B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.33:*:*:*:*:*:*:*","matchCriteriaId":"2072ADDC-C105-49CD-929A-011C8B9C6CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.34:*:*:*:*:*:*:*","matchCriteriaId":"A16BE0C5-4569-4F62-AC58-4B4D5B60D935"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"40850BF4-E252-4667-9B46-9B6FEF6E997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1BB01DD1-B29B-4210-88CC-9ADB3148A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"99E9EE2A-56AD-42BC-8CB0-D34091849B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96877A3E-B54B-4F31-B281-76CDC98B2D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"6D0B4503-42A6-4D88-954E-A662E91EC204"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A4B73813-BCD8-429E-B9B9-D6665E026BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"5BBA3ECC-4F40-41CD-A6D7-BBD680DDBACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"9CBE2156-AF86-4C72-B33D-3FF83930F828"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"61408884-FBBF-4D94-A552-F99AB46DCED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"4A527277-D97D-4B74-906F-7481BDBD96D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D8B57A32-7B83-4783-A244-C26301970444"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"88576385-EF03-408B-9775-B52E6AFFE48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:*:*:*:*:*:*:*","matchCriteriaId":"ED2BF36F-CF10-4F24-970B-3D0BB7561C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc-2:*:*:*:*:*:*","matchCriteriaId":"D35DD57B-EF77-4C5F-9B44-DAF5E0560E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc1:*:*:*:*:*:*","matchCriteriaId":"BFC1BB05-15C6-4829-86EB-5B1BFA4B5B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc2:*:*:*:*:*:*","matchCriteriaId":"AB77E88B-7233-4979-914E-24E671C1FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc3:*:*:*:*:*:*","matchCriteriaId":"C4FF0F09-0268-480F-A2F3-6F8C3F323EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19:rc4:*:*:*:*:*:*","matchCriteriaId":"1CCF9CAE-674A-4833-9D5C-FCBD865BE9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19.1:*:*:*:*:*:*:*","matchCriteriaId":"FB1593E1-BF21-4DB9-A18E-9F221F3F9022"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.19.2:*:*:*:*:*:*:*","matchCriteriaId":"EC8E9FE3-FA25-4054-876E-4A3CE6E71AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:*:*:*:*:*:*:*","matchCriteriaId":"4BBAEADC-D1DE-46EF-808C-2F6D2A74D988"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:rc1:*:*:*:*:*:*","matchCriteriaId":"AEF8EB4B-2947-4BD3-ADF3-345AEFE85B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:rc2:*:*:*:*:*:*","matchCriteriaId":"E4476FB3-A759-49F5-ABDE-6D2A321B61BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.20:rc3:*:*:*:*:*:*","matchCriteriaId":"DFC109C3-2F52-48BE-B07E-3D65F31C1012"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21:*:*:*:*:*:*:*","matchCriteriaId":"E54101A9-3967-4111-8A03-DA1BB23141BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21:rc1:*:*:*:*:*:*","matchCriteriaId":"D8B00600-1D45-41F7-9A10-97FB39012FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21:rc2:*:*:*:*:*:*","matchCriteriaId":"D8CB2331-0F95-45E0-AF5B-0B9C74C5BA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21.1:*:*:*:*:*:*:*","matchCriteriaId":"D4ADB6A7-76AC-4AE3-B1AA-9F8DFA635418"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.21.2:*:*:*:*:*:*:*","matchCriteriaId":"776BC35C-CF37-4F4E-9FD5-EC351D4C2C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"F10DAABC-FF06-44FB-98EC-B6AD17C03FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22:rc3:*:*:*:*:*:*","matchCriteriaId":"ACA8AFD5-4C7C-4876-93CA-C5B3E881C455"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22:rc4:*:*:*:*:*:*","matchCriteriaId":"547EEB2B-2ECA-4B00-83BB-CFAA11BE0145"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"83829E0F-C24B-4BD6-88EA-98898A9AD86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.22.2:*:*:*:*:*:*:*","matchCriteriaId":"D4C19141-823E-4057-A699-FD1DFF92DF38"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:*:*:*:*:*:*:*","matchCriteriaId":"ECE7FE41-E749-49B8-99DF-19F9E7C4827A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:rc1:*:*:*:*:*:*","matchCriteriaId":"4E78234B-39B6-4DB4-A10F-AA55F174D4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:rc2:*:*:*:*:*:*","matchCriteriaId":"3984CF42-2431-4661-B333-C6721DF7123A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.23:rc3:*:*:*:*:*:*","matchCriteriaId":"303CBFC2-22C1-47CE-A26C-A99B05763374"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4beta:*:*:*:*:*:*:*","matchCriteriaId":"2A8012CE-4D4B-4131-87E7-16D7907E3BB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4F88914-6097-4AF1-8337-DCF062EB88AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"8BDB49DC-5344-451E-B8D6-D02C3431CE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"B1FDA8D3-5082-479B-BA0A-F1E83D750B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7305910F-42BA-44CE-A7AC-B6F74200B68D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"B93EB4D6-3375-44BC-870F-714A3BC00C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta7:*:*:*:*:*:*","matchCriteriaId":"52F60D6E-64EB-4223-8A79-595693B444C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta7.1:*:*:*:*:*:*","matchCriteriaId":"37CF29B9-4397-4298-9326-0443E666CDC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta8:*:*:*:*:*:*","matchCriteriaId":"7D85DA34-A977-4A82-8E79-7BFE064DE9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:beta9:*:*:*:*:*:*","matchCriteriaId":"1476EF7B-A6F8-4B10-AF0F-986EA6BA3116"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"98E222F0-4CAA-4247-A00D-C6CEC2E55198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:rc5:*:*:*:*:*:*","matchCriteriaId":"63744245-6126-47F6-B9F5-E936538140C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0:rc6:*:*:*:*:*:*","matchCriteriaId":"C8805BEE-A4CF-45C2-B948-F1E8EF0A0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E474C33-B42A-4BB8-AC57-8A9071316240"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B83B3132-7D78-4AC3-B83A-A6A20AA28993"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0147FCED-AE75-4945-B76E-33F2AA764B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"9C976AB0-2D1A-40CA-AEC3-E271B59B6960"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"785205F3-88C1-4F63-B091-4920AF1C892D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"879A19B4-C037-407C-AC3F-76D6095E950C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF16907E-5B0A-4312-AB20-0020A6EDFDE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:opensource:1.4.23.2:*:*:*:*:*:*:*","matchCriteriaId":"876044E9-1B51-4877-A92F-63502D17E28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:opensource:1.4.24:*:*:*:*:*:*:*","matchCriteriaId":"CBF0F165-E75F-4990-8369-5FD275E453AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:opensource:1.4.24.1:*:*:*:*:*:*:*","matchCriteriaId":"A194CAD2-A056-4664-B24A-0424F69BA1E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:opensource:1.4.26:*:*:*:*:*:*:*","matchCriteriaId":"017F1C0D-0469-412A-99B0-70BF8195B148"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:opensource:1.4.26.1:*:*:*:*:*:*:*","matchCriteriaId":"23D0BE8E-1D28-4402-851E-C900E8609898"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:asterisk:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"15A0A1ED-5EDB-4D7B-9514-FD92BA00F940"},{"vulnerable":true,"criteria":"cpe:2.3:a:sangoma:asterisk:1.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"56DFDEB7-5220-4501-8499-9114727CD29A"},{"vulnerable":true,"criteria":"cpe:2.3:h:asterisk:appliance_s800i:1.3:*:*:*:*:*:*:*","matchCriteriaId":"27F70E5D-58B9-451D-96E9-CE788B5EEF9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:asterisk:appliance_s800i:1.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B08893AA-F51D-44CA-97C1-8E7E5A7A7F54"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2009-006.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506257/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36275","source":"cve@mitre.org"},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506257/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2347","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr."},{"lang":"es","value":"Múltiples desbordamientos de enteros en las herramientas de conversión de inter-color spaces de libtiff v3.8 hasta v3.8.2 y v4.0, permiten a atacantes dependientes del contexto ejecutar código de su elección a través de una imagen TIFF con valores grandes para el (1) ancho y (2) alto. Esto provoca un desbordamiento de búfer basado en memoria dinámica -heap- en (a) la función  cvt_whole_image de tiff2rgba y (b) la función tiffcvt de rgb2ycbcr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"44BC5E2C-B6A6-4999-A1EA-B91DA5C350C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F2850FD9-8BE8-410E-8A24-28549DAACEB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"60A24DC5-2DF5-4CA2-A0CD-BE0650CA6F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.9:*:*:*:*:*:*:*","matchCriteriaId":"81A01676-7D0B-4F92-A874-28ACDB728A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:4.0:*:*:*:*:*:*:*","matchCriteriaId":"771AFF6D-7E21-4773-9B5B-FBDAAF7E0E57"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2079","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/55821","source":"cve@mitre.org"},{"url":"http://osvdb.org/55822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35866","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35883","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/50726","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200908-03.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-02.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1835","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:150","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:043","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-012.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1159.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504892/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35652","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022539","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-801-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1870","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0621","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51688","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/55821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/50726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1159.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504892/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-801-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2348","sourceIdentifier":"cve@mitre.org","published":"2009-07-17T16:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) configuration settings by installing and executing an application that does not make a permission request before using the camera or microphone."},{"lang":"es","value":"Android v1.5 CRBxx permite a a usuarios locales saltarse los valores de la configuración de (1) Manifest.permission.CAMERA (también conocido como android.permission.CAMERA) y (2) Manifest.permission.AUDIO_RECORD (tambien conocido como android.permission.RECORD_AUDIO) instalando y ejecutando una aplicación que no hace una petición de permiso para usar la cámara o el micrófono."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8C354829-6BEB-4C67-972A-60367073753C"}]}]}],"references":[{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=4d8adefd35efdea849611b8b02d61f9517e47760","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=7b7225c8fdbead25235c74811b30ff4ee690dc58","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/packages/apps/Camera.git%3Ba=commit%3Bh=e655d54160e5a56d4909f2459eeae9012e9f187f","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-011.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/16/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505012/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35717","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51798","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=4d8adefd35efdea849611b8b02d61f9517e47760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=7b7225c8fdbead25235c74811b30ff4ee690dc58","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://android.git.kernel.org/?p=platform/packages/apps/Camera.git%3Ba=commit%3Bh=e655d54160e5a56d4909f2459eeae9012e9f187f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/16/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505012/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2350","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312."},{"lang":"es","value":"Microsoft Internet Explorer v6.0.2900.2180 y anteriores no bloquean el código \"javascript\": URIs en cabeceras \"Refresh\" en respuestas HTTP, permitiendo a atacantes remotos llevar a cabo ataques de secuencias de comandos en sitios cruzados (XSS) utilizando vectores relacionados con (1) inyectar una cabecera \"Refresh\" o (2) especificar el contenido de una cabecera \"Refresh\". Vulnerabilidad relacionado con CVE-2009-1312."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]}]}],"references":[{"url":"http://websecurity.com.ua/3275/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35570","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3275/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2351","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected."},{"lang":"es","value":"El navegador Opera versión 9.52 y versiones anteriores no bloquean javascript: URI en los encabezados de actualización en las respuestas HTTP, lo que permite a los atacantes remotos conducir ataques de tipo Cross-Site Scripting (XSS) mediante vectores relacionados con (1) inyectar un encabezado Refresh o (2) especificar el contenido de un encabezado Refresh, un problema relacionado con CVE-2009-1312. NOTA: luego se informó que 10.00 Beta 3 Build 1699 también se ve afectado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.52","matchCriteriaId":"BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta_3:*:*:*:*:*:*","matchCriteriaId":"ABB6D630-28EC-4506-AD0D-8C9A5E7D45CB"}]}]}],"references":[{"url":"http://websecurity.com.ua/3275/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35571","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3275/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2352","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected."},{"lang":"es","value":"Chrome de Google versiones 1.0.154.48 y anteriores, no bloquea los URI javascript: en encabezados Refresh en respuestas HTTP, que permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados con (1) inyectar un encabezado Refresh o ( 2) especificar el contenido de un encabezado Refresh, este es un problema relacionado con el CVE-2009-1312. NOTA: más tarde se reportó que las versiones 2.0.172.28, 2.0.172.37 y 3.0.193.2 Beta también están afectadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.48","matchCriteriaId":"4E9FA397-22DD-448C-8CC5-93549EAD7738"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}]}]}],"references":[{"url":"http://websecurity.com.ua/3275/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35572","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3275/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504718/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504723/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2353","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files."},{"lang":"es","value":"Encoder.php en eAccelerator permite a atacantes remotos ejecutar código a su elección copiando archivos ejecutables locales bajo la cuenta de administrador web a través de la opción -o y luego realizar una solicitud de dicho archivo, relacionado con la subida de ficheros de tipo imágen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9FCFAAEC-5080-4725-92FA-B52D995EEA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"D324A10D-C39E-4B15-9934-36DDB1A264C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"FF7309B6-80BF-4BFF-9362-D8F425D338FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"EABE705C-14E3-4638-990F-E45AB15F99E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5:rc1:*:*:*:*:*:*","matchCriteriaId":"5291F26A-0875-4A36-ABA3-1B6BBF196711"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C93F82A7-A2E5-456A-B1B3-D1D97A330EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A7837E3C-E0F5-4518-B98C-5EBE8F4E48FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaccelerator:eaccelerator:0.9.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A0B435D1-315B-4C39-BDC0-40E930A750D0"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:188","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504695/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504695/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2354","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"La vulnerabilidad de inyección SQL en la función auth_checkpass de la página de ingreso en NullLogic Groupware v1.2.7 permite a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros de usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nulllogic:groupware:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B8D0B6C8-315F-4A04-A133-9450AAA1ACCF"}]}]}],"references":[{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504737/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1817","source":"cve@mitre.org"},{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504737/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2355","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function."},{"lang":"es","value":"El módulo forum en NullLogic Groupware v.1.2.7 permite la autentificación de usuarios remotos causando una denegación de servicio (caida de la aplicación), especificando (1) una cadena vacia o (2)una cadena no numérica cuando, relativa a la función fmessagelist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2C7AD5C6-C4CF-4F21-9ED1-CFAF8859C384"}]}]}],"references":[{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504737/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1817","source":"cve@mitre.org"},{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504737/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2356","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query."},{"lang":"es","value":"Desbordamiento múltiple basado en pila de la función pgsqlQuery en NullLogic Groupware v1.2.7, cuando PostgreSQL es usado, quizás permita a los atacantes remotos ejecutar código a su elección a través (1) POP3, (2) SMTP, o (3) componente web que provoca una petición larga SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dan_cahill:nulllogic_groupware:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2C7AD5C6-C4CF-4F21-9ED1-CFAF8859C384"}]}]}],"references":[{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504737/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1817","source":"cve@mitre.org"},{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=55","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504737/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2357","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system."},{"lang":"es","value":"La configuración por defecto de TekRADIUS v3.0 usa la cuenta \"sa\" para comunicarse con Microsoft SQL Server, lo que facilita a atacantes remotos obtener acceso privilegiado a la base de datos y al sistema operativo Windows subyacente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8072089D-81C9-41A9-AEB3-DEC23DF2A9B5"}]}]}],"references":[{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504740/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1816","source":"cve@mitre.org"},{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504740/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2358","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TekRADIUS 3.0 uses BUILTIN\\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file."},{"lang":"es","value":"TekRADIUS v3.0 emplea permisos BUILTIN\\Users:R para el archivo TekRADIUS.ini, lo que permite a usuarios locales obtener credenciales para la base de datos ofuscada leyendo este archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8072089D-81C9-41A9-AEB3-DEC23DF2A9B5"}]}]}],"references":[{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504740/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1816","source":"cve@mitre.org"},{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504740/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2359","sourceIdentifier":"cve@mitre.org","published":"2009-07-07T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via (1) the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or (2) the command-line client, as demonstrated by a certain trcli -r command."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en TekRADIUSv3.0, permite a atacantes dependientes del contexto ejecutar comandos SQL de su elección a través de(1) el cliente GUI, como se demostró introduciendo en el cuadro de texto \"Browse Users\" en la pestaña \"Users\" o (2) a través del cliente de línea de comandos, como se demostró con el comando \"trcli -r\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yasinkaplan:tekradius:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8072089D-81C9-41A9-AEB3-DEC23DF2A9B5"}]}]}],"references":[{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504740/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1816","source":"cve@mitre.org"},{"url":"http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504740/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2360","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Passwd anteriores a v3.1.1 de Horde, permite a los atacantes remotos inyectar código web o HTML a través del parametro backend"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:passwd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"3B86E9FA-743D-48F0-86DA-52518D082EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:passwd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E21CBEB3-49DA-4DF7-93B2-5C15427AB735"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:passwd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4EB6F7B-EA67-4935-88FB-F15D585F6F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:passwd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5856C7BD-1C10-4527-8C6A-0A75EC1B751E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:passwd:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A42BBE35-8FE6-46E0-9A43-09EA7830BC32"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:passwd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9F5EE8AA-591E-457D-8885-20CB9448FA66"}]}]}],"references":[{"url":"http://bugs.horde.org/ticket/8398","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2009/000507.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35720","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35769","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1829","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35573","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51542","source":"cve@mitre.org"},{"url":"http://bugs.horde.org/ticket/8398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2009/000507.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2361","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en include/class.staff.php en osTicket before v1.6 RC5 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro staff username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket:*:rc4:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"B8BAC86E-391D-4571-99E4-54D8D2DA8C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket:1.6:rc1:*:*:*:*:*:*","matchCriteriaId":"61AEBDDE-5649-404E-8846-308F25503BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket:1.6:rc2:*:*:*:*:*:*","matchCriteriaId":"B9B55B2C-EFBB-4C9E-995A-79B9FB0250ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket:1.6:rc3:*:*:*:*:*:*","matchCriteriaId":"BF72CFE6-ADA8-410F-AEFF-368A7445B8FA"}]}]}],"references":[{"url":"http://osticket.com/forums/project.php?issueid=118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35629","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9032","source":"cve@mitre.org"},{"url":"http://www.ngenuity.org/wordpress/2009/06/26/osticket-admin-login-blind-sql-injection/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/55472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504615/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35516","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022480","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51417","source":"cve@mitre.org"},{"url":"http://osticket.com/forums/project.php?issueid=118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngenuity.org/wordpress/2009/06/26/osticket-admin-login-blind-sql-injection/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/55472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504615/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2362","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long string in a (1) .lst or (2) .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en KUDRSOFT AudioPLUS v2.00.215 permite a los atacantes remotos ejecutar código a su elección a través de una cadena larga en (1) .lst o (2) lista .m3u"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yukudr:audioplus:2.0.0.215:*:*:*:*:*:*:*","matchCriteriaId":"52626FDE-E598-4FE6-8B92-301285F4B266"}]}]}],"references":[{"url":"http://osvdb.org/55528","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35673","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9064","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51484","source":"cve@mitre.org"},{"url":"http://osvdb.org/55528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/audioplus-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2363","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls playlist file with a playlist entry containing a long File1 argument."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en KUDRSOFT AudioPLUS v2.00.215 permite a los atacantes remotos ejecutar código a su elección a través archivos de listas .pls que ejecutan una lista cuya entrada contiene un argumento largo File1.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yukudr:audioplus:2.00.215:*:*:*:*:*:*:*","matchCriteriaId":"E3C90F5B-2795-4146-8D17-4E12045E8198"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/audiopluspls-overflow.txt","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51485","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/audiopluspls-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2364","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2) a long string in the listdata.dat file, possibly related to a track entry."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Mp3-Nator v2.0 permite a los atacantes remotos ejecutar código a su elección a través de cadenas largas en archivos .plf, probablemente relacionados con una entrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mp3-nator:mp3-nator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"77C9C6BD-F436-40B5-8D2F-BA1F9DC78DBA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9060","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9136","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51486","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2365","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp en DataCheck Solutions GalleryPal FE v1.5 permite a atacantes remotos ejecutar comandos SQL a su elección a través de vectores no especificados. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:gallerypal_fe:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EE0631B2-D087-4AA4-A034-0D922C921E6D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55471","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51403","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2366","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp en DataCheck Solutions ForumPal FE v1.1 y ForumPal v.1.5 permite a atacantes remotos ejecutar comandos SQL a su elección a través de (1) parámetro password en v1.1 y (2) parámetro p_password en v.1.5. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:forumpal:1.5:*:*:*:*:*:*:*","matchCriteriaId":"902F1AA0-8056-4A42-8730-A7C1B0076698"},{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:forumpal_fe:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2170FD4B-44CB-4EB3-A610-F37B2A98CDFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9024","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55496","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/55497","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51403","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/55497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2367","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter."},{"lang":"es","value":"cgi-bin/makecgi-pro en Iomega StorCenter Pro genera sesiones IDs previsibles, que permiten a atacantes remotos secuestrar sesiones activas y obtener privilegios a través de ataques de fuerza bruta al parámetro session_id. \r\n"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iomega:storcenter_pro_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A101BCBF-C92E-497F-8CEC-DA004D346FFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iomega:storcenter_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"A12049A9-6111-408D-84AD-432A1E8DD352"}]}]}],"references":[{"url":"http://osvdb.org/55586","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/35666","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.metasploit.com/browser/framework3/trunk/modules/auxiliary/admin/http/iomega_storcenterpro_sessionid.rb?rev=6733","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51539","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/55586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/35666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://trac.metasploit.com/browser/framework3/trunk/modules/auxiliary/admin/http/iomega_storcenterpro_sessionid.rb?rev=6733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2368","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Socks Server v.5 anteriores a v.3.7.8-8 tiene un impacto desconocido y ataque por vector."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.8-7","matchCriteriaId":"4A407E76-26F1-4E28-B3D7-9361B976D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.3.2-mr2:*:*:*:*:*:*:*","matchCriteriaId":"77B49125-ABD7-4C21-AD5F-B4B8E1A72E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.3.2-mr3:*:*:*:*:*:*:*","matchCriteriaId":"FD8219A7-F748-4F0C-8605-6F660FC1B2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.3.2-mr4:*:*:*:*:*:*:*","matchCriteriaId":"E01F200F-31E9-4B2F-BC31-35FE14D0F97C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.3.3-mr5:*:*:*:*:*:*:*","matchCriteriaId":"12EB276C-D042-4E78-BAA0-3BAE5B93E51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.3.4-mr1:*:*:*:*:*:*:*","matchCriteriaId":"2296E234-A027-4EF8-A90E-1E92DED581D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.4.3-1:*:*:*:*:*:*:*","matchCriteriaId":"D19996B1-F3BC-4570-B6A0-80CF789EB6E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.4.3-2:*:*:*:*:*:*:*","matchCriteriaId":"318FE10E-B8EA-407D-916C-8976516FEA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.4.3-mr2:*:*:*:*:*:*:*","matchCriteriaId":"61A2A4FA-29E8-477B-B3F3-690305769FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.4.4-1:*:*:*:*:*:*:*","matchCriteriaId":"89830417-2A3F-40C0-A7E1-364F0ACC2D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.2-1:*:*:*:*:*:*:*","matchCriteriaId":"C9C9303F-FF88-4873-84E2-DBC78B1D6D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.3-1:*:*:*:*:*:*:*","matchCriteriaId":"8FA64B77-53EB-4A16-B60C-58A33437F392"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.3-2:*:*:*:*:*:*:*","matchCriteriaId":"9591F79B-FC46-477F-9DCA-96D3DF761E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.4-2:*:*:*:*:*:*:*","matchCriteriaId":"3B62C0C1-3FE6-478F-8F88-A52CD039C407"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.8-1:*:*:*:*:*:*:*","matchCriteriaId":"DE4649B6-7BB1-4571-BA57-344865FFD03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.8-2:*:*:*:*:*:*:*","matchCriteriaId":"2CFC5F86-8009-401D-B18C-B752912FBD0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.5.9-1:*:*:*:*:*:*:*","matchCriteriaId":"D358A053-BEE9-40B9-85A7-860C6CFDACD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.1-1:*:*:*:*:*:*:*","matchCriteriaId":"DB1E1B86-9C53-4CE2-83AD-9D5DC86BCB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.2-1:*:*:*:*:*:*:*","matchCriteriaId":"7EF5FA37-A36D-4D8D-83FB-50002B983FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.3-1:*:*:*:*:*:*:*","matchCriteriaId":"11104627-BF81-4F67-8A1D-1944BF5E422D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.3-2:*:*:*:*:*:*:*","matchCriteriaId":"D705281E-7D71-4D18-AACE-9BC39DC7C3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.4-1:*:*:*:*:*:*:*","matchCriteriaId":"30FF55AC-A92D-4E00-A1CE-9399FE046680"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.4-2:*:*:*:*:*:*:*","matchCriteriaId":"BF3DD816-08CB-43C9-900E-832C6E170BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.4-3:*:*:*:*:*:*:*","matchCriteriaId":"78F1394A-F65E-47B7-94C4-2FB6F86A067C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.5-1:*:*:*:*:*:*:*","matchCriteriaId":"6D962513-39A9-42D6-A815-A1B1EFF73438"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.6-1:*:*:*:*:*:*:*","matchCriteriaId":"D57B904B-3203-44B3-AD03-F80E2B02E82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.6.7-1:*:*:*:*:*:*:*","matchCriteriaId":"2C2BAAC9-3197-4262-9B06-BFE00B637BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.1-12:*:*:*:*:*:*:*","matchCriteriaId":"0F1F83C1-66FD-4F54-839B-E83BECF1C088"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.2-1:*:*:*:*:*:*:*","matchCriteriaId":"25B6F395-429B-4B7B-BA0A-EF51774AAAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.3-1:*:*:*:*:*:*:*","matchCriteriaId":"FB2FA1F0-AE51-4CEC-B7DC-CC28EC4473AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.4-1:*:*:*:*:*:*:*","matchCriteriaId":"E3B5585D-C22E-49BE-86F1-4E1A6F3A2CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.4-2:*:*:*:*:*:*:*","matchCriteriaId":"92EC616B-01C5-42D1-82CF-BB52A5D0DBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.5-2:*:*:*:*:*:*:*","matchCriteriaId":"726E7D16-A9E5-455D-A3A1-FC23339BCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.6-1:*:*:*:*:*:*:*","matchCriteriaId":"3F359009-2F13-4121-86F2-3BFF66163FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.7-1:*:*:*:*:*:*:*","matchCriteriaId":"B210FCC7-BC14-4ED2-AE61-51AB14A29EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-1:*:*:*:*:*:*:*","matchCriteriaId":"CB4C442A-4C18-4805-8ACC-BC1641345464"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-3:*:*:*:*:*:*:*","matchCriteriaId":"13E8CA20-0270-43F1-A1C8-F6E0FDF076E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-4:*:*:*:*:*:*:*","matchCriteriaId":"7658B074-9863-40F4-8466-670159A715C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-5:*:*:*:*:*:*:*","matchCriteriaId":"631DC825-BA71-4696-91A6-0F243B365046"},{"vulnerable":true,"criteria":"cpe:2.3:a:matteo_ricchetti:ss5:3.7.8-6:*:*:*:*:*:*:*","matchCriteriaId":"C5015442-7108-4444-A925-A545B968CD80"}]}]}],"references":[{"url":"http://secunia.com/advisories/35718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=695068","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=695068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2369","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de enteros en WxImage: Crea un función en src/common/image.cpp en wxWidgets v2.8.10 permitiendo a atacantes cuasar una denegación de servicio (caida) y una posible ejecución de código a su elección a través de un archivo JPEG manipulado, que provoca un desbordamiento de pila. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wxwidgets:wxwidgets:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"13C864D1-B6B1-4146-BF19-9FE26C08CEFC"}]}]}],"references":[{"url":"http://osvdb.org/55520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35351","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35913","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35552","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51516","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00693.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00712.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/55520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00693.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00712.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2370","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Advanced Forum v5.x anteriores a v5.x-1.1 y v6.x anteriores a v6.x-1.1, un modulo de Drupal  permite a los atacantes remotos inyectar código web o HTM a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michelle_cox:advanced_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0","matchCriteriaId":"566A37FE-0BCE-4869-AA58-DCDB115AADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:michelle_cox:advanced_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.0","matchCriteriaId":"4950854D-2EAE-48CA-987C-CFF2732E8409"},{"vulnerable":true,"criteria":"cpe:2.3:a:michelle_cox:advanced_forum:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"DADE796E-A135-4CAD-ACBD-81B248881846"},{"vulnerable":true,"criteria":"cpe:2.3:a:michelle_cox:advanced_forum:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D991E241-8E29-4AFD-A9D8-3D52EB871B27"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/507526","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/507550","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/507580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55521","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35678","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1769","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/507526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/507550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/507580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2371","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Advanced Forum 6.x before 6.x-1.1, a module for Drupal, does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature."},{"lang":"es","value":"Advanced Forum v6.x anteriores a v6.x-1.1, un módulo de Drupal, no impide a los usuarios modificar sus firmas después de que el formato comentado asociado ha sido cambiado a un formato de entrada controlado por administrador, que permite a usuarios autentificados remotamente inyectar codigo web, HTML y posiblemente código PHP, a su elección, a través de la firma Crafted user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michelle_cox:advanced_forum:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F213117-90F5-4224-9F9D-AF645442DF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:michelle_cox:advanced_forum:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D991E241-8E29-4AFD-A9D8-3D52EB871B27"}]}]}],"references":[{"url":"http://drupal.org/node/507526","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/507580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55522","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35678","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1769","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/507526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/507580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2372","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature."},{"lang":"es","value":"Drupal v.6x anteriores a v.6.13 no impide a los usuarios modificar sus firmas después de que el formato comentado asociado ha sido cambiado a un formato de entrada controlado por administrador, que permite a usuarios autentificados remotamente inyectar codigo web, HTML y posiblemente código PHP, a su elección, a través de la firma Crafted user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.13","matchCriteriaId":"78907707-0DC4-4F74-9311-D81BDE598413"}]}]}],"references":[{"url":"http://drupal.org/node/507572","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55525","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35681","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1022497","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/507572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1022497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2373","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Forum en Drupal v.6.x anteriores a v.6.13 permite a los atacantes remotos inyectar código web o HTM a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"45BE66AB-3491-42CB-8594-AB041D15EA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F6334858-DF62-467A-9126-6F0AD32D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A677D3A4-F15C-4287-94B3-4CAADA4679D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"24DAB8DE-2459-484C-88B5-9812CFBDC60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1_rev1.1:*:*:*:*:*:*:*","matchCriteriaId":"87BF63E1-FB1A-4D76-BF0D-F07267127504"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"FF34F79B-6B1B-45CA-82BA-24D4254B26DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*","matchCriteriaId":"698B4A81-4A20-4BD8-B0E5-3335B7DC190C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*","matchCriteriaId":"FD400243-3FFE-457C-A977-6688D9181FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*","matchCriteriaId":"2A2686FD-9643-4B8A-A8BF-C67120E44A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*","matchCriteriaId":"0F851EC4-6148-4C13-890F-8260D4DF5A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*","matchCriteriaId":"30282489-9168-4F7E-8465-1FE6521056B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"7954FAA5-0455-407F-B16F-CB1FD24F9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"B254CD4E-51A2-4E8D-9B59-FA5610F76683"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*","matchCriteriaId":"A4DF0926-E487-4F3B-B85B-2690127FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*","matchCriteriaId":"D05C77D9-E816-41A6-80DB-F4815980A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*","matchCriteriaId":"7F91E944-26C4-4886-B9B9-F32BD15569BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"}]}]}],"references":[{"url":"http://drupal.org/node/507572","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://osvdb.org/55524","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35681","source":"cve@mitre.org"},{"url":"http://drupal.org/node/507572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://osvdb.org/55524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2374","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache."},{"lang":"es","value":"Drupal v.5.x anteriores a v.5.19 y 6.x anteriores a v.6.13 no limpian adecuadamente el intento de acceso fallido a páginas que contienen tablas ordenadas,que incluyen el nombre de usuario y contraseña que puede ser leidas desde (1) la cabecera referida a HTTP de sitios web externos que son visitados desde estos enlaces o (2) cuando la página es activado, la pagina cache Drupal. \r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.19","matchCriteriaId":"929256E4-3986-47C4-8C06-47517DF8A66C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.13","matchCriteriaId":"78907707-0DC4-4F74-9311-D81BDE598413"}]}]}],"references":[{"url":"http://drupal.org/node/507572","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55524","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/35657","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35681","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://drupal.org/node/507572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/35657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2375","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long File_Name parameter in a .pdm file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Photo DVD Maker v.8.02, y posiblemente versiones anteriores, permite a los atacantes remotos ejecutar a su elección código a través del parámetro File_Name de un archivo .pdm. NOTE: some of these details are obtained from third party information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.2","matchCriteriaId":"82F446D4-54E6-4817-8CCA-C5AA56B8BEEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:5.20:*:*:*:*:*:*:*","matchCriteriaId":"C5E065A4-F86B-43FD-855F-F5FFA8DDA9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:5.30:*:*:*:*:*:*:*","matchCriteriaId":"6A18FED6-AA4C-4881-9652-02153FAFB9F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:5.31:*:*:*:*:*:*:*","matchCriteriaId":"863BDDC0-560B-4436-959D-935E975AC60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.0:*:*:*:*:*:*:*","matchCriteriaId":"8B42951A-56EE-435B-A0A9-A0FA5559DFFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.01:*:*:*:*:*:*:*","matchCriteriaId":"697F53E1-86B6-4527-B120-E47598876C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.10:*:*:*:*:*:*:*","matchCriteriaId":"CEA3BA81-FF0C-4DC7-840A-2A6137FFC0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.12:*:*:*:*:*:*:*","matchCriteriaId":"B2CA8993-FB6E-4AC1-95C1-5E90947D18AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.20:*:*:*:*:*:*:*","matchCriteriaId":"0A84A298-BB77-421F-AC1F-D415F394FFDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.22:*:*:*:*:*:*:*","matchCriteriaId":"21D353CD-3FA5-474B-A3A3-8933066F1FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.23:*:*:*:*:*:*:*","matchCriteriaId":"80BD0DF4-C243-49E3-ADC4-85F7F7BA11F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.30:*:*:*:*:*:*:*","matchCriteriaId":"163F7B3A-C2F7-48E7-A6FB-BA3D719B550F"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.32:*:*:*:*:*:*:*","matchCriteriaId":"B13DCBA0-9E15-4399-8176-4A6C3CE01807"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.40:*:*:*:*:*:*:*","matchCriteriaId":"3AAA3D9F-8E48-4DB1-A08B-A32856D0C8BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.52:*:*:*:*:*:*:*","matchCriteriaId":"3B319AB1-2A41-41FB-B288-292904979F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.53:*:*:*:*:*:*:*","matchCriteriaId":"31AFBB53-FC6C-477C-8BBA-49AD39083ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.54:*:*:*:*:*:*:*","matchCriteriaId":"EA777219-6685-4E34-99A3-1F00CF31B345"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.55:*:*:*:*:*:*:*","matchCriteriaId":"469ED982-D5E8-4295-90F4-40E4DB4F57ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.60:*:*:*:*:*:*:*","matchCriteriaId":"AB02EA1E-C67B-4EC9-BBBB-85D0E149FF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:6.61:*:*:*:*:*:*:*","matchCriteriaId":"E7908C21-41C7-4988-B65B-20A4481FA386"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.03:*:*:*:*:*:*:*","matchCriteriaId":"DBDB3833-BD47-47FC-9992-65A78A686974"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.04:*:*:*:*:*:*:*","matchCriteriaId":"CA08E730-D717-41ED-BF24-4B1CF2AA734F"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.05:*:*:*:*:*:*:*","matchCriteriaId":"1CD29D41-CC8E-427B-8F16-5373D0699252"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.10:*:*:*:*:*:*:*","matchCriteriaId":"2AB04C64-7233-4034-AB1F-57C07F506176"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.11:*:*:*:*:*:*:*","matchCriteriaId":"99B63449-D670-4977-82E4-356C57D4AF3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.12:*:*:*:*:*:*:*","matchCriteriaId":"6E57ED15-00C6-4E02-8D82-50EAB66F06E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.15:*:*:*:*:*:*:*","matchCriteriaId":"1F7EA13C-E60E-430C-94F3-A9835B12703D"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8451D723-CFB5-4CDF-ABAC-ABC02BB5F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.30:*:*:*:*:*:*:*","matchCriteriaId":"A364D75A-3E6D-4624-AA67-AC9714903897"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.32:*:*:*:*:*:*:*","matchCriteriaId":"309B36BB-E47C-48EE-A4DD-74821CC5F6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.33:*:*:*:*:*:*:*","matchCriteriaId":"1839A67B-65CE-464A-A4E1-BCD997EBFA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.34:*:*:*:*:*:*:*","matchCriteriaId":"B9C5D56D-27E9-485A-A7D9-4070037A9159"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.40:*:*:*:*:*:*:*","matchCriteriaId":"4AA51476-46C8-46BA-92D7-EDC9169EA23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.50:*:*:*:*:*:*:*","matchCriteriaId":"4ED30CF8-11C3-4764-9FCE-BED458272FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.52:*:*:*:*:*:*:*","matchCriteriaId":"7664C3C7-DC93-4070-A8EE-C0A93A79787D"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.55:*:*:*:*:*:*:*","matchCriteriaId":"8D1756CD-1073-4C67-A6E0-D003BD197CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.56:*:*:*:*:*:*:*","matchCriteriaId":"BBEC3BEC-7748-4F49-8A90-1F6A9C1BAD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.58:*:*:*:*:*:*:*","matchCriteriaId":"C20A5288-CC86-47B2-87A2-7D9E75B5F33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.71:*:*:*:*:*:*:*","matchCriteriaId":"EFB34337-F162-44C1-98E8-929C80B4542C"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.73:*:*:*:*:*:*:*","matchCriteriaId":"A9EBF2FF-1FE7-4637-9417-82D16C4E3BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.77:*:*:*:*:*:*:*","matchCriteriaId":"197438B1-6504-4B9A-9D9E-B206063866F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.78:*:*:*:*:*:*:*","matchCriteriaId":"A5C2E63A-DD22-4237-8EA9-E48F52F7799E"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.80:*:*:*:*:*:*:*","matchCriteriaId":"D65CD3BF-631D-450D-BB96-F00AAA2C688F"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.90:*:*:*:*:*:*:*","matchCriteriaId":"5CEB996D-5B4B-485F-994C-415C75D5D5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.91:*:*:*:*:*:*:*","matchCriteriaId":"62DF298B-8D64-4070-9A10-093C4AF944EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.92:*:*:*:*:*:*:*","matchCriteriaId":"664E2F5C-C3E1-44FB-8CD4-86787A66DCCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.93:*:*:*:*:*:*:*","matchCriteriaId":"17EA1489-AE4C-43A2-A9F1-DABB4E11BBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:photo-dvd-maker:photo_dvd_maker:7.96:*:*:*:*:*:*:*","matchCriteriaId":"317C5754-68DD-476D-B3A6-26AA0A89DA0B"}]}]}],"references":[{"url":"http://blog.bkis.com/?p=713","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35709","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504738/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1793","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blog.bkis.com/?p=713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504738/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2376","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Html::función textarea en application/libraries/Html.php en TangoCMS v2.x y anteriores a v.2.3.0 permite a atacantes remotos inyectar código web o HTML a su elección a través del valor del parámetro, en el módulo Contact"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"35A0FF1D-220C-4346-8DD6-A32A4EA00F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"45A5005C-03A3-42E9-A00C-6A0620832C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D6B95017-5076-419F-ABB4-33387034F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DA3B5DB5-65F2-46A3-B5CD-087FB214539C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"76E1AECF-7617-412E-A4C2-DFEBB444F0E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"56C0A809-5394-44C4-B58F-61E591A8C542"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6C815DF4-341A-426E-A0B4-AC83DC7B446B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C92559DE-504C-43CD-AC15-E7D94DB553B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"15FA7FEA-2B72-403B-A7AD-3C741318F5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9EB76995-46E6-4584-8EAB-93432284AABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"07E5015A-260B-49B6-84CA-E7BE3AFFA7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9149CAE5-B948-4B6C-B5A3-19BB28FDE512"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1EBE12B8-C83A-44A6-A732-93C549DB6BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tangocms:tangocms:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"BC056D18-2FC4-4A5D-B1FF-40A4F723B2F8"}]}]}],"references":[{"url":"http://dev.tangocms.org/issues/show/140","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev.tangocms.org/repositories/diff/tangocms?rev=2372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tangocms.org/changelog","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51432","source":"cve@mitre.org"},{"url":"http://dev.tangocms.org/issues/show/140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dev.tangocms.org/repositories/diff/tangocms?rev=2372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tangocms.org/changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2377","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service (application crash) via a long PrinterName property."},{"lang":"es","value":"Desbordamiento de búfer en el control Avax Vector ActiveX en AVAX-software Avax Vector ActiveX v1.3 permite a atacantes causar una denegación de servicios (caida de aplicación) a través de la propiedad larga PrinterName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avax-software:avax_vector_activex:1.3:*:*:*:*:*:*:*","matchCriteriaId":"18EDF50A-768E-4951-94C7-683F78C23EC9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504729/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35583","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504729/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2378","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo PHP remoto en formmailer.admin.inc.php en Jax FormMailer v3.0.0 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro BASE_DIR [jax_formmailer]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jtr:jax_formmailer:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6DE8FBC7-22B3-43B0-8740-A21E193797FA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51443","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2379","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en public/index.php en BIGACE Web CMS v2.6, permite a atacantes remotos añadir y ejecutar archivos locales de su elección a través de un ..(punto punto) en el parámetro \"cmd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigace:bigace_cms:2.6:*:*:*:*:*:*:*","matchCriteriaId":"ABE33EE5-155B-4669-B0CD-78B8F5AA2AF6"}]}]}],"references":[{"url":"http://forum.bigace.de/announcements/security-patch-for-bigace-2-6","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/55510","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51444","source":"cve@mitre.org"},{"url":"http://forum.bigace.de/announcements/security-patch-for-bigace-2-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/55510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2380","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en includes/functions.php en 4images v1.7 hasta v.1.7.7, permite a atacantes remotos inyectar código web o HTML a su elección a través de vectores referidos a la variable URL"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7:*:*:*:*:*:*:*","matchCriteriaId":"AB41A1A3-69D5-4175-BF6C-285C0C9990E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"9029C35C-D961-419A-A79F-9EFACAD2560A"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CD8FBCEC-1F99-4DF1-A9E5-CFE353D2D359"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"729F3EA5-9289-435E-92BD-1C12E839988A"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"F7B51C8F-0710-4C7A-A08B-FE940CFF12D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E5D3F1-18E8-4E5C-BBCD-55AC38A06028"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"EC0556E8-324C-4B4C-9B4C-75EDAA1F3EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:4homepages:4images:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"452F8D87-1F53-41F0-9D75-9DC05F4033D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/35639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.4homepages.de/forum/index.php?topic=25057.0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.4homepages.de/forum/index.php?topic=25057.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2381","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate."},{"lang":"es","value":"Gizmo v3.1.0.79 sobre Linux no verifica el certificado SSL del servidor, lo que permite a servidores remotos obtener las credenciales de cualquier usuario a través de un una suplantación de certificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gizmo5:gizmo:3.1.0.79:-:linux:*:*:*:*:*","matchCriteriaId":"5892B44C-3BC3-4DA3-A640-9ED6E32418F6"}]}]}],"references":[{"url":"http://secunia.com/advisories/35628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504572/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51399","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/504572/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2382","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access by setting the PHPMYBCAdmin cookie to LOGGEDIN."},{"lang":"es","value":"admin.php en phpMyBlockchecker v1.0.0055, permite a atacantes remotos evitar la autenticación y obtener acceso como administrador estableciendo la cookie PHPMYBCAdmin a LOGGEDIN."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jay-jayx0r:phpmyblockchecker:1.0.0055:*:*:*:*:*:*:*","matchCriteriaId":"1E943F3B-00C7-4A58-A79E-03B30336DA26"}]}]}],"references":[{"url":"http://osvdb.org/55505","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/35660","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9053","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51445","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/55505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/35660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2383","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter."},{"lang":"es","value":"vulnerabilidad en BTE_RW_webajax.php en el complemento Related Sites v.2.1 de WordPress permite a atacantes remotos ejecutar comandos SQL a través del parámetro guid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blogtrafficexchange:related-sites:2.1:*:*:*:*:*:*:*","matchCriteriaId":"103F9677-E7BE-49F4-982E-93CEB078836A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9054","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35538","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51446","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2384","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en amp.exe en Brothersoft PEamp v1.02b, permite a atacantes asistidos por el usuario provocar ejecutar código a su elección a través de una cadena en un fichero lista .m3u. NOTA: algunos de estos detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mathi:peamp:1.02b:*:*:*:*:*:*:*","matchCriteriaId":"DA02B963-91C1-4CA9-B374-0CAAB9203663"}]}]}],"references":[{"url":"http://secunia.com/advisories/35663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2385","sourceIdentifier":"cve@mitre.org","published":"2009-07-08T15:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum (SMF) allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función awardsMembers en Sources/Profile.php en el componente Member Awards para Simple Machines Forum /SMF), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"profile\" al index.php. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:simple_machines:smf:*:*:*:*:*:*:*:*","matchCriteriaId":"8B2715F6-8FDB-4C79-95E4-B7CCDFABD5E3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fustrate:member_awards:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9CFA1DC-E722-4CF8-A7ED-1BB7D5617702"}]}]}],"references":[{"url":"http://secunia.com/advisories/35661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35536","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51441","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2386","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el complemento Awingsoft Awakening Winds3D Viewer v3.5.0.0, v3.0.0.5 y posiblemente otras versiones permite a atacantes remotos forzar la descarga y ejecución de archivos arbitrarios a través del método GetURL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:awingsoft:awakening_winds3d_viewer_plugin:3.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8E9ADF12-4B92-44B6-BD4A-F7766257549E"},{"vulnerable":true,"criteria":"cpe:2.3:a:awingsoft:awakening_winds3d_viewer_plugin:3.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6825AF8E-3F4E-4724-8B7D-E7FBCF72B53E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/winds3d-viewer-advisory","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35595","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/winds3d-viewer-advisory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2387","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv_49 through snv_109 allows local users to cause a denial of service (deadlock and panic) via unknown vectors, related to the ldt_rewrite_syscall function."},{"lang":"es","value":"Vulnerabilidad no especificada en el sistema de archivos proc en Sun OpenSolaris snv_49 hasta snv_109 permite a usuarios locales causar una denegación de servicio (bloqueo mutuo y panic) a través de vectores desconocidos relacionados con la función ldt_rewrite_syscall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258888-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35588","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258888-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2388","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en Opial v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro txtPassword. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shalwan:opial:1.0:*:*:*:*:*:*:*","matchCriteriaId":"74E0DCAF-FC37-4489-AA56-B1D7162F489C"}]}]}],"references":[{"url":"http://osvdb.org/55560","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/55560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2389","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) jahr or (2) idneu parameter in an archive action, or (3) the newsid parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en newsscript.php en USOLVED NEWSolved v1.1.6, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) jahr o (2) idneu en una acción de archivo, o (3) el parámetro newsid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usolved:newsolved:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"8C1D4484-9A05-4A2D-93ED-9B4572B31A4B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35611","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9042","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2390","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the BookFlip (com_bookflip) component 2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente BookFlip (com_bookflip) v2.1 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro book_id a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-cimag-in:com_bookflip:2.1:*:*:*:*:*:*:*","matchCriteriaId":"23F7CCD8-7BF6-4CF8-9A55-0BCFC8CC0525"}]}]}],"references":[{"url":"http://secunia.com/advisories/35608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9040","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2391","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en text.php en Virtuenetz Virtue Online Test Generator permite a atacantes remotos inyectar secuencias de comandos web arbitrario o HTML a través del parámetro tid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_online_test_generator:*:*:*:*:*:*:*:*","matchCriteriaId":"B4D7DD4D-EF38-4DE4-A66A-6795AF5E097B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35591","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2392","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en text.php en Virtuenetz Virtud Test Online Generador permite a atacantes remotos ejecutar comandos SQL a través del parámetro tid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_online_test_generator:*:*:*:*:*:*:*:*","matchCriteriaId":"B4D7DD4D-EF38-4DE4-A66A-6795AF5E097B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35591","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51387","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2393","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors."},{"lang":"es","value":"admin/index.php en Virtuenetz Virtue Online Test Generator no requiere privilegios administrativos, lo cual permite a los usuarios remotos autenticados tener un impacto desconocido a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuenetz:virtue_online_test_generator:*:*:*:*:*:*:*:*","matchCriteriaId":"B4D7DD4D-EF38-4DE4-A66A-6795AF5E097B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35591","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2394","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en cat.php en SMSPages v1.0 en Mr.Saphp Arabic Script Mobile (alias Messages Library) v2.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro CatID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smspages:smspages:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BAB30285-CE0C-41CE-A4FC-FCD8250D065B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mr_saphp_arabic_mobile:messages_library:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DAE44B2A-461E-4F6B-9052-DDC50730079E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9027","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2395","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el componente K2 (com_k2) v1.0.1 beta y anteriores para Joomla! permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro categoría (category)en una acción itemlist a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlaworks:com_k2:*:beta:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"0B3F3867-1CB0-4931-98B7-479DACFCFDE9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2396","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto PHP en template/album.php en DM Albums v1.9.2, utilizado independiente o como un plugin de WordPress, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro SECURITY_FILE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dutchmonkey:dm_album:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"06656261-4E27-4FF4-A04A-AA49008946BF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dutchmonkey:dm_album:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"06656261-4E27-4FF4-A04A-AA49008946BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/35619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9043","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2397","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en download.php en Audio Article Directory permite a atacantes remotos leer ficheros arbitrarios a través de secuencias de salto de directorio en el parámetro file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:audioarticledirectory:audio_article_directory:-:*:*:*:*:*:*:*","matchCriteriaId":"857C30D8-70D5-4671-8ED7-F132F35CC6CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/35609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9041","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2398","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot slash slash) in the t parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio transversal en test/index.php en PHP-Sugar  v0.80 permite a atacantes remotos leer ficheros arbitrarios a través de uno ..// (punto punto barra barra) en el parámetro t."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-sugar:php-sugar:0.80:*:*:*:*:*:*:*","matchCriteriaId":"8098F4DB-1C48-4454-BC28-79C523ADFF45"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9036","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2399","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión de archivo remoto en dm-albums/template/album.php en DM FileManager v3.9.4, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro SECURITY_FILE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dutchmonkey:dm_filemanager:3.9.4:*:*:*:*:*:*:*","matchCriteriaId":"2B0A8F1A-9DE3-4A3C-B4A4-4FB9A66312C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/35622","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2400","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el componente PHP (com_php) para Joomla! permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fijiwebdesign:com_php:*:*:*:*:*:*:*:*","matchCriteriaId":"3431C966-7747-4D17-BADF-B36F8E5367BA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9028","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35515","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2401","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en PHPEcho CMS v2.0-rc3 permite a atacantes remotos inyectar secuencias de comandos (script) web a su elección o HTML a través de un mensaje en el foro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpecho_cms:phpecho_cms:2.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"3CE38DB7-6F88-42C7-B6F5-717A9DF4A847"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35488","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51360","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2402","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo foro en PHPEcho CMS v2.0-rc3 permite a atacantes remotos ejecutar comandos SQL a su elección a través de el parámetro id en un acción de hilo, un vector diferente que CVE-2008-0355."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpecho_cms:phpecho_cms:2.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"3CE38DB7-6F88-42C7-B6F5-717A9DF4A847"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35488","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2403","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long string in a .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en SCMPX 1.5.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) o ejecutar código arbitrario a través de una cadena larga en un archivo de lista de reproducción de archivos .m3u"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shinjichiba:scmpx:1.5.1:*:*:*:*:windows:*:*","matchCriteriaId":"2A278B47-0C76-499A-BA99-6374253B534D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35596","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9033","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1729","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2404","sourceIdentifier":"secalert@redhat.com","published":"2009-08-03T14:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el analizador de expresiones regulares en Mozilla NetWork Security Services (NSS) anteriores a 3.12.3 como las utilizadas en Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, y AOL Instant Messenger (AIM), permite a servidores SSL remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecución de código de su elección a través de un nombre de dominio largo en el campo Common Name (CN) en un certificado X.509, relativo a la función cert_TestHost_Name.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.12.3:*:*:*:*:*:*:*","matchCriteriaId":"000A1698-C9DE-49A1-9F5D-FDED34A134E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*","matchCriteriaId":"E8DF7CEB-81F5-46FC-9588-AF5326957C89"},{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*","matchCriteriaId":"6606C39B-8137-44B6-A96E-E0B8F67FAFFB"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"},{"vulnerable":false,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","matchCriteriaId":"87A0BF9F-F7E9-4196-BEF7-800B4C850990"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2009-1185.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36088","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36102","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39428","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1","source":"secalert@redhat.com"},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-43.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35891","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103B.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512912","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/810-2/","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/810-2/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2405","sourceIdentifier":"secalert@redhat.com","published":"2009-12-15T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la consola web en el servidor de aplicaciones en Red Hat JBoss Enterprise Application Platform (también conocido como JBoss EAP or JBEAP) v4.2.0 anteriores a v4.2.0.CP08, v4.2.2GA, v4.3 anteriores a v4.3.0.CP07, y v5.1.0GA  permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los parámetros (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled  para createThresholdMonitor.jsp. NOTA: Algunos de los detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E9830D64-C46F-4423-BE0B-0B1FDB765D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp01:*:*:*:*:*:*","matchCriteriaId":"E715EAF0-DAE9-4FD5-996E-18E61C9CC703"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp02:*:*:*:*:*:*","matchCriteriaId":"4E6C7D0B-DBC0-4414-9C40-713E01146FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp03:*:*:*:*:*:*","matchCriteriaId":"C68C2A35-BC1E-414A-9DB1-7585435DCA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp01:*:*:*:*:*:*","matchCriteriaId":"599FBAC3-2E83-443B-AACB-99BBA896CB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp02:*:*:*:*:*:*","matchCriteriaId":"43590B58-A1C7-4105-A00F-6C4F46A6CC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp03:*:*:*:*:*:*","matchCriteriaId":"A44F907E-AE57-4213-B001-A23319B72CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp04:*:*:*:*:*:*","matchCriteriaId":"243ED156-851C-4897-AF59-86FCA5C9C66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp05:*:*:*:*:*:*","matchCriteriaId":"125BF8B0-AF1B-4FB1-9D41-D9FB30AE23FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp06:*:*:*:*:*:*","matchCriteriaId":"A3E7C299-8A2D-4733-98AC-F6FA37CC1C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp07:*:*:*:*:*:*","matchCriteriaId":"7398F80B-8318-40E7-A0EE-6CCF7E066C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.2:ga:*:*:*:*:*:*","matchCriteriaId":"A04F68DF-F024-4349-B504-1D0588A20B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D4816097-6982-4FBA-BD34-3D24BCA5A56A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3:cp01:*:*:*:*:*:*","matchCriteriaId":"888B9B34-40A3-4CE3-9643-0174CC61751B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp01:*:*:*:*:*:*","matchCriteriaId":"2B3E4026-F98E-4AEB-9FE1-4FFBBF44AC55"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp02:*:*:*:*:*:*","matchCriteriaId":"960A513A-CAFC-4B3D-ABD7-4659CF545C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp03:*:*:*:*:*:*","matchCriteriaId":"C2D8DC6D-5E39-4A53-8BB8-F998706D573F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp04:*:*:*:*:*:*","matchCriteriaId":"3AA2D64E-D7E7-400D-AC7E-CB2045750791"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:ga:*:*:*:*:*:*","matchCriteriaId":"881A0E69-23D1-4446-8355-970E50C0290F"}]}]}],"references":[{"url":"http://secunia.com/advisories/35680","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37671","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023315","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/60898","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/60899","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37276","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510023","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54700","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBAS-7105","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-2274","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-2284","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/35680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBAS-7105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-2274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-2284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2406","sourceIdentifier":"secalert@redhat.com","published":"2009-07-31T19:00:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función parse_tag_11_packet en fs/ecryptfs/keystore.c en el subsistema eCryptfs del kernel de Linux anteriores a v2.6.30.4 permite a usuarios locales provocar una denegación de servicio (finalización del sistema) o posiblemente obtener mayores privilegios mediante vectores que utilizan un fichero eCryptfs modificado, relacionados con la no comprobación de que la longitud de la clave de firma en un paquete \"Tag 11\" es compatible con el tamaño del búfer de la clave de firma."}],"vendorComments":[{"organization":"Red Hat","comment":"The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG did not include support for eCryptfs, and therefore are not affected by this issue.\n\nRed Hat Enterprise Linux 5 was vulnerable to this issue and was addressed via: https://rhn.redhat.com/errata/RHSA-2009-1193.html","lastModified":"2009-08-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.30.3","matchCriteriaId":"35E762F1-57F3-4E5D-938D-F966F4F5EDB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*","matchCriteriaId":"A12077FF-39D0-474A-AB6C-62926CC065B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*","matchCriteriaId":"508BC14E-41D8-4847-AE0F-7830E2EE0522"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*","matchCriteriaId":"241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59393187-1D1E-45CD-BE0E-385F978E4834"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"D0CCDF6B-0365-4553-B161-3F6D68A58F72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*","matchCriteriaId":"A9B2BB71-0489-40F6-9CB6-A95B96E92106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*","matchCriteriaId":"842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*","matchCriteriaId":"05F0391C-D4CC-4652-A24C-DC47F4C3DC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*","matchCriteriaId":"56340FF9-EE77-4EB3-9720-240FAAEF39F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*","matchCriteriaId":"79EB0E94-6AE8-4703-96BD-B927E0F2893F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*","matchCriteriaId":"8A1F1242-0F07-4D81-9175-3BA5B2C7B564"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*","matchCriteriaId":"3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1CF4EC75-06A2-4BD4-A39A-183F00C46E11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*","matchCriteriaId":"DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*","matchCriteriaId":"A6501752-2595-4412-9140-C78EB9FD41CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*","matchCriteriaId":"0D78F881-DB3A-423A-8DAD-314645B2B3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*","matchCriteriaId":"D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*","matchCriteriaId":"70D1E088-5A9B-4CBF-A4FF-969201942CCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*","matchCriteriaId":"27B3F220-7FE0-4D47-918B-C9CBFAD23808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*","matchCriteriaId":"813C1C54-697D-4170-8202-E07FF578815A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*","matchCriteriaId":"51403992-077A-4F6F-8722-DAAD30489DB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*","matchCriteriaId":"BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*","matchCriteriaId":"0B066E6A-B150-4D5F-8263-F955EB366806"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*","matchCriteriaId":"6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*","matchCriteriaId":"2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*","matchCriteriaId":"72587FF5-B82D-42DE-A35B-0ECA76C37D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*","matchCriteriaId":"013D2D76-AFAD-4479-B814-8597D8F51B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*","matchCriteriaId":"86F9C61A-913C-42BA-BD16-BF82F75AA84B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*","matchCriteriaId":"B6E51493-8AE7-4F18-85BD-D0444A297C1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*","matchCriteriaId":"CD68B4B3-CCF4-4A64-8C67-F549CC905A06"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*","matchCriteriaId":"D9350C90-D7A3-4DFF-A574-D079A4DCC453"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*","matchCriteriaId":"9A27FA94-0483-4DD7-A2C4-9FA246526243"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*","matchCriteriaId":"E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC106BDA-2EA4-41A2-AA01-6352A5C255B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*","matchCriteriaId":"FB515243-7519-4CA4-9267-D9A6798CBC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*","matchCriteriaId":"B672E1B6-E8E9-473F-853F-906EA56D712E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*","matchCriteriaId":"0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc1:*:*:*:*:*:*","matchCriteriaId":"9F727CD3-D3C2-4648-9EC5-092DF3F73B13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc3:*:*:*:*:*:*","matchCriteriaId":"D1765065-ABE5-478C-9ACC-EFFA8E4A7043"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"79C73761-289A-4BEE-BC3F-A5EC4AC7B2CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:*:*:*:*:*:*","matchCriteriaId":"D8DE0233-BE28-4C0A-B9FB-2157F41F8D4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc5:*:*:*:*:*:*","matchCriteriaId":"95DD4647-564E-4067-A945-F52232C0A33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:*:*:*:*:*:*:*","matchCriteriaId":"6E20AD05-586B-4493-9793-3FF8028CF887"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*","matchCriteriaId":"169446DE-67F8-4738-91FE-ED8058118F80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*","matchCriteriaId":"4F76C298-81DC-43E4-8FC9-DC005A2116EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*","matchCriteriaId":"0AB349B2-3F78-4197-882B-90ADB3BF645A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*","matchCriteriaId":"476CB3A5-D022-4F13-AAEF-CB6A5785516A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*","matchCriteriaId":"8CFD5CDD-1709-44C7-82BD-BAFDC46990D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.12:*:*:*:*:*:*:*","matchCriteriaId":"8D7BBB5F-44F7-467F-B934-33ABF744A107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.22:*:*:*:*:*:*:*","matchCriteriaId":"0478831E-87B2-441F-AEC2-403A35FED1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*","matchCriteriaId":"93F0834D-C5EA-4C96-8D6C-3123ECF78F8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc2:*:*:*:*:*:*","matchCriteriaId":"F1784CBC-BEAF-48E5-95A4-2A4BD5F9F1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc3:*:*:*:*:*:*","matchCriteriaId":"31523E67-5E4F-43F7-9410-20CB3F287DAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*","matchCriteriaId":"5D9F976B-1328-40FE-A1F2-C1DF3F836604"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc5:*:*:*:*:*:*","matchCriteriaId":"9B627DE3-2702-4EB2-9733-253D315FB594"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*","matchCriteriaId":"10E1B011-8D20-448E-9DD5-023DD30D1FE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*","matchCriteriaId":"2A29A4BC-0442-458E-A874-BF0D0F2870FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*","matchCriteriaId":"04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*","matchCriteriaId":"F87F764B-4097-44FA-B96E-A5DA75E31F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*","matchCriteriaId":"D7025803-C679-44DB-ADEE-864E6CAAD9B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*","matchCriteriaId":"24B879D6-4631-49A8-9366-75577DFB755D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:rc5:*:*:*:*:*:*","matchCriteriaId":"C5B76C21-70C8-4911-A24B-270F876EF7C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*","matchCriteriaId":"390B1E09-7014-4A74-834C-806BBEBAF6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*","matchCriteriaId":"FEF02479-2124-4655-A38D-A4793D3B8A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*","matchCriteriaId":"0FB5CF04-B5B6-4DFB-B051-61EDA257019F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:*:*:*:*:*:*","matchCriteriaId":"A89DC9CD-C06F-4B9B-B376-900E65016296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:*:*:*:*:*:*","matchCriteriaId":"15BED7A7-3E96-43EF-8B6F-3C94897C3AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:*:*:*:*:*:*","matchCriteriaId":"8C6FCAC4-B6C6-4125-B3AC-F30407AA7738"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:*:*:*:*:*:*","matchCriteriaId":"707ECC75-65B6-4B02-BE85-A4804549A2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.11:*:*:*:*:*:*:*","matchCriteriaId":"1EBB1A21-3826-4BC5-A243-AF8F8D1D4728"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*","matchCriteriaId":"D1369C4A-EF3B-4805-9046-ADA38ED940C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc2:*:*:*:*:*:*","matchCriteriaId":"CC3639E1-B5E4-4DD6-80D4-BA07D192C42D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc3:*:*:*:*:*:*","matchCriteriaId":"54393D69-B368-4296-9798-D81570495C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc4:*:*:*:*:*:*","matchCriteriaId":"6791A801-9E06-47DD-912F-D8594E2F6B3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc5:*:*:*:*:*:*","matchCriteriaId":"AE90CCED-3A5B-46E3-A6B0-4865AB786289"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:rc6:*:*:*:*:*:*","matchCriteriaId":"CBFF6DE7-6D7C-469A-9B2D-2F6E915F55B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16_rc7:*:*:*:*:*:*:*","matchCriteriaId":"E55F2549-F813-4BD6-8933-6788D898ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*","matchCriteriaId":"980A6C7D-6175-4A44-8377-74AA7A9FD108"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*","matchCriteriaId":"5C226902-04D9-4F32-866C-20225841ECF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*","matchCriteriaId":"C6EDD210-6E7B-4BD8-96C2-2C22FEE7DE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*","matchCriteriaId":"655DB612-AF49-4C17-AFB9-2E33EE8E0572"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*","matchCriteriaId":"7EE30F34-EE81-4E1E-BF9F-A7A36B78B897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*","matchCriteriaId":"E1F65DF2-2794-47B7-9676-CCF150683CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:x86_32:*:*:*:*:*","matchCriteriaId":"A2B1B229-B325-4D8C-B326-1FF6D85891F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.0:*:*:*:*:*:*:*","matchCriteriaId":"7A252C50-D63A-4FC0-A51E-A63A939D6AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc1:*:*:*:*:*:*","matchCriteriaId":"4ED4E9DD-DDAD-46A8-9AD2-9CAE406F7575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc2:*:*:*:*:*:*","matchCriteriaId":"8D97ED16-D6B7-4445-889C-4D6DE2EDC49A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc3:*:*:*:*:*:*","matchCriteriaId":"B2C2D5D4-9A4B-4CDF-8D71-D22EB5E97D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:rc4:*:*:*:*:*:*","matchCriteriaId":"DFFB2843-A867-48EC-97D7-B106C7BBAED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:rc2:*:*:*:*:*:*","matchCriteriaId":"FB1E1A8B-6FA1-45AD-B034-EC34884527DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git1:*:*:*:*:*:*","matchCriteriaId":"C8CBD2D9-3765-40B2-A056-D71BE750CC01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git2:*:*:*:*:*:*","matchCriteriaId":"A8F4D967-ED04-42EA-8B3E-36301D39D651"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git3:*:*:*:*:*:*","matchCriteriaId":"C498EE89-7F07-4B1E-90E6-5897E6B04670"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git4:*:*:*:*:*:*","matchCriteriaId":"708656AF-92AE-4EAF-AF19-F457DB04ADB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git5:*:*:*:*:*:*","matchCriteriaId":"3B263AB8-74A4-4C73-915C-A02724C24B45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git6:*:*:*:*:*:*","matchCriteriaId":"A96D739B-9E8B-4D2F-9DED-4C9B313473CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:git7:*:*:*:*:*:*","matchCriteriaId":"4ACDEFEE-B946-4232-8BD5-A9F7AA84ED85"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:*:*:*:*:*:*","matchCriteriaId":"247E13CB-9B11-4B64-80AD-C0F8482CCC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:*:*:*:*:*:*","matchCriteriaId":"903FE5D3-A9FB-466D-833B-448233BB0803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:*:*:*:*:*:*","matchCriteriaId":"958EDC43-0848-4D93-9D07-6A085A5940B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc6:*:*:*:*:*:*","matchCriteriaId":"AD35F21D-0A28-4C14-BCF5-8EDA760701C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:rc7:*:*:*:*:*:*","matchCriteriaId":"3AAD8BE9-A05B-40E8-80DF-0B2878968BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:rc6:*:*:*:*:*:*","matchCriteriaId":"D123AAFE-3F17-45C4-9382-BA392FD022C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"1BACA0F0-B7B5-4C8B-8D9A-DAA803960AAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*","matchCriteriaId":"CBEBA0F6-5453-4993-932B-BB8941DCC5CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*","matchCriteriaId":"0D5FC0A9-A78A-4D09-BDCC-208AFC899824"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*","matchCriteriaId":"7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*","matchCriteriaId":"54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6352a29305373ae6196491e6d4669f301e26492e","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"secalert@redhat.com"},{"url":"http://risesecurity.org/advisories/RISE-2009002.txt","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35985","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36045","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36054","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36116","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:029","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/505334/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35851","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022663","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2041","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10072","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8246","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6352a29305373ae6196491e6d4669f301e26492e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://risesecurity.org/advisories/RISE-2009002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505334/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2407","sourceIdentifier":"secalert@redhat.com","published":"2009-07-31T19:00:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la función parse_tag_3_packet en fs/ecryptfs/keystore.c en el subsistema eCryptfs del kernel de Linux anteriores a v2.6.30.4 permite a usuarios locales provocar una denegación de servicio (finalización del sistema) o posiblemente obtener mayores privilegios mediante vectores que emplean un fichero eCryptfs modificado, relacionado con un tamaño de clave de cifrado larga en un paquete \"Tag 3\"."}],"vendorComments":[{"organization":"Red Hat","comment":"The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG did not include support for eCryptfs, and therefore are not affected by this issue.\n\nRed Hat Enterprise Linux 5 was vulnerable to this issue and was addressed via: https://rhn.redhat.com/errata/RHSA-2009-1193.html","lastModified":"2009-08-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.30.3","matchCriteriaId":"35E762F1-57F3-4E5D-938D-F966F4F5EDB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"secalert@redhat.com"},{"url":"http://risesecurity.org/advisories/RISE-2009003.txt","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35985","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36045","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36054","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36116","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36131","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/505337/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35850","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2041","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11255","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8057","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://risesecurity.org/advisories/RISE-2009003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505337/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-807-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2408","sourceIdentifier":"secalert@redhat.com","published":"2009-07-30T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5."},{"lang":"es","value":"Mozilla Firefox anterior a v3.5 y NSS anterior a v3.12.3  no tratan apropiadamente un carácter '\\0' en un nombre de dominio en el campo nombre común (CN) del asunto de un certificado X.509, que permite a un atacante de hombre-en-el-medio suplantar servidores SSL arbitrarios a través de un certificado manipulado por una autoridad de certificación."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.13","matchCriteriaId":"311A4763-8018-4394-946D-C75220572EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*","versionEndExcluding":"3.12.3","matchCriteriaId":"A21F310D-7D9F-45D7-974D-C615F99FBEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.18","matchCriteriaId":"336E3C0C-0197-40FD-AD68-C13C518858C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.23","matchCriteriaId":"C213A6FE-549A-4B85-BCBE-11CAF63A376C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=7003","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://osvdb.org/56723","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36088","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-42.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_m.c.diff?r1=1.8&r2=1.11&f=h","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022632","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.wired.com/threatlevel/2009/07/kaminsky/","source":"secalert@redhat.com","tags":["Press/Media Coverage"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510251","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10751","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8458","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/810-2/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=7003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/56723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-42.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_m.c.diff?r1=1.8&r2=1.11&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.wired.com/threatlevel/2009/07/kaminsky/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Press/Media Coverage"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://usn.ubuntu.com/810-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2409","sourceIdentifier":"secalert@redhat.com","published":"2009-07-30T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large."},{"lang":"es","value":"La librería Network Security Services (NSS) en versiones anteriores a 3.12.3, como se utiliza en Firefox; GnuTLS en versiones anteriores a 2.6.4 y 2.7.4; OpenSSL 0.9.8 hasta la versión 0.9.8k; y otros productos que soportan MD2 con certificados X.509, lo que podrían permitir a atacantes remotos falsificar certificados usando defectos de diseño de MD2 para generar una colisión de hash en menos que tiempo que con fuerza bruta. NOTA: el alcance de este problema está actualmente limitado porque la cantidad de computación requerida es todavía grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.4","matchCriteriaId":"3306EB88-CE4C-4D5E-BE35-53DE6DEC5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.4","matchCriteriaId":"66221847-4F1D-4F26-8916-731BDFE5B3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*","versionEndExcluding":"3.12.3","matchCriteriaId":"A21F310D-7D9F-45D7-974D-C615F99FBEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndIncluding":"0.9.8k","matchCriteriaId":"06458D9A-4AB2-4B8A-8902-D2A285801347"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/36739","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42467","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022631","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/810-2/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.debian.org/security/2009/dsa-1888","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/36739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/810-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.debian.org/security/2009/dsa-1888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2410","sourceIdentifier":"secalert@redhat.com","published":"2009-07-30T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password, over an ssh connection."},{"lang":"es","value":"La función local_handler_callback en server/responder/pam/pam_LOCAL_domain.c en sssd v0.4.1 no maneja apropiadamente contraseña en blanco en la base de datos  SSSD BE, lo que permite a los atacantes dependientes de contexto, obtener acceso, enviando el nombre de usuario, junto con una contraseña arbitraria, sobre una conexión ssh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fedorahosted:sssd:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6DD7E99D-15E0-4058-B69B-BC4E3EBC61FA"}]}]}],"references":[{"url":"http://secunia.com/advisories/36018","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35868","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=355424","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514057","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52210","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01236.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=355424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01236.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2411","sourceIdentifier":"secalert@redhat.com","published":"2009-08-07T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412."},{"lang":"es","value":"Múltiples desbordamientos de entero en la biblioteca libsvn_delta en Subversion anterior a v1.5.7 y v1.6.x anterior a v1.6.4, permite a los usuarios remotos autenticados y a los servidores Subversion remotos ejecutar código arbitrario a través de un flujo (stream) svndiff con grandes ventanas que desencadenan un desbordamiento de búfer basado en memoria dinámica, una cuestión relacionada con CVE-2009-2412."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.6","matchCriteriaId":"0434A631-5531-4C32-B5C5-730CA1890441"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.22.1:*:*:*:*:*:*:*","matchCriteriaId":"46EA6517-6361-449E-8A50-3E8706A71211"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.23.0:*:*:*:*:*:*:*","matchCriteriaId":"473B6660-AED8-4805-A48F-F4A18A4AB94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"0F087A7F-7D7D-4377-B7CD-FC0775A33568"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.24.1:*:*:*:*:*:*:*","matchCriteriaId":"00E49F61-BC1D-4B0F-859F-89C331DA0E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.24.2:*:*:*:*:*:*:*","matchCriteriaId":"D44285DE-6FD7-4B0D-9715-1E6D31FAB6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.25.0:*:*:*:*:*:*:*","matchCriteriaId":"0D18EA18-8EB3-4924-B428-A4D329A87C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.27.0:*:*:*:*:*:*:*","matchCriteriaId":"48BB82A4-223F-43E3-8EE2-BA6276F51A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"DE0D2D18-5141-4070-9390-2027967CBD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.28.1:*:*:*:*:*:*:*","matchCriteriaId":"07F3F14A-AD74-4318-A830-08DED8189E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.28.2:*:*:*:*:*:*:*","matchCriteriaId":"56ADDE86-635F-4F24-A320-CBBE076BA182"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.29.0:*:*:*:*:*:*:*","matchCriteriaId":"56AD9198-B051-4E0E-9B0B-CE99346EFF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.30.0:*:*:*:*:*:*:*","matchCriteriaId":"A81E5045-969D-4064-A7DB-9F902D600251"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"61B5A517-AAD4-44AE-8B1B-F1BA3F9C21B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.32.0:*:*:*:*:*:*:*","matchCriteriaId":"5342EE15-7AAD-4666-BEFB-172A7CE5BC96"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.32.1:*:*:*:*:*:*:*","matchCriteriaId":"71AD1DC9-1BEA-4C81-A4EF-B78B2344C65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.33.0:*:*:*:*:*:*:*","matchCriteriaId":"01A71B55-7F08-40BD-A60E-4EF679388B1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.33.1:*:*:*:*:*:*:*","matchCriteriaId":"39AA93C8-0CC1-46D0-8B67-2A3846BBDA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"DFC08C9E-DC76-4F5E-9CA2-7952CC332EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"8BB20C00-C6D6-4175-B659-018C4F4A1167"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.35.1:*:*:*:*:*:*:*","matchCriteriaId":"139E706E-202C-45B4-A5E3-2CDEEA14E20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.36.0:*:*:*:*:*:*:*","matchCriteriaId":"EF79BC49-E4CD-4DCA-860F-A27F0371D4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:0.37.0:*:*:*:*:*:*:*","matchCriteriaId":"6C12BDC3-6B07-47DD-96C8-1FA9F4B7BFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4F10E314-3897-4A63-AE40-F4E34C3F0BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD801B94-DBE2-4A65-9428-8D4FC581866A"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47B95A69-2535-4844-B819-082D4349708C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"930953B4-E972-48FB-913B-169E91F93FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B41D875-F515-4A3F-9AA5-79BD09F74C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3A8CCC20-8986-4028-B125-66F371A4A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6E07F13C-A6FC-49E8-B10E-E4FC1F182DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"04AB9C70-10CB-460B-91AD-1D79C9153194"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E1E718DB-2A79-4277-BA15-6E6A904E483A"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9E10F1DA-64E9-4567-8727-3AE8A6788A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"3A8CED53-EC94-480C-BCBD-EE045F0AA2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27FC24BB-5BF3-4A25-A5C0-F5A224736F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"286B7EBD-D663-440C-859B-1E0EE839AEB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"408EC889-4D8B-49FC-9281-AC85559BB774"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F1E2A83E-A244-4F1E-85E9-6EA075D32C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"212AC756-866F-43F6-9659-61554824B884"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B612E0A1-C0F8-4E69-B32C-356ADE7F82E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"19B8E241-9E28-4627-8FBB-18CF5D12B11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C3D528D6-37F5-40D0-BAF2-CCA214862C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6E73FF73-1F94-4657-83E2-375311A94440"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2FAC312-66F0-4C9E-95DF-0C61F07A834D"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CC9E80F6-728C-4474-AB90-23DF119E83DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"051434CF-6B62-4C29-B71A-C8800F048A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"339A1BAC-F631-4355-9889-CE5EAC2FCB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"72315FB6-EDB2-43AB-9DA8-E27118C84C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6C099833-CC13-47DD-9E6A-E10BF8103401"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EAF74121-52AC-4EA8-9B51-BA68ED766ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DC6B791F-2DB2-4428-80DB-3203FD8868ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BE0754E5-044C-445B-846F-1B7C7664F6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0D938FBF-02E3-4713-A7DB-7C552C65471C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"8A882A7B-5E03-4FC4-A92E-3681C67A0CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4AF0C2C6-5FC0-4FB2-B31C-B9174789F904"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D435D7-F523-4B8B-988F-37F85DA7ECCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5CCBE47-1BD4-494A-8B9B-CB062F9741B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"457BD304-23A2-4FB4-AE9F-9F462DC27DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7899D782-7544-4113-AE78-B724689EDC74"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"85E5887A-A560-40AA-96D4-45D65D9A9C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C461DA24-27D3-44C6-A5A3-17716616C696"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2FBF9A45-958C-4C65-B8AE-A7214D6A6922"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3DE31846-6A08-47D5-8D20-D627DED5D8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"45B6D800-A4A5-4835-941C-31C3FD00D5F9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/56856","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36184","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36224","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36232","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36257","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36262","source":"secalert@redhat.com"},{"url":"http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com"},{"url":"http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES","source":"secalert@redhat.com"},{"url":"http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES","source":"secalert@redhat.com"},{"url":"http://svn.haxx.se/dev/archive-2009-08/0107.shtml","source":"secalert@redhat.com"},{"url":"http://svn.haxx.se/dev/archive-2009-08/0108.shtml","source":"secalert@redhat.com"},{"url":"http://svn.haxx.se/dev/archive-2009-08/0110.shtml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1855","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:199","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1203.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35983","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022697","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-812-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2180","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://subversion.tigris.org/security/CVE-2009-2411-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.collab.net/repos/svn/tags/1.5.7/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.collab.net/repos/svn/tags/1.6.4/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.haxx.se/dev/archive-2009-08/0107.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.haxx.se/dev/archive-2009-08/0108.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.haxx.se/dev/archive-2009-08/0110.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-812-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00469.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00485.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2412","sourceIdentifier":"secalert@redhat.com","published":"2009-08-06T15:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de entero en la biblioteca Apache Portable Runtime (APR) y en la biblioteca Apache Portable Utility (alias ARP-util) v0.9.x y v1.3.x permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) o posiblemente ejecutar código arbitrario a través de vectores que disparan las llamadas manipuladas a funciones (1) allocator_alloc o (2) apr_palloc en memory/unix/apr_pools.c en APR; o llamadas manipuladas a funciones (3) apr_rmm_malloc, (4) apr_rmm_calloc, o (5) apr_rmm_realloc en misc/apr_rmm.c en APR-util; desencadenando en desbordamientos de búfer.  NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6EC87975-74CA-42E6-84ED-0DD2BF9FFC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9A896FA5-D3FC-4BD9-965A-C9A72D62780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.2-dev:*:*:*:*:*:*:*","matchCriteriaId":"8EC4D99D-9753-4C59-BBB5-959D42382DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D8EDB1D0-82A9-462F-9B3B-0EDF452341E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.3-dev:*:*:*:*:*:*:*","matchCriteriaId":"3A8DC96A-6D25-4E98-808E-5159F8369224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"F9DFFEDC-F5C7-47C7-95A9-6BF4208A1B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E87B09F2-ECEA-409D-B27B-0747280D4AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"126268B4-03AF-46B1-9840-80CB461429E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.7-dev:*:*:*:*:*:*:*","matchCriteriaId":"C9A6CE4A-9BA3-4936-B9EA-B8B649B3AF84"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0760EF10-E57D-42C6-AB26-9FCFAE40062F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"BC6D2840-FF47-470F-B124-743592A6B465"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"56723D23-E6BC-4BB6-931E-5802528BE4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1E706184-E7BC-452F-82FE-72EA8C37F4D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"867962AD-8EF4-4DC4-96F6-77896CEF3F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0EB78030-8C3B-4ACA-B62B-DC5DC5FBD073"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E53CBDDE-D914-49A8-B65C-9352487B3CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A3C48811-5237-4752-857E-AEA5E879505A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.4-dev:*:*:*:*:*:*:*","matchCriteriaId":"88051185-C7B3-4540-BE0D-47B34FA4EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"EC3307A0-BCD6-423F-AC32-2E4F1E1310F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"EA93EC05-1936-4A2A-BFE1-E3F3BA2FD20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.6-dev:*:*:*:*:*:*:*","matchCriteriaId":"CC4B4907-8186-487C-97E8-A00BEC3D8116"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"5E3B4C44-163C-4D92-9BB0-C3BEC4F65665"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apr-util:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6EBD5602-6DE8-47EC-8464-150D2AA562BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"BAC9B4C4-ABC3-4306-A207-41E43B1BE20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"802A56B5-E4CC-49ED-A5EF-7F1BECBA2811"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.2-dev:*:*:*:*:*:*:*","matchCriteriaId":"86D62910-DF77-4DA5-B2E0-9C645DE21FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"55CEAFE5-CD77-48C4-8B5E-A4FA173D5590"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.3-dev:*:*:*:*:*:*:*","matchCriteriaId":"18A3B6CD-8D8A-47F1-8021-3779F3882E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9C4C28F7-946E-4A8A-8D02-1166EE14E891"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"280DCE6C-A529-4B61-80E4-D0C66D1FA709"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8ECEA4AB-80B3-4E4D-A634-6A37E0C7A1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"57DE26CB-8B98-4ADE-A9A5-8DC3020D03FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.7-dev:*:*:*:*:*:*:*","matchCriteriaId":"7686BB5B-9DD3-43DF-8852-2721D158AC81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F4A13FE2-5580-446F-9963-DB978B97BCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"F66FC842-29BD-4889-8436-D4BE271CE0AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:0.9.16-dev:*:*:*:*:*:*:*","matchCriteriaId":"97664E40-9802-4FFE-9AD1-78CE05B82FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB66AD7D-FF60-4320-A8AF-448836E61FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A42AC519-7FB4-4911-BA47-9CC87D0EA874"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"AFE38C6B-4042-4A01-9686-8CD38C995C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"910818CC-6EED-4E78-B85C-51AAC3A945D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3C8176D3-0632-4D2C-B992-8FE32B023B45"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.4-dev:*:*:*:*:*:*:*","matchCriteriaId":"9D1F3F02-BED5-42D6-92D9-AA0A5336F1D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"25BE556A-5036-4CCC-A597-CA1FC1F89B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"99A5A93F-2BD6-4DAE-854F-8CF4FC32C6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.6-dev:*:*:*:*:*:*:*","matchCriteriaId":"C35911DF-832A-417D-92C4-5DF02E5EC164"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A93F3369-74F6-49D0-94A3-C20603C43B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"CA090A3B-F678-4078-9B7A-6BF3E88F4F0A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/56765","source":"secalert@redhat.com"},{"url":"http://osvdb.org/56766","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36138","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36140","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36166","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36233","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37152","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37221","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK93225","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99482","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:195","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35949","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-813-2","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8394","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9958","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00320.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00353.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/CHANGES?revision=800736&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/0.9.x/misc/apr_rmm.c?r1=230441&r2=800736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/CHANGES?revision=800735&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://svn.apache.org/viewvc/apr/apr-util/branches/1.3.x/misc/apr_rmm.c?r1=647687&r2=800735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/memory/unix/apr_pools.c?r1=585356&r2=800733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/memory/unix/apr_pools.c?r1=678140&r2=800732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK93225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-813-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00320.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00353.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2414","sourceIdentifier":"secalert@redhat.com","published":"2009-08-11T18:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework."},{"lang":"es","value":"Vulnerabilidad de agotamiento de pila en  libxml2 v2.5.10, v2.6.16, v2.6.26, v2.6.27, y v2.6.32, y libxml v1.8.17, permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de una declaración de elementos en una DTD, relacionada con la recursión de función, como se demostro en Codenomicon XML fuzzing framework."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml:1.8.17:*:*:*:*:*:*:*","matchCriteriaId":"E7C0B552-67E9-48E5-ABFB-AF0CD6DA46FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"0AD69C98-11AB-4BB5-A91A-F029BA0E1DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"1D8135B1-FB22-4755-A5ED-CDB16E3E85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"2B4685BF-394A-4426-980A-2B1D37737C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"7069A49C-038C-4E7B-AF03-4D90D5734414"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35036","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36207","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36338","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36631","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37346","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3949","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4225","source":"secalert@redhat.com"},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"secalert@redhat.com"},{"url":"http://www.codenomicon.com/labs/xml/","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1859","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html","source":"secalert@redhat.com"},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"secalert@redhat.com"},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36010","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515195","source":"secalert@redhat.com"},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10129","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8639","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html","source":"secalert@redhat.com"},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.codenomicon.com/labs/xml/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2415","sourceIdentifier":"secalert@redhat.com","published":"2009-08-10T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows."},{"lang":"es","value":"Múltiples desbordamientos de entero en memcached v1.1.12 y v1.2.2 permiten a atacantes remotos ejecutar código de su elección a través de vectores de ataque que involucran los atributos de longitud que provocan desbordamientos de búfer basados en memoria dinámica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"84BF997C-79FB-41F3-A4F5-455652BB2015"},{"vulnerable":true,"criteria":"cpe:2.3:a:memcachedb:memcached:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E8789BF3-CA97-4DA2-99C4-53350CEEBB62"}]}]}],"references":[{"url":"http://osvdb.org/56906","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36133","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37729","source":"secalert@redhat.com"},{"url":"http://security.debian.org/pool/updates/main/m/memcached/memcached_1.1.12-1+etch1.diff.gz","source":"secalert@redhat.com"},{"url":"http://security.debian.org/pool/updates/main/m/memcached/memcached_1.2.2-1+lenny1.diff.gz","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1853","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35989","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00836.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/56906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/m/memcached/memcached_1.1.12-1+etch1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/m/memcached/memcached_1.2.2-1+lenny1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00836.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2416","sourceIdentifier":"secalert@redhat.com","published":"2009-08-11T18:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework."},{"lang":"es","value":"Múltiples vulnerabilidades de uso anterior a la liberación en libxml2 v2.5.10, v2.6.16, v2.6.26, v2.6.27, y v2.6.32, y libxml v1.8.17, permite a atacantes dependientes de contexto producir una denegación de servicio (caída de aplicación) a través de una ,manipulación de (1) una notación o (2) tipos de atributo de enumeración en un fichero XML como se demostró en Codenomicon XML fuzzing framework."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml:1.8.17:*:*:*:*:*:*:*","matchCriteriaId":"E7C0B552-67E9-48E5-ABFB-AF0CD6DA46FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"0AD69C98-11AB-4BB5-A91A-F029BA0E1DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"1D8135B1-FB22-4755-A5ED-CDB16E3E85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"2B4685BF-394A-4426-980A-2B1D37737C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"7069A49C-038C-4E7B-AF03-4D90D5734414"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6172AF57-B26D-45F8-BE3A-F75ABDF28F49"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.172.43","matchCriteriaId":"5725BE44-B621-422F-B9E2-D400ACFC43EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.4","matchCriteriaId":"77BC4840-8A34-40F9-873B-DF0F4CADCBDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"4.0","matchCriteriaId":"38364EB5-F557-4763-A555-9D66F51DE24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"A1E0F574-6859-45A6-B160-7DDE92C07CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.8","matchCriteriaId":"7A880FA4-5DBF-4894-8DAC-C3CD147D1EB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.2","matchCriteriaId":"B30A1267-231F-44CA-9484-8849C1808DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.4.11","matchCriteriaId":"B2D0444E-6B76-46EE-95EF-617F8967F6B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.8","matchCriteriaId":"7F74FAC0-CC05-4797-9DE2-F7CE5CB8FC19"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.2","matchCriteriaId":"4F769B77-FF42-442C-8D1A-4E2AE1F5DF39"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:-:*:*:*:*:*:*","matchCriteriaId":"AED08A6F-CD23-4405-B1CF-C96BB8AE7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*","matchCriteriaId":"D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"FAE88D8C-9CC3-46D1-9F26-290BC679F47E"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*","matchCriteriaId":"13771B15-CD71-472A-BE56-718B87D5825D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.4.3","matchCriteriaId":"100F1988-1FF0-483A-9A56-F02A398343D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.1.1","matchCriteriaId":"12DF9C72-2B26-432D-9A16-1D21D2E54557"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35036","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36207","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36338","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36417","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36631","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37346","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.codenomicon.com/labs/xml/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1859","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36010","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515205","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.codenomicon.com/labs/xml/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-815-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-2417","sourceIdentifier":"secalert@redhat.com","published":"2009-08-14T15:16:27.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"lib/ssluse.c en cURL y libcurl v7.4 hasta v7.19.5, cuando se usa OpenSSL, no maneja de forma aecuada el caracter '\\0' en un nombre de dominio en el campo sujeto del Common Name (CN) de un certificado X.509, lo que permite a atacantes de hombre en el medio hacer un spoofing de servidores SSL a través de la un certificado de una autoridad de Certificación legítima, manipulado, relativo a CVE_2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4F46D5-85E5-4483-AD3D-207E9121FE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7C3A6114-AA64-45E0-99D7-FAB060B8657B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DCCF67A1-874A-41A3-85C9-2BDCD193CE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4321D25E-27DE-4649-A9B7-C6295F05ABB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"25774954-E239-4337-9931-D4F6A69B42F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2A000CAB-5986-4568-96C2-B7E213C77E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.6:*:*:*:*:*:*:*","matchCriteriaId":"37C5745B-2FFF-4DF8-883B-417015BDDF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"76A50325-2247-46EF-A991-70378C4D008F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7:*:*:*:*:*:*:*","matchCriteriaId":"B58D1562-5A17-4124-8010-6098A204C898"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C461E700-752D-4A31-A3A4-2B758CE07704"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"AD8B6BE8-BC9A-443D-B6C8-4B5FF2390306"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"83681317-F32A-4C73-915A-D431E8DF944C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.8:*:*:*:*:*:*:*","matchCriteriaId":"F9D9C492-5F87-4149-ACAE-948DBE35E40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"70655CE0-63F0-402C-B335-FCFA494335C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9:*:*:*:*:*:*:*","matchCriteriaId":"5F6A6A05-E568-46F2-B2F5-73300E4EA5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F102275D-8116-4F65-8910-478CB8DAAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D68C14C1-AFDF-4DE7-BD06-2A7FE079656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6BD860AC-DE24-4CD5-B2C9-C77BD95AAFD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.5:*:*:*:*:*:*:*","matchCriteriaId":"403DDE56-5FA7-4920-A905-30349E61361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.6:*:*:*:*:*:*:*","matchCriteriaId":"F001A45E-CFD8-4B41-9281-F01A284ECD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.7:*:*:*:*:*:*:*","matchCriteriaId":"580BAB7A-3BE0-4FA1-9CAF-124F16882518"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.8:*:*:*:*:*:*:*","matchCriteriaId":"21AE58E9-F201-41AA-A1DC-9EB09E50459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10:*:*:*:*:*:*:*","matchCriteriaId":"C901C070-728C-41CD-8E4F-ECCB779906C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.1:*:*:*:*:*:*:*","matchCriteriaId":"97A1D7EA-6567-4A48-A431-EA28508D62C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.2:*:*:*:*:*:*:*","matchCriteriaId":"C6D8F50B-495E-48B3-BF9F-8E4ACA556B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.3:*:*:*:*:*:*:*","matchCriteriaId":"00F4FFF6-6AB4-4857-BDFA-12801C972708"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.4:*:*:*:*:*:*:*","matchCriteriaId":"E9987313-0256-4837-B347-6ABEF18DFCBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.5:*:*:*:*:*:*:*","matchCriteriaId":"D703855E-6610-445D-B498-61CE1C763A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.6:*:*:*:*:*:*:*","matchCriteriaId":"AA7B64A2-6779-4A01-9864-902E2C04B08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.7:*:*:*:*:*:*:*","matchCriteriaId":"A07B1635-6F28-4ED4-A2AC-CD7E9549C920"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.8:*:*:*:*:*:*:*","matchCriteriaId":"BFA4392F-2582-4EFE-9450-3F12588BE981"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.11.0:*:*:*:*:*:*:*","matchCriteriaId":"53E91EAD-3813-498B-9B5C-05F1DCF75D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6CDDBC13-1646-490B-B778-DBD3BB3208C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6B87F05D-C077-4929-8BBA-A7287A816470"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12:*:*:*:*:*:*:*","matchCriteriaId":"3DEC85E8-5555-46A9-9A95-30E1497AFA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA22553-089B-44D2-B545-82F7AED74E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"03060364-7DCD-4111-BF7A-BEF6AFCB3134"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"319DADFB-081B-46AA-9F7D-DD4D1C5BE26D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"3D9C6906-5FBD-4736-87B6-720E288E394A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13:*:*:*:*:*:*:*","matchCriteriaId":"4931FF86-51B6-470A-A2E0-A1B0942D1CF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"FA9DA33F-A33E-483E-AE4D-4422D62C02E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"F5028DB2-87D5-4AD8-87D4-325C519D6CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.14:*:*:*:*:*:*:*","matchCriteriaId":"E992CDB0-A787-4F7E-AC55-13FE7C68A1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"808143C5-108B-45BE-B626-A44F9F956018"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15:*:*:*:*:*:*:*","matchCriteriaId":"8EBBB3F1-98BD-40D1-B09F-1924D567625A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"88D5DAE5-ABEA-4FF1-836C-BA4741F13323"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"7E15191F-D4E6-425C-81BE-2CD55A815B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"0407CCC0-ACAA-4B2A-99A5-DA57791057B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"248D86F7-A8E5-448D-A55A-C05278BB9822"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.17.0:*:*:*:*:*:*:*","matchCriteriaId":"295EE8FF-18BD-4F67-9045-83A5693AB783"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.17.1:*:*:*:*:*:*:*","matchCriteriaId":"249C50ED-B681-4DFB-83CD-625D703CD95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.18.0:*:*:*:*:*:*:*","matchCriteriaId":"F3F060A3-FC8E-45CD-85AB-247D13A2896C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.18.1:*:*:*:*:*:*:*","matchCriteriaId":"F14BB81D-841D-456C-9CAE-CC679FFAB5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.18.2:*:*:*:*:*:*:*","matchCriteriaId":"6EBA081D-AB88-4895-8495-6B51EB6B5325"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.0:*:*:*:*:*:*:*","matchCriteriaId":"F8F6B4C1-B88F-4675-BAB7-66A4DFAC17AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.1:*:*:*:*:*:*:*","matchCriteriaId":"A44CE5AD-27B6-45EB-A0B8-CF9BDB31F0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.2:*:*:*:*:*:*:*","matchCriteriaId":"63984E6B-54EF-4DD6-8A5B-DD16A9A6A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"EBACF741-C988-4800-A9FF-E4836A1EE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.4:*:*:*:*:*:*:*","matchCriteriaId":"95C5A868-2EC9-4FC6-A074-E587A203A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.5:*:*:*:*:*:*:*","matchCriteriaId":"54613E59-4583-405C-9BA3-609D47B9FFEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12:*:*:*:*:*:*:*","matchCriteriaId":"4F7DE39A-325D-42F5-B4ED-C971725232DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"0DEC10D0-622A-4037-9D4A-69814226CC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"B9D0343C-175D-44BA-BCCF-5F204C749EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"69D4C0FC-6848-4D18-98E8-4A2F4D7BECC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.13:*:*:*:*:*:*:*","matchCriteriaId":"4E66EA58-F408-4D8B-9614-67B936B0F1FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"75BED785-BD7D-4A09-9B50-77548E64916D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"D0A61633-B9B8-44B5-B352-29F4BFBD2BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.14:*:*:*:*:*:*:*","matchCriteriaId":"ACF6D258-2A8C-40C3-9171-4C4A5B22B30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"9DB80911-5BD5-401D-8C0A-8229A71D0804"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15:*:*:*:*:*:*:*","matchCriteriaId":"BE508863-DB77-41D3-A438-3F26C34703E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"4B79E431-AD91-4269-B427-DD1169D12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"479069C9-D3E5-4909-8368-0B0F4704810B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"DADB9299-3EFA-45E6-95BD-7FE2E1B1D565"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"21F93365-54FD-45D4-B878-13A53A6806A4"}]}]}],"references":[{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/docs/adv_20090812.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36238","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36475","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45047","source":"secalert@redhat.com"},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817.txt","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0124","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/506055/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36032","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1158-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2263","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52405","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542","source":"secalert@redhat.com"},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/docs/adv_20090812.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1158-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2419","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the JavaScript reload function.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de uso-después-de-liberación en la función servePendingRequests en WebCore en WebKit en Apple Safari v4.0 y v4.0.1 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) o posiblemente ejecutar código arbitrario a través de un documento HTML elaborado que hace referencia a un fichero .js de longitud cero y la función JavaScript recarga (reload). NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://marcell-dietl.de/index/adv_safari_4_x_js_reload_dos.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://trac.webkit.org/changeset/44519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55587","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35555","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51533","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marcell-dietl.de/index/adv_safari_4_x_js_reload_dos.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.webkit.org/changeset/44519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2420","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703."},{"lang":"es","value":"Apple Safari v3.2.3 no implementa correctamente el manejador de protocolo file: , lo cual permite a atacantes remotos leer ficheros arbitrarios o provocar una denegación de servicio (lanzar múltiples instancias del Explorador de Windows) a través de vectores reaccionados con una etiqueta HTML no especificada, posiblemente una incidencia relacionada con CVE-2009-1703."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:windows:*:*:*:*:*","matchCriteriaId":"DBFFA64F-F45E-4306-9B47-959DDA1780CD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504480/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35482","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504480/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2421","sourceIdentifier":"cve@mitre.org","published":"2009-07-09T16:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a \"high-bit character\" in a URL fragment for an unspecified protocol."},{"lang":"es","value":"El método CFCharacterSetInitInlineBuffer en CoreFoundation.dll en Apple Safari v3.2.3 permite a atacantes remotos causar una denegación de servicio (desreferencia a puntero nulo y cuelgue de la aplicación) o posiblemente ejecutar código a su elección a través de un \"caracter bit-alto\" en un fragmento de una URL para un protocolo sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:windows:*:*:*:*:*","matchCriteriaId":"DBFFA64F-F45E-4306-9B47-959DDA1780CD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504479/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504479/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2422","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password."},{"lang":"es","value":"El código de ejemplo para la funcionalidad de autenticación digest (http_authentication.rb) en Ruby on Rails anterior a v2.3.3 define un bloque authenticate_or_request_with_http_digest que devolverá nulo en lugar de falso cuando el usuario no existe, lo cual permite a atacantes dependiendo del contexto eludir la autenticación para aplicaciones que se derivan de este ejemplo mediante el envío de un nombre de usuario no válido sin una contraseña."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3.3","matchCriteriaId":"7E594206-CF9B-4C01-947C-79EF74B57416"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.3","matchCriteriaId":"F110744D-9928-4DC1-873E-26B3E1D7CD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.3","matchCriteriaId":"F3611024-49F5-414A-B536-9FA6519856B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35702","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35579","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1802","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51528","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2423","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter in a list action."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en category.php en Ebay Clone 2009 permite a atacantes remotos ejecutar comandos SQL a través del parámetro cate_id en una acción lista (list)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ebayclonescript:ebay_clone:2009:*:*:*:*:*:*:*","matchCriteriaId":"DB71071D-3A42-4054-BD4F-F45527927962"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2424","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en Ebay Clone 2009 permite a atacantes remotos inyectar HTML o secuencias de comandos web arbitrarios a través del parámetro modo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clone2009:ebay_clone:2009:*:*:*:*:*:*:*","matchCriteriaId":"252C575B-353B-45C9-A870-EBAA0E8A3AE1"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2425","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor."},{"lang":"es","value":"Tor anterior a v0.2.0.35 permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) a través de un descriptor de enrutador (router) malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"CB79C700-2513-4EEB-835B-454F8728DCA3"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Jun-2009/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35546","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55340","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35505","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1716","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51376","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Jun-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2426","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"La función connection_edge_process_relay_cell_not_open  en src/or/relay.c en Tor v0.2.x anterior a v0.2.0.35 y v0.1.x anterior a v0.1.2.8-beta\r\npermite a los retransmisores (relays) de salida tener un impacto no especificado al provocar que los controladores acepten respuestas DNS que redirigen a direcciones IP internas a traves de vectores desconocidos. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48B8A291-E1F7-444F-8C5B-C3C38541B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24581D9F-02AF-42E6-A3D7-9CAD43E26477"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3B978E3E-69D7-46BD-BD88-1409A546FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E7FED829-128A-4F87-9838-AD0C9C11E458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3A39B543-5978-46FC-AF85-D635D87E3B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"803498D9-C750-4D16-8ADF-2F98E71888A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C04309D4-FEA8-47EA-BB9A-8CBD341B475F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"8607F3C9-F185-4B87-8A1B-B9495A4F244D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"667201BB-5FDA-4E51-B865-0AF8507DBCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"3C7D396C-36CA-4579-BCA0-672440CB5CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6AE716BE-10CE-49EB-9CC4-068584CD3357"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5662F3D8-754D-43E3-8EE0-3DF4B0180E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"811CE708-CEE6-4B0F-98E5-E138C06EA382"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F0F837E-12E5-4332-9823-8B1F764042E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"6860F802-FEC2-449A-A5FC-AFACCA8633CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF80379-BD68-4E3B-A7CC-57B51619A0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*","matchCriteriaId":"A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"57DAA48C-4B3B-4665-87AB-38ACFD6C757C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4D9E677-01D2-4800-82AA-F5585475D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"37CF2822-88B6-41F2-B10A-A8B09B27245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*","matchCriteriaId":"9C589D4F-60B3-450B-860A-9975BB47BBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B300C56E-7DF5-4B24-84D1-A4732515325E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*","matchCriteriaId":"DA331167-6A2F-402F-A28F-9EE7B6F20207"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"13846571-C84A-43D6-9970-444E6B4DB0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*","matchCriteriaId":"F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"35EB5E0E-EAF1-41C1-808D-BD1ABDE8110D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4740B10-EFB8-4F79-88C1-9B6F5897A71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"B4D881C4-0302-44E9-A3C5-A23EFD681B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*","matchCriteriaId":"31CA7556-D132-4E81-8E13-C7E025AF20AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A8219F1A-D6F5-4D6E-B10D-4C455073520C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D224FA8D-4C5A-48BE-92F2-1EC57782046D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"FFB37BCB-63F0-4CC7-B98D-7048D3E18BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB701014-7980-4BBE-8BD9-3FD2A0AF6941"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D68C31D4-9478-4EB6-B160-E9970ADA785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"872F7B10-30EA-4945-99BC-9EC1C09D6D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"5BBC3EFD-7F03-4DC1-988C-22007216F9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"2F7898C5-9450-41FD-B45D-7504D97B4CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"B3A247E8-F22B-4639-96D2-9BC01C904D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"B1233504-041A-454E-9F2E-6E2A4207879D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"EC39C113-6A7B-4152-8EBA-87A2B64D0F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"342D2B8A-A832-4CAB-9389-93764B0DE241"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"7D44F099-7BC3-45C4-9DB3-03A7E40BC548"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"1A79A0CD-7B81-417E-8DE3-0D61006003FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"4F0A70AA-931A-4906-B4AD-D56E90683716"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*","matchCriteriaId":"3BD4450F-6E15-40CD-94CA-63F70A3EC354"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*","matchCriteriaId":"BB51EE46-D720-4C1F-8992-67F4422E43CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*","matchCriteriaId":"197BFA5D-8C65-4F59-B4A0-B6AB7B11EC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A74A3860-1FE5-4A03-9C99-2646F1AF84A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.3:alpha:*:*:*:*:*:*","matchCriteriaId":"4340AB16-25B5-4371-B490-6F2563268358"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EA145B1E-674C-4C79-93C0-BC24EC5F8CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FCD8B5C4-C680-4DE2-9245-0A8F380C15E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*","matchCriteriaId":"9B671031-08A4-4B9D-B3DA-7D074D8BFAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.6:alpha:*:*:*:*:*:*","matchCriteriaId":"1A2098AF-763E-4F62-BBD9-A4C9AC411C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*","matchCriteriaId":"1F3C6BA8-9ED9-42F8-9054-F94840E653E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"AE5CEE9D-FE82-4E87-AEA0-9A2D8186E522"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"0F3729DD-BFCC-4293-9DE7-B02588753F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.3:alpha:*:*:*:*:*:*","matchCriteriaId":"5D08533D-A187-4C0E-AD4C-41061FB42413"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.4:alpha:*:*:*:*:*:*","matchCriteriaId":"7EADACB1-31D9-4297-A1C3-7F281A0AF154"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.5:alpha:*:*:*:*:*:*","matchCriteriaId":"D560434E-2636-4C7B-AC6B-A5952123B8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.6:alpha:*:*:*:*:*:*","matchCriteriaId":"AD3334C5-92F3-403D-9116-4559D18F677F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.7:alpha:*:*:*:*:*:*","matchCriteriaId":"7B173DF1-D506-47F4-8F13-18026BF7A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.8:alpha:*:*:*:*:*:*","matchCriteriaId":"4462DB3B-BF33-4BFA-A9C9-CF674A18D24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.9:alpha:*:*:*:*:*:*","matchCriteriaId":"5E666EDB-F72C-4B14-8FF4-95B082BB38EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.10:alpha:*:*:*:*:*:*","matchCriteriaId":"96BCAA3F-EF7F-457B-8468-A736527A4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.11:alpha:*:*:*:*:*:*","matchCriteriaId":"4D706AEC-0814-4706-BA4C-6FED01AA4D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.12:alpha:*:*:*:*:*:*","matchCriteriaId":"53FCE242-9B64-4D71-BBB3-8085F7FBA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.13:alpha:*:*:*:*:*:*","matchCriteriaId":"A9FD6A26-7219-4958-B959-C6365193F839"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.14:alpha:*:*:*:*:*:*","matchCriteriaId":"F6307EF6-1449-43B2-A3B8-DF0EA3A6985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.15:alpha:*:*:*:*:*:*","matchCriteriaId":"78C0FF05-0E18-4C48-BE3E-FBC881F468D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.16:alpha:*:*:*:*:*:*","matchCriteriaId":"B0C32845-BAB4-422A-B1BA-568793B4E935"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.17:alpha:*:*:*:*:*:*","matchCriteriaId":"0159DCD6-3C52-4B4C-82EC-4E699366E917"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.18:alpha:*:*:*:*:*:*","matchCriteriaId":"9E245295-3EF6-4E6D-8D44-D45B8A198E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.19:alpha:*:*:*:*:*:*","matchCriteriaId":"38DA0AF4-C053-4EEC-AA37-5089C9E6C778"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.20:alpha:*:*:*:*:*:*","matchCriteriaId":"7C8EE453-2FAC-4927-AC89-C92B2A947E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.21:alpha:*:*:*:*:*:*","matchCriteriaId":"7AE434E6-63E1-44B0-AA79-BBDABC040234"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.22:alpha:*:*:*:*:*:*","matchCriteriaId":"7BC742E5-CA75-43E4-BCD5-54B712CF205E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.23:alpha:*:*:*:*:*:*","matchCriteriaId":"DADA7B77-7DBE-4A62-BE4A-83975D4D7311"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.24:alpha:*:*:*:*:*:*","matchCriteriaId":"30D57B03-30FE-48E8-B6BA-77538F067D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.25:alpha:*:*:*:*:*:*","matchCriteriaId":"A0E6BD04-775B-4EDE-BF3E-2896BB59F895"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.26:alpha:*:*:*:*:*:*","matchCriteriaId":"7900A51A-4E1E-412C-945E-DAB21078BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.27:alpha:*:*:*:*:*:*","matchCriteriaId":"2B68CEAF-2287-4C1B-A147-DD718E7C6418"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.28:alpha:*:*:*:*:*:*","matchCriteriaId":"BD3CE396-518B-465F-AB91-6572601F0C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.29:alpha:*:*:*:*:*:*","matchCriteriaId":"B70887CA-5A54-410D-B9B4-84EE31899FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.31:alpha:*:*:*:*:*:*","matchCriteriaId":"CFC42FE4-48BE-4EF2-900F-401CF34F113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.33:*:*:*:*:*:*:*","matchCriteriaId":"6B11AC29-B21C-424F-8EFF-56C40F38CB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.2.0.34:alpha:*:*:*:*:*:*","matchCriteriaId":"87591A51-BD84-459F-8BEB-6D32B392CF9A"}]}]}],"references":[{"url":"http://archives.seul.org/or/announce/Jun-2009/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35546","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55341","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35505","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1716","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51377","source":"cve@mitre.org"},{"url":"http://archives.seul.org/or/announce/Jun-2009/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2427","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the emp_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en co-profile.php en Jobbr v2.2.7 permite a atacantes remotos ejecutar comandos SQL a través de el parámetro emp_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jobbr:jobbr:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"FEC54D80-B31F-44DE-939C-67A5C0ECC8E5"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/jobbr-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/jobbr-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2428","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php; and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Script v3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de (1)el parámetro userid para suchauftraege_user.php y (2)el parámetro descr para vote.php y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tauschregal.de:tausch_ticket_script:3:*:*:*:*:*:*:*","matchCriteriaId":"24ED3F16-FBE5-4896-8CBF-5CA3F4E9A7C7"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/tausch-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1823","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0907-exploits/tausch-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2429","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"SmartFilter Web Gateway Security versión 4.2.1.00, almacena las credenciales de usuario en texto sin cifrar en archivo admin_backup.xml y utiliza permisos no confiables para estos archivos, lo que permite a los usuarios locales alcanzar privilegios. NOTA: se desconoce la procedencia de esta información; los datos fueron obtenidos únicamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:smartfilter:4.2.1.00:*:*:*:*:*:*:*","matchCriteriaId":"BE3DF88C-BB46-4F93-8B58-09DE930C1D97"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49338","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2430","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificadar en auditconfig en Sun Solaris v8, v9, v10 y OpenSolaris snv_01 hasta snv_58, cuando auditoría de Solaris está activada, permite a los usuarios locales con un perfil de ejecución RBAC para auditconfig obtener privilegios a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://secunia.com/advisories/35580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2431","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T21:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source."},{"lang":"es","value":"WordPress v2.7.1 coloca el nombre de usuario  del autor de un post en un comentario HTML, lo cual permite a atacantes remotos obtener información sensible mediante la lectura del código fuente HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F5663CAA-0859-447E-8489-02CE4315DF91"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022528","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55716","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51733","source":"cve@mitre.org"},{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2432","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T21:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message."},{"lang":"es","value":"WordPress y WordPress MU antes de v2.8.1 permite a atacantes remotos obtener información sensible a través de una solicitud directa a wp-settings.php, el cual revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"68895399-32D7-43DE-945B-B9BD29DA5B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4FEB898B-BF80-44C1-A847-AC0062458B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*","matchCriteriaId":"C3C33D37-2FFF-4DE5-B260-E090F4E6377B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7E70EF48-AD6C-4119-B7C4-67E889A2BB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*","matchCriteriaId":"3E4139FE-7C43-44AC-856F-226E1194D936"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0395AD1D-3470-49EE-9F2A-349EF8782B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71-gold:*:*:*:*:*:*:*","matchCriteriaId":"FC499ABC-D1A6-4A9B-A06B-12C8275462DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*","matchCriteriaId":"5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*","matchCriteriaId":"056E641C-9322-4BEE-97B4-FE16DE8D7336"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*","matchCriteriaId":"ADB42CEF-E12D-4DB0-8536-FD393D3697A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*","matchCriteriaId":"C4AF89F9-AE67-49B5-ACF0-3A645C454E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"90C9AFEE-BCD7-4B4D-8F22-98747524F17D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"175B2515-E212-4347-8C04-13E110D70C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"BD571A4D-1D9C-4925-AE99-9128421213F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"7B553469-0D8B-48AD-8EFF-3DC469262977"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0-platinum:*:*:*:*:*:*:*","matchCriteriaId":"FEE015E8-FDE1-47FA-B3E5-0DC2C0A5107D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6E7BEFBD-4326-44A5-A160-9406D94AB307"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1-miles:*:*:*:*:*:*:*","matchCriteriaId":"C516C041-B945-4992-8104-E20B3B6CECDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E85A88D7-07A1-4A8C-88B5-057AD9C675E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.2-blakey:*:*:*:*:*:*:*","matchCriteriaId":"AFBD4E49-EA17-4FFD-AF9C-950E542555A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-delta:*:*:*:*:*:*:*","matchCriteriaId":"6F2F19C7-DD9A-4851-8788-E3E4E8CE8E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2-mingus:*:*:*:*:*:*:*","matchCriteriaId":"4C4229BC-1646-4202-92B8-FC718D557518"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A4FEB48-771B-4331-B42B-764F12A94B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.4:*:*:*:*:*:*:*","matchCriteriaId":"947635DB-A86E-45F0-B946-559202C49503"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5-strayhorn:*:*:*:*:*:*:*","matchCriteriaId":"B86BC4AC-62D0-47AA-8E81-50ED0B3CB88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF628FB8-1AC4-4F15-9967-E60785A32D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F0BF1F6-A54A-48E8-A872-015FE10E5D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.6:*:*:*:*:*:*:*","matchCriteriaId":"0AEABEFD-E248-42B7-B99E-FFDEE27F7064"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E75BB382-6B47-4C6A-BF94-80443BEB1A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*","matchCriteriaId":"77D85664-E355-4A68-89EB-D5C9D0E6B916"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*","matchCriteriaId":"91243043-F4A6-40EF-97FC-989ED366394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A3624D4-E666-4A1B-B465-714ACBA0034C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:alpha_3:*:*:*:*:*:*","matchCriteriaId":"46B86AD1-967D-4C8E-BD31-C2A2197B1E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E8C667FD-BA00-43B3-8313-5A24A2DFF55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D97C81-A053-4D73-BEA7-CBCB5FC0CC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*","matchCriteriaId":"8AC4F089-A606-4880-8C5D-24520B55CD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*","matchCriteriaId":"B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*","matchCriteriaId":"94ADC624-E43E-4F1D-8525-F6903943C932"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"06A25444-2680-4379-B2CA-9858B6AF71CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4801D56C-5ED6-4648-A0C9-EB4D06786A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A777651-D2B2-47E0-A13C-BD667635F3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1503C4CB-5D58-4523-860C-4B637AD91CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1253161D-F1C8-46D6-B970-20335071500E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"CEE401B3-6291-4EA8-8800-0350BAC0B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"79F41AFB-596E-4FFA-AC46-E563122A9D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2912D04D-A004-4842-8EF0-B51DAAA5FD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A77286DE-D583-4359-8962-439583BE9BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D5ED66D3-5D12-42CE-8B98-6A2984DAC7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFB3E9E3-1341-4F34-B6D1-5DF9F3B1D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B0EA81B6-0254-404D-8A2B-80C027383FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"738C3727-FCA0-4C7B-B6D6-2FC14987706A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8149192C-167C-4459-8C20-355DE0FF2921"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.4:rc1:*:*:*:*:*:*","matchCriteriaId":"EBC1B2B1-C8EE-47A4-BE44-CAC1A6CD432E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.2.5a:*:*:*:*:*:*:*","matchCriteriaId":"82E6D03D-0547-4CAB-A1CF-AEAC82634437"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EF5136FA-5060-4448-9874-3DF375467ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FB8E4A4-818E-4FDF-8C83-7C8FB5C83909"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F534621-ED5F-46D0-A893-D0C6DAACB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F1930525-806B-49B1-A18E-189D41E5885C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"330826FD-833C-4BB4-8293-2812956496B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"555E7E8A-3632-416B-889E-68E98AABE8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6:*:*:*:*:*:*:*","matchCriteriaId":"75674DE5-229D-4359-B29C-E18BBC76E188"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAE70A19-919A-4478-B97B-EEF9FA29BECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"70524981-C0ED-4915-B0F3-A9F5D4865A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6E9450D1-B817-4A38-A46F-05FCB6692A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3AA78384-3133-442A-B135-192440FB1745"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022528","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55717","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51734","source":"cve@mitre.org"},{"url":"http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/504795/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2433","sourceIdentifier":"cve@mitre.org","published":"2009-07-10T21:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método AddFavorite en Microsoft Internet Explorer permite a atacantes remotos provocar una denegación de servicio (cuelgue de aplicación) y posiblemente tiene otro impacto no especificado a través de una URL larga en el primer argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:8.0b:*:*:*:*:*:*:*","matchCriteriaId":"587DAAD1-F33D-41EB-B752-36B9D87FC19B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*","matchCriteriaId":"506711D9-6E57-4EED-8628-36C7F2324040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"ED471260-0272-431F-A91E-AC2883D92497"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63D18070-EC48-4904-9AE0-558F7F3B869D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"86584E3F-3B0D-4018-A186-E59F3B01CA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730:unknown:gold:*:*:*:*:*","matchCriteriaId":"817636ED-5E42-460E-89F1-24D5C64AB8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*","matchCriteriaId":"0E6E1020-1017-4670-9316-27C79F1E2698"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*","matchCriteriaId":"37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*","matchCriteriaId":"35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*","matchCriteriaId":"53D75496-8594-44DB-B5C4-EA3CABD6551A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8.0.6001:*:*:*:*:*:*:*","matchCriteriaId":"5F709B61-F64B-4E8F-80BB-4944485B6125"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8.0.6001:beta:*:*:*:*:*:*","matchCriteriaId":"612B8367-DAEF-4EE3-BC57-16A5CF4D3030"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35620","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2434","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Un desbordamiento de búfer en la aplicación syscall en IBM AIX 5.3 permite a usuarios locales obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/35754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022530","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54714","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55727","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35615","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51612","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2435","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames."},{"lang":"es","value":"El servidor Sametime de IBM Lotus Instant Messaging and Web Conferencing v6.5.1 genera mensajes de error para los intentos fallidos de inicio de sesión con diferentes retardos de tiempo en función de si existe la cuenta de usuario o no, lo que permite a atacantes remotos discernir los nombres de usuario válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_instant_messaging_and_web_conferencing:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E8AB1206-BD93-41A1-962D-291668678DF9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35614","source":"cve@mitre.org"},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-004.pdf","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-004.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-2436","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en page.php en Online Dating Software MyPHPDating v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro page_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phponlinedatingsoftware:myphpdating:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D07BAFC-5977-4C3E-84A9-E890F8A0AAC0"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/myphpdating10-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35603","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/myphpdating10-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2437","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka Login) and (2) password parameters in a login action."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en Rentventory 1.0.1 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de los parámetros (1) username (nombre de usuario), también conocido como Login y (2) password (contraseña) en una acción login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rentventory:rentventory:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA13D06A-E2DA-4FE2-B713-393AE3E83F0A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/rentventory-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35749","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1835","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/rentventory-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2438","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action.  NOTE: this might overlap CVE-2008-1399."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en el módulo de búsqueda de ClanSphere v2009.0 y v2009.0.2 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro text en una acción listar. NOTA: ésta vulnerabilidad podrían coincidir con CVE-2008-1399."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2009.0:*:*:*:*:*:*:*","matchCriteriaId":"B7697CBA-DF20-48BC-83D3-5008E902134B"},{"vulnerable":true,"criteria":"cpe:2.3:a:clansphere:clansphere:2009.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AEF233D9-FFDF-447B-AF85-E64838A7802C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/clansphere-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35605","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1836","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/clansphere-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2439","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php.  NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group."},{"lang":"es","value":"Varias vulnerabilidades de inyección SQL en Web Development House Alibaba Clone, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) parámetro IndustryID en category.php y el (2) parámetro SellerID en supplier/view_contact_details.php. NOTA: este es un producto que fue desarrollado por un tercero; no está asociado con alibaba.com o el Grupo Alibaba."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_development_house:alibaba_clone:*:*:*:*:*:*:*:*","matchCriteriaId":"40C8CCA5-B271-43B5-AA90-CD5D59DB527C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1838","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2440","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en JNM Guestbook 3.0 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jnmsolutions:guestbook:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCCBF4C-C85E-4F7D-8D09-C8BD642B49A2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/jnm-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35760","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1831","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/jnm-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2441","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en ogp_show.php en Online Guestbook Pro 5.1 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:esoftpro:online_guestbook_pro:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B47429F3-3D23-4060-AE02-0B02C6606D93"}]}]}],"references":[{"url":"http://secunia.com/advisories/35762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.com/0907-exploits/ogp51-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.com/0907-exploits/ogp51-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2442","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action."},{"lang":"es","value":"vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en public/index.php en Linea21 v1.2.1 permite a atacantes remotos inyectar HTML o scripts web arbitrarios a través del parámetro búsqueda en una acción resultats-recherche."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linea21:linea21:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"24249362-9B4E-4796-8D9F-DC2E20754F98"}]}]}],"references":[{"url":"http://secunia.com/advisories/35745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.com/0907-exploits/linea-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1837","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.com/0907-exploits/linea-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2443","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"Siteframe v3.2.3, y otras versiones 3.2.x, permite a atacantes remotos obtener información de configuración a través de una solicitud directa a phpinfo.php, la cual llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1CEF259E-A238-446E-9599-13734392FE18"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27B3DF25-9625-4FBB-A524-938CC9F1CAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:siteframe:siteframe_cms:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3960AA31-927A-4275-B4B2-D6B4004E1678"}]}]}],"references":[{"url":"http://osvdb.org/55683","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0907-exploits/siteframe-sqlphpinfo.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35598","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1822","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51579","source":"cve@mitre.org"},{"url":"http://osvdb.org/55683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0907-exploits/siteframe-sqlphpinfo.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2444","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter to setup/index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio  en maillinglist/setup/step1.php.inc en ADbNewsSender antes de la versión v1.5.6, y en la v2.0 antes de RC2, permite a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro path_to_lang para setup/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.5","matchCriteriaId":"5B412BB4-3E28-4678-9C3F-D2CB22D5E038"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9F792DDE-D025-4F5B-AB1A-620A59900857"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2A53D1A3-6A37-417B-8CF4-F5897635E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"815153B5-F97A-4C56-8C20-4F6E7C0D638A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F051AB9-C299-4E9B-B4C2-EF77A0AE18E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C15AFACD-D8AD-415E-B050-7DAFC99506F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0CEF5136-210C-446B-9E32-6299B10CB69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2D524626-B977-4356-A93F-88B435CFCA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"328B133E-7482-4946-BAB1-5D89C60041B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"91A71223-CD88-446F-AF93-0626B39BE3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"80953021-E692-449B-A961-A369E8BB4A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"683CA1FD-A4E4-41E4-97A1-01A77B520991"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1831F536-F07D-49E8-A863-FDAD8E383104"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD13616B-33A3-4E43-BB91-19E192FA67F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A250D35-B8DF-4999-997C-EC69AD725E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E4A87D52-68B5-488E-BA5E-FDF61C798195"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D8DDB844-AC56-443A-9099-DA0D54F070E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7A8E8417-9BFE-4CB2-A218-458CD718F41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"01092A5C-0F07-488B-9F02-ACCA96618BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF12021-D316-4A18-B3E1-ED6AB9736EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"1758BFA0-47BA-49DB-8477-2996D6D03A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DD0EEF2A-61CC-472C-BE91-7199318DA51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C5CAD3C9-3D51-4DAA-930E-B9ECCDBAB6C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"04F1B990-05DE-43FD-8923-CD2E675DE9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"0ECEF6BB-AF11-4427-B740-DC66AEA94DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F5B3BA36-997A-4CAF-9103-966881BDFC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6E6AD1EB-77AD-4F2F-A604-C290274C9AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"04E5BC91-05F3-4E97-B47B-C0D4E620F22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4AC95ACF-C82C-445F-AFB5-BE778EC3C3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"244798D3-8486-43F7-9F90-CAB406564AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"95A2C245-99A0-4DF2-B725-EB9F0E528E6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"228BE08C-4B63-4DE2-AFD3-C0B251F9C463"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"C4997E07-2357-4AD5-9CB6-E98D5D690A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FE0C0685-2380-441D-B1DB-0432B6E2ABE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB1FC7EA-E883-426F-AE5E-288BBFBEAEE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3341B4AC-0A61-4437-8E8D-8D908C1CAE7C"}]}]}],"references":[{"url":"http://r00tsecurity.org/forums/index.php?showtopic=9460","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35845","source":"cve@mitre.org"},{"url":"http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694644","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35596","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1808","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51720","source":"cve@mitre.org"},{"url":"http://r00tsecurity.org/forums/index.php?showtopic=9460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2445","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI."},{"lang":"es","value":"iPlanet Web Server de Oracle (anteriormente Sun Java System Web Server o Sun ONE Web Server) versión 6.1 anterior a SP12, y versión 7.0 hasta Update 6, cuando se ejecutan en Windows, permite a los atacantes remotos leer archivos JSP arbitrarios por medio de una sintaxis de flujo de datos alternativa, como es demostrado por un URI .jsp::$DATA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:windows:*:*:*:*:*","matchCriteriaId":"DCFD3C8D-6E79-4DA6-A600-D952C8E5A151"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp10:windows:*:*:*:*:*","matchCriteriaId":"A7BDC9E6-87C4-4AE1-AEAD-518CCFF853E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp11:windows:*:*:*:*:*","matchCriteriaId":"BC9F5EA1-0CE5-417E-AE65-F4C47376DEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp4:windows:*:*:*:*:*","matchCriteriaId":"A018481B-EB48-4C4E-A1E4-324DCC437441"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp5:windows:*:*:*:*:*","matchCriteriaId":"B0FEC983-91A6-4708-8308-B77B0FD2D9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp6:windows:*:*:*:*:*","matchCriteriaId":"431D609A-AA61-4C7C-8F4A-8B01DB2E32E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp7:windows:*:*:*:*:*","matchCriteriaId":"37CBE122-47ED-4659-B15A-55FAF15BA63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp8:windows:*:*:*:*:*","matchCriteriaId":"E3866A08-0CFA-473D-BBE5-4736282A6446"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp9:windows:*:*:*:*:*","matchCriteriaId":"4541C58C-45F1-4F17-82B9-E33BE693D8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:update_5:windows:*:*:*:*:*","matchCriteriaId":"5DE90647-CF0D-4920-9F7A-B13572D7D71A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:update_6:windows:*:*:*:*:*","matchCriteriaId":"C705F770-5086-4926-A110-A32D4170B8A6"}]}]}],"references":[{"url":"http://isowarez.de/SunOne_Webserver.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://jvn.jp/en/jp/JVN47124169/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2009-002069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55655","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://isowarez.de/SunOne_Webserver.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://jvn.jp/en/jp/JVN47124169/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2009-002069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2446","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en la función dispatch_command en libmysqld/sql_parse.cc en mysqld de MySQL v4.0.0 hasta v5.0.83 permiten a usuarios remotos autenticados causar una denegación de servicio (mediante caída del demonio) y, posiblemente otros efectos no especificados, a través de especificadores de formato de cadena en el nombre de base de datos en una petición (1) COM_CREATE_DB o (2) COM_DROP_DB. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2446\n\nThis issue was addressed for Red hat Enterprise Linux 5 by https://rhn.redhat.com/errata/RHSA-2009-1289.html and Red Hat Enterprise Linux 4 by https://rhn.redhat.com/errata/RHSA-2010-0110.html .\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, future MySQL package updates may address this flaw for Red Hat Enterprise Linux 3 and Red Hat Application Stack 2.","lastModified":"2010-02-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFEDB808-A8D8-403E-9103-AB486C793EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C6AAD13-3CA1-4543-834B-39FB53D4462D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"ADBEDF5A-5205-4012-B9B8-0FA304E7119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"0EF35900-4051-4E07-9BFA-347BEAB8AB67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"8AC969A5-52CC-44F2-A929-DE559A5D7624"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5A4D224C-8ABF-41A0-A7BE-C10C2387DE95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"3DD36E9E-89A0-42C2-AC50-7A5BC53B3D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"C93CE88F-2941-4A08-9472-359CF214F81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"DC1D0C0F-08EF-4AFA-BBEA-CCDF04F90E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"214E3CF9-6362-4F5A-91B7-5E69564F7144"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*","matchCriteriaId":"9369CF20-D05C-41A2-8F9E-DE259FCF9E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22408224-0634-4CC6-888F-892E9D932CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B2646B4-593E-4AC9-8292-1AD805632DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*","matchCriteriaId":"4D57E557-7F6D-4618-86AC-B10C08341900"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*","matchCriteriaId":"B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8EC10CD2-B9A3-46DD-839E-C7FB6647155F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*","matchCriteriaId":"E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5EC21395-4C78-4343-9452-578B24C2656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*","matchCriteriaId":"8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"5032D74E-CC8D-4217-AEF0-98DCD1820AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B3340604-0D38-4494-847B-E9E8B0026A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"EC117BF1-3127-477A-9500-C9A32596ED8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"DC54D7B3-DC9B-43AC-BE10-565BDF292A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"E6A7AC36-4E5D-483B-939E-257FDEDE48EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"FED5BA55-FF4F-4F89-89B1-554624DDA1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.19:*:*:*:*:*:*:*","matchCriteriaId":"3C2CEF98-8561-42D2-BCE5-3AAE4DC81ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"4A0C43BB-81C6-496F-AC7B-61382DE76B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"2C9FF055-99BC-4E15-80C8-80FEF3CBA990"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F6ED2E0A-37C6-4BD2-87B0-FD3E6D0C2108"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C6132F5E-ADE6-44C2-85BD-17408594789F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.26:*:*:*:*:*:*:*","matchCriteriaId":"9B6779AC-EF41-46B5-8B26-07FA2537E5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.27:*:*:*:*:*:*:*","matchCriteriaId":"0F038AF5-C96C-43EE-9D46-1DD8CAF567EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E24BD3CF-0047-47F8-8B13-E2A6348E3924"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"BB7196E5-8483-4872-A78A-8BE7EC551CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"14DDA057-D211-42BD-B8AF-F250F1C5B88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"32CA2F70-77E4-4280-B845-4CE5774162C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FA788329-9A66-49EA-B7E4-E465C0E7E320"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"66C06765-D153-4D4D-B8CD-DB2E386E082B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4297E6B7-6C5A-4D52-A66B-F9D1AE17E988"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"141D83A9-89C2-456F-B70D-F274EBE3EAC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"0670E6AA-28B1-4B0C-84F9-F3F9F3E6ABDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E6769975-47A4-4D0A-9181-F59776D13D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"11E942FA-A458-4607-B48D-FCA112AFF1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"0E241159-FAA4-4DCF-AB68-BE36DF95D59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"DB6995B6-B594-454B-BD26-EACFB8241DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"AC14E107-7C11-4D5B-994B-CCACFD62097E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"E8105AE3-7FF6-43C5-9B47-29ACD4DD7C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"48BA51FF-B163-4522-8D78-AF9C05D50511"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"19001041-22C4-4D2C-A918-378DACBB1DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*","matchCriteriaId":"6F610D56-6BB6-48FB-B43A-670CE9168500"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1668BB5B-E7FB-4430-B8D5-89E308F5DD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"7777E919-FD4B-452B-88D7-165410C703F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BF54CC8D-B736-461D-B693-686E862EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"053ACE9B-A146-42C0-ADB2-47F6119965D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"30B4F891-2A03-45A8-A49C-7F8B8F7D8407"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"69E62AC4-954E-476C-98BE-C138E328AE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"6B88385C-F5FB-401F-80D5-5BF11CE3C19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"35F21A5A-F9C0-4860-80AD-1D3937483F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*","matchCriteriaId":"BD39950F-FBBF-4505-8FB5-EEF2886095F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*","matchCriteriaId":"2FA3E354-4366-46B5-ACD2-E72D0C8320A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*","matchCriteriaId":"0C002047-0FB1-4DC6-9108-B4B5AAFAC16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*","matchCriteriaId":"584C0690-2826-4389-95AD-42048AEE1916"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*","matchCriteriaId":"0CB85180-0F28-4281-BB59-E3F29BE25C9C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38517","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022533","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:179","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55734","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504799/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35609","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1857","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51614","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504799/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2447","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) display parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ogp_show.php en Online Guestbook Pro v5.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"search\" o (2) \"display\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:esoftpro:online_guestbook_pro:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B47429F3-3D23-4060-AE02-0B02C6606D93"}]}]}],"references":[{"url":"http://secunia.com/advisories/35762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.com/0907-exploits/ogp51-morexss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.com/0907-exploits/ogp51-morexss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2448","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en ogp_show.phpein Online Guestbook Pro v5.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"search_choice\". NOTA: el origen de esta información es desconocido; algunos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:esoftpro:online_guestbook_pro:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B47429F3-3D23-4060-AE02-0B02C6606D93"}]}]}],"references":[{"url":"http://secunia.com/advisories/35762","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2449","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en maillinglist/admin/change_config.php en ADbNewsSender anterior a v1.5.6, permite a atacantes remotos añadir y ejecutar archivos locales de su elección a través de ..(punto punto) en el parámetro \"path_to_lang\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.5","matchCriteriaId":"5B412BB4-3E28-4678-9C3F-D2CB22D5E038"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9F792DDE-D025-4F5B-AB1A-620A59900857"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2A53D1A3-6A37-417B-8CF4-F5897635E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"815153B5-F97A-4C56-8C20-4F6E7C0D638A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F051AB9-C299-4E9B-B4C2-EF77A0AE18E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C15AFACD-D8AD-415E-B050-7DAFC99506F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0CEF5136-210C-446B-9E32-6299B10CB69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2D524626-B977-4356-A93F-88B435CFCA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"328B133E-7482-4946-BAB1-5D89C60041B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"91A71223-CD88-446F-AF93-0626B39BE3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"80953021-E692-449B-A961-A369E8BB4A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"683CA1FD-A4E4-41E4-97A1-01A77B520991"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1831F536-F07D-49E8-A863-FDAD8E383104"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD13616B-33A3-4E43-BB91-19E192FA67F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A250D35-B8DF-4999-997C-EC69AD725E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E4A87D52-68B5-488E-BA5E-FDF61C798195"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D8DDB844-AC56-443A-9099-DA0D54F070E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7A8E8417-9BFE-4CB2-A218-458CD718F41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"01092A5C-0F07-488B-9F02-ACCA96618BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF12021-D316-4A18-B3E1-ED6AB9736EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"1758BFA0-47BA-49DB-8477-2996D6D03A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DD0EEF2A-61CC-472C-BE91-7199318DA51B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C5CAD3C9-3D51-4DAA-930E-B9ECCDBAB6C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"04F1B990-05DE-43FD-8923-CD2E675DE9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"0ECEF6BB-AF11-4427-B740-DC66AEA94DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F5B3BA36-997A-4CAF-9103-966881BDFC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6E6AD1EB-77AD-4F2F-A604-C290274C9AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"04E5BC91-05F3-4E97-B47B-C0D4E620F22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adbnewssender:adbnewssender:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4AC95ACF-C82C-445F-AFB5-BE778EC3C3BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/35845","source":"cve@mitre.org"},{"url":"http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694644","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35596","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=694644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2450","sourceIdentifier":"cve@mitre.org","published":"2009-07-13T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \\Device\\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL."},{"lang":"es","value":"El controlador del kernel OAmon.sys v 3.1.0.0 y anteriores en Tall Emu Online Armor Personal Firewall AV+ anterior a v3.5.0.12, y Personal Firewall 3.5 anterior a v3.5.0.14, permite a usuarios locales obtener privilegios a través de peticiones METHOD_NEITHER IOCTL modificadas a  \\Device\\OAmon que contienen direcciones del kernel de su elección como se ha demostrado empleadon el IOCTL 0x830020C3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0.11","matchCriteriaId":"3AD4AE7A-E4CB-42C1-A11A-FC6D508F147A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:3.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5E8DADE9-DBA9-44C9-8DC1-940804060CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:3.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A3C63A08-EDE7-4CC6-A23D-07CEB0805CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.0.13","matchCriteriaId":"D305E959-469D-42E0-83C1-AD73A94C647F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77A31AE5-6BDD-444C-A10C-E84F32EFE4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"61A9DD13-00EE-4DCA-819A-EE4BC4E0F306"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A4BD2C55-AEA8-4700-89F5-2A9BEA2DA37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A514514E-F2BA-4B23-820C-7AA6B284042B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"81A19ED6-9DF9-49B6-88E2-B2BE30FBDF17"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3658D72E-413B-489E-9D4C-262B15160D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6BDC5F53-D51F-4801-87BE-EE253DB80D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F2123F5D-A418-4657-816D-D97BF6A1ADDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A3665144-A936-4EFA-BB97-E3436B5BFD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8DA3E5BB-5BBE-4565-9417-34B3BDA08349"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"882FC0D5-B40E-4F5C-8999-03C10E8624B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tallemu:personal_firewall:3.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"862734C7-284F-43F3-9658-F6604FAD5746"}]}]}],"references":[{"url":"http://milw0rm.com/sploits/2009-OAmon_Exp.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8875","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/ntiadv0806/ntiadv0806.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35227","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50960","source":"cve@mitre.org"},{"url":"http://milw0rm.com/sploits/2009-OAmon_Exp.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/ntiadv0806/ntiadv0806.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2451","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en MIM:InfiniX v1.2.003 y posiblemente versiones anteriores permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de los parámetros (1) month y (2) year en una acción de calendario o (3)un termino de búsqueda en el formulario de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mim.infinix:infinix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.003","matchCriteriaId":"FC19D284-C788-443B-A3A0-FD18802789D1"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503046/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503480","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34750","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503046/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2452","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to \"underlying components of the License Management Console.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Citrix Licensing v11.5 con impacto y vectores de ataque desconocidos, en relación con \"los componentes subyacentes de License Management Console\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:licensing:11.5:*:*:*:*:*:*:*","matchCriteriaId":"F65CE218-9CD2-4F0C-BBC8-0ED6E633641F"}]}]}],"references":[{"url":"http://secunia.com/advisories/34937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX120742","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX120742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2453","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors."},{"lang":"es","value":"Citrix XenApp (anteriormente Presentation Server) v4.5 Hotfix Rollup Pack 3 no aplica adecuadamente la política de accesos cuando es definida con los filtros Access Gateway Advanced Edition, lo cual permite a atacantes remotos evitar las restricciones previstas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.5:-:se:*:*:*:*:*","matchCriteriaId":"9A5474BB-764E-4F80-BD5C-9B48AAA9FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.5:-:windows_server_2003:*:*:*:*:*","matchCriteriaId":"EA42A3AA-CCF9-4F28-AE9B-0E7B104BD3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.5:-:windows_server_2003_x64:*:*:*:*:*","matchCriteriaId":"CA9F8CAD-D918-49B7-A3AF-13624164DF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.5:fp1:*:*:*:*:*:*","matchCriteriaId":"7A1BC10D-DCDF-4360-9224-740DDB5C7726"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xenapp:4.5:fp3:*:*:*:*:*:*","matchCriteriaId":"4BB59B90-3BB9-479C-B998-E2BBA6D1BFDE"}]}]}],"references":[{"url":"http://osvdb.org/53900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX118792","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34691","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022114","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1154","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/53900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX118792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2454","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Citrix Web Interface v4.6, v5.0, y v5.0.1  permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:web_interface:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D14B7380-9771-45C6-9599-F50B34ED0787"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:web_interface:5.0:*:*:*:*:*:*:*","matchCriteriaId":"12DA2302-9E38-4475-96A9-8ED247D1BA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:web_interface:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEB970F-C655-4B8F-B31B-6CCC70253427"}]}]}],"references":[{"url":"http://secunia.com/advisories/34868","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX120697","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX120697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2455","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T14:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en webadmin/admin.php en @mail v5.6.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los parámetros (1) type and (2) func. NOTA: La procedencia de la información es desconocida; los detalles fueron obtenidos únicamente a través de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atmail:\\@tmail:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F0F50F7C-FBDF-4E90-A9B8-689C902ECD30"}]}]}],"references":[{"url":"http://secunia.com/advisories/34403","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2456","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in the Relative Distinguished Name (RDN)."},{"lang":"es","value":"El componente DS\\NDSD en Novell eDirectory v8.8 anterior a SP5 permite a atacantes remotos provocar una denegación de servicio (volcado de nucleo ndsd) a través de una petición LDAP que contenga múltiples caracteres . (punto) en el nombre completo relativo (RDN)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"03D34570-657E-48D5-B778-9510C3D0FF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*","matchCriteriaId":"2EA7ED79-2E4E-4BE0-B167-31BB6311A506"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*","matchCriteriaId":"FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*","matchCriteriaId":"A78EBF3A-4073-41D2-BD52-E598318D4996"}]}]}],"references":[{"url":"http://osvdb.org/55848","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35666","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51705","source":"cve@mitre.org"},{"url":"http://osvdb.org/55848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2457","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet."},{"lang":"es","value":"El componente DS/NDSD en Novell eDirectory v8.8 anterior a SP5 permite a atacantes remotos producir una denegación de servicio (caída) a través de un paquete LDAP malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"03D34570-657E-48D5-B778-9510C3D0FF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*","matchCriteriaId":"2EA7ED79-2E4E-4BE0-B167-31BB6311A506"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*","matchCriteriaId":"FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*","matchCriteriaId":"E263D9A0-CAC3-4009-9F5B-8EA7365B28AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*","matchCriteriaId":"A78EBF3A-4073-41D2-BD52-E598318D4996"}]}]}],"references":[{"url":"http://osvdb.org/55849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35666","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1883","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51706","source":"cve@mitre.org"},{"url":"http://osvdb.org/55849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=3426981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2458","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1\r\n\r\n\"This issue only affects Sun Fire V215 servers which are equipped with system boards 375-3463 dash level -04 or later AND XVR-100 graphic cards. Sun Fire V215 system boards 375-3463 with dash level -03 or lower, and all 375-3464-xx boards, are not affected by this issue.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Fire V215 Server, cuando se utilizan tarjetas gráficas XVR-100 en placas base con parte del número 375-3463 y un nivel de hardware de -04 o superior, permite a atacantes remotos provocar una denegación de servicio (pánico) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sun_fire_server:v215:*:*:*:*:*:*:*","matchCriteriaId":"31B59FE4-2175-4FC6-90E2-1E286F04BF98"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35661","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51695","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2459","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \\environ, (2) \\input, and (3) \\counter TeX directives."},{"lang":"es","value":"Múltiples vulnerabilidades inespecíficas en mimeTeX, cuando se ha descargado antes de 20090713, tiene un impacto desconocido y vectores de ataque relacionados con las directivas TeX (1) \\environ, (2) \\input, and (3) \\counter ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mimetex:*:*:*:*:*:*:*:*","versionEndIncluding":"1.71","matchCriteriaId":"0205895B-D777-43B6-B4B4-E57B333CAC40"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2009-009.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0877","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2009-009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2460","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en mathtex.cgi en mathTeX, descargado antes de 13/07/2009, tiene un impacto y vectores de ataque remotos sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mathtex:-:*:*:*:*:*:*:*","matchCriteriaId":"5784FD6A-EED6-4A19-8FDC-3F8C60EF93DB"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51796","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2461","sourceIdentifier":"cve@mitre.org","published":"2009-07-14T20:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors."},{"lang":"es","value":"mathtex.cgi de mathTeX, descargado antes del 13/07/2009, no crea ficheros temporales de forma segura, esto tiene un impacto no especificado y vectores de ataque locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mathtex:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"C5D49AE5-71EF-40BD-829B-B74818DA6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mathtex:1.00:*:*:*:*:*:*:*","matchCriteriaId":"B3873F37-5C93-45DA-89BF-65405F403F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:forkosh:mathtex:1.01:*:*:*:*:*:*:*","matchCriteriaId":"12146D18-3A2C-4930-9AA5-4071ABDF0020"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51797","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504919/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2462","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition."},{"lang":"es","value":"El motor de búsqueda en Mozilla Firefox anteriores v3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores relacionados con (1) el frame chain y synchronous events, (2) una insercción SetMayHaveFrame y nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) la lista hijo e initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, y (10) nsContentUtils::ComparePosition."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1163.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35947","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=413085","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=442227","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=445177","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461861","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=463350","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466763","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=468211","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472668","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472950","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=491134","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=413085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=442227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=445177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=461861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=463350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=466763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=468211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=472950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=491134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2463","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows."},{"lang":"es","value":"Desbordamiento de enteros en una función base64 decoding en Mozilla Firefox anteriores a v.3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1163.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35947","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38977","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39001","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-07.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=492779","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=492779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2464","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element."},{"lang":"es","value":"El nsXULTemplateQueryProcessorRDF::CheckIsSeparator function en Mozilla Firefox anteriores a v3.0.12, SeaMonkey v2.0a1pre, y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores relacionados con la carga de archivos múltiples RDF en un árbol XUL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441785","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9594","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2465","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function."},{"lang":"es","value":"Mozilla Firefox anteriores v3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o ejecutar arbitrariamente código a través de vectores relacionados con la construcción de marcos dobles, relativos a (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, y(3) nsPresShell.cpp, y el nsSubDocumentFrame::Reflow function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"55D3DD1B-64DF-46C8-80A3-99D2E34B665F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"48702EEB-C272-46ED-9C61-6F44D6964DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"AC650D89-CEEC-4A90-B3B9-5F0ADCEFCBB9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=482578","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489050","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10402","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=482578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2466","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.297","lastModified":"2025-06-25T16:56:21.430","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT."},{"lang":"es","value":"JavaScript engine en Mozilla Firefox anteriores v3.0.12 y Thunderbird permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o posiblemente ejecutar código a su elección a través de vectores relacionados a (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, y(3) MirrorWrappedNativeParent and js_LockGCThingRT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.12","matchCriteriaId":"9C5F57C5-621B-44C2-93E1-244C813A3E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"9567AD15-F32C-48CA-9345-FD5D1EC9FC3E"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1163.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Not Applicable","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35947","source":"secalert@redhat.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454704","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=465980","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=493281","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=494445","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=465980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=493281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=494445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2467","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object."},{"lang":"es","value":"Mozilla Firefox before v3.0.12 y v3.5 anterior a v3.5.1, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código de su elección a través de vectores que involucran un objeto Flash, un dialogo de ejecución de comandos muy lento y la descarga de un complemento Flash, lo que provoca el uso de un objeto eliminado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"880CAA7D-398A-4B26-9754-FD188CE9729D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-35.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=493601","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10473","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-35.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=493601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2468","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194."},{"lang":"es","value":"Desbordamiento de enteros en Apple CoreGraphics en Apple Mac OS X, usado en Mozilla Firefox anteriores a v3.0.12, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código a su elección a través de un texto largo que desencadena en un desbordamiento de búfer basado en memoria dinámica durante el renderizado de la fuente glyph, siendo un asunto relacionado con CVE-2009-1194."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3733","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-36.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022717","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=480134","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=480134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2469","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation."},{"lang":"es","value":"Mozilla Firefox anterior a la v3.0.12 no maneja adecuadamente un elemento SVG que posee una propiedad con una función \"watch\" y una función \"__defineSetter__\", lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente, la ejecución de código de su elección a través de un documento manipulado. Relacionado con la mal interpretación de ciertos punteros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-37.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=488995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=488995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2470","sourceIdentifier":"secalert@redhat.com","published":"2009-08-04T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a la 3.0.12 y 3.5.x en versiones anteriores a la 3.5.2 permite a servidores proxy SOCKS5 remotos provocar una denegación de servicio (corrupción del flujo de datos) mediante un nombre de dominio largo en una respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"033E4FC0-E968-429E-A684-35D0A54A038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36126","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-38.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35925","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022665","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=459524","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52252","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-38.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=459524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2471","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper."},{"lang":"es","value":"La  función setTimeout en Mozilla Firefox anterior a 3.0.12 no conserva adecuadamente la encapsulación del objeto, lo que permite a atacantes remotos ejecutar código JavaScript de su elección con privilegios chrome a través de una llamada manipulada. Relacionado con XPCNativeWrapper."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-39.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460882","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10572","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-39.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2472","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a \"cross origin wrapper bypass.\""},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.12 no usa siempre XPCCrossOriginWrapper cuando es requerido durante la construcción del objeto, lo que permite a atacantes remotos eludir la \"Same Origin Policy\" y realizar ataques de secuencias de comandos en sitios cruzados (XSS) mediante un documento manipulado, relacionado con una \"cross origin wrapper bypass.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.12","matchCriteriaId":"9C5F57C5-621B-44C2-93E1-244C813A3E62"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*","matchCriteriaId":"C76D0C17-2AFF-4209-BBCD-36166DF7F974"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-40.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479288","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=481434","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=497102","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9497","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-40.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=481434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=497102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2473","sourceIdentifier":"secalert@redhat.com","published":"2009-08-21T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564."},{"lang":"es","value":"neon, en versiones anteriores a la 0.28.6, cuando se usa expat, no detecta adecuadamente la recursividad en la expansión de una entidad, esto permite a atacantes dependientes del contexto provocar una denegación de servicio (consumo de la memoria y CPU), mediante un documento XML manipulado que contiene un gran número de referencias anidadas a entidades, una cuestión similar a CVE-2003-1564."}],"vendorComments":[{"organization":"Red Hat","comment":"Updated neon packages for Red Hat Enterprise Linux 4 and 5 were released via:\nhttps://rhn.redhat.com/errata/RHSA-2009-1452.html\n\nEmbedded copy of the neon library is included in the versions of gnome-vfs2 packages as shipped with Red Hat Enteprise Linux 4 and Red Hat Enteprise Linux 5.  The Red Hat Security Response Team has rated this issue as having low security impact on gnome-vfs2, future updates may address this flaw.","lastModified":"2009-09-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:0.28.6:*:*:*:*:*:*:*","matchCriteriaId":"632E9CF9-8652-4FCB-B387-467B137C8CC7"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html","source":"secalert@redhat.com"},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001045.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0131.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36371","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:221","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2341","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52633","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9461","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0131.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2474","sourceIdentifier":"secalert@redhat.com","published":"2009-08-21T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"neon, en versiones anteriores a la 0.28.6, cuando OpenSSL está habilitado, no maneja adecuadamente un caracter '\\0' en un nombre de dominio, en el campo Common Name (CN) del asunto de un certificado X.509, lo cual permite a atacacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación (CA) legítima, una cuestión relacionada con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:*:*:*:*:*:*:*:*","versionEndExcluding":"0.28.6","matchCriteriaId":"55788024-3E66-4489-AC67-8162BB5E8182"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36371","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36799","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:221","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36079","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-835-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2341","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-835-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2475","sourceIdentifier":"secalert@redhat.com","published":"2009-08-10T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673."},{"lang":"es","value":"Sun Java SE v5.0 anterior a la actualización 20 y v6 anterior a la actualización 15, y OpenJDK, pueden permitir a atacantes dependientes del contexto obtener información confidencial a través de vectores de ataque relacionados con variables estáticas que son declaradas sin la palabra clave \"final\" relacionadas con (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) los complementos (\"plugins\") imageio, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) la clase \"Introspector\" y una caché de BeanInfo, y (12) JAX-WS, una vulnerabilidad diferente de CVE-2009-2673."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:20:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"625B941A-B638-46C2-A840-83724D5F826B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36162","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513215","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10221","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2476","sourceIdentifier":"secalert@redhat.com","published":"2009-08-10T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object."},{"lang":"es","value":"La implementación de Java Management Extensions (JMX) en Sun Java SE v6 anteriores a Update 15, y en OpenJDK, no refuerza adecuadamente las validaciones OpenType, permitiendo a los atacantes dependientes del contexto saltar las restricciones de acceso previstas al aprovechar la re-ejecución de un método finalizador para obtener una referencia a un objeto privilegiado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36162","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513220","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10381","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"secalert@redhat.com"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2477","sourceIdentifier":"cve@mitre.org","published":"2009-07-15T15:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements."},{"lang":"es","value":"El archivo js/src/jstracer.cpp en el compilador JavaScript Just-in-Time (JIT) (también se conoce como TraceMonkey) en Firefox de Mozilla versiones 3.5 anteriores a 3.5.1, permite a los atacantes remotos ejecutar código arbitrario por medio de cierto uso de la función escape que desencadena el acceso a ubicaciones de memoria no inicializadas, como es demostrado originalmente por un documento que contiene elementos P y FONT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=6796","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"cve@mitre.org"},{"url":"http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9137","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9181","source":"cve@mitre.org"},{"url":"http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/443060","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-41.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35660","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1868","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503286","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40936/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.org/diary.html?storyid=6796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/443060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-41.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40936/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2478","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T15:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a \"flash bug.\""},{"lang":"es","value":"Mozilla Firefox v3.5 permite a los atacantes remotos causar una denegación de servicio (puntero NULO desreferenciado y caída de la aplicación) a través de vectores no especificado, en relación a un \"flash bug.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502648","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503286","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2479","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T15:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Reference links provided indicate Denial of Service impact only.","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application crash) via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, a crash resulting from this long string reportedly occurs in an operating-system library, not in Firefox."},{"lang":"es","value":"Firefox de Mozilla versiones 3.0.x, 3.5 y 3.5.1 en Windows, permite a los atacantes remotos causar una denegación de servicio (excepción no detectada y bloqueo de aplicación) por medio de un argumento de cadena Unicode largo en el método write. NOTA: esto se reportó originalmente como un desbordamiento de búfer en la región stack de la memoria. NOTA: en Linux y Mac OS X, un bloqueo resultante de esta cadena larga se produce en una biblioteca de sistema operativo, no en Firefox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"18B6CC9F-6295-4598-B28B-0CA19D1D9F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"C9F0434D-C84F-49FD-9F44-66D3ACD7B601"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F6AAB416-E865-4EEE-8FCB-A91253BEB52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"}]}]}],"references":[{"url":"http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/","source":"cve@mitre.org"},{"url":"http://osvdb.org/55931","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3338/","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9158","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022580","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504342","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51729","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3338/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2480","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type 4.24, and 4.25 when global templates are not initialized, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en mt-wizard.cgi en Six Apart Movable Type v4.24, y v4.25, cuando plantillas globales no son inicializadas, permite atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:movabletype:six_apart_movable_type:4.24:*:*:*:*:*:*:*","matchCriteriaId":"71C9A135-97D9-4296-8BAC-D390BA570B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:movabletype:six_apart_movable_type:4.25:*:*:*:*:*:*:*","matchCriteriaId":"8BDAEDD9-D4E6-414E-B975-44DE6E54FAF7"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN97248625/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000020.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.movabletype.org/documentation/appendices/release-notes/426.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35471","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1668","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51329","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN97248625/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.movabletype.org/documentation/appendices/release-notes/426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2481","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El archivo mt-wizard.cgi en Movable Type de Six Apart  anterior a versión 4.261, cuando las plantillas globales no se inicializan, permite a los atacantes remotos omitir las restricciones de acceso y (1) enviar correo electrónico a direcciones arbitrarias o (2) obtener información confidencial por medio de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:*","matchCriteriaId":"56106A34-006E-4B73-B6C6-3F36E9C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F1731B0E-71C0-4650-BFBF-1FB3865EAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:*","matchCriteriaId":"C057E938-243B-4BEE-BF38-F3334A2B9275"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"DE37614D-A959-4B4A-BF2E-9F3C1072BA20"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"47F63E3A-019C-431C-A155-1CD6E42FA485"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"13132B94-C271-46F7-9450-FBA1FCBB914E"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"B584BED2-F630-4A5B-8FE9-29BBE9517214"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:*","matchCriteriaId":"14FCDA0F-2562-4B58-BF3A-F908AFABC557"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*","matchCriteriaId":"C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*","matchCriteriaId":"C4EFB50C-CC9C-46EC-92C3-A581684354E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:*","matchCriteriaId":"E7FEAC67-FA0C-49AE-9AEB-B1E68FB54C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:*","matchCriteriaId":"321A94B3-CDAC-4793-9660-CDCDC614EBAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.25:*:*:*:*:*:*:*","matchCriteriaId":"DDDB2948-C902-43FC-9D2E-7EA3775F5A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*","versionEndIncluding":"4.26","matchCriteriaId":"230918F1-5CCE-4A03-ABFD-5EF0BC59DF32"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*","matchCriteriaId":"B1A33E50-6BFD-418F-9F3E-B42C013AA0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"DC0F1B54-554E-45C7-8943-A73086C88385"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"A56CDA00-DC8E-4042-A882-FB6D7D2F43B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*","matchCriteriaId":"1C8F4F3A-9942-4263-BC42-CDCDACDFF2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*","matchCriteriaId":"38626110-81A0-4C99-AB8F-D77FDF662887"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*","matchCriteriaId":"5212ADBE-9F50-4EAB-AC28-91314AA24595"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*","matchCriteriaId":"3542C36E-E457-46DD-A5F7-BD22E16F1C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*","matchCriteriaId":"461319CC-BCDC-4E24-B384-1EEC8B7C4596"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*","matchCriteriaId":"967DAF27-D561-4FDB-A65C-788551871E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*","matchCriteriaId":"DD460D1D-5971-491E-863A-D230A0B28ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"3CEA1C54-4636-44B1-B620-85F0D870797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*","matchCriteriaId":"1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*","matchCriteriaId":"C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*","matchCriteriaId":"AE92182C-5BBE-4FCD-959B-E95630D16E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*","matchCriteriaId":"99E9BE91-D42E-4523-A48E-E7B4FBE7A924"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"2C5935CA-FDE2-4300-8091-DBD0DC4D2081"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"DF080128-CC7C-4F71-9268-B7691D54F358"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"50782308-93FA-4F8F-93FB-4A4E55D95360"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*","matchCriteriaId":"D5C968A9-F07A-4C99-B4A5-434E96DDB928"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*","matchCriteriaId":"A9CD9174-EE47-40B8-8F49-81EAD89267D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*","matchCriteriaId":"B4FEB07E-4D70-4A24-822E-E4689CB8C9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*","matchCriteriaId":"59457028-2EA4-472F-A76F-EF867F48937F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*","matchCriteriaId":"ABE24C88-6062-4A36-9852-D9EC818EEA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*","matchCriteriaId":"11C793FA-AE7C-430F-B537-19B788D9BC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*","matchCriteriaId":"F80A607A-66A8-4995-A396-5487B8E3029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*","matchCriteriaId":"C3C21088-A9A5-4CE2-B4D7-8BC48DB84540"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*","matchCriteriaId":"C1DCAD70-9FFF-4950-875D-586937E93473"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*","matchCriteriaId":"395B9CE4-EA3A-42A1-AD37-6487911E10D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*","matchCriteriaId":"56195FCE-D933-40C6-A6A3-6AC8CFECA5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*","matchCriteriaId":"448081A9-A8C9-4FEC-879B-7FA11997B4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*","matchCriteriaId":"E7538776-B7B2-4912-BFE3-E7A1033F41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*","matchCriteriaId":"F33F4F69-D670-4698-84C6-EDD9D78F2D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*","matchCriteriaId":"1E481C6C-F6EF-4E7D-8DAF-F68407DE6501"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:*","matchCriteriaId":"7AD39A71-0B61-4319-BEE1-12CAD4B095A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*","matchCriteriaId":"23B5D056-BC56-4851-8E76-7E22C911EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*","matchCriteriaId":"CA9BC769-BE45-42EC-8E35-02E6B216D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:*:*:*:*:*:*:*","matchCriteriaId":"2B49D8B0-39C9-480B-9471-1846CE5A2142"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*","matchCriteriaId":"9A1B400B-FEC9-416B-89F2-C96B1BE11BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*","matchCriteriaId":"1458F0E9-6AF1-44C6-B0EC-7BCF314B0038"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.25:*:*:*:*:*:*:*","matchCriteriaId":"8A200E33-641A-41B3-8EB3-E7380B686C8C"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN08369659/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35471","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1668","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51330","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN08369659/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2482","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group."},{"lang":"es","value":"El módulo pam_unix en OpenPAM en NetBSD v4.0 anteriores a v4.0.2 y v5.0 anteriores a v5.0.1 permite a los usuarios locales cambiar la contraseña de administrador actual si ya se conoce, aún cuando no están en el grupo \"wheel \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"FCB9E9F8-7C6B-4BC7-A593-A11B9D6F0B35"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2F4B6E29-B74F-45FF-AEB1-A118753F8E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"49AF042F-5047-4FA2-B20C-65B2C6EBEA5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6BE00F7F-0A3A-4ECA-9FB6-1DE37C2ED5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"00564BAA-066A-4627-B6A8-78724E55D363"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"38C0F962-B1C5-4F4B-A7C2-AB8C3EDC996D"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc","source":"cve@mitre.org"},{"url":"http://osvdb.org/55284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35465","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022432","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51312","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2483","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element."},{"lang":"es","value":"libprop/prop_object.c en proplib en NetBSD v4.0 y v4.0.1 permite a los usuarios locales causar una denegación de servicio (puntero NULO desreferenciado y pánico del kernel) a través de un plist externalizada malformada (formulario XML) conteniendo un elemento no definido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"49AF042F-5047-4FA2-B20C-65B2C6EBEA5C"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc","source":"cve@mitre.org"},{"url":"http://osvdb.org/55285","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35466","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51311","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2484","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función Win32AddConnection en modules/access/smb.c en VideoLAN VLC media player v0.9.9, cuando se ejecuta en Microsoft Windows, permite a los atacantes remotos causar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código arbitrario a través de una smb URI larga en un archivo de lista de reproducción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"3CD809FD-E893-4921-83CE-D34008670F8F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35500","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1714","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14800","source":"cve@mitre.org"},{"url":"http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2485","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en HT-MP3Player v1.0 permite a los atacantes remotos ejecutar arbitrariamente código a través de una cadena larga de caracteres en un archivo .ht3 ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tingan:ht-mp3player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3E620DB6-E3C5-4B4B-9C91-B04EA60986CB"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9034","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2486","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets."},{"lang":"es","value":"Vulnerabilidad no especificada en la implementación SCTP en Sun Solaris 10, y OpenSolaris anteriores a snv_120, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de paquetes no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://osvdb.org/55875","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35873","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022574","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51740","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349","source":"cve@mitre.org"},{"url":"http://osvdb.org/55875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2487","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en la función frpr_icmp en ipfilter (también conocido como IP Filter) subsistema en Sun Solaris 10, y OpenSolaris snv_45 hasta snv_110, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/55874","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35881","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1923","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51739","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361","source":"cve@mitre.org"},{"url":"http://osvdb.org/55874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2488","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving \"file operations.\""},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo NFSv4 en el kernel en Sun Solaris 10, y OpenSolaris snv_102 hasta snv_119, permite a los usuarios locales causar una denegación de servicio (pánico de cliente) a través de vectores \"archivo de operaciones.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/55876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35874","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141733-03-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262788-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1922","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51774","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5586","source":"cve@mitre.org"},{"url":"http://osvdb.org/55876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141733-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-262788-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2489","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el programa utdmsession en Sun Ray Server Software (SRSS) v4.0, permite a usuarios locales acceder a las sesiones de usuarios de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D694C584-5A13-4064-B1AA-4C3C02F372FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"2621BD59-0ED4-402E-98EB-0F643078F4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252226-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51743","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-252226-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2490","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service (audio outage) or possibly gain privileges via unknown vectors related to \"resource leaks.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el demonio utaudiod en Sun Ray Server Software (SRSS) v4.0, cuando Solaris Trusted Extensions está activado, permite a usuarios locales provocar una denegación de servicio (parada de audio) o posiblemente, elevar sus privilegios a través de vectores desconocidos relacionados con \"fugas de recursos\" (resources leaks)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D694C584-5A13-4064-B1AA-4C3C02F372FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"}]}]}],"references":[{"url":"http://osvdb.org/55979","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51741","source":"cve@mitre.org"},{"url":"http://osvdb.org/55979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2491","sourceIdentifier":"cve@mitre.org","published":"2009-07-16T16:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to \"resource leaks.\""},{"lang":"es","value":"El  demonio utaudiod en Sun Ray Server Software (SRSS) v4.0, cuando Solaris Trusted Extensions está activado, permite a usuarios locales acceder a sesiones de usuarios de su elección a través de vectores desconocidos relacionados con \"fugas de recursos\" (resources leaks)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D694C584-5A13-4064-B1AA-4C3C02F372FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"}]}]}],"references":[{"url":"http://osvdb.org/55978","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51742","source":"cve@mitre.org"},{"url":"http://osvdb.org/55978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2492","sourceIdentifier":"cve@mitre.org","published":"2009-07-17T16:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en mt-wizard.cgi en Six Apart Movable Type anteriores a v4.261, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no específicos, es una vulnerabilidad distinta a CVE-2009-2480.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:*","versionEndIncluding":"4.25","matchCriteriaId":"0641196B-87D2-40D3-B826-C04549BB6B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:*","matchCriteriaId":"56106A34-006E-4B73-B6C6-3F36E9C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F1731B0E-71C0-4650-BFBF-1FB3865EAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:*","matchCriteriaId":"C057E938-243B-4BEE-BF38-F3334A2B9275"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"DE37614D-A959-4B4A-BF2E-9F3C1072BA20"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"8C1542C3-E6CD-4CF6-9F1D-E8E58F2A11E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"47F63E3A-019C-431C-A155-1CD6E42FA485"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"13132B94-C271-46F7-9450-FBA1FCBB914E"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"B584BED2-F630-4A5B-8FE9-29BBE9517214"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:*","matchCriteriaId":"14FCDA0F-2562-4B58-BF3A-F908AFABC557"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:*:*:*:*:*:*","matchCriteriaId":"D62FC8B9-3B6A-46C6-94CD-E35941BB64C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:community_solution:*:*:*:*:*","matchCriteriaId":"414CB64F-4460-4819-A1B9-673550080C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:enterprise:*:*:*:*:*","matchCriteriaId":"1841D3B7-8F8A-4FE2-B9C2-47FCFF5984AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4:*:open_source:*:*:*:*:*","matchCriteriaId":"73406BA8-4FE0-44D0-90EF-0084881D706D"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*","matchCriteriaId":"C55BC3C3-83AB-452C-AC2D-A53B3E0C3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*","matchCriteriaId":"C4EFB50C-CC9C-46EC-92C3-A581684354E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:*","matchCriteriaId":"E7FEAC67-FA0C-49AE-9AEB-B1E68FB54C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:*","matchCriteriaId":"321A94B3-CDAC-4793-9660-CDCDC614EBAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart_ltd:movable_type:*:*:*:*:*:*:*:*","matchCriteriaId":"5F52B477-8052-432E-A382-2181BF337321"},{"vulnerable":true,"criteria":"cpe:2.3:a:six_apart_ltd:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"5C580448-40D1-4C92-9301-861E4346DB65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*","matchCriteriaId":"B1A33E50-6BFD-418F-9F3E-B42C013AA0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"DC0F1B54-554E-45C7-8943-A73086C88385"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"A56CDA00-DC8E-4042-A882-FB6D7D2F43B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*","matchCriteriaId":"1C8F4F3A-9942-4263-BC42-CDCDACDFF2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*","matchCriteriaId":"38626110-81A0-4C99-AB8F-D77FDF662887"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*","matchCriteriaId":"5212ADBE-9F50-4EAB-AC28-91314AA24595"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*","matchCriteriaId":"3542C36E-E457-46DD-A5F7-BD22E16F1C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*","matchCriteriaId":"461319CC-BCDC-4E24-B384-1EEC8B7C4596"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*","matchCriteriaId":"967DAF27-D561-4FDB-A65C-788551871E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*","matchCriteriaId":"DD460D1D-5971-491E-863A-D230A0B28ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC178AF-FAF7-49E2-8AE7-1858BD67F44B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*","matchCriteriaId":"3CEA1C54-4636-44B1-B620-85F0D870797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*","matchCriteriaId":"1819A7A1-366A-4168-AE0E-4CE1FF0D3E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*","matchCriteriaId":"C9F743E8-72E9-4AEB-B137-A61EB67B8FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*","matchCriteriaId":"AE92182C-5BBE-4FCD-959B-E95630D16E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*","matchCriteriaId":"99E9BE91-D42E-4523-A48E-E7B4FBE7A924"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*","matchCriteriaId":"2C5935CA-FDE2-4300-8091-DBD0DC4D2081"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*","matchCriteriaId":"DF080128-CC7C-4F71-9268-B7691D54F358"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*","matchCriteriaId":"4783C1BD-B2BA-4D86-A61D-3EB2396DE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*","matchCriteriaId":"50782308-93FA-4F8F-93FB-4A4E55D95360"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*","matchCriteriaId":"D5C968A9-F07A-4C99-B4A5-434E96DDB928"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*","matchCriteriaId":"A9CD9174-EE47-40B8-8F49-81EAD89267D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*","matchCriteriaId":"B4FEB07E-4D70-4A24-822E-E4689CB8C9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*","matchCriteriaId":"59457028-2EA4-472F-A76F-EF867F48937F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*","matchCriteriaId":"ABE24C88-6062-4A36-9852-D9EC818EEA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*","matchCriteriaId":"11C793FA-AE7C-430F-B537-19B788D9BC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*","matchCriteriaId":"F80A607A-66A8-4995-A396-5487B8E3029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*","matchCriteriaId":"C3C21088-A9A5-4CE2-B4D7-8BC48DB84540"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*","matchCriteriaId":"C1DCAD70-9FFF-4950-875D-586937E93473"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*","matchCriteriaId":"395B9CE4-EA3A-42A1-AD37-6487911E10D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*","matchCriteriaId":"56195FCE-D933-40C6-A6A3-6AC8CFECA5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*","matchCriteriaId":"448081A9-A8C9-4FEC-879B-7FA11997B4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*","matchCriteriaId":"E7538776-B7B2-4912-BFE3-E7A1033F41E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*","matchCriteriaId":"F33F4F69-D670-4698-84C6-EDD9D78F2D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*","matchCriteriaId":"1E481C6C-F6EF-4E7D-8DAF-F68407DE6501"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:*","matchCriteriaId":"7AD39A71-0B61-4319-BEE1-12CAD4B095A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*","matchCriteriaId":"23B5D056-BC56-4851-8E76-7E22C911EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*","matchCriteriaId":"CA9BC769-BE45-42EC-8E35-02E6B216D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*","matchCriteriaId":"9A1B400B-FEC9-416B-89F2-C96B1BE11BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*","matchCriteriaId":"1458F0E9-6AF1-44C6-B0EC-7BCF314B0038"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN86472161/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35885","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1668","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN86472161/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2493","sourceIdentifier":"secure@microsoft.com","published":"2009-07-29T17:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka \"ATL COM Initialization Vulnerability.\""},{"lang":"es","value":"La Active Template Library (ATL) en Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 y 2008 Gold y SP1, y Visual C++ 2005 SP1 y 2008 Gold y SP1 no restringe adecuadamente el uso de OleLoadFromStream en la instanciación de objetos desde el flujo de datos, lo que permite a atacantes remotos  ejecutar código de su elección a través de un documento HTML manipulado con un (1)control o (2) componente, relacionado con las cabeceras ATL y el evitar las políticas de seguridad. También conocida como \"Vulnerabilidad de Inicialización ATL COM\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"882CDAE9-EC03-48E6-814C-50236B8F0B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2008:*:*:*:*:*:*:*","matchCriteriaId":"27438900-81A7-41CD-AA17-1DA9F35C98D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"A4E0021F-ABB9-4FB4-BC1C-5098F2E66371"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0C28897B-044A-447B-AD76-6397F8190177"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*","matchCriteriaId":"7CAEEA81-5037-4B68-98D9-83AAEBC98E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"A9AD97AF-1F2A-483D-86F2-764ECEC31BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35967","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36187","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36374","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36746","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/38568","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/41818","source":"secure@microsoft.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264648-1","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020775.1-1","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-04.html","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-11.html","source":"secure@microsoft.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2493.html","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2034","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2010/0366","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-055","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6245","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6304","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6421","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6473","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6716","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264648-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020775.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-2493.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2494","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and deleting this variant, aka \"ATL Object Type Mismatch Vulnerability.\""},{"lang":"es","value":"La librería Active Template (ATL) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2  permite a atacantes remotos ejecutar código arbitrario a través de vectores relacionados con operaciones libres erróneas posteriormente a la lectura de una variante desde un stream y el borrado de esta variante, también conocido como \"Vulnerabilidad de mal emparejamiento de tipo de objeto ATL\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"secure@microsoft.com"},{"url":"http://osvdb.org/56910","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36187","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35982","source":"secure@microsoft.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022712","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5708","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2495","sourceIdentifier":"secure@microsoft.com","published":"2009-07-29T17:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka \"ATL Null String Vulnerability.\""},{"lang":"es","value":"La Active Template Library (ATL) en Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 y 2008 Gold y SP1, y Visual C++ 2005 SP1 y 2008 Gold y SP1 no cumple adecuadamente con la terminación de cadena, lo que permite a atacantes remotos obtener información sensible a través de un documentos HTML manipulado con un (1) control o (2) componente ATL que provoca un desbordamiento de lectura de búfer. Relacionado con la reserva de cabeceras y búfers ATL. También conocida como \"Vulnerabilidad de cadena nula ATL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1_redistribution_pkg:*:*:*:*:*:*","matchCriteriaId":"FA86F8B2-0211-4FF6-BE07-2E2EC06DFC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2008:redistribution_pkg:*:*:*:*:*:*","matchCriteriaId":"9BA98FBB-255F-4AC9-B035-54C60EEE022B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1_redistribution_pkg:*:*:*:*:*:*","matchCriteriaId":"B20EDFCC-8C10-4EBF-BCC6-1A17362E6676"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2005:sp1:64_bit_hosted_visual_c\\+\\+_tools:*:*:*:*:*","matchCriteriaId":"9E35016A-D55F-4607-8716-77AACB7B166C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35967","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36374","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36746","source":"secure@microsoft.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"secure@microsoft.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"secure@microsoft.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"secure@microsoft.com"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2034","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6305","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6478","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7573","source":"secure@microsoft.com"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126592505426855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-195A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2496","sourceIdentifier":"secure@microsoft.com","published":"2009-08-12T17:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka \"Office Web Components Heap Corruption Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el Componentes Office Web  ActiveX Control en Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 para el 2007 Microsoft Office System, Internet Security y Acceleration (ISA) Server 2004 SP3 y 2006 SP1, y Office Small Business Accounting 2006 permite a los atacantes remotos ejecutar arbitrariamente código a través de parámetros no especificados a métodos desconocidos, también conocidos como \"Vulnerabilidad de corrupción de memoria dinámica en componentes de Office Web\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:biztalk_server:2002:*:*:*:*:*:*:*","matchCriteriaId":"44BFE3B9-3C8C-4747-AAC0-A10EED857C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"234D43DB-0FC3-4B94-8883-EEE99A427E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2004:sp3:standard:*:*:*:*:*","matchCriteriaId":"64ACA6AB-44C3-4B33-BEA1-04DFF004FA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"CFF01816-AD1A-4D6D-92B3-348D70FC3920"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_security_and_acceleration_server:2006:sp1:std:*:*:*:*:*","matchCriteriaId":"EE723FF8-0DC2-46C4-A3FA-953DCAB5612B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:-:*:small_business_accounting_2006:*:*:*:*:*","matchCriteriaId":"F27860CB-929A-47F3-801E-3E69C53FA353"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"D86088BB-C81D-4CCE-B7D1-1280818D99A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp1:2007_microsoft_office:*:*:*:*:*","matchCriteriaId":"7B654504-9098-4F7F-8CE7-696CF15BCA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"0A9C5BA7-0ECB-4101-9DAD-ECAA42C9E0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"B07BEA1E-F032-4E63-8548-C98DD6E05AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1022708","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5645","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2497","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka \"Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability.\""},{"lang":"es","value":"La Rutina de Lenguaje Comun (CLR) en Microsoft .NET Framework v2.0, v2.0 SP1, v2.0 SP2, v3.5, and v3.5 SP1, y Silverlight v2, no gestiona adecuadamente las interfaces, lo que permite a atacantes remotos ejecutar código arbitrario a través de (1) una aplicación manipulada de navegador XAML (XBAP), (2) una aplicación manipulada de Silverlight, (3) una aplicación manipulada de ASP.NET, o (4) una aplicación manipulada de .NET Framework, también conocido como \"Vulnerabilidad de el CLR de Microsoft Silverlight y Microsoft .NET Framework\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A419F50E-F32C-461C-95D0-978C5351FBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B659D4-6EDD-4A31-A7CC-70B12EBEB4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","matchCriteriaId":"E039CE1F-B988-4741-AE2E-5B36E2AF9688"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"0C610747-93E5-4014-8ED2-47F333174832"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6510","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2498","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka \"Windows Media Header Parsing Invalid Free Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Media Format Runtime v9.0, v9.5, y v11 y Windows Media Services v9.1 y 2008 no no analiza apropiadamente cabeceras malformadas en archivos Advanced Systems Format (ASF), lo que permite a los atacantes remotos ejecutar arbitrariamente código a través de archivo manipulado (1) .asf, (2) .wmv, o (3) .wma, también conocido como \"Vulnerabilidad libre invalidada de analizador de cabeceras en Windows Media\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*","matchCriteriaId":"87AA5126-90FF-40F5-8664-E8260C2C8CF5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*","matchCriteriaId":"A3E3CAB6-D1AF-4B13-97E3-0E96D4F32F87"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:2008:*:*:*:*:*:*:*","matchCriteriaId":"DB686D09-A33F-408E-9083-F988066FCE66"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:media_foundation_sdk:*:*:*:*:*:*:*:*","matchCriteriaId":"4773A9EC-E368-4198-8BDD-21B5DB296272"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6257","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2499","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka \"Windows Media Playback Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Media Format Runtime v9.0, v9.5, y v11; y Microsoft Media Foundation en Windows Vista Gold, SP1, y SP2 y Server 2008; permite a atacantes remotos ejecutar código a su elección en un fichero MP3 con metadatos manipulados que desembocan en un error de memoria, también llamado \"Vulnerabilidad de error de memoria Windows Media Playback.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:x64:*:*:*:*:*","matchCriteriaId":"87AA5126-90FF-40F5-8664-E8260C2C8CF5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:9.1:*:*:*:*:*:*:*","matchCriteriaId":"A3E3CAB6-D1AF-4B13-97E3-0E96D4F32F87"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:2008:*:*:*:*:*:*:*","matchCriteriaId":"DB686D09-A33F-408E-9083-F988066FCE66"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_foundation:-:*:*:*:*:*:*:*","matchCriteriaId":"8BBC8864-560B-480A-903B-19215000C69D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*","matchCriteriaId":"26A548AB-7C40-4CB7-B024-8A2DA947F245"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*","matchCriteriaId":"5BE99796-BADE-40D1-AD85-03D28A466E5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5531","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2500","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka \"GDI+ WMF Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web 2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen WMF, también conocido como \"Vulnerabilidad de desbordamiento de entero GDI+ WMF\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5967","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2501","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en pila en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen PNG manipulado, también conocido como \"Vulnerabilidad de desbordamiento de búfer basado en pila GDI+ PNG\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5800","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2502","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka \"GDI+ TIFF Buffer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen TIFF manipulado, también conocido como \"Vulnerabilidad de desbordamiento de búfer GDI+ TIFF\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5898","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2503","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 does not properly allocate an unspecified buffer, which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption, aka \"GDI+ TIFF Memory Corruption Vulnerability.\""},{"lang":"es","value":"GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 no localiza adecuadamente un búfer sin especificar, lo que permite a atacantes remotos ejecutar código arbitrario a través de un fichero de imagen TIFF que inicia una corrupción de memoria, también conocido como \"Vulnerabilidad de corrupción de memoria GDI+ TIFF\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6491","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2504","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allow remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"GDI+ .NET API Vulnerability.\""},{"lang":"es","value":"Múltiples desbordamientos de enteros en las API no especificadas en GDI+ en .NET Framework versión 1.1 SP1, .NET Framework versión 2.0 SP1 y SP2, Windows XP SP2 y SP3, Windows Server 2003 SP2, Vista versión Gold y SP1, Server 2008 versión Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 versión Gold y SP3, Office Excel Viewer 2003 Gold y SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 versión Gold, SP1 y SP2, Office Compatibility Pack for Word, Excel and PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web 2, Groove 2007 versión Gold y SP1, Works versión 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 versión Gold y SP1 y Forefront Client Security versión 1.0, de Microsoft, permiten a los atacantes remotos ejecutar código arbitrario por medio de (1) una aplicación de navegador XAML diseñada (XBAP), (2) una aplicación de ASP.NET diseñada o (3) una aplicación de .NET Framework diseñada, también se conoce como \"GDI+ .NET API Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6282","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2505","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests, which allows remote attackers to execute arbitrary code via crafted structures in a malformed request, aka \"Internet Authentication Service Memory Corruption Vulnerability.\""},{"lang":"es","value":"The Internet Authentication Service (IAS) en Microsoft Windows Vista SP2 y Server 2008 SP2 no valida adecuadamente las peticiones de autenticación MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP), lo que permite a atacantes remotos ejecutar código de su elección a través de estructuras manipuladas en una petición malformada, conocido como \"Internet Authentication Service Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023291","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6063","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2506","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a DOC file with an invalid number of property names in the DocumentSummaryInformation stream, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de enteros en los convertidores de texto en Microsoft Office Word 2002 SP3 y 2003 SP3; Works versión 8.5; Office Converter Pack; y WordPad en Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo DOC con un número no válido de nombre de propiedad en la transmisión DocumentSummaryInformation, lo que desencadena un desbordamiento del búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"1C6C8409-397E-40DF-A645-6409189D450D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wordpad:*:*:*:*:*:*:*:*","matchCriteriaId":"2531DDF2-D2AA-4919-B756-28478AEA5AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=834","source":"secure@microsoft.com"},{"url":"http://support.avaya.com/css/P8/documents/100070184","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/37216","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-073","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5846","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100070184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2507","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary programs via unspecified vectors that cause a \"vulnerable binary\" to load and run, aka \"Memory Corruption in Indexing Service Vulnerability.\""},{"lang":"es","value":"Cierto control ActiveX en el servicio de indexado de Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 no procesa adecuadamente las URLs, lo que permite a atacantes remotos ejecutar programas de forma arbitraria a través de vectores sin especificar que producen un \"binario vulnerable\" para cargar y ejecutar, también conocido como \"Vulnerabilidad de corrupción de memoria en el servicio de indexado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-057","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6042","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2508","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka \"Single Sign On Spoofing in ADFS Vulnerability.\""},{"lang":"es","value":"La implementación simple sign-on en Active Directory Federation Services (ADFS) en Microsoft Windows Server 2003 SP2 y Server 2008 Gold and SP2 no borra adecuadamente las credenciales en el fin de una sesión de red, lo que permite a atacantes físicamente próximos obtener credenciales de un usuario anterior en el mismo navegador por uso de los datos desde la caché, conocido como \"Single Sign On Spoofing in ADFS Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5882","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2509","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka \"Remote Code Execution in ADFS Vulnerability.\""},{"lang":"es","value":"Active Directory Federation Services (ADFS) en Microsoft Windows Server 2003 SP2 y Server 2008 Gold y SP2 no valida adecuadamente las cabeceras en peticiones HTTP, lo que permite a atacantes remotos autenticados ejecutar código de su elección mediante una petición manipulada a un servidor web IIS. También conocido como \"Vulnerabilidad de Ejecución de Código Remoto en ADFS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6441","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2510","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, as used by Internet Explorer and other applications, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, aka \"Null Truncation in X.509 Common Name Vulnerability,\" a related issue to CVE-2009-2408."},{"lang":"es","value":"El componente CryptoAPI en Microsoft Windows 2000 SP4, Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold, SP2, y R2, y Windows 7, tal y como lo utiliza Internet Explorer y otras aplicaciones, no maneja adecuadamente el carácter '\\0' en el campo Nombre Común (CN) un certificado X.509, lo que permite a atacantes man-in-the-middle engañar a servidores SSL a través de un certificado manipulado creado por una autoridad certificadora legitima, también conocido como \"Vulnerabilidad de truncado nulo en el nombre común de X.509\", relacionado con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.networkworld.com/news/2009/073009-more-holes-found-in-webs.html","source":"secure@microsoft.com"},{"url":"http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/36475","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.wired.com/threatlevel/2009/07/kaminsky/","source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5842","source":"secure@microsoft.com"},{"url":"http://www.networkworld.com/news/2009/073009-more-holes-found-in-webs.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.wired.com/threatlevel/2009/07/kaminsky/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2511","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows man-in-the-middle attackers to spoof arbitrary SSL servers and other entities via an X.509 certificate that has a malformed ASN.1 Object Identifier (OID) and was issued by a legitimate Certification Authority, aka \"Integer Overflow in X.509 Object Identifiers Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en el componente CryptoAPI en Microsoft Windows 2000 SP4, Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold, SP2, y R2, y Windows 7 permite a atacantes man-in-the-middle engañar de forma arbitraria a servidores SSL y otras entidades a traves de un certificado X.509 que tiene un identificador de objeto (OID) malformado que fue creado por una certificadora legitima, también conocido como \"Vulnerabilidad de desbordamiento de entero en identificadores de objeto X.509\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6186","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2512","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka \"Web Services on Devices API Memory Corruption Vulnerability.\""},{"lang":"es","value":"Web Services en Devices API (WSDAPI) en Windows Vista Gold, SP1, y SP2 y Server v2008 Gold and SP2 no procesa adecuadamente las cabeceras de los mensajes WSD, permitiendo a atacantes remotos ejecutar código de su elección a través de (1)mensajes y (2)respuestas manipuladas, como \"vulnerabilidad de corrupción de memoria en Web Services on Devices API \"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2513","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka \"Win32k Insufficient Data Validation Vulnerability.\""},{"lang":"es","value":"Graphics Device Interface (GDI) en win32k.sys en el kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server v2003 SP2, Vista Gold, SP1, y SP2, y Server v2008 Gold y SP2 no valida adecuadamente la entrada a user-mode, lo que permite a usuarios locales obtener privilegios a través de una aplicación manipulada, como \"vulnerabilidad de validación de datos insuficiente Win32k\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*","matchCriteriaId":"5AEA67EA-C788-4CF2-9246-01475302238E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6277","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2514","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table, which allows remote attackers to execute arbitrary code via a crafted Embedded OpenType (EOT) font, aka \"Win32k EOT Parsing Vulnerability.\""},{"lang":"es","value":"win32k.sys en el kernel en Microsoft Windows v2000 SP4, XP SP2 y SP3, y Server v2003 SP2 no analiza correctamente el código de fuente durante la construcción de una tabla de entrada de directorio, lo que permite a atacantes remotos ejecutar código de su elección a través de fuentes Embedded OpenType (EOT) manipuladas, como \"vulnerabilidad Win32k EOT Parsing\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*","matchCriteriaId":"5AEA67EA-C788-4CF2-9246-01475302238E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6406","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2515","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application that triggers an incorrect truncation of a 64-bit integer to a 32-bit integer, aka \"Windows Kernel Integer Underflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en el kernel en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold, SP1, y SP2, y Server 2008 Gold y SP2 permite a usuarios locales ganar privilegios a través de una aplicación manipulada que inicia un truncado incorrecto del un entero de 64 bits a un de 32 bits, también conocida como \"Vulnerabilidad de desbordamiento de entero en el kernel de Windows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*","matchCriteriaId":"49F99773-D1AF-4596-856A-CA164D4B68E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*","matchCriteriaId":"C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*","matchCriteriaId":"59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6506","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2516","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka \"Windows Kernel NULL Pointer Dereference Vulnerability.\""},{"lang":"es","value":"El kernel de Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold y SP1, y Server 2008 Gold no valida apropiadamente los datos enviados desde el modo de usuario, lo que permite a los usuarios locales alcanzar privilegios por medio de un archivo PE.exe creado que desencadena una desreferencia de puntero NULL durante el salto de cadena, también se conoce como \"Windows Kernel NULL Pointer Dereference Vulnerability\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*","matchCriteriaId":"C29F02ED-85FC-4D22-A6DE-5F9C77ECCD70"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*","matchCriteriaId":"59F0770D-0CED-4AEF-95AB-F9F9A4D6FB55"}]}]}],"references":[{"url":"http://www.nsfocus.com/en/advisories/0903.html","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6264","source":"secure@microsoft.com"},{"url":"http://www.nsfocus.com/en/advisories/0903.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2517","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka \"Windows Kernel Exception Handler Vulnerability.\""},{"lang":"es","value":"El kernel en Microsoft Windows Server 2003 SP2 no maneja adecuadamente ciertas excepciones cuando una condición de error se produce, lo que permite a usuarios locales producir una denegación de servicio (reinicio) a través de una aplicación manipulada, también conocido como \"Vulnerabilidad de Excepción del Kernel de Windows\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6512","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2518","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka \"Office BMP Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en GDI+ in Microsoft Office XP SP3, permite a atacantes remotos ejecutar código de su elección  a través de un documento de Office con una imagen bitmap (también conocida como BPM) que provoca una corrupción de memoria. También conocida como \"Vulnerabilidad Office BMP Integer Overflow\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6430","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2519","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers \"system state\" corruption, aka \"DHTML Editing Component ActiveX Control Vulnerability.\""},{"lang":"es","value":"El control ActiveX \"DHTML Editing Component\" en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 no da formato adecuado a las marcas HTML, permitiendo a atacantes remotos ejecutar código de su elección mediante un sitio web manipulado que provoca una corrupción \"system state\", también conocido como \"DHTML Editing Component ActiveX Control Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/36592","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/36280","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022843","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-046","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6271","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-251A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2521","sourceIdentifier":"secure@microsoft.com","published":"2009-09-04T10:30:01.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka \"IIS FTP Service DoS Vulnerability.\""},{"lang":"es","value":"Una vulnerabilidad de consumo de pila en el Servicio FTP en Internet Information Services (IIS) de Microsoft versiones 5.0 hasta 7.0, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio) por medio de un comando list (ls) -R que contiene un comodín que hace referencia a un subdirectorio, seguido por un .. (punto punto), también se conoce como \"IIS FTP Service DoS Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"7.0","matchCriteriaId":"4ED209E9-04E3-4FDD-947E-8103273FF41D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6508","source":"secure@microsoft.com","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2523","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka \"License Logging Server Heap Overflow Vulnerability.\""},{"lang":"es","value":"El servidor de registro de licencias (llssrv. exe) en Microsoft Windows 2000 SP4 permite a los atacantes remotos ejecutar código arbitrario a través de un mensaje RPC que contiene una cadena sin null terminator, que desencadena un desbordamiento de búfer basado en el montón en el método LlsrLicenseRequestW, también conocido como \"vulnerabilidad de desbordamiento de montón de servidor de registro de licencias.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-064","source":"secure@microsoft.com","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6300","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2524","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service (reboot) via a malformed packet, aka \"Local Security Authority Subsystem Service Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento inferior de entero en la característica de autenticación NTLM en el Servicio del Subsistema de la Autoridad de Seguridad (LSASS) en Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold, SP2, y R2, y Windows 7 permite a atacantes remotos producir una denegación de servicio (reinicio) a través de un paquete malformado, también conocido como \"Vulnerabilidad de desbordamiento de entero en LSASS\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-059","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6263","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2525","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize unspecified functions within compressed audio files, which allows remote attackers to execute arbitrary code via (1) a crafted media file or (2) crafted streaming content, aka \"Windows Media Runtime Heap Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Media Runtime, usado en DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder y Audio Compression Manager (ACM), no inicializa adecuadamente funciones que no se han especificado, en los archivos de audio comprimidos, lo que permite a atacantes remotos ejecutar código de su elección  a través (1) de un archivo multimedia manipulado o (2) mediante un contenido de difusión (streaming). También conocida como \"Vulnerabilidad de Windows Media Runtime Heap Corruption\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEC28F-EB69-4B28-AAE9-674DE2C994E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:9.5:*:*:*:*:*:*:*","matchCriteriaId":"F6DBB016-22A2-4B12-A1A4-DEE8ABF14B9B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_format_runtime:11:*:*:*:*:*:*:*","matchCriteriaId":"61AAD264-CC98-4FB7-BDDD-6920D4AD1B5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2526","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted packet to the Server service, aka \"SMBv2 Infinite Loop Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Vista Gold, SP1, y SP2 y Server 2008 Gold y SP2 , no valida adecuadamente algunos campos de los paquetes SMBv2, lo que permite a atacantes remotos producir una denegación de servicio (bucle infinito y cuelgue de sistema) a través de un paquete manipulado al servicio de servidor, también conocido como \"Vulnerabilidad de bucle infinito SMBv2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5595","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2527","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF file or (2) crafted streaming content, aka \"WMP Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en Microsoft Windows Media Player v6.4, permite a atacantes remotos ejecutar código de su elección a través de un archivo ASF manipulado o (2) a través de un contenido para difusión (streaming) manipulado, también conocida como \"Vulnerabilidad de desbordamiento de búfer basado en memoria dinámica (heap) WMP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*","matchCriteriaId":"11AFB73A-1C61-40F1-8415-E4D40BB2699B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*","matchCriteriaId":"377F7D0C-6B44-4B90-BF90-DAF959880C6D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:sp2:*:x64:*:*:*:*:*","matchCriteriaId":"3461CEA0-6CCF-4AA9-B83A-420E1310C83C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*","matchCriteriaId":"2D48D876-6A88-4B52-9322-9F019BFA19B9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*","matchCriteriaId":"E69F8C21-5996-4083-A02A-F04AE948CEA9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-052","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6184","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2528","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka \"Memory Corruption Vulnerability.\""},{"lang":"es","value":"GDI+ en Microsoft Office XP SP3 no maneja adecuadamente los objetos mal formados en Office Art Property Tables, lo que permite a atacantes remotos ejecutar código de su elección a través de un documento de Office manipulado que provoca una corrupción de memoria, \"también conocida como vulnerabilidad de corrupción de memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2529","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka \"HTML Component Handling Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v5.01 SP4, v6, v6 SP1, v7, y v8  no gestiona adecuadamente la validación de argumentos para un número de variables sin especificar lo que permite a atacantes remotos ejecutar código arbitrario a través de un documentos HTML manipulado, también conocido como \"Vulnerabilidad de gestión de componentes HTML\"."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2530","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-2531."},{"lang":"es","value":"Microsoft Internet Explorer v6, v6 SP1, v7, y v8 no gestiona adecuadamente los objetos en memoria, lo que permite a atacantes remotos ejecutar código arbitrario mediante el acceso a un objeto que (1) no ha sido adecuadamente inicializado o (2) es borrado, lo que lleva a una corrupción de memoria, también conocido como \"Vulnerabilidad de memoria no inicializada corrupta\", una vulnerabilidad diferente que CVE-2008-2531."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6190","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2531","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-2530."},{"lang":"es","value":"Microsoft Internet Explorer v6, v6 SP1, v7, y v8, no maneja adecuadamente objetos en memoria lo que permite a atacantes remotos ejecutar codigo arbitrario mediante el acceso a un objeto que (1) no ha sido adecuadamente inicializado, o (2) es borrado, produciendo un corrupcion de memoria, también conocido como \"Vulnerabilidad de corrupción de memoria no inicializada\", una vulnerabilidad diferente que CVE-2009-2530."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*","matchCriteriaId":"A1B0FA50-529D-4D33-9B6E-F32AF0A8FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*","matchCriteriaId":"CD560746-0AED-4646-934E-6742888FB6F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5766","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2532","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the Server service, aka \"SMBv2 Command Value Vulnerability.\""},{"lang":"es","value":"Microsoft Windows Vista Gold, SP1, y SP2, Windows Server 2008 Gold y SP2, y Windows 7 RC no gestiona adecuadamente el valor del comando en un paquete de negocio de petición SMB Multiprotocolo, lo que permite a atacantes remotos ejecutar código arbitrario a través de un paquete SMBv2 manipulado al servicio de servidor, también conocido como \"Vulnerabilidad de valor de comando SMBv2\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*","matchCriteriaId":"32623D48-7000-4C7D-823F-7D2A9841D88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"2C9B0563-D613-497D-8F2E-515E6DA00CA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*","matchCriteriaId":"3A04E39A-623E-45CA-A5FC-25DAA0F275A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6336","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2533","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T17:30:54.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of service (daemon exit) via multiple RTSP SET_PARAMETER requests with empty DataConvertBuffer headers."},{"lang":"es","value":"rmserver en RealNetworks Helix Server y Helix Mobile Server anteriores a v13.0.0 permite a atacantes remotos provocar una denegación de servicio (finaliza el demonio) mediante una petición RTSP SET_PARAMETER múltiple con las cabeceras \"DataConvertBuffer\" vacías."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0.1","matchCriteriaId":"78A24161-758C-4F18-B3D7-9D7E652612EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0890EDD4-63FF-43EC-9EC4-852B34E00F51"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0.0","matchCriteriaId":"564CD3CE-1094-4F7E-8598-1B4B35AF0AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*","matchCriteriaId":"74F01F2C-036C-4B6E-B66D-F0870801D397"}]}]}],"references":[{"url":"http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf","source":"cve@mitre.org"},{"url":"http://osvdb.org/55981","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/real-helix-dna","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505083/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35731","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1947","source":"cve@mitre.org"},{"url":"http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/real-helix-dna","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505083/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2534","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T17:30:57.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI."},{"lang":"es","value":"RealNetworks Helix Server y Helix Mobile Server anterior a v13.0.0 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) mediante una petición RTSP SETUP (1) especificando la URI / o (2) no poniendo los caracteres / en la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0.1","matchCriteriaId":"78A24161-758C-4F18-B3D7-9D7E652612EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*","matchCriteriaId":"A30A2490-21FC-4C0D-80A3-B89E6F58E93A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0890EDD4-63FF-43EC-9EC4-852B34E00F51"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0.0","matchCriteriaId":"564CD3CE-1094-4F7E-8598-1B4B35AF0AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*","matchCriteriaId":"74F01F2C-036C-4B6E-B66D-F0870801D397"}]}]}],"references":[{"url":"http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf","source":"cve@mitre.org"},{"url":"http://osvdb.org/55982","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/real-helix-dna","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505083/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35732","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1947","source":"cve@mitre.org"},{"url":"http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/real-helix-dna","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505083/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2535","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Mozilla Firefox anteriores a v2.0.0.19 y v3.x anteriores a v3.0.5, SeaMonkey y Thunderbird permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la aplicación) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.18","matchCriteriaId":"FCE69A26-4F19-4D04-B125-86C49AA80E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:alpha:*:*:*:*:*","matchCriteriaId":"D62F740C-706B-4290-AD92-3ECBC3D30768"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:beta:*:*:*:*:*","matchCriteriaId":"30B95DB4-EC98-4046-A894-26CA0807456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:dev:*:*:*:*:*","matchCriteriaId":"55344F76-1C42-4DD8-A28B-1C33626C6FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*","matchCriteriaId":"E34A3468-C3BF-417B-85FB-18C28F0765B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.18","matchCriteriaId":"350EE2EE-75EC-40A5-9159-282089D98383"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C256B73C-9ABC-43D4-8C57-09161BC9F923"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"055D1044-9FC5-45AA-8407-649E96C5AFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C1C87A5-C14D-4A23-B865-3BB1FCDC8470"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C4DB0BB-BFD7-4E7A-B3EF-9C5422602216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F0D56153-E20A-46D8-859E-A51E5C03D674"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2C51A6F4-F88F-4BF2-BF71-5DC48559C085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FFC390CB-774C-47BE-95C3-059943A9E645"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:*:*:*:*:*:*","matchCriteriaId":"379F6A73-B45F-4094-8167-4E929FFB1749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B71DE7AC-553B-4524-8B33-5605518449EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"72B02389-0DCD-45BC-A09F-CB6B75940616"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE4644-2D23-43EA-ABDA-7BE60EFD1EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4FB87608-0DF8-4729-95C5-CFA386AB3AC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"1A406214-29E5-4E13-B2E1-1CF72F1E60BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6C169DA-26BC-42EE-817B-2F0685069495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C99BAF7-B48E-4402-B2BF-EB07235E402E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C3F0C73F-291F-4A92-87B8-2269B5C1516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A0ADE8D7-B3C3-4490-9CD5-0263BBA75D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C86FD617-E4FE-4F85-AAA4-4F968A9DEC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"938B1260-74A7-4CFF-8086-415DCC284430"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E28672BA-E3C2-40C3-80E1-95B7CDD089E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9308147C-0A23-48BC-BFA9-A49B9D73014E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6654EC3-BED6-4D6D-9B7F-DF4CC8E464BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5CAD8DCC-DBB4-40EE-927C-7B0969700077"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"77F9CE47-E3AA-49D7-AEC9-447951AC31E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"581615BB-C781-42CA-836E-0E0EAB8C4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"257F43FA-D22C-4BF0-A02E-261A54142BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0C8D63F5-78D5-4F7B-B15A-2C15FC405E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"84BC6D68-4ED4-43CF-A2EB-47BD15D11AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D291234-D64A-4E8A-A7CD-08BB980E1CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CFC60781-766B-4B9C-B68D-45D51C5E5D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"745C2CBA-4824-441B-A6BC-E80959C2E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8C6A7D00-A203-4891-96CE-20C91FCBF048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0A8CB480-0595-4BC1-998E-3638E85DB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC7EAB8D-CA40-4C29-99DF-24FF1753BCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5C9218A9-DA27-436A-AC93-F465FC14ECF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E66503D7-72CB-42A5-8C85-D9579EF2C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CD7D204-3EBA-4D9E-B95A-86524B4C03D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1FBBF526-7A28-436B-9B01-EADE913602B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B373B409-0939-4707-99F1-95B121BFF7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"75A0BCE3-38E7-4318-9A7E-3D895171129A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E80CA1DE-B920-4E28-BEFC-574148D19A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2303104C-4A91-4704-A9CB-8C83A859090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4DCDAA51-4AA3-4EC4-B441-71FB3C3304F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"04CA7AD2-79BA-4A73-ADAB-E3BCA3FD7F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"D54ACD07-FAB7-4513-A707-18FAF7D565C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7260CE1F-501D-44FF-A3FA-2137CA01733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"6DF479C3-95A0-414F-B47B-C94BE95713D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF48A9-C161-4603-82F0-5D2DE1EBA498"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"821E46E8-B084-4762-86F0-002CA288B522"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"A084C258-7D78-4F6D-8E24-00BE9608EBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"893FD2C8-C8EF-4ED3-9B7C-82D8DA9A1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.12:*:*:*:*:*:*:*","matchCriteriaId":"F9FEA455-E605-4CE3-A951-760D59091C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.13:*:*:*:*:*:*:*","matchCriteriaId":"F1758117-4865-42A4-8110-2250924E21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_.14:*:*:*:*:*:*:*","matchCriteriaId":"81AF4BFB-EC89-454B-89DF-FC8F6102E28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"8013986B-DCAF-44A1-BA63-5BBA6762720F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460713","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=460713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2536","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Microsoft Internet Explorer v5 hasta v8 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la aplicación) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"CB024757-60F3-44F9-BCFF-04B2F109D7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52870","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2537","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"KDE Konqueror permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de de un valor entero largo en la propiedad lenght en un objeto Select, relativo a CVE-2009-1692.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider a user-assisted crash of a client application such as Konqueror to be a security issue.","lastModified":"2009-08-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*","matchCriteriaId":"0A65B798-C4F1-44BF-8B64-FDB7F234580B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36062","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52871","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2538","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet Tablet allow remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Nokia N95 ejecutando Symbian OS 9.2, N82, y N810 Internet Tablet permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:nokia:n95:*:*:*:*:*:*:*:*","matchCriteriaId":"49212645-371B-4B59-9456-12226083E83F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:nokia:symbian:9.2:*:*:*:*:*:*:*","matchCriteriaId":"A190FB03-6B59-4DDF-AE67-9596628472DD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:n82:*:*:*:*:*:*:*:*","matchCriteriaId":"B8B1F8A1-7B7E-406D-B943-B51D2B922DF1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:n810_internet_tablet:*:*:*:*:*:*:*:*","matchCriteriaId":"099F5AC1-A406-45E9-9C87-6CE16E067985"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52872","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2539","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Aigo P8860 allows remote attackers to cause a denial of service (memory consumption and browser hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Aigo P8860 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado del navegador) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aigo:aigo_md_p8860:*:*:*:*:*:*:*:*","matchCriteriaId":"1A8F9027-BDE3-44BA-A94F-69D888A4D4A1"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52873","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2540","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Opera, posiblemente v9.64 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de un valor entero largo en la propiedad length de un objeto Select, está relacionada con CVE-2009-1692.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.64","matchCriteriaId":"25CB886F-4E01-4E01-ACF7-7CB90FA2A6D9"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52874","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2541","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.267","lastModified":"2025-04-23T16:15:19.537","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"El navegador web en Sony PLAYSTATION 3 (PS3) permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la consola) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sony:playstation_3:*:*:*:*:*:*:*:*","matchCriteriaId":"DEB3895A-8BCE-4265-9FB7-5FD077B983B3"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52875","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2542","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Netscape v6 y v8 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6:*:*:*:*:*:*:*","matchCriteriaId":"A55DBDE7-91BA-43CD-9E1F-52737CA93EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:8:*:*:*:*:*:*:*","matchCriteriaId":"220BE0F1-EFFC-4BE0-8B5D-42FB6865EE33"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9160","source":"cve@mitre.org"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52876","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.g-sec.lu/one-bug-to-rule-them-all.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504969/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504988/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504989/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2543","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el motor de IBM Proventia v4.9.0.0.44 20081231, como el usuado por IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), y posiblemente otros productos, permite a atacantes remotos evitar la detección de código malicioso mediante un fichero (1) ZIP o (2) CAB modificado, siendo un asunto relacionado con CVE-2009-1240."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:proventia_desktop_endpoint_security:*:*:*:*:*:*:*:*","matchCriteriaId":"B77F1551-5C37-4D5B-AC86-C2965083B93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*","matchCriteriaId":"C520BF35-8406-44E3-8FC6-D8BD7242D13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:proventia_network_mail_security_system_vitual_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"0C506960-F0F2-4724-96B5-75D3DD6FF54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:proventia_network_multi-function_security:*:*:*:*:*:*:*:*","matchCriteriaId":"E520803B-AC1A-40CA-8AE9-E41A8B9D6492"}]}]}],"references":[{"url":"http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504992/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504992/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2544","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T18:30:01.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Marcelo Costa FileServer v1.0 para Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) permite a usuarios autenticados remotamente listar directorios de su elección y leer ficheros de su elección al utilizar .. (punto punto) en la ruta del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:messenger_plus\\!_live:*:*:*:*:*:*:*:*","matchCriteriaId":"31C91606-7E28-42FE-8358-1B8FEB5D5594"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:windows_live_messenger:*:*:*:*:*:*:*:*","matchCriteriaId":"72D7041E-41A7-4A1E-A1E8-E1FC2AB551CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcelo_costa:fileserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B371DF69-CD07-450C-A837-BA2D3A7CE1F1"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9093","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2545","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:06.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Advanced Electron Forum (AEF) v1.x, cuando está deshabilitado \"magic_quotes_gpc\", permite a atacantes remotos ejecutar comandos SQL de su elección mediante el fichero subido como adjunto. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"68188511-BA5A-454A-8959-A754AA7147BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"39DBB3C6-A59B-46E8-AE2E-B4F90B4327E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B729A246-6642-44BD-8842-B676E6F9D0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"938E89B8-C921-44B5-B97F-D756CC5607C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D35C1FAF-9F98-42A0-B457-E5949AEA8864"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7A193235-7F51-4528-9289-6B9FE44A8CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DB1869DC-9C81-4AD8-94AA-CD0EA8B0C8C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6ED51633-E055-4D31-9197-1FF44FBB88B0"}]}]}],"references":[{"url":"http://osvdb.org/55925","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51775","source":"cve@mitre.org"},{"url":"http://osvdb.org/55925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2546","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:11.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Advanced Electron Forum (AEF) v1.x permite a atacantes remotos determinar la existencia de ficheros de su elección mediante el parámetro \"avatargalfile\" al cambiar un avatar, revelando la existencia del fichero en un mensaje de error. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"68188511-BA5A-454A-8959-A754AA7147BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"39DBB3C6-A59B-46E8-AE2E-B4F90B4327E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B729A246-6642-44BD-8842-B676E6F9D0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"938E89B8-C921-44B5-B97F-D756CC5607C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D35C1FAF-9F98-42A0-B457-E5949AEA8864"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7A193235-7F51-4528-9289-6B9FE44A8CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DB1869DC-9C81-4AD8-94AA-CD0EA8B0C8C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:anelectron:advanced_electron_forum:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6ED51633-E055-4D31-9197-1FF44FBB88B0"}]}]}],"references":[{"url":"http://osvdb.org/55926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51776","source":"cve@mitre.org"},{"url":"http://osvdb.org/55926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2547","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:11.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) via a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, which triggers a buffer over-read."},{"lang":"es","value":"Desbordamiento inferior de entero en Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) mediante un paquete de VoIP sobre red (VON) dirigido al puerto 2305 con valor \"packet_size\" negativo, provocando un desbordamiento de lectura de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16_beta","matchCriteriaId":"2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*","matchCriteriaId":"D3941008-81E2-45FA-8588-8D88CD295CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/armadioz-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51820","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/armadioz-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2548","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:13.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) nickname and (2) datafile fields in a join request, which is not properly handled when logging an error message."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y probablemente ejecutar código de su elección mediante especificaciones de cadenas de formato en los campos (1) \"nickname\" y (2) \"datafile\" en una petición de conexión, no manejando correctamente el registro del mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16_beta","matchCriteriaId":"2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*","matchCriteriaId":"D3941008-81E2-45FA-8588-8D88CD295CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/armazzofs-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://aluigi.altervista.org/adv/armazzofs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2549","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:13.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference."},{"lang":"es","value":"Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio mediante un paquete de conexión con un campo final cuyo valor sea (1) 0, provocando una caída del servidor relacionada con la asignación de memoria, o (2) 1, provocando un consumo de CPU/memoria y una referencia a puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16_beta","matchCriteriaId":"2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*","matchCriteriaId":"D3941008-81E2-45FA-8588-8D88CD295CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/armazzo-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://aluigi.altervista.org/adv/armazzo-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2550","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:13.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .hpl playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Hamster Audio Player v0.3a permite a atacantes remotos ejecutar código de su elección mediante una cadena de caracteres larga en un fichero de lista de reproducción con extensión (1) .m3u o (2) .hpl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ondanera:hamster_audio_player:0.3a:*:*:*:*:*:*:*","matchCriteriaId":"19409CD3-646B-4585-874F-B2020DB7FF72"}]}]}],"references":[{"url":"http://osvdb.org/55871","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35825","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9157","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9172","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51732","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/55871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2551","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:13.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ScriptsEz Easy Image Downloader, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"id\" en una acción \"detail\" a (1) main.php y posiblemente (2) demo_page.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:easy_image_downloader:-:*:*:*:*:*:*:*","matchCriteriaId":"E79A30DA-1F67-49F4-82C5-606853200D66"}]}]}],"references":[{"url":"http://osvdb.org/55862","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/eid-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35838","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51722","source":"cve@mitre.org"},{"url":"http://osvdb.org/55862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/eid-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2552","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:13.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en comments.php en Super Simple Blog Script v2.5.4, permite a atacantes remotos sobrescribir, añadir y ejecutar archivos locales de su elección a través del parámetro \"entry\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:supersimple:super_simple_blog_script:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1758070-784C-4B41-931E-B72CDB14B2F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/35859","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9179","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51805","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2553","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:14.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en comments.php en Super Simple Blog Script v2.5.4, cuando magic_quotes_gpc están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"entry\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:supersimple:super_simple_blog_script:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1758070-784C-4B41-931E-B72CDB14B2F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/35859","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9180","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2554","sourceIdentifier":"cve@mitre.org","published":"2009-07-20T20:00:14.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlier versions, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the search parameter in a results action to index.php, which invokes the search method from the searchJobPostings function in jobline.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el método de búsqueda en  jobline.class.php en el componente Jobline (com_jobline) v1.1.2.2, v1.3.1, y posiblemente versiones previas, para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro de búsqueda en una acción \"results\" al index.php, que invoca al método de búsqueda desde la función searchJobPostings en jobline.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:olle_johansson:jobline:1.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F3892F7F-53FB-4E54-845F-3E9857FD614A"},{"vulnerable":true,"criteria":"cpe:2.3:a:olle_johansson:jobline:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC19FA0B-9899-40B4-92B7-A2763E132ED2"}]}]}],"references":[{"url":"http://secunia.com/advisories/35877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9187","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2555","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T16:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en src/jsregexp.cc en Google V8 anterior a v1.1.10.14, como el utilizado en Google Chrome anterior a v2.0.172.37, permite a atacantes remotos ejecutar código de su elección en el Chrome sandbox a través de una expresión regular JavaScript manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:v8:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"75FB9ABA-F9DB-4F52-A62E-7400F97537A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.172.33","matchCriteriaId":"23BD1820-86D9-4ED4-A502-7F6FE82B80E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=14719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://codereview.chromium.org/141042","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/141042/diff/6/1004","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55939","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35722","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1924","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51801","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=14719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://codereview.chromium.org/141042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/141042/diff/6/1004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2556","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T16:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation."},{"lang":"es","value":"Google Chrome anterior a v2.0.172.37, permite a atacantes remotos el aprovechar el acceso \"renderer\" para provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código de su elección a través de vectores no especificados que provocan una excesiva reserva de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.172.33","matchCriteriaId":"23BD1820-86D9-4ED4-A502-7F6FE82B80E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35723","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1924","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51802","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/07/stable-beta-update-bug-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2557","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fichier parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en system/download.php en Admin News Tools v2.5, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"fichier\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adminnewstools:admin_news_tools:2.5:*:*:*:*:*:*:*","matchCriteriaId":"504BEF86-453F-4739-A45A-2A54956CF965"}]}]}],"references":[{"url":"http://osvdb.org/55856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9153","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504949/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/55856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504949/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2558","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request."},{"lang":"es","value":"system/message.php en Admin News Tools v2.5, no restringe adecuadamente el acceso , lo que permite a atacantes remotos publicar mensajes nuevos a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adminnewstools:admin_news_tools:2.5:*:*:*:*:*:*:*","matchCriteriaId":"504BEF86-453F-4739-A45A-2A54956CF965"}]}]}],"references":[{"url":"http://secunia.com/advisories/35842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9161","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51780","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2559","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an array index error.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de bufer en IPMI dissector en Wireshark 1.2.0 permite a atacantes remotos causar una denegación de servicio (caída) a tra´ves de vectores no especificados referidos a un error de una cadena indexada. NOTA: Algunos de estos detalles se obtienen a partir de información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-08-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"}]}]}],"references":[{"url":"http://secunia.com/advisories/35884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35748","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2560","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Wireshark versión 1.2.0, permiten a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo que registra un seguimiento de paquetes malformados y es procesado por el (1) Bluetooth L2CAP, (2) RADIUS o (3) disector de MIOP. NOTA: fue señalado más adelante que el problema de RADIUS también afecta a versiones 0.10.13 hasta 1.0.9."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html\n\nVectors (1) Bluetooth L2CAP and (3) MIOP did not affect the versions of the Wireshark package, as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n","lastModified":"2010-04-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"}]}]}],"references":[{"url":"http://secunia.com/advisories/35884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:194","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/22/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35748","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36846","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-08.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54019","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/22/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-08.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2561","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the sFlow dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el analizador sFlow en Wireshark v1.2.0 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y CPU) mediante vectores no especificados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-08-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"}]}]}],"references":[{"url":"http://secunia.com/advisories/35884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35748","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5795","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2562","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el analizador AFS en Wireshark v0.9.2 a v1.2.0 permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html","lastModified":"2010-04-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"DD509BD0-3E90-47E5-97DA-F8814002EDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"}]}]}],"references":[{"url":"http://secunia.com/advisories/35884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37477","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:194","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/15","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35748","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-05.html","source":"cve@mitre.org"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3564","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11643","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5625","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-05.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2563","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el analizador Infiniband en Wireshark v1.0.6 a v1.2.0, cuando es ejecutado en plataformas no especificadas, permite a atacantes remotos provocar una denegación de servicio (caída) mediante vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html","lastModified":"2010-04-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"}]}]}],"references":[{"url":"http://secunia.com/advisories/35884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:194","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:031","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/15","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35748","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-05.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11210","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6321","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-05.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2564","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\\bin\\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which allows local users to gain SYSTEM privileges by replacing getPlus_HelperSvc.exe with a Trojan horse program, as demonstrated by use of getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the program is deleted and the associated service is not automatically launched after a successful installation and reboot."},{"lang":"es","value":"GetPlus Download Manager de NOS Microsystems, tal y como es usado en Reader de Adobe versión 1.6.2.36 y posiblemente otras versiones, Corel getPlus Download Manager anterior a versión 1.5.0.48, y posiblemente otros productos, instala el archivo NOS\\bin\\getPlus_HelperSvc.exe con permisos no confiables (Everyone:Full Control), que permite a los usuarios locales alcanzar privilegios SYSTEM mediante el reemplazo de getPlus_HelperSvc.exe por un programa de tipo caballo de troya, como es demostrado por el uso de getPlus Download Manager en Reader de Adobe. NOTA: en Reader de Adobe, el alcance de este problema es limitado debido a que el programa se elimina y el servicio asociado no se inicia automáticamente después de una instalación y reinicio con éxito."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nos_microsystems:getplus_download_manager:1.6.2.36:*:*:*:*:*:*:*","matchCriteriaId":"3F54F763-82AF-4F53-B557-EBD6E1D19280"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:corel:getplus_download_manager:1.5.0.48:*:*:*:*:*:*:*","matchCriteriaId":"53E0514D-B66A-405C-AA6D-610644FC9B11"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/07/local_privilege_escalation_in.html","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_adobe_local.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9199","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505095/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54383","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5719","source":"cve@mitre.org"},{"url":"http://blogs.adobe.com/psirt/2009/07/local_privilege_escalation_in.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_adobe_local.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505095/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2565","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T22:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t-okada:shiromuku\\(fs6\\)diary:2.40:*:*:*:*:*:*:*","matchCriteriaId":"30C93CE9-EFEC-4860-BDC0-1D70EE1F5273"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN31110006/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000048.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.t-okada.com/cgi-bin/s_news/s_news.cgi?action=show_detail&txtnumber=log&mynum=345","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51696","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN31110006/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.t-okada.com/cgi-bin/s_news/s_news.cgi?action=show_detail&txtnumber=log&mynum=345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2566","sourceIdentifier":"cve@mitre.org","published":"2009-07-21T22:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en TFM MMPlayer 2.0 y posiblemente 2.0.0.30, permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en un fichero de lista de reproducción (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tfm:mmplayer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9FC45284-301F-4C37-96B2-CB6A9064F8E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/35605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51442","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2567","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en Almond Classifieds (com_aclassf) v5.6.2 de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:almond_classifieds:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4F1612D7-5C64-4F17-BB81-739D3FA962B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34843","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2568","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en Sorinara Streaming Audio Player (SAP) v0.9, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un fichero de lista de reproducción(.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sorinara:streaming_audio_player:0.9:*:*:*:*:*:*:*","matchCriteriaId":"92FCE893-D63E-45D4-BDAA-28B1E3AA1D75"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8617","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34842","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50339","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/8620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2569","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en Verlihub control Panel (VHCP) v1.7e permite a atacantes remotos inyectar código web y HTML a su elección a través de (1) el parámetro nombre en la acción de ingreso de index.php or (2) la URI en peticiones de noticias de index.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verlihub-project:verlihub_control_panel:1.7e:*:*:*:*:*:*:*","matchCriteriaId":"E2374800-ADA3-4A44-B3F0-001C13BBD025"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34941","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34856","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1264","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/34941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2570","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Symantec.FaxViewerControl.1 ActiveX control en WinFax\\DCCFAXVW.DLL en Symantec WinFax Pro v10.03, permite a atacantes remotos ejecutar código de su elección mediante una argumento largo en el método AppendFax."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:winfax_pro:10.03:*:*:*:*:*:*:*","matchCriteriaId":"D5ED37CE-3895-4B61-B2AD-FE0662C668EF"}]}]}],"references":[{"url":"http://osvdb.org/54137","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34925","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503074/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503086/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503163/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34766","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022147","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008","source":"cve@mitre.org"},{"url":"http://osvdb.org/54137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_symantec_win_fuck_pro.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/503074/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503086/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2571","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI, (2) the q parameter, (3) the nick parameter, or (4) the nick parameter in a bantest action."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en VerliAdmin v0.3.7 y v0.3.8 permite a atacantes remotos inyectar código web o HTML a su elección a través de (1) la URI, (2) el parámetro q, (3) el parámetro nombre, o (4) el parámetro nombre en un acción \"bantest\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verliadmin:verliadmin:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"B98F7430-A7EF-4532-872B-0ABD7908F364"},{"vulnerable":true,"criteria":"cpe:2.3:a:verliadmin:verliadmin:0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2156AE9E-F770-4BBC-88E7-41710DD689B3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0905-exploits/verliadmin-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34845","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50347","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0905-exploits/verliadmin-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/34845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2572","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1.14, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that cast votes."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en módulo Fivestar v5.x-1.x anteriores v5.x-1.14 y v6.x-1.x anteriores v6.x-1.14, un módulo de Drupal, permite a atacantes remotos secuestrar la autenticación de usuarios de su elección para peticiones de votación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"B52E33DA-82E3-493A-A892-873D713A8AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"9BEE50BE-08CF-4B94-A8A1-853517234536"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"464002BD-E9F1-48BF-BCEB-9D10BB16FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta1:*:*:*:*:*:*","matchCriteriaId":"72A814FC-8C1E-4CCC-AC45-71F0D7F162ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta2:*:*:*:*:*:*","matchCriteriaId":"45CFE657-DBF6-43F5-9BDE-E073852F2BFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta3:*:*:*:*:*:*","matchCriteriaId":"B92C61C0-BEA2-4945-AF25-0AF1F12D6067"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.11:beta4:*:*:*:*:*:*","matchCriteriaId":"C113D74B-C0E2-4463-8A60-EA31043F1489"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"81A1B620-18FC-4808-B275-2E48104656E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:5.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"AB27868A-1FC0-4E5B-9124-893D339292B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.11:beta3:*:*:*:*:*:*","matchCriteriaId":"CBCBC049-37DF-42BF-8788-CFC08AED07C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.11:beta4:*:*:*:*:*:*","matchCriteriaId":"758367A3-CDAE-47FB-926E-E3C1422184D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.11:beta5:*:*:*:*:*:*","matchCriteriaId":"A804D3B5-73CA-4617-9981-332FB4DB942D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"CCF8342D-D586-4E82-8C55-E226321F6040"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.12:beta1:*:*:*:*:*:*","matchCriteriaId":"5B856CB8-40EF-4A4D-AA30-3A3996C1E273"},{"vulnerable":true,"criteria":"cpe:2.3:a:lullabot:fivestar_module_for_drupal:6.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"F1C3B585-0AC1-4777-843F-DF208BDB5084"}]}]}],"references":[{"url":"http://drupal.org/node/449026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/449028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/449042","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54154","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1215","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50245","source":"cve@mitre.org"},{"url":"http://drupal.org/node/449026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/449028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/449042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/54154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2573","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en MiniTwitter v0.2 beta, cuando magic_quotes_gpc es desactivado, permite a usuarios autenticados remotamente ejecutar código SQL a su elección a través de (1) parámetros de usuario a(a) index.php y (b)rss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bioscripts:minitwitter:0.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"73D3E973-132B-4CA8-BD45-5101729AA12B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8586","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503155/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34795","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50282","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503155/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2574","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action."},{"lang":"es","value":"index.php en MiniTwitter v0.2 beta permite a usuarios autentificarse remotamente para modificar determinadas opciones de cuentas arbitrarias a través de una acción opt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bioscripts:minitwitter:0.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"73D3E973-132B-4CA8-BD45-5101729AA12B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8587","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503157/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34795","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50283","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503157/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2575","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Research In Motion (RIM) BlackBerry 8800 allows remote attackers to cause a denial of service (memory consumption and browser crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692."},{"lang":"es","value":"Research In Motion (RIM) BlackBerry v8800 permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída del buscador) a través un valor entero grande en la propiedad \"length\" de un objeto \"Select\", siendo un asunto relacionado con CVE-2009-1692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rim:blackberry_8800:*:*:*:*:*:*:*:*","matchCriteriaId":"33AAAF6B-B7AB-4BBB-B23C-95F54555706C"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069772.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2009-July/069772.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2576","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.  NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected."},{"lang":"es","value":"Microsoft Internet Explorer v6.0.2900.2180 y anteriores permite a atacantes remotos causar una denegación de servicio (consumo de memoria y CPU) a través de un argumento de cadena de caracteres Unicode larga para el método de escritura, siendo un asunto relacionado con CVE-2009-2479."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:*:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"0707D29A-7F34-49F5-B301-66E6AB0910BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:*:*:mobile:*:*:*:*:*","matchCriteriaId":"5307C089-099E-4E5B-B19E-2880C9FAA4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:2.0:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"88771C30-6BF2-4D37-8EFA-0EECF55EC080"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:2.0_beta:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"DF0BFC00-6549-431F-BE37-E4509A13162F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.0:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"D94D0C3A-FAE3-4EE3-9B58-D2ADB98661F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.0:*:mac_os:*:*:*:*:*","matchCriteriaId":"2277E59E-D981-4D9D-8FC0-F124FB8B9C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"731F2F05-A1BB-4BE8-B761-EE04ED6ABBE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.01:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"0FAE41C7-AACF-40F0-A818-AD77F5FC2E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"C6CB69E1-189F-425C-9023-DE2741669507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"ACAAD50F-B9F0-4CD8-B681-A8F889E95946"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:mac_os:*:*:*:*:*","matchCriteriaId":"B1C0170E-9574-4C90-94F3-F2C2851E2917"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:a:*:*:*:*:*:*","matchCriteriaId":"EB817B2B-6F65-4989-9177-153518F32894"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"D4A15873-B3D2-4017-99CF-E3625FD227F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"5680FE7F-95EE-46B2-B930-4A3DC27FD1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"ACC3A8B3-4E8C-46BD-965C-4EF655B9018D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"F7739338-DAE1-403F-B22C-2CFAC884E09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0a:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"D33EA2D3-B139-42E3-A0EE-F5CEE1A5CDE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"D45C47A8-8B5F-4A49-8B36-FCBA09029375"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"0CFF1B46-BEDD-4D96-90EA-EE4376AFCAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"84730D4D-7887-4A64-8C76-F50C85309FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.5:*:mac_os:*:*:*:*:*","matchCriteriaId":"822AC264-EF4E-4CEC-A210-74166883A8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.5:*:macintosh:*:*:*:*:*","matchCriteriaId":"55EAB232-C39A-4737-85F3-3D727C727F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.x:*:*:*:*:*:*:*","matchCriteriaId":"45091F51-BA28-4FEB-9F84-58AC2E1DB48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"7AAA310C-7DED-40B3-B5EF-80C7407BB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"77C7AB44-B436-48D7-B9CE-ED4B40FE8E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:macos:*:*:*:*:*","matchCriteriaId":"D3F350E9-3677-43B3-984F-DA39397D6885"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:mobile:*:*:*:*:*","matchCriteriaId":"A71EC272-AA18-4D4D-B8E5-B9FC6D8E7DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"D2CFDA81-A703-4330-88B0-F3F18B3BB7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"9CD5EAB0-B400-41C6-B96E-B7594DB0226F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"C26125C2-2476-43E8-8878-8C1A5A8B244F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*","matchCriteriaId":"FED6949F-54D0-4D36-B6A8-59EBFA2611E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"151FE30E-9320-495C-84AD-60893FAED223"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"5805FB74-2AD6-4919-BAAE-D995CA2650A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0_ta3:*:*:*:*:*:*:*","matchCriteriaId":"A086C4BD-F015-45F9-AF24-763F0FDF4268"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.1:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"7CCA85F0-B084-4788-81FD-7E22B6905468"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"4CF91C2F-EE6D-4C9E-8F39-1F632399EC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.01:*:windows_server_2003:*:*:*:*:*","matchCriteriaId":"C81BBD0A-0A4D-4238-9526-3738DAE69E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.1.1:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"1B4B8AA3-5DA4-4E90-8939-1E1B834BD321"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.1.7:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"B1096B7C-07C8-4EA0-BD2F-11844D424EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.2:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"E078D001-060D-46A6-B339-4C6D56E7E675"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.2.3:*:mac\\+os:*:*:*:*:*","matchCriteriaId":"BBEC9FD1-62D9-4F2C-928B-B1292FD784A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.2.3:*:macintosh:*:*:*:*:*","matchCriteriaId":"EB51F2D6-3CCA-4695-8A92-39999749B3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*","matchCriteriaId":"226A1B77-A80E-4ADE-8318-749CD1AD7CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.x:*:*:*:*:*:*:*","matchCriteriaId":"B0DCFCBD-8EDF-47B5-823F-5E05CD22AF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:*:microsoft_windows_server_2003_sp1:*:*:*:*:*","matchCriteriaId":"12D23F59-5C49-4DE0-85E8-15287140660D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:*:windows_2000:*:*:*:*:*","matchCriteriaId":"CD115D64-87D8-4868-B247-16B83591B7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:*:windows_server_2003:*:*:*:*:*","matchCriteriaId":"11A09F26-5FE3-4879-9FCB-769F8FB3D067"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:*:windows_xp_professional_64bit:*:*:*:*:*","matchCriteriaId":"8EF317BB-E63A-4A60-A2E1-6797A402D88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:sp1:windows_2000:*:*:*:*:*","matchCriteriaId":"0FBE3FC4-569D-4855-A8C2-AA5B19347C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:sp1:windows_98:*:*:*:*:*","matchCriteriaId":"B1D7486F-1B6C-4705-B73C-F763F36F5150"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:sp1:windows_98_se:*:*:*:*:*","matchCriteriaId":"6DBFDCF4-ACC7-4196-BA4D-2A35FAA5E1F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:sp1:windows_millennium:*:*:*:*:*","matchCriteriaId":"5E49636B-A425-4595-9663-A22A9F7C7D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:sp1:windows_xpsp1:*:*:*:*:*","matchCriteriaId":"FCFF1342-8AD8-4003-81AA-09DB4A12EEBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2900.2180","matchCriteriaId":"DD2BF527-F6EB-4E46-9B33-B97795CCF74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"59EB6841-0427-479B-8771-06DF62EE3C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B9D82B89-456D-41CB-A894-B6A22FB4415D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*","matchCriteriaId":"2E21CE6E-2B33-4225-B1DC-C19F1D578040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1B26CE22-E730-4247-853E-5E640DB3ECB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*","matchCriteriaId":"0A652453-AB5F-405C-ABDE-CE1B54FEACED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*","matchCriteriaId":"141080AB-48DE-4885-BAB6-6F0937ABD49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*","matchCriteriaId":"EB758D76-B7F6-4E87-B88D-620443655CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*","matchCriteriaId":"28655AC5-1512-4F45-9963-CA26F73981CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*","matchCriteriaId":"C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*","matchCriteriaId":"BEC05584-F553-4D29-9C46-C9EE5F0CB166"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*","matchCriteriaId":"BA3F79B8-512A-4B88-868C-7C4ADFD223C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*","matchCriteriaId":"078C3A86-C9F8-4A19-9DDC-1065B54E640F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*","matchCriteriaId":"9030923C-356E-4FAB-8E64-03D462B4DB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*","matchCriteriaId":"DC0FFABC-8BED-4838-85FE-406DC9CF9B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*","matchCriteriaId":"C9DB4A00-4F70-4189-81BD-9318C52DF2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*","matchCriteriaId":"FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*","matchCriteriaId":"61125B09-23AA-4D5A-8332-6B5CCD80C7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*","matchCriteriaId":"3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*","matchCriteriaId":"4E215C82-E4AD-4B87-92D8-DD4D486EB6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*","matchCriteriaId":"D91F4C80-3B1B-45BD-966F-C9DBF98B875D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*","matchCriteriaId":"F65E0DC1-40F6-4252-945A-A972343D1E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*","matchCriteriaId":"EDC57519-AD96-4ECF-A5B2-4E45F7D55298"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*","matchCriteriaId":"37DE3DE6-A355-41F2-BF5E-E7526449E753"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*","matchCriteriaId":"5DB24B4F-44FF-4F0F-90FA-240A34B9599F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*","matchCriteriaId":"919A6551-DB18-49BD-AB92-4C453B3B728F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*","matchCriteriaId":"C512DAB3-2720-42D2-B27E-28F30FE0FE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*","matchCriteriaId":"CB90458F-1F2B-4F4C-88C6-4B670787D126"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*","matchCriteriaId":"6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*","matchCriteriaId":"4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CFF390-FF33-45CA-BC96-C6766491C616"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*","matchCriteriaId":"F4336F0E-75FE-4592-9D98-4F689804956E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*","matchCriteriaId":"8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*","matchCriteriaId":"01BD2A05-3FCE-4C5D-8228-968630F27E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:*","matchCriteriaId":"4430779C-C678-4950-AE9E-82CDFC1A08D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*","matchCriteriaId":"BF0EC334-AEAD-43CA-A609-C027060F4F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*","matchCriteriaId":"BAF320BE-F022-4E0E-9815-B8AEED87B384"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*","matchCriteriaId":"75532B2D-6814-4D20-8AEB-E7DFD66B6423"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*","matchCriteriaId":"83802E30-8E7D-4CAB-B8FC-10056CF833D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*","matchCriteriaId":"93F47C82-E767-47A8-88DE-417B004ED7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3338/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505120/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505122/100/0/threaded","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3338/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505120/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505122/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2577","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and application hang) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479."},{"lang":"es","value":"Opera v9.52 y anteriores permite a atacantes remotos causar una denegación de servicio (consumo de memoria y CPU, y colgado de aplicación) a través de un argumento de cadena de caracteres Unicode para el método de escritura, siendo un asunto relacionado con CVE-2009-2577."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.52","matchCriteriaId":"BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"}]}]}],"references":[{"url":"http://websecurity.com.ua/3338/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3338/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2578","sourceIdentifier":"cve@mitre.org","published":"2009-07-22T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479."},{"lang":"es","value":"Google Chrome v2.x a 2.0.172 permite a atacantes remotos causar una denegación de servicios (caída de aplicación)a través de un argumento de cadena de caracteres Unicode larga para el método de escritura, siendo un asunto relacionado con CVE-2009-2479."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"}]}]}],"references":[{"url":"http://websecurity.com.ua/3338/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3338/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505092/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2579","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sort_order parameter in a reward_points.userlog action to index.php, a different vulnerability than CVE-2005-4429.2."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en reward_points.post.php en el complemento Reward points de CS-Cart anterior v2.0.6, permite a usuarios autentificados remotamente ejecutar comandos SQL a su elección a través del parámetro sort_orde en la acción reward_points.userlog en index.php, vulnerabilidad diferente a CVE-2005-4429.2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"772E5AD9-A801-48B7-94AD-D2C0007775A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A21449C4-0D1F-4642-9193-19E178C0A2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0FFBA9BB-10CA-4EA4-A164-7B4AEB60BCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EA28C65-C87E-47B9-AEB2-A2007851A2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2560C3BF-C7DC-4645-B278-F86658660ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:*:*:*:*:*:*","matchCriteriaId":"F6184F41-3EF2-4DDA-A22E-24CF5EA7F008"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*","matchCriteriaId":"9979A5D8-91BE-4956-A408-DECEADE7D16E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"48662D7D-F946-45A4-AC02-0A25168154E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.5:beta:*:*:*:*:*:*","matchCriteriaId":"7CFECABA-FEB5-407D-9324-9722E0545B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"8F660773-EA54-4596-A22E-951D66C927B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.5sp2:*:*:*:*:*:*:*","matchCriteriaId":"5C4FF089-8732-44B9-8E6C-A78843650899"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:1.3.5sp3:*:*:*:*:*:*:*","matchCriteriaId":"F36E061E-3FB9-4036-97D7-652C6ADCC5C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"24A42E28-C26D-45EF-AAE4-DACFB5985F9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"A5FA82CA-6192-4339-89BB-6AE5603CBAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"31CEA327-84CE-4B4C-8D27-242EB22A6B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CC2AB928-9018-4264-A139-1C3826B4F86B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:2.0:rc:*:*:*:*:*:*","matchCriteriaId":"16980629-1BF0-4ADE-918B-824C6B1AFCB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cs-cart:cs-cart:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E17EEE6D-48BD-4BEA-9246-CA3FF6A032C4"}]}]}],"references":[{"url":"http://secunia.com/advisories/36112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bonsai-sec.com/research/vulnerabilities/cs-cart_SQL-injection-0100.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cs-cart.com/changelog206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505492/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35936","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bonsai-sec.com/research/vulnerabilities/cs-cart_SQL-injection-0100.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cs-cart.com/changelog206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505492/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2580","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:01.093","lastModified":"2023-11-07T02:04:10.407","vulnStatus":"Rejected","evaluatorImpact":"Per http://www.kb.cert.org/vuls/id/259425\r\n\r\n\"Adobe Flash is a widely deployed multimedia platform typically used to provide content in web sites. Adobe Flash Player, Reader, Acrobat, and other Adobe products include Flash support.\r\n\r\nAdobe Flash Player contains a code execution vulnerability. An attacker may be able to trigger this vulnerability by convincing a user to open a specially crafted Flash (SWF) file. The SWF file could be hosted or embedded in a web page or contained in a Portable Document Format (PDF) file. If an attacker can take control of a website or web server, trusted sites may exploit this vulnerability.\r\n\r\nThis vulnerability affects Adobe Flash versions 9.0.159.0 and 10.0.22.87 and earlier 9.x and 10.x versions. Adobe Reader 9, Acrobat 9, and other Adobe products (including Photoshop CS3, PhotoShop Lightroom, Freehand MX, Fireworks) provide Flash support independent of Flash Player. As of 2009-07-22, Adobe Reader 9.1.2 includes Flash 9.0.155.0, which is likely vulnerable to issues addressed by Flash 9.0.159.0 \"","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-1862.  Reason: This candidate is a duplicate of CVE-2009-1862.  Notes: All CVE users should reference CVE-2009-1862 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2581","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T19:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en EditeurScripts EsNews v1.2 permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:editeurscripts:esnews:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F5E2E7D1-3574-40E4-A85F-23E11DEBF3A3"}]}]}],"references":[{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2582","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en manager.exe en Akamai Download Manager(también conocido como DLM or dlmanager) anterior a v2.2.4.8, permite  a servidores web remotos ejecutar código de su elección mediante una respuesta HTTP mal formada durante la descarga de un \"Redswoosh\". Vulnerabilidad distinta de CVE-2007-1891 y CVE-2007-1892."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4.3","matchCriteriaId":"409FC315-CB14-4513-BC7A-7AC4E1366CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"54E2F00F-72B4-430C-B13F-8248C049C582"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3CEC0560-A48B-4904-9A0F-D43098C62A8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F32F96A-0597-4114-A444-1308A9D916E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"945F5C3E-83A6-46E3-B8F5-CF2C4F3A9427"},{"vulnerable":true,"criteria":"cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"12AF7DEE-67C5-45F8-8F74-8B4B2D1199FC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0351.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=813","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.akamai.com/html/support/security.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505187/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35778","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022592","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1985","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0351.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.akamai.com/html/support/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505187/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2583","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces."},{"lang":"es","value":"Múltiples vulnerabilidades de fijación de sesión en IBM Tivoli Identity Manager (ITIM) v5.0.0.6 permite a atacantes remotos secuestrar sesiones web mediante vectores no definidos relacionados con (1)la consola y (2) la interfaz de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_identity_manager:5.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"95053FE3-56DD-44A8-A2F7-CEC2CFF9D927"}]}]}],"references":[{"url":"http://secunia.com/advisories/35931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24023826","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35779","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022597","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1990","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24023826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2584","sourceIdentifier":"cve@mitre.org","published":"2009-07-23T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en la función drivers/misc/sgi-gru/gruprocfs.c en el controlador SGI GRU en el kernel de Linux v2.6.30.2 y anteriores en plataformas ia64 y x86 pueden permitir a usuarios locales escribir posiciones de memoria a su elección y obtener privilegios a través de argumentos de cuenta manipulados, provocando un desbordamiento de búfer basado en pila.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2009-07-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.30.2","matchCriteriaId":"92943208-3701-4CF7-B9D6-6F4CA8BC9624"}]}]}],"references":[{"url":"http://grsecurity.net/~spender/exploit_demo.c","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/7/20/348","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/7/20/362","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35753","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51887","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://grsecurity.net/~spender/exploit_demo.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/7/20/348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/7/20/362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2585","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an account editprofile action, a different vector than CVE-2009-1731."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en index.php en Mlffat v2.2 permite a atacantes remotos ejecutar comandos SQL a través de la cookie member en la acción de la cuenta editprofile, un vector diferente que CVE-2009-1731."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mlffat:mlffat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"EA8A6229-83D6-477D-8AE6-D7AFAC82AD97"}]}]}],"references":[{"url":"http://secunia.com/advisories/35728","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9091","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55826","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51623","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2586","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the title parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en articles.php en EDGEPHP EZArticles permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro title."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edgephp:ezarticles:-:*:*:*:*:*:*:*","matchCriteriaId":"6A03BA55-4DB5-492B-998B-4BDDF0E253C0"}]}]}],"references":[{"url":"http://osvdb.org/56002","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/ezarticles-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35924","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51858","source":"cve@mitre.org"},{"url":"http://osvdb.org/56002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/ezarticles-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2587","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to assets/js/ddcart.php, the (2) prefix parameter to includes/ajax/getstate.php, the search parameter to (3) index.php and (4) search.php, the (5) redirect parameter to login.php, and the (6) product parameter to productdetail.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en DragDropCart permite a atacantes remotos inyectar código web y HTML a su elección a través del parámetro sid de includes/ajax/getstate.php, el parámetro search en(3) index.php y(4) search.php, el parámetro (5) redirect en login.php, y el(6) parámetro product en productdetail.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dragdropcart:dragdropcart:-:*:*:*:*:*:*:*","matchCriteriaId":"D087A94D-8F57-44C7-9ADA-DAB8ABC4CAB6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/dragdopcart-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35925","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56065","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56066","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56067","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56069","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56070","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51877","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/dragdopcart-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2588","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en Hotscripts Type PHP Clone Script permite a atacantes remotos inyectar código web y HTML a su elección a través del parámetro msg de (1) feedback.php, (2) index.php, y (3) lostpassword.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:resalecode:hotscripts_type_php_clone_script:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD945D4-937E-4BB1-BA33-03D8ACE70F86"}]}]}],"references":[{"url":"http://osvdb.org/56167","source":"cve@mitre.org"},{"url":"http://osvdb.org/56168","source":"cve@mitre.org"},{"url":"http://osvdb.org/56169","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/hotscriptsclone-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51911","source":"cve@mitre.org"},{"url":"http://osvdb.org/56167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/hotscriptsclone-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2589","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS)en Hutscripts PHP Website Script permite a atacantes remotos inyectar código web y HTML a su elección a través del parámetro msg de (1) feedback.php, (2) index.php, y(3) lostpassword.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:resalecode:hutscripts_php_website_script:-:*:*:*:*:*:*:*","matchCriteriaId":"06BBEE65-51DF-48DB-B891-05F10C88449A"}]}]}],"references":[{"url":"http://osvdb.org/56170","source":"cve@mitre.org"},{"url":"http://osvdb.org/56171","source":"cve@mitre.org"},{"url":"http://osvdb.org/56172","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51912","source":"cve@mitre.org"},{"url":"http://osvdb.org/56170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2590","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en showcategory.php en Hutscripts PHP Website Script permite a atacantes remotos ejecutar comandos SQL a través del parámetro cid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:resalecode:hutscripts_php_website_script:-:*:*:*:*:*:*:*","matchCriteriaId":"06BBEE65-51DF-48DB-B891-05F10C88449A"}]}]}],"references":[{"url":"http://osvdb.org/56175","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51913","source":"cve@mitre.org"},{"url":"http://osvdb.org/56175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2591","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el módulo MyAnnonces de E-Xoopport v3.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro lid en la acción viowannonces de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:myannonces:-:*:*:*:*:*:*:*","matchCriteriaId":"9FFB5009-A9E3-47EF-8E97-9C7FC6B85DFD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e-xoopport:e-xoopport:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2FA4DA8F-7AEB-4F60-8250-3B1B434382A7"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9217","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35744","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51852","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2592","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mes_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en guestbook.php en PHPJunkYard GBook v1.6 permite a atacantes remotos ejecutar comandos SQL a través del parámetro mes_idnen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpjunkyard:gbook:1.6:*:*:*:*:*:*:*","matchCriteriaId":"00D09636-9061-41D8-9300-2C424FE3D94A"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9197","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51827","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2593","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en censura.php en Censura v1.16.04 permite a atacantes remotos ejecutar comandos SQL a través del parámetro itemid en la acción details."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:censura:censura:1.16.04:*:*:*:*:*:*:*","matchCriteriaId":"348144D9-560A-44C9-8EBB-6171408E714D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9129","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55790","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35637","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2594","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter in a details action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en censura.php en Censura v1.16.04  permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro itemd en la acción details."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:censura:censura:1.16.04:*:*:*:*:*:*:*","matchCriteriaId":"348144D9-560A-44C9-8EBB-6171408E714D"}]}]}],"references":[{"url":"http://secunia.com/advisories/35787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35637","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51664","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2595","sourceIdentifier":"cve@mitre.org","published":"2009-07-24T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en productSearch.html en Censura v2.0.4 y v2.1.0  permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro q en la acción ProductSearch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:censura:censura:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"10D69A20-D34C-4621-87F1-71FF8506BD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:censura:censura:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"64093539-34C8-4B92-8967-EC7D115996BE"}]}]}],"references":[{"url":"http://secunia.com/advisories/35795","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.censura.info/forums/project.php?issueid=151","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.censura.info/forums/showthread.php?t=969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55791","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35920","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51665","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.censura.info/forums/project.php?issueid=151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.censura.info/forums/showthread.php?t=969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2596","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to fad_aupath structure members."},{"lang":"es","value":"Vulnerabilidad sin especificar en el subsistema Solaris Auditing en Sun Solaris v9 y v10 y OpenSolaris anteriores a snv_121, cuando los atributos extendidos de ficheros son utilizados, permite a usuarios locales producir una denegación de servicio (panic) a través de vectores relacionados con los miembros estructurales fad_autpath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_120","matchCriteriaId":"5595B6BF-AB51-4BCB-A2D7-0E77DEAE22BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_120","matchCriteriaId":"C6D14446-9EFC-4C91-A313-5FB28E52A50B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]}],"references":[{"url":"http://secunia.com/advisories/35980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35787","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2597","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service (daemon crash) via a GET request."},{"lang":"es","value":"El modulo Sun Java System (SJS) Access Manager Policy Agent v2.2 para el servidor proxy web SJS v4.0 permite a atacantes remotos producir una denegación de servicio (caída de demonio) a través de una petición GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager_policy_agent:2.2:*:*:*:*:*:*:*","matchCriteriaId":"56354C0A-A653-4458-8C9F-F3B8ACA40D85"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB8D89B7-2C74-4CDC-8708-D9FACC4DE7C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/35979","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141248-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258508-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141248-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258508-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2598","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and (2) remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a mailto action to parents/parents.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Online Grades & Attendance v3.2.6 y anteriores permite (1) a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"key\" en una acción \"resetpass\" en index.php y (2) usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través del parámetro ADD en una acción \"mailto\" a parents/parents.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinegrades:online_grades:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"B542E8BE-F97B-456C-8332-F9F5D23B97ED"}]}]}],"references":[{"url":"http://secunia.com/advisories/35304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503943/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503943/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2599","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en RadCLASSIFIEDS Gold v2.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"seller\" en una búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radscripts:radclassifieds:2.0:*:gold:*:*:*:*:*","matchCriteriaId":"38FBC44E-0BCC-45E6-9052-03886F818EBC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8834","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50867","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2600","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en view.php en Webboard v2.90 beta y anteriores permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"topic\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akiva:webboard:*:beta:*:*:*:*:*:*","versionEndIncluding":"2.90","matchCriteriaId":"8319D338-3589-4D11-BBDD-47EFB107F967"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8823","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50861","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2601","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_profile action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Joomlaequipment (conocido también como JUser o com_juser) v2.0.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"id\" en una acción en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlaequipment:juser:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A7FB5369-4373-4303-8D8F-36A241970D21"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35160","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2602","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb."},{"lang":"es","value":"R2 Newsletter Lite, Pro, y Stats almacena información sensible bajo la raíz de la web con insuficientes controles de acceso, lo que permite a atacantes remotos descargar el fichero de la base de datos a a traves de una petición directa a admin.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:r2newsletter:r2_newsletter_lite:*:*:*:*:*:*:*:*","matchCriteriaId":"83ED9EE8-E511-4841-AD6E-AE03FEF54573"},{"vulnerable":true,"criteria":"cpe:2.3:a:r2newsletter:r2_newsletter_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"79D4B472-56AA-4C7D-BE03-710219DB4728"},{"vulnerable":true,"criteria":"cpe:2.3:a:r2newsletter:r2_newsletter_stats:*:*:*:*:*:*:*:*","matchCriteriaId":"AC9553DD-AA1F-453B-A256-6D933C65C918"}]}]}],"references":[{"url":"http://secunia.com/advisories/35312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8849","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2603","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) tid parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en Escon SupportPortal Pro v3.0 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de los parámetros (1) \"cat\" y (2) \"tid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-supportportal:escon_supportportal_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"585B90E6-CFFF-4976-ABCA-D8DD520CD51C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8840","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50874","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2604","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) userid (aka username) and (2) PassWord parameters to admin.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en adminlogin.asp en Zen Help Desk v2.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"userid\" (también conocido como username) y (2) \"PassWord\" en admin.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenhelpdesk:zen_help_desk:2.1:*:*:*:*:*:*:*","matchCriteriaId":"07744209-6D2D-49EB-9BD6-B260405912DC"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50862","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2605","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary SQL commands via (1) trupuser and (2) truppassword cookies to uploadcp/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en adminquery.php en Traidnt Up v2.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante las cookies (1) trupuser y (2) truppassword de uploadcp/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:traidnt:traidnt_up:2.0:*:*:*:*:*:*:*","matchCriteriaId":"064F5211-3877-4FF7-96F7-F62AB91EC79B"}]}]}],"references":[{"url":"http://osvdb.org/54809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8831","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50866","source":"cve@mitre.org"},{"url":"http://osvdb.org/54809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2606","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T14:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb."},{"lang":"es","value":"ASP Football Pool v2.3 almacena información sensible en el directorio web raíz con medidas de control de acceso insuficientes, permitiendo a atacantes remotos descargar el fichero de base de datos mediante una petición directa de NFL.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brainjar:asp_football_pool:2.3:*:*:*:*:*:*:*","matchCriteriaId":"02EDCB59-DF2D-4384-8D1E-DE1A73C188AB"}]}]}],"references":[{"url":"http://secunia.com/advisories/35317","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8852","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2607","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the task parameter in a showpic action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente com_pinboard para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"task\" en una acción \"showpic\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pinme:com_pinboard:-:*:*:*:*:*:*:*","matchCriteriaId":"2B12C09A-A25B-408A-B81E-98C7BBE2C780"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9017","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35493","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51359","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2608","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php.  NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHP Address Book versiones 4.0.x, permiten a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del (1) parámetro id en el archivo delete.php o (2) parámetro alphabet en el archivo index.php. NOTA: los vectores edit.php y view.php ya están cubiertos por el CVE-2008-2565."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chatelao:php_address_book:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7CB55AC9-5FE9-4D82-96F6-55BA869DED41"},{"vulnerable":true,"criteria":"cpe:2.3:a:chatelao:php_address_book:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"42B80912-2590-41E4-9F02-94F830E5829C"}]}]}],"references":[{"url":"http://secunia.com/advisories/35590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9023","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504595/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504595/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2609","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente amoCourse (com_amocourse) para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"catid\" en una acción \"category\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amotools:com_amocourse:-:*:*:*:*:*:*:*","matchCriteriaId":"0F0F86D5-C5AF-4F58-AB29-F9738C2318F7"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35489","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51358","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2610","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Links Related en Links Package v5.x anteriores a v5.x-1.13 y v6.x anteioriores a v6.x-1.2, un módulo para Drupal, permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección mediante el campo \"title\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"FBF42B60-FF0D-4824-B621-455517E290E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBA4491B-CCBB-4594-931E-CDDC18CB6BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9156C955-E204-4B54-A7FE-A2CEB7E8363C"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"E2BDD602-5B8D-43DA-9EA0-019A8477C016"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"ACB8F37E-E322-40C7-A572-05D05AD30DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"1E0619C2-2C1E-4D4C-AF2B-93F38A469D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"91C2CE34-B934-4F7D-ADA8-B662E607B1F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"B99C9DE3-C795-43E8-9D07-14687E6024DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"46D6A00F-BC7F-43BD-8981-D8DE31FF4EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.12-beta1:*:*:*:*:*:*:*","matchCriteriaId":"6F2D180A-55CB-4A80-B088-978FB1A71287"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"BFA07466-9279-4E4D-A9FE-3AB7BAFB4F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFC93781-BDEA-4C09-AC8A-4324C14BE654"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"D94F3C18-6126-4771-8541-9D1FC9DE2151"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD38EFCD-1AED-4228-9F1D-104BEB35D51C"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"E4E37AA3-E7DE-4D45-A0DD-05A241F28A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta5:*:*:*:*:*:*:*","matchCriteriaId":"8881A192-E440-4985-86EF-BAF1CA1600EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta6:*:*:*:*:*:*:*","matchCriteriaId":"C4713EAE-1D3A-490C-BCD3-2509D1327801"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"39DB6A54-7A7C-4EEF-B5EE-FEE792631C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta10:*:*:*:*:*:*:*","matchCriteriaId":"024529DC-176A-4983-AD5E-37C0C84F89C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta11:*:*:*:*:*:*:*","matchCriteriaId":"2A0B0B2D-AB37-42BC-AE76-4A292656772A"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta12:*:*:*:*:*:*:*","matchCriteriaId":"011E93C3-F51A-4F77-9936-2213290E8A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta13:*:*:*:*:*:*:*","matchCriteriaId":"600A4B66-6A42-4403-A46E-379A251F848F"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta14:*:*:*:*:*:*:*","matchCriteriaId":"62A349B2-AB84-442D-993B-F54A1F0D07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.0-beta15:*:*:*:*:*:*:*","matchCriteriaId":"E027A703-3F4A-454A-AE14-B800079255D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5CBB8DB1-554F-4984-AF00-04AD5003C545"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_courtney:links_package:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"1D08C36D-76DF-4BAA-BEB7-B969E6F2EF1B"}]}]}],"references":[{"url":"http://drupal.org/node/501356","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/501360","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/502112","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35491","source":"cve@mitre.org"},{"url":"http://drupal.org/node/501356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/501360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/502112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/55326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2611","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 Beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en infusions/last_seen_users_panel/last_seen_users_panel.php en MyFusion (también conocido como MyF) v6 Beta, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro \"settings[locale]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gander:myfusion:6:beta:*:*:*:*:*:*","matchCriteriaId":"55FEB0B5-5137-4173-8B64-A8265CD2F0DA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9018","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2612","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.aspx en ProSMDR permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"txtUser\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prosmdr:prosmdr:*:*:*:*:*:*:*:*","matchCriteriaId":"C68ECF81-8485-474C-B392-DADBF6B5DF7E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35614","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2613","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, and possibly unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DataCheck Solutions LinkPal v1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"page\" de (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, y posiblemente otros componentes no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:linkpal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E0C1AF4-AA82-4E34-8721-015E4FEBE668"}]}]}],"references":[{"url":"http://secunia.com/advisories/35598","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2614","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en z_admin_login.asp en DataCheck Solutions LinkPal v1.x permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:linkpal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E0C1AF4-AA82-4E34-8721-015E4FEBE668"}]}]}],"references":[{"url":"http://secunia.com/advisories/35598","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2615","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp, (2) z_forgot.asp, and possibly unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en DataCheck Solutions SitePal v1.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"page\" de (1) \"z_admin_login.asp\", (2) \"z_forgot.asp\", y posiblemente otros componentes no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:sitepal:1.1:*:*:*:*:*:*:*","matchCriteriaId":"ED2D8E75-2BC8-4336-9B2C-A639C0497227"}]}]}],"references":[{"url":"http://secunia.com/advisories/35625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2616","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en z_admin_login.asp en DataCheck Solutions SitePal v1.x  permite a atacantes remotos ejecutar comandos SQL de su elección mediante vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:sitepal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A11D9AD-3D55-4C16-B5F8-597E9F0A6DF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/35625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2617","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en medialib.dll en BaoFeng Storm v 3.9.62, permite a atacantes remotos la ejecución de código de su elección a través de un nombre de ruta largo en el atributo \"source\" de un elemento \"item\" en un archivo de lista de reproducción .smpl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baofeng:storm:3.9.62:*:*:*:*:*:*:*","matchCriteriaId":"1AAFC8B7-8A7B-4A60-93F6-CDA6413F1991"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=124624413120440&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=124627617220913&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35512","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=124624413120440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=124627617220913&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2618","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo  Surveys (también conocido como NS-Polls) en MDPro (MD-Pro) v1.083.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pollID\" en una acción \"results\" a modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxdev:mdpro:1.083:*:*:*:*:*:*:*","matchCriteriaId":"CBE6A970-9E23-430D-88C2-1B3B3B520646"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35495","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51385","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2619","sourceIdentifier":"cve@mitre.org","published":"2009-07-27T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.asp en DataCheck Solutions V-SpacePal, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datachecknh:v-spacepal:-:*:*:*:*:*:*:*","matchCriteriaId":"872D11ED-D2D8-4BAE-8740-AA487A7896BD"}]}]}],"references":[{"url":"http://secunia.com/advisories/35612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2620","sourceIdentifier":"cve@mitre.org","published":"2009-07-29T17:30:01.280","lastModified":"2025-10-10T10:26:26.423","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference."},{"lang":"es","value":"src/remote/server.cpp en fbserver.exe en Firebird SQL v1.5 anterior a v1.5.6, v2.0 anterior a v2.0.6, v2.1 anterior a v2.1.3, y v2.5 anterior a v2.5 Beta 2, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de un mensaje op_connect_request mal formado que provoca un bucle infinito o una deferencia a puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5","versionEndExcluding":"1.5.6","matchCriteriaId":"ED5BF0C6-148D-4142-9479-52831305FF8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.6","matchCriteriaId":"361ADF74-C457-4BCC-BD99-D730CB32D4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionStartIncluding":"2.1","versionEndExcluding":"2.1.3","matchCriteriaId":"746090F5-012B-4587-BDD2-C300E6C8817E"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:2.5.0:-:*:*:*:*:*:*","matchCriteriaId":"62D0C042-3838-40CB-A43F-769EC419252B"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:2.5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"355DC46D-D76E-4924-9FF1-B1B69B9BA51C"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:2.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F069ED28-40B3-4B94-B89F-7E18AF0056C9"}]}]}],"references":[{"url":"http://tracker.firebirdsql.org/browse/CORE-2563","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/firebird-sql-dos","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35842","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514463","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://tracker.firebirdsql.org/browse/CORE-2563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/firebird-sql-dos","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2621","sourceIdentifier":"cret@cert.org","published":"2009-07-28T17:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce \"buffer limits and related bound checks,\" which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc."},{"lang":"es","value":"Squid desde v3.0 hasta v3.0.STABLE16 desde v3.1 hasta v3.1.0.11 no cumple adecuadamente con \"los limites de búfer y comprobaciones vinculadas,\" lo que permite a atacantes remotos producir una denegación de servicio a través de (1) una petición incompleta o (2) una petición con un tamaño largo de cabecera, relacionado con (a) HttpMsg.cc y (b) client_side.cc."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-08-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre1:*:*:*:*:*","matchCriteriaId":"CF9C0078-D06B-4174-AF2C-599638E5B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre2:*:*:*:*:*","matchCriteriaId":"F1DD47BA-EA59-4DCC-BFF3-2DF0BC332CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre3:*:*:*:*:*","matchCriteriaId":"2BC1746D-BE02-4D04-B31D-95589EBD4C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre4:*:*:*:*:*","matchCriteriaId":"62C35710-215C-4B80-9304-665451F3C0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre5:*:*:*:*:*","matchCriteriaId":"76A7416C-64B2-4F52-93FD-9C504B7D4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre6:*:*:*:*:*","matchCriteriaId":"17D51261-2071-4E8F-AD75-2ECCBE7F7C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre7:*:*:*:*:*","matchCriteriaId":"ACD9E084-007E-4C6A-8D30-2DC9B355D7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable1:*:*:*:*:*","matchCriteriaId":"95912E0D-FACF-459B-94FB-334FDBCC292B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable10:*:*:*:*:*","matchCriteriaId":"2C455506-7FBF-4F0E-92E7-F074B74C10D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable11:*:*:*:*:*","matchCriteriaId":"67288E3E-88BF-44CE-84EF-1BF98E8C38CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable12:*:*:*:*:*","matchCriteriaId":"B428BDA9-8C83-4DE3-9391-17AFD5D750BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable13:*:*:*:*:*","matchCriteriaId":"DC57EAB8-BFEF-4FE2-8ADB-D196EAE3E51D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable14:*:*:*:*:*","matchCriteriaId":"935F2BDE-7F76-4E13-8318-37CE97B7948F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable15:*:*:*:*:*","matchCriteriaId":"354599A2-5FCF-4F5A-85AE-00505D32B9BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable2:*:*:*:*:*","matchCriteriaId":"1F1BC7B9-9CD1-42E9-84BB-BEE3668BAAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable3:*:*:*:*:*","matchCriteriaId":"88E3716B-863A-40D4-A7D9-F2A288B87394"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable4:*:*:*:*:*","matchCriteriaId":"02FB3C5B-95F1-4839-8F68-649AFA2FEB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable5:*:*:*:*:*","matchCriteriaId":"631CBA69-B2A1-4522-A330-6A87CCBC682C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable6:*:*:*:*:*","matchCriteriaId":"0FE7885D-D1EB-4543-B342-80BC645EE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable7:*:*:*:*:*","matchCriteriaId":"B7C4AE0E-9608-4D24-8EA3-0F33A5D95A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable8:*:*:*:*:*","matchCriteriaId":"628344A8-42AE-4AD7-89A2-66711490AB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable9:*:*:*:*:*","matchCriteriaId":"3260A290-9F63-4E5C-BEF2-015E9491AD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:rc1:stable11:*:*:*:*:*","matchCriteriaId":"4F830353-C4E4-4DAF-B7ED-1B0BAE9F3253"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"131C4C00-3811-42BF-A84A-EB2E5DA156B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6A8586AD-E820-4BAE-AAF9-AC7EF2316C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"802E3D2B-90B7-4725-854F-4174116BC314"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7501697A-BCFD-4DC3-8D87-CC9A186D9589"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D6C4455-85F4-462D-9FF6-F830ED7D398E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B600BF4C-8169-4086-BFE6-F066BE5F5406"}]}]}],"references":[{"url":"http://secunia.com/advisories/36007","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:161","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:178","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/35812","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022607","source":"cret@cert.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2009_2.txt","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2013","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2009_2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2622","sourceIdentifier":"cret@cert.org","published":"2009-07-28T17:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) \"missing or mismatched protocol identifier,\" (2) missing or negative status value,\" (3) \"missing version,\" or (4) \"missing or invalid status number,\" related to (a) HttpMsg.cc and (b) HttpReply.cc."},{"lang":"es","value":"Squid desde v3.0 hasta v3.0.STABLE16 y desde v3.1 hasta v3.1.0.11 permite a atacantes remotos producir una denegación de servicio a través de peticiones mal formadas que incluyen (1) \"identificador de protocolo perdido o mal utilizado,\" (2) \"valor de estatus perdido o negativo,\" (3) \"versión perdida,\" o (4) \"número de estatus perdido o inválido\", relacionado con HttpMsg.cc y (b) HttpReply.cc."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of squid as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-08-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre1:*:*:*:*:*","matchCriteriaId":"CF9C0078-D06B-4174-AF2C-599638E5B29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre2:*:*:*:*:*","matchCriteriaId":"F1DD47BA-EA59-4DCC-BFF3-2DF0BC332CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre3:*:*:*:*:*","matchCriteriaId":"2BC1746D-BE02-4D04-B31D-95589EBD4C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre4:*:*:*:*:*","matchCriteriaId":"62C35710-215C-4B80-9304-665451F3C0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre5:*:*:*:*:*","matchCriteriaId":"76A7416C-64B2-4F52-93FD-9C504B7D4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre6:*:*:*:*:*","matchCriteriaId":"17D51261-2071-4E8F-AD75-2ECCBE7F7C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:pre7:*:*:*:*:*","matchCriteriaId":"ACD9E084-007E-4C6A-8D30-2DC9B355D7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable1:*:*:*:*:*","matchCriteriaId":"95912E0D-FACF-459B-94FB-334FDBCC292B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable10:*:*:*:*:*","matchCriteriaId":"2C455506-7FBF-4F0E-92E7-F074B74C10D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable11:*:*:*:*:*","matchCriteriaId":"67288E3E-88BF-44CE-84EF-1BF98E8C38CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable12:*:*:*:*:*","matchCriteriaId":"B428BDA9-8C83-4DE3-9391-17AFD5D750BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable13:*:*:*:*:*","matchCriteriaId":"DC57EAB8-BFEF-4FE2-8ADB-D196EAE3E51D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable14:*:*:*:*:*","matchCriteriaId":"935F2BDE-7F76-4E13-8318-37CE97B7948F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable15:*:*:*:*:*","matchCriteriaId":"354599A2-5FCF-4F5A-85AE-00505D32B9BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable2:*:*:*:*:*","matchCriteriaId":"1F1BC7B9-9CD1-42E9-84BB-BEE3668BAAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable3:*:*:*:*:*","matchCriteriaId":"88E3716B-863A-40D4-A7D9-F2A288B87394"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable4:*:*:*:*:*","matchCriteriaId":"02FB3C5B-95F1-4839-8F68-649AFA2FEB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable5:*:*:*:*:*","matchCriteriaId":"631CBA69-B2A1-4522-A330-6A87CCBC682C"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable6:*:*:*:*:*","matchCriteriaId":"0FE7885D-D1EB-4543-B342-80BC645EE8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable7:*:*:*:*:*","matchCriteriaId":"B7C4AE0E-9608-4D24-8EA3-0F33A5D95A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable8:*:*:*:*:*","matchCriteriaId":"628344A8-42AE-4AD7-89A2-66711490AB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:*:stable9:*:*:*:*:*","matchCriteriaId":"3260A290-9F63-4E5C-BEF2-015E9491AD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:rc1:stable11:*:*:*:*:*","matchCriteriaId":"4F830353-C4E4-4DAF-B7ED-1B0BAE9F3253"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"131C4C00-3811-42BF-A84A-EB2E5DA156B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6A8586AD-E820-4BAE-AAF9-AC7EF2316C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"802E3D2B-90B7-4725-854F-4174116BC314"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7501697A-BCFD-4DC3-8D87-CC9A186D9589"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D6C4455-85F4-462D-9FF6-F830ED7D398E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B600BF4C-8169-4086-BFE6-F066BE5F5406"}]}]}],"references":[{"url":"http://secunia.com/advisories/36007","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:161","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:178","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/35812","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022607","source":"cret@cert.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2009_2.txt","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2013","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2009_2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2625","sourceIdentifier":"cret@cert.org","published":"2009-08-06T15:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework."},{"lang":"es","value":"Apache Xerces2 Java, tal como se utiliza en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anterior a la actualización 15 y el JDK y JRE v5.0 antes de la actualización 20, y en otros productos, permite a atacantes remotos provocar una denegación de servicio (bucle infinito y la cuelgue de aplicación) a través de una entrada XML malformada, como lo demuestra Codenomicon XML fuzzing framework."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:-:*:*:*:*:*:*","matchCriteriaId":"711BCDB5-83BC-4DBA-8097-2CD33617FD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"B5F20B3E-781F-4DC1-B939-B0EAFC515F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"BEB37E93-38EB-4AEE-A3DD-D2097C0D6852"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"59DED85A-153E-40B1-9ABA-D405204E464E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"168E67FC-32BC-4DAE-B49C-840FD721D7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"83A2B4A2-ED27-4C12-871B-C0F78C3478FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"9E8A5D2D-B620-449B-B599-51F5C9FC658C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"9A39B469-5041-4715-B6AC-36D8777677EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"F49DBD1F-D3F5-400B-AE2E-BC87B05A5051"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"8E605982-97A2-4E5E-847E-2BB8AD77910C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"848299EC-DE52-4511-BF53-C83022935964"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"CD5BD598-ADBC-42EE-BF81-049D89CCA426"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"64AC19E5-A20C-4D51-B465-ABCDBADF550A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"A2CCCA1A-F0A1-4511-AF84-326DF406C0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"81B0BEF9-25FD-48F7-83BC-BEA31BC3A1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"4E6D8590-0A99-43E0-9256-9572112F9C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"5F2A0870-A4D3-481B-8A37-A4DC282B0DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"20171515-B5A5-44D2-B7F7-21EDDE39989E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"F734AF76-4CEE-4F9D-AD6A-6BECF1F977CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"985B45F6-C285-4061-A656-A4C1A1FE59D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"4A420DA5-1346-446B-8D23-E1E6DDBE527E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"B8CA8719-7ABE-4279-B49E-C414794A4FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"DC92B7EC-849F-4255-9D55-43681B8DADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"2ABC1045-7D3D-4A14-B994-7E60A4BB4C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"1F3C1E65-929A-4468-8584-F086E6E59839"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"42C95C1D-0C2E-4733-AB1B-65650D88995D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"47A9F499-D1E3-41BD-AC18-E8D3D3231C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"D6E07069-D6EE-4D44-94A6-CDCA4A50E6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"344FA3EA-9E25-493C-976A-211D1404B251"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"D081A380-5AA4-4451-94A9-7B65810106E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"112E7575-A3A0-4A94-AD39-7B2325B150B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"708E8CEF-82EE-4D4B-ABF9-87AA4878F517"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"D5D9D9A7-8819-44A4-80AC-52D6B63A0C9B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*","matchCriteriaId":"79A35457-EAA3-4BF9-A4DA-B2E414A75A02"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F920C50-FE0F-4915-965A-AA58884DF7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"944FDBF2-1262-4B85-A7D3-537330144D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:7.0:*:*:*:*:*:*:*","matchCriteriaId":"57C2F58F-13AA-45C5-9172-8465B44CA9FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_web_services:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2A3115EB-0671-4E0C-9B75-FACFD6D42B88"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_web_services:7.0:-:*:*:*:*:*:*","matchCriteriaId":"F3376F25-51D0-4D84-AFC7-AD1C1BCA0191"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_web_services:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"BDE00C3E-BB4E-4E71-86B8-E637BCD033A7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces2_java:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3C1085-3255-449C-AFE3-984EFAC5BCCE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1232.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1537.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36162","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37671","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37754","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38231","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38342","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43300","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/50549","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cret@cert.org","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1","source":"cret@cert.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.codenomicon.com/labs/xml/","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-1984","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:108","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/1","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/9","source":"cret@cert.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/6","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/3","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1615.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0858.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35958","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022680","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-1","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-012A.html","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cret@cert.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cret@cert.org","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0359","source":"cret@cert.org","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512921","source":"cret@cert.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"cret@cert.org","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1232.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/50549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.fi/en/reports/2009/vulnerability2009085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.codenomicon.com/labs/xml/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-1984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.networkworld.com/columnists/2009/080509-xml-flaw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1615.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0858.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-012A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2626","sourceIdentifier":"cret@cert.org","published":"2009-12-01T16:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable."},{"lang":"es","value":"La función zend_restore_ini_entry_cb en zend_ini.c en PHP v5.3.0, v5.2.10, y anteriores permite a atacantes dependientes del contexto conseguir información sensible (contenidos de memoria) y produce una caída PHP mediante la utilización de la función ini_set para declarar una variable, cuando se utiliza la funcion ini_restore para restaurar la variable."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this flaw to be a security issue. The bug can only be triggered by the PHP script author, which does not cross trust boundary.","lastModified":"2009-12-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"AFD586D6-585F-4259-B845-24D7057678F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540605","source":"cret@cert.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37482","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/65","source":"cret@cert.org","tags":["Exploit"]},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/Zend/zend_ini.c?r1=272370&r2=284156","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36009","source":"cret@cert.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/65","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/Zend/zend_ini.c?r1=272370&r2=284156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2627","sourceIdentifier":"cret@cert.org","published":"2009-08-19T17:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121."},{"lang":"es","value":"Una vulnerabilidad de método no seguro en el control ActiveX de LunchApp de Acer (también se conoce como AcerCtrls.APlunch), en el archivo acerctrl.ocx permite a atacantes remotos ejecutar comandos arbitrarios por medio del método Run, una vulnerabilidad diferente de CVE-2006-6121."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acer:lunchapp.aplunch:*:*:*:*:*:*:*:*","matchCriteriaId":"6C630519-6C47-4BAA-970D-FAEC12FCB6D3"}]}]}],"references":[{"url":"http://osvdb.org/57201","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36343","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/485961","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/36068","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id?1022752","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2299","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52592","source":"cret@cert.org"},{"url":"http://osvdb.org/57201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/485961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/36068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2628","sourceIdentifier":"cret@cert.org","published":"2009-09-08T22:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption."},{"lang":"es","value":"El codec multimedia  VMnc en  vmnc.dll en VMware Movie Decoder anterior a v6.5.3 build 185404, VMware Workstation v6.5.x anterior a v6.5.3 build 185404, VMware Player v2.5.x anterior a v2.5.3 build 185404 y  VMware ACE v2.5.x anterior a v2.5.3 build 185404 sobre Windows, no maneja adecuadamente determinados tamaños de altura en el contenido de video, lo que podría permitir a atacantes remotos ejecutar código de su elección  a través de un archivo AVI manipulado que provocaría un corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E62960B2-91AE-4DD7-8085-9BA6BCB84473"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CE79F3F7-A21A-4CAA-BB0D-2955299EE8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"62DA49FA-6657-45B5-BF69-D3A03BA62A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*","matchCriteriaId":"AFC6B629-30B3-4C45-B5E9-1B4310F186FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"541D77A2-99C5-4CDB-877F-7E83E1E3369E"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000065.html","source":"cret@cert.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/34938","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/444513","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/506286/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/36290","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0012.html","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2553","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/34938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/444513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/506286/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2629","sourceIdentifier":"cret@cert.org","published":"2009-09-15T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests."},{"lang":"es","value":"Desbordamiento de búfer inferior en src/http/ngx_http_parse.c en nginx v0.1.0 a la v0.5.37, v0.6.x a la v0.6.39, v0.7.x a la v0.7.62, y v0.8.x anterior a v0.8.15, permite a atacantes ejecutar código de su elección a través de peticiones HTTP manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.1.0","versionEndExcluding":"0.5.38","matchCriteriaId":"F0DE2A3E-F210-4B55-900A-13C309891E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.6.0","versionEndExcluding":"0.6.39","matchCriteriaId":"692B1E17-4FB8-484E-85D2-4E90641268F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.7.0","versionEndExcluding":"0.7.62","matchCriteriaId":"587F3642-4CB9-4D61-A5C9-55D7D172D96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.8.0","versionEndExcluding":"0.8.15","matchCriteriaId":"93F18982-44F0-4A93-9A6A-D857E1577A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"}]}]}],"references":[{"url":"http://nginx.net/CHANGES","source":"cret@cert.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://nginx.net/CHANGES-0.5","source":"cret@cert.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://nginx.net/CHANGES-0.6","source":"cret@cert.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://nginx.net/CHANGES-0.7","source":"cret@cert.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://sysoev.ru/nginx/patch.180065.txt","source":"cret@cert.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1884","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/180065","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"cret@cert.org","tags":["Third Party Advisory"]},{"url":"http://nginx.net/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://nginx.net/CHANGES-0.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://nginx.net/CHANGES-0.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://nginx.net/CHANGES-0.7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://sysoev.ru/nginx/patch.180065.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/180065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2631","sourceIdentifier":"cret@cert.org","published":"2009-12-04T11:30:00.437","lastModified":"2025-06-16T21:15:22.113","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks.  NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design"},{"lang":"es","value":"Múltiples productos VPN de SSL sin cliente que se ejecutan en navegadores web, incluyendo StoneGate de Stonesoft; ASA de Cisco; E-Class SSL VPN de SonicWALL y SSL VPN de SonicWALL; SecureWire Access Gateway de SafeNet;  Networks Secure Access de Juniper; CallPilot de Nortel; Access Gateway de Citrix; y otros productos, cuando se ejecutan en configuraciones que no restringen el acceso al mismo dominio que la VPN, recuperan el contenido de las direcciones URL remotas de un dominio y las reescriben para que se originen desde el dominio de la VPN, lo que viola la política del mismo origen y permite a atacantes remotos conducir ataques de tipo cross-site scripting, leer cookies que se originaron desde otros dominios, acceder a la sesión de VPN web para conseguir acceso a los recursos internos, realizar el registro de claves y conducir otros ataques. NOTA: se podría argumentar que se trata de un problema de diseño fundamental en cualquier solución VPN sin cliente, a diferencia de un error comúnmente introducido que puede ser corregido en implementaciones separadas. Por lo tanto, se ha asignado un CVE único para todos los productos que presentan este diseño."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:aladdin:safenet_securewire_access_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"BCE5BD39-6D53-410E-A346-FC03DA4D765F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7D80DB80-F243-469B-993F-E368B092B3C5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:e-class_ssl_vpn:*:*:*:*:*:*:*:*","matchCriteriaId":"37C56829-C2AA-4F29-8C71-2F6FCDB727D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:ssl_vpn:*:*:*:*:*:*:*:*","matchCriteriaId":"E6A39190-6A05-4AF0-8B4F-B4A186D5ED59"},{"vulnerable":true,"criteria":"cpe:2.3:h:stonesoft:stonegate:*:*:*:*:*:*:*:*","matchCriteriaId":"447304A0-D5D2-46E2-9457-BAC6BCBA276A"}]}]}],"references":[{"url":"https://security.paloaltonetworks.com/PAN-SA-2025-0005","source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/261869","source":"cret@cert.org"},{"url":"http://kb.juniper.net/KB15799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2006/Jun/238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2006/Jun/269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2006/Jun/270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=984744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/261869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/508164/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sonicwall.com/us/2123_14882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.sonicwall.com/us/2123_14883.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.stonesoft.com/en/support/security_advisories/2009_03_12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/50/025367-01.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2632","sourceIdentifier":"cret@cert.org","published":"2009-09-08T23:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error."},{"lang":"es","value":"Un desbordamiento de búfer en el componente script SIEVE (archivo sieve/script.c), tal y como es usado en cyrus-imapd en IMAP Server versiones 2.2.13 y 2.3.14, y Dovecot versiones 1.0 anteriores a 1.0.4 y versiones 1.1 anteriores a 1.1.7, de Cyrus, permite a los usuarios locales ejecutar código arbitrario y leer o modificar mensajes arbitrarios por medio de un script SIEVE diseñado, relacionado con el uso incorrecto del operador sizeof para determinar la longitud del búfer, combinado con un error de firma de enteros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmu:cyrus_imap_server:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EE067B25-86BF-4607-9988-F7564478805A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmu:cyrus_imap_server:2.3.14:*:*:*:*:*:*:*","matchCriteriaId":"507FD8BF-2387-4745-A15F-FC7389D02695"}]}]}],"references":[{"url":"http://dovecot.org/list/dovecot-news/2009-September/000135.html","source":"cret@cert.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36629","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36632","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36698","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36713","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/36904","source":"cret@cert.org"},{"url":"http://support.apple.com/kb/HT4077","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2009/dsa-1881","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/3","source":"cret@cert.org"},{"url":"http://www.osvdb.org/58103","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/36296","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36377","source":"cret@cert.org"},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"cret@cert.org"},{"url":"http://www.vupen.com/english/advisories/2009/2559","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2641","source":"cret@cert.org"},{"url":"https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sieve/script.c.diff?r1=1.62&r2=1.62.2.1&only_with_tag=cyrus-imapd-2_2-tail","source":"cret@cert.org"},{"url":"https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001253.html","source":"cret@cert.org"},{"url":"https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001254.html","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10082","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html","source":"cret@cert.org"},{"url":"http://dovecot.org/list/dovecot-news/2009-September/000135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sieve/script.c.diff?r1=1.62&r2=1.62.2.1&only_with_tag=cyrus-imapd-2_2-tail","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001253.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2633","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP  toolbar_ext.php en el componente VehicleManager(com_vehiclemanager)v1.0 para Joomla! permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro \"mosConfig_absolute_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ordasoft:com_vehiclemanager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5B8638AE-BCE4-4FD3-8E2A-FDD503581E45"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8920","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2634","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en toolbar_ext.php en el MediaLibrary (com_media_library) v1.5.3 Basic para Joomla! permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parametro \"mosConfig_absolute_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ordasoft:com_medialibrary:1.5.3:*:basic:*:*:*:*:*","matchCriteriaId":"C87D5782-B05F-41EF-AA08-7CCC175EB774"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8912","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2635","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en toolbar_ext.php en el componente RealEstateManager (com_realestatemanager) v1.0 Basic para Joomla! permite a atacantes remotos ejecutar código PHP de forma arbitraria a través de una URL en el parámetro \"mosConfig_absolute_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ordasoft:com_realestatemanager:1.0:*:basic:*:*:*:*:*","matchCriteriaId":"22EF066F-60EE-4DBF-AD3F-5D2D066BE6E6"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8919","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2636","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página Integration en el componente WebMail en Kerio MailServer v6.6.0, v6.6.1, v6.6.2, y v6.7.0  permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de un mensaje de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8CD16F9A-6CC4-4FB2-9441-768312DEBB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.1:*:*:*:*:*:*:*","matchCriteriaId":"64099B8F-F609-49D8-932E-8F4040AFFC75"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.6.2:*:*:*:*:*:*:*","matchCriteriaId":"39FECD4F-3494-4EB7-A3AF-828E3D6DD5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"1A59B047-22D1-4271-AA18-160536A1235F"}]}]}],"references":[{"url":"http://osvdb.org/54928","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/support/security-advisories#0906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35264","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022348","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/54928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kerio.com/support/security-advisories#0906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2637","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en el componente BookLibrary (com_booklibrary) v1.5.2.4 Basic para Joomla!  permitiría a atacantes remotos ejecutar código PHP a través de una URL en el parámetro \"mosConfig_absolute_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ordasoft:com_booklibrary:1.5.2.4:*:basic:*:*:*:*:*","matchCriteriaId":"7678DD10-45AA-4586-92D7-B9212C71D84E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8908","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2638","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente AkoBook (com_akobook) v2.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"gbid\" en una acción de respuesta a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:konze:com_akobook:2.3:*:*:*:*:*:*:*","matchCriteriaId":"FE095089-A791-4BC8-A222-810444EEA581"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8911","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35268","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2639","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewticket action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en MRCGIGUY The Ticket System v2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"viewticket\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrcgiguy:the_ticket_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AF7C1FB-07D9-49C2-B6F3-0A606AE180BA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8917","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2640","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to execute arbitrary SQL commands via a pmadm cookie in (1) an edittemp action or (2) a users action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en cgi/admin.cgi en Interlogy Profile Manager Basic, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cookie \"pmadm\" en una acción (1) edittemp o (2)users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interlogy:profile_manager:-:-:basic:*:*:*:*:*","matchCriteriaId":"E070BA95-3EBE-44C3-B194-7B01CEF03BE3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/files/110437/Interlogy-Profile-Manager-Basic-Insecure-Cookie-Handling.html","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8895","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50992","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73691","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/files/110437/Interlogy-Profile-Manager-Basic-Insecure-Cookie-Handling.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/8895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2641","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.  NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en app_and_readme/navigator/index.php en School Data Navigator, permite  a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"page\". NOTA: esto también puede ser aprovechado para añadir y ejecutar archivos locales de su elección a través de secuencias ..(punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rich_white:school_data_nav:*:*:*:*:*:*:*:*","matchCriteriaId":"A0383094-A4FA-4082-93FD-8CB1ADE4570A"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8924","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2642","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13."},{"lang":"es","value":"index.php en Desi Short URL Script v1.0, permite a atacantes remotos evitar la autenticación estableciendo la cookie \"logged\" a 1 y la cookie \"uid\" a un valor enter0, como se ha demostrado usando el valor 13."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:desiscripts:desi_short_url_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FAA0D1CF-65E7-4980-B375-FA95E06C5DD7"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8925","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2643","sourceIdentifier":"cve@mitre.org","published":"2009-07-28T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el componente PDF distiller en el Attachment Service en Research In Motion (RIM) BlackBerry Enterprise Server (BES) v4.1.3 a la v5.0  y BlackBerry Professional Software v4.1.4, permite a atacantes remotos asistidos por el usuario provocar una denegación de servicio (corrupción de memoria) o posiblemente la ejecución de código de su elección a través de un adjunto con un archivo .pdf. Vulnerabilidad distinta de CVE-2008-3246 y CVE-2009-0219."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B1694E42-9AA5-4503-9714-CBDE388481A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"265D8F90-96C3-4627-ABA5-994C25F70A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*","matchCriteriaId":"F5A7A6BD-C0D7-40E0-BE1A-EC4396853296"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"277BF68B-8280-4B2B-9A67-F13341253D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8534B50D-D051-4B26-957E-1A3E26E1E767"}]}]}],"references":[{"url":"http://secunia.com/advisories/35254","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/KB18327","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/54767","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35102","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022295","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1429","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50755","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/KB18327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/54767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50755","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2644","sourceIdentifier":"cve@mitre.org","published":"2009-07-29T17:30:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to \"pathnames for invalid fds.\""},{"lang":"es","value":"Condición de carrera en el subsistema Solaris Auditing en Solaris 9 y 10 y OpenSolaris anterior a snv_121, cuando se usan los atributos de archivo extendidos, permite a usuarios locales provocar una denegación de servicio(panic) a través de vectores relacionados a \"nombres de ruta para fds no válidos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:*:*:*:*:*:*","matchCriteriaId":"9E8A5A38-4864-4AD0-A8BA-A472AE4D7557"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:*:*:*:*:*:*","matchCriteriaId":"184AB738-8A6A-4619-A630-890925530818"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:*:*:*:*:*:*","matchCriteriaId":"A89BE592-11FD-46ED-B7F4-1930AAA5CCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:*:*:*:*:*:*","matchCriteriaId":"A45820A6-277B-492C-9E05-210B16E6BD5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:*:*:*:*:*:*","matchCriteriaId":"A5E40865-9B44-4CB4-B2F0-13A8CA0AD38C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:*:*:*:*:*:*","matchCriteriaId":"19094B1E-8496-4997-9AB1-A7F267DB1396"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:*:*:*:*:*:*","matchCriteriaId":"899768FF-7BBD-4128-8AC4-EB62686618CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:*:*:*:*:*:*","matchCriteriaId":"C0812CF1-08B3-4047-8B87-3B2D99D53AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:*:*:*:*:*:*","matchCriteriaId":"E1C7D0C8-898F-49DD-AB80-BF1EE3A7D1A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:*:*:*:*:*:*","matchCriteriaId":"E20E2BEC-AFB9-4527-B18A-BB6FE087DE8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:*:*:*:*:*:*","matchCriteriaId":"2483121B-6DAF-4367-8608-9E4BE25C263F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:*:*:*:*:*:*","matchCriteriaId":"9228C3DC-CF09-45D9-8D60-7861D29AB298"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:*:*:*:*:*:*","matchCriteriaId":"97E622C2-5727-40F0-AE5D-4F21F8DA20B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:*:*:*:*:*:*","matchCriteriaId":"D802C1F5-2ACC-46E1-B350-378CEEBDA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:*:*:*:*:*:*","matchCriteriaId":"40B6C721-3CED-46C3-9874-A6E985081C4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:*:*:*:*:*:*","matchCriteriaId":"2065BBE3-F0F9-4F7B-8828-0AD0491B67B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:*:*:*:*:*:*","matchCriteriaId":"FB17597F-DF89-431A-B7FB-C33E689A6901"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:*:*:*:*:*:*","matchCriteriaId":"47D688FA-7F88-4645-B3E5-830EF4C4FDAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:*:*:*:*:*:*","matchCriteriaId":"7FD6B880-B683-449E-9EA5-6FB1483EE309"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:*:*:*:*:*:*","matchCriteriaId":"F1D04C99-E0FD-4BB4-B651-9A9250633BB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:*:*:*:*:*:*","matchCriteriaId":"FC27EEDE-AE2F-427A-A035-AF790A65AAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:*:*:*:*:*:*","matchCriteriaId":"BD65532A-C083-462B-9FED-64051535E53E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:*:*:*:*:*:*","matchCriteriaId":"E71C245C-2E0A-423C-A0CE-AC15FDDE784F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:*:*:*:*:*:*","matchCriteriaId":"94B1C8EB-E9EB-4465-9BF9-545D1EF0C536"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:*:*:*:*:*:*","matchCriteriaId":"A2288FB2-5F26-41FB-A08D-90B168AD0F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:*:*:*:*:*:*","matchCriteriaId":"49AA677A-750B-4D05-869A-51981B2E2EC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:*:*:*:*:*:*","matchCriteriaId":"07F2BE5D-3D07-440F-8006-B74A8B718DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:*:*:*:*:*:*","matchCriteriaId":"894B4387-22CF-4DFA-ABDC-A89598D9DB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:*:*:*:*:*:*","matchCriteriaId":"9FB6A3F2-7152-4FEE-A3DC-D9926A3F8388"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:*:*:*:*:*:*","matchCriteriaId":"4314A1C4-8644-4096-9559-9CF4D5EAC39C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:*:*:*:*:*:*","matchCriteriaId":"90D6B309-746D-4306-8AD7-0D0968B02AEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:*:*:*:*:*:*","matchCriteriaId":"CB16CDAF-3C3B-4451-9458-D0E16271F37F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:*:*:*:*:*:*","matchCriteriaId":"C5B7225D-DC75-4E06-BE15-079556708B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:*:*:*:*:*:*","matchCriteriaId":"C6C2F6FC-F5D8-48DC-9CC9-5F82FD46603D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:*:*:*:*:*:*","matchCriteriaId":"CA5BFD2E-9D6F-4D5E-B86A-C25E142B5668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:*:*:*:*:*:*","matchCriteriaId":"F597A149-9187-48B1-AC77-357C87FEEF15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:*:*:*:*:*:*","matchCriteriaId":"BFAAC94D-6CEA-4B80-A9E8-959D8EB99E3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:*:*:*:*:*:*","matchCriteriaId":"FD73A336-77A2-4FB8-8A2E-EE2692886378"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:*:*:*:*:*:*","matchCriteriaId":"1109018C-B0A9-4752-8BB3-C94EC9B28F18"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:*:*:*:*:*:*","matchCriteriaId":"1235FD40-1FB9-4FD5-898B-CD6A3BA855F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:*:*:*:*:*:*","matchCriteriaId":"8D4C7956-A065-4114-8642-C8C9C1246957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:*:*:*:*:*:*","matchCriteriaId":"19CC57C8-DE9B-405E-83D2-FC63A4350772"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:*:*:*:*:*:*","matchCriteriaId":"4B2D3327-7239-4D4D-BF5F-A4B46900A331"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:*:*:*:*:*:*","matchCriteriaId":"E3D289A4-3043-4D14-8C64-EEE0D529B58F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:*:*:*:*:*:*","matchCriteriaId":"B9D3DD72-E560-449F-ABC9-D4DF91DD4F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:*:*:*:*:*:*","matchCriteriaId":"A50E9F3A-3B5B-4069-AF5F-E524C1253E7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:*:*:*:*:*:*","matchCriteriaId":"6558890D-704E-4C29-8AC5-E4B07034B713"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:*:*:*:*:*:*","matchCriteriaId":"3D4659A1-0FA9-4D08-9CBD-59C4F7A8004B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:*:*:*:*:*:*","matchCriteriaId":"216204D9-D216-442C-A6BE-C3D86E0A70A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:*:*:*:*:*:*","matchCriteriaId":"6DC9FB09-0F12-458A-9B99-414FAA9E2A1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:*:*:*:*:*:*","matchCriteriaId":"22E3FD68-C5F1-48F2-94C8-694395893A2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:*:*:*:*:*:*","matchCriteriaId":"27E32B20-3C72-4A0C-9971-8BB719851C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:*:*:*:*:*:*","matchCriteriaId":"91ED6A1F-54EB-4A2E-A157-ADFE6681521A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:*:*:*:*:*:*","matchCriteriaId":"E1834E45-86DA-47ED-8D00-001714D66B2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:*:*:*:*:*:*","matchCriteriaId":"C06E3C22-3FE5-4995-BE51-BEFB567536E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:*:*:*:*:*:*","matchCriteriaId":"B313A3DA-24DF-414F-BEEC-D5AF2B7ED31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:*:*:*:*:*:*","matchCriteriaId":"45015A0D-3CC7-47D2-8F56-9945315D68CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:*:*:*:*:*:*","matchCriteriaId":"10277E95-F2E4-4398-9DC7-9B854EE8D25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:*:*:*:*:*:*","matchCriteriaId":"86AC01EC-1EC1-428F-B7A4-3D5582AD2C52"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:*:*:*:*:*:*","matchCriteriaId":"953C1410-DB77-4250-B1DF-364FCAFDA2B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:*:*:*:*:*:*","matchCriteriaId":"9FD5C5C6-0047-4261-AC29-A3BDF5287C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:*:*:*:*:*:*","matchCriteriaId":"F428B518-6D1A-4F1A-A62C-44CC8CFDF3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:*:*:*:*:*:*","matchCriteriaId":"65A0F545-87B5-4733-8222-A99D2C968C7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:*:*:*:*:*:*","matchCriteriaId":"E9206F3B-8360-42D4-A567-EE2C57F3C2F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:*:*:*:*:*:*","matchCriteriaId":"D255FFED-0229-4336-AED4-B7D6E5746F54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:*:*:*:*:*:*","matchCriteriaId":"D7721527-B8D5-4346-B4DC-08D09AAC9E64"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:*:*:*:*:*:*","matchCriteriaId":"CAEA2E4D-49CB-4696-B878-882468340DAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:*:*:*:*:*:*","matchCriteriaId":"0D86A5C5-5584-428A-88B1-CD3EE634FF8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:*:*:*:*:*:*","matchCriteriaId":"86330112-84C7-457C-A7B3-619AC189D593"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:*:*:*:*:*:*","matchCriteriaId":"0F3B0C6E-23A5-4226-BB22-7A8470DC3724"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:*:*:*:*:*:*","matchCriteriaId":"FB311723-F2F3-4C85-831C-E3E2CC19703C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:*:*:*:*:*:*","matchCriteriaId":"416918A4-F37E-445E-B58F-7D4B1B90D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:*:*:*:*:*:*","matchCriteriaId":"5B10A4DE-2FAD-4ACA-8253-4370A274181D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:*:*:*:*:*:*","matchCriteriaId":"4DABACD4-EDD5-4BAA-AB12-3AC1A840E7D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:*:*:*:*:*:*","matchCriteriaId":"77CF9CE4-3FF6-427D-87B7-61581FBCAFE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:*:*:*:*:*:*","matchCriteriaId":"5F614E40-6C58-48E2-803D-AEDB03C70810"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:*:*:*:*:*:*","matchCriteriaId":"EDB8A628-4BA9-41EF-B336-D5DB21896494"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:*:*:*:*:*:*","matchCriteriaId":"C5197527-068E-4D9B-BDDC-453553649440"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:*:*:*:*:*:*","matchCriteriaId":"2163BC71-6BA6-4E5F-A193-9DB1E533E06B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:*:*:*:*:*:*","matchCriteriaId":"8F58CF3B-3216-456C-B15A-B84A547A7A34"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:*:*:*:*:*:*","matchCriteriaId":"549CB843-1C1A-4BD2-AA9D-A23EC0DAF413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:*:*:*:*:*:*","matchCriteriaId":"26F3057D-3B2F-4FCD-80D2-DD0A6AE60657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:*:*:*:*:*:*","matchCriteriaId":"B311263F-F3E2-4AE3-81A0-26516605E74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:*:*:*:*:*:*","matchCriteriaId":"C6B920FE-4D5C-49D3-BC3B-C519A368F127"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:*:*:*:*:*:*","matchCriteriaId":"5FE64FFA-2F99-4980-9F8B-16F30314039F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:*:*:*:*:*:*","matchCriteriaId":"CCEB7375-7C2C-4A7C-BC46-552CBC16E8F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:*:*:*:*:*:*","matchCriteriaId":"287C4B1B-FFA8-452E-98BF-8B2EB30F6B6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:*:*:*:*:*:*","matchCriteriaId":"F666F65E-BFA9-4F06-A84F-844D7E5DEBBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:*:*:*:*:*:*","matchCriteriaId":"7B36C324-ADFA-4885-846E-059872C95B25"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:*:*:*:*:*:*","matchCriteriaId":"FB88D92E-A71C-4EA7-8A30-0109E62E9F26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:*:*:*:*:*:*","matchCriteriaId":"CD8801EA-A577-4388-83F7-174F168B66E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:*:*:*:*:*:*","matchCriteriaId":"FFF21371-BC95-4815-AE8D-34361B5FA3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:*:*:*:*:*:*","matchCriteriaId":"E5C02D1A-F957-44AD-B7D0-ECF59695C6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:*:*:*:*:*:*","matchCriteriaId":"B8B2CE32-1539-4120-BBB5-33E8A10CD518"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:*:*:*:*:*:*","matchCriteriaId":"0C484C06-AB8D-4301-854B-22D15A7AE5E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:*:*:*:*:*:*","matchCriteriaId":"849EA7BD-A805-4A90-B237-B1EC6CB88FFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:*:*:*:*:*:*","matchCriteriaId":"D0B2EF35-F280-4368-B6A0-2EFAE0719E2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101a:*:*:*:*:*:*:*","matchCriteriaId":"C8A52D01-6AB6-4D2A-855E-36A7EEC2CC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101b:*:*:*:*:*:*:*","matchCriteriaId":"86931B59-DAD2-474B-B030-3B1389278C49"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:*:*:*:*:*:*","matchCriteriaId":"7E5C8198-D705-4202-B67D-7EA03081F69A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:*:*:*:*:*:*","matchCriteriaId":"72A36130-96FE-4C02-92E6-5B9D126C93AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:*:*:*:*:*:*","matchCriteriaId":"6C177E61-6CF2-4F48-9935-2E1A3581CB19"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:*:*:*:*:*:*","matchCriteriaId":"3902AF69-BA8C-41E2-9F56-1BFD2578731D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:*:*:*:*:*:*","matchCriteriaId":"A843E5E4-E53E-484B-8A86-14DD2DA10943"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:*:*:*:*:*:*","matchCriteriaId":"81199A81-CAD2-4375-8C3B-2638D007E4FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:*:*:*:*:*:*","matchCriteriaId":"B2BFC95D-3E59-4EF4-915A-14696072C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:*:*:*:*:*:*","matchCriteriaId":"FDE86EE0-418E-4133-8F4B-03761F9EE0DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:*:*:*:*:*:*","matchCriteriaId":"866FF3B9-465E-4120-A2B8-089023BA3539"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36042","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35835","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2022","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2645","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T18:30:00.343","lastModified":"2023-11-07T02:04:11.273","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2408.  Reason: This candidate is a duplicate of CVE-2009-2408.  Notes: All CVE users should reference CVE-2009-2408 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2646","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219."},{"lang":"es","value":"Vulnerabilidad múltiple no especificado en PDF distiller en el componente Attachment Service en Research In Motion (RIM) BlackBerry Enterprise Server (BES) software v4.1.3 hasta v4.1.6 y BlackBerry Professional Software v4.1.4 permite a los atacantes remotos asistidos por usuarios causar una denegación de memoria(corrupción de memoria) o posiblemente ejecutar arbitrariamente código a través de un fichero adjunto .pdf manipulado, una vulnerabilidad diferente a CVE-2008-3246 y CVE-2009-0219."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C4ACEF3E-E394-45E2-B20F-8575C92A490F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C599BDFD-7985-4709-B7CA-2ED0A4B0F327"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:domino:*:*:*:*:*","matchCriteriaId":"B1CACCFE-8037-4B21-B386-31F8B5981089"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9F71618E-5CB6-41A7-9705-6AD4344CDEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B1694E42-9AA5-4503-9714-CBDE388481A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"265D8F90-96C3-4627-ABA5-994C25F70A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*","matchCriteriaId":"F5A7A6BD-C0D7-40E0-BE1A-EC4396853296"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8534B50D-D051-4B26-957E-1A3E26E1E767"}]}]}],"references":[{"url":"http://www.blackberry.com/btsc/KB17953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/KB17953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2647","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Kaspersky Anti-Virus 2010 and Kaspersky Internet Security 2010 before Critical Fix 9.0.0.463 allows remote attackers to disable the Kaspersky application via unknown attack vectors unrelated to \"an external script.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Kaspersky Anti-Virus 2010 y Kaspersky Internet Security 2010 anteriores a Critical Fix v9.0.0.463  permite a los atacantes remotos deshabilitar la aplicación Kaspersky a través de un vector de ataque no relacionado a \"una secuencia de comandos externa\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:2010:*:*:*:*:*:*:*","matchCriteriaId":"E6CA50F0-B82E-46FB-9CAF-B6B02A77C8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_internet_security:2010:*:*:*:*:*:*:*","matchCriteriaId":"E6D7B95D-34B9-4F29-855D-61575B6198F8"}]}]}],"references":[{"url":"http://osvdb.org/56351","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kaspersky.com/technews?id=203038755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35789","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1998","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51986","source":"cve@mitre.org"},{"url":"http://osvdb.org/56351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kaspersky.com/technews?id=203038755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2648","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FlashDen Guestbook allows remote attackers to obtain configuration information via a direct request to amfphp/phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"FlashDen Guestbook permite a los atacantes remotos obtener información de configuración a través de una petición directa a amfphp/phpinfo.php, que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flashden:guestbook:*:*:*:*:*:*:*:*","matchCriteriaId":"092878DC-6999-411B-ACBE-C9B6F1C93CE2"}]}]}],"references":[{"url":"http://osvdb.org/56548","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/flashden-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36000","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52001","source":"cve@mitre.org"},{"url":"http://osvdb.org/56548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/flashden-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2649","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request with a large count, which triggers a malloc call with a large value."},{"lang":"es","value":"El controlador IATA (ata) en FreeBSD v6.0 y v8.0, cuando está disponible la lectura en el directorio /dev, permite a usuarios locales provocar una denegación de servicio (kernel panic) a través de ciertas peticiones IOCTL con un \"count\" largo, que provoca  una llamada para la reserva de memoria (malloc) con un valor largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D2C79D5-D27F-4B08-A8DF-3E3AAF4E16A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3CF1F9EF-01AF-4708-AE02-765360AF3D66"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35645","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022538","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/9134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/9134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2650","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .m3u or possibly (2) .pst file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica in Sorcerer Software MultiMedia Jukebox v4.0 Build 020124 permite a los atacantes remoto causar una denegación de servicio (caída de aplicación) o posiblemente ejecuta código arbitrario a través de archivos manipulados (1) .m3u o posiblemente (2) .pst"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sorcerersoftware:multimedia_jukebox:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D98A4E96-54DC-453D-AC5C-A7A3D7974BC7"}]}]}],"references":[{"url":"http://secunia.com/advisories/35860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2651","sourceIdentifier":"cve@mitre.org","published":"2009-07-30T20:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer."},{"lang":"es","value":"main/rtp.c en Asterisk Open Source v1.6.1 anterior v1.6.1.2, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un marco de texto RTP sin un determinado delimitador, lo que provoca una deferencia a puntero NULL y su consecuente cálculo no válido de puntero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBFF2686-0F5C-4F20-AA93-6B63C5ADCD82"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2009-004.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://downloads.digium.com/pub/security/AST-2009-004-1.6.1.diff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56571","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35837","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022608","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52046","source":"cve@mitre.org"},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://downloads.digium.com/pub/security/AST-2009-004-1.6.1.diff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2652","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a denial of service (panic) via vectors involving the parsing of labeled packets."},{"lang":"es","value":"Vulnerabilidad no específica en Solaris Trusted Extensions en Sun Solaris v10, y OpenSolaris snv_37 hasta snv_120, permite a atacantes remotos provocar una denegación de servicio (panic) a través de vectores que implican el analizador de paguetes etiquetados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022628","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264808-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35882","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2089","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264808-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2653","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified \"security software\" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location.  NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM \"escalation\" is not a security boundary we defend."},{"lang":"es","value":"** IMPUGNADA **  La función NtUserConsoleControl en win32k.sys en Microsoft Windows XP SP2 y SP3, y Server 2003 anterior a SP1, permite a usuarios administradores locales evitar \"programas de seguridad\" no especificados y obtener privilegios mediante una petición modificada que provoca la escritura de zonas de memoria de su elección. NOTA: el vendedor impugna la importancia de este informe, manteniendo que 'el \"escalado\" a SYSTEM de los administradores no es una limitación de seguridad que protejamos\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://blogs.technet.com/srd/archive/2009/06/11/latest-baidu-public-posting-requires-adminisrator-to-elevate.aspx","source":"cve@mitre.org"},{"url":"http://hi.baidu.com/azy0922/blog/item/f950cbc2890729130ef47783.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56780","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022630","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9301","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/index.html#09_07_30","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://blogs.technet.com/srd/archive/2009/06/11/latest-baidu-public-posting-requires-adminisrator-to-elevate.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://hi.baidu.com/azy0922/blog/item/f950cbc2890729130ef47783.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/index.html#09_07_30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2654","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page."},{"lang":"es","value":"Firefox de Mozilla anterior a versión 3.0.13, y versiones 3.5.x anteriores a 3.5.2, permite a atacantes remotos falsificar la barra de direcciones y posiblemente realizar ataques de tipo phishing, por medio de una página web diseñada que llama a window.open con un carácter no válido en la URL, hace llamadas de document.write hacia el objeto resultante y luego llama al método stop durante la carga de la página de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"033E4FC0-E968-429E-A684-35D0A54A038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*","matchCriteriaId":"0F72BFD4-000D-4B07-8261-C9F6839AD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.2:beta1:*:*:*:*:*:*","matchCriteriaId":"229E350E-386C-4831-8988-5807A7601EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.2:beta2:*:*:*:*:*:*","matchCriteriaId":"73DA5472-D97C-49F4-8D2D-E2522F59B68D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.2:beta3:*:*:*:*:*:*","matchCriteriaId":"83808B8E-0E9B-4F65-BF45-5FFD62B4F079"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://es.geocities.com/jplopezy/firefoxspoofing.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/56717","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36435","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36670","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1873","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-44.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505242/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505265","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35803","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1022603","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2006","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451898","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/811-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2009/07/28/url-bar-spoofing-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://es.geocities.com/jplopezy/firefoxspoofing.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505242/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securitytracker.com/id?1022603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=451898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/811-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2655","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T14:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second argument of -1."},{"lang":"es","value":"mshtml.dll en Microsoft Internet Explorer v7 y v8 en Windows XP SP3 permite a atacantes remotos provocar una denegación de servicio (finalización de la aplicación) al llamar el método \"findText\" de código JavaScript con una cadena Unicode modificada en el primer argumento, y sólo un argumento adicional, como se ha comprobado con un segundo argumento con valor -1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35799","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52249","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2656","sourceIdentifier":"cve@mitre.org","published":"2009-08-03T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009."},{"lang":"es","value":"Vulnerabilidad sin especificar en el proceso com.android.phone en Android v1.0, v1.1 y v1.5, permite a atacantes remotos provocar una denegación de servicio (desconexión de la red) a través de un mensaje SMS manipulado, como se demostró por Collini Mulliner y Charlie Miller en la BlackHat USA 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0721FD34-5F94-4828-A8AA-EF70FAB71FC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*","matchCriteriaId":"73CA4D29-321A-41ED-A75A-1EBB14A771C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8C354829-6BEB-4C67-972A-60367073753C"}]}]}],"references":[{"url":"http://osvdb.org/56750","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35886","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/56750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2657","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2."},{"lang":"es","value":"nilfs-utils anterior a v2.0.14 instala multiples programas con privilegios setuid innecesarios, lo que permite a usuarios locales ejecutar comandos de su elección mediante la cadena de dispositivo en una opción -c de línea de comandos en mkfs.nilfs2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.13","matchCriteriaId":"0525D730-AA3E-476D-8C4B-06429C2BF656"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3197F3B-BFC1-4E49-93CE-6905F37E5B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"14D3B8DD-4807-4AE4-AF9E-5787ABDA4F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5F3928D-EF65-4AC4-8434-5CD365D26BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B15AA866-D57A-4160-A8A4-484780324708"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"66F8B68C-20DB-47B7-A08D-EE751B3E0014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0457D2C4-1692-4FEA-BCBA-C28ED551E2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4ABDCB1F-ED12-4352-927D-C1FA8F23E654"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"AA43728F-6636-4F00-83E6-E9BDAF37675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6839A468-7AAB-49D3-800E-164026FBC37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E25E1D19-2054-458A-BBD8-AC3A40046ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"9ABD520E-589D-4B0E-8162-62103355DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B65C6883-5251-44C2-B679-82D188BBA098"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"7DC8FF77-9C3F-482F-81D9-BBE4F6E21575"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"8BD4B5E6-71C7-4B13-81CF-A97A8469DE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"51E0B3B0-698E-4043-AB20-4CAC9040E579"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"ACF0A49D-AC5D-4E5D-968D-6ABC9832DA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"E15571B4-6A8F-49EE-BDAA-E00F9BD683F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"C15CA21D-CB9B-4F3F-AB5C-FC202243FDC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"81DD2FBA-834C-4646-95C1-FAF96DBC54C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3E477B65-24C6-4A13-A31F-AB28DA67D64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F4104B28-C1FC-40AB-A56E-7E35A06FB144"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AAD8DC56-05B1-4013-BB88-653EF4845594"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"602DAD58-1B2A-413F-996E-7F6F8259B248"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8B24056A-1D69-4F72-B935-A9C993229B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5F2851A8-46FB-41E2-A814-B791F0DB0407"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C7723F3C-0662-42F3-B867-F2B212B0DE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D8E10C3B-653A-467B-9784-7ACA8221A10F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"72093057-2DD7-415F-9C95-E8AFE76EC14A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilf:nilfs:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"DC8EBF46-845F-4706-87C2-51139CD7D852"}]}]}],"references":[{"url":"http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed","source":"cve@mitre.org"},{"url":"http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15","source":"cve@mitre.org"},{"url":"http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/24/4","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=505374","source":"cve@mitre.org"},{"url":"http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/24/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=505374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2658","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en ZNC anterior a v0.072 permite a atacantes remotos sobrescribir ficheros de su elección a través de una petición DCC SEND manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.044:*:*:*:*:*:*:*","matchCriteriaId":"0C012D55-9039-4D68-9CA0-5624ADEF583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.045:*:*:*:*:*:*:*","matchCriteriaId":"0C185E34-735D-4839-8C05-B46CE7028765"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.047:*:*:*:*:*:*:*","matchCriteriaId":"60AEE9F9-78B7-40B4-B28A-1B8F068CA953"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.052:*:*:*:*:*:*:*","matchCriteriaId":"4AECFB9F-9630-438F-9BE4-E4A44A5023FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.054:*:*:*:*:*:*:*","matchCriteriaId":"CA564C01-2757-479C-9E33-2D7F0890C61C"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.056:*:*:*:*:*:*:*","matchCriteriaId":"1BFE27D3-487B-41A2-A6CE-AA36E07506BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*","matchCriteriaId":"13E7CC41-1923-4295-8AFC-8D295FDD9C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.060:*:*:*:*:*:*:*","matchCriteriaId":"3C2127D9-936F-4E71-BB78-02DE61FF44C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.062:*:*:*:*:*:*:*","matchCriteriaId":"89151E35-63D2-440E-AD2F-A2BAECA6884B"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.064:*:*:*:*:*:*:*","matchCriteriaId":"952BC3B5-4D07-4C61-B3FE-650FBC699B8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.066:*:*:*:*:*:*:*","matchCriteriaId":"9983141A-3B1F-41EE-809A-0F435EC067C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.068:*:*:*:*:*:*:*","matchCriteriaId":"6A505A45-4404-4E0E-97AD-69D9C5D280DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:znc:znc:0.070:*:*:*:*:*:*:*","matchCriteriaId":"8AB8B51F-4FD7-463B-9E8B-6846E7E690A5"}]}]}],"references":[{"url":"http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING","source":"cve@mitre.org"},{"url":"http://en.znc.in/wiki/ChangeLog/0.072","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1848","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/21/5","source":"cve@mitre.org"},{"url":"http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html","source":"cve@mitre.org"},{"url":"http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://en.znc.in/wiki/ChangeLog/0.072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/21/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2659","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected \"static media files,\" which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL."},{"lang":"es","value":"El manejador Admin media en core/servers/basehttp.py en Django 1.0 y 0.96 no mapea de forma adecuada peticiones de URL de tipo \"static media files\", lo que permite a atacantes remotos dirigir ataques de salto de directorio y leer archivos de su elección mediante una URL elaborada para tal fin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:0.96:*:*:*:*:*:*:*","matchCriteriaId":"3F54F75F-B2BC-4A44-B93B-DB75856BEC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:django_project:django:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AFAF388C-FD25-48AB-A957-807BE5AF2ABC"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134","source":"cve@mitre.org"},{"url":"http://code.djangoproject.com/changeset/11353","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36153","source":"cve@mitre.org"},{"url":"http://www.djangoproject.com/weblog/2009/jul/28/security/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/29/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35859","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.djangoproject.com/changeset/11353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.djangoproject.com/weblog/2009/jul/28/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/29/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00069.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2660","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to (1) crafted GIF files (gifread.c) and (2) crafted JPEG files (jpegread.c), a different vulnerability than CVE-2009-2295."},{"lang":"es","value":"Múltiples desbordamientos de enteros en CamlImages v2.2 podría permitir dependiendo del contexto a atacantes ejecutar código de su elección a través de imágenes que contengan valores de ancho y alto grande que provoca un desbordamiento de búfer basado en memoria dinámica, relacionado con (1) ficheros GIF manipulados (gifread.c) y (2) ficheros JPEG manipulados (jpegread.c), una vulnerabilidad diferente que CVE-2009-2295."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jun_furuse:camlimages:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2978CC2-5E05-45A3-AC78-75AE82095A03"}]}]}],"references":[{"url":"ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz","source":"cve@mitre.org"},{"url":"ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.20-8+etch2.diff.gz","source":"cve@mitre.org"},{"url":"ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540146","source":"cve@mitre.org"},{"url":"http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37067","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1857","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1912","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/25/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35999","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/attachment.cgi?id=199108","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=276235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52649","source":"cve@mitre.org"},{"url":"ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.2.0-4+lenny2.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_2.20-8+etch2.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.debian.org/debian/pool/main/c/camlimages/camlimages_3.0.1-3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://camlcvs.inria.fr/cgi-bin/cvsweb.cgi/bazar-ocaml/camlimages/src/jpegread.c.diff?r1=1.3%3Br2=1.4%3Bsortby=date%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/attachment.cgi?id=199108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=276235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2661","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2 before 4.2.17, and 4.3 before 4.3.3 does not properly handle X.509 certificates with crafted Relative Distinguished Names (RDNs), which allows remote attackers to cause a denial of service (pluto IKE daemon crash) via malformed ASN.1 data.  NOTE: this is due to an incomplete fix for CVE-2009-2185."},{"lang":"es","value":"La función asn1_length en strongSwan 2.8 antes de 2.8.11, 4.2 antes de 4.2.17 y 4.3 antes de 4.3.3 no maneja adecuadamente certificados X.509 con Relative Distinguished Names (RDNs) modificados, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio pluto IKE) mediante  datos ASN.1 malformados. NOTA: Esto es debido a una solución incompleta de CVE-2009-2185."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5518A917-D5D1-4985-BF71-B1A34BD3D5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"778D7442-F54A-47DF-B87B-3CFA3CF08799"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"2A4B1F28-B3B8-4E31-8E4E-25F5A29F3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16984E6E-7CA8-4DC3-B800-FFE007617FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4C85F0BE-7E89-4B79-A036-9238785BE705"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8DFF4780-2F92-4DF3-878A-C7E2BD57E39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C794994-9367-4BBB-8940-BBB44B7C1C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"082272D3-0FE4-4959-978A-FFF795B52CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"8DFEF9B3-C7F7-4588-A174-FAFD39C04116"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"8E18EB62-1042-4F26-9EC3-B7EEA2182716"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"97027262-849C-4DE9-90C9-0D9FBBC9F96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8658539D-27D8-47EE-9468-A6B625E6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89ACA351-D10F-4D1A-95B0-4B2E329F1E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7A4D6E89-5313-4016-8A7E-036579330DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C41F9E10-000D-4F3B-BEA6-DEE87405B89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F37DFE8-2996-4904-B733-7BAECA95CB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"38209DC9-3BE6-49EF-8BA1-6E2BC5D24FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.13:*:*:*:*:*:*:*","matchCriteriaId":"155EB8F5-7C3C-4293-91EE-62DA561DA54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"E42B67A3-8650-426F-A8E8-DCA4180D787A"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"21CDA326-C5E4-4BAF-9DC6-4E5A57304C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"7AF119CF-2CC5-4313-8722-06BCE3DC6255"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"384C0CAE-8AC3-47AA-9F1C-9DE6779CA583"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"00BC4DA6-BFD1-43CF-B8B8-DACBF09E4721"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FEDBF811-7E48-4E99-AE05-FFC12AAF1CDF"}]}]}],"references":[{"url":"http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch","source":"cve@mitre.org"},{"url":"http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36922","source":"cve@mitre.org"},{"url":"http://up2date.astaro.com/2009/08/up2date_7505_released.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/27/1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2247","source":"cve@mitre.org"},{"url":"https://lists.strongswan.org/pipermail/announce/2009-July/000056.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.3.x_asn1_length.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.strongswan.org/patches/07_asn1_length_patch/strongswan-4.x.x_asn1_length.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://up2date.astaro.com/2009/08/up2date_7505_released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/27/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.strongswan.org/pipermail/announce/2009-July/000056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2662","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors."},{"lang":"es","value":"El motor de búsqueda en Mozilla Firefox anteriores v3.0.13 , y v3.5.x anteriores v3.5.2, permite a atacantes remotos causar una denegación de servicio (consumo de memoria y caída de aplicación) o probablemente ejecutar código a su elección a través de vectores relacionados con la función TraceRecorder::snapshot en js/src/jstracer.cpp, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.12","matchCriteriaId":"207B1B61-2203-4512-9EFF-5DEE049F73C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36126","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-45.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35927","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502832","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503144","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2663","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file."},{"lang":"es","value":"libvorbis anterior a r16182, usado en  Mozilla Firefox anterior a v3.0.13 y v3.5.x anterior a v3.5.2 y otros productos, permite a atacantes dependientes de contexto, provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución de código de su elección a través de un archivo .ogg manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"033E4FC0-E968-429E-A684-35D0A54A038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36230","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36263","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36463","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-45.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35927","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36018","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2223","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500254","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516259","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52397","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9506","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/825-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00481.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/825-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00481.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2664","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a \"memory safety bug.\" NOTE: this was originally reported as affecting versions before 3.0.13."},{"lang":"es","value":"la función js_watch_set en js/src/jsdbgapi.cpp en el motor JavaScript de Mozilla Firefox anterior a v3.0.13, y v3.5.x anterior a v3.5.2, permite a atacantes remotos provocar una denegación de servicio (fallo de aserción o salida de aplicación) o posiblemente la ejecución de código de su elección a través de un archivo .js manipulado, relacionado con \"bug en la securización de la memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"033E4FC0-E968-429E-A684-35D0A54A038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36126","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-45.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35927","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=501270","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9806","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=501270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2665","sourceIdentifier":"cve@mitre.org","published":"2009-08-04T16:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper."},{"lang":"es","value":"La función nsDocument::SetScriptGlobalObject en content/base/src/nsDocument.cpp en Mozilla Firefox v3.5.x anterior a v3.5.2, cuando ciertos add-ons están activados, no maneja adecuadamente las cabeceras HTTP, lo que permite a atacantes remotos ejecutar JavaScript de su elección con privilegios chrome a través de una página web, relacionado con un paquete (wrapper) de seguridad incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36126","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-46.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35928","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=498897","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-46.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=498897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2666","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"socket.c in fetchmail before 6.3.11 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"socket.c en fetchmail antes de v6.3.11 no maneja correctamente un caracter '\\ 0' en el nombre de dominio en el campo Common Name (CN) de un certificado X.509, lo cual permite a atacacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación (CA) legítima, una cuestión relacionada con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3.10","matchCriteriaId":"21F26EF3-6F31-46C9-9D08-396B3708E498"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*","matchCriteriaId":"74D12B67-6E66-419A-A28F-6306402931EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*","matchCriteriaId":"A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"93D03D78-C56E-4189-97FC-916C918EDFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*","matchCriteriaId":"19A66C77-041F-4A12-8A36-233A6B50641C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C945059C-EF39-486D-A804-FBB8704AB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*","matchCriteriaId":"A91C6418-41F0-46EB-ACFC-FCE907F5AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*","matchCriteriaId":"0C020534-7596-496C-B9B0-739F58F6F4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0A77D40C-6FF5-42BD-9EFB-B532824D7606"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F04C6A76-2718-4DBA-8972-A3EECDDB1A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"38ACD96E-5582-4ED0-BBB1-C891094D8217"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"264386DA-747F-492C-B660-D49BE9DB7139"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC4066AC-BE10-4189-86F6-BF94443738DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1C25A146-50D5-4BA2-ABA2-20BF8784D7DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"72E76256-997F-4229-9B03-7BC3074F359D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7A717C50-2C5A-4CD1-B2E6-8CDF450940CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"61F908FF-9986-4F71-B0B6-D6A86555EF56"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B0C1F99C-A246-40D3-B84A-5D11FF24AC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"028F7F83-AF15-443B-A7DB-4E695E62EAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B418C3CE-E6E6-401D-AD83-5BB181009A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre4:*:*:*:*:*:*","matchCriteriaId":"8BF06FD2-0A4C-4557-B8EF-F0F021179498"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre8:*:*:*:*:*:*","matchCriteriaId":"38C949C2-07A0-4FE4-8FBF-86215CB999CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.6:pre9:*:*:*:*:*:*","matchCriteriaId":"88B23630-79DD-4B69-BB01-286193BA562E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc10:*:*:*:*:*:*","matchCriteriaId":"5FE21564-68C0-4765-BA40-9D3046C4CB14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc3:*:*:*:*:*:*","matchCriteriaId":"208102ED-6F22-44C5-BAF1-FD85EACF208F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc4:*:*:*:*:*:*","matchCriteriaId":"C1CF7767-EB24-44E2-8E59-B4DBC99AFD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc5:*:*:*:*:*:*","matchCriteriaId":"CF3D6D4C-5FD8-4EE1-A34A-99D397F09E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc7:*:*:*:*:*:*","matchCriteriaId":"D63D88C1-B201-4D48-9659-5802DC4FD3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc8:*:*:*:*:*:*","matchCriteriaId":"16463B23-E884-467E-9F63-6B57EED39856"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.2.9:rc9:*:*:*:*:*:*","matchCriteriaId":"9F2C03AF-666D-4AF6-BC69-F8B081EB41AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"84F90AFA-4B13-46A0-89D7-4065300C94C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5DAD0F05-8B55-43ED-89D5-61A19F41EDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"99053698-7F8B-4E71-8647-1A8B0DF7CEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9314F22D-22A8-4374-A2BF-3C64CF1F69BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.4:*:*:*:*:*:*:*","matchCriteriaId":"816E9640-A932-4E2F-9793-689F80D2AA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5D09BB43-6CBA-499B-91D1-BA256A65E40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:*:*:*:*:*:*:*","matchCriteriaId":"ABE76611-08CE-4D85-B57A-021909835A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*","matchCriteriaId":"B98AFEDF-2BAB-4588-94E0-35AEA5F1B514"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*","matchCriteriaId":"4E8BAB5B-4DBC-4D05-B5E2-591573BC05FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3:*:*:*:*:*:*","matchCriteriaId":"02F6E729-A2F2-42AC-A941-F57A0A4E84A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc4:*:*:*:*:*:*","matchCriteriaId":"4143D519-4B49-4E71-8686-FC6A095F0999"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc5:*:*:*:*:*:*","matchCriteriaId":"387ADB82-4FAD-44DA-ABF2-2F4645C4F1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CED4FBCB-B6DF-429D-871D-2A9F7F59E63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.8:*:*:*:*:*:*:*","matchCriteriaId":"237F86BD-82CD-4A37-BF64-F103B1304F0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.9:*:*:*:*:*:*:*","matchCriteriaId":"667847D9-58DD-4693-B544-593AC6D7746D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.3.9:rc2:*:*:*:*:*:*","matchCriteriaId":"12BA2E29-5547-45F5-BC46-1A7B4A222055"}]}]}],"references":[{"url":"http://fetchmail.berlios.de/fetchmail-SA-2009-01.txt","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=124949601207156&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/56855","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36236","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1852","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:201","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505530/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35951","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022679","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.543463","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2155","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11059","source":"cve@mitre.org"},{"url":"http://fetchmail.berlios.de/fetchmail-SA-2009-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=124949601207156&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505530/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.543463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2667","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Tivoli Key Lifecycle Manager (TKLM) 1.0 has unknown impact and attack vectors, related to a \"password security vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en IBM Tivoli Key Lifecycle Manager (TKLM) v1.0 tiene un impacto desconocido y vectores atacados, relacionados con la \"vulnerabilidad de seguridad de contraseñas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tklm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F27DF385-0A36-40A6-A747-31F9F57BF88D"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21395577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35938","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2144","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21395577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2668","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU consumption) via an XML document composed of a long series of start-tags with no corresponding end-tags, a related issue to CVE-2009-1232."},{"lang":"es","value":"Microsoft Internet Explorer v6 hasta v6.0.2900.2180 y v7 hasta v7.0.6000.16473, permite a atacantes remotos causar una denegación de servicio (consumo CPU) a través de un documento XML compuesto de una serie larga de start-targs que no corresponden con end-tags, relacionado con el asunto CVE-2009-1232."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3216/","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3216/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2669","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the (1) _LIB_INIT_DBG and (2) _LIB_INIT_DBG_FILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, related to libC.a (aka the XL C++ runtime library) in AIX 5.3 and libc.a in AIX 6.1."},{"lang":"es","value":"Cierto componente de depuración en IBM AIX v5.3 y v6.1 no proporciona la gestión de los entornos (1) _LIB_INIT_DBG y (2) _LIB_INIT_DBG_FILE, que permite a usuarios locales obtener privilegios utilizando para ello un programa setuid-root para crear un archivo root-owned a su elección con permisos world-writable, relacionados con ibC.a (como la librería XL C++ runtime) en AIX v5.3 y libc.a en AIX v6.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/libC_advisory.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36156","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ54090","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ54091","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ54593","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56203","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56204","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56205","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35934","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2151","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/libC_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ54090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ54091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ54593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ56206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2670","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties."},{"lang":"es","value":"El sistema de audio en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anterior Update v15, y JDK y JRE v5.0 anterior Update v20, no previene el acceso a las propiedades java.lang.System (1) applets and (2)aplicaciones Java Web Start no confiables, permitiendo a atacantes dependientes del contexto obtener información sensible por la lectura de esas propiedades."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"41CE5B2D-5594-4026-BABF-CBE485764D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"DFB84BBA-D93E-4517-BA7A-FCFB860736CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*","matchCriteriaId":"D7680A8A-EC07-4819-A93C-B8EBF8B1199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*","matchCriteriaId":"FA89349B-834C-42D0-84C6-CA73CE1F8B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*","matchCriteriaId":"B7865369-9DE6-4C20-ACD2-CCC14ED54701"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"C150A6B7-9C4C-46E4-99B6-792A0D326E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"57E2C9F7-ACD1-4A89-AB18-ADF595995772"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"89041A24-8354-410B-8026-875CC1791565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*","matchCriteriaId":"2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*","matchCriteriaId":"8BA9E6CD-F43F-487D-9638-406B72D51471"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*","matchCriteriaId":"9D2F4664-E158-45ED-81B6-D8371F1C6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/56788","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263408-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35939","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022658","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52306","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11326","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8022","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263408-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2671","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors."},{"lang":"es","value":"El SOCKS proxy implementado en Java Runtime Environment (JRE) en JDK y JRE v6 anterior Update v15, y JDK y JRE v5.0 anterior Update v20, permite a atacantes remotos descubrir la cuenta de usuario que invoca un (1) applet o (2)aplicación Java Web Start no confiable a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"41CE5B2D-5594-4026-BABF-CBE485764D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"DFB84BBA-D93E-4517-BA7A-FCFB860736CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*","matchCriteriaId":"D7680A8A-EC07-4819-A93C-B8EBF8B1199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*","matchCriteriaId":"FA89349B-834C-42D0-84C6-CA73CE1F8B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*","matchCriteriaId":"B7865369-9DE6-4C20-ACD2-CCC14ED54701"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"C150A6B7-9C4C-46E4-99B6-792A0D326E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"57E2C9F7-ACD1-4A89-AB18-ADF595995772"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"89041A24-8354-410B-8026-875CC1791565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*","matchCriteriaId":"2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*","matchCriteriaId":"8BA9E6CD-F43F-487D-9638-406B72D51471"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*","matchCriteriaId":"9D2F4664-E158-45ED-81B6-D8371F1C6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35943","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022659","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52336","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2672","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors."},{"lang":"es","value":"El mecanismo proxy implementado en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anterior Update v15, y JDK y JRE v5.0 anterior Update v20, no previene el acceso a las cookies del buscador por (1) applets y (2) aplicaciones Java Web Start no confiables, que permiten a atacantes remotos secuestrar las sesiones web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"41CE5B2D-5594-4026-BABF-CBE485764D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"DFB84BBA-D93E-4517-BA7A-FCFB860736CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*","matchCriteriaId":"D7680A8A-EC07-4819-A93C-B8EBF8B1199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*","matchCriteriaId":"FA89349B-834C-42D0-84C6-CA73CE1F8B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*","matchCriteriaId":"B7865369-9DE6-4C20-ACD2-CCC14ED54701"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"C150A6B7-9C4C-46E4-99B6-792A0D326E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"57E2C9F7-ACD1-4A89-AB18-ADF595995772"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"89041A24-8354-410B-8026-875CC1791565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*","matchCriteriaId":"2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*","matchCriteriaId":"8BA9E6CD-F43F-487D-9638-406B72D51471"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*","matchCriteriaId":"9D2F4664-E158-45ED-81B6-D8371F1C6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35943","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022659","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52337","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7723","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9359","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2673","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword."},{"lang":"es","value":"El mecanismo proxy implementado en Sun Java Runtime Environment (JRE) en JDK y JRE v6 anteriores Update v15, y JDK y JRE v5.0 anteriores Update v20, permite a atacantes remotos evitar las restricciones de acceso previstas y conectarse a sitios a su elección a través de vectores no especificados, relacionados con una declaración que carece de clave final."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"41CE5B2D-5594-4026-BABF-CBE485764D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"DFB84BBA-D93E-4517-BA7A-FCFB860736CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*","matchCriteriaId":"D7680A8A-EC07-4819-A93C-B8EBF8B1199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*","matchCriteriaId":"FA89349B-834C-42D0-84C6-CA73CE1F8B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*","matchCriteriaId":"B7865369-9DE6-4C20-ACD2-CCC14ED54701"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"C150A6B7-9C4C-46E4-99B6-792A0D326E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"57E2C9F7-ACD1-4A89-AB18-ADF595995772"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"89041A24-8354-410B-8026-875CC1791565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*","matchCriteriaId":"2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*","matchCriteriaId":"8BA9E6CD-F43F-487D-9638-406B72D51471"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*","matchCriteriaId":"9D2F4664-E158-45ED-81B6-D8371F1C6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/56785","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35943","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022659","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52338","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10263","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8558","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html#150_20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263409-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2674","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de enteros en el archivo javaws.exe en Sun Java Web Start en Sun Java Runtime Environment (JRE) en JDK y JRE versión 6 anterior a Update 15, permite a los atacantes dependiendo del contexto ejecutar código arbitrario por medio de una imagen JPEG creada que no se maneja apropiadamente durante la visualización de una imagen de bienvenida, que desencadena un desbordamiento de búfer basado en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*","matchCriteriaId":"D7680A8A-EC07-4819-A93C-B8EBF8B1199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*","matchCriteriaId":"FA89349B-834C-42D0-84C6-CA73CE1F8B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*","matchCriteriaId":"B7865369-9DE6-4C20-ACD2-CCC14ED54701"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_13:*:*:*:*:*:*","matchCriteriaId":"8614E7A0-091C-4080-89FA-B2C7609B4AD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*","matchCriteriaId":"2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*","matchCriteriaId":"8BA9E6CD-F43F-487D-9638-406B72D51471"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*","matchCriteriaId":"9D2F4664-E158-45ED-81B6-D8371F1C6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_13:*:*:*:*:*:*","matchCriteriaId":"26826BB7-0EF6-439B-87F4-5BCCEA3A8907"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-050/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52339","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263428-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-050/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2675","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression."},{"lang":"es","value":"Un desbordamiento de enteros en la utilidad unpack200 en Sun Java Runtime Environment (JRE) en JDK y JRE versión 6 anterior a Update 15, y JDK y JRE versión  5.0 anterior a Update 20, permite a los atacantes dependiendo del contexto alcanzar privilegios por medio de campos de longitud no especificados en el encabezado de un archivo JAR comprimido de Pack200-, que conlleva a un desbordamiento del búfer en la región heap de la memoria durante la descompresión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"E6AF4AEB-CB27-4AAB-B4A9-CC65EC831D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"6BB00A29-FEBB-4139-9E96-691EC1410EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DD8CC179-F76E-4CC2-9CBD-69CBBA5BD532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C2DC7389-9697-4EF0-9C4E-153731CDD75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"C5F476C8-5466-4E6B-B73B-4ACFBB02AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"D8C7C8C1-AA0D-4BD9-A8EC-85BBE627DE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"BAF0844B-ECB1-4AF0-AA32-1B8789AC5042"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"0EFEB813-B20D-4C8B-922D-0603CB93F72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"41CE5B2D-5594-4026-BABF-CBE485764D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"DFB84BBA-D93E-4517-BA7A-FCFB860736CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"25322D24-C5D9-43A6-87CC-1BF7FA6A3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"400FDCDE-16DE-4BD6-81E2-4A5DA12E99CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"82C49C78-ACE3-407D-AE21-EA180633C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"5F91F8A2-D473-48DC-81DA-21291DE7B6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"3E46B3B4-9E1C-4C87-A4CD-C4CE7FBCA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"0F69C703-8541-4AA8-A66A-0292E0FCB749"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"99E08AB2-49AD-42C6-967F-773F2C6E188A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"9459F130-A3DD-4A4E-9582-4FB82619EB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_10:*:*:*:*:*:*","matchCriteriaId":"D7680A8A-EC07-4819-A93C-B8EBF8B1199F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_11:*:*:*:*:*:*","matchCriteriaId":"FA89349B-834C-42D0-84C6-CA73CE1F8B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_12:*:*:*:*:*:*","matchCriteriaId":"B7865369-9DE6-4C20-ACD2-CCC14ED54701"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*","matchCriteriaId":"67E0818A-3675-4293-89FE-5001E36C0F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*","matchCriteriaId":"95112B98-B6B2-43FA-BF76-F518649CF3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*","matchCriteriaId":"3A18341A-3688-48E7-95AD-283EC9C95B4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*","matchCriteriaId":"E301C59A-47F5-4861-9091-D0002CBA5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*","matchCriteriaId":"BCD4F889-710C-43C5-85DD-70E96F8FE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*","matchCriteriaId":"ED195051-AAC7-4EE1-B936-18D1C8AD2498"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*","matchCriteriaId":"44146DF6-F368-4F17-B379-34194873D80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*","matchCriteriaId":"18B70D77-F631-47D8-95A5-1D3A7E8BF63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_13:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"C150A6B7-9C4C-46E4-99B6-792A0D326E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"2A2379FC-BC33-4C90-97DD-ED3723172008"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"86A1256D-7A34-4FDD-9536-82FD6497A712"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"3BB5E47A-8C17-4995-9EF8-01BFA0B702B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"9300FA38-C234-4BD8-ADB6-D2A29EBA81DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"C87F6EE3-F66B-4F15-89BA-26A4D3AD2556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"56F0F497-6586-408B-80AF-6BC2B9909397"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1E022C6E-20DE-4124-9CA3-11400E13A05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"5A34B1CB-EE08-48BB-BEC1-0720801DA0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"57E2C9F7-ACD1-4A89-AB18-ADF595995772"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"89041A24-8354-410B-8026-875CC1791565"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"D594E269-D722-45FC-B390-B0D38ADEC923"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"3CAA89D6-651A-4B8C-A134-C3A2CB84002A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B930EAFB-F2E6-4FCA-A21B-022656396A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"4B20EB5F-D12A-4267-9887-C39A188EB9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"52347FDC-9983-4A64-8031-B4A50DDC9BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"C95654B3-ACA0-4B0D-9F31-B9C5FB7B9C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"8387A041-582A-4010-9C44-672090F41A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"D1F2D335-CDDF-4D2E-80CA-F1A0AF92501A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*","matchCriteriaId":"0F98D2BD-2AC1-4C4C-8A10-71093DCBC4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_10:*:*:*:*:*:*","matchCriteriaId":"2D6FCAFC-F41C-4C6F-9EA4-46AEFF65CC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_11:*:*:*:*:*:*","matchCriteriaId":"8BA9E6CD-F43F-487D-9638-406B72D51471"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_12:*:*:*:*:*:*","matchCriteriaId":"9D2F4664-E158-45ED-81B6-D8371F1C6B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*","matchCriteriaId":"CDC09958-5286-4C16-AB6F-63B4BDD902B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*","matchCriteriaId":"BDE1E9E9-85EF-4ACA-902B-00225EB4324F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*","matchCriteriaId":"E0CDBFCB-42EA-4F19-A98D-7696B0D526CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*","matchCriteriaId":"53DCFF2A-77A7-41DB-A712-9B6D1FD2574A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*","matchCriteriaId":"82C6F76F-68FD-4794-9182-935D85910C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*","matchCriteriaId":"6314C9DF-9421-445D-ABCC-79EDCED23156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*","matchCriteriaId":"533670FA-B8DC-40B4-ADC1-CCD70E4A43A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*","matchCriteriaId":"119B72FA-8B85-4D1F-8A14-5B07204DAED5"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263488-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-049/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52307","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10840","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8415","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263488-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-049/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2676","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher."},{"lang":"es","value":"Vulnerabilidad no especificada en JNLPAppletlauncher en Sun Java SE, y SE Business, en JDK y JRE 6v Update v14 y anteriores y JDK y JRE v5.0 Update v19 y anteriores; y Java SE para Business de SDK y JRE v1.4.2_21 y anteriores, permiten a atacantes remotos crear o modificar un fichero a su elección a través de un vector relacionado con un applet Java no confiable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:*:*:*:*:*:*:*","matchCriteriaId":"C990DFAD-716E-4404-939B-7F26CC2C945D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update19:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"6762C4F4-E46D-4D28-A9F3-D3B2311D55E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update_14:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"667643D3-A858-40D7-BDA0-E9347BFB37EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update19:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"4291CC33-EC08-4CE0-9BFF-D9B2A3923AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_14:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"13577021-8884-427B-82D3-8D6D236FD62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_21","matchCriteriaId":"0C8B6FC1-2174-4D44-B801-66AA963D4FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"226D142B-934F-4988-8826-64590C90F296"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:*:*:*:*:*:*","matchCriteriaId":"3583521D-5F4F-4F99-BDA4-6C6DF80E5A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:*:*:*:*:*:*","matchCriteriaId":"ED1B607A-3C63-49B2-905D-4A394540C6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:*:*:*:*:*:*","matchCriteriaId":"00762633-7A01-4AA1-943F-5277F4CBA4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:*:*:*:*:*:*","matchCriteriaId":"2A59EFCF-4315-40B9-9C28-5A1A964C16A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"355CB56A-A598-4CD6-9AFB-FE0B09FFC2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update1:*:*:*:*:*:*","matchCriteriaId":"0F9A9879-295F-40DA-B827-72C0AE7B43CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update2:*:*:*:*:*:*","matchCriteriaId":"1E1A84BB-6D97-45FA-839E-67E36AFFAC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:*:*:*:*:*:*","matchCriteriaId":"58FC43CA-1F08-4A4B-838B-840838BC67FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update4:*:*:*:*:*:*","matchCriteriaId":"14037C2F-DDB4-4F9B-8A53-045AED23905A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update5:*:*:*:*:*:*","matchCriteriaId":"828F9F36-52A8-406E-97FD-50BE92892014"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update6:*:*:*:*:*:*","matchCriteriaId":"09867873-957A-4E08-879E-B575C4C80232"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update7:*:*:*:*:*:*","matchCriteriaId":"07C150C2-18D6-45C1-AF21-527923C45CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update16:*:*:*:*:*:*","matchCriteriaId":"9AC35937-880F-4B3B-807C-CFED4C399A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update17:*:*:*:*:*:*","matchCriteriaId":"4DD0DFD8-0352-487B-AD0E-5BFD557F964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update18:*:*:*:*:*:*","matchCriteriaId":"E4EE1DD5-9DB3-45EC-8821-23C52D55EFA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update19:*:*:*:*:*:*","matchCriteriaId":"69F872C7-9B0F-4C7B-928D-C652F56582A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update20:*:*:*:*:*:*","matchCriteriaId":"70B228DF-EE93-45D8-B2B9-71566BE7D1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2_21","matchCriteriaId":"857940E4-5457-46A8-9D9A-1C9ED025318B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"25336CDC-E592-4022-A87A-364B24D13485"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_01:*:*:*:*:*:*:*","matchCriteriaId":"DBDA2169-B799-4F71-AE26-0508B918E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_02:*:*:*:*:*:*:*","matchCriteriaId":"D8F7E8AA-6CDD-4412-8530-AF7CAB8CA863"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_03:*:*:*:*:*:*:*","matchCriteriaId":"57859E96-91C9-483F-8C4B-E7AD574818B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.0_04:*:*:*:*:*:*:*","matchCriteriaId":"069362D3-2C20-4685-AC2F-AA9E752D0C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1ED545E2-AE1C-45A1-8DF0-9674EF5295BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_01:*:*:*:*:*:*:*","matchCriteriaId":"8F1BCD7F-751C-405D-BD82-7ACE1A9ED5B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_02:*:*:*:*:*:*:*","matchCriteriaId":"9D5861D4-2E57-4FA0-A786-000BD67FA23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_03:*:*:*:*:*:*:*","matchCriteriaId":"AE6C0900-9F2F-47DF-9504-0FABBDF2069D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_04:*:*:*:*:*:*:*","matchCriteriaId":"1B234F24-9C83-4E02-9009-8EF3CAEF681D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_05:*:*:*:*:*:*:*","matchCriteriaId":"C6080B96-4A1F-47B2-8DD6-43D890136030"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_06:*:*:*:*:*:*:*","matchCriteriaId":"559E35CF-0A08-40B6-A8BB-E4F970E6C534"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F09AA185-F09D-4D57-9AA7-61C0F0CF9050"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/56789","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36248","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35946","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022657","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8453","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125787273209737&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263490-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2677","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en HP Insight Control Suite para Linux (también conocido como ICE-LX) anteriores a v2.11, permite a atacantes remotos secuestrar la autenticación de los usuarios no especificados a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:insight_control_suite_for_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10","matchCriteriaId":"14080634-7128-462D-8F46-51BC0126479C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2678","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Open System Services (OSS) Name Server en HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08 y J06.03, permite a atacantes remotos obtener información sensible mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.27:*:*:*:*:*:*:*","matchCriteriaId":"CE7ED9C4-C4D1-4858-9072-BE5BAF65BB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.28:*:*:*:*:*:*:*","matchCriteriaId":"6365AB70-867A-419F-87E5-7DBA117FC526"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.29:*:*:*:*:*:*:*","matchCriteriaId":"2679A2AD-24FB-4D32-AA9F-E928AF7EEC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.30:*:*:*:*:*:*:*","matchCriteriaId":"BFC5241A-CCC5-455D-B7D0-FE9699DF9C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:h06.06:*:*:*:*:*:*:*","matchCriteriaId":"BF9EB949-CEC2-4610-9A8B-7FB7E7007081"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:h06.07:*:*:*:*:*:*:*","matchCriteriaId":"CDB97AE7-7247-41B2-900C-BA5EF76C5FB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:h06.08:*:*:*:*:*:*:*","matchCriteriaId":"F765F223-DEF5-424E-9102-056159794B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.03:*:*:*:*:*:*:*","matchCriteriaId":"C5E6C005-79D0-4CBF-BFF6-5E23A2DAED6E"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01845977","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01845977","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023159","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36981","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54214","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01845977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01845977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2679","sourceIdentifier":"cve@mitre.org","published":"2009-10-05T18:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no esperada en bootpd en HP HP-UX vB.11.11, vB.11.23, y vB.11.31 permite a atacantes remotos causar una denegación de servicio a través de vectores no conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01866324","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01866324","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36395","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5780","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01866324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01866324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2680","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en la Interfaz de Administración Remota (RMI) para MSL Tape Libraries and 1/8 G2 Tape Autoloaders en StorageWorks 1/8 G2 Tape Autoloader versión de firmware 2.30 y anteriores, Tape Library MSL2024 versión de firmware 4.20 y anteriores, MSL4048 Tape Library versión de firmware 6.50 y anteriores, y MSL8096 Tape Library versión de firmware 8.90 y anteriores, de HP, permite a los atacantes remotos causar una denegación de servicio por medio de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":7.8,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:storageworks_1\\/8_g2_tape_autoloader:*:*:*:*:*:*:*:*","versionEndIncluding":"2.30","matchCriteriaId":"72CAE62D-B7B1-4DC7-AD10-18B27E68BF9C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:storageworks_msl2024_tape_library:*:*:*:*:*:*:*:*","versionEndIncluding":"4.20","matchCriteriaId":"5BC0783B-0D2A-4BEA-8AC2-D0E23A84A961"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:storageworks_msl4048_tape_library:*:*:*:*:*:*:*:*","versionEndIncluding":"6.50","matchCriteriaId":"B13322F0-91CD-4CC3-A1A7-95E8313679A9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:storageworks_msl8096_tape_library:*:*:*:*:*:*:*:*","versionEndIncluding":"8.90","matchCriteriaId":"5C06FCD7-20FE-423E-83AD-2F36FF1BEEF2"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022905","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58131","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36388","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53237","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2681","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en HP ProCurve Identity Driven Manager (IDM) vA.02.x hasta vA.02.03 y vA.03.x thasta vA.03.00, en Windows Server 2003 con IAS y Windows Server 2008 con NPS, permite a usuarios locales obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_identity_driven_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"a.02.03","matchCriteriaId":"DE902038-73BC-4C6F-8181-71A7EC6B82EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:procurve_identity_driven_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"a.03.00","matchCriteriaId":"F13F4001-1A2C-433C-AE46-FE6EA1A87984"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022915","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36462","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2707","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2682","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en control de acceso basado en rol (RBAC) en HP HP-UX vB.11.23 y vB.11.31 permite a los usuarios locales intenta evitar restricciones de acceso a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*","matchCriteriaId":"B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125364434020838&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=125364434020838&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36850","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36476","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53411","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6328","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125364434020838&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=125364434020838&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2683","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.2.6 allows remote authenticated users to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo Sender en HP Remote Graphics Software (RGS) v5.1.3 hasta v5.2.6 permite a usuarios autenticados remotamente ejecutar código de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1BD9C41B-6E00-4CF8-B4FC-EBE5293E5F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A1406753-ECC8-4556-AE82-C86D3B58F8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F89D247E-366C-4E94-BA90-B5EF22EB0545"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8895029D-B8E9-4FA6-915E-CC5C28379ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F8272BD-8CF1-4105-80A1-DDBF5E23F6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:remote_graphics_software:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DBAA7B98-509F-4353-AD35-E65D6F42B2B7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506783/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506783/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506783/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506783/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2684","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Jetdirect y Embedded Web Server (EWS) sobre ciertas HP LaserJet e impresoras Color LaserJet, y HP Digital Senders, permiten a atacantes remotos inyectar código web o HTML a su elección a través de (1) Product_URL o (2)parámetro Tech_URL en una acción Apply en el código support_param.html/config."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:cm8050_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"009EBEE6-1863-4E6B-BB73-8FB1168AD164"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:cm8060_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"BDC795DF-7811-461F-8F50-60E00C8EBD69"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_3000n:*:*:*:*:*:*:*:*","matchCriteriaId":"2916ED3C-57AF-4DE9-9329-DDA66AD983AF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_3600n:*:*:*:*:*:*:*:*","matchCriteriaId":"D0714BB6-5CB9-42FD-B534-A7BF74F83EF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_3800n:*:*:*:*:*:*:*:*","matchCriteriaId":"388C4301-9BC1-43EB-8C8F-862D5D5916A5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4700n:*:*:*:*:*:*:*:*","matchCriteriaId":"CD166E1F-3A57-4293-AF22-373FB2784FDC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4730_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"12F0604C-781B-4E69-A88E-C25492CB163C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_6040_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"8EDAC0E8-889C-4E76-AC6C-B9A6B0D792FC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_cm4730_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"E646E2D7-7C65-4A6F-8B51-A6119B512837"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_cp3505:*:*:*:*:*:*:*:*","matchCriteriaId":"B67E71C7-6B28-4326-AFC9-8CA09532C286"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_cp4005n:*:*:*:*:*:*:*:*","matchCriteriaId":"5EF8ACEA-FB3F-40EA-81C6-29EF9FCFB302"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_cp6015:*:*:*:*:*:*:*:*","matchCriteriaId":"5994179E-E492-45D8-95F8-790160D9A0BF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:ds_9200c:*:*:*:*:*:*:*:*","matchCriteriaId":"341EE50F-0CD3-401A-B429-3B2EFE285036"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:ds_9250c:*:*:*:*:*:*:*:*","matchCriteriaId":"AA39BF1D-283E-4049-91C9-B93C93432DA4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2410:*:*:*:*:*:*:*:*","matchCriteriaId":"92DD1DA2-7210-4A7E-BD37-5365935C7BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2420:*:*:*:*:*:*:*:*","matchCriteriaId":"2505387C-7739-4EFE-8973-459412727674"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2430n:*:*:*:*:*:*:*:*","matchCriteriaId":"7D6F7DE2-1A67-4389-99A9-C6796025E000"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4240:*:*:*:*:*:*:*:*","matchCriteriaId":"23DD9E6F-1F64-4643-B8E5-B3CAB5F961B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4250n:*:*:*:*:*:*:*:*","matchCriteriaId":"CF512AA5-F72B-470F-BA53-8EC6851F2F34"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4345_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"9ADF801E-6D02-4CDF-AA6F-9F272D341E1C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4350n:*:*:*:*:*:*:*:*","matchCriteriaId":"5ED3264A-7745-4BB7-9D1B-F7D9560788D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_5200n:*:*:*:*:*:*:*:*","matchCriteriaId":"3DFA350C-6631-4474-8FFD-D439234D2D1F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"F5352B3B-71D5-464E-B124-6FFC41F41B32"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040n:*:*:*:*:*:*:*:*","matchCriteriaId":"87632290-99A8-4E9F-9FA5-F497DE690837"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"9FDA57B8-2AD5-45EF-9824-E60EBFF71D86"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050n:*:*:*:*:*:*:*:*","matchCriteriaId":"38237939-9DE0-4CDE-916B-E0F822975773"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m3027_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CE95CC32-07DA-473D-BDAC-347B137E582A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m3035_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"CEC3DE1F-AA79-4FE8-B634-368BDF14C0B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m4345x_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"C7995CEA-25BF-45A1-B166-B4A962FCB5CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m5025_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"55C69873-A989-4B66-8D28-67A260EC7A4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m9040_mpf:*:*:*:*:*:*:*:*","matchCriteriaId":"6C793A8D-5C58-481A-A253-4704A7EE29CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_m9050_mpf:*:*:*:*:*:*:*:*","matchCriteriaId":"2E6F181F-3AB7-409D-B32F-8B09B6DDA110"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p3005n:*:*:*:*:*:*:*:*","matchCriteriaId":"88D04BDC-9273-4A09-BED4-18E44E99EBCF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4014:*:*:*:*:*:*:*:*","matchCriteriaId":"222D062D-1F47-4E21-9173-A5AFEEF66482"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_p4515:*:*:*:*:*:*:*:*","matchCriteriaId":"9A71AB74-7F6B-4B0F-8C52-F12187A6788A"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=125493484205823&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125493484205823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507038/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36613","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53677","source":"cve@mitre.org"},{"url":"http://dsecrg.com/pages/vul/show.php?id=148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=125493484205823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125493484205823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507038/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2685","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el formulario de login en el servidor de gestión web en HP Power Manager permite a atacantes remotos ejecutar código de su elección mediante la variable \"Login\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"F088CA39-C40B-4C1A-9009-23B3AFF0CC07"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125744000032141&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125744000032141&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37276","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023140","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59684","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507708/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36933","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-081/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125744000032141&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125744000032141&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507708/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-081/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2686","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain \"access to data\" via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en HP NonStop G06.12.00 a la G06.32.00, H06.08.00 a la H06.18.01, y J06.04.00 a la J06.07.01, permite a usuarios locales elevar sus privilegios, provocar una denegación de servicio u obtener \"acceso a los datos\" a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.04.00:*:*:*:*:*:*:*","matchCriteriaId":"777E3963-AA70-428E-B44E-B046664DF7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.04.01:*:*:*:*:*:*:*","matchCriteriaId":"305CE53C-C23E-410A-B93B-7B2A0CC71E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.04.02:*:*:*:*:*:*:*","matchCriteriaId":"11328F33-418F-47DE-9A6F-52A6E9087D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.07.01:*:*:*:*:*:*:*","matchCriteriaId":"DF76B5B1-9E36-4259-B098-5CC61A072D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.08.00:*:*:*:*:*:*:*","matchCriteriaId":"A74FC20E-6E72-44F5-B318-49A2B60B6E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.12.00:*:*:*:*:*:*:*","matchCriteriaId":"EDBCA58B-A4E1-4C55-81CA-7EAB66E5A9D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.13.00:*:*:*:*:*:*:*","matchCriteriaId":"50E432BF-370F-49EC-B60C-6FA65BFFC937"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.14.00:*:*:*:*:*:*:*","matchCriteriaId":"682FBD1A-48B9-4A0C-A9C7-305CAAB2957B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.15.00:*:*:*:*:*:*:*","matchCriteriaId":"5AC745DF-3718-4BC0-801A-7703DE86D0E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.15.01:*:*:*:*:*:*:*","matchCriteriaId":"16F774B3-201E-4972-ACFA-532751E3F9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.15.02:*:*:*:*:*:*:*","matchCriteriaId":"6301FFE8-8948-449A-9B6F-02A9FBDEA550"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.16.00:*:*:*:*:*:*:*","matchCriteriaId":"2D861732-8BF4-4C0E-A43B-3A64262C5D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.16.01:*:*:*:*:*:*:*","matchCriteriaId":"EC0F397E-059D-4D8A-8E2F-A7ED882E5FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.17.00:*:*:*:*:*:*:*","matchCriteriaId":"FC8DFF89-A373-478C-A903-563FEB08913F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.17.01:*:*:*:*:*:*:*","matchCriteriaId":"E787E498-E57F-4625-B41C-738960AF8DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.18.00:*:*:*:*:*:*:*","matchCriteriaId":"91A203CA-E342-4213-B01B-6625FE84425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.18.01:*:*:*:*:*:*:*","matchCriteriaId":"631CED12-923D-4A17-BEC0-3B72744AEF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.27:*:*:*:*:*:*:*","matchCriteriaId":"CE7ED9C4-C4D1-4858-9072-BE5BAF65BB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.28:*:*:*:*:*:*:*","matchCriteriaId":"6365AB70-867A-419F-87E5-7DBA117FC526"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.29:*:*:*:*:*:*:*","matchCriteriaId":"2679A2AD-24FB-4D32-AA9F-E928AF7EEC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:g06.30:*:*:*:*:*:*:*","matchCriteriaId":"BFC5241A-CCC5-455D-B7D0-FE9699DF9C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.05.00:*:*:*:*:*:*:*","matchCriteriaId":"4E45207B-C380-47B8-BE1F-BDBBE85D340F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.05.01:*:*:*:*:*:*:*","matchCriteriaId":"0A6872F8-C635-4513-A77D-8D7F0B18838E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.06.00:*:*:*:*:*:*:*","matchCriteriaId":"FA1C6D32-31F5-41EB-AA36-138516DA8177"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.06.01:*:*:*:*:*:*:*","matchCriteriaId":"57CA3B9F-99AB-4E83-8085-61F6429A71F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.06.02:*:*:*:*:*:*:*","matchCriteriaId":"C0DD6F38-F6C3-4B91-90DD-59B900C3A63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:nonstop_server:j06.07.00:*:*:*:*:*:*:*","matchCriteriaId":"65DA9F4C-3C9D-45EB-9BE8-245E0B7F57DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:nonstop_server:g06.29:*:*:*:*:*:*:*","matchCriteriaId":"7A2C1609-CA8B-4C2F-8CAD-AD7A59A5FF1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37560","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01923646","source":"cve@mitre.org"},{"url":"https://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01923646","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01923646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01923646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2687","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353."},{"lang":"es","value":"La función exif_read_data en el módulo Exif en PHP anteriores v5.2.10 permite a atacantes remotos causar una denegación de servicio (caída) a través de una imagen JPEG mal formada con campos inválidos en offset, siendo un asunto diferente a CVE-2005-3353."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed in php packages shipped in Red Hat Enterprise Linux 3, 4 and 5 via: https://rhn.redhat.com/errata/RHSA-2010-0040.html","lastModified":"2010-01-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.10","matchCriteriaId":"7DC23924-B7B6-4231-81A4-563CAB8CF621"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=48378","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/55222","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35441","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36462","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37482","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40262","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:145","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:167","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.php.net/releases/5_2_10.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35440","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1632","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51253","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10695","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6655","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/824-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.php.net/bug.php?id=48378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/55222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.php.net/releases/5_2_10.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/824-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2688","sourceIdentifier":"cve@mitre.org","published":"2009-08-05T19:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) the tiff_instantiate function processing a crafted TIFF file, (2) the png_instantiate function processing a crafted PNG file, and (3) the jpeg_instantiate function processing a crafted JPEG file, all which trigger a heap-based buffer overflow.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples desbordamientos de enteros en glyphs-eimage.c en XEmacs v21.4.22, cuando corre en Windows, permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código a su elección a través (1) la función tiff_instantiate produciendo un fichero TIFF manipulado, (2) la función png_instantiate produciendo un fichero PNG manipulado, y (3) la función jpeg_instantiate produciendo un fichero JPEG manipulado, todas provocan un desbordamiento de búfer basado en memoria dinámica. NOTA: el origen de esta información es desconocido; Los detalles han sido obtenidos a partir de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-2688\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/\n","lastModified":"2009-08-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xemacs:xemacs:21.4.22:*:*:*:*:*:*:*","matchCriteriaId":"246EDF0B-B3C0-489A-AD11-1FAC352F6694"}]}]}],"references":[{"url":"http://osvdb.org/55298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35348","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tracker.xemacs.org/XEmacs/its/issue534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35473","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1666","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=275397","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511994","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51334","source":"cve@mitre.org"},{"url":"http://osvdb.org/55298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tracker.xemacs.org/XEmacs/its/issue534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=275397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2689","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application."},{"lang":"es","value":"JDK13Services.getProviders en Sun Java SE v5.0 anteriores a Update 20 y v6 anteriores a Update 15, y en OpenJDK, proporciona privilegios completos a instancias de tipos de objeto no especificadas, permitiendo a atacantes dependientes del contexto saltar las restricciones de acceso previstas mediante (1)un applet o (2) una aplicación no confiables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:20:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"625B941A-B638-46C2-A840-83724D5F826B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513222","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9603","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1199.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2690","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application."},{"lang":"es","value":"The codificador en Sun Java SE v6 anteriores a Update 15, y OpenJDK, permite acceso de lectura a variables privadas con nombres no especificados, permitiendo a atacantes dependientes del contexto obtener información sensible mediante (1) un applet o (2) una aplicación no confiables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513223","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9443","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2691","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition."},{"lang":"es","value":"La función mm_for_maps en fs/proc/base.c en el kernel Linux v2.6.30.4 y anteriores permiten a usuarios locales leer (1) mapas y (2) ficheros smaps bajo proc/ a través de vectores relativos a la carga ELF, un proceso setuid, y condición de carrera."}],"vendorComments":[{"organization":"Red Hat","comment":"The Red Hat Security Response Team has rated this issue as having moderate security impact.\n\nWe currently have no plans to fix this flaw in Red Hat Enterprise Linux 3, 4, and 5 as it is not possible to trigger the information leak if the suid_dumpable tunable is set to zero (which is the default).\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1540.html","lastModified":"2009-11-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.30.4","matchCriteriaId":"63524387-5057-465B-AC04-C7C5CAEAE73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/6/23/652","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/6/23/653","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=linux-kernel&m=124718946021193","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=linux-kernel&m=124718949821250","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36501","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/11/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36019","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2246","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516171","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52401","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/6/23/652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/6/23/653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=linux-kernel&m=124718946021193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=linux-kernel&m=124718949821250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2692","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket."},{"lang":"es","value":"El kernel de Linux versiones 2.6.0 hasta 2.6.30.4 y 2.4.4 hasta 2.4.37.4, no inicia todos los punteros de función para operaciones de socket en estructuras de proto_ops, lo que permite a los usuarios locales activar una desreferencia de puntero NULL y alcanzar privilegios mediante el uso de mmap que asigna la página cero, inserta el código arbitrario en esta página y luego invoca una operación no disponible, como es demostrado por la operación de sendpage (función sock_sendpage) en un socket PF_PPPOX."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue. Please see http://kbase.redhat.com/faq/docs/DOC-18065.\n\nUpdates for Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG to correct this issue are available: https://rhn.redhat.com/cve/CVE-2009-2692.html","lastModified":"2009-09-14T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.4","versionEndExcluding":"2.4.37.5","matchCriteriaId":"5960758C-4449-4D23-9EA6-92FB031C3725"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.30.5","matchCriteriaId":"39A91A11-DDAB-4C83-90A4-CFFC7652955E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_real_time:10:*:*:*:*:*:*:*","matchCriteriaId":"AA6CB9DA-D313-4CE9-BB48-6C399156311C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*","matchCriteriaId":"7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"941713DB-B1DE-4953-9A9C-174EAFDCB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F87B994-28E4-4095-8770-6433DE9C93AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://grsecurity.net/~spender/wunderbar_emporium.tgz","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1222.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1223.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36278","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36289","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36327","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36430","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37298","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100067254","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/19933","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9477","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:233","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/14/1","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1233.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/505751/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505912/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36038","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2272","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://zenthought.org/content/file/android-root-2009-08-16-source","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516949","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://issues.rpath.com/browse/RPL-3103","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11526","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11591","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8657","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://grsecurity.net/~spender/wunderbar_emporium.tgz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100067254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/19933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/14/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1233.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/505751/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/505912/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://zenthought.org/content/file/android-root-2009-08-16-source","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://issues.rpath.com/browse/RPL-3103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2694","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:02:41.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376."},{"lang":"es","value":"La función msn_slplink_process_msg en libpurple/protocols/msn/slplink.c en libpurple, tal como se usa en Pidgin (anteriormente Gaim) en versiones anteriores a la 2.5.9 y Adium 1.3.5 y versiones anteriores, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) mediante el envío de múltiples mensajes SLP (alias MSNSLP) manipulados para disparar una sobreescritura de una zona de memoria de su elección. NOTA: esta vulnerabilidad reportada está causada por una reparación incompleta de CVE-2009-1376."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"01CB5803-0C03-4EC5-B865-8760B1231267"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"45233B3A-A3A1-45C0-A9F4-548B076742F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6B5D964-9F9C-4EE0-AF9F-4FE64935D8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5FAFC986-0E07-48D7-9B67-66B65CAA9AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFA83F88-808F-4D8B-A33D-16994C9074A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3779F8B3-15A9-4FBC-9176-B9B3CAB39DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D2A75801-F3AD-49E5-B981-6158E9B8F598"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.8","matchCriteriaId":"7396CE73-35C6-4F72-8F1F-16D8B7E0C029"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C80012AD-8F49-4287-8AEC-C21AC5774CA9"}]}]}],"references":[{"url":"http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://developer.pidgin.im/wiki/ChangeLog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36384","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36401","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36402","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36708","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37071","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/libpurple-arbitrary-write","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1870","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.exploit-db.com/exploits/9615","source":"cve@mitre.org"},{"url":"http://www.pidgin.im/news/security/?id=34","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2663","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514957","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1218.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/info/6f7343166c673bf0496ecb1afec9b633c1d54a0e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://developer.pidgin.im/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/libpurple-arbitrary-write","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2009/dsa-1870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.exploit-db.com/exploits/9615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=34","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2695","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs."},{"lang":"es","value":"El kernel de Linux antes de v2.6.31-rc7 no previene debidamente las operaciones nmap que apuntan a una pagina cero y otras direcciones de memoria bajas, lo que permite a usuarios locales obtener privilegios mediante la explotación de vulnerabilidades de desreferencia a puntero NULL, relacionados con (1) la configuración por defecto del boolano allow_unconfined_mmap_low en SELinux en Red Hat Enterprise Linux (RHEL) 5, (2) un error que provoca allow_unconfined_mmap_low para ser ignorado en el dominio unconfined_t, (3) la falta de un requisito de la capacidad CAP_SYS_RAWIO para estas nmap operaciones, y (4) la interacción entre el mecanismo de protección mmap_min_addr y algunos programas de aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"5336FAF2-3F84-409F-8DDB-F228ED22ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"}]}]}],"references":[{"url":"http://danwalsh.livejournal.com/30084.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://eparis.livejournal.com/606.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9e","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90a","source":"cve@mitre.org"},{"url":"http://kbase.redhat.com/faq/docs/DOC-18042","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/36539/","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/36540/","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/36649/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://patchwork.kernel.org/patch/36650/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38834","source":"cve@mitre.org"},{"url":"http://thread.gmane.org/gmane.linux.kernel.lsm/9075","source":"cve@mitre.org"},{"url":"http://twitter.com/spendergrsec/statuses/3303390960","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/17/4","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1672.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36051","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511143","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517830","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"cve@mitre.org"},{"url":"http://danwalsh.livejournal.com/30084.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://eparis.livejournal.com/606.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=47d439e9fb8a81a90022cfa785bf1c36c4e2aff6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=7c73875e7dda627040b12c19b01db634fa7f0fd1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=84336d1a77ccd2c06a730ddd38e695c2324a7386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/jmorris/security-testing-2.6.git%3Ba=commit%3Bh=a2551df7ec568d87793d2eea4ca744e86318f205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d9959734a1949ea4f2427bd2d8b21ede6b2441c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=788084aba2ab7348257597496befcbccabdc98a3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8cf948e744e0218af604c32edecde10006dc8e9e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c0d90103c7e0eb6e638e5b649e9f6d8d9c1b4b3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ab5a91a8364c3d6fc617abc47cc81d162c01d90a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kbase.redhat.com/faq/docs/DOC-18042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/36539/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/36540/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/36649/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://patchwork.kernel.org/patch/36650/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://thread.gmane.org/gmane.linux.kernel.lsm/9075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/3303390960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/17/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1672.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2697","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079."},{"lang":"es","value":"Red Hat build script para GNOME Display Manager (GDM) anterior a v2.16.0-56 en Red Hat Enterprise Linux (RHEL) v5 no da soporte a TCP Wrapper, lo que podría permitir a atacantes remotos saltar las restricciones de acceso previstas a través de conexiones XDMCP, una vulnerabilidad diferente que CVE-2007-5079."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:*:*:*:*:*:*:*:*","versionEndIncluding":"2.16","matchCriteriaId":"CD13F270-B165-47B7-BBA3-6D1EF33AD277"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:0.7:*:*:*:*:*:*:*","matchCriteriaId":"501714EA-1C5D-4EA7-B069-8E6521574AC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E2D650E6-F568-4B7F-8913-3DC10E8F4201"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3296F925-6D41-4DA7-BDB2-3B04CF22A53B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7960EC63-69CF-474C-996C-E431CCDD07E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A38317A3-3725-4F32-B675-00F8FB288F51"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C4F01AD1-EB1B-4932-B8D7-CBC899B1A02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.5:*:*:*:*:*:*:*","matchCriteriaId":"B760EB2A-6461-477F-B7E5-857117E21AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.6:*:*:*:*:*:*:*","matchCriteriaId":"973BF2BF-BBF7-41F6-9E38-5150BC8AE7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.8:*:*:*:*:*:*:*","matchCriteriaId":"7756E66E-2296-4B20-ABC0-B1A2ACF2657B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.13:*:*:*:*:*:*:*","matchCriteriaId":"BC30F499-35B6-40BB-A420-A55F6993DF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*","matchCriteriaId":"70640B9F-4EAA-4513-80E4-9DD4A862F27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.15:*:*:*:*:*:*:*","matchCriteriaId":"27A6CC80-BC52-4B39-9424-E96DDA03666E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/36553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36219","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=239818","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1364.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=239818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1364.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2698","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket."},{"lang":"es","value":"La función udp_sendmsg en la implementación UDP en los archivos (1) net/ipv4/udp.c y (2) net/ipv6/udp.c en el kernel de Linux anterior a versión 2.6.19,  permite a los usuarios locales obtener privilegios o causar una denegación de servicio (Desreferencia de puntero NULL y bloqueo de sistema) por medio de vectores que involucran el flag MSG_MORE y un socket UDP."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG. Updates for Red Hat Enterprise Linux 3, 4 and 5 to correct this issue are available: https://rhn.redhat.com/cve/CVE-2009-2698.html","lastModified":"2009-09-14T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.19","matchCriteriaId":"B46C2EC7-EC2C-45D6-A7F2-CED2C433271E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*","matchCriteriaId":"7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"941713DB-B1DE-4953-9A9C-174EAFDCB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F87B994-28E4-4095-8770-6433DE9C93AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*","matchCriteriaId":"D467EE9D-6A1F-4462-9BDA-C68B7EE375E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*","matchCriteriaId":"13771B15-CD71-472A-BE56-718B87D5825D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1222.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1223.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23073","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36430","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36510","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37298","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100067254","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/25/1","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1233.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36108","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022761","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518034","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100067254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/25/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1233.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2699","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs."},{"lang":"es","value":"La opción pollset de Solaris en el backend Event Port en poll/unix/port.c en la librería Apache Portable Runtime (APR) anterior v1.3.9, como los usados en Apache HTTP Server atenrior v2.2.14 y otros productos, no manejan adecuadamente los errores, lo que permite a atacantes remotos causar una denegación de servicio (bloqueo del demonio) a través de peticiones HTTP no especificadas, relativas el prefork y eventos MPMs. \r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"This flaw does not affect the version of APR shipped in Red Hat Enterprise Linux.\n\nThis flaw affected JBoss Enterprise Web Server running on the Solaris platform. Updated httpd packages are available for download from Customer Support Portal: https://support.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&amp;downloadType=securityPatches&amp;version=1.0.0","lastModified":"2010-02-23T00:00:00.000"},{"organization":"Apache","comment":"Clarification 1: This issue only affects Solaris 10 and OpenSolaris.  Other versions of Solaris and non-Solaris platforms are not affected.\n\n\nClarification 2: This issue only affects 2.2.x versions of Apache HTTP Server, APR 1.1 through 1.3.8.  APR 0.9.x is not affected.","lastModified":"2010-01-21T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.14","matchCriteriaId":"2979A101-9EC8-4E80-BFFC-7300F94C8453"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.9","matchCriteriaId":"E81FA406-E93A-467B-9822-D9BE0BC73573"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022988","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.2.14","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36596","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53666","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=47645","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.2.14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=47645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]}]}},{"cve":{"id":"CVE-2009-2700","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"src/network/ssl/qsslcertificate.cpp en Nokia Trolltech Qt v4.x no gestiona adecuadamente el carácter '\\0'en un nombre de dominio en el campo Subject Alternative Name field de un certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación legítima, una cuestión relacionada con CVE-2009-2408."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of qt and qt4 as shipped with Red Hat Enterprise Linux 3, 4, or 5.  Affected code was introduced upstream in version 4.3.","lastModified":"2009-09-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C966DAAB-74E1-4594-9CE7-5A1A60F5061E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D51BFA7D-281E-49ED-9A4B-60AD5143C4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A38B91E-698F-4638-BC3B-BD02F3313B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7629BAB0-5077-4B82-9F11-B228E8EAFA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"76366D45-3604-49D1-BD97-8A9FACEA2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EEEF60A1-5FF0-465F-A872-62F80899F870"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D5386EE-376B-4773-8687-5314BFF35E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4ACE447E-BFBC-4059-9786-F8E5F512AEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E3AC6465-B459-410E-A5C5-EBFF5C866009"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EF48233D-EFFE-40A1-B50A-F2184D9CF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"610017B4-3C0A-4A59-82A1-4E20BCF786E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D848BD49-3C88-4458-B8AB-AAD8DEB790BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A12D978-B6FF-4C67-97D4-91A285C47813"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7DBD073E-F3E0-4273-81E9-AF010B711F08"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0D58ACBA-7DF3-403A-AC0E-94749383C750"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"59D6E752-3B2E-4A95-A76A-3326CD490EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"7A27E4EC-9573-4C82-9B78-244DB0B06FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"678A25E8-57E3-4E0C-9B24-C68F11F108BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"D16BB8CE-3871-4DFA-84BB-C089894437D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"965B37FD-E22F-4AA7-BDC2-147A9962CFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FEE12FD7-2FB2-444A-A660-86294646F8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA4B9F55-4BFF-4FD3-A8BC-842B0467DCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9DA805A7-7C62-49FD-B9A2-F81C981691C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D5596442-5608-439B-8BE6-53A70F20C079"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"29FD745E-4B61-417F-BC66-386877E75351"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2B74E5F5-CEE1-47B1-BE84-7F1C45D4FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"82A767D8-6194-4ED5-B9BE-2A14541C141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"874E217C-98AC-4F0B-B120-D721164912CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3051F46B-E301-4DF7-A89B-4E8495617888"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0C8BED3D-E6E9-4A7F-A186-DD7DC20706D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"1C5CFCD4-6CB1-489D-9619-B0169EA1719C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"5C2D2DA2-4D77-4396-97A7-D4ED0F633E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1BC1BC2C-6D99-463F-9326-AF9B468E03F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"342A67CF-B332-46D1-A3FF-604552953C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"9239A893-506A-4853-8B00-FCDE5EC3E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"1A6196C5-BB95-447A-B610-4765AB702F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3E398049-C78A-452C-9FBF-E32DC86BDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"B307395A-36B6-4F54-92C9-D732580F3EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F9D0CB6E-5275-4D51-81F1-84D456F936B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"214A1125-FBE9-433D-8B05-10595CD59F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EB7CC6B1-7E40-4D6A-94CF-7412EA3F8534"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"062A62AA-EC5B-4D8E-9337-D25DF4FE56FA"}]}]}],"references":[{"url":"http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36536","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36702","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:225","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36203","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-829-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://qt.gitorious.org/qt/qt/commit/802d8c02eaa0aa9cd8d0c6cbd18cd814e6337bc6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-829-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2701","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Zope Enterprise Objects (ZEO) funcionalidad storage-server en Zope Object Database (ZODB) v3.8 anterior v3.8.3 y v3.9.x anterior v3.9.0c2, cuando cierta base de datos ZEO compartida y el soporte blob es activado, permite usuarios autenticarse remotamente para leer o borrar archivos de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8:*:*:*:*:*:*:*","matchCriteriaId":"FF49B253-411F-4E83-93B3-556783B73965"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"8568BD1E-839A-4C78-840D-47807D207C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"552E429F-964F-4BF8-B974-C4C59EA7871F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"204FA56B-576D-4274-B17C-6AC4FC1EB58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"8C5CCCAA-83AD-4CD6-B7FD-46809B786395"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0b1:*:*:*:*:*:*:*","matchCriteriaId":"2F38F2B2-E061-4D77-9A88-1C432F31FAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0b2:*:*:*:*:*:*:*","matchCriteriaId":"EFA88DF5-7A25-4187-8B9D-567B0279FEAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0b3:*:*:*:*:*:*:*","matchCriteriaId":"DCFE0BF9-0AC2-4461-BAAE-BDE91A830788"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0b4:*:*:*:*:*:*:*","matchCriteriaId":"EF8EA11C-98BD-419F-9817-4071B287F87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0b5:*:*:*:*:*:*:*","matchCriteriaId":"283DC1FE-6F98-4FFA-A17F-6277AB9815C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zodb:3.9.0c1:*:*:*:*:*:*:*","matchCriteriaId":"7A991E3D-03E9-4B2F-90FB-0B308D142B20"}]}]}],"references":[{"url":"http://pypi.python.org/pypi/ZODB3/3.8.3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://pypi.python.org/pypi/ZODB3/3.9.0c2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2534","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://pypi.python.org/pypi/ZODB3/3.8.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://pypi.python.org/pypi/ZODB3/3.9.0c2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2702","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"KDE KSSL en kdelibs v3.5.4, v4.2.4, y v4.3 no maneja apropiadamente un carácter '\\0' en un nombre de dominio en el campo Nombre de Asunto Alternativo de un certificado X.509, lo que permite a los atacantes \"hombre en el medio\" suplantar un servidor SLL a través de certificados manipulados emitido por una Autoridad Certificadora legítima, un asunto relativo a  CVE-2009-2408."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2702\n\nThis issue did not affect kdelibs packages as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw in Red Hat Enterprise Linux 5.","lastModified":"2009-09-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kdelibs:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EF92CC57-A136-4018-A350-44B8416E2111"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kdelibs:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D9184861-CD72-403A-B217-E58F7375D156"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kdelibs:4.3:*:*:*:*:*:*:*","matchCriteriaId":"6DEE716D-C9EA-4BEB-9B60-A4C4512D9DF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/36468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:162","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520661","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2703","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string."},{"lang":"es","value":"libpurple/protocols/irc/msgs.c en el complemento (plugin) de protocolo IRC de libpurple en Pidgin v2.6.2 permite causar a servidores IRC remotos para una denegación de servicio (mediante una desreferencia a puntero NULL y caida de la aplicación) a través de un mensaje TOPIC que carece de una cadena de asunto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:libpurple:*:*:*:*:*:*:*:*","matchCriteriaId":"DD5DB51C-9FD1-41CB-AAFD-5F6A072C3F82"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"4B6B929B-1F85-4584-AA92-5B30BE110D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"A7D1DFC7-4B7F-4006-9058-8335A292821E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*","matchCriteriaId":"12095F49-8DFD-4C74-9454-5C3A5992A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"C62110B5-61D7-406D-B1A5-65AEC202DDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"3FEE4F73-A426-4B47-8BAF-1C7D2F955850"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"777EF35C-195A-4784-986D-3811CF1DCF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*","matchCriteriaId":"F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E593BFF0-650E-4EDB-BF65-C509C8A807C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*","matchCriteriaId":"01256F83-6E67-409A-B99A-6E27E83DA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C80012AD-8F49-4287-8AEC-C21AC5774CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7CB3CF0C-BECE-4685-A370-96424B0A5703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"}]}]}],"references":[{"url":"http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=40","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2704","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T10:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte)."},{"lang":"es","value":"CA SiteMinder permite a atacantes remotos evitar las protecciones contra las vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) de las aplicaciones J2EE a traves de una petición que contiene un %00 (byte \"null\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:j2ee:*:*:*:*:*:*:*:*","matchCriteriaId":"8BC8FF1A-36F8-4625-A35A-AA9E20C0030C"}]}]}],"references":[{"url":"http://i8jesus.com/?p=55","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://i8jesus.com/?p=55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-2705","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T10:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, \"overlong Unicode\" in place of blacklisted characters."},{"lang":"es","value":"CA SiteMinder permite a atacantes remotos evitar las protecciones contra las vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) de las aplicaciones J2EE a traves de una petición que contiene caracteres \"overlong Unicode\" mal formados en lugar de los caracteres prohibidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:j2ee:*:*:*:*:*:*:*:*","matchCriteriaId":"8BC8FF1A-36F8-4625-A35A-AA9E20C0030C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:siteminder:*:*:*:*:*:*:*:*","matchCriteriaId":"1959944A-2557-4D3D-A9AA-F7EB0F44DA20"}]}]}],"references":[{"url":"http://i8jesus.com/?p=55","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://i8jesus.com/?p=55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-2707","sourceIdentifier":"bc94ec7e-8909-4cbb-83df-d2fc9330fa88","published":"2009-09-18T10:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ia32el (aka the IA 32 emulation functionality) before 7042_7022-0.4.2 in SUSE Linux Enterprise (SLE) 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service (system crash) via a 32-bit x86 application."},{"lang":"es","value":"Vulnerabilidad no especificada en ia32el (también conocido como la funcionalidad de emulación IA 32) anterior a v7042_7022-0.4.2 en SUSE Linux Enterprise (SLE) v10 SP2 en máquinas Itanium IA64, permite a usuarios locales provocar una denegación de servicio(caída del sistema) a través de una aplicación de 32 bits x86."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of ia32el as shipped with Red Hat Enterprise Linux 3, 4 or 5.","lastModified":"2009-09-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:10:sp2:itanium_ia64:*:*:*:*:*","matchCriteriaId":"933DC6C0-4860-4306-B4C7-BB91C9F95786"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"bc94ec7e-8909-4cbb-83df-d2fc9330fa88"},{"url":"http://support.novell.com/security/cve/CVE-2009-2707.html","source":"bc94ec7e-8909-4cbb-83df-d2fc9330fa88"},{"url":"http://www.securityfocus.com/bid/36393","source":"bc94ec7e-8909-4cbb-83df-d2fc9330fa88"},{"url":"https://bugs.launchpad.net/bugs/cve/2009-2707","source":"bc94ec7e-8909-4cbb-83df-d2fc9330fa88"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=521524","source":"bc94ec7e-8909-4cbb-83df-d2fc9330fa88"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/security/cve/CVE-2009-2707.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/bugs/cve/2009-2707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=521524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2711","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276."},{"lang":"es","value":"Xscreensaver en Sun Solaris v9 y v10, OpenSolaris anterior a snv_120, y X11 v6.4.1 para Solaris v8, cuando el servidor Xorg o Xnewt es utilizado, permite a atacantes físicamente próximos obtener información sensible mediante la lectura de ventanas emergentes, que son mostrados incluso cuando la pantalla está bloqueado, una vulnerabilidad diferente que CVE-2009-1276."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"09908FC0-5C90-4BEE-92A4-D7D67D657468"}]}]}],"references":[{"url":"http://secunia.com/advisories/36170","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35964","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2712","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files."},{"lang":"es","value":"Sun Java System Access Manager v6.3 2005Q1, v7.0 2005Q4, y v7.1; y OpenSSO Enterprise v8.0;  cuando AMConfig.properties permite a la marca de depuración, permite a los usuarios locales descubrir contraseñas en texto claro mediante la lectura de archivos de depuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"8ED84EE5-2C53-4A8E-98B7-4F9181D4E192"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"BF718ABC-42C7-4FE1-82A0-00F3506F1D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"F590A1DC-7E1B-44CF-83D2-3FEDA91765C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"28F24915-078C-4E4B-B173-671F0ABF9656"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"2A857F82-4146-48E9-8568-19393AC3856B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"B56B9BD3-2708-46C3-850D-865599F88BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"B6391170-5831-4303-85E5-A51BB431E788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"745D8651-B97C-48A9-AE4F-603A34516919"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"B0617E1B-FE70-442E-AEE6-BACC8515F005"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"D2BC5828-0EF1-4640-91BF-9CC1E5FC6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"9096D748-9527-4061-8106-526741831F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"AD06B92E-C23C-4648-A585-14FC54538FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"4930E838-993A-4DA1-B504-4675EE20CF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"2D28C8EF-7525-48A0-A13A-EA95479A3B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"207157F9-0AE4-45FB-A3DC-90C1F6E5376E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"9E8B1333-125A-44F7-A6C3-4B04D3FC9A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"92BC8B61-3F58-43B3-9756-616376D4D2DC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"B9D7AA3C-6565-4291-A76F-3BE9311B77F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"95ADB790-EF2D-4613-9F69-F37401518511"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"9E64CD07-4AF7-49C4-A3C0-EE2BF9E067A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"D8C9CC43-EFB5-4192-81F2-0373961A7078"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"479657F1-8950-4C6C-9CD2-5FE3DF235E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"6F238642-873A-4A50-BF14-6B173A20A36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"3DA96674-2050-4686-A592-F450655073E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"5382933D-E32D-47F5-8892-65B94E06BD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"644C3EA4-607C-42E7-805B-8F2EF6AF694E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*","matchCriteriaId":"B7821A43-2549-4B75-A201-95A3AC58E8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*","matchCriteriaId":"36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:hp_ux:*:*:*:*:*","matchCriteriaId":"134929FE-2EBA-4B55-904F-111A658160F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:war:*:*:*:*:*","matchCriteriaId":"72304F6F-83F9-4207-93D9-6886AD9E88A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:opensso_enterprise:8.0:*:*:*:*:*:*:*","matchCriteriaId":"8D05F3A1-C5F3-43CA-9150-17FE55A89A30"}]}]}],"references":[{"url":"http://osvdb.org/56815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-16-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256668-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35963","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2177","source":"cve@mitre.org"},{"url":"http://osvdb.org/56815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-16-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-256668-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2713","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that \"policy advice\" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El componente CDCServlet en Sun Java System Access Manager v7.0 2005Q4 y v7.1, cuando Cross Domain Single Sign On (CDSSO) está habilitado, no garantiza que \"policy advice\" (aviso de políticas) se presenta al cliente correcto, lo cual permite a un atacante remoto obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"8ED84EE5-2C53-4A8E-98B7-4F9181D4E192"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"BF718ABC-42C7-4FE1-82A0-00F3506F1D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"F590A1DC-7E1B-44CF-83D2-3FEDA91765C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"28F24915-078C-4E4B-B173-671F0ABF9656"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"CAABA44E-5FD1-4B71-A4DE-9DC671DD8223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"2A857F82-4146-48E9-8568-19393AC3856B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*","matchCriteriaId":"B56B9BD3-2708-46C3-850D-865599F88BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*","matchCriteriaId":"B6391170-5831-4303-85E5-A51BB431E788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*","matchCriteriaId":"745D8651-B97C-48A9-AE4F-603A34516919"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"B0617E1B-FE70-442E-AEE6-BACC8515F005"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"D2BC5828-0EF1-4640-91BF-9CC1E5FC6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"9096D748-9527-4061-8106-526741831F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"AD06B92E-C23C-4648-A585-14FC54538FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"4930E838-993A-4DA1-B504-4675EE20CF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"2D28C8EF-7525-48A0-A13A-EA95479A3B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*","matchCriteriaId":"207157F9-0AE4-45FB-A3DC-90C1F6E5376E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*","matchCriteriaId":"9E8B1333-125A-44F7-A6C3-4B04D3FC9A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*","matchCriteriaId":"92BC8B61-3F58-43B3-9756-616376D4D2DC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"B9D7AA3C-6565-4291-A76F-3BE9311B77F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"95ADB790-EF2D-4613-9F69-F37401518511"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"9E64CD07-4AF7-49C4-A3C0-EE2BF9E067A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"D8C9CC43-EFB5-4192-81F2-0373961A7078"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"479657F1-8950-4C6C-9CD2-5FE3DF235E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"6F238642-873A-4A50-BF14-6B173A20A36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*","matchCriteriaId":"3DA96674-2050-4686-A592-F450655073E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*","matchCriteriaId":"5382933D-E32D-47F5-8892-65B94E06BD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*","matchCriteriaId":"644C3EA4-607C-42E7-805B-8F2EF6AF694E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*","matchCriteriaId":"B7821A43-2549-4B75-A201-95A3AC58E8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*","matchCriteriaId":"36C5F1CB-FEDE-4C19-B056-C846C86FDE8E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:*:hp_ux:*:*:*:*:*","matchCriteriaId":"134929FE-2EBA-4B55-904F-111A658160F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_access_manager:7.1:*:war:*:*:*:*:*","matchCriteriaId":"72304F6F-83F9-4207-93D9-6886AD9E88A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36167","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35961","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2714","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun VirtualBox v3.0.0 y v3.0.2 permite a los usuarios del SO (sistema operativo) huésped provocar una denegación de servicio (reinicio del SO anfitrión) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DEB28343-0302-4490-AD8C-C0C5F9B0527B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44193C48-D911-457D-B152-DE36E37AC6E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36080","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265268-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35960","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2173","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265268-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2715","sourceIdentifier":"cve@mitre.org","published":"2009-08-07T19:00:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction."},{"lang":"es","value":"Sun VirtualBox v2.2 hasta v3.0.2 r49928 permite a los usuarios del SO (sistema operativo) huésped causar una denegación de servicio (reinicio del SO Linux anfitrión) a través de una instrucción sysenter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6BE04EDC-3616-447B-9BED-4A5EE6A470D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.2:r49928:*:*:*:*:*:*","matchCriteriaId":"FA21C04F-75D1-432C-922D-FE5DD7B3282D"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52211","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2716","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in \"old zip and certificate handling\" and have unspecified other impact via unknown vectors."},{"lang":"es","value":"La funcionalidad de plugin en Sun Java SE v6 versiones anteriores a Update 15 no implementa adecuadamente la selección de versión, permitiendo a atacantes dependientes del contexto aprovechar vulnerabilidades en \"gestión antigua de ficheros zip y certificados\" y tener otro impacto no especificado mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2717","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet."},{"lang":"es","value":"La implementación de Abstract Window Toolkit (AWT) en Sun Java SE v6 anteriores a Update 15 para Windows 2000 Professional no proporciona un Security Warning Icon, facilitando a atacantes dependientes del contexto que engañen a un usuario al interactuar sin seguridad con un applet no confiable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2718","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on distance from the window border to the Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet."},{"lang":"es","value":"La implementación de Abstract Window Toolkit (AWT) en Sun Java SE v6 anteriores a Update 15 para X11 no impone la restricción de distancia prevista desde el borde de la ventana al Security Warning Icon, facilitando a atacantes dependientes del contexto que engañen a un usuario para interactuar sin seguridad con un applet no confiable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:6:14:*:*:*:*:*:*","matchCriteriaId":"D55A27B8-F579-4A83-B423-0D3249643437"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:x.org:x11:*:*:*:*:*:*:*:*","matchCriteriaId":"09AEE820-942F-47D3-9CBE-B1D25DE05132"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2719","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp file, as demonstrated by the jnlp_file/appletDesc/index.html#misc test in the Technology Compatibility Kit (TCK) for the Java Network Launching Protocol (JNLP)."},{"lang":"es","value":"La implementación de Java Web Start en Sun Java SE v6 anteriores a Update 15 permite a los atacantes dependientes del contexto provocar una denegación de servicio (excepción de puntero nulo) mediante un fichero .jnlp modificado, como se ha demostrado al probar jnlp_file/appletDesc/index.html#misc en el Technology Compatibility Kit (TCK) para el Java Network Launching Protocol (JNLP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2720","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el método javax.swing.plaf.synth.SynthContext.isSubregion en la implementación de Swing en  Sun Java SE v6 anteriores a Update 15 permite a los atacantes dependientes del contexto provocar una denegación de servicio (excepción de puntero nulo en la biblioteca Jemmy) mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2721","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en la clase \"Provider\" en Sun Java SE v5.0 anteriores a Update 20 tienen un impacto y vectores de ataque desconocidos, también conocido como BugId 6406003."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2722","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594.  NOTE: this issue exists because of an incorrect fix for BugId 6406003."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en la clase Provider en  Sun Java SE v5.0 anterior a la actualización 20, tiene un impacto y vectores de ataque desconocidos, también conocido como BugId 6429594. NOTA: esta vulnerabilidad existe por una incorrecta corrección del BugId 6406003."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2723","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262."},{"lang":"es","value":"Vulnerabilidad sin especificar en la deserialización en la clase Provider en Sun Java SE v5.0 anterior a la actualización 20, tiene un impacto y vectores de ataque desconocidos, también conocido como BufId 6444262"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2724","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T20:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a \"3Y Race condition in reflection checks.\""},{"lang":"es","value":"Condición de carrera en el paquete java.lang en Sun Java SE v5.0 anterior a la actualización 20 tiene un impacto y vectores de ataque desconocidos, relacionados con \"Condición de carrera 3Y en comprobaciones de reflexión\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_se:*:19:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"DC8CDBBF-43EC-4FC0-BD17-C54BEB14F547"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37460","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2726","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x, B.x.x before B.2.5.9, C.2.x before C.2.4.1, and C.3.x before C.3.1; and Asterisk Appliance s800i 1.2.x before 1.3.0.3 does not use a maximum width when invoking sscanf style functions, which allows remote attackers to cause a denial of service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstrated via vectors related to (1) the CSeq value in a SIP header, (2) large Content-Length value, and (3) SDP."},{"lang":"es","value":"El driver SIP channel en Asterisk Open Source v1.2.x anterior a v1.2.34, v1.4.x anterior a v1.4.26.1, v1.6.0.x anterior a v1.6.0.12, y v1.6.1.x anterior a v1.6.1.4; Asterisk Business Edition vA.x.x, vB.x.x anterior a vB.2.5.9, vC.2.x anterior a vC.2.4.1, y vC.3.x anterior a vC.3.1; y Asterisk Appliance s800i v1.2.x anterior a v1.3.0.3, no utiliza el ancho máximo cuando se invocan las funciones de estilo sscanf, lo que permite a atacantes remotos producir una denegación de servicio (agotamiento de la pila de memoria) a través de paquetes SIP que contienen secuencias largas de caracteres ASCII decimales, como se demostró a través de vectores relacionados con (1) el valor CSeq en una cabecera SIP, (2) valores  Content-Length, y (3) SDP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*","versionEndExcluding":"b.2.5.9","matchCriteriaId":"C7DBF0A2-9606-43EF-88E6-905B4864D377"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*","versionStartIncluding":"c.2.0","versionEndIncluding":"c.2.4.1","matchCriteriaId":"945FA0F6-42A8-4AF4-9EF6-4B16D08B2724"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:business:*:*:*:*:*","versionStartIncluding":"c.3.0","versionEndExcluding":"c.3.1","matchCriteriaId":"7375080A-38B8-4230-875B-FC6184F23792"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digium:s800i_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.3.0.3","matchCriteriaId":"3E7FEE3E-B19C-4E7E-92D6-D0032A5DAA59"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:digium:s800i:-:*:*:*:*:*:*:*","matchCriteriaId":"15C35F93-0E57-4AEB-AA5F-4EDFAE753451"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.34","matchCriteriaId":"86564062-C367-4652-820A-7B4700011463"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.26.1","matchCriteriaId":"2CD3CE8A-7145-4501-A61A-D29F575E8795"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6.0","versionEndExcluding":"1.6.0.12","matchCriteriaId":"9E6BB86F-2FC7-4830-AC2E-4F114D87FE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6.1","versionEndExcluding":"1.6.1.4","matchCriteriaId":"A4DBF98F-EF1D-4DC0-93FE-2EC280AAA5EF"}]}]}],"references":[{"url":"http://downloads.digium.com/pub/security/AST-2009-005.html","source":"cve@mitre.org","tags":["Product"]},{"url":"http://labs.mudynamics.com/advisories/MU-200908-01.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36227","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505669/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36015","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022705","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2229","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://downloads.digium.com/pub/security/AST-2009-005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://labs.mudynamics.com/advisories/MU-200908-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505669/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2727","sourceIdentifier":"cve@mitre.org","published":"2009-08-10T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función _tt_internal_realpath en la biblioteca ToolTalk (libtt.a) en IBM AIX v5.2.0, v5.3.0, v5.3.7 a la v5.3.10, y v6.1.0 a la v6.1.3, cuando el demonio rpc.ttdserver está activado en /etc/inetd.conf, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga ASCII XDR-encoded sobre el procedimiento remoto 15."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A7DBFF-B11B-47EC-9E52-C12B156739D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*","matchCriteriaId":"B380F93D-5B13-49D0-B130-D45C2849A135"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*","matchCriteriaId":"11C8004D-639C-47BC-BE3E-CF5F06C1679C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBD01F19-4B30-4147-AC48-7F5C64EE80CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*","matchCriteriaId":"104E5C14-6D87-494B-8D60-0443ADDCD31A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DE57C2-E728-4016-9774-28FB4B0509AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"57B11497-5622-4759-906A-A93A3E815584"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1F9CD013-D904-45DF-AD43-493A22D5744B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"307B47F5-D903-4763-A353-2538AFD6C9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"A16950BB-11BC-4A40-BB3B-841807BB2546"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF417123-CCB6-48AF-A21B-1974173D516B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://risesecurity.org/advisories/RISE-2009001.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52843","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52845","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52846","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52851","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35419","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1620","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://risesecurity.org/advisories/RISE-2009001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ52851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2730","sourceIdentifier":"cve@mitre.org","published":"2009-08-12T10:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libgnutls in GnuTLS before 2.8.2 does not properly handle a '\\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."},{"lang":"es","value":"libgnutls en GnuTLS versiones anteriores a v2.8.2 no gestiona adecuadamente un carácter '\\0' en el nombre de dominio en los campos de identificación (1) Common Name (CN) o (2) Subject Alternative Name (SAN) de un certificado X.509, permitiendo que atacantes \"hombre en el medio\" (man-in-the-middle) suplanten servidores SSL de su elección mediante un certificado modificado que ha sido proporcionado por una Autoridad de Certificación legítima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.1","matchCriteriaId":"D7DF1A90-D8BB-40B5-B136-39300DB1EFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"4FBB8F2C-498D-4D31-A7D7-9991BABEA7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"8856E1B1-8007-42E5-82EF-4700D4DEEDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"A9CF40D3-CE03-4C2A-8EEF-EB5989291806"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"EC60D4CC-922C-4941-A400-0CBEAC7F31D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"754A0D19-A17A-4007-8355-497D14CFCBF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"8140DBE1-8116-4051-9A57-07535586E0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"56D2DF7F-DCDD-486D-B906-F9DDE3A1DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F1CC840D-AD01-4EE2-8652-06742A6286BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"84224A82-6D58-4000-A449-20C1632DAE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"A466931C-769A-4A28-B072-10930CE655E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"2FEE50AC-8730-4F04-B57C-6BDF8B957F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"10F621DC-7967-4D97-A562-02E7033C89C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"776E5481-399F-45BC-AD20-A18508B03916"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"63D7F972-9128-4A4D-8508-B38CE2F155E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"C5D56873-E8C5-4E4B-BB85-6DCF6526B453"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.18:*:*:*:*:*:*:*","matchCriteriaId":"54FE4766-32D0-491E-8C71-5B998C468142"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"7F980857-2364-466A-8366-BD017D242222"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"4CDCF1F0-5A78-48FF-B4B0-303AE2420F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"0A2E649D-5C45-4412-927B-E3EDCE07587C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"066175C2-6E96-4BAE-B1A6-B23D25547FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.1.23:*:*:*:*:*:*:*","matchCriteriaId":"869D3010-67AE-44D0-BB8F-D9C410AEA1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"052B40C1-C29B-4189-9A45-DAE873AB716D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"02F71E61-7455-4E10-B9D8-2B7FDDFB10F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5E05A9A1-6B7A-43FB-A9B8-41B68CA5FDCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1FB08FD9-9AB8-4015-A8BE-FD9F7EBAC6DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B588AAE0-8C3F-47C7-812F-8C97BD8795E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EBB9154B-4254-4F33-8DB2-5B96E2DA4931"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"64D9C191-6A57-40BB-BDD1-6B1A6BBAB51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"A2EA79D1-2EA8-4040-A5B5-C93EE937945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"61D05BC3-1315-4AC7-884D-41459272C94B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.8.1a1:*:*:*:*:*:*:*","matchCriteriaId":"2901E522-6F54-4FA5-BF22-463A9D6B53D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"738F29DA-9741-4BA5-B370-417443A3AC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"52173492-1031-4AA4-A600-6210581059D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"BB636C36-2884-4F66-B68A-4494AEAF90C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"777A16E4-A1F5-48DC-9BF0-CD9F0DCF8B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC4231BD-201D-4B10-9E35-B9EEFC714F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4C9200C3-0F46-4238-918B-38D95BF11547"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"024A9511-7CB4-4681-8429-0FE7FC34DF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"34CEF5ED-87A5-44B2-8A4A-9896957C057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B84A4F5-CED7-4633-913F-BE8235F68616"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"97564ABD-F9CE-4B3C-978A-1622DE3E4924"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3DB6EC88-DCE0-439B-89CD-18229965849B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1E2C89DD-CDBD-4772-A031-089F32006D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8C2FD618-91F4-48E7-B945-90CC0A367DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"65DC9555-E76F-4F8D-AE39-5160B34A87FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8B61D180-9EEA-4258-9A59-7F004F2C83F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"00DE1208-BDDC-405B-A34A-B58D00A279DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B8EF689E-59AA-4619-ADB2-E195CFD4094A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B62AB660-5DA4-4F13-AF9E-DC53D0A18EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"22314ED6-D0CD-442E-A645-A9CCFE114AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1C5B2-27BF-4328-9336-98B8828EE4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C952BF-A135-4B15-8A51-94D66B618469"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"6ADED309-0A25-478D-B542-96217A0DD63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DC0403DE-76B1-4E24-8014-64F73DCB53DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"69EA91B0-249F-41B2-8AD0-0C2AD29BE3D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7F714D22-873A-4D64-8151-86BB55EFD084"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E9181F9-50FF-4995-9554-022CF93376C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AED0B40F-3413-40D6-B1EF-E6354D2A91F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"4E99A7D8-2303-4268-8EF8-6F01A042BEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"86C70F69-FB80-4F32-A798-71A5153E6C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B2A1E604-500E-4181-BF66-BB69C7C3F425"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"0C8120E3-B60F-44E4-B837-4707A9BAEDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"84D3F16F-2C23-48E9-9F2D-1F1DF74719E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"F7073EAD-06C9-4309-B479-135021E82B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"546C56AC-AFCC-47B7-A5A8-D3E3199BEA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.9:*:*:*:*:*:*:*","matchCriteriaId":"1895868E-E501-42C2-8450-EEED4447BAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.10:*:*:*:*:*:*:*","matchCriteriaId":"2ED1FCE0-260B-4FB2-9DBD-F4D0D35639AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.11:*:*:*:*:*:*:*","matchCriteriaId":"199AA36A-3B23-438C-9109-CC9000372986"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.12:*:*:*:*:*:*:*","matchCriteriaId":"DD6FFF05-37B2-4D69-86AF-921591382D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.13:*:*:*:*:*:*:*","matchCriteriaId":"82BF8600-4E5D-4FF4-953C-F2DC726CA6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"04C40F0E-B102-4FE8-9E93-0ACFBF35226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.15:*:*:*:*:*:*:*","matchCriteriaId":"22802660-D33F-4683-B82F-C94AC6170A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.16:*:*:*:*:*:*:*","matchCriteriaId":"3623E9BE-F513-4301-BF0C-6A7F87E78E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.17:*:*:*:*:*:*:*","matchCriteriaId":"B5DBAF08-1441-4F14-A740-E90044B77042"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.18:*:*:*:*:*:*:*","matchCriteriaId":"4CE9BB7E-DDD8-4CBF-AEC2-40D59A560BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.7.19:*:*:*:*:*:*:*","matchCriteriaId":"5D3B6684-3890-4B60-BE67-D06045A86B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81C6C982-21D5-4FE3-A342-FC45BD78D2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A69E3A01-D8C6-4C36-8C4E-52B96541D5B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F9D61596-01EB-4936-923B-63537625F926"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"599EB59C-7717-47A8-84C6-78B6D79AEB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A6CBB77-818D-4DFF-9DD9-07EBF9933B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"26E9005E-5034-43F2-B96E-7829E19FE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FA854EA-29FE-4B91-AEA3-ED649D7FD25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A5EE-2892-4548-A0CB-D3289CD64D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"83F22BF4-A738-438B-8D0B-6993640F0D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9D3193B7-8FB9-45E4-BFF6-891A3F14F021"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AF269AE-121B-4982-A765-5C7E806FA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A1C9F604-7FBE-4759-B039-8F5894574203"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"191821CD-E4CB-4269-B04C-284A9F9783B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B2A71474-958D-4689-A652-3E2A731F47FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38169043-17DF-4CF9-963A-8770B8882357"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D7E5D9C-0976-4C9A-9FEB-AB923845BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C4537676-A72E-4433-B44F-3664EDD6F240"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D7CCCB66-C7CC-4E5C-8253-C29D57BE9B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8D090B10-68F2-424D-8234-2A280AA96B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"23168B77-645D-4A2A-A6E3-7001104064A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4D085B16-3116-423F-BDE0-2D93E12650A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C59247E9-CDAE-4269-A8E4-F49F617CDD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6019C0C-E9DD-4831-8E6A-785AE1A930FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"16F9CF15-8789-49B6-BB6D-B784C8FF20ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A6DAE798-14C9-4CB6-A39F-69CDF9D8FBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"C51E0C88-B19C-408D-AC17-10CE7462D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"7A7FBFAA-263C-4B7B-A135-9824DFD8CCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"2AC41482-B3BC-4C93-A850-73A179BAB763"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"ADC80BE1-28A6-4348-A061-8FD9C805E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"9D8EF703-AE06-4DD7-9235-2D8CCDB24F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"9A8AC314-065B-4BC3-A5EE-CA6D3006F9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D8201FF6-53A8-4850-A2B2-47AA65B2CB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB33002-E5C6-4573-BC94-647DDE4E6F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8D7D245A-D983-40AD-89A7-0EA00D38D570"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A7223691-225D-4649-B410-F41D2C489BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DA9E7F22-5BC4-4AD5-A630-25947CC1E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D6B3DBF9-52EB-4741-85E4-E68645BD81E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"350A6845-77D6-4D63-A13C-5DAB55F98727"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8A456D12-C43A-47B0-AC0D-BF02AEBA0828"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D457688-987A-4059-AA58-D9BF19ABC48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"AA20043D-EC85-4003-9E7B-27AB50F4E133"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"18A2C47E-510D-4537-8F51-3763A73E8E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"4704D411-7B24-4B1F-9D40-A39A178FF873"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D3091701-9B7C-4494-A82E-6E6F64656D85"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.network.gnutls.general/1733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36266","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36496","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/14/6","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1232.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022777","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52404","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10778","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.network.gnutls.general/1733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/14/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1232.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2732","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:02:42.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string."},{"lang":"es","value":"La función checkHTTPpassword en http.c en ntop 3.3.10 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (referencia a un puntero nulo y caída del demonio) mediante una cabecera HTTP Authorization que carece de un caracter : (dos puntos) en la cadena base64-decoded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntop:ntop:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.10","matchCriteriaId":"9948EFEF-5AAD-4F94-8D96-F57D08E618C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/36403","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505862/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505876/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2317","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505862/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505876/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2733","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the scheduler title in the scheduler module, and the (2) atksearch[contractnumber], (3) atksearch_AE_customer[customer], (4) atksearchmode[contracttype], and possibly (5) atksearch[contractname] parameters to the Organization Contracts administration page, reachable through dispatch.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Achievo anterior a v1.4.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) el título programador en el módulo planificador, y los parámetros (2) atksearch[contractnumber], (3) atksearch_AE_customer[customer], (4) atksearchmode[contracttype], y posiblemente (5) atksearch[contractname] en la pagina de administración Organization Contracts, accesible a través de dispatch.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"AF54DB83-0DA5-41B7-89C0-AED8BFB98412"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"51E5D3DE-9D27-47B8-AEBE-0A0100389D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"819F0D23-FA81-4558-9F33-B48749269FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EB2D06-61A0-4000-8C04-FAA86C1F6CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CDAF7860-994A-4566-926D-5194FC970F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5AC2E5B0-F4F0-4DFE-A4F6-3F3429B0AC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D48115CA-3564-4F90-8085-5DA848A81B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E0000135-28EF-4E6E-9E64-85A672B420F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6BF133D4-427D-46DD-95F5-88E3AC9EEB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"93DC3C06-2069-436B-BB29-5EAA412FF165"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFFF94E2-9071-408A-AAEA-6ABDCDD1CDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6519E24E-D08B-4176-A21D-6231567CF149"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC0F696B-60E7-4560-A03D-627993F77279"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5639EDD0-DA0B-419E-9DDE-746C1B2AF8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9FDAF1F0-7498-4F64-B0E4-9542DA7BAEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C37FD450-1AF0-4DBF-BECB-73F584F49BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"356CC90D-9078-4943-B97C-4BEA3CBF1EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A3DFF52-2035-43D3-935D-EE6A122A59BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F4BF2551-8009-40BB-9541-3885C8D93B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"804AC3CE-270F-47EC-B501-75B296A99424"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"59B2745F-D0AA-426B-AA95-C2F0D2AA1774"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"00D07959-FE90-4907-9BAE-7C72DFD0D3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8633CE2A-7814-4963-BB65-B4499BBA5186"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B82CEEC2-19AF-4175-A0E4-0F97F875B192"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B9C0B0D-5E4A-45BD-9150-90FC615357EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"9FCA1AFB-11FC-4484-937C-0160C10B21F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3BF4DC9F-E62B-470F-AD63-818554544769"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"951EC99D-4FFB-4388-AAF0-84A60A67AC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D901628D-D446-45EE-B131-EAA04D48A352"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"119EB712-D1E9-4AFC-A9C2-D33E1FE10F38"}]}]}],"references":[{"url":"http://secunia.com/advisories/37035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023017","source":"cve@mitre.org"},{"url":"http://www.achievo.org/download/releasenotes/1_4_0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.bonsai-sec.com/blog/index.php/cross-site-scripting-payloads/","source":"cve@mitre.org"},{"url":"http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507133/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36661","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53744","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53745","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.achievo.org/download/releasenotes/1_4_0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.bonsai-sec.com/blog/index.php/cross-site-scripting-payloads/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507133/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2734","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter (aka user_id variable) to dispatch.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función de get_employee en classweekreport.inc en Achievo anterior a v1.4.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro userid (alias variable user_id) en dispatch.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"AF54DB83-0DA5-41B7-89C0-AED8BFB98412"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"51E5D3DE-9D27-47B8-AEBE-0A0100389D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"819F0D23-FA81-4558-9F33-B48749269FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EB2D06-61A0-4000-8C04-FAA86C1F6CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CDAF7860-994A-4566-926D-5194FC970F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5AC2E5B0-F4F0-4DFE-A4F6-3F3429B0AC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D48115CA-3564-4F90-8085-5DA848A81B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E0000135-28EF-4E6E-9E64-85A672B420F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6BF133D4-427D-46DD-95F5-88E3AC9EEB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"93DC3C06-2069-436B-BB29-5EAA412FF165"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFFF94E2-9071-408A-AAEA-6ABDCDD1CDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6519E24E-D08B-4176-A21D-6231567CF149"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC0F696B-60E7-4560-A03D-627993F77279"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5639EDD0-DA0B-419E-9DDE-746C1B2AF8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9FDAF1F0-7498-4F64-B0E4-9542DA7BAEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C37FD450-1AF0-4DBF-BECB-73F584F49BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"356CC90D-9078-4943-B97C-4BEA3CBF1EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A3DFF52-2035-43D3-935D-EE6A122A59BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F4BF2551-8009-40BB-9541-3885C8D93B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"804AC3CE-270F-47EC-B501-75B296A99424"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"59B2745F-D0AA-426B-AA95-C2F0D2AA1774"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"00D07959-FE90-4907-9BAE-7C72DFD0D3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8633CE2A-7814-4963-BB65-B4499BBA5186"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B82CEEC2-19AF-4175-A0E4-0F97F875B192"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B9C0B0D-5E4A-45BD-9150-90FC615357EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"9FCA1AFB-11FC-4484-937C-0160C10B21F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3BF4DC9F-E62B-470F-AD63-818554544769"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"951EC99D-4FFB-4388-AAF0-84A60A67AC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D901628D-D446-45EE-B131-EAA04D48A352"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"119EB712-D1E9-4AFC-A9C2-D33E1FE10F38"}]}]}],"references":[{"url":"http://secunia.com/advisories/37035","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023017","source":"cve@mitre.org"},{"url":"http://www.achievo.org/download/releasenotes/1_4_0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.bonsai-sec.com/research/vulnerabilities/achievo-sql-injection-0102.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507131/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36660","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53743","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.achievo.org/download/releasenotes/1_4_0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.bonsai-sec.com/research/vulnerabilities/achievo-sql-injection-0102.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507131/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2735","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.php en sun-jester OpenNews v1.0, cuando está deshabilitado \"magic_quotes_gpc\", permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun-jester:opennews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"31FB51B9-BB51-41B7-AC44-8454268378CB"}]}]}],"references":[{"url":"http://osvdb.org/56812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9371","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2168","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52289","source":"cve@mitre.org"},{"url":"http://osvdb.org/56812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2736","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the \"Overall Width\" field in a setconfig action."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en admin.php en sun-jester OpenNews v1.0 permite a usuarios administradores autenticados remotamente inyectar código PHP de su elección en \"config.php\" mediante el campo \"Overall Width\" en una acción \"setconfig\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun-jester:opennews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"31FB51B9-BB51-41B7-AC44-8454268378CB"}]}]}],"references":[{"url":"http://osvdb.org/56813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9371","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2168","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52289","source":"cve@mitre.org"},{"url":"http://osvdb.org/56813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2737","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T10:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as demonstrated by editing all queries, modifying settings, and adding roles to users."},{"lang":"es","value":"La función EditCSVAction en cgi/actions.py en Roundup v1.2 anteriores a v1.2.1, v1.4 hasta v1.4.6, y posiblemente otras versiones no verifica adecuadamente los permisos, permitiendo a usuarios autenticados remotamente con privilegios de edición o creación en una clase modificar elementos de su elección con esa clase, como se ha demostrado al editar todas las consultas, modificar la configuración y añadir roles a los usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"56733697-252E-46D4-9D1E-592EA9B07946"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B77E0664-DD8A-416B-A634-D20400699106"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2841E10E-228B-4D0E-841A-73B19ECF1113"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"21E28655-E926-4DA1-B447-3A04733C326C"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"82AED6E0-89EB-4C27-AA82-D256D5FDBADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"44789245-3D9B-444C-921A-BF0E8E8002FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"12164E11-5161-4CD5-9F0E-D4E496733F37"},{"vulnerable":true,"criteria":"cpe:2.3:a:toni_mueller:roundup:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"424BBB10-A647-4B09-A838-5F4A05718B00"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768","source":"cve@mitre.org"},{"url":"http://issues.roundup-tracker.org/issue2550521","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1754","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/56368","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34059","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=489355","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.roundup-tracker.org/issue2550521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/56368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=489355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2738","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T18:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Interfaz de usuario web en FreeNAS anteriores a v0.7RC1 permite a atacantes remotos secuestras la autenticación de los usuarios por peticiones sin especificar a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freenas:freenas:*:*:*:*:*:*:*:*","versionEndIncluding":"0.69.2","matchCriteriaId":"F4FAB5C2-6CA0-4B1D-A630-F428FAA0A8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:freenas:freenas:0.69.1:*:*:*:*:*:*:*","matchCriteriaId":"869D3D88-5520-4B03-A542-6670CDE6AE9D"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN15267895/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000053.html","source":"cve@mitre.org"},{"url":"http://www.freenas.org/index.php?option=com_frontpage&Itemid=22","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipa.go.jp/security/vuln/documents/2009/200908_freenas.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN15267895/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freenas.org/index.php?option=com_frontpage&Itemid=22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipa.go.jp/security/vuln/documents/2009/200908_freenas.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2739","sourceIdentifier":"cve@mitre.org","published":"2009-08-11T18:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en FreeNAS anteriores a v0.69.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freenas:freenas:*:*:*:*:*:*:*:*","versionEndIncluding":"0.69.1","matchCriteriaId":"ABA36EFB-9800-462F-9856-1E5998F96E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freenas:freenas:0.69:*:*:*:*:*:*:*","matchCriteriaId":"2DAB4E06-380A-44F5-A0C3-E22EDA699CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:freenas:freenas:0.686.3:*:*:*:*:*:*:*","matchCriteriaId":"1E83F880-B508-4201-B145-DF1C7E3E4AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freenas:freenas:0.686.4:*:*:*:*:*:*:*","matchCriteriaId":"F9F4C148-1238-4288-A74E-273F105976E3"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN89791790/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000052.html","source":"cve@mitre.org"},{"url":"http://www.freenas.org/index.php?option=com_frontpage&Itemid=22","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36146","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN89791790/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freenas.org/index.php?option=com_frontpage&Itemid=22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2740","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet."},{"lang":"es","value":"kmxIds.sys anteriores a v7.3.1.18 en CA Host-Based Intrusion Prevention System (HIPS) v8.1 permite a atacantes remotos producir una denegación de servicio (caída de sistema) a través de un paquete malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:host-based_intrusion_prevention_system:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4924C835-EBFB-4B03-95A0-5FF7242D9A41"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/505881/100/0/threaded","source":"cve@mitre.org"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214665","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505881/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2741","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la aplicación wberuntimeear en el servlet de prueba en IBM WebSphere Business Events v6.1 y v6.2 que permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_business_events:6.1:*:*:*:*:*:*:*","matchCriteriaId":"E2F6267A-554A-4358-B869-3E8FCE792485"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_business_events:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ECF14447-0ACE-4EB1-A03C-9E016D8621AE"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53189","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2742","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la ayuda de Eclipse del servidor de aplicaciones IBM WebSphere (WAS) en versiones v6.1 anteriores a la v 6.1.0.27 permite a usuarios remotos inyectar codigo de script web o código HTML a través de una entrada sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"ABBABA44-D18E-4329-9C2B-90828DAD468B"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK78917","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53342","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK78917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2743","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file."},{"lang":"es","value":"En WebSphere Application Server (WAS) de IBM versiones 6.1 anteriores a 6.1.0.27 y versiones 7.0 anteriores a 7.0.0.7, no manejan apropiadamente una excepción que se produce después del uso de scripts wsadmin y la configuración de JAAS-J2C Authentication Data, que permite a los usuarios locales obtener información confidencial mediante la lectura del archivo de registro de First Failure Data Capture (FFDC)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"ABBABA44-D18E-4329-9C2B-90828DAD468B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A8FC820-48D5-4850-82F7-8DA4A18EFF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9BFBDE57-3895-4841-B23C-06336A7016EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CF56870A-F9D3-4544-B63A-EFC2E82A1F7D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53343","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2744","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to cause a denial of service via unknown vectors, related to \"an error in fixpacks 6.1.0.23 and 6.1.0.25.\""},{"lang":"es","value":"Vulnerabilidad no especificada en IBM WebSphere Application Server (WAS) v6.1 anteriores a v6.1.0.27 permite a atacantes remotos provocar una denegación de servicio mediante vectores desconocidos, relacionado con \"un error en fixpacks v6.1.0.23 y v6.1.0.25\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBD75308-7F21-4DDF-AD66-C155CF4B721B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"431C250D-8279-4071-871C-1C7C4DE09B5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FC300B03-7A8F-4E96-B55D-18CC258BBFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D3A3ADFB-93E0-42E5-B31B-59F22EA4E3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"13C8054A-8581-4936-AF94-291AE56EB4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"026EBFCD-0BC1-404B-BC14-292F35BE667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"B13D74F8-4321-48B3-A33E-FCCFA93013CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"2043B836-3950-46A1-89E4-08985DEA0D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"5EE93B7F-3EB5-4BE4-BFAA-4AA30D15A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"2B009FD6-9352-4329-B67A-8155FB379889"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"ABBABA44-D18E-4329-9C2B-90828DAD468B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"F7C152D8-CF12-44D9-BDCE-336311BB4B95"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK91709","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53344","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27007951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK91709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2746","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la consola de administración en el componente Security en IBM WebSphere Application Server (WAS) v6.0.2 anteriores a v6.0.2.39, v6.1 anteriores a v6.1.0.29, y v7.0 anteriores a v7.0.0.7 permite a atacantes remotos secuestrar la autenticación de administradores mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*","matchCriteriaId":"05BC8C52-DA95-4BF2-AD47-9922741CAAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.35:*:*:*:*:*:*:*","matchCriteriaId":"0D51FEAC-6D35-4DDA-AB7E-6226A27CCA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.37:*:*:*:*:*:*:*","matchCriteriaId":"27E6000C-601E-444A-8767-9A27F8AFA8E7"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9CDD56-921C-4FAF-87E2-14B91EC1A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"95255265-6D69-46D3-9FFA-8EDB1734375C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2E4191D3-64AB-482C-9DEF-DD04C4C942CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC6EB31-9707-408B-8BF5-66BD23441A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B73E052-AF4F-4543-AA03-F5B1FA976EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23171B81-C991-467A-95A4-EDDAC59C37BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2586C584-3258-414B-AB28-1EBA0DBD0B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BCA175EA-EDC6-4228-8E28-E9BBC981E60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C6A4EC9D-98C2-40B0-BA40-4838FE8D1FF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BB33-4E78-4123-8093-EBEE2F2B5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E3F4B8EA-9299-42C1-AAFB-831701ED2FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A45B6F32-5DFF-4833-9F0F-89576724CF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"13CA9A59-DFE4-4566-8719-E6FA4720F06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"A89DD1BF-4AB0-480D-9856-B1BEA73A4AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"49E119EF-B6A5-4B6C-B199-C64F62CA7CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9C8FA3D-9162-4D9B-8250-FAC93ED77A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"E06DE5D4-D3A5-4783-ACE0-A80808DB09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"ABBABA44-D18E-4329-9C2B-90828DAD468B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*","matchCriteriaId":"BDBB08AC-52AD-4D5A-9E76-AFB283D5FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B0905C80-A1BA-49CD-90CA-9270ECC3940C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B108457A-50DC-4432-9E30-98ADBEBF2389"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0661F4A0-A520-4443-B19D-6885920ADFE5"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A553A6E7-64AA-41F2-9B92-4EC715C617B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9BFBDE57-3895-4841-B23C-06336A7016EB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK87176","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99477","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54227","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK87176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK99477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2749","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value."},{"lang":"es","value":"Pack de Características para Communications Enabled Applications (CEA) anterior v1.0.0.1 para IBM WebSphere Application Server v7.0.0.7 usa valores de sesiones predecibles, lo que permite a atacantes de hombre en medio  (man-in-the-middle) suplantar sesiones de colaboración a través del descubrimiento de valores. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"30B7A7B9-FCD1-4509-93CF-C5B736B04F4B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:communications_enabled_applications:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"38A6C7BF-9C3B-4951-99DC-17DEF30C105C"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM00435","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27017328","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37392","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3598","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54494","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM00435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27017328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2761","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the \"C:\\Program Files\\avira\\\" directory."},{"lang":"es","value":"Vulnerabilidad de búsqueda  de ruta no entrecomillada en Windows en el planificador (sched.exe) en Avira AntiVir, AntiVir Premium, Premium Security Suite y AntiVir Professional, podría permitir a usuarios locales elevar sus privilegios a través de un archivo antivir.exe malicioso en el directorio \"C:\\Program Files\\avira\\\" (\"C:\\Archivos de Programa\\avira\\\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*","matchCriteriaId":"FDD00670-7EC0-4AA4-98EF-C8AE38330284"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:*:*:professional:*:*:*:*:*","matchCriteriaId":"38451FC5-030A-4766-9239-828089FA70D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir:-:-:premium:*:*:*:*:*","matchCriteriaId":"60FC2C76-3B5F-418E-A2DD-9F5D2FBE4EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avira:antivir_security_suite:-:-:premium:*:*:*:*:*","matchCriteriaId":"F805305F-CFA4-4BC9-8C89-885D85B4B8E5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html","source":"cve@mitre.org"},{"url":"http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55647","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46568","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2762","sourceIdentifier":"cve@mitre.org","published":"2009-08-13T16:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array."},{"lang":"es","value":"wp-login.php en WordPress v2.8.3 y anteriores que permite a los atacantes remotos a forzar el restablecimiento de la contraseña para el primer usuario en la base de datos, posiblemente el administrador, a través de un key[] array variable en una acción resetpass (también conocido como rp), lo que evita un control que asume que $key no es un array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.3","matchCriteriaId":"0A3A0FDB-5997-4C14-930C-F6C50850BD4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://core.trac.wordpress.org/changeset/11798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36237","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wordpress.org/development/2009/08/2-8-4-security-release/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9410","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36014","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022707","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52382","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://core.trac.wordpress.org/changeset/11798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wordpress.org/development/2009/08/2-8-4-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2764","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location."},{"lang":"es","value":"Microsoft Internet Explorer v8.0.7100.0 en Windows 7 RC en la plataforma x64, permite a atacantes provocar una denegación de servicip (caída de la aplicación) a través de ciertos elementos DIV en conjunción con elementos SCRIPT que tienen contenidos vacíos y no referencias a una localización de script externa válida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8.0.7100.0:*:*:*:*:*:*:*","matchCriteriaId":"D1838B0F-5123-4DB0-B9E9-3362478B7CDC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9362","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35941","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2765","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI."},{"lang":"es","value":"httpd.c en httpd en el gestor GUI en DD-WRT 24 sp1 y otras versiones anteriores a la build 12533, permite a atacantes remotos ejecutar comandos de su elección a través de metacaracteres shell en una petición a la URI cgi-bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:C/I:C/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.3},"baseSeverity":"HIGH","exploitabilityScore":6.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dd-wrt:dd-wrt:*:sp1:*:*:*:*:*:*","versionEndIncluding":"24","matchCriteriaId":"B493087F-145B-41F9-979C-ABE3DFCD63BD"}]}]}],"references":[{"url":"http://isc.sans.org/diary.html?storyid=6853","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022596","source":"cve@mitre.org"},{"url":"http://www.dd-wrt.com/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9209","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35742","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/","source":"cve@mitre.org"},{"url":"http://isc.sans.org/diary.html?storyid=6853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dd-wrt.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2766","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests."},{"lang":"es","value":"httpd.c en httpd en el gestor GUI en DD-WRT 24 sp1 no requiere autenticación administrativa para programas en cgi-bin/, lo que permite a atacantes remotos modificar la configuración a través del protocolo HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dd-wrt:dd-wrt:24:sp1:*:*:*:*:*:*","matchCriteriaId":"184B9DB2-7BB7-46D0-A095-5FAFE4F646CB"}]}]}],"references":[{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9209","source":"cve@mitre.org"},{"url":"http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2767","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference."},{"lang":"es","value":"La función init_posix_timers en kernel/posix-timers.c en el kernel de linux anteriores a v2.6.31-rc6 permite a usuarios locales provocar una denegación de servicio (OOPS) o posiblemente conseguir privilegios a través de una llamada CLOCK_MONOTONIC_RAW clock_nanosleep que provoca una desreferencia a un puntero NULL."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue only affected kernels version 2.6.28-rc1 and later.\nTherefore this issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG..","lastModified":"2009-08-18T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*","versionEndIncluding":"2.6.16.31","matchCriteriaId":"6277DB43-CBB1-4E4A-B071-0D82CE293F3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*","matchCriteriaId":"EC36074C-C310-4341-8B3C-BB34E572BF94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*","matchCriteriaId":"ECCC155A-C68C-44A8-8C44-7979C9889C34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*","matchCriteriaId":"040EBFDA-7F8D-428F-BB69-BB1B52BB868B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*","matchCriteriaId":"69E703D2-8CC9-421A-9728-75E8FCFB4FE6"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/8/4/28","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lkml.org/lkml/2009/8/4/40","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/06/2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52317","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/8/4/28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lkml.org/lkml/2009/8/4/40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2768","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T15:16:27.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\""},{"lang":"es","value":"La función load_flat_shared_library en el archivo fs/binfmt_flat.c en el subsistema flat en el kernel de Linux anterior a versión 2.6.31-rc6, permite a los usuarios locales causar una denegación de servicio (desreferencia de un puntero NULL y bloqueo del sistema) o posiblemente tener otro impacto no especificado mediante la ejecución de un binario flat compartido, que activa el acceso de un \"uninitialized cred pointer.\""}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for flat binary support, and additionally this issue only affected kernels version 2.6.29-rc1 and later.","lastModified":"2009-08-18T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"},{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.31","matchCriteriaId":"AE1BA972-91FE-417F-B0AD-D3067DA8C96F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lkml.org/lkml/2009/6/22/91","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36278","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/13/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36037","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52909","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lkml.org/lkml/2009/6/22/91","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/13/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2769","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en include/timesheet.php en Ultrize TimeSheet v1.2.2, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"config[include_dir]\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrize:timesheet:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"06931148-04EA-4996-B0B7-53D0A590B037"}]}]}],"references":[{"url":"http://secunia.com/advisories/36033","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2770","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the myadminname cookie."},{"lang":"es","value":"PowerUpload v2.4 permite a atacantes remotos saltarse la autenticación y obtener acceso administrativo a través de un valor codificado MIME en la cookie myaadminname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerupload:powerupload:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0340A214-1121-438C-91DF-158AC6ECFE9A"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9219","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1962","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51860","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2771","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Free Arcade Script v1.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro keyword a la URI por defecto bajo search/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freearcadescript:free_arcade_script:1.3:*:*:*:*:*:*:*","matchCriteriaId":"47ECB19B-E18E-4900-BDFD-0701B1355A28"}]}]}],"references":[{"url":"http://osvdb.org/56580","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/fas-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36025","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/56580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/fas-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2772","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to (1) quick_search.php and (2) viewprofile.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PG Roommate Finder Solution permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro part a (1) quick_search.php y (2) viewprofile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realtysoft:pg_roomate_finder_solution:*:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD74D-B4E7-44F5-9722-40E7A1178B0C"}]}]}],"references":[{"url":"http://osvdb.org/56537","source":"cve@mitre.org"},{"url":"http://osvdb.org/56538","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/pgroomate-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35814","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52032","source":"cve@mitre.org"},{"url":"http://osvdb.org/56537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/pgroomate-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2773","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en home.php in PHP Paid 4 Mail Script, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shop-020:php_paid_4_mail_script:*:*:*:*:*:*:*:*","matchCriteriaId":"05798DF3-F7BD-4A28-9145-9B02D22F9432"}]}]}],"references":[{"url":"http://osvdb.org/56573","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52015","source":"cve@mitre.org"},{"url":"http://osvdb.org/56573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2774","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en paidbanner.php in PHP Paid 4 Mail Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-paid4mail:php-paid4mail:*:*:*:*:*:*:*:*","matchCriteriaId":"26267191-F274-4B16-B497-F83083AF8B68"}]}]}],"references":[{"url":"http://secunia.com/advisories/35972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9287","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2775","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en linkout.php en PHPArcadeScript (PHP Arcade Script) v4.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phparcadescript:phparcadescript:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5C5E473E-6D25-47DF-AF50-CD4FA4EAB89D"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9288","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35843","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2776","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showresult.asp en Smart ASP Survey, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sellatsite.com:smart_asp_survey:*:*:*:*:*:*:*:*","matchCriteriaId":"A09EC5EC-ED50-4CC4-BA2C-0E2D6E186333"}]}]}],"references":[{"url":"http://osvdb.org/56575","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/smartasp-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/56575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/smartasp-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2777","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL commands via the key parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en visitor/view.php en GarageSales Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:garagesalesjunkie:garagesales_script:*:*:*:*:*:*:*:*","matchCriteriaId":"5287EE99-EB1E-4E4D-AB94-A9D98A983046"}]}]}],"references":[{"url":"http://secunia.com/advisories/36017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9262","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52034","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2778","sourceIdentifier":"cve@mitre.org","published":"2009-08-14T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via the key parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en visitor/view.php en GarageSales Script permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro key. NOTA: Algunos de estos detalles se han obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:garagesalesjunkie:garagesales_script:*:*:*:*:*:*:*:*","matchCriteriaId":"5287EE99-EB1E-4E4D-AB94-A9D98A983046"}]}]}],"references":[{"url":"http://secunia.com/advisories/36017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9262","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2779","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en AJ Matrix DNA, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción productdetail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:aj_matrix_dna:*:*:*:*:*:*:*:*","matchCriteriaId":"C20736D8-5EC9-4F00-83AF-DCF07A2D25B3"}]}]}],"references":[{"url":"http://osvdb.org/56639","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/ajmatrixdna-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36095","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/56639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/ajmatrixdna-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2780","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php."},{"lang":"es","value":"Múltiples vulnerabilidades de Ejecución de secuencias de comandos en sitios cruzados en 68 Clasiffieds 4.1 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a través de (1) el parámetro cat en category.php, el parámetro view en (2) login.php y (3) viewlisting. php, el parámetro page en (4) searchresults.php y (5) toplistings.php, y (6)  el parámetros member en viewmember.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:68_classifieds:68_classifieds:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A8CD8AE2-78FB-441C-A1D9-89FD1152E547"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56564","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/56565","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/56566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/56567","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/56568","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/56569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52071","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/56565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/56566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/56567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/56568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/56569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2781","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum.php in Arab Portal 2.x, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en forum.php en Arab Portal v2.x, cuando está deshabilitado magic_quotes_gpc, permite a usuarios remotos autenticados, ejecutar comandos SQL de su elección a través del parámetro qc en una acción addcomment, es un vector distinto de CVE-2006-1666."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arabportal:arab_portal:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3F965001-F8AF-4033-8197-60451A92854B"},{"vulnerable":true,"criteria":"cpe:2.3:a:arabportal:arab_portal:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A9DE5B82-2AC0-4DC1-976B-91BC33DC6CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:arabportal:arab_portal:2.2:*:*:*:*:*:*:*","matchCriteriaId":"11BC7BED-8129-45DB-B91B-E6088F903511"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9320","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35914","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2782","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en el componente JFusion (com_jfusion) de Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro Itemid en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jfusion:com_jfusion:-:*:*:*:*:*:*:*","matchCriteriaId":"6F44AF30-0DFB-4CEB-B73D-1B5592ABEA4E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9324","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35912","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2783","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) op parameter to modules/pm/viewpmsg.php and (2) query string to modules/profile/user.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en XOOPS v2.3.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) op sobre modules/pm/viewpmsg.php y (2) cadena de petición sobre modules/profile/user.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"149720D8-4C25-42ED-957D-179AD69C522A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=124905075425380&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36109","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35895","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022641","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-005.pdf","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?r1=2621&r2=3292","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?view=log#rev3292","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=124905075425380&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-005.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?r1=2621&r2=3292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/trunk/htdocs/modules/pm/viewpmsg.php?view=log#rev3292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2784","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path parameter to index.php in (1) install/, (2) menus/left_rightslideopen/, (3) menus/side_pullout/, (4) menus/side_slideopen/, (5) menus/simple/, (6) menus/top_dropdown/, and (7) menus/topside/; the sitemap parameter to index.php in (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown/, and (12) menus/topside/; and the (13) relPath parameter to index/index.php. NOTE: PHP remote file inclusion vulnerabilities reportedly also exist for some of these vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en dit.cms v1.3, cuando está habilitado register_globals, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro path sobre index.php en (1) install/, (2) menus/left_rightslideopen/, (3) menus/side_pullout/, (4) menus/side_slideopen/, (5) menus/simple/, (6) menus/top_dropdown/, y (7) menus/topside/; el parámetro sitemap sobre index.php en (8) menus/left_rightslideopen/, (9) menus/side_pullout/, (10) menus/side_slideopen/, (11) menus/top_dropdown/, y (12) menus/topside/; y el parámetro relPath sobre (13) index/index.php. NOTE: La vulnerabilidades reportadas de inclusión de ficheo remoto PHP existen también para algunos de estos vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ditcms:dit.cms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"9D49CB25-7328-4CB8-B549-E1B34DC71A15"}]}]}],"references":[{"url":"http://secunia.com/advisories/36076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9310","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2785","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to buy.php and the id parameter to (2) contact.php and (3) tellafriend.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PHP Open Classifieds Script, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) page to buy.php (2) id sobre contac.php y \"3) id sobre tellafriend.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:classifiedphpscript:php_open_classifieds_script:*:*:*:*:*:*:*:*","matchCriteriaId":"A06C948F-09A8-4369-AC39-27E3447CB8CB"}]}]}],"references":[{"url":"http://osvdb.org/56657","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56658","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56659","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52123","source":"cve@mitre.org"},{"url":"http://osvdb.org/56657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/openclassifieds-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2786","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en reputation.php en el plugin Reputation v2.2.4, v2.2.3, v2.0.4, y anteriores para PunBB, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro poster."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reputation:reputation:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"34C14D23-4752-4010-A502-F21485E3D52C"},{"vulnerable":true,"criteria":"cpe:2.3:a:reputation:reputation:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"31410353-D72E-46E1-AF4E-8C95B2CD6FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:reputation:reputation:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2CAA7734-2439-41C7-91F0-E2D9454F7485"}]}]}],"references":[{"url":"http://osvdb.org/56612","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9289","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52088","source":"cve@mitre.org"},{"url":"http://osvdb.org/56612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2787","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/reputation/rep_profile.php en el plugin Reputation v2.2.4, v2.2.3, v2.0.4, y anteriores para PunBB, cuando está habilitado register_globals y está deshabilitado magic_quotesgpc, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro pun_user[language]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*","matchCriteriaId":"F9B94FB2-2C83-42D6-BECC-D39E97594CA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reputation:reputation:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"34C14D23-4752-4010-A502-F21485E3D52C"},{"vulnerable":true,"criteria":"cpe:2.3:a:reputation:reputation:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"31410353-D72E-46E1-AF4E-8C95B2CD6FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:reputation:reputation:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2CAA7734-2439-41C7-91F0-E2D9454F7485"}]}]}],"references":[{"url":"http://osvdb.org/56613","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9315","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52138","source":"cve@mitre.org"},{"url":"http://osvdb.org/56613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2788","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the (1) adminName parameter to cp/auth.php, (2) cid parameter to artcat.php, and (3) catid parameter to show.php."},{"lang":"es","value":"Múltiples vulnerabilidad de inyección SQL en Mobilelib GOLD v3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1)adminName sobre cp/auth.php,(2) cid sobre artcat.php y (3) catid sobre show.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mobilelib:mobilelib_gold:3:*:*:*:*:*:*:*","matchCriteriaId":"3689A89A-85F2-412D-9A62-C81C0566BE26"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9327","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35910","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2789","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a list action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Permis (com_groups) v1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una lista de acciones sobre index.php. NOTA: El origen de esta información es desconocido, los detalles se han obtenido solamente de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:permis:com_groups:*:*:*:*:*:*:*:*","matchCriteriaId":"872612F2-56AE-4DFA-9FFC-BF13B60BD7B1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/35849","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52142","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2790","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.  NOTE: this might overlap CVE-2006-3271.4."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en cat_products.php en SoftBiz Dating Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid. NOTA: está vulnerabilidad podría superponerse a CVE-2006-3271.4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softbiz:dating_script:*:*:*:*:*:*:*:*","matchCriteriaId":"5B782CBE-BD60-42B5-83E5-FF58D44B48BA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35896","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52158","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2791","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the offset parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en pda_projects.php en WebDynamite ProjectButler v1.5.0, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro Offset."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdynamite:projectbutler:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"715635CC-DFBE-41D7-9ED4-11F26846F32A"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35919","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2792","sourceIdentifier":"cve@mitre.org","published":"2009-08-17T16:30:01.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PT parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en plugings/pagecontent.php en Really Simple CMS (RSCMS) v0.3a, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro PT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joshua_oliver:really_simple_cms:0.3a:*:*:*:*:*:*:*","matchCriteriaId":"8615B437-BFB0-4395-95AB-1EF1F6536ABF"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9313","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52159","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2793","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits."},{"lang":"es","value":"El kernel en NetBSD, posiblemente 5.0.1 y anteriores, en plataformas x86 no gestiona adecuadamente el fallo de preasignación de la instrucción \"iret\", lo que permitiría a usuarios locales conseguir privilegios a través de vectores relacionados con la variable de pseudocódigo tempEIP que esta fuera de los limites de segmento de código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.1","matchCriteriaId":"ABB5BE84-628A-4845-92C7-E20ADEE7E904"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:0.8:*:*:*:*:*:*:*","matchCriteriaId":"555181C9-75B1-427B-BF36-47C7D969DCC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:0.9:*:*:*:*:*:*:*","matchCriteriaId":"CAC89BD6-8376-4C8D-A120-1430D8CA113F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"249FA642-3732-4654-88CB-3F1D19A5860A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2ED81B-8DA2-46D0-AE24-C61BF8E78AE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D18C95A3-15E3-41B8-AC28-ACEA57021E24"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6CFC6B75-9057-4E58-A4D4-8AEC12AE62E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"28BD9F91-2384-4557-9648-25FC00D04677"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F9CABFAA-594C-45D7-A0C7-795872A0C68A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F9432E9-AACA-4242-BDAB-8792ACF72C12"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29C02C6B-AAFD-4594-94A4-F26BA3648CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"57C533D7-771E-4E33-A4FE-764C0B73F920"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9875E709-11BA-4B8F-A2FC-26844DD4D563"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"49AF042F-5047-4FA2-B20C-65B2C6EBEA5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"00564BAA-066A-4627-B6A8-78724E55D363"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506531/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506531/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2794","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the \"Maximum inactivity time lock\" functionality, which allows local users to bypass intended Microsoft Exchange restrictions by choosing a large Require Passcode time value."},{"lang":"es","value":"El componente Exchange Support en Apple iPhome OS anteriores a la 3.1, e iPhone OS anteriores a 3.1.1 para iPod touch, no implementan de forma adecuada la funcionalidad de bloqueo por tiempo de inactividad máximo, lo que permite a usuarios locales saltarse las restricciones impuestas por Microsoft Exchange seleccionando un valor de tiempo grande para Requiere Passcode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"D4CE4199-BBF5-4F42-8BBC-BD946079C912"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"34346F55-4972-427B-8F96-780FA91DB95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AE65CA8B-68CB-428C-AC32-6F9100F9E507"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AD136376-331D-494F-9D12-7E631546E8CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"F07B3FE7-96B3-493A-A230-5642BA11FBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53181","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2795","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to \"command parsing.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el componente Recovery Mode en Apple iPhone OS anterior a v3.1, e iPhone OS anterior a v3.1.1 para iPod touch, permite a usuarios locales evitar el requisito de \"requerir clave\" y acceder a datos de su elección a través de vectores relacionados con el \"análisis de comandos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"FF765D52-58F5-49F1-8323-2EB7EB5006A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:ipod_touch:*:*","versionEndExcluding":"3.1.1","matchCriteriaId":"3935C1A3-3488-465C-ADE2-DC6B31365DC0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36341","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53183","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2796","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password."},{"lang":"es","value":"El componente UIKit  en Apple iPhone OS v3.0, y iPhone OS v3.0.1 para iPod touch, permite a atacantes que estén físicamente próximos  podrían descubrir la contraseña vigilando al usuario cuando borra caracteres del la contraseña"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36335","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53185","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2797","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server."},{"lang":"es","value":"El componente WebKit de Safari en Apple iPhone OS en versiones anteriores a la v3.1, e iPhone OS en versiones anteriores a la v3.1.1 para iPod touch, no elimina los nombres de usuario y contraseñas de las URLs enviadas en las cabeceras \"Referer\", lo que permite a atacantes remotos obtener información confidencial leyendo los logs \"Referer\" en el servidor web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"FF765D52-58F5-49F1-8323-2EB7EB5006A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:ipod_touch:*:*","versionEndExcluding":"3.1.1","matchCriteriaId":"3935C1A3-3488-465C-ADE2-DC6B31365DC0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41856","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:039","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36339","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1006-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2722","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0552","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53187","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1006-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-2798","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en Apple QuickTime anterior a v7.6.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (Caída de aplicación) a través de un archivo FlashPix manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.2","matchCriteriaId":"19679D07-BB28-4E47-A0A1-0D5BFBED823B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"6ED97A46-DE85-4019-AE15-CDFF0E1371F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:-:mac:*:*:*:*:*","matchCriteriaId":"181ABD08-3AFB-492B-B59F-FF971B6DF759"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"B907F62E-696E-41C6-9748-F16D0D96982C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36328","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2799","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Apple QuickTime anterior a v7.6.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de un fichero de película H.264 manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"7.6.2","matchCriteriaId":"19679D07-BB28-4E47-A0A1-0D5BFBED823B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE08FAE-0862-4C36-95BC-878B04CBF397"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D8F310A8-F760-4059-987D-42369F360DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F71BC599-FCBE-4F1F-AA24-41AF91F82226"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"ACE0F153-80B3-4469-AE49-4B7517218574"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"03C15EB0-1D29-4DBE-B2C0-FE9365E8D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*","matchCriteriaId":"41473E1D-B988-4312-B16B-D340508DD473"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"53527707-E903-4A12-AB87-6EC5FA9F2EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"EE3EAE38-9DE6-450D-BCD0-70E590C1F76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"A91242F5-485E-4125-A19C-4C20B602DD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"63D7214C-FAF6-4DCA-8520-8A539BDCD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*","matchCriteriaId":"80747BDD-70E9-4E74-896F-C79D014F1B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D02D35D-E957-4949-B5DA-F3654B13A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4A4C6772-CD24-46FD-AEBE-BF8BB16B5BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8399665C-F8A8-4133-A0CD-E767F8266E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"FC48F2B6-4BC7-4B57-ADE2-4907287A1AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85ADED98-62C6-4961-894C-1D26E3B3EE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7B48C74-28CC-4348-9CF9-9AF58C7A5E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"6469AEDC-6F9D-4CAC-84B2-F13107626FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F522CEA4-B3BB-4C94-B070-6679EEA43439"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"904FA4B7-A6CB-48B4-B887-4B349479D1A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"CB2DFC1B-6452-4575-A099-2E5FD387A8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1E140B-BCB4-4B3C-B287-E9E944E08DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B630944-F838-4C02-90D4-F5EB2A073CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2FC05FE-5A85-4D78-BAAF-FFCC2CC4CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"01A24DD9-5AB8-4091-A293-1A2D7953D455"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9066C81B-A69F-450D-8606-5E29AF1AD286"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"BB113931-F886-425C-A0F8-171F6D71A02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"D282FA67-0089-4ED5-8168-E3CE8B510BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"71285AD2-3966-4817-B630-8335BE985D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0A2B95BD-A728-4EE7-A4C9-E1547C34E8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2B5928A2-C989-4B27-91E1-7019277B2E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2458480E-F222-452A-AB21-933F924F8F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"05AA3258-E556-4443-AF79-96882A9CF33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"51292C8C-4905-4C30-B166-ACCE39D9DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"30C83A78-6BB9-443E-B508-CC6F8D157A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"546B9E74-E86B-462B-A58E-017E3B780B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"3433487A-98ED-4C28-8659-609BF395E23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9C7CB5C4-9A5A-4831-8FFD-0D261619A7DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61463F4F-BBE0-42AA-AC22-8F39E94EB520"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"579E49C1-2F66-4CCB-AAE4-6C15089C2D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"335F4D89-983A-4C05-937A-EEE802A260D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D2CE0B67-0794-472D-A2C0-CC5CA0E36370"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:mac:*:*:*:*:*","matchCriteriaId":"49477EAA-5AA2-4B55-8BEF-AB3E118DE618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F189FAB-3BA1-4C1B-975F-E174D5CB8771"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3A5DDF47-5AA5-4EE3-B12D-9218F528EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:mac:*:*:*:*:*","matchCriteriaId":"19AAC0DE-53D7-42E4-90D2-939C5DF6F651"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:6.5.2:-:windows:*:*:*:*:*","matchCriteriaId":"F7A30674-38BA-49B8-9DE0-4C9FB5A62DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F075BA0F-4A96-4F25-AF1D-C64C7DCE1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"BC1B46A6-E032-4E24-B367-F5A94E770FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0:-:windows:*:*:*:*:*","matchCriteriaId":"284BAF97-86BC-4520-BAB6-D75D18FFA1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F43E39C4-6A08-4C38-BC7D-573F40978527"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"04F44BB3-5221-4D8A-ABC3-C51EC76A5B2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"3F4075B0-0F9F-466B-8521-2156849247C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8692B488-129A-49EA-AF84-6077FCDBB898"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"6E0B99DA-3BDA-4848-85BB-EC0D002A73F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"E1B24679-4C63-4320-A79F-E19CCFA537D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"DF2A6BCB-108E-4226-BC31-6E0057DFB6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1758610B-3789-489E-A751-386D605E5A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"5EDE46EA-5B6A-4B59-8BAA-CD803F6D5FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"D0D28529-2A0A-4398-98C2-C35BABB9373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"F8BF6A6A-F734-4395-9305-2E9F52EE888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B535737C-BF32-471C-B26A-588632FCC427"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"402BBD8E-4960-43C0-8D46-6F20BBA6BF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"AFCB45F3-397E-42A8-8D08-ECF667939FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DF2C61F8-B376-40F9-8677-CADCC3295915"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDBD1E93-C675-4248-ACE6-C49DBE7B3E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"D5C04F70-E2E6-48F4-948D-9D0C7B2A2F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6254BB56-5A25-49DC-A851-3CCA249BD71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC0E0EA8-2947-44F9-BCFA-F4CFA34E9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"EA16CB14-D053-4CDB-B80A-8AC9D17FACAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E1DB3FBD-40F4-41FB-A939-3E3A4D0D85B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"795E3354-7824-4EF4-A788-3CFEB75734E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"60500521-46FC-4734-901C-0A5E5D3DB9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"F45B47BB-E14F-4437-8828-EF059496BF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9419A1E9-A0DA-4846-8959-BE50B53736E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"682C7A59-6F3C-4E50-A145-D081614CD42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"9B353211-F90E-4F38-9D0B-B8C7EC00E66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"952A8015-B18B-481C-AC17-60F0D7EEE085"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:mac:*:*:*:*:*","matchCriteriaId":"D69BB04E-E696-4B34-95DE-B42F46697F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*","matchCriteriaId":"F6A44CA9-D257-4BB7-B5AB-23193F35FCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3E518B27-A79B-43A4-AFA6-E59EF8E944D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:mac:*:*:*:*:*","matchCriteriaId":"C0638BF3-4B18-4747-AD33-D04B3B4E217F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*","matchCriteriaId":"9B8F4241-551B-492D-8602-06146B05CF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AEC6EF36-93B3-49BB-9A6F-1990E3F4170E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:mac:*:*:*:*:*","matchCriteriaId":"CF370413-96F7-4882-899F-577A8F3DAD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*","matchCriteriaId":"2BA9C6F7-513B-426F-90AD-7E826433CEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1A1B5F2F-CDBF-4AEF-9F78-0C010664B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:mac:*:*:*:*:*","matchCriteriaId":"2D9ECCF0-1CF4-4201-8002-EFF6C5331DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*","matchCriteriaId":"5B709D68-8474-4AAE-AA11-777EF510E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*","matchCriteriaId":"98C9B657-5484-4458-861E-D6FB5019265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B84D320E-ACA2-4B6E-B682-00202B9ADF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B2706818-E87A-4BF7-AC10-CFA28ABE4B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"4DCEE583-6CD2-4098-9A2A-B006A5023318"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"81E0F160-4B70-45CD-B8AC-AB30ADDB8D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"268B4FBA-D6AC-4595-898A-721E284F3399"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"52AD56F9-0CE6-4949-9853-3274A2C81601"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*","matchCriteriaId":"1EF20D38-BFA3-4403-AB24-7B74EFD68229"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"97FEBA83-C845-4334-9B9A-921BA0F44DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"DA476E79-5145-4EE3-BD81-3773C6B19825"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"555B1A2A-95F5-4B06-8774-FF952BEC2FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2A89-B2FC-413D-A059-526E6DE301BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"1BB8C8C6-2751-4704-B999-FBF5BC2FDA74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"CEA210F5-71F6-4528-B2B4-507AA4A435EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*","matchCriteriaId":"7F9F7DCE-EE65-4CD5-AA21-208B2AAF09EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*","matchCriteriaId":"31662D02-7FA9-4FAD-BE49-194B7295CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C835F2-4F9E-45A6-8112-C2D8CB1A39AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"D0E4F2DB-1C1A-4440-8D1B-C18F41E2603C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"081712FF-C6B8-423B-8F20-C79D25DE782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8461AF0A-D4D3-4010-A881-EDBB95003083"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"D7B3A3F0-EE97-49B6-A92A-D5D2D7171913"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"CF045B49-11A3-447A-9D05-1E8794980A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A9E1332A-5B4D-4590-BFA5-4557C71F894B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8E5C77-573F-4EA3-A59C-4A7B11946E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:mac:*:*:*:*:*","matchCriteriaId":"428DCE6C-B2EC-4BFF-BA65-DB14F1CC964F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*","matchCriteriaId":"939BE521-A385-4A1A-B4B0-C4687751D4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0DC01580-460A-4DC3-BB6D-A9B2254EF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C6E08BF-737E-4512-9BB8-5B4B03A2F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"2AC5D3A0-A7BB-4C0F-94FF-8ED54FB62A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"304CFC80-E925-4CB8-8251-0FD0F09B8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D22D0674-0EC7-4176-97FB-940F2F7D6AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:mac:*:*:*:*:*","matchCriteriaId":"4DDB8D28-183F-4B16-8610-592A210311E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*","matchCriteriaId":"DFD95CD9-E387-4EC8-B6EA-FBC6961E4C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6470EC-B72B-404C-9E69-03C3FEFD56F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"6ED97A46-DE85-4019-AE15-CDFF0E1371F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"F3ECF41A-8B4E-4A9B-BEE7-5F0EB0ED6791"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FA3FB6BA-D0FA-4DC3-8A4D-453C2EE51D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:-:mac:*:*:*:*:*","matchCriteriaId":"181ABD08-3AFB-492B-B59F-FF971B6DF759"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"B907F62E-696E-41C6-9748-F16D0D96982C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36328","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2800","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T18:30:03.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted alias file."},{"lang":"es","value":"Desbordamiento de búfer en Alias Manager en Apple Mac OS X v10.4.11 y v10.5.8, permite a atacantes  ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de un fichero alias manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57947","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36354","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53164","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2803","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a file with a crafted resource fork."},{"lang":"es","value":"CarbonCore en Apple Mac OS X 10.4.11 y 10.5.8 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un fichero con una bifurcación de recurso manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53165","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2804","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento enteros en ColorSync en Mac OS X versiones 10.4.11 y 10.5.8, y Safari anterior a versión 4.0.4, de Apple, en Windows, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de aplicación) por medio de un bloqueo de un perfil ColorSync diseñado insertado en una imagen, conllevando a un desbordamiento de búfer en la región heap de la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"276684F5-5CD2-44E6-931A-E8B11D022B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36EA71E0-63F7-46FF-AF11-792741F27628"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/57949","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36357","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53166","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2805","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JBIG2 stream in a PDF file, leading to a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en CoreGraphics de Apple Mac OS X v10.4.11 y v10.5.8, permite a atacantes remotos ejecutar código de su elección o probocar una denegación de servicio (caída de la aplicación) a través de un flujo JBIG2 en un fichero PDF, conduciendo a un desbordamiento de búfer basado en memoria dinámica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57950","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36358","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53167","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2807","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en el panel de gestión USB en CUPS en Apple Mac OS X, permite a usuarios locales obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57951","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cups.org/articles.php?L588","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36350","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022898","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53168","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cups.org/articles.php?L588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2808","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n    *\r\n\r\n      Help Viewer\r\n\r\n      CVE-ID: CVE-2009-2808\r\n\r\n      Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 and v10.6.1, Mac OS X Server v10.6 and v10.6.1\r\n\r\n      Impact: Using Help Viewer on an untrusted network may result in arbitrary code execution\r\n\r\n      Description: Help Viewer does not use HTTPS for viewing remote Apple Help content. A user on the local network may send spoofed HTTP responses containing malicious help:runscript links. This update addresses the issue by using HTTPS when requesting remote Apple Help content. Credit to Brian Mastenbrook for reporting this issue.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response."},{"lang":"es","value":"Help Viewer en Apple Mac OS X anterior a  v10.6.2 no utiliza una conexión HTTPS que obtiene contenido Apple Help desde una página web, lo que permite a atacantes hombre-en-el-medio (man-in-the-middle) enviar un enlace help:runscript, y de ese modo ejecutar código de su elección, a través de una respuesta suplantada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"8E61F244-C6E5-48F1-8C18-5A7D862DA638"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2809","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PixarFilm encoded TIFF image, related to \"multiple memory corruption issues.\""},{"lang":"es","value":"ImageIO en Apple Mac OS X 10.4.11 y 10.5.8, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de una imagen PixarFil manipulada codificada con TIFF, relacionado con \"múltiples cuestiones de corrupción de memoria\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57952","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36359","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53170","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2810","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"This issue does not affect systems prior to Mac OS X v10.6\"","cveTags":[],"descriptions":[{"lang":"en","value":"Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a \"potentially unsafe\" warning message."},{"lang":"es","value":"Launch Services en Apple Mac OS X v10.6.x hasta v10.6.2 elimina recursivamente la información de cuarentena al abrir una carpeta en cuarentena, lo que permite a atacantes remotos asistidos por usuarios ejecutar código de su elección a través de una aplicación en cuarentena que no lanza un mensaje de advertencia \"potencialmente inseguro\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D25D1FD3-C291-492C-83A7-0AFAFAADC98D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A04FF6EE-D4DA-4D70-B0CE-154292828531"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2811","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a \"potentially unsafe\" warning message in the Quarantine feature."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en Apple Mac OS X 10.5.8, permite a atacantes remotos asistidos por usuarios ejecutar comandos de su elección a través de un fichero .fileloc, el cual no provoca un mensaje de advertencia \"potencialmente inseguro\" en la característica de cuarentena."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57953","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36360","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53171","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2812","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site."},{"lang":"es","value":"Launch Services en Apple Mac OS X 10.5.8 no reconoce adecuadamente un Identificador de Tipo Uniform (uniforme/único) no seguro en un documento de tipo exportado en un aplicación descargado, lo que permite a atacantes remotos lanzar la apertura automática de un archivo, y ejecutar código de su elección, a través de un sitio web manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57954","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36361","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2813","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories."},{"lang":"es","value":"Samba 3.4 en versiones anteriores a 3.4.2, 3.3 en versiones anteriores a 3.3.8, 3.2 en versiones anteriores a 3.2.15 y 3.0.12 hasta la versión 3.0.36, como es utilizado en el subsistema SMB en Apple Mac OS X 10.5.8 cuando Windows File Sharing está habilitado, Fedora 11 y otros sistemas operativos, no maneja adecuadamente errores al resolver nombres de ruta, lo que permite a usuarios remotos autenticados eludir las restricciones previstas para los recursos compartidos así como, leer, crear o modificar archivos, en determinadas circunstancias que involucran a las cuentas de usuario que carecen de directorios de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50E05AD3-C7F0-421D-8C9B-604E553332E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3A53517C-F12D-4D74-A722-5AE23598CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BF4A0A7-E176-4009-BAA2-E23B330D91A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"42EB6115-CC45-4464-8400-D7E3A9402803"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"58B06DAF-869F-481B-965D-70353581A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"9F260B05-3963-49BF-9D96-EB06722C5483"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F002F105-A911-4E56-8630-C287DC527E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*","matchCriteriaId":"D1936E19-9887-4E53-AA0C-738ABD4B97EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*","matchCriteriaId":"A2206C09-6A4B-4EC4-A206-E48EDF966913"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0B918306-8743-404D-A035-CC3997ADCC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*","matchCriteriaId":"43684906-D3AA-40FB-A75D-ED65C1DC9BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*","matchCriteriaId":"62E39538-4811-49DB-97CF-1F018C58BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*","matchCriteriaId":"C85D69FE-AF43-4B0E-A7A9-2D2C16426180"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"86347948-C08F-4F02-89A0-4F4A55CD4BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*","matchCriteriaId":"7CA7905C-51A0-4A56-A6A5-330288613055"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*","matchCriteriaId":"4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*","matchCriteriaId":"4600AAA4-834D-4F63-8E9A-88CB555C029E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*","matchCriteriaId":"54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8BFA3B82-9440-49E1-8088-FA22C0B7DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"0762B1DA-7232-478D-805F-5E2A50F8BEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*","matchCriteriaId":"9F22FC74-5999-4158-A253-674BF1C21E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*","matchCriteriaId":"0EEB31C4-5352-4905-8D9E-BD754991F07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"B0BE2AEC-6ACD-422C-AD20-6C034D68C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"101163D7-D440-43CC-8704-A9614CD8CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*","matchCriteriaId":"F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*","matchCriteriaId":"B69EA9CF-627C-4600-B4EC-10E91DB07E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*","matchCriteriaId":"0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*","matchCriteriaId":"99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*","matchCriteriaId":"9A973443-C497-41FB-AF47-529AA2906CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:*","matchCriteriaId":"DDC24403-E706-4073-A04D-53E1B79B59B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"42F2EB0A-249D-4E81-B459-A88AC60A1D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:*","matchCriteriaId":"8B3AA114-63C8-4B25-86BA-73C6933EE21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9B843321-9A8D-4541-9E54-58E2978E2437"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FBF36A20-3607-43A8-A4CC-169922BC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*","matchCriteriaId":"EB71265E-60C4-4495-8B66-360E96B76FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2:*:*:*:*:*:*:*","matchCriteriaId":"FE530BB9-A3ED-4EBB-B8E5-86D4CC5A8C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6962B6DA-5D78-4702-9546-216971D03F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"39FAD067-8547-41E7-B1BC-74CC55D58AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"787C3CBF-5E4E-4727-950A-D99F15327CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3:*:*:*:*:*:*:*","matchCriteriaId":"6D9E86C9-14FE-4C55-A08F-9A0C555260ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4B0684-FDCC-4EE8-AABA-F71204167C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7172A430-F124-4200-88C2-8BE486BA5DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0EB9DC7-A196-48ED-893B-733E8CDA961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"27D03508-3D54-4D05-A5BC-6F8641B45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B0E09D3-68FA-40C9-A478-53707E5F78BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"66D41850-968D-431D-8075-EE9EFF013408"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"873A4A35-2CB0-4D55-B455-19D892776293"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4:*:*:*:*:*:*:*","matchCriteriaId":"DDCD3046-85BB-40A6-A898-774833033891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2","source":"cve@mitre.org"},{"url":"http://news.samba.org/releases/3.0.37/","source":"cve@mitre.org"},{"url":"http://news.samba.org/releases/3.2.15/","source":"cve@mitre.org"},{"url":"http://news.samba.org/releases/3.3.8/","source":"cve@mitre.org"},{"url":"http://news.samba.org/releases/3.4.2/","source":"cve@mitre.org"},{"url":"http://osvdb.org/57955","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36937","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37428","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","source":"cve@mitre.org"},{"url":"http://www.samba.org/samba/security/CVE-2009-2813.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36363","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.samba.org/releases/3.0.37/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.samba.org/releases/3.2.15/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.samba.org/releases/3.3.8/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.samba.org/releases/3.4.2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.samba.org/samba/security/CVE-2009-2813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2814","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Wiki Server en Apple Mac OS X v10.5.8, permite a atacantes remotos inyectare secuencias de comandos web o HTML de su elección a través de una petición de búsqueda de datos que no usa la codificación UTF-8."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57956","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36364","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53175","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2815","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and service interruption) via a crafted SMS message."},{"lang":"es","value":"El componente Telephony en Apple iPhone OS anterior a v3.1 no maneja adecuadamente las notificaciones de llegada SMS, lo que permite a atacantes remotos provocar una denagación de servicio (puntero a deferencia NULL e interrupción del servicio) a través de un mensaje SMS manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"BE457690-CB2B-42BD-B97C-E723AFD02FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2816","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page."},{"lang":"es","value":"La implementación de Cross-Origin Resource Sharing (CORS) en WebKit, tal como es usado en Safari de Apple anterior a versión 4.0.4 y Chrome de Google anterior a versión 3.0.195.33, incluye ciertos encabezados HTTP personalizados en la petición OPTIONS durante operaciones entre orígenes con comprobación previa, lo que facilita a los atacantes remotos conducir ataques de  tipo cross-site request forgery (CSRF) por medio de una página web especialmente diseñada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.4","matchCriteriaId":"77BC4840-8A34-40F9-873B-DF0F4CADCBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.195.33","matchCriteriaId":"56C129DC-11E1-4710-B0F1-E0AF5AF6F6F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"73DE6E60-6BDD-450C-B7E2-744A0183A2DD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*","matchCriteriaId":"5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/59940","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/59967","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37346","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37358","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37393","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37397","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36997","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023165","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525789","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54239","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/59940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/59967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2817","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file."},{"lang":"es","value":"Desbordamiento de búfer en Apple iTunes anterior a v9.0.1 permite a los atacantes remotos ejecutar arbitrariamente código o causar una denegación de servicio (caída de la aplicación) a través de un archivo .pls manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:-:mac:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"DCC723BE-361C-450D-A5FD-992A509251A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"F067C392-850C-4522-B56B-9E2D6B665D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:*:windows:*:*:*:*:*","matchCriteriaId":"49DC3DDC-8758-4D28-B2D5-161994C0E669"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"D88F7A4A-5A12-4D97-B05F-79487082A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.0:-:windows:*:*:*:*:*","matchCriteriaId":"EEEFF5EC-A455-4B11-9B22-1E79DE3EC45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"0D0E3B53-AFAE-47F1-B7E3-395406819357"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"A1309426-7C10-4732-AAC7-5A9D0075DF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"5C697C09-C952-4A8F-A1AE-06F423AE7D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:*:windows:*:*:*:*:*","matchCriteriaId":"5CF3BB89-1AEF-4B00-AF87-C9BAF7E23EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"C9D9076A-A8FB-4E1A-8DC4-32D36D8A74C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:1.1.2:-:windows:*:*:*:*:*","matchCriteriaId":"46297466-0506-4767-B49F-9914ACDB2A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"389B617F-29D2-4171-B4E0-9E65BBFAF369"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"5C912111-DB93-4019-B4D6-06D5873A8538"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0:-:windows:*:*:*:*:*","matchCriteriaId":"699424D3-E59B-448C-8157-282701759851"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"696D5986-155D-446C-A5FE-49C0DF1868AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"2B16F29E-E502-406E-9F6F-30664C1DBE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"60639271-2C1D-41BD-BEA4-8D1CDAB9E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"3370179D-5E8A-4036-AA23-252674C6D807"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"9DF402D2-E1DA-44D6-B1F9-FE35EF5798CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"C9A3F04A-2FC3-48F2-B7C3-A159CB14D3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"2B71E645-F15B-43FE-931B-819F9ABA89C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FB9DFC99-4A94-45CF-A999-0D4A5F153D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"A4F5B268-399F-4CEC-9996-01BD55841141"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"E90B5E1A-4D90-4252-8E34-649F33F1A088"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"BDD9C9F2-5F86-4606-95B3-A8688D9F4B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:2.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"28C2D685-7064-4F75-9100-21212557933A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"1D0D1162-36F7-4F7E-94C0-ABB86B9FC4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:3.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"DF23791B-F73D-4CF4-BAC3-591FF0F0B0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0:*:windows:*:*:*:*:*","matchCriteriaId":"3E74DB1C-208B-42DE-9A5E-E9010140C5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"78B0CA16-044C-44D5-B63F-548D2D0EFEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"262CAFD7-07C2-4C71-B2FC-165A88977881"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"018AC033-ACF0-496D-96E1-A03CC4162CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"3395F4BA-C317-4F34-8E47-7AB8F9E7BDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"3CA9634F-A553-4B72-BBA2-AD7EAE4DFA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1:*:windows:*:*:*:*:*","matchCriteriaId":"A698DDBE-B79B-4F59-AFBC-0A0682B1EF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"9C210688-EA10-4FE2-A0C2-EA0BBDB1FDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"E91D9ACF-2595-4A9A-B581-46F177300B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC9B5471-F1B1-4E8B-B991-FDE231BA30EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"9EBF09D5-D19E-4A84-8979-6FC44D2268B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"2320B809-DE44-49AA-9C96-196BF39749C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.2.72:*:windows:*:*:*:*:*","matchCriteriaId":"F2899F21-F01F-4C95-93AA-40C528EE56DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5:*:windows:*:*:*:*:*","matchCriteriaId":"BDD1695A-271B-4832-B4B1-E5A9D7DE4E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"D65B8D79-6147-480A-AC94-627D58644D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"FD00E684-506B-4ED6-B48C-7D565CDA188C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6:*:windows:*:*:*:*:*","matchCriteriaId":"9136E8D6-310D-4D4E-A6AC-2F89218B8666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"FB8D37E9-1419-4DC3-B74D-7919F5F08AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"28519DE2-61CA-4943-9247-9F6BCB0367DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7:*:windows:*:*:*:*:*","matchCriteriaId":"78A3FEC0-F135-41F9-A260-52157B283B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.0:-:mac:*:*:*:*:*","matchCriteriaId":"1E88F87C-D724-4D06-B770-532E04B0AF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.0:-:windows:*:*:*:*:*","matchCriteriaId":"822F3D7E-810F-41B9-823F-D0B54BD1A3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"79591197-B671-46B2-9EB2-03A75A838CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:-:mac:*:*:*:*:*","matchCriteriaId":"7CC79D8C-A4FF-4584-BE34-D75D17DF1604"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"359C82A7-F6FB-4140-BD11-2B38B323933A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.7.1.30:*:windows:*:*:*:*:*","matchCriteriaId":"A2DD1A9D-4AF4-452A-99C2-AE93611C985D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8:*:windows:*:*:*:*:*","matchCriteriaId":"8DEABC06-3FF2-4B6A-AAFF-F38B00BA2967"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8.0:-:mac:*:*:*:*:*","matchCriteriaId":"5CBA468F-4D1A-4A17-AC00-C7A377766A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.8.0:-:windows:*:*:*:*:*","matchCriteriaId":"E9B16D5E-9EF4-4253-8E07-75C8E5E0E33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9:*:windows:*:*:*:*:*","matchCriteriaId":"6514E3F5-3B5D-43BE-A26D-5167B519F3EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9.0:-:mac:*:*:*:*:*","matchCriteriaId":"F8E95857-BBE4-461B-885D-61B42D5F4D1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:4.9.0:-:windows:*:*:*:*:*","matchCriteriaId":"CA2B6657-6E0F-4915-ACB9-219F76D8E38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"23C49853-8616-4769-90BC-B6D85B24A36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"C235A75A-0D08-42AD-836A-B550EF6257BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"10A63976-A435-4F6C-8B09-3001CA3EDC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"7C1EC2F5-FBE8-4EC8-9D28-83C736F2DC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"2D6F98F8-0B9B-4CE5-B1B8-305C6740799A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:5.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"B97DF98E-792B-474E-8820-DF88C4B28A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0:*:windows:*:*:*:*:*","matchCriteriaId":"8DDAAC1F-03CA-4DCC-9E9B-A68181261BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"5C86DB01-FCCD-47C8-9F6A-51E2A8BBBD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"97558F66-FA78-454B-B25C-DA2A39CA1A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"D5AE8F59-2DF8-403B-BAB9-6465E618897C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"D1354FF7-467B-4F76-81BB-28901E01ACDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"B3F084A8-A293-4151-80F6-72C14582E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"F37B39AB-2D5B-417E-BCEF-29C18D386C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"509D04DE-62F8-4D80-8CAB-95EA149CA8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"7426FDD0-F909-48AB-97C9-C4B25C05E6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:*:windows:*:*:*:*:*","matchCriteriaId":"A1DCEED8-8174-4319-BAA2-E0A70A7EAFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"9F5C3AD7-0C07-4972-B789-EE5D1B098107"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.3:-:windows:*:*:*:*:*","matchCriteriaId":"372C1609-E534-41E0-87CD-C654BBF0B88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"9730866D-DFE9-448F-9D4E-6B21B3942737"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"E15502B6-B54C-4817-B929-4512E890A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4:-:windows:*:*:*:*:*","matchCriteriaId":"03FCF3E7-0649-43B7-90C8-521E90079156"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"E20BC99A-13FC-446C-A27A-6C2D859C172B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"DD300F1B-EE8F-4606-B024-A14CA2EF4D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:-:mac:*:*:*:*:*","matchCriteriaId":"265E54E3-A5BC-42F2-B085-400BDD67BEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:6.0.5:-:windows:*:*:*:*:*","matchCriteriaId":"407AD48A-EA07-456F-B46B-24383E416A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"18D9E538-FDF6-4112-9BF9-FFB48785439A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"C5B51908-CB81-492D-A437-D0508ABE05FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"9997A5A2-104E-449E-ADF2-79F7C52C8D1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"0E826E91-CBBF-48D8-A4AD-7FB6830F3769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:*:windows:*:*:*:*:*","matchCriteriaId":"2690D789-B1DC-40A5-8CC6-BBB499E9A550"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"5B892A2F-6052-41BE-B74F-7A81C7C1C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"066FC8C7-5A0B-4B2E-A51E-BFB42153FD21"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"8879A44A-8EFC-4F3B-9187-371EEA971AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.0:-:windows:*:*:*:*:*","matchCriteriaId":"0D2412E1-745B-4CFC-B075-1960A1410335"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8BB11F50-AD2A-438B-8028-29AC8AF9AB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"45F36172-97A7-4767-BC9E-8DC0444A8635"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"F9BD3983-B891-41D2-88A5-25B98F89B5F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.2.0:-:windows:*:*:*:*:*","matchCriteriaId":"D0D889C7-320C-4674-834F-93C8B1701EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.0:-:mac:*:*:*:*:*","matchCriteriaId":"63EC82F8-9726-41B5-821E-2782D211F9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.0:-:windows:*:*:*:*:*","matchCriteriaId":"23B4660B-D22B-4AC5-B6F2-87F83A2251A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"B0A35E88-2C3D-40B7-9268-F46AB909B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.1:-:windows:*:*:*:*:*","matchCriteriaId":"7F61B45F-86CA-43F6-BA12-62AB0FBAD352"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:*:windows:*:*:*:*:*","matchCriteriaId":"BC37C091-02B8-4B39-9253-52C1008ADEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"7E95C92E-ED71-4260-8648-DDBC098A513E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.3.2:-:windows:*:*:*:*:*","matchCriteriaId":"9F7D1E31-E28F-4EAD-AAE5-01AE478003B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4:*:windows:*:*:*:*:*","matchCriteriaId":"70A4EEE2-1DD2-4936-8939-4683523670B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.0:-:mac:*:*:*:*:*","matchCriteriaId":"31403D57-0D0F-46D8-8F89-A6CC5B6AAFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.0:-:windows:*:*:*:*:*","matchCriteriaId":"91FB2868-DDF9-4D33-B78C-2A5180F9D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"95B58CD1-03CB-4C35-A290-7157941D210D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:-:mac:*:*:*:*:*","matchCriteriaId":"F7A7BAD1-61DE-4FCE-A2ED-10B7D7837A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.1:-:windows:*:*:*:*:*","matchCriteriaId":"AEEC5C0E-DDC5-4B28-8C04-DF69C152E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"A27B736F-317F-4538-AA3B-72D6EF0D2D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:-:mac:*:*:*:*:*","matchCriteriaId":"A44D692D-C489-4853-91E1-4AF638309A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.2:-:windows:*:*:*:*:*","matchCriteriaId":"2F688163-C543-4D58-BF71-DF50FFB0A112"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.4.3:*:windows:*:*:*:*:*","matchCriteriaId":"481E736B-0A83-4422-B1D3-4BD0F9565A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5:*:windows:*:*:*:*:*","matchCriteriaId":"3BB09ABD-C1F1-4101-BDC2-FC3E8C422631"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5.0:-:mac:*:*:*:*:*","matchCriteriaId":"17DE00AF-2551-4C20-9670-9B39C1E3C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.5.0:-:windows:*:*:*:*:*","matchCriteriaId":"0C0CB6DE-46C4-4F9D-B8FD-47C01922D2D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6:*:windows:*:*:*:*:*","matchCriteriaId":"A7448F89-CC4A-4B18-887F-B47C0B57404C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.0:-:mac:*:*:*:*:*","matchCriteriaId":"9A404797-C734-4A70-BC32-6AED52DD96AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.0:-:windows:*:*:*:*:*","matchCriteriaId":"040B2DB5-8F7D-4272-A0D1-2872B289B125"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:*:windows:*:*:*:*:*","matchCriteriaId":"4F173E7D-3EEC-4698-B0FE-5CCE6F990829"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:-:mac:*:*:*:*:*","matchCriteriaId":"EA53A8ED-07F9-4882-A253-9E2FDAB731F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.1:-:windows:*:*:*:*:*","matchCriteriaId":"1A957B0E-9A86-40D4-8A39-01895C32838A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:*:windows:*:*:*:*:*","matchCriteriaId":"B2943C2E-0DDD-498A-9439-E9394CB06081"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:-:mac:*:*:*:*:*","matchCriteriaId":"1AC8825C-76AD-4640-A5CE-7557DF74133D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.6.2:-:windows:*:*:*:*:*","matchCriteriaId":"0B7DBB76-5A86-42A3-8A0A-19D616357619"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7:*:windows:*:*:*:*:*","matchCriteriaId":"D41DA19A-4403-40A8-A3DB-01A12FD4F267"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.0:-:mac:*:*:*:*:*","matchCriteriaId":"2EFA38A0-EA7C-40C7-B9B7-FE9D9EBB95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.0:-:windows:*:*:*:*:*","matchCriteriaId":"BC16747F-9F32-4186-9824-487163276EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:*:windows:*:*:*:*:*","matchCriteriaId":"25E7EF0A-D79E-44E3-B0D4-3C6E8F6FD666"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:-:mac:*:*:*:*:*","matchCriteriaId":"7990DED7-1E8B-4787-A057-BFEF14462157"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:7.7.1:-:windows:*:*:*:*:*","matchCriteriaId":"F2043A3A-3578-42D8-AF54-7C8073CA0DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:*:windows:*:*:*:*:*","matchCriteriaId":"317FB35B-18E2-437F-B328-1844D6C75B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:-:mac:*:*:*:*:*","matchCriteriaId":"C0A6DD25-D4A7-42C4-90AB-005B682B45BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0:-:windows:*:*:*:*:*","matchCriteriaId":"8524DF4C-9607-42A9-92DF-815F501C2133"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"7D4903B1-40F3-4137-9F4C-07EC7D208674"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.0:-:windows:*:*:*:*:*","matchCriteriaId":"E7A71D45-7715-4B1A-BC64-6F6287A324FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.1:-:windows:*:*:*:*:*","matchCriteriaId":"17517493-027E-4844-85DD-D8ABCDEB1BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"0D450451-C7BB-429D-8FFA-C3706303127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.0.2:-:windows:*:*:*:*:*","matchCriteriaId":"5A653FFB-16BF-439D-A03A-1C9FB6B6AB16"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.1:-:mac:*:*:*:*:*","matchCriteriaId":"3CA2DDCE-8EB9-4FB8-AD64-4F2C7A1D811B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.1:-:windows:*:*:*:*:*","matchCriteriaId":"891B1042-2F02-4D3A-9F2E-2567B2C0A63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"932EB8E5-5132-487A-B65E-4D3922E1A30F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.1.1:-:windows:*:*:*:*:*","matchCriteriaId":"36690CCC-AA84-4328-9BA5-F26556B1EBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.2:-:mac:*:*:*:*:*","matchCriteriaId":"FBC11A8C-EE81-4BF1-9FC6-4A7D6981BEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.2:-:windows:*:*:*:*:*","matchCriteriaId":"9CAB77AB-531A-43DD-8353-598941AC4128"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"91DA516E-1132-40C9-B6A6-EFB4369EECA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:itunes:8.2.1:-:windows:*:*:*:*:*","matchCriteriaId":"031526F9-4D73-4D0D-90A1-ED6D6B3CA467"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00006.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3884","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36478","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6290","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2818","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"This issue only affects Mac OS X Server systems. \"","cveTags":[],"descriptions":[{"lang":"en","value":"Adaptive Firewall in Apple Mac OS X before 10.6.2 does not properly handle invalid usernames in SSH login attempts, which makes it easier for remote attackers to obtain login access via a brute-force attack (aka dictionary attack)."},{"lang":"es","value":"Adaptive Firewall en Apple Mac OS X anterior a v10.6.2 no maneja adecuadamente los nombres de usuario no válidos en los intentos de login SSH, lo que facilita a atacantes remotos obtener acceso mediante un ataque de fuerza bruta (también conocido como ataque por diccionario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2819","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"These issues do not affect Mac OS X v10.6 systems\"","cveTags":[],"descriptions":[{"lang":"en","value":"AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors."},{"lang":"es","value":"AFP Client in Apple Mac OS X v10.5.8, permite a servidores AFP ejecutar comandos de su elección o provocar una denegación de servicio (corrupción de memoria o caída de aplicación) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2820","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues."},{"lang":"es","value":"CUPS en Apple Mac OS X anterior a v10.6.2no maneja adecuadamente (1) las cabeceras HTTP y (2) las plantillas HTML, lo que permite a atacantes remotos dirigir ataques de petición de sitios cruzados (XSS) y ataques de separación de respuesta HTTP a través de vectores relacionados con (a) la interfaz web del producto, (b) la configuración del sistema de impresión, y (c) los títulos de los trabajos impresos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"8E61F244-C6E5-48F1-8C18-5A7D862DA638"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37360","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cups.org/articles.php?L590","source":"cve@mitre.org"},{"url":"http://www.cups.org/documentation.php/relnotes.html","source":"cve@mitre.org"},{"url":"http://www.cups.org/str.php?L3367","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:072","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1595.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529833","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cups.org/articles.php?L590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/documentation.php/relnotes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/str.php?L3367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2823","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software."},{"lang":"es","value":"El servidor Apache HTTP en Apple Mac OS X anterior v10.6.2 habilita el método HTTP TRACE, lo que permite a atacantes dirigir ejecuciones de secuencias de comandos en sitios cruzados (XSS) a través de software de clientes web no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"8E61F244-C6E5-48F1-8C18-5A7D862DA638"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:300","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2824","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"These issues do not affect Mac OS X v10.6 systems\"","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document."},{"lang":"es","value":"Múltiples desbordamiento de búfer en Apple Type Services (ATS) en Apple Mac OS X v10.5.8 permite a atacantes remotos ejecutar código de su elección a través de fuentes manipuladas embebidas en un documento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2825","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"Certificate Assistant en Apple Mac OS X anterior a v10.6.2 no controla correctamente un caracter '\\0' en el nombre de dominio en el campo nombre común del sujeto (CN) de un certificado X.509, lo que podría permitir que atacantes hombre-en-el-medio suplantar a su elección servidores SSL a través de un certificado expedido por una Autoridad de Certificación legítima, una cuestión relacionada con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"8E61F244-C6E5-48F1-8C18-5A7D862DA638"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2826","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers a heap-based buffer overflow."},{"lang":"es","value":"Múltiples desbordamiento de búfer en CoreGraphics en Apple Mac OS X v10.5.8 permite a atacantes remotos ejecutar código a su elección o causar una denegación de servicio (caída de programa) a través de documentos PDF manipulados que provoca desbordamiento de búfer basado en memoria dinámica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2827","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"This issue does not affect Mac OS X v10.6\"","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FAT filesystem on a disk image."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Disk Images en Apple Mac OS X v10.5.8 permite a los atacantes remotos asistidos por usuarios ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un sistema de ficheros FAT manipulado en una imagen de disco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2828","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors."},{"lang":"es","value":"El servidor en DirectoryService en Apple Mac OS X v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y cuelgue de la aplicación) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2829","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\r\n\"This issue affects Mac OS X Server systems only\"","cveTags":[],"descriptions":[{"lang":"en","value":"Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a \"log injection\" issue."},{"lang":"es","value":"Event Monitor en Apple Mac OS X v10.5.8 no maneja adecuadamente los datos de autenticación manipulados enviados al demonio SSH, lo que permite a atacantes remotos causar una denegación de servicio a través de vectores involucrados en el procesado de documentos de registro XML de otros servicios, relacionado con el tema \"log injection\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2830","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html\r\n\r\n\"These issues do not affect systems prior to Mac OS X v10.6.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file.  NOTE: this might overlap CVE-2009-1515."},{"lang":"es","value":"Múltiples desbordamientos de búfer en fichero Christos Zoulas antes de v5.03 en Apple Mac OS X v10.6.x anterior a v10.6.2 permite a atacantes remotos asistido por usuario ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un archivo Common Document Format (CDF) elaborado. NOTA: podría solaparse CVE-2009-1515."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D25D1FD3-C291-492C-83A7-0AFAFAADC98D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A04FF6EE-D4DA-4D70-B0CE-154292828531"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2831","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a \"design issue.\""},{"lang":"es","value":"Diccionario en Apple Mac OS X v10.5.8 permite a atacantes remotos crear archivos arbitrarios con cualquier contenido, y por tanto ejecutar código arbitrario a través de JavaScript manipulado, en relación con un \"problema de diseño\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2832","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"This issue affects Mac OS X Server systems only\"","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a \"CWD command line tool.\""},{"lang":"es","value":"Desbordamiento de bufer en FTP Server en Apple Mac OS X anterior v10.6.2 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (caída de demonio) a través de un comando CWD especificando un nombre de archivo en la jerarquia de directorios profundamente anidados, relacionados con un \""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2833","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"This issue does not affect Mac OS X v10.6 systems\"","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en el API de UCCompareTextDefault en International Components para Unicode en Apple Mac OS X v10.5.8 permite a atacantes dependientes de contexto ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2834","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors."},{"lang":"es","value":"IOKit en Apple Mac OS X anterior v10.6.2 permite a usuarios locales modificar el firmware de (1) USB o (2) teclado Bluetooth a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"8E61F244-C6E5-48F1-8C18-5A7D862DA638"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2835","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El núcleo de Apple Mac OS X anterior a v10.6.2 no controla correctamente los segmentos de estado de la tarea, lo que permite a usuarios locales obtener privilegios, provocar una denegación de servicio (cuelgue del sistema), u obtener información sensible a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"8E61F244-C6E5-48F1-8C18-5A7D862DA638"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"399A8984-AADE-4281-A62F-A066D8F450A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"734BE71B-82F5-49C6-AB43-F662105D8746"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB7F7799-33A1-4A8E-915A-B0D503A3DFFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F0DD3165-E6C3-49D4-B1F8-8E0915CC8BF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6B8B16DB-4D1F-41B7-A7A2-2A443596E1AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"09ED46A8-1739-411C-8807-2A416BDB6DFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"8D089858-3AF9-4B82-912D-AA33F25E3715"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"2398ADC8-A106-462E-B9AE-F8AF800D0A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.6.1","matchCriteriaId":"093B82BC-936B-404D-8F19-DBE4FEB8BB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90383DA6-C449-462B-84AD-8DC567D367ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D846700-3355-42CA-B15E-7F08F935F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3891C974-DBDE-42AD-ADBA-C8689D0D055D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A6CE48E-FB74-4F49-911D-936B09677753"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"ADAB244E-0391-49E9-B36B-A7CB34CF7152"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DA38FB0C-3959-4C5A-B06D-39B2A340A173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02B8266D-69BB-417D-A776-DB9CF58A4C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"81F060C7-AC9E-4844-A430-14B3DFC90E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*","matchCriteriaId":"D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F60BF582-F700-4E26-A4AF-5BF657803525"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"29644501-54BD-45E9-A6C1-618892CD354F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8A132487-E89F-4D0D-8366-14AFC904811F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FD231103-D7C7-4697-BE90-D67558D6115C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BCADAAA0-C885-466C-A122-A94E73EAF817"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"2BE429EF-24D4-453A-8B43-8CCEF5D72773"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8AC9692A-CE81-446D-B136-449662C4B9A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*","matchCriteriaId":"504D78AB-5374-48C9-B357-DB6BD2267D2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"3029892E-1375-4F40-83D3-A51BDC4E9840"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*","matchCriteriaId":"81F8DA6D-2258-4138-8FB2-90BE3C68B230"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*","matchCriteriaId":"20E8648C-5469-4280-A581-D4A9A41B7213"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C147E866-B80F-4FFA-BBE8-19E84A46DB1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*","matchCriteriaId":"ADF94705-562C-4EC8-993E-1AD88F01549C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2836","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per:\r\n\r\n\"This issue does not affect systems prior to Mac OS X v.10.6.\"\r\n\r\n\"A user may log in to any account without supplying a password\"","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors."},{"lang":"es","value":"Race condition en Login Window en Apple Mac OS X v10.6.x anterior v10.6.2, cuando al menos una cuenta tiene el password en blanco, permite a atacantes superar la autenticación de password y obtener acceso a una cuenta arbitraria a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D25D1FD3-C291-492C-83A7-0AFAFAADC98D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6:*:*:*:*:*:*:*","matchCriteriaId":"8750269D-DF74-4DE5-AA08-BD2B13445F0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A04FF6EE-D4DA-4D70-B0CE-154292828531"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2837","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en QuickDraw Manager en Apple Mac OS X anterior v10.6.2 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (caída de programa) a través de una imagen PICT manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:server:*:*:*:*:*","matchCriteriaId":"246710D2-DE64-423B-9091-5405444EF68A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*","matchCriteriaId":"AFB40DFD-621D-4069-93E2-9EE32411082F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6:server:*:*:*:*:*:*","matchCriteriaId":"B029C4C6-E3FE-4088-B932-D45804983A55"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D25D1FD3-C291-492C-83A7-0AFAFAADC98D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:server:*:*:*:*:*","matchCriteriaId":"7E23F359-0D06-47FC-9D35-60EB51F47883"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6707","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2838","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document that triggers a buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en QuickLook en Apple Mac OS X v10.5.8 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (cuelgue de aplicación) a través de un documento de Microsoft Office manipulado que provoca un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:server:*:*:*:*:*","matchCriteriaId":"246710D2-DE64-423B-9091-5405444EF68A"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2839","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://support.apple.com/kb/HT3937\r\n\r\n\"This issue does not affect Mac OS X v10.6 systems. \"","cveTags":[],"descriptions":[{"lang":"en","value":"Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors."},{"lang":"es","value":"Screen Sharing in Apple Mac OS X v10.5.8 permite a servidores VNC remotos ejecutar código a su elección o causar una denegación de servicio (consumo de memoria y caída de programa) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59997","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2840","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges via unspecified vectors."},{"lang":"es","value":"Spotlight en Apple Mac OS X v10.5.8 no maneja adecuadamente los archivos temporales, lo que permite a usuarios locales sobrescribir archivos de su elección en el contexto de los privilegios de usuario diferentes a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2841","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202."},{"lang":"es","value":"WebKit en Apple Safari en versiones anteriores a la 4.0.4 en Mac OS X no realiza las devoluciones de llamada esperadas para elementos multimedia HTML 5 que tienen URLs externas para recursos multimedia, lo que permite a atacantes remotos disparar peticiones a sitios web de su elección mediante un documento HTML manipulado, tal como se ha demostrado por un mensaje de correo electrónico HTML que usa un elemento multimedia para la funcionalidad X-Confirm-Reading-To."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"276684F5-5CD2-44E6-931A-E8B11D022B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36EA71E0-63F7-46FF-AF11-792741F27628"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/59941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37346","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40557","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3949","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4013","source":"cve@mitre.org"},{"url":"http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109","source":"cve@mitre.org"},{"url":"http://trac.webkit.org/changeset/49480","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:039","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36996","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023167","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1006-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1801","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2722","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0552","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525791","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54242","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.webkit.org/changeset/49480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2842","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site."},{"lang":"es","value":"Apple Safari en versiones anteriores a la 4.0.4 no implementa de manera apropiada las opciones de menu (1) Open Image y (2) Open Link, lo que permite a atacantes remotos leer ficheros HTML locales mediante un sitio web manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"276684F5-5CD2-44E6-931A-E8B11D022B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*","matchCriteriaId":"957FCFC4-565A-4F2F-8D3D-D0982E1723F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*","matchCriteriaId":"22A450DC-CDF5-4EA0-A703-AFB3DEFE1395"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*","matchCriteriaId":"21BAC0B8-063C-4772-8F1B-EB9A2F7A585C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*","matchCriteriaId":"6BAB4071-A883-4E04-BDDF-A121C4738E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36EA71E0-63F7-46FF-AF11-792741F27628"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59942","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36994","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023164","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54238","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5915","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2843","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote attackers to execute arbitrary code via an applet."},{"lang":"es","value":"Java para Mac OS X 1v0.5 anterior Update v6 y v10.6 anterior Update v1 acepta certificados expirados para applets, lo que hace que sea facil para atacantes remotos ejecutar código de su elección a través de un applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37206","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2844","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function.  NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability."},{"lang":"es","value":"cfg80211 en el archivo net/wireless/scan.c en el kernel de Linux versión 2.6.30-rc1 y otras versiones anteriores a 2.6.31-rc6,  permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de una secuencia de tramas beacon en los que una trama omite un Elemento de Información (IE) SSID y la trama posterior contiene un IE SSID, que desencadena una desreferencia de un puntero NULL en la función cmp_ies. NOTA: también se abordó una potencial debilidad en la función is_mesh, pero la condición relevante no existía en el código, por lo que no es una vulnerabilidad."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.\n\nPlease note this issue only affected Linux kernel versions after v2.6.30-rc1 and was fixed in v2.6.31-rc6.","lastModified":"2009-08-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*","versionEndIncluding":"2.6.16.31","matchCriteriaId":"6277DB43-CBB1-4E4A-B071-0D82CE293F3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*","matchCriteriaId":"EC36074C-C310-4341-8B3C-BB34E572BF94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*","matchCriteriaId":"ECCC155A-C68C-44A8-8C44-7979C9889C34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*","matchCriteriaId":"040EBFDA-7F8D-428F-BB69-BB1B52BB868B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*","matchCriteriaId":"69E703D2-8CC9-421A-9728-75E8FCFB4FE6"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e","source":"cve@mitre.org"},{"url":"http://jon.oberheide.org/files/cfg80211-remote-dos.c","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36278","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/17/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/17/2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36052","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jon.oberheide.org/files/cfg80211-remote-dos.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/17/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/17/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2845","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T20:30:00.877","lastModified":"2023-11-07T02:04:16.027","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2768.  Reason: This candidate is a duplicate of CVE-2009-2768.  Notes: All CVE users should reference CVE-2009-2768 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2846","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function."},{"lang":"es","value":"La función eisa_eeprom_read en el componente the parisc isa-eeprom (drivers/parisc/eisa_eeprom.c) en el kernel de Linux anterior a v2.6.31-rc6 permite a usuarios locales acceder a memoria restringida a través de argumentos negativos ppos, lo que evita un control que asume que ppos es positivo y causa una lectura fuera de rango en la función readb."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for the Linux kernel on the PA-RISC architecture.","lastModified":"2009-08-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc5:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"4116D22D-1003-4784-A5A4-2F7413A3041A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6b4dbcd86a9d464057fcc7abe4d0574093071fcc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/10/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/18/6","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52906","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6b4dbcd86a9d464057fcc7abe4d0574093071fcc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/10/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/18/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2847","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function."},{"lang":"es","value":"La función do_sigaltstack en kernel/signal.c en el kernel de Linux 2.6 antes de 2.6.31-RC5, cuando se ejecuta en sistemas de 64 bits, no limpia algunos octetos de relleno de una estructura, lo que permite a usuarios locales obtener información sensible de la pila del núcleo a través de la función sigaltstack."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue has been rated as having moderate security impact. It was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG:\nhttp://rhn.redhat.com/cve/CVE-2009-2847.html\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.  For further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2009-09-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*","versionEndIncluding":"2.6.16.31","matchCriteriaId":"6277DB43-CBB1-4E4A-B071-0D82CE293F3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*","matchCriteriaId":"EC36074C-C310-4341-8B3C-BB34E572BF94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*","matchCriteriaId":"ECCC155A-C68C-44A8-8C44-7979C9889C34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*","matchCriteriaId":"040EBFDA-7F8D-428F-BB69-BB1B52BB868B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*","matchCriteriaId":"69E703D2-8CC9-421A-9728-75E8FCFB4FE6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:linux:linux:*:*:x64:*:*:*:*:*","matchCriteriaId":"62F1CAA4-7A50-4F1C-A542-210C50273D8E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=0083fc2c50e6c5127c2802ad323adf8143ab7856","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36562","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36759","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9352","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/05/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515392","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=0083fc2c50e6c5127c2802ad323adf8143ab7856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/05/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2848","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit."},{"lang":"es","value":"Una función execve en el kernel de Linux, posiblemente versión 2.6.30-rc6 y anteriores, no borra apropiadamente el puntero de current-)clear_child_tid, lo que permite a los usuarios locales causar una denegación de servicio (corrupción de memoria) o posiblemente alcanzar privilegios por medio de un sistema de clonación que llama con CLONE_CHILD_SETTID o CLONE_CHILD_CLEARTID habilitadas, que no son manejados apropiadamente durante la creación y salida de hilos (subprocesos)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":5.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.29.5","matchCriteriaId":"A4C33180-0CB1-4A35-8AD9-24F2832A3ECF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*","matchCriteriaId":"77B40D2B-9AAA-49A4-9C74-7A94A82DBCCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:*:*:*:*:*:*","matchCriteriaId":"5EE58B00-70BB-493D-ACDE-77F486984392"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.kernel/871942","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35983","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36501","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36562","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36759","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37351","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/2","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/05/10","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52899","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://article.gmane.org/gmane.linux.kernel/871942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/05/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2849","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to \"suspend_* sysfs attributes\" and the (1) suspend_lo_store or (2) suspend_hi_store functions.  NOTE: this is only a vulnerability when sysfs is writable by an attacker."},{"lang":"es","value":"El driver md (drivers/md/md.c) en el kernel de Linux anteriores a 2.6.30.2 podría permitir a usuarios locales producir una denegación de servicio (referencia a un puntero nulo)  a través de vectores relacionados con los \" atributos suspend*sysfs\" a la funciones (1) suspend_lo_store o (2) suspend_hi_store. NOTA:  Esto se trata de una vulnerabilidad cuando sysfs puede ser escrito por un atacante."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2849\n\nThe flaw was introduced in kernel version 2.6.17-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, and 4 are not affected by this issue.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1540.html\n\nA future kernel update for Red Hat Enterprise Linux 5 will address this flaw.","lastModified":"2009-11-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.30.1","matchCriteriaId":"DA86D0A4-F0F6-4E87-BAB0-6DADCFF86AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36501","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38834","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/24/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/26/1","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022961","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org"},{"url":"http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52858","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2850","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, and other errors in the (2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64, and other unspecified functions."},{"lang":"es","value":"Desbordamiento múltiple de buffer en NASA Common Data Format (CDF)permite a atacantes dependientes del contexto ejecutar código a su elección, como es demostrado usando (1) un error en el array de indexación en la función  ReadAEDRList64, y otros errores en(2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64,y otras funciones no especificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:*:*:*:*:*:*:*:*","matchCriteriaId":"881ABFE7-AD96-4741-8339-E4DCADB53A10"}]}]}],"references":[{"url":"http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html","source":"cve@mitre.org"},{"url":"http://cdf.gsfc.nasa.gov/html/CDF_v330.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/14/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505123/30/0/threaded","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cdf.gsfc.nasa.gov/html/CDF_changesnote2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cdf.gsfc.nasa.gov/html/CDF_v330.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/14/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505123/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2851","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el interfaz de administrador en Wordpress anterior a v2.8.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de una URL de comentarios de autor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.1","matchCriteriaId":"7E2C6B7F-A315-4F40-B4FC-B7A567648E09"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=278492","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022589","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wordpress.org/development/2009/07/wordpress-2-8-2/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/21/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512900","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=278492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wordpress.org/development/2009/07/wordpress-2-8-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/21/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2852","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function."},{"lang":"es","value":"WP-Syntax plugin v0.9.1 y anteriores de Wordpress, que activan register_globals, permiten a atacantes remotos ejecutar código PHP a su elección a través del parámetro del array test_filter[wp_head]de test/index.php, que es usado en la llamada a la función call_user_func_array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ryan.mcgeary:wp-syntax:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.1","matchCriteriaId":"816AA6AB-59AB-4FB9-88D6-BDA857F017AB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9431","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36040","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2456","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52457","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2853","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/."},{"lang":"es","value":"Wordpress anterior a v2.8.3 permite a atacantes remotos conseguir privilegios a traves de una peticion directa a (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, y (8) edit-tag-form.php en wp-admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*","matchCriteriaId":"9C8B90E9-5DF5-45F5-9810-2973FDAA16A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*","matchCriteriaId":"4B714413-D4C2-4532-A282-51C67FCA9F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.71:beta_3:*:*:*:*:*:*","matchCriteriaId":"5BA5CF40-7AF0-4455-BE8E-269A4D1706FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*","matchCriteriaId":"5F33ACD9-B4B6-4B5E-9CD5-26AA5997119C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta_1:*:*:*:*:*:*","matchCriteriaId":"9CEF046C-8AA6-4AB8-B243-D7088926C2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:beta_2:*:*:*:*:*:*","matchCriteriaId":"4EC52C66-7819-4E64-8E94-254707954F2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*","matchCriteriaId":"C4AF89F9-AE67-49B5-ACF0-3A645C454E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*","matchCriteriaId":"0174AF4F-9759-4762-ACF4-688E232AF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D7D86BA1-3DC8-478C-B2FA-581F9AE1F93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:miles:*:*:*:*:*:*","matchCriteriaId":"701691ED-8A35-4F7A-9DDE-7ED62CA425BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"9A9FD311-FEB1-4CFD-AE48-01D3C26321B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0666BEBE-BE45-41D3-8C53-E4C9E6853C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"3F595742-90E1-45AD-BC24-127A80172B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B64D4777-2ED6-4A47-A8F3-38A3A8EB1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614956CB-0582-4EAD-86F4-5AB0BB781CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*","matchCriteriaId":"503E4894-3F39-471F-9A56-052718813BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"38085E5A-7B41-4E43-8A22-5FD44970F3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4F0B6EAC-E43D-4D1B-856F-7C23250A2355"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"51FAD0FC-CE84-4332-B061-75C0C8A0B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BAF4671A-8449-438E-922B-94E5542137BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"92F05A1F-2227-4166-807B-1BDE2EA8F245"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0CF73E23-7CD0-429C-986B-5F721F1696BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EECE66B3-3696-4E98-AF63-DF2FB256A6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.5:ronan:*:*:*:*:*:*","matchCriteriaId":"77D3033B-D648-4C07-8DF2-9F2456AE9725"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFA75368-506F-4772-B0F2-8AAECDF288F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FDDD9E5C-766F-4945-B87D-781E780AB03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"66BE667A-A937-4C38-B4D5-29B33F23F7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1:ella:*:*:*:*:*:*","matchCriteriaId":"3945DE09-266B-482C-AA10-1ACB5C503808"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.1:dangerous:*:*:*:*:*:*","matchCriteriaId":"5D9FED63-94E4-428A-84C2-2CD2E9203AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"266E32CD-66FB-4E19-8091-EC748B177D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DD9120-2224-4612-A6EE-539F47BD50E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A0F9137B-D13F-488B-8196-85E06FAB682E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"82F257F4-CB62-4C6F-8866-AA253EC8C0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79AB6F6F-2FE3-4FC3-9009-D40EA852711F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*","matchCriteriaId":"94ADC624-E43E-4F1D-8525-F6903943C932"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"06A25444-2680-4379-B2CA-9858B6AF71CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A82F4D88-779D-4D5D-96CD-2B31B61BA29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"4801D56C-5ED6-4648-A0C9-EB4D06786A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA0DABD9-DE15-4619-8668-0277A67F5205"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*","matchCriteriaId":"40BEC573-A346-4F07-8053-A5F6E92A343C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"2A777651-D2B2-47E0-A13C-BD667635F3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B017F95A-90F8-4DE4-B74F-ABB712F32987"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1503C4CB-5D58-4523-860C-4B637AD91CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"55050BF2-A950-45FF-8CD7-7689431AD82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1253161D-F1C8-46D6-B970-20335071500E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.7:coltrane:*:*:*:*:*:*","matchCriteriaId":"6AA406D3-8DC9-4D55-BAD4-EE4D1E890B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F5663CAA-0859-447E-8489-02CE4315DF91"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*","matchCriteriaId":"480AE325-6DE1-4769-A931-0C6F40D15267"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"CE23B6C2-354C-47BE-87B9-D4A0A3EE8ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"FC657077-8955-4CE6-93D8-F78B1BA3A949"}]}]}],"references":[{"url":"http://core.trac.wordpress.org/changeset/11768","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/changeset/11769","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://core.trac.wordpress.org/changeset/11768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/changeset/11769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2854","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit-pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/."},{"lang":"es","value":"Wordpress antes de v2.8.3 no comprueba los privilegios de ciertas acciones, lo cual facilita a atacantes remotos a la hora de hacer modificaciones no autorizadas a través de una solicitud directa a (1) edit-comments.php, (2)edit-pages.php, (3) edit. php, (4) edit-category-form.php (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, o (9) link-add.php en wp-admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.2","matchCriteriaId":"2DFBA1C6-B19C-47DA-A71E-9E945B41D803"}]}]}],"references":[{"url":"http://core.trac.wordpress.org/changeset/11765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/changeset/11766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://core.trac.wordpress.org/changeset/11765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/changeset/11766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wordpress.org/development/2009/08/wordpress-2-8-3-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2855","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T21:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function."},{"lang":"es","value":"La función strListGetItem en src/HttpHeaderTools.c en Squid v2.7 a permite a los atacantes remotos causar una denegación de servicio a través de una cabecera auth manipulada con ciertos delimitadores coma que lanzan un bucle infinito de llamadas a la función strcspn."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of the squid packages, as shipped with Red Hat Enterprise Linux 3 and 4.\n\nThe issue was addressed in the squid packages as shipped with Red Hat Enterprise Linux 5 via:\nhttps://rhn.redhat.com/errata/RHSA-2010-0221.html\n","lastModified":"2010-03-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*","matchCriteriaId":"35C30CB9-FA3A-408D-A8B0-8805E75657BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:2.7:stable3:*:*:*:*:*:*","matchCriteriaId":"A03692DD-779F-4E3C-861C-29943870A816"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid-cache:squid:2.7:stable4:*:*:*:*:*:*","matchCriteriaId":"79FF6B3C-A3CE-4AA2-80F9-44D05A6B2F08"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534982","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31%3Bfilename=diff%3Batt=1%3Bbug=534982","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/20/10","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/03/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36091","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022757","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=2541","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=2704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518182","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52610","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10592","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=31%3Bfilename=diff%3Batt=1%3Bbug=534982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/20/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/03/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/04/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=2541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=2704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2856","sourceIdentifier":"cve@mitre.org","published":"2009-08-18T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network."},{"lang":"es","value":"Sun Virtual Desktop Infrastructure (VDI) v3.0, cuando la vinculación anónima esta activada, no se maneja adecuadamente el intento del cliente de establecer una conexión cifrada y autenticada, lo que permitiría a atacantes remotos leer las peticiones de datos de configuración mediante el escaneo de las sesiones de LDAP en la red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtual_desktop_infrastructure:3.0:*:*:*:*:*:*:*","matchCriteriaId":"13508CBB-9253-40A6-9CC9-5CD5535A35DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtual_desktop_infrastructure:3.0:*:*:*:*:*:*:*","matchCriteriaId":"13508CBB-9253-40A6-9CC9-5CD5535A35DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2282","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2857","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file."},{"lang":"es","value":"El kernel en Sun Solaris v8, v9, y v10, y OpenSolaris anteriores a snv_103, no maneja adecuadamente la interacción entre el sistema de ficheros y las implementaciones de memoria virtual, lo que permite a usuarios locales producir una denegación de servicio (bloqueo mutuo ,-deadlock- y parada del sistema) a través de vectores que incluyen operación de nmap y escritura en el mismo fichero."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*","versionEndExcluding":"snv_103","matchCriteriaId":"E76824E6-0670-4010-B187-99CC695171A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*","matchCriteriaId":"4F864AD7-53A2-4225-870F-062876CE45DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/36319","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2291","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-257848-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-2858","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure."},{"lang":"es","value":"Fuga de memoria en el componente de seguridad en IBM DB2 v8.1 anteriores a FP18 en plataformas Unix permite a atacantes producir una denegación de servicio a través de vectores sin especificar, relacionado con la memoria privada dentro de la estructura de memoria de DB2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"00D40BBF-DAC1-4C6D-806B-B04C88F237F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2418C923-2F94-4FAF-A9BD-D1C436308C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*","matchCriteriaId":"18D59696-A477-4397-BC14-4EF69DAFA262"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*","matchCriteriaId":"BBABCAC8-0E04-44FC-BF1A-88CACB28E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*","matchCriteriaId":"AC318EEC-AFE5-4070-8711-B6560143CF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*","matchCriteriaId":"5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*","matchCriteriaId":"DCF379F0-6D58-47A9-849E-C48D13496C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*","matchCriteriaId":"1F878C22-6294-4DFD-AFA4-1094644D15F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*","matchCriteriaId":"F2799A9D-1BAC-491A-B36B-A124C44D9EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*","matchCriteriaId":"8AEBA7BD-E897-438E-8DD5-7AB5490AB931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*","matchCriteriaId":"BAA746B2-AC20-49D3-B8C6-655C268CB253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*","matchCriteriaId":"0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"A8DA176E-1AD6-4524-9931-0165263D4E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*","matchCriteriaId":"AC4145E1-A805-4E64-904C-03B0B13BADBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*","matchCriteriaId":"281B0499-11FD-4B99-B402-B44B609469E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"81AB9705-2397-4218-9529-E0DAF3196DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*","matchCriteriaId":"2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*","matchCriteriaId":"53C13821-A069-41B8-AECD-8562E22F37D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*","matchCriteriaId":"385C934A-4374-491C-8A61-EBCC5E72AF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*","matchCriteriaId":"F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*","matchCriteriaId":"286E4585-57F7-428D-B9C2-63B33FA2BF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*","matchCriteriaId":"E5F0F22B-EEA3-43B3-A600-53A471F32E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*","matchCriteriaId":"E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*","matchCriteriaId":"1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024075","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2859","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command."},{"lang":"es","value":"IBM DB2 v8.1 anterior a FP18 permite a atacantes obtener acceso sin especificar a través del comando \"das\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"00D40BBF-DAC1-4C6D-806B-B04C88F237F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2418C923-2F94-4FAF-A9BD-D1C436308C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*","matchCriteriaId":"18D59696-A477-4397-BC14-4EF69DAFA262"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*","matchCriteriaId":"BBABCAC8-0E04-44FC-BF1A-88CACB28E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*","matchCriteriaId":"AC318EEC-AFE5-4070-8711-B6560143CF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*","matchCriteriaId":"5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*","matchCriteriaId":"DCF379F0-6D58-47A9-849E-C48D13496C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*","matchCriteriaId":"1F878C22-6294-4DFD-AFA4-1094644D15F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*","matchCriteriaId":"F2799A9D-1BAC-491A-B36B-A124C44D9EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*","matchCriteriaId":"8AEBA7BD-E897-438E-8DD5-7AB5490AB931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*","matchCriteriaId":"BAA746B2-AC20-49D3-B8C6-655C268CB253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*","matchCriteriaId":"0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"A8DA176E-1AD6-4524-9931-0165263D4E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*","matchCriteriaId":"AC4145E1-A805-4E64-904C-03B0B13BADBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*","matchCriteriaId":"281B0499-11FD-4B99-B402-B44B609469E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"81AB9705-2397-4218-9529-E0DAF3196DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*","matchCriteriaId":"2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*","matchCriteriaId":"53C13821-A069-41B8-AECD-8562E22F37D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*","matchCriteriaId":"385C934A-4374-491C-8A61-EBCC5E72AF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*","matchCriteriaId":"F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*","matchCriteriaId":"286E4585-57F7-428D-B9C2-63B33FA2BF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*","matchCriteriaId":"E5F0F22B-EEA3-43B3-A600-53A471F32E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*","matchCriteriaId":"E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*","matchCriteriaId":"1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ34149","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024075","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ34149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2860","sourceIdentifier":"cve@mitre.org","published":"2009-08-19T17:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via \"malicious packets.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en db2jds en IBM DB2 v8.1 anteriores a FP18 permite a atacantes remotos producir una denegación de servicio (caída de servicio) a través de \"paquetes maliciosos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"00D40BBF-DAC1-4C6D-806B-B04C88F237F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2418C923-2F94-4FAF-A9BD-D1C436308C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*","matchCriteriaId":"18D59696-A477-4397-BC14-4EF69DAFA262"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*","matchCriteriaId":"BBABCAC8-0E04-44FC-BF1A-88CACB28E644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*","matchCriteriaId":"AC318EEC-AFE5-4070-8711-B6560143CF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*","matchCriteriaId":"5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*","matchCriteriaId":"DCF379F0-6D58-47A9-849E-C48D13496C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*","matchCriteriaId":"1F878C22-6294-4DFD-AFA4-1094644D15F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*","matchCriteriaId":"F2799A9D-1BAC-491A-B36B-A124C44D9EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*","matchCriteriaId":"8AEBA7BD-E897-438E-8DD5-7AB5490AB931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*","matchCriteriaId":"BAA746B2-AC20-49D3-B8C6-655C268CB253"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*","matchCriteriaId":"0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"A8DA176E-1AD6-4524-9931-0165263D4E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*","matchCriteriaId":"AC4145E1-A805-4E64-904C-03B0B13BADBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*","matchCriteriaId":"281B0499-11FD-4B99-B402-B44B609469E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"81AB9705-2397-4218-9529-E0DAF3196DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*","matchCriteriaId":"2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*","matchCriteriaId":"53C13821-A069-41B8-AECD-8562E22F37D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*","matchCriteriaId":"385C934A-4374-491C-8A61-EBCC5E72AF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*","matchCriteriaId":"F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*","matchCriteriaId":"286E4585-57F7-428D-B9C2-63B33FA2BF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*","matchCriteriaId":"E5F0F22B-EEA3-43B3-A600-53A471F32E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*","matchCriteriaId":"E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*","matchCriteriaId":"1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36313","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52433","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024075","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2861","sourceIdentifier":"psirt@cisco.com","published":"2009-08-27T17:00:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka \"SkyJack\" or Bug ID CSCtb56664."},{"lang":"es","value":"La funcionalidad Over-the-Air Provisioning (OTAP) en dispositivos Cisco Aironet Lightweight Access Point 1100 y 1200 no implementan apropiadamente la asociación al punto de acceso, lo que permite a los atacantes remoto suplantar un controlador y causar una denegación de servicio (parada de servicio) a través de una gestión de paquetes de radio remota (RRM) manipulados, también conocidos como \"SkyJack\" o Bug ID CSCtb56664."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:N/I:C/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.3},"baseSeverity":"HIGH","exploitabilityScore":5.5,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*","matchCriteriaId":"6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*","matchCriteriaId":"2E8B5553-7295-4786-9F81-B4527EAD4F0B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022774","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18919","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf","source":"psirt@cisco.com"},{"url":"http://www.airmagnet.com/news/press_releases/2009/08252009.php","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/36145","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2419","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.airmagnet.com/news/press_releases/2009/08252009.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2862","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252."},{"lang":"es","value":"Los \"Object Groups\" (grupos de objetos) para la funcionalidad de listas de control de acceso (ACLs) en Cisco IOS v12.2XNB, v12.2XNC, v12.2XND, v12.4MD, v12.4T, v12.4XZ y  v12.4YA permiten a los usuarios remotos evitar las restricciones establecidas a través de peticiones modificadas. También conocido como IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122 y CSCsu50252."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://osvdb.org/58338","source":"psirt@cisco.com","tags":["Broken Link"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18876","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36495","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022933","source":"psirt@cisco.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com","tags":["Permissions Required"]},{"url":"http://osvdb.org/58338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}},{"cve":{"id":"CVE-2009-2863","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227."},{"lang":"es","value":"Una condición de carrera en la función Firewall Authentication Proxy de Cisco IOS v12.0 hasta la v12.4 permite a atacantes remotos evitar la autenticación, o saltarse la página web de la autorización, a través de una solicitud debidamente modificada. Se trata del Bug ID CSCsy15227."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irc:*:*:*:*:*:*:*","matchCriteriaId":"113CC627-7381-49DF-B384-CC70FB795EFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*","matchCriteriaId":"E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*","matchCriteriaId":"E67621EA-25D8-47C2-ADEA-512E38F2FFE3"}]}]}],"references":[{"url":"http://osvdb.org/58340","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18882","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36491","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022935","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53453","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2864","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"An unauthenticated, remote attacker could exploit this vulnerability to cause the affected application to fail, resulting in a DoS condition.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423."},{"lang":"es","value":"Cisco Unified Communications Manager (también conocido como CUCM, antiguamente como CallManager) v5.x anterior a v5.1(3g), v6.x anterior a v6.1(4), v7.0.x anterior a v7.0(2a)su1 y v7.1.x anterior a v7.1(2) permite a usuarios remotos provocar una denegación del servicio (reinicio del servicio) a través de mensajes SIP malformados. También conocido como Bug ID CSCsz95423."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C5865997-F8B2-4ABB-96DF-3AE691A7CE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E9211420-9F35-4872-879A-5F7CA29C6299"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"163B798C-B207-4CA6-AF8A-5955F5B89A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D7DD4B55-4C68-45CD-988E-D470C26E5E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"48C1B081-1FD7-4BBD-84BD-E1E5F80C74FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"BC32C417-3E61-4892-9A42-C31C6D62F09D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"3841B111-FEFE-4367-AFF0-B7F17D468E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.0\\(4c\\):*:*:*:*:*:*:*","matchCriteriaId":"5DE9B3F9-6650-4568-B5FB-C228BD367002"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8DC17139-DB98-4C59-B29B-1B792C67EB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"949045EF-8CB3-453A-8C4C-9B0B12775396"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"569E4CE4-119A-432D-9EE0-01E19DC9E918"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"99495B1F-90E6-4405-AA08-2764D6EB34DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E3E60E9F-A0F8-4B3C-9DB3-8D5BE3D5EC6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"93A8CC01-1C2B-44A1-9CD6-4BD375FA8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(2b\\):*:*:*:*:*:*:*","matchCriteriaId":"01AA0941-6BDA-4B7E-81C5-D48ADAA3B5E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"1D9BA114-1C07-44BF-9645-DACE14CB9A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"439FC49D-8860-4D74-B82B-A91F6B6C8DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(3b\\):*:*:*:*:*:*:*","matchCriteriaId":"BFE8E328-D5DD-4E6B-A21C-B6CE6A1784CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:5.1\\(3c\\):*:*:*:*:*:*:*","matchCriteriaId":"D47BCC3A-8D11-4BF1-BB22-98EB7A1324DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F39D409C-BC11-49BB-96D7-15954A524A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.0\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"60068FC9-8A85-42E7-A0F8-AAE190E1DD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.0\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"8AD79B32-0F2C-4691-8458-702E68089594"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3F383F7-DE21-425D-98BC-2CCB99012659"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"E20E884C-8F7C-4E29-8701-1CD1F63745D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E9E102AF-0603-4B4B-978C-FE76C66E9EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.1\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"6C38632E-4519-4A69-ABB8-BD5991F8081D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_callmanager:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"72BCC243-D4B8-477D-9B68-C90571F57472"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"1022C151-6EC8-4E8D-85ED-59D51551BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"060593BD-ADC1-4282-BC6D-E0D6A2B7C8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"239510AD-8BB0-4515-B1DA-80DE696D25DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"26277C4A-4E27-492C-B18C-AC68D86ADF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"0318CF61-B892-4D44-B41A-D630B4AB808C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"9CDA8A78-BA6C-4451-8EAA-B83C3A6C6BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3c\\):*:*:*:*:*:*:*","matchCriteriaId":"84A49932-1E22-4BE0-8195-926D44F65AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"4DE1B0DD-EA64-493B-86B7-9057EE5033C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:5.1\\(3e\\):*:*:*:*:*:*:*","matchCriteriaId":"00ECD7C0-7F3C-4021-B949-32141E58687C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"6CC94003-72B6-45C3-A07E-0A08F1562B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"958A2707-0F1A-4719-BB9F-DC9ED129105A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"48A8EE9A-458D-4619-B04D-F01A9934DC11"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"597D9674-F44D-4A31-A2F2-2790ED698A91"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\)su1:*:*:*:*:*:*:*","matchCriteriaId":"3C2B7439-8547-41A6-AE6C-6ABCD167890E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(2\\)su1a:*:*:*:*:*:*:*","matchCriteriaId":"FF3EB2A0-6907-4260-BBF1-D8E6E40827FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"BE122F76-ECDB-4446-825C-EF02257D8C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:7.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D0907FAF-8334-42C1-B35A-EC6ED89AC110"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:7.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"FCB47159-FA07-4317-B562-D7AB7C49E8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"77979322-F060-4DD4-A6F2-B1157664C0FA"}]}]}],"references":[{"url":"http://osvdb.org/58344","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/36836","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18883","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36496","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022931","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2757","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53447","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2865","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779."},{"lang":"es","value":"Desbordamiento de búfer en la implementación del inicio de sesión de la característica \"Extension Mobility\" del componente \"Unified Communications Manager Express\" (CME) de Cisco IOS v12.4XW, v12.4XY, v12.4XZ y v12.4YA. Permite a usuarios remotos ejecutar código de su elección o provocar una denegación de servicio a través de peticiones HTTP modificadas. También conocido como Bug ID CSCsq58779."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_communications_manager_express:*:*:*:*:*:*:*:*","matchCriteriaId":"720EB93A-AE27-470E-B8F8-45D1B6CBE94C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://osvdb.org/58335","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18884","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36498","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022932","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2758","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53448","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2866","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco IOS v12.2 hasta la v12.4 permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete H.323 modificado. También conocido como Bug ID CSCsz38104."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*","matchCriteriaId":"3870C62F-D086-419C-A0E6-815E9ED5DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*","matchCriteriaId":"E67621EA-25D8-47C2-ADEA-512E38F2FFE3"}]}]}],"references":[{"url":"http://osvdb.org/58337","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18885","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36494","source":"psirt@cisco.com"},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53446","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2867","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted SIP transit packet, aka Bug ID CSCsr18691."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco IOS 1v2.2XNA, v12.2XNB, v12.2XNC, v12.2XND, v12.4T, v12.4XZ y v12.4YA. Cuando la función \"Policy Firewall SIP Inspection\" está activada, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete de tránsito SIP modificado. También conocido como Bug ID CSCsr18691."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*","matchCriteriaId":"E67621EA-25D8-47C2-ADEA-512E38F2FFE3"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18886","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8130.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7254","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8130.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2868","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco IOS v12.2 hasta la v12.4. Cuando la autenticación basada en certificado está activada, permite a usuarios remotos provocar una denegación de servicio (agotamiento de Phase 1 SA) a través de peticiones modificadas. También conocido como aka Bug IDs CSCsy07555 and CSCee72997."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irc:*:*:*:*:*:*:*","matchCriteriaId":"113CC627-7381-49DF-B384-CC70FB795EFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*","matchCriteriaId":"8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18887","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8117.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8117.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2869","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet, aka Bug IDs CSCsu24505 and CSCsv75948."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco IOS v12.2XNA, v12.2XNB, v12.2XNC, v12.2XND, v12.4MD, v12.4T, v12.4XZ y v12.4YA permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete NTPv4 modificado. También conocido como Bug IDs CSCsu24505 y CSCsv75948."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*","matchCriteriaId":"94E1421B-2B86-41B2-9288-59780E081337"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ye:*:*:*:*:*:*:*","matchCriteriaId":"51A5F5FF-6BC4-4A1E-B9F1-BD47096D30B2"}]}]}],"references":[{"url":"http://osvdb.org/58342","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18889","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8131.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6712","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8131.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2870","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco IOS v12.2 hasta la v12.4. Cuando la función \"Cisco Unified Border Element\" esta activada, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de mensajes SIP modificados. También conocido como Bug ID CSCsx25880."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4gc:*:*:*:*:*:*:*","matchCriteriaId":"89B19F2B-1D89-42FC-89A7-737D8109EB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18891","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811b.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811b.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2871","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002."},{"lang":"es","value":"Vulnerabilidad sin especificar en Cisco IOS v12.2 y v12.4, cuando estan activadas las sesiones SSLVPN, las sesiones SSH o las \"nonces\" (cadenas de caracteres de un sólo uso) encriptadas IKE, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete encriptado y modificado, también conocido como Bug ID CSCsq24002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*","matchCriteriaId":"5D57ACB3-4ADC-4FBE-BA46-395F277B9997"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*","matchCriteriaId":"E2916FA5-1FFF-48FB-A079-693AD3444CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*","matchCriteriaId":"AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18892","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2872","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776."},{"lang":"es","value":"Cisco IOS v12.0 hasta la v12.4, cuando están activados los túneles basados en IP y la utilidad \"Cisco Express Forwarding\", permite a atacantes remotos provocar una denegación de servicio (recarga del dispositivo) a través de paquetes malformados que no son apropiadamente tratados durante el cambio de un túnel a un segundo túnel, también conocido como Bug IDs CSCsh97579 y CSCsq31776."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irc:*:*:*:*:*:*:*","matchCriteriaId":"113CC627-7381-49DF-B384-CC70FB795EFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixh:*:*:*:*:*:*:*","matchCriteriaId":"37EE8B1F-AA97-459E-9EA0-965A73697243"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*","matchCriteriaId":"E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*","matchCriteriaId":"8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*","matchCriteriaId":"D681CC0E-CD68-4252-B243-C043754954DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jdc:*:*:*:*:*:*:*","matchCriteriaId":"CA60D334-B2F6-4F34-9EE1-C8F45DB3C441"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jdd:*:*:*:*:*:*:*","matchCriteriaId":"FD178B67-B9E7-4725-B553-E5ACBCE296D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mda:*:*:*:*:*:*:*","matchCriteriaId":"237F6EDD-AB47-4768-9C75-C0B03E23696B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*","matchCriteriaId":"AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4yb:*:*:*:*:*:*:*","matchCriteriaId":"E67621EA-25D8-47C2-ADEA-512E38F2FFE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4yd:*:*:*:*:*:*:*","matchCriteriaId":"94E1421B-2B86-41B2-9288-59780E081337"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ye:*:*:*:*:*:*:*","matchCriteriaId":"51A5F5FF-6BC4-4A1E-B9F1-BD47096D30B2"}]}]}],"references":[{"url":"http://osvdb.org/58333","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18893","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2873","sourceIdentifier":"psirt@cisco.com","published":"2009-09-28T19:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889."},{"lang":"es","value":"Cisco IOS v12.0 hasta 12.4, cuando está habilitada la funcionalidad de túnel basado en IP y el Cisco Express Forwarding, permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante paquetes deformados, también conocido como Bug ID CSCsx70889."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*","matchCriteriaId":"65E78DEE-1125-4183-A0CD-947B850E956E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*","matchCriteriaId":"B6943D9D-4A73-4EB2-B5C5-B7132AFFBE2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*","matchCriteriaId":"277BFD67-3EE3-4E79-8D81-35597D168C18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*","matchCriteriaId":"F0AB67FC-88F4-42BB-BB90-54521950DE02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*","matchCriteriaId":"51BCD9C9-7E6B-42EB-A645-32B3C00CDDEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*","matchCriteriaId":"34A61768-E18E-4DB0-9EDF-2E36D0F62DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bw:*:*:*:*:*:*:*","matchCriteriaId":"05B838C9-E60E-46A3-A5FB-4F67291D0851"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bx:*:*:*:*:*:*:*","matchCriteriaId":"2B29F111-CBA4-464D-8B25-C2677BA270EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2by:*:*:*:*:*:*:*","matchCriteriaId":"E96C76C5-52BA-45D9-9803-048E770BAA84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bz:*:*:*:*:*:*:*","matchCriteriaId":"42EB3A6A-8B37-47E6-AA9B-1B13FC08F542"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cx:*:*:*:*:*:*:*","matchCriteriaId":"F4BA2D6E-FD22-4BFD-B8B4-D6542E173C72"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cy:*:*:*:*:*:*:*","matchCriteriaId":"78B9E2C6-0E23-4AC9-906F-28BBC15868DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2cz:*:*:*:*:*:*:*","matchCriteriaId":"B7F75542-F2C5-4CEB-B655-E0620408A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dx:*:*:*:*:*:*:*","matchCriteriaId":"EE0195AE-24FD-43B2-892B-F646B8B5ED6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ew:*:*:*:*:*:*:*","matchCriteriaId":"316924D4-10D4-4C98-AF05-DDE1D530A205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ewa:*:*:*:*:*:*:*","matchCriteriaId":"11866346-C29A-463D-A18F-528C23DD579E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*","matchCriteriaId":"0912492E-565A-4559-ABB8-D2898F06CF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*","matchCriteriaId":"2CD6421A-D8C4-4A3E-9497-4AC130CFE597"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*","matchCriteriaId":"91F44EC8-13BF-4032-9EBA-0D50C6A353BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fx:*:*:*:*:*:*:*","matchCriteriaId":"370EEE74-3DAA-4BB2-9192-66672229DC39"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fy:*:*:*:*:*:*:*","matchCriteriaId":"4CF74B28-CD95-4BC6-97D4-D529D30E1509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2fz:*:*:*:*:*:*:*","matchCriteriaId":"F2EB679F-FA51-47A1-BB3E-97AB517AFBB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ira:*:*:*:*:*:*:*","matchCriteriaId":"2424530B-2353-48F2-A076-0C44AAA4C89E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2irb:*:*:*:*:*:*:*","matchCriteriaId":"7B88D71E-C9CB-44D7-AB06-49CFF1117DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixa:*:*:*:*:*:*:*","matchCriteriaId":"DEDCF5A7-14E5-4E0C-88AD-7F891B5EFC66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixb:*:*:*:*:*:*:*","matchCriteriaId":"F7111CAE-9279-49DA-B05A-046BB3EFA85F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixc:*:*:*:*:*:*:*","matchCriteriaId":"A4203A9F-BBC3-4BF2-B915-C3BF2EB73EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixd:*:*:*:*:*:*:*","matchCriteriaId":"E186AB2F-8C5B-45E0-9194-BF66DA64F772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixe:*:*:*:*:*:*:*","matchCriteriaId":"D32DCDA3-76B6-423C-9AF1-B65F19077909"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixf:*:*:*:*:*:*:*","matchCriteriaId":"BCCE26DD-FE65-4041-AB4D-9C7A16EE175C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ixg:*:*:*:*:*:*:*","matchCriteriaId":"FE88965B-D148-43EB-9FC6-2EF5E5C917FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ja:*:*:*:*:*:*:*","matchCriteriaId":"B98E703A-717D-4997-AFBC-CAE4B644025D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2jk:*:*:*:*:*:*:*","matchCriteriaId":"01A0A03A-5BFE-4A15-A983-B3EB8EE6B25A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mb:*:*:*:*:*:*:*","matchCriteriaId":"6B27825D-099A-4733-8D3F-8EF2B050E5B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2mc:*:*:*:*:*:*:*","matchCriteriaId":"D3A63E2B-8C1B-4EF7-BCDD-BBF3EC2C7113"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sb:*:*:*:*:*:*:*","matchCriteriaId":"ADBDC6C0-961B-441D-8C34-AACE0902057E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sbc:*:*:*:*:*:*:*","matchCriteriaId":"F1579A2D-955F-4CC6-9F94-9D40C669D903"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sca:*:*:*:*:*:*:*","matchCriteriaId":"140C7C99-1B50-431C-B55C-DFF308E7ECF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2scb:*:*:*:*:*:*:*","matchCriteriaId":"65213862-01D0-4B1D-8C76-B19D083BF460"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*","matchCriteriaId":"F05A548B-C443-4C15-B636-64C1F9B9860D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sea:*:*:*:*:*:*:*","matchCriteriaId":"87DC8B40-2093-4D3A-B18B-F95868A36D8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seb:*:*:*:*:*:*:*","matchCriteriaId":"CFB7E760-8260-4488-B9FB-C741C1763F40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sec:*:*:*:*:*:*:*","matchCriteriaId":"A8F4B373-490C-463F-B518-89D0CABB852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sed:*:*:*:*:*:*:*","matchCriteriaId":"9A2B4600-550F-4D5D-9BBD-E035025677BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2see:*:*:*:*:*:*:*","matchCriteriaId":"1F42A6D9-8CC3-49AF-AA56-96894CCE5AF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sef:*:*:*:*:*:*:*","matchCriteriaId":"A4474AB2-AFF5-46F1-9066-54A4D6FA98C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2seg:*:*:*:*:*:*:*","matchCriteriaId":"7D81068C-7E72-4D5E-84CA-5942B9E8AB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sg:*:*:*:*:*:*:*","matchCriteriaId":"E85ABE5E-7900-4A9C-A945-48B293EF46B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sga:*:*:*:*:*:*:*","matchCriteriaId":"43E166F3-931A-4997-B7B2-F2AD19C6F209"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sm:*:*:*:*:*:*:*","matchCriteriaId":"9A70BEC7-8A69-44B2-9DDA-DFC1A13EB7B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2so:*:*:*:*:*:*:*","matchCriteriaId":"AD1A9400-571E-4955-AB84-C49A4255A5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sq:*:*:*:*:*:*:*","matchCriteriaId":"E5C38FE9-CEC6-4C5C-A4FD-CCD1D50BD040"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sra:*:*:*:*:*:*:*","matchCriteriaId":"A892B3F0-5A31-4086-8AB5-F06E68588EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srb:*:*:*:*:*:*:*","matchCriteriaId":"D8E6BB50-7C0C-4E31-8DB0-40E145C8D9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2src:*:*:*:*:*:*:*","matchCriteriaId":"8A0DA930-86CE-4D17-BD41-9C4E47D8088F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2srd:*:*:*:*:*:*:*","matchCriteriaId":"8B1AE2B1-BFED-49A3-94EB-E40A1A675BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ste:*:*:*:*:*:*:*","matchCriteriaId":"D681CC0E-CD68-4252-B243-C043754954DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2su:*:*:*:*:*:*:*","matchCriteriaId":"FC70491B-F701-4D33-A314-C686469DBD2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sv:*:*:*:*:*:*:*","matchCriteriaId":"198C24E9-6D45-44FD-B502-D14ACDA99EDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sva:*:*:*:*:*:*:*","matchCriteriaId":"E768F600-19DC-46A5-BDED-3C2497530CD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svc:*:*:*:*:*:*:*","matchCriteriaId":"16EF97B1-5150-4E88-B011-DB8F0AAFA9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2svd:*:*:*:*:*:*:*","matchCriteriaId":"CDC263E7-BA6A-41CB-8248-5DDB4404D9BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sve:*:*:*:*:*:*:*","matchCriteriaId":"544835A2-3AB0-4313-A731-54B1123F7498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxd:*:*:*:*:*:*:*","matchCriteriaId":"FC1DDD7C-7921-45D3-81F7-4D9A407CBB5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxe:*:*:*:*:*:*:*","matchCriteriaId":"5A68D177-B028-4025-BD7B-82ACDB2D1E21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxf:*:*:*:*:*:*:*","matchCriteriaId":"485ACF9E-1305-4D71-A766-5BE1D748AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxh:*:*:*:*:*:*:*","matchCriteriaId":"A7CCDB53-4F8B-4B90-9929-4E94CF414CDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxi:*:*:*:*:*:*:*","matchCriteriaId":"C03B0702-070F-48D5-9CBC-DB36D409A4EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sz:*:*:*:*:*:*:*","matchCriteriaId":"6E709D6B-61DB-4905-B539-B8488D7E2DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2tpc:*:*:*:*:*:*:*","matchCriteriaId":"F6C1C831-556D-4634-AA24-6D64943ED275"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xc:*:*:*:*:*:*:*","matchCriteriaId":"DCB9967A-1EBD-4BE0-8651-1C7D42B2BF4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*","matchCriteriaId":"DAD441B8-CC3C-4571-B095-C70B78BE80E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*","matchCriteriaId":"17AA0C3D-7C96-4D2E-91E5-232536245ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xo:*:*:*:*:*:*:*","matchCriteriaId":"1EE03B1E-1522-4143-A019-B19E1F605A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xu:*:*:*:*:*:*:*","matchCriteriaId":"EC38B64C-E246-467F-A185-669497DEA839"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xv:*:*:*:*:*:*:*","matchCriteriaId":"FBB42063-9DB5-42DB-825A-53C6DBB51A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ye:*:*:*:*:*:*:*","matchCriteriaId":"761D49D6-0624-41CE-829E-49E7EA679EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yj:*:*:*:*:*:*:*","matchCriteriaId":"552C1E7A-2FFA-49BC-BF09-F0DE9B0C7502"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yk:*:*:*:*:*:*:*","matchCriteriaId":"869CEAF7-59D6-4651-8D89-0244D6C430A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yl:*:*:*:*:*:*:*","matchCriteriaId":"059FBAA6-3127-4DF9-99AD-AA3A16317B6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ym:*:*:*:*:*:*:*","matchCriteriaId":"0E0E376F-64E1-4632-9A8E-11DC99FB245F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yn:*:*:*:*:*:*:*","matchCriteriaId":"BF440B52-C6AE-4608-BE71-01B354D37BEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yo:*:*:*:*:*:*:*","matchCriteriaId":"243BEF5E-F693-450E-B274-FD7CF34B6771"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yp:*:*:*:*:*:*:*","matchCriteriaId":"E7918C59-1678-4F24-A7C2-68824D1B59A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yq:*:*:*:*:*:*:*","matchCriteriaId":"DE72804E-600D-47FA-B3BF-36BD3CF13A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yr:*:*:*:*:*:*:*","matchCriteriaId":"DAD14B6D-CA11-41C1-9382-70CF1F5B4C8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yt:*:*:*:*:*:*:*","matchCriteriaId":"969A5BAA-19D5-4411-BABB-FE55DBA7C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yu:*:*:*:*:*:*:*","matchCriteriaId":"54B41182-7AA8-49D1-BAC3-EAF312E43553"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yv:*:*:*:*:*:*:*","matchCriteriaId":"E11BBB83-147B-4FBF-B263-77FCCFB2D92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yw:*:*:*:*:*:*:*","matchCriteriaId":"2E84677D-793D-44C5-80E9-FC29C3183278"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yx:*:*:*:*:*:*:*","matchCriteriaId":"E70E5B1F-E72C-4DAB-B6FA-977EF04BFBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yy:*:*:*:*:*:*:*","matchCriteriaId":"ECFA2358-6B79-472D-9092-FF99DC3DF042"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yz:*:*:*:*:*:*:*","matchCriteriaId":"A3C26842-FF50-436F-8DB6-15A70082CD1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zb:*:*:*:*:*:*:*","matchCriteriaId":"9384B48D-0F62-4042-BE8F-9A8F5FE9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zc:*:*:*:*:*:*:*","matchCriteriaId":"F4A31301-AAB0-4744-98B2-695D88798D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zd:*:*:*:*:*:*:*","matchCriteriaId":"ECB4BA74-BE9F-43D5-9D0F-78F4F2BB19B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ze:*:*:*:*:*:*:*","matchCriteriaId":"0CEB27CF-46B5-4780-964C-C31193614B74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zf:*:*:*:*:*:*:*","matchCriteriaId":"0F1094F9-7222-4DE0-A368-7421ABA66E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zg:*:*:*:*:*:*:*","matchCriteriaId":"6C7EA2BB-A52A-438C-8EB5-CD283CACBACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zh:*:*:*:*:*:*:*","matchCriteriaId":"574FFD6F-D56C-41DB-A978-E501BA3CA5D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zj:*:*:*:*:*:*:*","matchCriteriaId":"11790F38-3720-45CF-9FD4-A8E5867684D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zl:*:*:*:*:*:*:*","matchCriteriaId":"4AE2282B-6693-4E4B-8662-501EBC14CD9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zp:*:*:*:*:*:*:*","matchCriteriaId":"A925BA5C-AB2F-4B73-BA93-55664A319CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zu:*:*:*:*:*:*:*","matchCriteriaId":"9AE02B7C-BC2D-433C-B0A8-E60EDD62538E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*","matchCriteriaId":"F9663D24-0D1D-4F46-961F-9D37D3776E90"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zy:*:*:*:*:*:*:*","matchCriteriaId":"E83649EC-61A5-4937-93F4-42D082023382"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zya:*:*:*:*:*:*:*","matchCriteriaId":"5D8830A0-E816-40C4-8743-A9E0994BA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*","matchCriteriaId":"40183EF8-BD19-49AD-9E55-7FCCA635327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ja:*:*:*:*:*:*:*","matchCriteriaId":"D73E5138-016A-48EC-A367-3D3285AAFED2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jea:*:*:*:*:*:*:*","matchCriteriaId":"C114F1A6-5DFE-408F-B83A-E8B9D4AF9791"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jeb:*:*:*:*:*:*:*","matchCriteriaId":"9CD5C082-9730-466D-A4A8-E4EEE5F3730D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jec:*:*:*:*:*:*:*","matchCriteriaId":"8CF419BD-8474-4F33-9CDD-587E341ABA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jk:*:*:*:*:*:*:*","matchCriteriaId":"332B0446-4D8B-414B-B572-84B45D5643AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jl:*:*:*:*:*:*:*","matchCriteriaId":"BE0A39D0-0E87-42E9-B8D3-2010FDCC03D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3jx:*:*:*:*:*:*:*","matchCriteriaId":"D40FB896-E20C-46B1-BF59-FBB42295F9C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3tpc:*:*:*:*:*:*:*","matchCriteriaId":"841CDC5F-8F0E-4AE7-A7A9-960E0A8C66B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3va:*:*:*:*:*:*:*","matchCriteriaId":"B418CFDD-AF36-46F9-B347-B34E72100F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*","matchCriteriaId":"AA212293-7BAF-4AD9-BD30-E953CBA7CB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xj:*:*:*:*:*:*:*","matchCriteriaId":"CEF3B2A9-027B-4141-B0FB-D31A2C918CF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*","matchCriteriaId":"68FC4904-1F4D-4E10-AF95-911B07827598"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*","matchCriteriaId":"E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*","matchCriteriaId":"98FE195E-084B-4F4C-800D-850165DED48C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xu:*:*:*:*:*:*:*","matchCriteriaId":"FB74F350-37F8-48DF-924E-415E51932163"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*","matchCriteriaId":"E618BF54-56DC-40FC-A515-3BFB4366F823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*","matchCriteriaId":"A1976E53-85A6-494F-B8AC-847E7988850C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*","matchCriteriaId":"D90B78E1-3FC7-4CF6-B0BA-1D4CA0FAB57E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xz:*:*:*:*:*:*:*","matchCriteriaId":"9A668D08-14C4-4438-A59C-CE60498BEF8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*","matchCriteriaId":"320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*","matchCriteriaId":"520304A4-EB15-42A8-A402-8251A4D2076D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yf:*:*:*:*:*:*:*","matchCriteriaId":"C46B66D6-1BF1-4DCA-868F-BADE3CB96063"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*","matchCriteriaId":"CA88C064-898F-4C0D-A266-D7B3509C28A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*","matchCriteriaId":"139B1182-61A3-4F3D-9E29-758F27917646"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*","matchCriteriaId":"0CC3706F-B00A-405E-917E-7FD5217E0501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*","matchCriteriaId":"1B46199E-0DF1-4B3F-A29E-1A2FC016F0F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*","matchCriteriaId":"1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*","matchCriteriaId":"2595DCBA-E6F2-4551-A804-4DBB137F076B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF12B-2A20-4AC5-8EC5-729008D87736"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*","matchCriteriaId":"6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*","matchCriteriaId":"A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yu:*:*:*:*:*:*:*","matchCriteriaId":"B0AB8F07-AF43-4202-9908-F9A1DF6FFC03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*","matchCriteriaId":"2958873B-A0AB-4EAF-A5CF-8423739FAB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*","matchCriteriaId":"1938D118-C07F-4BEC-8030-947F099BFCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*","matchCriteriaId":"9D4D8C72-E7BB-40BF-9AE5-622794D63E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ja:*:*:*:*:*:*:*","matchCriteriaId":"4EB2B390-A39F-4082-BBCB-712BDD95886D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jda:*:*:*:*:*:*:*","matchCriteriaId":"5F782741-0F18-4FBC-9D00-AAABB8BC6A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jk:*:*:*:*:*:*:*","matchCriteriaId":"ACB11851-BCF8-485B-91F9-6A39B2354826"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jl:*:*:*:*:*:*:*","matchCriteriaId":"65C61F77-6CDE-4CCA-B2DB-B76C6B5F8152"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jma:*:*:*:*:*:*:*","matchCriteriaId":"3DFE3FC0-79BC-4549-98BA-235A53719F82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jmb:*:*:*:*:*:*:*","matchCriteriaId":"4691CEAD-47F1-4A97-84A4-72B794D3F714"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4jx:*:*:*:*:*:*:*","matchCriteriaId":"B4A28452-000C-4BBB-A34E-1AA63D69925D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*","matchCriteriaId":"A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*","matchCriteriaId":"C7414D32-88A1-416E-A717-3F47B6D1BE74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*","matchCriteriaId":"370DC543-AC01-4B91-88C7-60C323E35929"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7398-D1B2-47FB-952D-8C3162D5A363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*","matchCriteriaId":"99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*","matchCriteriaId":"C1797E4E-E15C-4148-9B3D-4FF6D1D815AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*","matchCriteriaId":"544BD924-2CBD-4130-BBD3-5AD084C85FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xd:*:*:*:*:*:*:*","matchCriteriaId":"6B78181E-E1D1-4C25-85DE-CA46BBF21765"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*","matchCriteriaId":"C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*","matchCriteriaId":"7D1CD80F-E898-41CE-8A86-28C2F48B928A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*","matchCriteriaId":"9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*","matchCriteriaId":"BF610051-1638-4C1B-9864-11E34EFC4DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*","matchCriteriaId":"78260223-50C0-48F8-9A65-AE67489E602C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*","matchCriteriaId":"18E39462-4CEE-4C29-8B60-50E05FCF3E91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*","matchCriteriaId":"3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*","matchCriteriaId":"CC7454AF-7610-4CD3-BD2B-95A6C3283811"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*","matchCriteriaId":"AB633E6C-025C-4B31-ABE7-8318C813376B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*","matchCriteriaId":"CEA9218D-E7A5-4F98-83E7-2FD6E138D5CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*","matchCriteriaId":"AC90BE87-EB54-46F8-A1FD-8F4E553C69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*","matchCriteriaId":"DFED1FFB-899D-4A48-9CCA-0B8737AE1408"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*","matchCriteriaId":"883FA166-2973-42BA-842D-28FBDBFEAC4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*","matchCriteriaId":"4362045B-7065-4FF9-A977-B3DA7894F831"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*","matchCriteriaId":"BC27E79D-6B4B-4839-9664-DFE821C45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*","matchCriteriaId":"4963A243-74FA-43AD-9645-C9FAD527A6E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*","matchCriteriaId":"31C6EACA-35BE-4032-93DA-5F738AEE0F4A"}]}]}],"references":[{"url":"http://osvdb.org/58334","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18895","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"psirt@cisco.com"},{"url":"http://osvdb.org/58334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=18895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2874","sourceIdentifier":"psirt@cisco.com","published":"2009-10-16T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers to cause a denial of service (process crash) via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662."},{"lang":"es","value":"El proceso TimesTenD en Cisco Unified Presence v1.x, v6.x anterior a v6.0(6), y v7.x anterior a v7.0(4), permite a atacantes remotos causar una denegación de servicio (cuelgue de proceso) a través de un gran número de conexiones TCP a los puertos 16200 y 22794, también conocido como Bug ID CSCsy17662."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F897DA4-E313-45C8-A4FB-52404D6541BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"22B299D9-A18B-41D9-B976-57AFDAA751DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"CDA3BA5D-2CEB-4AAC-8CB4-4A2CDC574076"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:1.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"9465A4F0-44C0-4A43-962E-0CCEADA05533"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6D9CEBA2-160F-4303-9C1D-C7BD7E758CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"A704B14E-EC47-47E5-8AA1-35E0138B6A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"6F95246B-7822-4077-BC9C-3E1C0B02C139"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"A5D01D8A-9F92-4900-941C-0B481D277D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:6.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"E72DE400-8ACA-4D01-8BBE-7F13959F4DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1706BFD4-817A-4BA2-8B3B-60CDF1F54A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:7.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8B9C5872-317C-4A68-8E99-DEB224BAE607"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_presence_server:7.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D6F4FC53-3627-4826-8CFC-BEEBCB8CEC87"}]}]}],"references":[{"url":"http://secunia.com/advisories/37039","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023018","source":"psirt@cisco.com"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36675","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/2915","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53772","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2875","sourceIdentifier":"psirt@cisco.com","published":"2009-12-18T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WebEx Recording Format (WRF) file."},{"lang":"es","value":"Un desbordamiento de búfer en atas32.dll en Cisco WebEx WRF Player v26.x antes de v26.49.32 para Windows, v27.x antes v27.10.x para Windows, v26.x antes de v26.49.35 para Mac OS X y Linux, y v27.x antes de v27.11.8 para Mac OS X y Linux, permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo de formato de grabación WebEx (.wrf) debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:linux:*:*:*:*:*","matchCriteriaId":"B166A339-531A-4EEC-A0B2-ED84F0D7ED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E089FB47-7DFA-46AA-BDEF-19B9154E7032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:windows:*:*:*:*:*","matchCriteriaId":"08DA35E1-8C66-47A8-8E9E-7F0C4272F3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:linux:*:*:*:*:*","matchCriteriaId":"A3565994-AF5D-45D5-9F0D-1AFD2D33336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"ADD29395-572F-464B-A8A1-B888603343C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:windows:*:*:*:*:*","matchCriteriaId":"5257EB4E-CC29-4077-AC69-EBF6966C8FB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37810","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"psirt@cisco.com"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atas32.dos.html","source":"psirt@cisco.com"},{"url":"http://www.osvdb.org/61125","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/37352","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atas32.dos.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2876","sourceIdentifier":"psirt@cisco.com","published":"2009-12-18T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2878 and CVE-2009-2879."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en atas32.dll en Cisco WebEx WRF Player v26.x antes de v26.49.32 (alias T26SP49EP32) para Windows, v27.x antes de v27.10.x (alias T27SP10) para Windows, v26.x antes de v26.49.35 para Mac OS X y Linux, y v27.x antes v27.11.8 para Mac OS X y Linux, permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) o ejecutar código arbitrario a través de un archivo de formato de grabación WebEx (.wrf) debidamente modificado. Se trata de una vulnerabilidad diferente a CVE-2009-2878 y CVE-2009-2879."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:linux:*:*:*:*:*","matchCriteriaId":"B166A339-531A-4EEC-A0B2-ED84F0D7ED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E089FB47-7DFA-46AA-BDEF-19B9154E7032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:windows:*:*:*:*:*","matchCriteriaId":"08DA35E1-8C66-47A8-8E9E-7F0C4272F3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:linux:*:*:*:*:*","matchCriteriaId":"A3565994-AF5D-45D5-9F0D-1AFD2D33336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"ADD29395-572F-464B-A8A1-B888603343C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:windows:*:*:*:*:*","matchCriteriaId":"5257EB4E-CC29-4077-AC69-EBF6966C8FB0"}]}]}],"references":[{"url":"http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-012-cisco.html","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37810","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"psirt@cisco.com"},{"url":"http://www.osvdb.org/61126","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/37352","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"psirt@cisco.com"},{"url":"http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-012-cisco.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2877","sourceIdentifier":"psirt@cisco.com","published":"2009-12-18T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en ataudio.dll en Cisco WebEx WRF Player v26.x antes de v26.49.32 para Windows, v27.x antes de v27.10.x (alias T27SP10) para Windows, v26.x antes de v26.49.35 para Mac OS X y Linux, y v27.x antes v27.11.8 para Mac OS X y Linux, permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) o ejecutar código arbitrario a través de un archivo de Formato de grabación WebEx (.wrf) debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:linux:*:*:*:*:*","matchCriteriaId":"B166A339-531A-4EEC-A0B2-ED84F0D7ED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E089FB47-7DFA-46AA-BDEF-19B9154E7032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:windows:*:*:*:*:*","matchCriteriaId":"08DA35E1-8C66-47A8-8E9E-7F0C4272F3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:linux:*:*:*:*:*","matchCriteriaId":"A3565994-AF5D-45D5-9F0D-1AFD2D33336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"ADD29395-572F-464B-A8A1-B888603343C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:windows:*:*:*:*:*","matchCriteriaId":"5257EB4E-CC29-4077-AC69-EBF6966C8FB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37810","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"psirt@cisco.com"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.ataudio.buffer.overflow.html","source":"psirt@cisco.com"},{"url":"http://www.osvdb.org/61127","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/37352","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.ataudio.buffer.overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2878","sourceIdentifier":"psirt@cisco.com","published":"2009-12-18T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2876 and CVE-2009-2879."},{"lang":"es","value":"un desbordamiento de búfer basado en monticulo en atas32.dll en Cisco WebEx WRF Player v26.x antes de v26.49.32 (alias T26SP49EP32) para Windows, v27.x antes de v27.10.x (alias T27SP10) para Windows, v26.x antes de v26.49.35 para Mac OS X y Linux, y v27.x antes v27.11.8 para Mac OS X y Linux, permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) o ejecutar código arbitrario a través de unarchivo de Formato de grabación WebEx (.wrf) debidamente modificado. Se trata de una vulnerabilidad diferente a CVE-2009-2876 y CVE-2009-2879."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:linux:*:*:*:*:*","matchCriteriaId":"B166A339-531A-4EEC-A0B2-ED84F0D7ED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E089FB47-7DFA-46AA-BDEF-19B9154E7032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:windows:*:*:*:*:*","matchCriteriaId":"08DA35E1-8C66-47A8-8E9E-7F0C4272F3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:linux:*:*:*:*:*","matchCriteriaId":"A3565994-AF5D-45D5-9F0D-1AFD2D33336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"ADD29395-572F-464B-A8A1-B888603343C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:windows:*:*:*:*:*","matchCriteriaId":"5257EB4E-CC29-4077-AC69-EBF6966C8FB0"}]}]}],"references":[{"url":"http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-013-cisco.html","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37810","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"psirt@cisco.com","tags":["Patch"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"psirt@cisco.com"},{"url":"http://www.osvdb.org/61128","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/37352","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"psirt@cisco.com"},{"url":"http://fgc.fortinet.com/encyclopedia/vulnerability/fg-vd-09-013-cisco.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2879","sourceIdentifier":"psirt@cisco.com","published":"2009-12-18T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2876 and CVE-2009-2878."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en atas32.dll en Cisco WebEx WRF Player v26.x antes de v26.49.32 (alias T26SP49EP32) para Windows, v27.x antes de v27.10.x (alias T27SP10) para Windows, v26.x antes de v26.49.35 para Mac OS X y Linux, y v27.x antes v27.11.8 para Mac OS X y Linux, permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) o ejecutar código arbitrario a través de un archivo de Formato de grabación WebEx (.wrf) debidamente modificado. Se trata de una vulnerabilidad diferente a CVE-2009-2876 y CVE-2009-2878."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:linux:*:*:*:*:*","matchCriteriaId":"B166A339-531A-4EEC-A0B2-ED84F0D7ED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E089FB47-7DFA-46AA-BDEF-19B9154E7032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:windows:*:*:*:*:*","matchCriteriaId":"08DA35E1-8C66-47A8-8E9E-7F0C4272F3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:linux:*:*:*:*:*","matchCriteriaId":"A3565994-AF5D-45D5-9F0D-1AFD2D33336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"ADD29395-572F-464B-A8A1-B888603343C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:windows:*:*:*:*:*","matchCriteriaId":"5257EB4E-CC29-4077-AC69-EBF6966C8FB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37810","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"psirt@cisco.com"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atas32.heap.overflow.html","source":"psirt@cisco.com"},{"url":"http://www.osvdb.org/61129","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/37352","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atas32.heap.overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2880","sourceIdentifier":"psirt@cisco.com","published":"2009-12-18T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WebEx Recording Format (WRF) file."},{"lang":"es","value":"Un desbordamiento de búfer en atrpui.dll en  Cisco WebEx WRF Player v26.x antes de v26.49.32 para Windows, v27.x antes v27.10.x para Windows, v26.x antes de v26.49.35 para Mac OS X y Linux, y v27.x antes de v27.11.8 para Mac OS X y Linux, permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) o posiblemente ejecutar código arbitrario a través de un archivo de Formato de grabación de WebEx (.wrf) debidamente modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:linux:*:*:*:*:*","matchCriteriaId":"B166A339-531A-4EEC-A0B2-ED84F0D7ED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E089FB47-7DFA-46AA-BDEF-19B9154E7032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:26.00:*:windows:*:*:*:*:*","matchCriteriaId":"08DA35E1-8C66-47A8-8E9E-7F0C4272F3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:linux:*:*:*:*:*","matchCriteriaId":"A3565994-AF5D-45D5-9F0D-1AFD2D33336C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"ADD29395-572F-464B-A8A1-B888603343C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex:27.00:*:windows:*:*:*:*:*","matchCriteriaId":"5257EB4E-CC29-4077-AC69-EBF6966C8FB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37810","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"psirt@cisco.com"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atrpui.dos.html","source":"psirt@cisco.com"},{"url":"http://www.osvdb.org/61130","source":"psirt@cisco.com"},{"url":"http://www.securityfocus.com/bid/37352","source":"psirt@cisco.com"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"psirt@cisco.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/37810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22660&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22661&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22662&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22663&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=22799&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=23040&signatureSubId=0&softwareVersion=6.0&releaseVersion=S456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b0a577.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/cisco.webex.player.atrpui.dos.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2881","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:06.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Basilic v1.5.13 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"idAuthor\" para (1) index.php y posiblemente (2) allpubs.php en publications/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artis.imag:basilic:1.5.13:*:*:*:*:*:*:*","matchCriteriaId":"081C9FBA-6772-4397-95B5-C7AE9183A144"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9246","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2005","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51992","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2882","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) browse_ladies.php and (2) browse_men.php, the (3) gender parameter to search.php, and the (4) id parameter to services.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PG MatchMaking permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"show\" para (1) browse_ladies.php y (2) browse_men.php, el parámetro (3) \"gender\" para search.php, y el parámetro (4) \"id\" para services.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datingpro:matchmaking:*:*:*:*:*:*:*:*","matchCriteriaId":"81AAF21C-465C-4734-B79E-A27C892FCA65"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/pgmatchmaking-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/pgmatchmaking-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2883","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cp_username parameter, related to an error in the CleanVar function in includes/functions.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/login.php en SaphpLesson 4.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cp_username\", lo que está relacionado con un error en la función CleanVar en includes/functions.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arabless:saphplesson:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B8E3993D-7C20-4275-A93F-F7822A73EE08"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9248","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35795","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51983","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2884","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrary web script or HTML via the rank parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bios.php en PHP Scripts Now World's Tallest Buildings permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"rank\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:world\\'s_tallest_buildings:-:*:*:*:*:*:*:*","matchCriteriaId":"5CDA3D86-D234-4647-822B-4EA1D8998ADF"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56122","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51871","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2885","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute arbitrary SQL commands via the rank parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en bios.php en PHP Scripts Now World's Tallest Buildings permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"rank\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:world\\'s_tallest_buildings:-:*:*:*:*:*:*:*","matchCriteriaId":"5CDA3D86-D234-4647-822B-4EA1D8998ADF"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56121","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51870","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/tallestbuildings-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2886","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  bios.php en PHP Scripts Now President Bios permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"rank\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:president_bios:-:*:*:*:*:*:*:*","matchCriteriaId":"E1944FDD-7282-4EE0-B251-720D8FC94056"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51870","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2887","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bios.php en PHP Scripts Now President Bios permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"rank\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:president_bios:-:*:*:*:*:*:*:*","matchCriteriaId":"E1944FDD-7282-4EE0-B251-720D8FC94056"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51871","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/presidentbios-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2888","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en PHP Scripts Now Hangman permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"n\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:hangman:-:*:*:*:*:*:*:*","matchCriteriaId":"4B2C6557-D00A-4D9A-AB01-D9CA3F8D2BFA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51884","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2889","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en PHP Scripts Now Hangman permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"letters\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:hangman:-:*:*:*:*:*:*:*","matchCriteriaId":"4B2C6557-D00A-4D9A-AB01-D9CA3F8D2BFA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51883","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/tophangman-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2890","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en results.php en PHP Scripts Now Riddles permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"searchquery\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:riddles:-:*:*:*:*:*:*:*","matchCriteriaId":"9E2FCB22-E08A-4D7B-9902-1FF2B012BCAB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35932","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56124","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51874","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2891","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en list.php en PHP Scripts Now Riddles permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"catid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpscriptsnow:riddles:-:*:*:*:*:*:*:*","matchCriteriaId":"9E2FCB22-E08A-4D7B-9902-1FF2B012BCAB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35932","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56123","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51872","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/riddledepot-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2892","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a (1) cookid or (2) cookgid cookie."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en header.php en Scripteen Free Image Hosting Script v2.3 permiten a atacantes remotos ejecutar comandos SQL de su elección mediante una cookie (1) cookid o (2) cookgid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripteen:free_image_hosting_script:2.3:*:*:*:*:*:*:*","matchCriteriaId":"FE71B8BA-F093-4011-875D-F27482117A47"}]}]}],"references":[{"url":"http://secunia.com/advisories/35976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9252","source":"cve@mitre.org"},{"url":"http://www.scripteen.com/forum/bug-reports-f15-my-image-hosting-site-got-hacked-t764.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.scripteen.com/forum/news-announcements-f2-scripteen-free-image-hosting-script-v2-4-t766.html","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35800","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scripteen.com/forum/bug-reports-f15-my-image-hosting-site-got-hacked-t764.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.scripteen.com/forum/news-announcements-f2-scripteen-free-image-hosting-script-v2-4-t766.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2893","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en XZero Community Classifieds v4.97.8 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"postevent\" en una acción de envío (post) o (2) \"_xzcal_y\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xzeroscripts:xzero_community_classifieds:4.97.8:*:*:*:*:*:*:*","matchCriteriaId":"30649270-1E0A-4DFF-BAB4-B043E4EA8BD7"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/xzero-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35996","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35809","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/xzero-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2894","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:09.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product_desc.php, and the cid parameter to (2) showcategory.php and (3) gallery.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Ebay Clone 2009 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"id\" para product_desc.php, (2) \"showcategory.php\" y (3) \"gallery.php\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clone2009:ebay_clone:2009:*:*:*:*:*:*:*","matchCriteriaId":"252C575B-353B-45C9-A870-EBAA0E8A3AE1"}]}]}],"references":[{"url":"http://osvdb.org/56265","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/56268","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35952","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51956","source":"cve@mitre.org"},{"url":"http://osvdb.org/56265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/56268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/clone2009-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2895","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:11.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rss.php en Ultimate Regnow Affiliate (URA) 3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpsugar:ultimate_regnow_affiliate:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4EA705BE-DED1-434B-94DD-1C00F5C01FDE"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9263","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2896","sourceIdentifier":"cve@mitre.org","published":"2009-08-20T17:30:11.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long string in a subtitle (.srt) playlist file. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer en KMplayer v2.9.4.1433 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) o ejecutar código de su elección mediante una cadena larga en el subtítulo de un archivo de lista de reproducción. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kmplayer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.4.1433","matchCriteriaId":"37888303-7F03-4EE0-9D70-FE8F5A9D5448"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kmplayer:2.9.3.1210:*:*:*:*:*:*:*","matchCriteriaId":"6E0C2195-A517-48EE-9F4E-8988AF802974"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9220","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35745","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51882","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2897","sourceIdentifier":"secalert@redhat.com","published":"2009-10-13T10:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allow remote attackers to inject arbitrary web script or HTML via invalid values for numerical parameters, as demonstrated by an uncaught java.lang.NumberFormatException exception resulting from (1) the typeId parameter to mastheadAttach.do, (2) the eid parameter to Resource.do, and (3) the u parameter in a view action to admin/user/UserAdmin.do.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en hq/web/common/GenericError.jsp en el manejador de excepciones en la interface web en SpringSource Hyperic HQ v3.2.x anterior v3.2.6.1, v4.0.x anterior v4.0.3.1, v4.1.x anterior v4.1.2.1, y v4.2-beta1; Application Management Suite (AMS) v2.0.0.SR3; y tc Server v6.0.20.B permite a atacantes remotos ejecutar código web o HTML a su elección a través de valores no validos para los parámetros numéricos, como quedó demostrado en la excepción no capturada java.lang.NumberFormatException resultado del (1) parámetro typeId en mastheadAttach.do, (2) el parámetro eid en Resource.do, y(3) el parámetro u en una acción view en admin/user/UserAdmin.do."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:application_management_suite:2.0.0:sr3:*:*:*:*:*:*","matchCriteriaId":"2B49CBBA-35CB-42A6-93D5-06C8F203C98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2:beta_1:*:*:*:*:*:*","matchCriteriaId":"E4DEFE03-6FCD-49C5-A0E7-370FEA7CF5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6E9004-B756-42BE-8918-691AF6F720FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F926074F-8BD2-4A30-B938-CA84E9533CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1A3D6A50-33C3-4932-8A10-37BFF8D061E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"41519C07-5A0D-48ED-81B5-ABF712A6AB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"44A5F7C5-A739-4887-AE92-721426E404F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7F7EB2C3-639B-41B6-B23B-BEBE45EE1DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DCA25CF4-9C98-4FED-A75E-68EF0B9E2C2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE0EC4F9-11EE-4326-A7C4-681CB451C45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90F45C4E-F068-44A0-B676-444D913B3719"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"602855A5-B269-46BD-B68E-DAA49B818A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CDDBC79C-1930-4474-94EE-1F046539F2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3BA42759-E3E8-4F6C-9542-FB939D9D2042"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FD405E4-D6B2-41AB-AE19-024192E8B25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC192682-AE08-4651-9C29-0753E2F85D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.2:beta_1:*:*:*:*:*:*","matchCriteriaId":"3754D8A2-B5F6-44A9-BC1D-7A4FE925D070"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:tc_server:6.0.20:b:*:*:*:*:*:*","matchCriteriaId":"BC0FD679-8EB8-4F3D-8310-361E6AAC9299"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://forums.hyperic.com/jiveforums/thread.jspa?messageID=22156&#22156","source":"secalert@redhat.com"},{"url":"http://jira.hyperic.com/browse/HHQ-2655","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36935","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/hyperic-hq-vulnerabilities","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/58608","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/58609","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/58610","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/506935/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/506936/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.springsource.com/security/hyperic-hq","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53658","source":"secalert@redhat.com"},{"url":"http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://forums.hyperic.com/jiveforums/thread.jspa?messageID=22156&#22156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jira.hyperic.com/browse/HHQ-2655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/hyperic-hq-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/58608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.springsource.com/security/hyperic-hq","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2898","sourceIdentifier":"secalert@redhat.com","published":"2009-10-13T10:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users to inject arbitrary web script or HTML via the Description field.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados(XSS) en el listado de características Alerts en la interface web en SpringSource Hyperic HQ v3.2.x anteirior v3.2.6.1, v4.0.x anterior v4.0.3.1, v4.1.x anterior v4.1.2.1, y v4.2-beta1; Application Management Suite (AMS) v2.0.0.SR3; y tc Server v6.0.20.B permite a usuarios autentificados remotamente inyectar código web o HTML de su elección a través del campo Description. NOTA: algunos de estos detalles son obtenidos de información de terceros. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:application_management_suite:2.0.0:sr3:*:*:*:*:*:*","matchCriteriaId":"2B49CBBA-35CB-42A6-93D5-06C8F203C98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2:beta_1:*:*:*:*:*:*","matchCriteriaId":"E4DEFE03-6FCD-49C5-A0E7-370FEA7CF5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6E9004-B756-42BE-8918-691AF6F720FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F926074F-8BD2-4A30-B938-CA84E9533CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1A3D6A50-33C3-4932-8A10-37BFF8D061E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"41519C07-5A0D-48ED-81B5-ABF712A6AB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"44A5F7C5-A739-4887-AE92-721426E404F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7F7EB2C3-639B-41B6-B23B-BEBE45EE1DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DCA25CF4-9C98-4FED-A75E-68EF0B9E2C2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CE0EC4F9-11EE-4326-A7C4-681CB451C45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90F45C4E-F068-44A0-B676-444D913B3719"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"602855A5-B269-46BD-B68E-DAA49B818A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CDDBC79C-1930-4474-94EE-1F046539F2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3BA42759-E3E8-4F6C-9542-FB939D9D2042"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FD405E4-D6B2-41AB-AE19-024192E8B25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC192682-AE08-4651-9C29-0753E2F85D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:hyperic_hq:4.2:beta_1:*:*:*:*:*:*","matchCriteriaId":"3754D8A2-B5F6-44A9-BC1D-7A4FE925D070"},{"vulnerable":true,"criteria":"cpe:2.3:a:springsource:tc_server:6.0.20:b:*:*:*:*:*:*","matchCriteriaId":"BC0FD679-8EB8-4F3D-8310-361E6AAC9299"}]}]}],"references":[{"url":"http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://jira.hyperic.com/browse/HHQ-3390","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36935","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/hyperic-hq-vulnerabilities","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.osvdb.org/58611","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/506935/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/506950/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.springsource.com/security/hyperic-hq","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53660","source":"secalert@redhat.com"},{"url":"http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://jira.hyperic.com/browse/HHQ-3390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/hyperic-hq-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/58611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506935/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506950/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.springsource.com/security/hyperic-hq","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2903","sourceIdentifier":"secalert@redhat.com","published":"2009-09-15T22:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp\"N\" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams."},{"lang":"es","value":"Fuga de memoria en el subsistema appletalk en el Kernel de Linux v2.4.x hasta v2.4.37.6 y v2.6.x hasta v2.6.31, cuando los módulos appletalk y ipddp están cargados pero el dispositivo ipddp\"N\" no se encuentra, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de datagramas IP-DDP."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue. Please see http://kbase.redhat.com/faq/docs/DOC-19077\n\nThis issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5, as the affected driver is not enabled in these kernels. The affected driver is available in Red Hat Enterprise MRG. It is also available in Red Hat Enterprise Linux 3, but only if the kernel-unsupported package is installed. Future kernel updates in Red Hat Enterprise Linux 3 and Red Hat Enterprise MRG will address this issue.","lastModified":"2009-09-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndIncluding":"2.4.37.6","matchCriteriaId":"6B3A0E29-6F2B-452D-8396-A3C52159F026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndIncluding":"2.6.31","matchCriteriaId":"58224BF0-332E-4C2D-84ED-F40B8A6EBA08"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:*","matchCriteriaId":"6E0623AA-88D4-4E53-AD50-C9AF8E0B0247"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"25CBACD3-AFB7-410D-927F-0C1FF477D396"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*","matchCriteriaId":"D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*","matchCriteriaId":"3DB8A616-865B-4E70-BA2E-BE5F0BA7A351"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36707","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/11","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36379","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522331","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2904","sourceIdentifier":"secalert@redhat.com","published":"2009-10-01T15:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership."},{"lang":"es","value":"Ciertas modificaciones Ret Hat en ChrootDirectory feature en OpenSSH v4.8, como el usado en sshd en OpenSSH v4.3 en Red Hat Enterprise Linux (RHEL) v5.4 y Fedora v11, permite a usuarios locales obtener privilegios a través de enlaces fuertes en programas setuid que usa una configuración de ficheros con el chroot directory, relacionado con requerimientos para el propietario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7910598E-BEC1-4644-9DE4-D8BE505A4F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.8:*:*:*:*:*:*:*","matchCriteriaId":"40B1B209-53B8-48DC-AFFC-BD69D5978A0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*","matchCriteriaId":"5833A489-D6DE-4D51-9E74-189CBC2E28CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*","matchCriteriaId":"AF3FB21C-AC0E-4F6C-B68A-9405E57ADCF0"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5:*:*:*:*:*:*:*","matchCriteriaId":"443CB3FD-014D-4C37-BB02-03DAA5A3F3C1"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/58495","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39182","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36552","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522141","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1470.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2905","sourceIdentifier":"secalert@redhat.com","published":"2009-09-29T19:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en textbox.c en newt v0.51.5, v0.51.6, y v0.52.2 permite a usuarios locales provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de una petición que muestre un cuadro de diálogo de texto manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fedorahosted:newt:0.51.5:*:*:*:*:*:*:*","matchCriteriaId":"F9369BF6-F195-4923-8238-99D7DD4A6A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:fedorahosted:newt:0.51.6:*:*:*:*:*:*:*","matchCriteriaId":"D04B72C6-F85B-4ADE-8C94-77EC372B9CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fedorahosted:newt:0.52.2:*:*:*:*:*:*:*","matchCriteriaId":"6DB4145E-D96A-49AB-BCCA-C60496BE4BFF"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37922","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38833","source":"secalert@redhat.com"},{"url":"http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://support.avaya.com/css/P8/documents/100067251","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1894","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36515","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-837-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523955","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8556","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9664","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1463.html","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.avaya.com/css/P8/documents/100067251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-837-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1463.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2906","sourceIdentifier":"secalert@redhat.com","published":"2009-10-07T18:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet."},{"lang":"es","value":"smbd en Samba v3.0 anterior a v3.0.37, v3.2  anterior a v3.2.15, v3.3  anterior a v3.3.8 y v3.4 anterior a v3.4.2, permite a usuarios autenticados remotamente provocar una denegación de servicio (bucle infinito) a través de un  paquete de notificación de respuesta \"oplock break\" imprevisto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.37","matchCriteriaId":"5BC40E8A-9CDA-4574-AAF2-792EB0B55B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.15","matchCriteriaId":"836C7AC0-CAE0-459A-A8A5-AA60DFD693CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.8","matchCriteriaId":"D9C888EF-28BF-44BF-9E47-564B0C3222F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://news.samba.org/releases/3.0.37/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.2.15/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.3.8/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.4.2/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/58519","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://samba.org/samba/security/CVE-2009-2906.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36893","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36937","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36953","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37428","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36573","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022976","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2810","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53575","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://news.samba.org/releases/3.0.37/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.2.15/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.3.8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.4.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/58519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://samba.org/samba/security/CVE-2009-2906.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2908","sourceIdentifier":"secalert@redhat.com","published":"2009-10-13T10:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a \"negative dentry\" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount."},{"lang":"es","value":"La función d_delete function en fs/ecryptfs/inode.c en eCryptfs en el kernel de Linux v2.6.31 permite a usuarios locales causar una denegación de servicio (kernel OOPS) y probablemente ejecutar código de su elección a través de vectores no especificados que causa una \"entrada negativa\" y ejecuta una deferencia a puntero NULL, como fue demostrado a través del directorio temporal Mutt en eCryptifs."}],"vendorComments":[{"organization":"Red Hat","comment":"The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG do not include support for eCryptfs, and therefore are not affected by this issue.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1548.html","lastModified":"2009-11-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git%3Ba=commit%3Bh=afc2b6932f48f200736d3e36ad66fee0ec733136","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37075","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37105","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/06/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36639","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/ecryptfs/+bug/387073","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=527534","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53693","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git%3Ba=commit%3Bh=afc2b6932f48f200736d3e36ad66fee0ec733136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ecryptfs/+bug/387073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=527534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2909","sourceIdentifier":"secalert@redhat.com","published":"2009-10-20T17:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation."},{"lang":"es","value":"Error de presencia de signo entero en la función ax25_setsockopt en net/ax25/af_ax25.c  en el subsistema ax25 en el kernel de Linux anteriores a 2.6.31.2 permite a usuarios locales producir una denegación de servicio (OOPS) a través de un valor \"optlen\" manipulado en una operación SO_BINDTODEVICE."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, or Red Hat Enterprise MRG, as the affected driver is not enabled in these kernels.\n\nThe affected driver is available in Red Hat Enterprise Linux 3, but only if the kernel-unsupported package is installed.\n\nFuture kernel update in Red Hat Enterprise Linux 3 may address this flaw.","lastModified":"2009-10-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.1","matchCriteriaId":"024C81CA-BF5B-4699-A209-CA97F64CC586"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*","matchCriteriaId":"AA036609-ADD3-4903-AB9D-E8BF81CFC776"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*","matchCriteriaId":"38F9E122-994B-4276-9FCF-A8E4D2D06D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*","matchCriteriaId":"7A15720C-3BDF-4343-B270-2575978293EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*","matchCriteriaId":"FB5ADCFA-2CD8-4A00-AFEC-B84F7E0015A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*","matchCriteriaId":"6EA2EE9B-27FD-49FE-8665-159DABA0E3C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*","matchCriteriaId":"4C81C5F8-2224-4D84-B7C0-E18421276AFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.kernel/896907","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=b7058842c940ad2c08dd829b21e5c92ebe3b8758","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125494119617994&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37075","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36635","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528887","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html","source":"secalert@redhat.com"},{"url":"http://article.gmane.org/gmane.linux.kernel/896907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=b7058842c940ad2c08dd829b21e5c92ebe3b8758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125494119617994&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2910","sourceIdentifier":"secalert@redhat.com","published":"2009-10-20T17:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode."},{"lang":"es","value":"arch/x86/ia32/ia32entry.S en el kernel de Linux anteriores a v2.6.31.4 en plataformas x86_64 no limpia adecuadamente ciertos registros del kernel antes de regresar al modo usuario, lo que permite a usuarios locales leer valores del registro desde un proceso anterior mediante el cambio de un proceso ia32 al modo 64-bit"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-2910\n\nIt has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1671.html , https://rhn.redhat.com/errata/RHSA-2010-0046.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2010-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.31.4","matchCriteriaId":"DF8153BE-F192-4143-B977-4424F9E592D9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*","matchCriteriaId":"D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:5:*:*:*:*:*:*:*","matchCriteriaId":"C029C71B-EB6F-4A45-B138-FE140E100B2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/1/164","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125442304214452&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125444390112831&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125511635004768&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36927","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37075","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/02/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36576","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526788","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/1/164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125442304214452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125444390112831&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125511635004768&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2911","sourceIdentifier":"secalert@redhat.com","published":"2009-10-22T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records."},{"lang":"es","value":"SystemTap 1.0, cuando se utiliza la opción \"--unprivileged\", no restringe adecuadamente ciertos tamaños de datos, lo que permite a usuarios locales (1) producir una denegación de servicio o ganar privilegios a través de una operación de impresión con un gran numero de argumentos que inicia un desbordamiento de ka pila del kernel, (2) producir una denegación de servicio a través de expresión DWARF manipuladas que inician un desbordamiento de la pila del kernel, o (3) producir una denegación de servicio (bucle infinito) a través de vectores que inician la creación de grandes tablas relacionadas con las entradas \"Entry Common Information\" (CIE) y \"Call Frame Instruction\" (CFI)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:systemtap:systemtap:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C36C437-D28D-452A-BAF0-4A618A61920B"}]}]}],"references":[{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37167","source":"secalert@redhat.com"},{"url":"http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/21/1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36778","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2989","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529175","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html","source":"secalert@redhat.com"},{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/21/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2912","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:02:42.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors related to vnode function calls."},{"lang":"es","value":"Las funciones (1) sendfile y (2) sendfilev en Sun Solaris 8 a10 y OpenSolaris en versiones anteriores a snv_110, permiten a atacantes remotos provocar una denegación de servicio (panic) a través de vectores relacionados con llamadas a funciones vnode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_109","matchCriteriaId":"20F63AA6-4323-42C1-918D-181E70F846D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_109","matchCriteriaId":"FE60E1CB-D2BD-4FE1-97F9-15D702729772"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/36400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258588-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020445.1-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36083","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5692","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-258588-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020445.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2913","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:02:42.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en XZero Community Classifieds 4.97.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante la URI. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xzeroscripts:xzero_community_classifieds:4.97.8:*:*:*:*:*:*:*","matchCriteriaId":"30649270-1E0A-4DFF-BAB4-B043E4EA8BD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/35996","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2914","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:02:42.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en XZero Community Classifieds 4.97.8 y versiones anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el nombre de un fichero subido. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xzeroscripts:xzero_community_classifieds:*:*:*:*:*:*:*:*","versionEndIncluding":"4.97.8","matchCriteriaId":"689C13E3-86A4-4212-88C7-677CD18EB1B2"}]}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/2010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2915","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en 2fly_gift.php in 2FLY Gift Delivery System 6.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gameid en una acción content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2fly:gift_delivery_system:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6B83C52F-B5A1-4CB8-BDAB-15459EE02F6B"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/discuz60-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36294","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/discuz60-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2916","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función CNS_AddTxt en logs.dll en 2K Games Vietcong 2 1.10 y versiones anteriores puede permitir a atacantes remotos ejecutar código de su elección mediante especificaciones de cadenas de formato en el nickname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2kgames:vietcong_2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10","matchCriteriaId":"8F42A41F-AFB6-4BCD-A73D-7DAEA6866578"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vietcong2fs-adv.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/57002","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52422","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vietcong2fs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2917","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted string in a (1) .cue or (2) .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en ImTOO MPEG Encoder 3.1.53 permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección mediante una cadena manipulada en un fichero de lista de reproducción (1) .cue o (2) .m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imtoo:mpeg_encoder:3.1.53:*:*:*:*:*:*:*","matchCriteriaId":"A3FC16D3-FEA9-4DAC-8E65-CFC9977D935A"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52857","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2918","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0."},{"lang":"es","value":"El driver tgbvpn.sys en TheGreenBow IPSec VPN Client 4.61.003 permite a usuarios locales provocar una denegación de servicio (referencia a un puntero nulo y caída del sistema) mediante una petición manipulada a el IOCTL 0x80000034, probablemente en relación con un tamaño de buffer de entrada o salida de 0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thegreenbow:thegreenbow_vpn_client:4.61.003:*:*:*:*:*:*:*","matchCriteriaId":"A91F5854-6846-4E79-A1D4-4E555E512423"}]}]}],"references":[{"url":"http://secunia.com/advisories/36332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505816/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2294","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.evilfingers.com/advisory/Advisory/TheGreenBow_VPN_Client_tgbvpn.sys_DoS.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505816/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.evilfingers.com/advisory/Advisory/TheGreenBow_VPN_Client_tgbvpn.sys_DoS.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2919","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Boonex Orca 2.0 y 2.0.2 permite a atacantes remotos autenticados inyectar secuencias de comandos web o HTML de su elección mediante el campo \"topic title\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boonex:orca:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E979BBA5-14C9-4731-8B5F-B5E07C5EA579"},{"vulnerable":true,"criteria":"cpe:2.3:a:boonex:orca:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"26F47C0E-2D9B-4F3A-B69C-BF2ABBD21A30"}]}]}],"references":[{"url":"http://securityreason.com/exploitalert/5644","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33545","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48434","source":"cve@mitre.org"},{"url":"http://securityreason.com/exploitalert/5644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/33545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2920","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) component and (2) priority parameters to buglist.php; and the (3) Username (4) E-mail, (5) Pass, and (6) Confirm pass fields to createaccount.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Elvin 1.2.2 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección los parámetros (1) component y (2) priority para buglist.php; y los campos (3) Username (4) E-mail, (5) Pass y (6) Confirm pass para createaccount.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elvinbts:elvinbts:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B415036E-2249-45A4-BE16-64401AA1824B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51671","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2921","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field)."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.php en MOC Designs PHP News 1.1 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"newsuser\"(campo User) y el parámetro  (2) \"newspassword\" (campo Password)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mocdesigns:php_news:1.1:*:*:*:*:*:*:*","matchCriteriaId":"34D98A56-06A1-4325-8B66-068B5946B089"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9353","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2161","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52231","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2922","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via a base64-encoded file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio absoluto en pixaria.image.php en Pixaria Gallery 2.0.0 a 2.3.5, permite a atacantes remotos leer archivos de su elección a través de un parámetro file base64-encoded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pixaria:pixaria_gallery:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"02F0C17D-4AB2-4482-8A7F-65614E9E27C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pixaria:pixaria_gallery:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"086A8378-5033-400D-BE62-57BCDAFF0627"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9257","source":"cve@mitre.org"},{"url":"http://www.pixaria.com/news/article/234","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51994","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pixaria.com/news/article/234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/35802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2923","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to show.php and (2) in parameter to advanced_search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en BitmixSoft PHP-Lance 1.52 permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro (1) \"language\" para show.php y en el parámetro (2) \"in\" para advanced_search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitmixsoft:php-lance:1.52:*:*:*:*:*:*:*","matchCriteriaId":"D73CB223-04D2-441A-AB3B-C73E1227A420"}]}]}],"references":[{"url":"http://osvdb.org/57246","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/57247","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9444","source":"cve@mitre.org"},{"url":"http://osvdb.org/57246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/57247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2924","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter to videoint.php, and possibly the (2) cat_id parameter to catvideo.php and (3) uid parameter to cviewchannels.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Videos Broadcast Yourself 2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) UploadID para videoint.php, y posiblemente el parámetro (2) cat_id para catvideo.php y el parámetro(3) uid para cviewchannels.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videosbroadcastyourself:videos_broadcast_yourself:2:*:*:*:*:*:*:*","matchCriteriaId":"18968040-7AA1-4CBD-9073-E3C4466B6578"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9453","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2925","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. (dot dot) in the TEMPLATE parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en DJcalendar.cgi en DJCalendar permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro TEMPLATE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:djcalendar:djcalendar:-:*:*:*:*:*:*:*","matchCriteriaId":"BD2F09AB-E64F-4B9C-A7CE-DBFB64AA9441"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9140","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52463","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2926","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day parameter to show_matchs.php and (2) pageno parameter to persons.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PHP Competition System BETA 0.84 y versiones anteriores permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) day parameter para show_matchs.php y el parámetro (2) pageno para persons.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpcompet.free:php_competition_system:0.84:beta:*:fr:*:*:*:*","matchCriteriaId":"261BE672-F8BD-42A2-AFA7-0C0EA50B718B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9438","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52487","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2927","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en DetailFile.php en DigitalSpinners DS CMS 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"nFileId\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digitalspinners:ds_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"60759F0A-C5DB-4621-8C6C-3D5852AD0CCD"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9440","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52486","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2928","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login.php en TGS Content Management 0.x permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"previous_page\", un vector diferente que CVE-2008-6839."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1C78B9E2-5E5F-4AE2-9FF7-DD5B05C5156D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D726819D-BEBC-4D9B-8316-66A0B789C110"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"48605CBA-AC9B-4380-8283-A482A6E941F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D8D23FFE-4B3E-4427-9D06-DDE2163528DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r2:*:*:*:*:*:*","matchCriteriaId":"C4434CD2-309A-4B6D-A8D2-78134C1F411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r3:*:*:*:*:*:*","matchCriteriaId":"332DD6FB-F23B-4A36-923C-A396DAFF8E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C8BA097-5AE5-4174-89B3-E4AD0AC37507"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A13CED45-B95A-4B3A-A3A9-493F1A0FF1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:r2:*:*:*:*:*:*","matchCriteriaId":"C25F9DA1-8624-4060-B519-DB121B4C5E9B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9434","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52481","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2929","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language, and (11) db_host parameters to cms/index.php; and the (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action, and (25) userfile1 parameters to cms/frontpage_ception.php. NOTE: some of these parameters may be applicable only in nonstandard versions of the product, and cms/frontpage_ception.php may be cms/frontpage_caption.php in all released versions."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en TGS Content Management 0.x permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language y (11) db_host para cms/index.php; y los parámetros (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action y (25) userfile1 para cms/frontpage_ception.php. NOTA: algunos de estos parámetros pueden ser aplicables sólo en las versiones no estándar del producto y cms/frontpage_ception.php puede ser cms/frontpage_caption.php en todas las versiones publicadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1C78B9E2-5E5F-4AE2-9FF7-DD5B05C5156D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D726819D-BEBC-4D9B-8316-66A0B789C110"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"48605CBA-AC9B-4380-8283-A482A6E941F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D8D23FFE-4B3E-4427-9D06-DDE2163528DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r2:*:*:*:*:*:*","matchCriteriaId":"C4434CD2-309A-4B6D-A8D2-78134C1F411F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.2.5:r3:*:*:*:*:*:*","matchCriteriaId":"332DD6FB-F23B-4A36-923C-A396DAFF8E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C8BA097-5AE5-4174-89B3-E4AD0AC37507"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A13CED45-B95A-4B3A-A3A9-493F1A0FF1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tgs-cms:tgs_content_management:0.3.2:r2:*:*:*:*:*:*","matchCriteriaId":"C25F9DA1-8624-4060-B519-DB121B4C5E9B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9434","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52468","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2930","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica Search en elka CMS (alias Elkapax) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"q\" para la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elkagroup:elkapax_cms:-:*:*:*:*:*:*:*","matchCriteriaId":"1830D8EB-9DC8-464E-B672-7CE0E4EA4254"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/505725/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505725/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2931","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en p.php en SlideShowPro Director 1.1 a 1.3.8 permite a atacantes remotos leer ficheros de su elección a través de secuencias de salto de directorio en el parámetro \"a\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slideshowpro:director:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9ED3C54C-8283-4BD9-9751-3C13316B1F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:slideshowpro:director:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9CB03164-BFB0-4F08-81F2-17C859689D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:slideshowpro:director:1.3:*:*:*:*:*:*:*","matchCriteriaId":"01A94FA7-92E9-4E87-A3FC-61570DD6D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:slideshowpro:director:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"05DC815A-532C-40BD-AF85-21C2ADCAF0B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/36197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://slideshowpro.net/news/archive/2009/07/director-139-fi.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505534/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slideshowpro.net/news/archive/2009/07/director-139-fi.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505534/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2932","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en uddiclient/process en el cliente UDDI en SAP NetWeaver Application Server (Java) 7.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo TModel Key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:netweaver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"41FAC5DD-D577-47F9-B0CA-006032256642"}]}]}],"references":[{"url":"http://osvdb.org/57000","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36228","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=133","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505697/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36034","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022731","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52429","source":"cve@mitre.org"},{"url":"https://service.sap.com/sap/support/notes/1322098","source":"cve@mitre.org"},{"url":"http://osvdb.org/57000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dsecrg.com/pages/vul/show.php?id=133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505697/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://service.sap.com/sap/support/notes/1322098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2933","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Piwigo en versiones anteriores a 2.0.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"items_number\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"9931524C-ECD8-40DA-969D-94BF21DB7075"}]}]}],"references":[{"url":"http://secunia.com/advisories/36333","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505801/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/36333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505801/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-2934","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T20:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a (1) .pls or (2) .pl playlist file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en xaudio.dll en Programmed Integration PIPL 2.5.0 y 2.5.0D permiten a atacantes remotos ejecutar código de su elección mediante una cadena larga en fichero de lista de reproducción (1) .pls o (2) .pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:programmedintegration:pipl:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6D656C2B-1EBC-49E9-8ACC-B9AE67A7F575"},{"vulnerable":true,"criteria":"cpe:2.3:a:programmedintegration:pipl:2.5.0d:*:*:*:*:*:*:*","matchCriteriaId":"9FCEDBAF-87CB-453A-B3BE-91715C586083"}]}]}],"references":[{"url":"http://osvdb.org/56996","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36297","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9428","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52440","source":"cve@mitre.org"},{"url":"http://osvdb.org/56996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2935","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:00:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript."},{"lang":"es","value":"Google V8, usado en Google Chrome anteriores a v2.0.172.43, permite a los atacantes remotos, evitar restricciones intencionadas o lecturas de memoria, y posiblemente obtener información sensible o ejecución arbitraria de código en el Chrome sandbox, a través de JavaScript manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.172.37","matchCriteriaId":"1FBFF8DA-5CD2-420E-A9A3-53475271997B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=18639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/57421","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36417","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36149","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022773","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52902","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=18639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/57421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2937","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed."},{"lang":"es","value":"Vulnerabildiad de Secuencias de Comandos en Sitios Cruzados (XSS) en Planet v2.0 y Planet Venus, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del atributo SRC en un elemento IMG en una fuente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intertwingly:planet:2.0:*:*:*:*:*:*:*","matchCriteriaId":"417082A5-EFA1-45C4-8418-B19455F05F58"},{"vulnerable":true,"criteria":"cpe:2.3:a:intertwingly:planet_venus:*:*:*:*:*:*:*:*","matchCriteriaId":"8CC161B8-37DD-46BE-B2CF-4AF5900020C9"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179","source":"cve@mitre.org"},{"url":"http://intertwingly.net/blog/2009/09/09/Venus-Updates","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.planetplanet.org/archives/devel/2009-September/001999.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36636","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36392","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522802","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00504.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://intertwingly.net/blog/2009/09/09/Venus-Updates","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.planetplanet.org/archives/devel/2009-September/001999.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2939","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files."},{"lang":"es","value":"El script postfix.postinst en el paquete postfix v2.5.5 de Debian GNU/Linux y Ubuntu permite acceso de escritura al usuario postfix en /var/spool/postfix/pid, permitiendo a usuarios locales dirigir ataques de enlaces simbólicos que sobrescriban ficheros de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postfix:postfix:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"894002C8-F3C1-4241-96FE-C088BBD0FCED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"67D47FA7-B5AF-4580-8BA7-8408D98D1F26"},{"vulnerable":false,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F22916E8-84BE-444D-9B99-199FE8E0F665"}]}]}],"references":[{"url":"http://www.debian.org/security/2011/dsa-2233","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/6","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2011/dsa-2233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2940","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings."},{"lang":"es","value":"El módulo pygresql v3.8.1 y v4.0 para Python no soporta de forma adecuada la función PQescapeStringConn, lo que podría permitir a atacantes remotos aprovechas cuestiones de escape incluidas en las codificaciones de carácter multibyte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pygresql:pygresql:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"9238A143-989E-4628-B839-813DF98E08CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pygresql:pygresql:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BA9EA913-63D0-430E-8E72-9EB9DF7F6CF4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","matchCriteriaId":"9C18D8AC-D77C-44CD-B5DF-AF6E3F3851CB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37654","source":"cve@mitre.org"},{"url":"http://ubuntu.com/usn/usn-870-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1911","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59028","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-870-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2942","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings."},{"lang":"es","value":"El mysql-ocaml bindings v1.0.4 para MySQL no soporta adecuadamente la función mysql_real_escape_string, lo que puede permitir a atacantes remotos elevar vulnerabilidades de escape incluyendo codificaciones de caracteres multibyte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql-ocaml:mysql-ocaml:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CED10CEF-B0EB-4164-9061-EFA0F97497AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","matchCriteriaId":"CA450156-3EEF-4F22-8F28-2E0A55C81FF6"}]}]}],"references":[{"url":"http://secunia.com/advisories/37047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1910","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:279","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2943","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings."},{"lang":"es","value":"Los vínculos Postgresql-ocaml v1.5.4, v1.7.0, y v1.12.1 para la librería libpq para PostgreSQL no soporta de forma adecuada la función PQescapeStringConn, lo que podría permitir a atacantes remotos aprovechas cuestiones de escape incluidas en las codificaciones de carácter multibyte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocaml:postgresql-ocaml:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C296D974-BD89-49F3-BDF5-AC3C785C8A5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocaml:postgresql-ocaml:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"66272BD6-9D54-453B-A9E4-4C55815867DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ocaml:postgresql-ocaml:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"65D298B6-EE75-4B8A-92DE-197727DBF00B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","matchCriteriaId":"E5A47A8B-5F2B-42B1-A8F6-ACDBEA4D8485"}]}]}],"references":[{"url":"http://secunia.com/advisories/37048","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1909","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/59029","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/59029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2944","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en el plugin teximg en ikiwiki anterior a v3.1415926 y v2.x anterior a v2.53.4, permite a atacantes dependientes de contexto leer archivos de su elección a través de comando TeX manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*","versionEndIncluding":"3.141592","matchCriteriaId":"5A161EE7-4B7F-43C2-ADE3-0F3FD7A333EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.0:*:*:*:*:*:*:*","matchCriteriaId":"196439CC-B5BE-4016-B6CF-B8308002D61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.00:*:*:*:*:*:*:*","matchCriteriaId":"0AE568DE-413C-4EF7-96C6-AF2D47EB36BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.1:*:*:*:*:*:*:*","matchCriteriaId":"20FFAE6B-9EBD-461A-AF5C-BB00EA2A652F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C064545-5C87-4CC5-A9FA-379A9F4ED0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.3:*:*:*:*:*:*:*","matchCriteriaId":"729BA91F-625A-4734-814D-EADE78A42CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.4:*:*:*:*:*:*:*","matchCriteriaId":"025BA9CF-1F77-4BC1-A884-3E49B23BB668"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C3120790-F2E2-4780-8022-B88EB326C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.6:*:*:*:*:*:*:*","matchCriteriaId":"DF180F3A-2B55-4555-9A3B-D8C12CB52CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BF68A8E1-96D7-49A5-B844-9FE7A0FE9631"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.7:*:*:*:*:*:*:*","matchCriteriaId":"E1152479-FAAA-4AF5-85A8-9454C48CE087"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.8:*:*:*:*:*:*:*","matchCriteriaId":"4490706B-50FF-4126-8EB8-4F4AFDE5B2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.9:*:*:*:*:*:*:*","matchCriteriaId":"70DD7148-E3ED-4726-A7B7-E4DEB6978DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.10:*:*:*:*:*:*:*","matchCriteriaId":"350315D5-C124-430D-BD7C-9EE5C3F4D957"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.11:*:*:*:*:*:*:*","matchCriteriaId":"8CA658C7-2D79-4A8D-977E-D7F4640CEAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.12:*:*:*:*:*:*:*","matchCriteriaId":"8892C63F-297A-4D7A-8F63-B15BAE578645"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.13:*:*:*:*:*:*:*","matchCriteriaId":"0E83FBBB-0837-41EE-A56A-C837FAE6394C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.14:*:*:*:*:*:*:*","matchCriteriaId":"E14AF144-D023-4FF1-B6B6-FF3E74D61F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.15:*:*:*:*:*:*:*","matchCriteriaId":"2FDE3606-418B-4E76-97F8-655CE1679857"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.16:*:*:*:*:*:*:*","matchCriteriaId":"0F6877A1-D793-48A7-9187-63EA568EC854"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.17:*:*:*:*:*:*:*","matchCriteriaId":"739EB847-21B4-4728-9F38-3925893A37A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.18:*:*:*:*:*:*:*","matchCriteriaId":"FA1630A6-8578-4B0A-9F12-549EE0C42E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.19:*:*:*:*:*:*:*","matchCriteriaId":"15FE7BEB-A9E9-476A-ABDF-663A8F69BA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.20:*:*:*:*:*:*:*","matchCriteriaId":"10E53E42-F691-4237-AAC1-A93E35EADD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.30:*:*:*:*:*:*:*","matchCriteriaId":"6994F418-61A4-4CB5-94FA-C7DC7A31BBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31:*:*:*:*:*:*:*","matchCriteriaId":"356A3B66-637B-4429-A201-EAB0A8FD9DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31.1:*:*:*:*:*:*:*","matchCriteriaId":"11BC2505-E5EF-4CA4-B747-F74F20BFDCE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31.2:*:*:*:*:*:*:*","matchCriteriaId":"6CDB27DC-1B2B-4893-AFC7-71535919567B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.31.3:*:*:*:*:*:*:*","matchCriteriaId":"18275BA3-A5D0-410B-9D90-B8DBDB486849"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.40:*:*:*:*:*:*:*","matchCriteriaId":"06E20D04-ADEA-4773-843A-2D6BB0FC5591"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.41:*:*:*:*:*:*:*","matchCriteriaId":"C76D329C-975F-4180-9102-2CAA24230C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.42:*:*:*:*:*:*:*","matchCriteriaId":"86A6C38C-6B71-4A83-B280-C1195D668DDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.43:*:*:*:*:*:*:*","matchCriteriaId":"0AB24A6A-D1D2-4200-ACF6-93F20AA2CEE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.44:*:*:*:*:*:*:*","matchCriteriaId":"3B998D73-576D-4942-A164-8898437815DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.45:*:*:*:*:*:*:*","matchCriteriaId":"69FBED8F-C567-4366-97E7-E5CF6A9BC479"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.46:*:*:*:*:*:*:*","matchCriteriaId":"01494227-D431-4F2B-8174-25A5C2CBC3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.47:*:*:*:*:*:*:*","matchCriteriaId":"C26EFAF6-5DE3-4562-A831-DE9CCD40B31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.48:*:*:*:*:*:*:*","matchCriteriaId":"553F2BF0-0375-406F-9F6D-33E49543BC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.49:*:*:*:*:*:*:*","matchCriteriaId":"06FBD3B4-99E3-4ED5-A49F-8747C26962BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.50:*:*:*:*:*:*:*","matchCriteriaId":"4888637D-EBA4-4DD3-9EE9-ABA9D26799AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.51:*:*:*:*:*:*:*","matchCriteriaId":"5B6F140A-2391-4663-B680-8E58FD315C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.52:*:*:*:*:*:*:*","matchCriteriaId":"29DF1E0B-250C-47C1-BC76-4F9EE90AB836"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.53:*:*:*:*:*:*:*","matchCriteriaId":"82F41174-0E9C-4A09-BAEB-D75595181334"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.54:*:*:*:*:*:*:*","matchCriteriaId":"744A8DB6-3FD4-4891-B623-6E4AE0518867"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.55:*:*:*:*:*:*:*","matchCriteriaId":"90056C13-CF77-4BE1-A9CE-C8811ABA29C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.56:*:*:*:*:*:*:*","matchCriteriaId":"E013025D-F390-4206-8BE6-42F5F6DBCDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.60:*:*:*:*:*:*:*","matchCriteriaId":"1C334708-7565-4E30-BEC5-75CB91B13645"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.61:*:*:*:*:*:*:*","matchCriteriaId":"C2E0BDA8-8EBE-4D8F-B65E-6D22C89A7F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.62:*:*:*:*:*:*:*","matchCriteriaId":"502FAEEA-7E31-49A2-9F1B-79CB5D7A094B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.62.1:*:*:*:*:*:*:*","matchCriteriaId":"325CDDEF-2C66-4B9B-9B70-B4FA5D619F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.63:*:*:*:*:*:*:*","matchCriteriaId":"E0B7CA1D-C4CA-45CD-B6AB-48E3CA289714"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E3BC2691-C9B1-46C1-A3DD-D232BEB25B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.65:*:*:*:*:*:*:*","matchCriteriaId":"8CE00B3B-220C-4FD0-83FC-CB235E2C91D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.66:*:*:*:*:*:*:*","matchCriteriaId":"984B8C95-0B58-4585-9EC8-393563DA7851"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.67:*:*:*:*:*:*:*","matchCriteriaId":"3261F3F5-BBAC-407A-BD0B-159F295D6B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.68:*:*:*:*:*:*:*","matchCriteriaId":"C5FFEB95-74D2-4EF9-9816-279546590319"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.69:*:*:*:*:*:*:*","matchCriteriaId":"EA175F1E-3D1F-42B1-9FA5-66187EB89670"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.70:*:*:*:*:*:*:*","matchCriteriaId":"4D6EA187-821B-4673-9581-FD1A877E6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.71:*:*:*:*:*:*:*","matchCriteriaId":"EAE832BA-23B5-4D10-866D-10EB86217795"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:2.72:*:*:*:*:*:*:*","matchCriteriaId":"EA08E303-A084-4CAF-AA7D-39E3289B6514"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7CF7F5FD-27CB-4E7E-AF50-EAAB20DAD289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.00:*:*:*:*:*:*:*","matchCriteriaId":"02ADB4DC-4FA7-4696-BE15-4038AA7C8440"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.01:*:*:*:*:*:*:*","matchCriteriaId":"CCA76343-5D08-4E79-8E83-29799E8BF9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.02:*:*:*:*:*:*:*","matchCriteriaId":"110383CC-7DAB-4FC7-9898-92AF1CB76585"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.03:*:*:*:*:*:*:*","matchCriteriaId":"CB47B7AD-40A2-466F-AF26-92DB4BF9EDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.04:*:*:*:*:*:*:*","matchCriteriaId":"4560DD73-D1A2-46D9-A3F7-BAC5A294B91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.06:*:*:*:*:*:*:*","matchCriteriaId":"27D8EE30-BFBB-45C6-8B27-012E17CA3C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.07:*:*:*:*:*:*:*","matchCriteriaId":"7374FCDB-55E7-48AC-8E38-51C20500BBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.08:*:*:*:*:*:*:*","matchCriteriaId":"03FA5A43-6317-4510-BC00-7BCF3DB4F502"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.09:*:*:*:*:*:*:*","matchCriteriaId":"695759BE-8539-496A-AABD-2F56ACFDA0FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.10:*:*:*:*:*:*:*","matchCriteriaId":"0566B074-7F01-4482-8F26-F08EDD4F0B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.11:*:*:*:*:*:*:*","matchCriteriaId":"9A3D2C53-A15F-4FEF-A56B-A4A00C24DF39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.12:*:*:*:*:*:*:*","matchCriteriaId":"B8F89322-85B0-4C8B-AB60-4577FB914D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.13:*:*:*:*:*:*:*","matchCriteriaId":"5B55BCD8-E214-4C75-86F7-247ECBEAFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.14:*:*:*:*:*:*:*","matchCriteriaId":"B19DCEDD-AC25-48F2-B0D9-F35C67AA3A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.141:*:*:*:*:*:*:*","matchCriteriaId":"9DDE6204-5CC9-4867-BD9E-9C999C1E6D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.1415:*:*:*:*:*:*:*","matchCriteriaId":"29453740-F182-4BD1-ADD8-BF3F37D2D4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikiwiki:ikiwiki:3.14159:*:*:*:*:*:*:*","matchCriteriaId":"A6FA5E6A-F504-43DC-8021-1BE35FB25269"}]}]}],"references":[{"url":"http://ikiwiki.info/security/#index35h2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/57575","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36539","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36181","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2475","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52922","source":"cve@mitre.org"},{"url":"http://ikiwiki.info/security/#index35h2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/57575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2945","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T22:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history."},{"lang":"es","value":"weblogin/login.fcgi (alias el script de conexión WebLogin) en WebAuth de la Universidad de Stanford v3.5.5, v3.6.0 y v3.6.1 coloca contraseñas en en las URL en determinadas circunstancias que implique una conversión de una solicitud POST a una petición GET, lo cual permite a atacantes dependiendo del contexto descubrir contraseñas mediante la lectura de (1) registros de acceso al servidor web, (2) registros Referer del servidor web, o (3) el historial del navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanford:webauth:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"97D7A1DC-4604-487F-8016-C3C0A27D1CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanford:webauth:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C64D291D-898C-40E2-9E03-14EED5D7A6B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanford:webauth:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"464011F9-EA17-4000-92CB-CE303026D856"}]}]}],"references":[{"url":"http://secunia.com/advisories/36640","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://webauth.stanford.edu/security/2009-09-10.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://webauth.stanford.edu/security/2009-09-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-2946","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T20:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages."},{"lang":"es","value":"Vulnerabilidad de inyección \"Eval\" en scripts/uscan.pl anterior a Rev 1984 en devscripts permite a atacantes remotos ejecutar código Perl de su elección a través de nombres de rutas manipulados en servidores de distribución de código fuente utilizado en paquetes Debian GNU/Linux."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devscripts_devel_team:devscripts:*:*:*:*:*:*:*:*","matchCriteriaId":"A97FDE91-579A-4598-8E99-728249DE1810"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B7B30CD4-008C-4452-843C-EB5DB15FA7A2"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209","source":"cve@mitre.org"},{"url":"http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1","source":"cve@mitre.org"},{"url":"http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1878","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2947","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Xapian Omega v1.0.16, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de valores no especificados en el parámetro CGI, que en ocasiones es incluido en los mensajes de excepción."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.15","matchCriteriaId":"E5B32B09-2211-446C-9605-50E5D2A647CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CE0DDC19-0F30-4974-918A-C30C86ABFA3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"CBED9111-D09D-4216-85AC-DEE45FA3F7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B4A52A7C-45E2-4EBD-8F0D-3689EB2D5E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"FE37440F-00ED-4CE5-83F8-6E37FD6BDAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"B0F73199-1EA7-46DF-8B2E-AA14D85A1DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"A8902A27-A219-46FA-9A8A-3E946A253EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"D0C83D2F-C7B0-4010-9C17-FE5F813C07B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"BC0E29D0-A8A9-4859-8B96-46BC77474EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"625F72A9-33B2-4599-BB85-307BB0E1A70C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"586A4BFF-EE02-446D-813D-4047CAB76691"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"5DB61F8E-5796-42C5-BC33-F1DD0177CFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"C7E31076-63C4-402C-9DB4-67A466722B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3DE12CF1-0D72-48B4-B775-1E504F27E4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"9BB55590-D2E5-4D22-A3BB-0A2D33C584AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"6D5EE25F-10A4-41EE-8E28-2C9CBD4736BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"6B3321D2-77C1-4592-8CD0-3E7C52F7F107"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"C27123FE-9348-48A1-9678-A31548CA21EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBA3DE2E-FECC-4775-A4C7-FA88FB474EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80B31509-3028-498C-8FF3-B93F1F33BDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DB2C533D-ED06-4676-A8F3-BA664CB107A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CF912E95-618D-439B-8231-CD45C5966CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3A89463B-AD9B-4B61-9BFF-F003470E8D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0C1E5EE7-A605-4D0A-BC1C-A6F42BDA39C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C6DA8916-91BE-4C3E-83FD-2471BDE93BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E982B22A-3368-4FD7-BD4D-A7A1E3F2DEBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"458012D3-B354-4984-BAC1-E8810EF73432"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2B66D8A5-8CF6-4752-AD21-CCB32780286B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A3EE2CF9-5C0E-4291-A694-C0D327415730"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E6FB0460-C0C2-4A72-A575-F3DAD299EE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3B462D97-AD4D-4F0E-865D-D2D879ADC177"},{"vulnerable":true,"criteria":"cpe:2.3:a:xapian:omega:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"0EEA96B4-838C-4137-B5A3-736DD618B3CC"}]}]}],"references":[{"url":"http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36317","source":"cve@mitre.org"},{"url":"http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2948","sourceIdentifier":"cve@mitre.org","published":"2009-10-07T18:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option."},{"lang":"es","value":"mount.cifs en Samba v3.0 anterior a v3.0.37, v3.2  anterior a v3.2.15, v3.3  anterior a v3.3.8 y v3.4 anterior a v3.4.2, cuando mount.cifs es instalado con el suid root, no refuerza los permisos adecuadamente, lo que permite a usuarios locales leer parte del archivo de credenciales y obtener la contraseña especificando la ruta al archivo de credenciales y usando la opción --verbose o -v."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.37","matchCriteriaId":"C0E114F0-973F-47CA-A233-53AC718A97F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.15","matchCriteriaId":"836C7AC0-CAE0-459A-A8A5-AA60DFD693CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.8","matchCriteriaId":"D9C888EF-28BF-44BF-9E47-564B0C3222F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.2","matchCriteriaId":"D3209E99-C442-4B0E-8EDB-E4EB995AC9C6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://news.samba.org/releases/3.0.37/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.2.15/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.3.8/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.4.2/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://osvdb.org/58520","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36893","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36937","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36953","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2009-2948.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36572","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022975","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2810","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53574","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://news.samba.org/releases/3.0.37/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.2.15/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.3.8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://news.samba.org/releases/3.4.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://osvdb.org/58520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2009-2948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2951","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords."},{"lang":"es","value":"Phenotype CMS anterior a v2.9no utiliza una sal -salt- añadida aleatoria para el cifrado de las contraseñas, esto facilita a los atacantes dependientes del contexto llegar a conocer la contraseña en texto plano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"CBF0838A-2FC3-4407-BBFC-1C6D4632B0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A12B07C8-92E1-45A6-97C8-ED81A50B7A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D584096C-20F6-48E2-AFED-43C35E0D102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9D3DDB99-189F-4239-998E-FB03304F67B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E80761B-1C6C-4E1F-98BD-B4D65BA8ED10"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.3:*:*:*:*:*:*:*","matchCriteriaId":"29E323CC-81A8-4997-A89D-7951C51FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.4:*:*:*:*:*:*:*","matchCriteriaId":"CDFD819F-5AC0-47F3-A9F7-5E4D02058958"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"50DE5FF2-DD49-4B5C-B7AF-75824C8AAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"19F09617-AFBD-4FC7-820B-5A43F2AA9668"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.6:*:*:*:*:*:*:*","matchCriteriaId":"13EB4778-9EAB-4E5D-BAE8-75D58A4ECF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.7:*:*:*:*:*:*:*","matchCriteriaId":"C714422D-4A39-4ED7-B244-05F56CEDF7E9"}]}]}],"references":[{"url":"http://www.phenotype-cms.com/wiki/development-changelog","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52856","source":"cve@mitre.org"},{"url":"http://www.phenotype-cms.com/wiki/development-changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2952","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T15:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la función pollwakeup en Sun Solaris 10, y OpenSolaris anteriores a snv_51, permiten a los usuarios locales causar una denegación de servicio (pánico) a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_50","matchCriteriaId":"FF57FBEB-7713-4058-A5E7-7EB34E52A597"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_50","matchCriteriaId":"34FB5C76-5357-47CF-B498-D94321714DF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-09-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265248-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36106","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6392","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-09-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265248-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2953","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715."},{"lang":"es","value":"Mozilla FireFox v3.0.6 a la v3.0.13, y v3.5.x, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de código JavaScript con un  valor largo de cadena para la propiedad \"hash\" (también conocida como location.hash). Cuestión relacionada con el CVE-2008-5715."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"}]}]}],"references":[{"url":"http://websecurity.com.ua/3424/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3424/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2954","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T15:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715."},{"lang":"es","value":"Microsoft Internet Explorer v6.0.2900.2180 y anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de  CPU o cuelgue de aplicación) a través de código JavaScript con un valor de cadena larga para la propiedad \"hash\" (también conocida como location.hash). Cuestión relacionada con el CVE-2008-5715."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2900.2180","matchCriteriaId":"DD2BF527-F6EB-4E46-9B33-B97795CCF74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"59EB6841-0427-479B-8771-06DF62EE3C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B9D82B89-456D-41CB-A894-B6A22FB4415D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*","matchCriteriaId":"2E21CE6E-2B33-4225-B1DC-C19F1D578040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1B26CE22-E730-4247-853E-5E640DB3ECB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*","matchCriteriaId":"0A652453-AB5F-405C-ABDE-CE1B54FEACED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*","matchCriteriaId":"141080AB-48DE-4885-BAB6-6F0937ABD49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*","matchCriteriaId":"EB758D76-B7F6-4E87-B88D-620443655CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*","matchCriteriaId":"28655AC5-1512-4F45-9963-CA26F73981CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*","matchCriteriaId":"C00F4F36-B88A-4FDB-BE52-83C6EF60BDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*","matchCriteriaId":"BEC05584-F553-4D29-9C46-C9EE5F0CB166"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*","matchCriteriaId":"B108A86E-8387-446C-B823-BE6FCAE747A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*","matchCriteriaId":"BA3F79B8-512A-4B88-868C-7C4ADFD223C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*","matchCriteriaId":"078C3A86-C9F8-4A19-9DDC-1065B54E640F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*","matchCriteriaId":"9030923C-356E-4FAB-8E64-03D462B4DB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*","matchCriteriaId":"DC0FFABC-8BED-4838-85FE-406DC9CF9B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*","matchCriteriaId":"C9DB4A00-4F70-4189-81BD-9318C52DF2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*","matchCriteriaId":"FBFE8C8E-F46C-4179-AE83-CE4720C8E0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*","matchCriteriaId":"61125B09-23AA-4D5A-8332-6B5CCD80C7A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*","matchCriteriaId":"3AECF59F-B3C0-44CC-B77A-30E32B3E8BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*","matchCriteriaId":"D4690B85-86B9-448E-9249-B3885DEDC60E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*","matchCriteriaId":"4E215C82-E4AD-4B87-92D8-DD4D486EB6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*","matchCriteriaId":"D91F4C80-3B1B-45BD-966F-C9DBF98B875D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*","matchCriteriaId":"F65E0DC1-40F6-4252-945A-A972343D1E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*","matchCriteriaId":"8C07C1A9-1A94-4653-8C57-6FCFC25854E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*","matchCriteriaId":"EDC57519-AD96-4ECF-A5B2-4E45F7D55298"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*","matchCriteriaId":"37DE3DE6-A355-41F2-BF5E-E7526449E753"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*","matchCriteriaId":"5DB24B4F-44FF-4F0F-90FA-240A34B9599F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*","matchCriteriaId":"919A6551-DB18-49BD-AB92-4C453B3B728F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*","matchCriteriaId":"C512DAB3-2720-42D2-B27E-28F30FE0FE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*","matchCriteriaId":"CB90458F-1F2B-4F4C-88C6-4B670787D126"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*","matchCriteriaId":"6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*","matchCriteriaId":"4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CFF390-FF33-45CA-BC96-C6766491C616"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*","matchCriteriaId":"F4336F0E-75FE-4592-9D98-4F689804956E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DA6E5E4B-9E95-4019-8622-6E707FEC2FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*","matchCriteriaId":"8BA6BA38-8B3B-4B9A-95BF-BCD412DD83B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*","matchCriteriaId":"01BD2A05-3FCE-4C5D-8228-968630F27E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100:*:*:*:*:*:*:*","matchCriteriaId":"4430779C-C678-4950-AE9E-82CDFC1A08D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*","matchCriteriaId":"BF0EC334-AEAD-43CA-A609-C027060F4F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*","matchCriteriaId":"BAF320BE-F022-4E0E-9815-B8AEED87B384"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*","matchCriteriaId":"75532B2D-6814-4D20-8AEB-E7DFD66B6423"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*","matchCriteriaId":"83802E30-8E7D-4CAB-B8FC-10056CF833D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*","matchCriteriaId":"314538E8-48EC-4869-9074-2A1F5B7CBB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*","matchCriteriaId":"F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000:*:*:*:*:*:*:*","matchCriteriaId":"6876CE89-AA70-44C5-8A69-E2ED7A63F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*","matchCriteriaId":"93F47C82-E767-47A8-88DE-417B004ED7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"}]}]}],"references":[{"url":"http://websecurity.com.ua/3424/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3424/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2955","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715."},{"lang":"es","value":"Google Chrome v1.0.154.48 y anteriores permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y cuelgue de la aplicación) a través de código javascript con un valor de cadena largo en la propiedad hash (también conocida como location.hash), cuestión relativa a CVE-2009-5715."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.48","matchCriteriaId":"4E9FA397-22DD-448C-8CC5-93549EAD7738"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}]}]}],"references":[{"url":"http://websecurity.com.ua/3424/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3424/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2956","sourceIdentifier":"cve@mitre.org","published":"2009-08-24T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files."},{"lang":"es","value":"Los componentes (1) Net.Commerce y (2) Net.Data en IBM WebSphere Commerce Suite almacenan información sensible en el directorio web raíz con un control de acceso insuficiente, permitiendo a atacantes remotos descubrir contraseñas, y detalles de la base de datos y el sistema de ficheros, mediante una petición directa a los ficheros de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"9325A374-8168-4C9C-8A6B-FF034FB7EC30"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2957","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T15:30:01.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la función tftp_request en tftp.c en dnsmasq anterior v2.50, cuando --enable-tftp es usado, puede permitir a atacantes remotos ejecutar código a su elección a través de un nombre de fichero largo en un paquete TFTP, como queda demostrado en una lectura de respuesta (RRQ)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*","versionEndIncluding":"2.49","matchCriteriaId":"4C214CD9-059C-4211-A20F-A9C32D96EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.4:*:*:*:*:*:*:*","matchCriteriaId":"C940D03A-EAAB-4A9F-BAD9-F5B3A8B626F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.5:*:*:*:*:*:*:*","matchCriteriaId":"DFF93550-7A3C-4F8F-B242-EBA90F8DA820"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB34D798-1CE9-478E-ABF6-502AEB5153BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.7:*:*:*:*:*:*:*","matchCriteriaId":"83842D26-CD1A-4880-BFB2-A29C681DEF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.95:*:*:*:*:*:*:*","matchCriteriaId":"37F2C4F7-183F-43A6-AB7E-D7A11E8FA6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.96:*:*:*:*:*:*:*","matchCriteriaId":"D5BB5AEA-8B22-4F2A-A7B2-B974475C92D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.98:*:*:*:*:*:*:*","matchCriteriaId":"94C97061-04B7-42F9-8C82-B405C3AD0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.992:*:*:*:*:*:*:*","matchCriteriaId":"1936D4A9-A8DF-4DCE-94CA-027C40E86E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.996:*:*:*:*:*:*:*","matchCriteriaId":"9E8954FA-4913-47A1-8FAD-A2D1E9CAF8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E34FF38A-8B3B-4299-911D-FBB0DC6AC700"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DFBABB9-056D-45EB-87F6-47A25C5A0297"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2263A232-EAA9-49DC-B91F-2F73C45AA68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.4:*:*:*:*:*:*:*","matchCriteriaId":"869D7B02-6EA7-4A7D-B6CA-93BD2E057784"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1D90FB55-73CB-4F99-92C6-99AD49872CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.6:*:*:*:*:*:*:*","matchCriteriaId":"7CE1A634-20CF-43A0-9441-E249C09D1938"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.7:*:*:*:*:*:*:*","matchCriteriaId":"DE397BC5-E523-4048-8B75-A332B618C64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.8:*:*:*:*:*:*:*","matchCriteriaId":"CC86CFA8-7019-481D-B6ED-F4152DA64C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.9:*:*:*:*:*:*:*","matchCriteriaId":"48EFFFBE-15EB-4A17-A285-A7299D771391"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9CAF4136-4587-4C1D-B303-518820A6E17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8CD4F393-64A2-42AD-8CBA-80F9FBC3307A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.12:*:*:*:*:*:*:*","matchCriteriaId":"17C26CD9-9357-4275-A46B-D63A5C20EDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D5CC931A-3B4D-4E0C-AB80-DCBB18260079"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.14:*:*:*:*:*:*:*","matchCriteriaId":"2E80EE61-3271-4BB6-BCBD-F85492B2B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.15:*:*:*:*:*:*:*","matchCriteriaId":"07B539B5-ACCD-4BDC-962E-7E9FCE33D263"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.16:*:*:*:*:*:*:*","matchCriteriaId":"1537C31B-FB1A-40AC-8FFF-033B3CBD236B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.17:*:*:*:*:*:*:*","matchCriteriaId":"86965249-76A4-4963-AD92-CE244E1EC6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.18:*:*:*:*:*:*:*","matchCriteriaId":"CE2B2312-A4F9-422E-89EC-687D26500B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.0:*:*:*:*:*:*:*","matchCriteriaId":"955C42CA-93C0-41B5-9687-1F8476BA9846"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D463C1BC-35A9-4AD7-8908-BBB293CE2FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A3F0716-7898-40AC-8E25-B93CA64A04E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F6FB1BA4-C1F9-44F4-8048-33CC26AD1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C6730AA2-C4EE-4FE6-BA20-CBC58EDD16B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.5:*:*:*:*:*:*:*","matchCriteriaId":"61593637-2CD7-48A1-A31C-E5DE62424B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.6:*:*:*:*:*:*:*","matchCriteriaId":"52309F28-53FD-438C-9913-7228B8387DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.7:*:*:*:*:*:*:*","matchCriteriaId":"B252C33B-0144-4737-B34E-761B227F9EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.8:*:*:*:*:*:*:*","matchCriteriaId":"B2C6DA43-93AC-462B-81E7-6A6819AF8988"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*","matchCriteriaId":"8BFBF5E9-7287-4B1D-AD78-0E30A5E2F0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.10:*:*:*:*:*:*:*","matchCriteriaId":"58DB4CAB-2ED9-473A-8B36-FA4F941A8281"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.11:*:*:*:*:*:*:*","matchCriteriaId":"644F05EE-9019-4BD8-9F2C-5DEF2E8FE486"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.12:*:*:*:*:*:*:*","matchCriteriaId":"07A3613F-A4FC-4643-A155-27A6BAB890C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.13:*:*:*:*:*:*:*","matchCriteriaId":"2F74BAF2-F875-4394-9447-9201520E65A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.14:*:*:*:*:*:*:*","matchCriteriaId":"96141817-BC07-4643-8E57-63445E65F720"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.15:*:*:*:*:*:*:*","matchCriteriaId":"C391DF4E-9FA3-44FE-AF61-52461EC209C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F06E581B-2A84-4145-91DC-2B9D4ADC227B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.17:*:*:*:*:*:*:*","matchCriteriaId":"CAC75365-A06A-4EF2-A54D-2595B480C9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.18:*:*:*:*:*:*:*","matchCriteriaId":"34412174-A7A5-4D8A-8D04-BB187594852B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.19:*:*:*:*:*:*:*","matchCriteriaId":"8BC0DDCD-5AE5-4F4C-9C17-97803CCB8810"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.20:*:*:*:*:*:*:*","matchCriteriaId":"14FAD4A7-FB21-4B37-9403-09D2CCF68888"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.21:*:*:*:*:*:*:*","matchCriteriaId":"D7A05414-B0DC-4D7B-B542-ACF407822EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F5C8F897-1A9F-4D25-A42B-8F31DD14E2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.23:*:*:*:*:*:*:*","matchCriteriaId":"5505D0A5-9D21-4563-81AA-7CAB3D369514"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.24:*:*:*:*:*:*:*","matchCriteriaId":"DCC53D53-4652-40D4-8F9A-D704BCEABDA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*","matchCriteriaId":"4ADECE43-F034-43E5-AA84-3EB336877DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.26:*:*:*:*:*:*:*","matchCriteriaId":"78F10EE3-93C4-4FF5-874D-BEDD9E3F3A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.27:*:*:*:*:*:*:*","matchCriteriaId":"0603A8CB-3096-4A68-8B9E-4512A9E8D210"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.28:*:*:*:*:*:*:*","matchCriteriaId":"C29425C5-EBDF-4092-8A47-9D0A00122B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.29:*:*:*:*:*:*:*","matchCriteriaId":"36FDAB2B-740B-4AA8-AF48-DB7FA69E5F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.30:*:*:*:*:*:*:*","matchCriteriaId":"DED55642-B6EA-437E-9DA3-23A77C3D2131"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.31:*:*:*:*:*:*:*","matchCriteriaId":"65412752-9C17-4DAC-A623-FA6AAF36A303"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.33:*:*:*:*:*:*:*","matchCriteriaId":"DB334E27-499F-4C42-BDA7-3E62EE7CE562"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.34:*:*:*:*:*:*:*","matchCriteriaId":"BBE126DF-AF32-4146-82D0-64D7423155DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.35:*:*:*:*:*:*:*","matchCriteriaId":"1B6ACF5F-43D6-442E-9846-CCCF37DB4F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.36:*:*:*:*:*:*:*","matchCriteriaId":"8995A4B1-C576-443B-BA96-6FC39E63A7BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.37:*:*:*:*:*:*:*","matchCriteriaId":"0E1AF984-B7BA-4F1A-BDA2-DBF66E3FB320"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.38:*:*:*:*:*:*:*","matchCriteriaId":"0F34176B-9712-4F36-8C4F-B2FAD72B4441"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.39:*:*:*:*:*:*:*","matchCriteriaId":"F978EB99-7E43-4E2D-92B5-F09AFBB80949"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.40:*:*:*:*:*:*:*","matchCriteriaId":"A15AC9BA-102F-401B-A7C7-D2B1AF81F795"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.41:*:*:*:*:*:*:*","matchCriteriaId":"A1DE877B-54A3-4631-ABA8-29BAB4D3DD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.42:*:*:*:*:*:*:*","matchCriteriaId":"9BE68B29-59F7-443A-A185-A11DE153D969"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.43:*:*:*:*:*:*:*","matchCriteriaId":"00A857D2-A159-4577-AF8B-51742256DC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.44:*:*:*:*:*:*:*","matchCriteriaId":"09679031-5CDD-46DC-9FD9-7C3459775D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.45:*:*:*:*:*:*:*","matchCriteriaId":"A9DE3027-9521-491F-B982-402D191214EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.46:*:*:*:*:*:*:*","matchCriteriaId":"8AF13585-74CE-4B62-BB29-8F7E5FABB66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.47:*:*:*:*:*:*:*","matchCriteriaId":"3C2ECBD5-AF65-402E-80FE-BAF1144B3C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.48:*:*:*:*:*:*:*","matchCriteriaId":"558DDC2F-DAF6-42BE-B36A-D998EBADBC95"}]}]}],"references":[{"url":"http://secunia.com/advisories/36563","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36121","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-827-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10538","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-827-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2958","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T15:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option."},{"lang":"es","value":"La función tftp_request en tftp.c en dnsmasq en versiones anteriores a la 2.50, cuando se usa --enable-tftp, permite a atacantes remotos provocar una denegación de servicio (referencia a un puntero nulo y caída del demonio) mediante una petición de lectura TFTP (alias RRQ) con una opción blksize malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*","versionEndIncluding":"2.49","matchCriteriaId":"4C214CD9-059C-4211-A20F-A9C32D96EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.4:*:*:*:*:*:*:*","matchCriteriaId":"C940D03A-EAAB-4A9F-BAD9-F5B3A8B626F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.5:*:*:*:*:*:*:*","matchCriteriaId":"DFF93550-7A3C-4F8F-B242-EBA90F8DA820"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB34D798-1CE9-478E-ABF6-502AEB5153BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.7:*:*:*:*:*:*:*","matchCriteriaId":"83842D26-CD1A-4880-BFB2-A29C681DEF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.95:*:*:*:*:*:*:*","matchCriteriaId":"37F2C4F7-183F-43A6-AB7E-D7A11E8FA6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.96:*:*:*:*:*:*:*","matchCriteriaId":"D5BB5AEA-8B22-4F2A-A7B2-B974475C92D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.98:*:*:*:*:*:*:*","matchCriteriaId":"94C97061-04B7-42F9-8C82-B405C3AD0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.992:*:*:*:*:*:*:*","matchCriteriaId":"1936D4A9-A8DF-4DCE-94CA-027C40E86E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.996:*:*:*:*:*:*:*","matchCriteriaId":"9E8954FA-4913-47A1-8FAD-A2D1E9CAF8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E34FF38A-8B3B-4299-911D-FBB0DC6AC700"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DFBABB9-056D-45EB-87F6-47A25C5A0297"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2263A232-EAA9-49DC-B91F-2F73C45AA68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.4:*:*:*:*:*:*:*","matchCriteriaId":"869D7B02-6EA7-4A7D-B6CA-93BD2E057784"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1D90FB55-73CB-4F99-92C6-99AD49872CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.6:*:*:*:*:*:*:*","matchCriteriaId":"7CE1A634-20CF-43A0-9441-E249C09D1938"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.7:*:*:*:*:*:*:*","matchCriteriaId":"DE397BC5-E523-4048-8B75-A332B618C64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.8:*:*:*:*:*:*:*","matchCriteriaId":"CC86CFA8-7019-481D-B6ED-F4152DA64C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.9:*:*:*:*:*:*:*","matchCriteriaId":"48EFFFBE-15EB-4A17-A285-A7299D771391"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9CAF4136-4587-4C1D-B303-518820A6E17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8CD4F393-64A2-42AD-8CBA-80F9FBC3307A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.12:*:*:*:*:*:*:*","matchCriteriaId":"17C26CD9-9357-4275-A46B-D63A5C20EDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D5CC931A-3B4D-4E0C-AB80-DCBB18260079"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.14:*:*:*:*:*:*:*","matchCriteriaId":"2E80EE61-3271-4BB6-BCBD-F85492B2B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.15:*:*:*:*:*:*:*","matchCriteriaId":"07B539B5-ACCD-4BDC-962E-7E9FCE33D263"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.16:*:*:*:*:*:*:*","matchCriteriaId":"1537C31B-FB1A-40AC-8FFF-033B3CBD236B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.17:*:*:*:*:*:*:*","matchCriteriaId":"86965249-76A4-4963-AD92-CE244E1EC6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.18:*:*:*:*:*:*:*","matchCriteriaId":"CE2B2312-A4F9-422E-89EC-687D26500B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.0:*:*:*:*:*:*:*","matchCriteriaId":"955C42CA-93C0-41B5-9687-1F8476BA9846"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D463C1BC-35A9-4AD7-8908-BBB293CE2FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A3F0716-7898-40AC-8E25-B93CA64A04E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F6FB1BA4-C1F9-44F4-8048-33CC26AD1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C6730AA2-C4EE-4FE6-BA20-CBC58EDD16B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.5:*:*:*:*:*:*:*","matchCriteriaId":"61593637-2CD7-48A1-A31C-E5DE62424B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.6:*:*:*:*:*:*:*","matchCriteriaId":"52309F28-53FD-438C-9913-7228B8387DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.7:*:*:*:*:*:*:*","matchCriteriaId":"B252C33B-0144-4737-B34E-761B227F9EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.8:*:*:*:*:*:*:*","matchCriteriaId":"B2C6DA43-93AC-462B-81E7-6A6819AF8988"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*","matchCriteriaId":"8BFBF5E9-7287-4B1D-AD78-0E30A5E2F0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.10:*:*:*:*:*:*:*","matchCriteriaId":"58DB4CAB-2ED9-473A-8B36-FA4F941A8281"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.11:*:*:*:*:*:*:*","matchCriteriaId":"644F05EE-9019-4BD8-9F2C-5DEF2E8FE486"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.12:*:*:*:*:*:*:*","matchCriteriaId":"07A3613F-A4FC-4643-A155-27A6BAB890C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.13:*:*:*:*:*:*:*","matchCriteriaId":"2F74BAF2-F875-4394-9447-9201520E65A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.14:*:*:*:*:*:*:*","matchCriteriaId":"96141817-BC07-4643-8E57-63445E65F720"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.15:*:*:*:*:*:*:*","matchCriteriaId":"C391DF4E-9FA3-44FE-AF61-52461EC209C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F06E581B-2A84-4145-91DC-2B9D4ADC227B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.17:*:*:*:*:*:*:*","matchCriteriaId":"CAC75365-A06A-4EF2-A54D-2595B480C9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.18:*:*:*:*:*:*:*","matchCriteriaId":"34412174-A7A5-4D8A-8D04-BB187594852B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.19:*:*:*:*:*:*:*","matchCriteriaId":"8BC0DDCD-5AE5-4F4C-9C17-97803CCB8810"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.20:*:*:*:*:*:*:*","matchCriteriaId":"14FAD4A7-FB21-4B37-9403-09D2CCF68888"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.21:*:*:*:*:*:*:*","matchCriteriaId":"D7A05414-B0DC-4D7B-B542-ACF407822EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F5C8F897-1A9F-4D25-A42B-8F31DD14E2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.23:*:*:*:*:*:*:*","matchCriteriaId":"5505D0A5-9D21-4563-81AA-7CAB3D369514"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.24:*:*:*:*:*:*:*","matchCriteriaId":"DCC53D53-4652-40D4-8F9A-D704BCEABDA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*","matchCriteriaId":"4ADECE43-F034-43E5-AA84-3EB336877DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.26:*:*:*:*:*:*:*","matchCriteriaId":"78F10EE3-93C4-4FF5-874D-BEDD9E3F3A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.27:*:*:*:*:*:*:*","matchCriteriaId":"0603A8CB-3096-4A68-8B9E-4512A9E8D210"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.28:*:*:*:*:*:*:*","matchCriteriaId":"C29425C5-EBDF-4092-8A47-9D0A00122B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.29:*:*:*:*:*:*:*","matchCriteriaId":"36FDAB2B-740B-4AA8-AF48-DB7FA69E5F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.30:*:*:*:*:*:*:*","matchCriteriaId":"DED55642-B6EA-437E-9DA3-23A77C3D2131"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.31:*:*:*:*:*:*:*","matchCriteriaId":"65412752-9C17-4DAC-A623-FA6AAF36A303"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.33:*:*:*:*:*:*:*","matchCriteriaId":"DB334E27-499F-4C42-BDA7-3E62EE7CE562"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.34:*:*:*:*:*:*:*","matchCriteriaId":"BBE126DF-AF32-4146-82D0-64D7423155DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.35:*:*:*:*:*:*:*","matchCriteriaId":"1B6ACF5F-43D6-442E-9846-CCCF37DB4F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.36:*:*:*:*:*:*:*","matchCriteriaId":"8995A4B1-C576-443B-BA96-6FC39E63A7BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.37:*:*:*:*:*:*:*","matchCriteriaId":"0E1AF984-B7BA-4F1A-BDA2-DBF66E3FB320"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.38:*:*:*:*:*:*:*","matchCriteriaId":"0F34176B-9712-4F36-8C4F-B2FAD72B4441"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.39:*:*:*:*:*:*:*","matchCriteriaId":"F978EB99-7E43-4E2D-92B5-F09AFBB80949"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.40:*:*:*:*:*:*:*","matchCriteriaId":"A15AC9BA-102F-401B-A7C7-D2B1AF81F795"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.41:*:*:*:*:*:*:*","matchCriteriaId":"A1DE877B-54A3-4631-ABA8-29BAB4D3DD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.42:*:*:*:*:*:*:*","matchCriteriaId":"9BE68B29-59F7-443A-A185-A11DE153D969"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.43:*:*:*:*:*:*:*","matchCriteriaId":"00A857D2-A159-4577-AF8B-51742256DC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.44:*:*:*:*:*:*:*","matchCriteriaId":"09679031-5CDD-46DC-9FD9-7C3459775D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.45:*:*:*:*:*:*:*","matchCriteriaId":"A9DE3027-9521-491F-B982-402D191214EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.46:*:*:*:*:*:*:*","matchCriteriaId":"8AF13585-74CE-4B62-BB29-8F7E5FABB66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.47:*:*:*:*:*:*:*","matchCriteriaId":"3C2ECBD5-AF65-402E-80FE-BAF1144B3C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.48:*:*:*:*:*:*:*","matchCriteriaId":"558DDC2F-DAF6-42BE-B36A-D998EBADBC95"}]}]}],"references":[{"url":"http://secunia.com/advisories/36563","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36120","source":"cve@mitre.org"},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-827-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-827-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2959","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la vista en cascada del status web (status/web/waterfall.py) en Buildbot desde v0.7.6 hasta v0.7.11p1 permite a atacantes rmeotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"DF87890D-2959-4BCC-B330-9D4F5390CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"7383F155-BDF8-4152-A319-F93B47E86F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"7DFEED21-3F57-4D94-B9DA-BD3E0D892E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0E07C8D9-6058-49B8-872C-EF269AECEE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"8E8E5580-BD81-4E25-86BC-D30359609F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.10p1:*:*:*:*:*:*:*","matchCriteriaId":"FB3EBB2A-F24F-44E7-AC1B-1BF3419AAF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"B03A368C-706A-445C-9F2C-926C756FCEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.11p1:*:*:*:*:*:*:*","matchCriteriaId":"B5FCC5EE-D97C-4589-974B-5E31DEFCE16C"}]}]}],"references":[{"url":"http://buildbot.net/trac#SecurityAlert","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36100","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://buildbot.net/trac#SecurityAlert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908121232mb790a6cn787ac3de90e8bc31%40mail.gmail.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-2960","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to modify usernames and passwords via a direct request."},{"lang":"es","value":"CuteFlow v2.10.3 and v2.11.0_c no restringe adecuadamente el acceso a pages/edituser.php, lo que permite a atacantes remotos modificar los nombres de usuario y las contraseñas a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cuteflow:cuteflow:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"B9D0F1F5-5D3E-408F-8B3F-33347D0D4C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cuteflow:cuteflow:2.11.0_c:*:*:*:*:*:*:*","matchCriteriaId":"1ED3B413-DB83-422A-9F42-29BCA38C2308"}]}]}],"references":[{"url":"http://secunia.com/advisories/36349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506000/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36099","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506000/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2961","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Thaddy de Konng KOL Player 1.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a .MP3 playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Thaddy de Konng KOL Player v1.0 permite a atacantes remotos producir una denegación de servicio (caída) o ejecutar código arbitrario a través de una URL larga en un fichero de lista de reproducción de MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kolmck:kol_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9600972A-3C0A-4056-AFB8-FB9E440B5707"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9467","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52629","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2962","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T11:02:42.127","lastModified":"2023-11-07T02:04:17.850","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-2692.  Reason: This candidate is a duplicate of CVE-2009-2692.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2009-2692 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-2963","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the update feature in Toolbar Uninstaller 1.0.2 allows remote attackers to force the download and execution of arbitrary files via attack vectors related to a \"malformed update url and a malformed update website.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en la caracteristica \"actualizar\" en Toolbar Uninstaller v1.0.2 permite a atacantes remotos forzar la descarga y ejecución de ficheros de forma arbitraria a través de vectores de ataque relacionados con \"url de actualización malformada y web de actualización malformada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:decomputeur:toolbar_uninstaller:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F2D9B52D-8E96-4039-9833-29F9E5EF12A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/36366","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.decomputeur.nl/pdf/security-risk-found.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52607","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.decomputeur.nl/pdf/security-risk-found.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2964","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, and (17) src/vcard.php."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en SquirrelMail v1.4.19 y anteriores permite a atacantes remotos secuestrar la autenticacion de victimas inespecificas a traves de caracteristicas tales como \"enviar mensaje\" y \"cambiar preferencias\", relacionado con (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, y (17) src/vcard.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"233C72FD-F76C-4192-8981-72757E4E093E"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"565E131D-56A9-46AB-800D-12B097FE3B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4FAB6F43-2DAE-4E02-8F0A-EE4D4FB3E005"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DD41781D-1F7E-43A7-AD59-ADFE1D04D825"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78650B7E-9638-46FF-9656-38E8DFE3FA93"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94CBBB8E-E0AB-4F7B-A55E-F7BD5F83EAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4C1E1172-9D9E-439E-BD4B-4EF372344F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DB15C5DD-2D76-47ED-883C-D1901B96F391"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre1:*:*:*:*:*:*:*","matchCriteriaId":"E3E249ED-76DA-44B3-A3A7-788F4B1A19DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre2:*:*:*:*:*:*:*","matchCriteriaId":"ABD0A21F-CD80-4B01-B5D3-9B2281E4F143"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"BA516843-2A45-4705-9669-4B719F722192"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA068C0-8067-4A94-9F74-0D1DACF9A9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49F37AD5-120E-4FEA-ADA5-F6C3434B9BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C059835E-8FD9-40DF-BA6F-7E313E49F511"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5E28A825-56F4-4EC5-9D62-661C0F4B477F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"545CD944-7C64-49E3-A32E-3388B5F3ECF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9F7F3531-E0EE-48AA-BCB4-872BEB853531"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F22E1FA6-7C9C-4D01-A645-CF41939C1988"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6-rc1:*:*:*:*:*:*:*","matchCriteriaId":"80FE1297-04B7-4F1D-B932-1015EE3070C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F886B99-E996-4BF7-9BE3-14A6713A997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"65801122-2E5D-4244-9D37-5483F5C731F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5A29559D-0DB8-40C8-A6E6-4F37DDD27571"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D4D1297B-EE36-46E2-8722-34F385A54751"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"9C3A6CFE-CFA4-4B48-9738-063A2B1025FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:rc2a:*:*:*:*:*:*","matchCriteriaId":"2664D22F-B0E6-48AB-BBBA-C653C1AF77A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0-r1:*:*:*:*:*:*:*","matchCriteriaId":"5F6B4BA8-1379-44CF-B87D-9DA66B5F2484"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C8F869F3-6D8D-4C95-95F7-5AE42C67362B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0_rc2a:*:*:*:*:*:*:*","matchCriteriaId":"3B96BB4F-12B0-460A-B5CC-8BA6D69911FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r1:*:*:*:*:*:*:*","matchCriteriaId":"AB0ABD26-2EA3-4884-BA0B-FFB88177CFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r2:*:*:*:*:*:*:*","matchCriteriaId":"CCC479F3-6F3B-46CB-9D28-2DB7D76FDAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r3:*:*:*:*:*:*:*","matchCriteriaId":"8EDC2C56-E977-452F-9263-541091356B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r4:*:*:*:*:*:*:*","matchCriteriaId":"B743DEC2-1ED2-4CAC-87F4-4EFDF16159FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2-r5:*:*:*:*:*:*:*","matchCriteriaId":"5CCE37B1-932D-4A4A-B4CA-056E26D78659"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"79E6734C-EE1C-40B6-9759-15298707A6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:r3:*:*:*:*:*:*","matchCriteriaId":"F66D66B1-992E-4EE0-A189-0974B96FE721"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"70484027-647C-47DF-85FD-3323F4685613"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*","matchCriteriaId":"F6733B8C-5A9E-45CE-8938-F39A69EB0DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B08E51F1-3764-4146-89C1-20B9B8EE1222"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:r1:*:*:*:*:*:*","matchCriteriaId":"0F28456D-EA59-4900-AEAD-F8CB06F5129D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*","matchCriteriaId":"CD4071B2-3D4F-4755-98B1-E28CEB05EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3aa:*:*:*:*:*:*:*","matchCriteriaId":"C4AAFE2B-77AB-4AC3-A22C-C3C256E2E45A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BF6591E5-5F36-4663-85A6-9D870FD49FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:rc1:*:*:*:*:*:*","matchCriteriaId":"03D847B0-DE1D-49D7-9ED4-30C0A82209AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D062B70A-E5FF-403B-8BD1-777D6462B7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4CFD4D-EAC3-4325-A87F-9D5F4C513208"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D58980B8-6D4B-4E90-8410-80FDD7CF15C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3A884536-4D27-4350-B815-AB4E625879DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:rc1:*:*:*:*:*:*","matchCriteriaId":"4429B95B-273A-45F3-A066-9AF548AC3FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_cvs:*:*:*:*:*:*:*","matchCriteriaId":"5CD09187-16B2-4A0C-907C-40375E865EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"C7ED3CC3-E0A8-4C20-9EF7-405CD32E9EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"BD89F143-EEBF-472D-9653-E7534F5799FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"796C453E-D59A-4988-BD91-24F31646D8FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.8.4fc6:*:*:*:*:*:*:*","matchCriteriaId":"2A901766-B49B-4983-98AB-880B333C284B"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B9851AD9-5093-4482-A632-487C6D104C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.9a:*:*:*:*:*:*:*","matchCriteriaId":"5BA5BA42-F53A-4E0D-B04C-D70D2291E408"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"18AF3BC6-E33B-44BD-A2F6-A7F5244AA4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.10a:*:*:*:*:*:*:*","matchCriteriaId":"77776503-3258-400D-8404-233EAFA940AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"682BC5E2-F2C5-4B6F-8EF0-E05152BB9B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"ABC24558-B7C1-4DE7-BC24-AF092DF0DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"537E4C91-91F9-469B-BF7D-5B05624D637A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"0986D113-C9F9-4645-8968-D165EC6B917D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15:rc1:*:*:*:*:*:*","matchCriteriaId":"3893B3D9-BAA3-4FCD-BC58-C4B664E688B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B85F80F3-DC0E-4228-9FA3-D870BC2200D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.15rc1:*:*:*:*:*:*:*","matchCriteriaId":"CCC5C975-D1EE-4248-9DA9-81C10E28B7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"B8608AE1-7930-47CF-B2E8-9E86E2FB5A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"34EB1B08-4377-4496-A278-19616238900F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"5BF9DF8F-368B-44A0-9258-49298E41E0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"442BF5C9-DC58-4A94-A634-33D6A4F3C6DD"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818","source":"cve@mitre.org"},{"url":"http://download.gna.org/nasmail/nasmail-1.7.zip","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN30881447/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/60469","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34627","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37415","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40220","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40964","source":"cve@mitre.org"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog?revision=13818&view=markup&pathrev=13818","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13818","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2091","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:222","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36196","source":"cve@mitre.org"},{"url":"http://www.squirrelmail.org/security/issue/2009-08-12","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2262","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3315","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2080","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517312","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52406","source":"cve@mitre.org"},{"url":"https://gna.org/forum/forum.php?forum_id=2146","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00927.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00954.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.gna.org/nasmail/nasmail-1.7.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN30881447/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog?revision=13818&view=markup&pathrev=13818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squirrelmail.org/security/issue/2009-08-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gna.org/forum/forum.php?forum_id=2146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00927.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00954.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2965","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before SD 7.0.100, allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en entry/index.jsp en Radvision Scopia v5.7, y posiblemente otras versiones anteriores a SD 7.0.100, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radvision:scopia:5.7:*:*:*:*:*:*:*","matchCriteriaId":"8415BFC4-4A2D-4C6C-993C-F82519420613"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2966","sourceIdentifier":"cve@mitre.org","published":"2009-08-25T17:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot \".\" characters."},{"lang":"es","value":"avp.exe en Kaspersky Internet Security v9.0.0.459 y Anti-Virus v9.0.0.463 permite a atacantes remotos producir una denegación de servicio (consumo de CPU y perdida de conectividad con la red) a través de una petición de URL HTTP que contiene un gran numero de puntos \".\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:9.0.0.463:*:*:*:*:*:*:*","matchCriteriaId":"00CDF003-FD3C-4F9D-891A-B624A71A3228"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_internet_security:9.0.0.459:*:*:*:*:*:*:*","matchCriteriaId":"B893210A-8792-4AAD-BA14-D1F740C31B75"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/66","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57173","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022754","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022755","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52571","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/achievement_securityalert/66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2967","sourceIdentifier":"cve@mitre.org","published":"2009-08-26T14:24:17.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Buildbot v0.7.6 a la v0.7.11p2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados. Vulnerabilidad distinta de CVE-2009-2959."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"DF87890D-2959-4BCC-B330-9D4F5390CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"7383F155-BDF8-4152-A319-F93B47E86F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"7DFEED21-3F57-4D94-B9DA-BD3E0D892E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"0E07C8D9-6058-49B8-872C-EF269AECEE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"8E8E5580-BD81-4E25-86BC-D30359609F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.10p1:*:*:*:*:*:*:*","matchCriteriaId":"FB3EBB2A-F24F-44E7-AC1B-1BF3419AAF65"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"B03A368C-706A-445C-9F2C-926C756FCEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.11p1:*:*:*:*:*:*:*","matchCriteriaId":"B5FCC5EE-D97C-4589-974B-5E31DEFCE16C"},{"vulnerable":true,"criteria":"cpe:2.3:a:buildbot:buildbot:0.7.11p2:*:*:*:*:*:*:*","matchCriteriaId":"D0D53045-3EE6-4BF0-B73B-95807C989DCB"}]}]}],"references":[{"url":"http://buildbot.net/trac#SecurityAlert","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908130837o86b77d6y725233076286226f%40mail.gmail.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36100","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52896","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html","source":"cve@mitre.org"},{"url":"http://buildbot.net/trac#SecurityAlert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=42338fbf0908130837o86b77d6y725233076286226f%40mail.gmail.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00978.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00985.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2968","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en un componente de apoyo en la interfaz web en VMware Studio 2.0 public beta en versiones anteriores a la build 1017-185256 permite a atacantes remotos subir ficheros a ubicaciones de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:studio:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"9B713DE4-B9A1-4556-A72F-A00AD2C2F6ED"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506191/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36199","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0011.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/developer/studio/studio20/release_notes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52976","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506191/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vmware.com/support/developer/studio/studio20/release_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2970","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T20:00:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the GetUiDllVersion function in an ActiveX control in UiCheck.dll before 1.0.0.7 in UiTV UiPlayer, as used in BaiduX and other products, allows remote attackers to execute arbitrary code via the filename parameter."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función GetUiDllVersion en el control ActiveX en UiCheck.dll anterior a v1.0.0.7 en UiTV UiPlayer, como el usado en BaiduX y otros productos, permite a atacantes remotos ejecutar código de su elección mediante el parámetro \"filename\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uitv:uiplayer:*:*:*:*:*:*:*:*","matchCriteriaId":"8D89449A-F3FE-4D78-B90F-17D2FD2E4FB8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baidu:baidux:*:*:*:*:*:*:*:*","matchCriteriaId":"16F458A7-B7A1-418A-821D-B47CAF84E58D"}]}]}],"references":[{"url":"http://www.nsfocus.com/en/advisories/0901.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507236/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.nsfocus.com/en/advisories/0901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507236/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2972","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a \"fork()/exec() bomb.\""},{"lang":"es","value":"in.lpd en el servicio de impresión en Sun Solaris v8 y v9 permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de vectores no especificado que lanzan una \"bomba fork()/exec().\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-23-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264608-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36148","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2417","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6225","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-23-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264608-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2973","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409."},{"lang":"es","value":"Google Chrome anteriores a v2.0.172.43 no impide conexiones SSL a un sitio con un certificado X.509 firmado con el algoritmo (1) MD2 o (2) MD4, lo que hace más fácil para los ataques de \"hombre en el medio\" suplantar arbitrariamente servidores HTTPS a través de certificados manipulados, relativo al asunto CVE-2009-2409."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.172.37","matchCriteriaId":"1FBFF8DA-5CD2-420E-A9A3-53475271997B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=18725","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36417","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52903","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=18725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2974","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property."},{"lang":"es","value":"Google Chrome v1.0.154.65, v1.0.154.48, y anteriores permite a los atacantes remotos (1) causar una denegación de servicio (cuelgue de la aplicación) a través de vectores relativos a chromehtml: valor URI para la propiedad document.location o (2) causar una denegación de servicio (cuelgue de la aplicación y consumo de la CPU) a través de vectores relativos a una serie de llamadas a funciones que establecen un chromehtml: valor URI para la propiedad document.location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.48","matchCriteriaId":"4E9FA397-22DD-448C-8CC5-93549EAD7738"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3435/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3435/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-2975","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cause a denial of service (memory consumption) via vectors involving a series of function calls that set this property, as demonstrated by (1) the chromehtml: protocol and (2) the aim: protocol."},{"lang":"es","value":"Mozilla Firefox v3.5.2 en Windows XP, en algunas situaciones posiblemente envuelvan una configuración incompleta del manejador de protocolo, no implementa apropiadamente la configuración de la propiedad  document.location para un valor, especificando un protocolo asociado con una aplicación externa, lo que permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un vector que envuelve una serie de llamadas a funciones que establecen esta propiedad, como se demuestra por (1) el chromehtml: protocolo y (2) el aim: protocolo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0234.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0246.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52923","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0234.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-08/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2976","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network."},{"lang":"es","value":"Los dispositivos Cisco Aironet Lightweight Access Point (AP) envían el contenido de ciertos paquetes de multidifusión en texto plano, lo que permite a atacantes remotos descubrir las direcciones IP y MAC del Wireless LAN Controller así como los detalles de configuración del Punto de Acceso (AP) espiando la red wireless."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*","matchCriteriaId":"6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*","matchCriteriaId":"2E8B5553-7295-4786-9F81-B4527EAD4F0B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1022774","source":"cve@mitre.org"},{"url":"http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf","source":"cve@mitre.org"},{"url":"http://www.airmagnet.com/news/press_releases/2009/08252009.php","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.airmagnet.com/news/press_releases/2009/08252009.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2977","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files."},{"lang":"es","value":"Cisco Security Monitoring, Analysis and Response System (CS-MARS) v6.0.4 y anteriores guardan contraseñas e texto claro en un archivo log/sysbacktrace.## dentro de un archivo error-logs.tar.gz, lo que permite a los atacantes dependientes de contexto obtener información sensible leyendo estos archivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cs-mars:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.4","matchCriteriaId":"AB6F4DF5-643F-45D2-B80C-98C461BAC088"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*","matchCriteriaId":"7D7BF76D-85A6-4976-B6A8-3D39579C4DFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cs-mars:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4C48D948-7524-41F9-A818-F6774049A574"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cs-mars:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D52CC0B4-6C76-420C-98DF-D5B24826E2F0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cs-mars:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2F69D1B2-17A3-457D-8381-ABF214608F4C"}]}]}],"references":[{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505995/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505998/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36098","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52913","source":"cve@mitre.org"},{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505995/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505998/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2978","sourceIdentifier":"cve@mitre.org","published":"2009-08-27T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en SugarCRM v4.5.1o y anteriores, v5.0.0k y anteriores, y v5.2.0g y anteriores, permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1o","matchCriteriaId":"E53F4C99-9892-4E15-AC43-7C350F84B5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:*:*:sugar_community_edition:*:*:*:*:*","versionEndIncluding":"5.0.0k","matchCriteriaId":"5C668E68-AA42-4D18-9C9D-45D1C73F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.0g","matchCriteriaId":"7A97B4C9-4510-4970-AD03-1106294A4FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4107E934-D5CF-4ABF-8CB6-0DA90F3D9A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.0f:*:*:*:*:*:*:*","matchCriteriaId":"85742E7F-C06C-46A5-9008-245BE6E4E0BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.0g:*:*:*:*:*:*:*","matchCriteriaId":"B820A83B-0F03-4523-9D4D-3EB2930B35F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1:*:*:*:*:*:*:*","matchCriteriaId":"49FA30E3-7572-4BCC-8EFA-9D259DF892E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"AFBB2BDD-5FA2-40E1-9395-A9DED672E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"022D7E5E-BCBC-4E14-9C0D-50E5DD237D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1c:*:*:*:*:*:*:*","matchCriteriaId":"22E73109-5473-417C-A003-7C1EE1DC3ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1d:*:*:*:*:*:*:*","matchCriteriaId":"F183CCFF-6D5B-43E7-A70F-E9AEA6E46880"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1e:*:*:*:*:*:*:*","matchCriteriaId":"1DA73438-7BA5-4668-90E2-2EECDBBB58A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.1f:*:*:*:*:*:*:*","matchCriteriaId":"A6C3E6DF-AE5C-4D7F-99B3-16C3967A6A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*","matchCriteriaId":"6BF53885-8C5B-4654-AB42-587290E58355"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0A197BD9-85DD-47F2-B30B-6C7F372F6DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:2.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"42F2BB29-5136-4F23-8D1B-0507A5FCBF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:2.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"603F5E29-5D0B-4872-A125-D7B1CD77BACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"687D4794-4163-4EC8-9673-47E5EF216371"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:3.5:*:*:*:*:*:*:*","matchCriteriaId":"12DAF9EB-FED5-482D-820E-553E9057B92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B6842129-2DF6-47C9-8960-BF39D1A337C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.0:*:*:*:*:*:*:*","matchCriteriaId":"1DF5360C-C07C-413A-9B8C-50907187DAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DED8B842-AAEB-4227-A2D3-64229F4B9FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4525F5B5-E268-4B50-8244-E8829C106FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.2:*:*:*:*:*:*:*","matchCriteriaId":"28098D0F-B3E2-470E-92B1-C9138A664496"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"35F7EFEF-004A-458A-9B3C-3B1B654C6C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"ACB97DBC-4525-4227-9698-4B05140CCAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.5.0f:*:*:*:*:*:*:*","matchCriteriaId":"58854312-8672-4399-83FB-DF12DF6052F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"13A8BAEB-B6E3-48AF-90E8-28D7146115AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"6FEB4B61-0F95-45CA-AB7A-BA07FF2FCA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.0.0h:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"B23F68DA-DFB0-42E1-959A-F7A68AA83BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"439E75C4-C02D-4905-9D73-CE27D6A54C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:*:*:*:*:*:*","matchCriteriaId":"6BF95EA0-16E7-4173-AEC8-D66A3F8FB62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:*:*:*:*:*:*","matchCriteriaId":"BFA524F8-A78F-414A-A5AC-1A89901BD917"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:*:*:*:*:*:*","matchCriteriaId":"CFCC9802-4642-4331-9D56-4E1F76151E24"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:sugar_community_edition:*:*:*:*:*","matchCriteriaId":"0B6D79D5-2E61-4C1F-906B-EB16F0D97586"},{"vulnerable":true,"criteria":"cpe:2.3:a:sugarcrm:sugarcrm:5.2f:*:*:*:*:*:*:*","matchCriteriaId":"7922DB4E-9812-4636-A61D-8D201CE92D93"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN31035930/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36118","source":"cve@mitre.org"},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=50907","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=50953","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52679","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN31035930/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=50907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sugarcrm.com/forums/showthread.php?t=50953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2979","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document."},{"lang":"es","value":"Adobe Reader y Acrobat v9.x anteriores a la v9.2, v8.x anteriores a la v8.1.7 y posiblemente v7.x hasta la v7.1.4 no realizan apropiadamente la expansión de entidades XMP-XML, lo que permite a atacantes remotos provacar una denegación de servicio a través de un documento modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6280","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2980","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\"Summary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de entero en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio o probablemente ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2981","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\n\"Summary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh\"","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors."},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no valida adecuadamente la entrada, pudiendo permitir a atacantes mediante vectores no especificados saltar las restricciones implementadas por Trust Manager."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2982","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macinto","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a \"social engineering attack\" via unknown vectors."},{"lang":"es","value":"Un certificado sin especificar en Adobe Reader y Acrobat v9.x anteriores a la v9.2, v8.x anteriores a la v8.1.7 y posiblemente v7.x hasta la v7.1.4 puede permitir a atacantes remotos llevar a cabo un \"ataque por ingeniería social\" a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6365","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2983","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Solution:\r\nPer: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) o probablemente ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5636","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2984","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an image decoder issue that leads to a Denial of Service (DoS); arbitrary code execution has not been demonstrated, but may be possible. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2984).\r\nNOTE: this issue is resolved in the Acrobat 9.2 update.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x through 7.1.4 and 8.x through 8.1.7, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el decodificador de imagen en Adobe Acrobat v9.x anteriores a v9.2 y posiblemente en v7.x anteriores a v7.1.4 y v8.x anteriores a v8.1.7, permite a atacantes remotos provocar una denegación de servicio o probablemente ejecutar código de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5523","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2985","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996."},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio (consumo de memoria) o probablemente ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente a CVE-2009-2996."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6145","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2986","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix. \r\n\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer basado en memoria dinámica (heap) en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5888","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2987","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Solution\r\n\r\nPer: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves a remote denial of service issue in the ActiveX control specific to the Windows OS (CVE-2009-2987).","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en un control ActiveX en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 para Windows permite a atacantes remotos provocar una denegación de servicio mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6274","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2988","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no valida adecuadamente la entrad, permitiendo a atacantes provocar una denegación de servicio mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B5C251D2-4C9B-4029-8BED-0FCAED3B8E89"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6483","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2989","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an integer overflow that could potentially lead to code execution. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2989).\r\nNOTE: this issue is resolved in the Acrobat 9.2 and 8.1.7 updates.","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de entero en Adobe Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2990","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Error de indice en vector en Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 podría permitir a atacantes ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2991","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el plug-in para Mozilla en Adobe Reader y Acrobat v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 y v9.x anteriores a v9.2, podría permitir a atacantes remotos ejecutar código de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5557","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2992","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Un control ActiveX no especificado en Adobe Reader y Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7 y posiblemente en v7.x anteriores a v7.1.4 no validan adecuadamente la entrada, permitiendo a atacantes provocar una denegación de servicio mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2993","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"JavaScript en la API de Acrobat de Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no implementa apropiadamente el (1) \"Privileged Context\" (contexto privilegidado) y (2) restricciones de \"Safe Path\" (ruta segura) para métodos de JavaScript sin especificar. Lo que permite a atacantes remotos crear ficheros de su elección, y posiblemente ejecutar código de su elección, a través del parámetro cPath en un fichero PDF modificado.  NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/257117","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36664","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5822","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/257117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2994","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2995","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an integer overflow in that leads to a Denial of Service (DoS). This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-2995).","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Desbordamiento de entero en Adobe Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6554","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2996","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Summary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985."},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 permite a atacantes provocar una denegación de servicio (consumo de memoria) o posiblemente ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente que CVE-2009-2985."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5560","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2997","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 permite a atacantes ejecutar código de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6481","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2998","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T22:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458."},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7, y v9.x anteriores a v9.2 no valida adecuadamente la entrada, permitiendo a atacantes ejecutar código de su elección mediante vectores no especificados, siendo una vulnerabilidad diferente que CVE-2009-3458."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6418","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2999","sourceIdentifier":"cve@mitre.org","published":"2009-10-14T10:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network disconnection) via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to CVE-2009-2656."},{"lang":"es","value":"El proceso com.android.phone en Android v1.5 CRBxx permite a atacantes remotos producir una denegación de servicio (reinicio de aplicacion y desconexión de red) a través de un mensaje SMS que contenga un mensaje de Push WAP malformado que inicia una excepción ArrayIndexOutOfBoundsException, posiblemente relacionado con CVE-2009-2656."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8C354829-6BEB-4C67-972A-60367073753C"}]}]}],"references":[{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=46e23fe762d2143d60589ab6d39c4b47c2c754d1","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022986","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506948/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53655","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=46e23fe762d2143d60589ab6d39c4b47c2c754d1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3000","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause a denial of service (panic) via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7c_http_log function, related to \"improper http response handling.\""},{"lang":"es","value":"El módulo sockfs del kernel de Sun Solaris 10 y OpenSolaris snv_41 a snv_122, cuando se habilita el registro del Acelerador de cache de red(NCA), permite a atacantes remotos provocar una denegación de servicio (mediante un panic del kernel) a través de tráfico del servidor web no especificado que genera una desreferencia a un puntero nulo en la función nl7c_http_log, relacionados con un \"manejo inadecuado de una respuesta HTTP.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141690-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265888-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3001","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket."},{"lang":"es","value":"La función llc_ui_getname en net/llc/af_llc.c del kernel de Linux v2.6.31-rc7 y anteriores no inicializa cierta estructura de datos, lo que permite leer a los usuarios locales el contenido de algunas celdas de memoria del núcleo llamando a la función getsockname a través de un socket AF_LLC."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for PF_LLC sockets in the Linux kernels.","lastModified":"2009-08-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.31","matchCriteriaId":"AE1BA972-91FE-417F-B0AD-D3067DA8C96F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*","matchCriteriaId":"2887290A-1B43-4DB9-A9D0-B0B56CD78E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc","source":"cve@mitre.org"},{"url":"http://jon.oberheide.org/files/llc-getsockname-leak.c","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/9513","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36126","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519305","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52732","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jon.oberheide.org/files/llc-getsockname-leak.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/9513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3002","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c."},{"lang":"es","value":"El kernel de Linux antes de v2.6.31-rc7 no inicializa ciertas estructuras de datos dentro de las funciones getname, lo que permite a usuarios locales leer el contenido de algunas celdas de memoria del núcleo llamando a getsockname en (1) un socket AF_APPLETALK, relacionado con la función atalk_getname en net/appletalk/ddp.c; (2) un socket AF_IRDA, relacionado con la función irda_getname en net/irda/af_irda.c; (3) un socket AF_ECONET, relacionado con la función econet_getname en net/econet/af_econet.c; (4) un socket AF_NETROM, relacionado con la función nr_getname en net/netrom/af_netrom.c; (5) un socket AF_ROSE, relacionado con la función rose_getname en net/rose/af_rose.c, o (6) un raw socket CAN , relacionado con la función raw_getname en net/can/raw.c."}],"vendorComments":[{"organization":"Red Hat","comment":"CVE-2009-3002 describes a collection of similar information leaks that affect numerous networking protocols.\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 did not enable support for the AppleTalk DDP protocol, and therefore were not affected by issue (1). It was addressed in Red Hat Enterprise Linux 3 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1550.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG did not enable support for IrDA sockets, and therefore were not affected by issue (2). It was addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not enable support for the Acorn Econet and AUN protocols, and therefore were not affected by issue (3).\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG did not enable support for the NET/ROM and ROSE protocols, and therefore were not affected by issues (4) and (5). They were addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html\n\nThe raw_getname() leak was introduced in the Linux kernel version 2.6.25-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG  therefore were not affected by issue (6).","lastModified":"2009-11-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.31","matchCriteriaId":"AE1BA972-91FE-417F-B0AD-D3067DA8C96F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*","matchCriteriaId":"2887290A-1B43-4DB9-A9D0-B0B56CD78E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=09384dfc76e526c3993c09c42e016372dc9dd22c","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17ac2e9c58b69a1e25460a568eae1b0dc0188c25","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d392475c873c10c10d6d96b94d092a34ebd4791","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80922bbb12a105f858a8f0abb879cb4302d0ecaa","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e84b90ae5eb3c112d1f208964df1d8156a538289","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6b97b29513950bfbf621a83d85b6f86b39ec8db","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36438","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/9521","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/27/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/27/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36150","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519305","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11611","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=09384dfc76e526c3993c09c42e016372dc9dd22c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17ac2e9c58b69a1e25460a568eae1b0dc0188c25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d392475c873c10c10d6d96b94d092a34ebd4791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80922bbb12a105f858a8f0abb879cb4302d0ecaa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e84b90ae5eb3c112d1f208964df1d8156a538289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6b97b29513950bfbf621a83d85b6f86b39ec8db","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/9521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/27/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/27/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3003","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page."},{"lang":"es","value":"Microsoft Internet Explorer v6 a v8 permiten falsificar la barra de direcciones a atacantes remotos, a través de window.open con una URI relativa, que muestre una dirección URL arbitraria de un sitio web visitado por la víctima, como lo demuestra la visita a una web controlada por el atacante, que lanza un formulario de acceso falso para el sitio que contiene esa página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53005","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12817","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3004","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.  NOTE: a related attack was reported in which an arbitrary file: URL is shown."},{"lang":"es","value":"Avant Browser v11.7 Builds 25 y 26 permiten falsificar la barra de direcciones a atacantes remotos, a través de window.open con una URI relativa, que muestra una dirección URL arbitraria de un sitio web visitado por la víctima, como lo demuestra la visita a una web controlada por el atacante, que lanza un formulario de acceso falso para el sitio que contiene esa página. NOTA: Se ha informado de un ataque relacionado en el que se muestra una URL arbitraria de tipo File:"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avant_force:avant_browser:11.7:*:*:*:*:*:*:*","matchCriteriaId":"1191E53A-C118-4DCF-A27E-E4C88C39E6FF"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3005","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.  NOTE: a related attack was reported in which an arbitrary file: URL is shown."},{"lang":"es","value":"Lunascape v5.1.3 y v5.1.4 permiten falsificar la barra de direcciones a atacantes remotos, a través de window.open con una URI relativa, que muestra una dirección URL arbitraria de un sitio web visitado por la víctima, como lo demuestra la visita a una web controlada por el atacante, que lanza un formulario de acceso falso para el sitio que contiene esa página. NOTA: Se ha informado de un ataque relacionado en el que se muestra una URL arbitraria de tipo File:"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lunascape:lunascape:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9233B883-5C93-41CB-83BD-973BE4E53BB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lunascape:lunascape:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4ADC6FB9-477C-48A3-A34A-3E8D2C9D4FFC"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53008","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3006","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page."},{"lang":"es","value":"Maxthon Browser v2.5.3.80 Unicode permite a atacantes remotos falsificar la barra de direcciones, a través de window.open con una URI relativa, que muestre una dirección URL arbitraria en el sitio web visitado por la víctima, como lo demuestra la visita a una página controlada por un atacante, que abre un formulario de acceso falso para el sitio que contiene esa página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:2.5.3.80:*:*:*:*:*:*:*","matchCriteriaId":"371E0500-EADC-484C-8A88-C9ADA7D60087"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53009","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6437","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3007","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker."},{"lang":"es","value":"Mozilla Firefox v3.5.1, SeaMonkey v1.1.17 y Flock v2.5.1 permiten falsificar a atacantes remotos dependiendo del contexto la barra de direcciones a través de un window.open con una URI relativa, que muestra una URL de tipo File: arbitraria que una victima haya visitado anteriormente, como se demuestra visitando un documento de tipo file: escrito por el atacante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flock:flock:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C2ADE2F3-13FC-4BC1-B3DF-60514887E530"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53010","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3008","sourceIdentifier":"cve@mitre.org","published":"2009-08-28T15:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker."},{"lang":"es","value":"K-Meleon v1.5.3 permite falsificar la barra de direcciones a atacantes, dependiendo del contexto, a través de window.open con una URI relativa, para que muestre una URL de tipo file: después de que una victima haya visitado ficha URI de tipo file: , como se demuestra al acceder a un documento file: escrito por el atacante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:christophe_thibault:k-meleon:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CD637248-8B51-48CE-BB20-1A7BA6B1CCD4"}]}]}],"references":[{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53011","source":"cve@mitre.org"},{"url":"http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3009","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper."},{"lang":"es","value":"Vulnerabilidad de ejecución secuencias de comandos en sitios cruzados (XSS) en Roby en Rails v2.x anterior 2.2.3, y v2.3.x anterior v2.3.4, permite a atacantes remotos inyectar código web o HTML a su elección colocando cadenas malformadas Unicode en un formulario de ayuda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"50EEAFDA-7782-4E1E-9058-205AD4BE9A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CAC748BB-BFC5-44F7-B633-CEEBB1279889"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"38CF2C31-70BB-41D3-9462-0A8B9869A5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F8584B37-7950-4C89-83D2-04E1ACDC60BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8CB26F65-5CFB-4BF8-BCC4-679327D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EF12EA5D-5EB5-46A8-AC60-65B327D610AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B4B121-94BD-4E0F-8860-6239890043B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"63CF211C-683E-4F7D-8C62-05B153AC1960"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"456A2F7E-CC66-48C4-B028-353D2976837A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9B1CDAFA-2AC6-4C46-9E65-0BE9127E770F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9806A84-2160-40EA-9960-AE7756CE4E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"07EC67D4-3D0F-4FF9-8197-71175DCB2723"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D1467583-23E9-4E2B-982D-80A356174BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4DC784C0-5618-4C32-8C17-BE7041656E14"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/rubyonrails-security/msg/7f57cd7794e1d1b4?dmode=source","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36717","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022824","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1887","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36278","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2544","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53036","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/rubyonrails-security/msg/7f57cd7794e1d1b4?dmode=source","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3010","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:06.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.  NOTE: in some product versions, the JavaScript executes outside of the context of the HTTP site."},{"lang":"es","value":"Mozilla Firefox v3.0.13 y anteriores, v3.5, v3.6 a1 pre, y v3.7 a1 pre; SeaMonkey v1.1.17; y Mozilla v1.7.x y anteriores no bloquean de forma adecuada las URIs data: en las cabeceras Refresh de las respuestas HTTP, lo que permite a atacantes remotos realizar ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores relativos a (1) inyectar una cabecera Refresh que contiene secuencias Javascript en una URI data:text/html p (2) introduciendo una URI data:text/html con secuencias javascript cuando se especifica el contenido de una cabecera Refresh. NOTA: en algunas versiones del producto, el javascript se ejecuta fuera del contexto del sitio HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:a1_prerelease:*:*:*:*:*:*","matchCriteriaId":"A5CA287A-0263-4F6A-B685-E243D42FCFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.7:a1_prerelease:*:*:*:*:*:*","matchCriteriaId":"DCCEA654-2A7F-4950-9FC3-015E2E4582B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.12","matchCriteriaId":"AA9F1412-B29B-4D13-AEEA-4AF7B12260D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"}]}]}],"references":[{"url":"http://websecurity.com.ua/3315/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52999","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://websecurity.com.ua/3315/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3011","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:06.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header.  NOTE: the JavaScript executes outside of the context of the HTTP site."},{"lang":"es","value":"Google Chrome v1.0.154.48 y anteriores, v2.0.172.28, v2.0.172.37 y v3.0.193.2 Beta, no bloquea adecuadamente los datos: URIs en cabeceras \"Refresh\" en respuestas HTTP, lo que permite a atacantes remotos llevar a cabo ataques de ejecución de secuencias de comandos en sitios cruzados relacionado con (1) la inyección de una cabecera \"Refresh\" que contienen secuencias JavaScript en una URI data:text/html o (2) introduciendo una URI data:text/html con secuencias JavaScript cuando se especifica el contenido de una cabecera \"Refresh\". NOTA: el JavaScript se ejecuta fuera del contexto del sitio HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.48","matchCriteriaId":"4E9FA397-22DD-448C-8CC5-93549EAD7738"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"}]}]}],"references":[{"url":"http://websecurity.com.ua/3315/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52998","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3315/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3012","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:06.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.  NOTE: the JavaScript executes outside of the context of the HTTP site."},{"lang":"es","value":"Mozilla Firefox v3.0.13 y anteriores, v3.5, v3.6 a1 pre y v3.7 a1 pre no bloquea adecuadamente los datos: URIs en las cabeceras Location en las respuestas HTTP, esto permite a atacantes remotos provocar ataques de secuencias de comandos en sitios cruzados (XSS) mediante vectores que están relacionados con (1) la inyección de una cabecera Location que contenga secuencias JavaScript en una URI data:text/html o (2) la introducción de una URI data:text/html con secuencias JAvaScript que especifiquen el contenido de una cabecera Location. NOTA: El JavaScript se ejecuta fuera del contexto del sitio HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:a1_pre:*:*:*:*:*:*","matchCriteriaId":"C100B62E-9199-4983-AFC2-EBC55AF230BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.7:a1_pre:*:*:*:*:*:*","matchCriteriaId":"4C5C2EED-CA12-416C-8695-18DD215B0351"}]}]}],"references":[{"url":"http://websecurity.com.ua/3323/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3323/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3013","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:06.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header.  NOTE: the JavaScript executes outside of the context of the HTTP site."},{"lang":"es","value":"Opera v9.52 y anteriores, y 10.00 Beta 3 Build 1699, no bloquea apropiadamente las URIs data: en las cabeceras Location en las respuestas HTTP, lo que permite realizar, a atacantes remotos, ataques de ejecución de secuencias de comandos en sitios cruzados(XSS) a través de vectores relacionados con (1) la inyección de una cabecera Location contiene secuencias de JavaScript en una URI data:text/html o (2) intrducción de una URI data:text/html con secuencias de JavaScript cuando se especifica el contenido de una cabecera Location. NOTA: el código JavaScript se ejecuta fuera del contexto del sitio HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.52","matchCriteriaId":"BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta_3:*:*:*:*:*:*","matchCriteriaId":"ABB6D630-28EC-4506-AD0D-8C9A5E7D45CB"}]}]}],"references":[{"url":"http://websecurity.com.ua/3323/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52996","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3323/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3014","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:06.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header."},{"lang":"es","value":"Mozilla Firefox v3.0.13 y anteriores, v3.5, v3.6 a1 pre, y v3.7 a1 pre; SeaMonkey v1.1.17; y Mozilla v1.7.x y anteriores no manejan de forma adecuada las URIs javascript en los enlaces HTML incluidos en los documentos de error 302 enviados desde servidores web, lo que permite a atacantes remotos asistidos por usuarios realizar un ataque de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores relativos a (1) inyectar una cabecera Location de respuesta HTTP o (2) especificando el contenidos de una cabecera Location de respuesta HTTP.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:a1_pre:*:*:*:*:*:*","matchCriteriaId":"C100B62E-9199-4983-AFC2-EBC55AF230BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.7:a1_pre:*:*:*:*:*:*","matchCriteriaId":"4C5C2EED-CA12-416C-8695-18DD215B0351"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"A9239E8A-8155-462A-A409-D66FF6B94B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"347AB95F-166E-449A-82D7-BEC10257E0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*","matchCriteriaId":"3D8CB42F-8F05-45A6-A408-50A11CC132DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"407F69BE-4026-4B26-AC31-11E7CC942760"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6E8264B5-4D4B-453D-B599-E2AD533A0CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*","matchCriteriaId":"2FEC6B13-3088-4ECB-9D81-6480F439601C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*","matchCriteriaId":"20ECA520-780A-4EF8-8C80-B7564F4148B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"}]}]}],"references":[{"url":"http://websecurity.com.ua/3373/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506163/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52995","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3373/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3015","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:06.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header."},{"lang":"es","value":"QtWeb v3.0 Builds 001 y 003 no bloquea apropiadamente las URIs javascript: y data: en las cabeceras Refresh y Location de las respuestas HTTP, lo que permite realizar a atacantes remotos ataques de ejecución de secuencias de comandos en sitios cruzados(XSS) a través de vectores  relacionados con (1) la inyección de un encabezado Refresh que contiene una URI javascript: , (2) la introducción de una URI javascript: cuando se especifica el contenido de una cabecera Refresh, (3) la inyección de una cabecera Refresh que contenga secuencias JavaScript en una URI data:text/html, (4) la introducción de URIs data:text/html con secuencias JavaScript cuando se especifica el contenido de una cabecera Refresh, (5) la inyección de una cabecera Location que contenga secuencias de JavaScript en una URI data:text/html, o (6) la introducción de una URI data:text/html con secuencias JavaScript cuando se especifica el contenido de una cabecera Location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qtweb:qtweb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BEB0F606-5A79-4A6F-A4BB-564C3763EA3D"}]}]}],"references":[{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52993","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3016","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:07.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header."},{"lang":"es","value":"Apple Safari v4.0.3 no bloquea URIs JavaScript: ni data: de forma adecuada en las cabeceras Refresh en las respuestas HTTP, lo que permite a atacantes remotos realizar un ataque de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores relativos a (1) inyectando una cabecera Refresh que contiene una URI javascript:, (2) introduciendo una URI javascript: cuando se especifica el contenido de una cabecera Refresh, (3) inyectando a una cabecera Refresh que contiene secuencias javascript en una URI data:text/html, o (4) introduciendo una URI data:text/html con secuencias javascript cuando se especifica el contenido de una cabecera Refresh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"80E36485-565D-4FAA-A6AD-57DF42D47462"}]}]}],"references":[{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52992","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6475","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3017","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:07.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header, (3) injecting a Location header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location HTTP response header or (6) specifying the content of a Location HTTP response header."},{"lang":"es","value":"Orca Browser v1.2 build 5 no bloquea URIs data: en cabeceras Refresh y Location en respuestas HTTP, lo que permite a atacantes remotos realizar un ataque de ejecución de secuencias de comandos en sitios cruzados a través de vectores relativos a (1) inyectando una cabecera Refresh que contiene secuencias Javascript en URIs data:text/html, (2) introduciendo una _URI data:text/html con secuencias javascript cuando se especifica el contenidos de una cabecera Refresh, (3) inyectando una cabecera Location que contiene secuencias Javascript en una URI data:text/html o (4) introduciendo una URI data:text/html con secuencias Javascript cuando se especifica el contenido de la cabecera Location; y no maneja de forma adecuada las URIs Javascript: en los enlaces Javascript incluidos en los documentos de error 302 enviados por los servidores web, lo que provoca que atacantes remotos asistidos por usuarios realizar un ataque de ejecución de secuencias de comandos en sitios cruzados a través de vectores relativos a (5) inyección de una cabecera Location de respuesta HTTP o (6) especificando el contenido de una cabecera Location de respuesta HTTP.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orcabrowser:orca_browser:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B546ACE7-C740-4E0E-8B58-DB30D05FD375"}]}]}],"references":[{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506163/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53002","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3018","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:07.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header; does not properly block data: URIs in Location headers in HTTP responses, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within (a) 301 and (b) 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (7) injecting a Location HTTP response header or (8) specifying the content of a Location HTTP response header."},{"lang":"es","value":"Maxthon Browser versión 3.0.0.145 Alpha con Ultramode no bloquea apropiadamente los URI javascript: y data: en encabezados Refresh en respuestas HTTP, lo que permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados a (1) inyectar un encabezado Refresh que contiene un URI javascript:, (2) ingresando un URI javascript: al especificar el contenido de un encabezado Refresh, (3) inyectando un encabezado Refresh que contiene secuencias de JavaScript en un URI data:text/html, o (4) ingresando un URI data:text/html con secuencias de JavaScript al especificar el contenido de un encabezado Refresh; no bloquea apropiadamente los URI data: en los encabezados Location en las respuestas HTTP, lo que permite a los atacantes remotos asistidos por el usuario conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados a (5) inyectar un encabezado Location que contiene secuencias de JavaScript en un URI data:text/html o (6) ingresando un URI data:text/html con secuencias de JavaScript al especificar el contenido de un encabezado Location; y no maneja apropiadamente los URI JavaScript: en enlaces HTML dentro de documentos de error (a) 301 y (b) 302  enviados desde los servidores web, lo que permite a los atacantes remotos asistidos por el usuario conducir ataques de tipo cross-site scripting (XSS) por medio de vectores relacionados a ( 7) inyectar un encabezado de respuesta HTTP Location o (8) especificar el contenido de un encabezado de respuesta HTTP Location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxthon:maxthon_browser:3.0.0.145:alpha:*:*:*:*:*:*","matchCriteriaId":"076D336E-B917-42B5-8038-82C7B0073E3B"}]}]}],"references":[{"url":"http://websecurity.com.ua/3386/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506163/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53001","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6524","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3386/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506163/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3019","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:09.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute."},{"lang":"es","value":"Microsoft Internet Explorer 6 en Windows XP SP2 y SP3, e Internet Explorer 7 en Vista, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de código Javascript que hace una llamada a createElement para crear una instancia del elemento LI, y entonces llama a setAttribute para fijar el valor del atributo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9455","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3020","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T16:30:09.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"win32k.sys en Microsoft Windows Server 2003 SP2 permite a atacantes remotos provocar una denegación de servicio (caída del sistema) referenciando a un fichero .eot manipulado en el descriptor src de una regla @font-face de una hoja de estilo en cascada (Cascading Style Sheets, CSS) en un documento HTML, posiblemente relativo a Embedded OpenType (EOT) Font Engine, es una vulnerabilidad distinta a CVE-2006-0010, CVE-2009-0231, y CVE-2009-0232.  NOTE: alguna información de estos detalles se ha obtenido de de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]}]}],"references":[{"url":"http://milw0rm.com/sploits/2009-wwbsod.zip","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36250","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9417","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52403","source":"cve@mitre.org"},{"url":"http://milw0rm.com/sploits/2009-wwbsod.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3021","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el plugin Site Calendar 'mycaljp' v2.0.0 hasta v2.0.6, como la utilizada en el paquete extendido de japonés de Geeklog v1.5.0 hasta v1.5.2 cuando se distribuyo el 29/06/2009 o antes, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5E265B56-01BD-439E-9066-5C1135D55E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"69674298-BA2B-4B3C-847A-EE0D8F00B0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E2F3E9B-2E71-4752-9C92-A6FF80520B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"44A96D41-F822-4AC5-A7CD-5F6D9A9ACCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4B0A03BD-9761-4E55-B763-87C647A27165"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AE857DE6-CB9A-45EA-8140-6BBCF1B8F7F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoshinori_tahara:mycaljp:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"22101718-AFAD-4B6C-A8EB-067E46B45C8A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.5.0:*:ja:*:*:*:*:*","matchCriteriaId":"C6FE3BFA-538B-4379-AFF3-1B2C3D4DEE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.5.1:*:ja:*:*:*:*:*","matchCriteriaId":"2962D789-37F2-4F15-BD4E-4F5DBCE00941"},{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.5.2:*:ja:*:*:*:*:*","matchCriteriaId":"A29526EC-7D84-4411-9715-0F64A0F44CC0"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN20478978/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000055.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36413","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.geeklog.jp/article.php/20090820020302431","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN20478978/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.geeklog.jp/article.php/20090820020302431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3022","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en bingo!CMS v1.2 y anteriores, permite a atacantes remotos secuestrar la autenticación de otros usuarios para peticiones que modifican la configuración o cambian el contenidos a través de vectores no especificados."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itd-inc:bingo\\!cms:*:-:commercial:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"F782FA95-6C66-4A3E-AE0E-AD4419A89C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:itd-inc:bingo\\!cms:*:-:core:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"C8D7A923-B0C6-4660-A204-7FB68CBE78A2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN68640473/index.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57425","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36458","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.bingo-cms.jp/security/jvn68640473.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52838","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvn.jp/en/jp/JVN68640473/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/57425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.bingo-cms.jp/security/jvn68640473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3023","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka \"IIS FTP Service RCE and DoS Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en el Servicio FTP en Internet Information Services (IIS) de Microsoft versiones 5.0 hasta 6.0, permite a los usuarios autenticados remotos ejecutar código arbitrario por medio de un comando NLST (LISTA DE NOMBRES) diseñado que utiliza comodines, conllevando a la corrupción de memoria, también se conoce como \"IIS FTP Service RCE and DoS Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"6.0","matchCriteriaId":"D7385B58-3890-47B1-8847-F48921B46996"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"9F98AE07-3995-4501-9804-FEA5A87ADFAD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*","matchCriteriaId":"A7371547-290D-4D0D-B98D-CA28B4D2E8B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*","matchCriteriaId":"C6109348-BC79-4ED3-8D41-EA546A540C79"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*","matchCriteriaId":"C9392D35-7BF5-48E9-879B-BBDE9A9E9AB9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:itanium:*","matchCriteriaId":"87842DF1-F3AC-4585-A117-904B936D5C9F"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x64:*","matchCriteriaId":"3A118DC8-CD3A-461F-867E-5174F24FBAE9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:-:*:x86:*","matchCriteriaId":"1114016B-B51D-495D-96AC-A0E7992DA551"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*","matchCriteriaId":"FFFD8C6B-7A46-484C-8701-81D58AB1C2CF"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*","matchCriteriaId":"AB425562-C0A0-452E-AABE-F70522F15E1A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:-:*:x86:*","matchCriteriaId":"62E01D64-DEAB-4858-9B39-B747728C3DA7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:-:*","matchCriteriaId":"0609C246-ADCB-4B39-935F-BB3229B8B6CD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*","matchCriteriaId":"51160A46-6768-44D5-89CD-6DB9D2268A2E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:-:*","matchCriteriaId":"BD6ACAD9-55E9-4DCC-BEA5-F042AD6E43B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:-:*:x64:*","matchCriteriaId":"889F98DA-4266-470B-AE3D-480BDF6BADB9"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:-:*:x64:*","matchCriteriaId":"08627673-D381-4481-BD04-F56599C43105"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9541","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9559","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/276653","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/36189","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2481","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6080","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/276653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/36189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3024","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate."},{"lang":"es","value":"La función verify_hostname_of_cert en la funcionalidad de verificación de certificado en IO-Socket-SSL (IO::Socket::SSL) v1.14 a la v1.25 únicamente compara el prefijo de un hostname cuando no se usa un comodín, lo que permite a atacantes remotos evitar la validación de un hostname para un certificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.14:*:*:*:*:*:*:*","matchCriteriaId":"80EEE704-744B-487E-89D0-C38F0F0F00D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.15:*:*:*:*:*:*:*","matchCriteriaId":"50AF3CCC-A126-40C2-BDE8-A376F286A5FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16:*:*:*:*:*:*:*","matchCriteriaId":"E7922D38-6AD7-4D81-AF30-623BB8234E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16_1:*:*:*:*:*:*:*","matchCriteriaId":"760ED2EB-9255-49A4-AFE7-4DD960215BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16_2:*:*:*:*:*:*:*","matchCriteriaId":"7131102E-BEDB-4D63-9005-0EB646CAA918"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.16_3:*:*:*:*:*:*:*","matchCriteriaId":"064EBF4B-37EF-4334-87B4-EC4407A4F621"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.17:*:*:*:*:*:*:*","matchCriteriaId":"288417CD-C82F-48DE-9D9F-897E3A6EB833"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.18:*:*:*:*:*:*:*","matchCriteriaId":"2BEE69A2-16BF-4E7B-9985-BFDFA5354DB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.19:*:*:*:*:*:*:*","matchCriteriaId":"9AED6875-A544-4608-9277-E82C5977D9EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.20:*:*:*:*:*:*:*","matchCriteriaId":"669BA841-F8D7-4E4D-B9B5-776248A7C9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.21:*:*:*:*:*:*:*","matchCriteriaId":"7FA78DEB-D81F-4442-ABF1-37FD5226EC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.22:*:*:*:*:*:*:*","matchCriteriaId":"58BAC664-C570-4F8F-9CAB-8DEF9A3D54CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.23:*:*:*:*:*:*:*","matchCriteriaId":"82C2F301-5CD4-4729-BC62-16B60E0EC9BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.24:*:*:*:*:*:*:*","matchCriteriaId":"75C353EA-2FCC-4B0C-A4E7-CD8E0AC89255"},{"vulnerable":true,"criteria":"cpe:2.3:a:io-socket-ssl:io-socket-ssl:1.25:*:*:*:*:*:*:*","matchCriteriaId":"8E6CA710-EC56-46A1-9114-48E928DFFB6D"}]}]}],"references":[{"url":"http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.30/Changes","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42893","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201101-06.xml","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/28/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/29/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/4","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0118","source":"cve@mitre.org"},{"url":"http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.30/Changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201101-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/28/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/29/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3025","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM."},{"lang":"es","value":"Vulnerabilidad no específica en Pidgin v2.6.0 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un enlace en Yahoo IM.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of pidgin as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"}]}]}],"references":[{"url":"http://developer.pidgin.im/wiki/ChangeLog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/19/2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52994","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6167","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3026","sourceIdentifier":"cve@mitre.org","published":"2009-08-31T20:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the \"require TLS/SSL\" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions."},{"lang":"es","value":"protocols/jabber/auth.c en libpurple en Pidgin v2.6.0, y posiblemente otras versiones, no siguen las preferencias \"requeridas en TSL/SSL\" cuando se conectan a un servidor Jabber viejo, que no siguen las especificaciones XMPP, lo que provoca que libpurple se conecte al servidor sin el cifrado esperado y permita  a atacantes remotos poder espíar la sesión."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat has released updates to correct this issue:\nhttps://rhn.redhat.com/errata/RHSA-2009-1453.html","lastModified":"2009-09-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542891","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/ticket/8131","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/312e056d702d29379ea61aea9d27765f127bc888/with/55897c4ce0787edc1e7721b7f4a9b5cbc8357279","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37071","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/24/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36368","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53000","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11070","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5757","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/ticket/8131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/312e056d702d29379ea61aea9d27765f127bc888/with/55897c4ce0787edc1e7721b7f4a9b5cbc8357279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/24/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3027","sourceIdentifier":"cve@mitre.org","published":"2009-12-11T16:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA through 6.5.5; Veritas Backup Reporter (VBR) 6.0 GA through 6.6; Veritas Storage Foundation (SF) 3.5; Veritas Storage Foundation for Windows High Availability (SFWHA) 4.3MP2, 5.0, 5.0RP1a, 5.0RP2, 5.1, and 5.1AP1; Veritas Storage Foundation for High Availability (SFHA) 3.5; Veritas Storage Foundation for Oracle (SFO) 4.1, 5.0, and 5.0.1; Veritas Storage Foundation for DB2 4.1 and 5.0; Veritas Storage Foundation for Sybase 4.1 and 5.0; Veritas Storage Foundation for Oracle Real Application Cluster (SFRAC) 3.5, 4.0, 4.1, and 5.0; Veritas Storage Foundation Manager (SFM) 1.0, 1.0 MP1, 1.1, 1.1.1Ux, 1.1.1Win, and 2.0; Veritas Cluster Server (VCS) 3.5, 4.0, 4.1, and 5.0; Veritas Cluster Server One (VCSOne) 2.0, 2.0.1, and 2.0.2; Veritas Application Director (VAD) 1.1 and 1.1 Platform Expansion; Veritas Cluster Server Management Console (VCSMC) 5.1, 5.5, and 5.5.1; Veritas Storage Foundation Cluster File System (SFCFS) 3.5, 4.0, 4.1, and 5.0; Veritas Storage Foundation Cluster File System for Oracle RAC (SFCFS RAC) 5.0; Veritas Command Central Storage (CCS) 4.x, 5.0, and 5.1; Veritas Command Central Enterprise Reporter (CC-ER) 5.0 GA, 5.0 MP1, 5.0 MP1RP1, and 5.1; Veritas Command Central Storage Change Manager (CC-SCM) 5.0 and 5.1; and Veritas MicroMeasure 5.0 does not properly validate authentication requests, which allows remote attackers to trigger the unpacking of a WAR archive, and execute arbitrary code in the contained files, via crafted data to TCP port 14300."},{"lang":"es","value":"El archivo VRTSweb.exe en VRTSweb en Backup Exec Continuous Protection Server de Symantec (CPS) versiones 11d, 12.0 y 12.5; Veritas NetBackup Operations Manager (NOM) versiones 6.0 GA hasta 6.5.5; Veritas Backup Reporter (VBR) versiones 6.0 GA hasta 6.6; Veritas Storage Foundation (SF) versión 3.5; Veritas Storage Foundation for Windows High Availability (SFWHA) versiones 4.3MP2, 5.0, 5.0RP1a, 5.0RP2, 5.1 y 5.1AP1; Veritas Storage Foundation for High Availability (SFHA) versión 3.5; Veritas Storage Foundation for Oracle (SFO) versiones 4.1, 5.0 y 5.0.1; Veritas Storage Foundation for DB2 versiones 4.1 y 5.0; Veritas Storage Foundation for Sybase versiones 4.1 y 5.0; Veritas Storage Foundation for Oracle Real Application Cluster (SFRAC) versiones 3.5, 4.0, 4.1 y 5.0; Veritas Storage Foundation Manager (SFM) versiones 1.0, 1.0 MP1, 1.1, 1.1.1Ux, 1.1.1Win y 2.0; Veritas Cluster Server (VCS) versiones 3.5, 4.0, 4.1 y 5.0; Veritas Cluster Server One (VCSOne) versiones 2.0, 2.0.1 y 2.0.2; Veritas Application Director (VAD) versiones 1.1 y 1.1 Platform Expansion; Veritas Cluster Server Management Console (VCSMC) versiones 5.1, 5.5 y 5.5.1; Veritas Storage Foundation Cluster File System (SFCFS) versiones 3.5, 4.0, 4.1 y 5.0; Veritas Storage Foundation Cluster File System for Oracle RAC (SFCFS RAC) versión 5.0; Veritas Command Central Storage (CCS) versiones 4.x, 5.0 y 5.1; Veritas Command Central Enterprise Reporter (CC-ER) versiones 5.0 GA, 5.0 MP1, 5.0 MP1RP1 y 5.1; Veritas Command Central Storage Change Manager (CC-SCM) versiones 5.0 y 5.1; y Veritas MicroMeasure versión 5.0, no comprueba apropiadamente las peticiones de autenticación, que permite a los atacantes remotos desencadenar el desempaquetado de un archivo WAR y ejecutar código arbitrario en los archivos contenidos, por medio de datos diseñados al puerto TCP 14300."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_continuous_protection_server:11d:*:*:*:*:*:*:*","matchCriteriaId":"7E6E4ABB-057E-42D3-8A89-5D456675EC69"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_continuous_protection_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"D740C486-FBFB-40C3-9984-FDDEC5EA9733"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:backup_exec_continuous_protection_server:12.5:*:*:*:*:*:*:*","matchCriteriaId":"D6ACB3C3-C9C4-4E9C-A844-D666A967A234"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_application_director:1.1:*:*:*:*:*:*:*","matchCriteriaId":"942E06E0-9D27-4CDD-B633-08C327ED1EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_application_director:1.1:*:platform_expansion:*:*:*:*:*","matchCriteriaId":"A9BC62A6-4624-4590-B9C8-0CA16185831C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_backup_exec:11d:*:*:*:*:*:*:*","matchCriteriaId":"012C76D4-E77B-4468-A24A-A492A412CE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_backup_exec:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DA48FE77-E46D-4F12-9124-01165D223CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_backup_exec:12.5:*:*:*:*:*:*:*","matchCriteriaId":"75D16DC0-92CC-4FAE-8640-4845F6338CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:3.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"7B54B477-85EC-4435-BA22-6586DE493097"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:4.0:*:aix:*:*:*:*:*","matchCriteriaId":"B0ED4E24-038C-45DA-8023-233F0A0800F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"37BB09D0-0FD3-41E5-8BE0-890F84B98C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:4.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"D0AACBB1-8F69-4F63-974B-C64E78686438"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:4.1:*:linux:*:*:*:*:*","matchCriteriaId":"A9EDF286-222D-460B-9591-DB99323BAF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"AB282C2B-C0C5-40CC-9E16-B5B8271AC222"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:5.0:*:aix:*:*:*:*:*","matchCriteriaId":"A7B74077-2547-4F27-BD57-359491435F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:5.0:*:hp-ux:*:*:*:*:*","matchCriteriaId":"6B271A01-4E72-41DC-A0E6-3F070A7F613C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"F586E834-013A-434C-90A1-715B2B15C12D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"E89EEBDC-F160-4AB0-80CF-49E5655F04E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server_management_console:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1470C394-3B0A-4322-9ACC-A3586527529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server_management_console:5.5:*:*:*:*:*:*:*","matchCriteriaId":"B1F33C5F-0150-4CA3-94C3-5A84D7715516"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server_management_console:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0886CD94-42FE-4140-86E7-F4C9939A290F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server_one:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3E3F7A5C-3944-4DC3-96A6-627B133FA006"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server_one:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DDB0D6A1-D2D1-4F60-B366-52715D30D26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_cluster_server_one:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"52D62C7A-3C39-4321-B9E1-49E300EEC494"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_enterprise_reporter:5.0_ga:*:*:*:*:*:*:*","matchCriteriaId":"7C7C1181-1A78-4774-B016-8D6D5F0C30E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_enterprise_reporter:5.0mp1:*:*:*:*:*:*:*","matchCriteriaId":"7C07F0CC-72FC-4D3F-90AC-D82472422706"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_enterprise_reporter:5.0mp1rp1:*:*:*:*:*:*:*","matchCriteriaId":"78FE2945-5381-4445-A064-C9E20B4F643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_enterprise_reporter:5.1:*:*:*:*:*:*:*","matchCriteriaId":"0B30722B-AA42-4B49-BD87-B518C970C921"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_storage:4.x:*:*:*:*:*:*:*","matchCriteriaId":"85F98C53-8712-4FF6-B168-50F25555CE0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_storage:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C33D910F-1116-4432-970B-CD0949CB8DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_storage:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CC235D3-E8CF-44EE-9C6F-CEE85BA239A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_storage_change_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"276B6BB8-6E10-4D7C-984D-C9DEC4A93400"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_command_central_storage_change_manager:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1C2160A2-D8E6-420B-8E3F-90B6501ADCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_micromeasure:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0DD78EF3-8890-43CB-B56A-6EF18B76E48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_operations_manager:6.0_ga:*:*:*:*:*:*:*","matchCriteriaId":"817AF93A-7BB1-4295-AD5E-67B697DE066F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_operations_manager:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D79923BD-6346-409B-A326-BDD024D64EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_reporter:6.0_ga:*:*:*:*:*:*:*","matchCriteriaId":"370F7991-4133-4A4A-AF24-232323D0CED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_netbackup_reporter:6.6:*:*:*:*:*:*:*","matchCriteriaId":"024C614A-094B-401B-BF41-9D6071102099"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storae_foundation:3.5_onwards:*:*:*:*:*:*:*","matchCriteriaId":"FBF7C58A-F135-49FE-A507-B46D9FA51232"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3AE415ED-224D-4806-92BB-BEFDE2D645D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:3.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"A11DA8A4-DBA8-4F38-9CAC-27BCDD031F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.0:*:aix:*:*:*:*:*","matchCriteriaId":"C7420624-84D9-4A86-A027-6CB288D4B43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.0:*:hp-ux:*:*:*:*:*","matchCriteriaId":"D6652DB1-FDD6-48A4-9517-D981873C4EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"1C96E3F4-F895-41A9-ADA0-97CAEF73AB52"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.0:*:solaris:*:*:*:*:*","matchCriteriaId":"601EC43E-7B41-4BE8-B45B-F33C5B9F9620"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.1:*:aix:*:*:*:*:*","matchCriteriaId":"B6C3BEA8-8B10-48AC-BB94-F11E5361315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.1:*:hp-ux:*:*:*:*:*","matchCriteriaId":"7A2C5349-8569-4884-A8F6-775DAC771D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.1:*:linux:*:*:*:*:*","matchCriteriaId":"68999D92-BF01-48D8-8B1D-078629875F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"E274ECF5-98F2-40D7-8166-63142D0A57F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:5.0:*:aix:*:*:*:*:*","matchCriteriaId":"A4A976D0-6487-49D4-8556-0DD60021A0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:5.0:*:hp-ux:*:*:*:*:*","matchCriteriaId":"8EC6BF09-81D7-4882-BA29-8A311BB673FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"F5464913-8A56-4031-93DE-A70F159FF7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"06715E62-1C94-4345-8AA9-D67BB7EB8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_cluster_file_system_for_oracle_rac:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"D8722C95-F712-4F2A-ACCF-CEA3BEDCCD29"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_db2:4.1:*:linux:*:*:*:*:*","matchCriteriaId":"431F59D5-D26E-4EC9-BABF-E08627D96055"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_db2:4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"534552BF-CEF1-45B3-B532-CAD4300F61F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_db2:5.0:*:aix:*:*:*:*:*","matchCriteriaId":"E047AD78-DE53-4555-B7C2-9FF95EE3D793"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_db2:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"47781640-9536-4107-BF63-80104F947F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_db2:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"A1BE7CE6-7DF3-4C9E-AB4B-3F3534AB6E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_high_availability:3.5:*:*:*:*:*:*:*","matchCriteriaId":"08EF077E-57CB-4995-B465-1DB9DF2B0C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1434B93C-2D93-400E-99E2-95D210771C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7F05F046-9B3F-4753-9B94-24906717528B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"34053749-395D-48E2-BE02-4784E2D1F934"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:3.5:*:hp-ux:*:*:*:*:*","matchCriteriaId":"C757098D-F666-45F6-B0F8-164170BCED8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:4.0:*:aix:*:*:*:*:*","matchCriteriaId":"BDE6CD95-FC16-4E12-A852-6F06D3EEA5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"16F884A4-E0B6-4857-BD61-4B69DA0CF783"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:4.1:*:linux:*:*:*:*:*","matchCriteriaId":"F9496201-BE01-4FFC-A6B9-AED5E8F8C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"36B7EF96-CA33-48CF-B6D3-607970BB85DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:4.1:hp-ux:*:*:*:*:*:*","matchCriteriaId":"2AA0E4E6-AB87-43D7-BEB9-46B34B5BEDFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F339DCEF-1F4F-4C9C-A68D-CA8A5347AD3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:5.0:*:aix:*:*:*:*:*","matchCriteriaId":"51CCB494-8E39-445C-A9B4-87F1BA42B49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:5.0:*:hp-ux:*:*:*:*:*","matchCriteriaId":"DC2A2F53-7488-4339-B7BE-39CB451CEA07"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"2405C7B6-E302-4C56-A4B3-85EE70CE8553"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_oracle_real_application_cluster:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"D8726E54-2C92-47E2-82E4-AF987B62C4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_sybase:4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"93186DB0-83C2-45F7-B3D9-129109336C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_sybase:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"A0A3C285-6FE5-4365-99A9-E8A7689CCBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_windows_high_availability:4.3mp2:*:*:*:*:*:*:*","matchCriteriaId":"B9436C35-7427-40CB-9CAF-4CF0D6BE3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_windows_high_availability:5.0:*:*:*:*:*:*:*","matchCriteriaId":"FF6555A3-5156-42C6-94F7-7B37F7718AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_windows_high_availability:5.0rp1a:*:*:*:*:*:*:*","matchCriteriaId":"55A7A3C7-A461-4838-AA8B-5E4B80E15CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_windows_high_availability:5.0rp2:*:*:*:*:*:*:*","matchCriteriaId":"7B59E2A5-6066-4CEA-A22D-AEA52FDD1419"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_windows_high_availability:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FC35DF8B-6C75-4EAF-B4A4-3C8E5B4CF968"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_for_windows_high_availability:5.1ap1:*:*:*:*:*:*:*","matchCriteriaId":"A07A7773-F8FE-48CA-9CEE-78835E2EF420"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ECE49ED8-BBDE-4B2A-AF89-8C9467232AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_manager:1.0mp1:*:*:*:*:*:*:*","matchCriteriaId":"DB5D0102-15CF-4B99-BA91-5BA852512120"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E693F59B-0AA7-413E-B583-E3AD94C18FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_manager:1.1.1ux:*:*:*:*:*:*:*","matchCriteriaId":"EBA02EC8-9C16-4860-96D1-025576DCD53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_manager:1.1.1win:*:*:*:*:*:*:*","matchCriteriaId":"7A9B59DE-9F3B-4AC3-A856-61F66D0531A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:veritas_storage_foundation_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8D377C9-EE9C-4F93-BA6D-0994F0E23CE0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126046186917330&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=126046186917330&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37631","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37637","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023309","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023312","source":"cve@mitre.org"},{"url":"http://seer.entsupport.symantec.com/docs/336988.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337279.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337293.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337392.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337859.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337930.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508358/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37012","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023311","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023313","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023318","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091209_00","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3483","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-098/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54665","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7986","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126046186917330&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=126046186917330&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.entsupport.symantec.com/docs/336988.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337279.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337293.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337392.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337859.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seer.entsupport.symantec.com/docs/337930.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508358/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091209_00","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-098/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3029","sourceIdentifier":"cve@mitre.org","published":"2009-10-15T10:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via \"external client input\" that triggers crafted error messages."},{"lang":"es","value":"Ejecución de comandos en sitios cruzados (XSS) en la consola de Symantec SecurityExpressions Audit y Compliance Server v4.1.1, v4.1 y anteriores permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de la \"entrada de clientes externos\" lo cual provoca mensajes de error manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"0D4E75BA-D9C7-4568-A978-82A304A4BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4A5B8408-80B7-4EAC-8439-EB35D7435CB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/36972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022989","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58651","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36570","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3030","sourceIdentifier":"cve@mitre.org","published":"2009-10-15T10:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an \"HTML Injection issue.\""},{"lang":"es","value":"Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en Symantec SecurityExpressions Audit y Compliance Server v4.1.1, v4.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores que desencadenan un mensaje de error en una respuesta, relacionada con una \"incidencia de inyección HTML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"0D4E75BA-D9C7-4568-A978-82A304A4BDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:securityexpressions_audit_and_compliance_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4A5B8408-80B7-4EAC-8439-EB35D7435CB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/36972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022989","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58650","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36571","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3031","sourceIdentifier":"cve@mitre.org","published":"2009-11-03T16:30:10.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el método BrowseAndSaveFile  en el control ActiveX ConsoleUtilities v6.0.0.1846 en AeXNSConsoleUtilities.dll en Symantec Altiris Notification Server (NS) v6.0 anterior a R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution v6.9 SP3, y Symantec Management Platform (SMP) v7.0 anterior a SP3, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en el segundo argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*","matchCriteriaId":"EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*","matchCriteriaId":"4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*","matchCriteriaId":"3ACB4D1D-08D2-424B-B4F6-13FCDF034833"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_management_platform:7.0:*:*:*:*:*:*:*","matchCriteriaId":"72B538F1-CB05-495B-A3F3-24395A1F3B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_management_platform:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"755E4F35-FEAB-488D-825B-C23AF31F03A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"68AF67FB-5FC8-4EAA-AF09-35D4740B967F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:*:sp1:*:*:*:*:*","matchCriteriaId":"214688D3-0653-4FDD-89C3-25E62BA050F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"0C13D2DE-7EA0-4963-BA60-5D01E037D954"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"8D085BB2-1012-4386-AEE9-31870673BF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*","matchCriteriaId":"5E187D85-9F75-4749-9682-29F66D919E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C048C7FD-700F-4388-A1ED-16A6ECB31B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"EB49276E-A0B9-4E74-9A45-928BC6A99E3B"}]}]}],"references":[{"url":"http://sotiriu.de/adv/NSOADV-2009-001.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507625/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36698","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3117","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://kb.altiris.com/article.asp?article=49389&p=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://kb.altiris.com/article.asp?article=49568&p=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sotiriu.de/adv/NSOADV-2009-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507625/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://kb.altiris.com/article.asp?article=49389&p=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://kb.altiris.com/article.asp?article=49568&p=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3033","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T16:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument."},{"lang":"es","value":"Desbordamiento de búfer en el método RunCmd en Altiris eXpress NS Console Utilities ActiveX control en AeXNSConsoleUtilities.dll en la consola web de Symantec Altiris Deployment Solution v6.9.x, Altiris Notification Server v6.0.x, y Management Platform v7.0.x permite a atacantes remotos ejecutar código arbitrario a través de una cadena larga en el segundo argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*","matchCriteriaId":"EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*","matchCriteriaId":"4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*","matchCriteriaId":"3ACB4D1D-08D2-424B-B4F6-13FCDF034833"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*","matchCriteriaId":"BA744B2A-B81E-4E97-A720-307041478B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:*","matchCriteriaId":"E9301CFC-5925-4249-8439-5E2BBAF06687"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:*","matchCriteriaId":"E4070F9F-F63E-4708-8DA0-339A777383B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:*","matchCriteriaId":"5C9DD5AC-7E4C-4A62-A5B3-B179359635A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_management_platform:7.0:*:*:*:*:*:*:*","matchCriteriaId":"72B538F1-CB05-495B-A3F3-24395A1F3B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_management_platform:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"755E4F35-FEAB-488D-825B-C23AF31F03A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"68AF67FB-5FC8-4EAA-AF09-35D4740B967F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"0B096EB3-F1E7-4933-972A-0E142CA854A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"0C13D2DE-7EA0-4963-BA60-5D01E037D954"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"8D085BB2-1012-4386-AEE9-31870673BF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*","matchCriteriaId":"5E187D85-9F75-4749-9682-29F66D919E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_notification_server:6.0_sp3:*:*:*:*:*:*:*","matchCriteriaId":"9E437831-40EF-437D-A045-DBF6CF3CB0C6"}]}]}],"references":[{"url":"http://osvdb.org/60496","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37092","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54415","source":"cve@mitre.org"},{"url":"https://kb.altiris.com/article.asp?article=50072&p=1","source":"cve@mitre.org"},{"url":"https://kb.altiris.com/article.asp?article=50279&p=1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.altiris.com/article.asp?article=50072&p=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.altiris.com/article.asp?article=50279&p=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3037","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment."},{"lang":"es","value":"Desbordamiento de búfer en xlssr.dll en Autonomy KeyView XLS viewer(también conocido como File Viewer para Excel)usado en IBM Lotus Notes v5.x hasta v8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), y otros productos, permite a atacantes remotos ejecutar código a su elección a través de una manipulación de la hoja de cálculo .xls adjunta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1D5D749-546A-4655-A0BF-0A2D4E9F51A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C43E91B-492D-42E0-9C59-3DA83AF7367B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C944AEC-18C2-487E-8E0F-EC525D21EDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D4B2601-B62F-4235-BFFD-281235737450"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CA83054E-5E6B-48A4-8799-5C8507BFEB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D7DEAC0E-C59B-42DB-BB81-E34C9F843486"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8809E947-43E1-4D92-A5A5-63FEDBF12318"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.9a:*:*:*:*:*:*:*","matchCriteriaId":"780C6EC1-11FD-458C-B59F-11668BA1E466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"0A7F5626-EB8B-4339-9EB5-C23962DAC95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7CB071DF-5C48-4FE8-8DCC-68582A3C1EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"273DF27B-9441-4925-BD7E-5709D7D059EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.02:*:*:*:*:*:*:*","matchCriteriaId":"CD51B7AD-1523-4BF4-8DFF-54D5F9A0E66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55D037CC-1207-48E2-882E-8B236EE7138F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5059BEF2-84EB-4B5F-84F5-9E3200B068F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB71B7AA-957B-46A6-9BC9-CE23EC721189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"46CF28C0-51AD-4783-B1F0-205DF64D133A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9C0015A2-A70E-4B0C-B59A-44F5F611293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D94927A9-61FD-459F-9A6D-E581A4AF505C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D3B32BA2-9EB7-4294-A857-226A5B1CC401"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EF64CA16-6C20-42E1-BA68-BD63A873BFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"12D7DD7B-CA90-44A5-9B7B-4A4985150689"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C63D40DF-C6F3-4502-9816-939265F10532"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp2:*:*:*:*:*","matchCriteriaId":"F8B5BF9A-F8A7-4C2B-B093-8226D0ED1425"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.5:*:fp3:*:*:*:*:*","matchCriteriaId":"04CB50C2-2B01-4A68-BE96-1127B9954F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"4598C4A8-B19D-4562-A5B5-D3B090F0C8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.6:*:fp2:*:*:*:*:*","matchCriteriaId":"66D334E1-9326-4D0A-8D87-572F3E6B44BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0:*:*:*:*:*:*:*","matchCriteriaId":"68AEB13D-C7C6-426F-8484-85EFF7245DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"957BA698-9D48-4906-9FF3-584927C978B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"94646433-DE15-4214-9C78-7D1DAB5A12D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3449A490-865A-4262-8482-429DEF455644"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.2:*:fp1:*:*:*:*:*","matchCriteriaId":"5614CD60-7690-47E6-AEB3-FB0151EB264C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01C5CFC-7FB8-4D29-95AC-8EF59B0C170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*","matchCriteriaId":"692E295E-E650-42D5-AF7A-D6276C3D76E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1E25625-8570-4744-A2A2-4A4FB4D8AC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"50660BA1-A24A-4DBF-AB59-1CF04FA54120"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*","matchCriteriaId":"0119A252-73B1-490F-9371-06E8FDB8B979"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:brightmail_appliance:5.0:*:*:*:*:*:*:*","matchCriteriaId":"FF63CB53-00F5-42F5-B2AC-A0B02DB9B636"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:brightmail_appliance:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7AA56769-FBFE-4546-8672-5FB3BADF939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:brightmail_appliance:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C0E09688-A7FA-496B-AA03-D211BF09FA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:7.2:*:*:*:*:*:*:*","matchCriteriaId":"34D947D4-2750-4C73-8CEA-6F9BF3DA5C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1.1:*:linux:*:*:*:*:*","matchCriteriaId":"D804B423-8990-497F-9FB8-86E3D06F4F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:8.1.1:*:windows:*:*:*:*:*","matchCriteriaId":"6A13CD3B-0529-43E4-A4F8-96B5180B0DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:9.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"5D92BC1D-E75F-420E-A2DB-DBFC07508A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_detection_servers:9.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"ED4D0804-7AE2-45D6-AAD5-F70C14354BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"14920820-3D26-4AC4-839E-531ABA6933A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:data_loss_prevention_endpoint_agents:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EA274AFE-D535-4683-964A-FBCBF2D1291E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0:*:smtp:*:*:*:*:*","matchCriteriaId":"96E660E2-C0F9-499F-A01D-DB368179F28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.0:*:smtp:*:*:*:*:*","matchCriteriaId":"5E7788BD-652E-4306-AED0-6AE7F9A07836"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1:*:smtp:*:*:*:*:*","matchCriteriaId":"A8430D5E-A8A7-4724-8A6B-B5E2CA437729"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.181:*:smtp:*:*:*:*:*","matchCriteriaId":"D602A441-863D-4E90-A01D-57C41725D008"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.182:*:smtp:*:*:*:*:*","matchCriteriaId":"A792A9C1-95EF-4CE2-B14F-3DEE09BFAF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.189:*:smtp:*:*:*:*:*","matchCriteriaId":"5D9C7B86-7F9A-4DF8-A4DF-9A7CA5991D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.1.200:*:smtp:*:*:*:*:*","matchCriteriaId":"0117D61C-DEE6-4803-9CF8-27EEBAA493CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.10:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"5BF163AF-E470-492A-940C-B2FB37AA2322"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.11:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"95D5B1CF-6C20-4D66-9D30-631441FA953B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:5.0.12:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"868EFAF0-F5FA-46EB-99CC-19C1DAF06954"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:6.0.6:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"0026CDBB-92E2-45DE-9637-F18224CE3E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:6.0.7:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"12AC5934-DAC3-4866-B31F-71EC14F42CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:6.0.8:*:microsoft_exchange:*:*:*:*:*","matchCriteriaId":"A7604B25-6AA0-4814-A8D4-780811A247B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5.3.25:*:domino:*:*:*:*:*","matchCriteriaId":"07FADB30-A418-43C5-A798-4769C5350E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5.4.29:*:domino:*:*:*:*:*","matchCriteriaId":"6EAB0E10-A62F-42DB-BA86-FBFCFCF0E13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5.5.32:*:domino:*:*:*:*:*","matchCriteriaId":"70F1A708-9914-4875-B594-D8A9D65182D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:7.5.6:*:domino:*:*:*:*:*","matchCriteriaId":"5D04308D-D372-4760-B67F-A25DEEDF52E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security:8.0:*:domino:*:*:*:*:*","matchCriteriaId":"2ABC5ED9-168A-4420-9286-179345BD89DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security_appliance:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA92128-13DD-47D8-8822-23C4CDDFB715"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security_appliance:5.0.0.24:*:*:*:*:*:*:*","matchCriteriaId":"B00BFCE1-D01F-408C-931B-A19BC472124B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail_security_appliance:5.0.0.36:*:*:*:*:*:*:*","matchCriteriaId":"3A5F6573-0FF1-4660-A9B9-5C6696525C82"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autonomy:keyview:*:*:*:*:*:*:*:*","matchCriteriaId":"3A31DE25-F7B5-4AEA-B870-2B852F4FD8A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396492","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36042","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36124","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2389","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21396492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3038","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T16:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the control's CLSID in the classid attribute of an OBJECT element."},{"lang":"es","value":"Un cierto control ActiveX en lnresobject.dll v7.1.1.119 en el conector Research In Motion (RIM) Lotus Notes para BlackBerry Desktop Manager v5.0.0.11 permite a atacantes remotos causar una denegación de servicio (caída Internet Explorer) referenciando el CLSID de control en el atributo classid de un elemento OBJECT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes_connector:*:*:blackberry_desktop_manager_5.0.0.11:*:*:*:*:*","matchCriteriaId":"46BA5A1F-1859-4CC0-BA0E-B28E1E9FA7B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rim:blackberry_desktop_manager:5.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"53A70EE7-7BEA-47F1-A573-81FDA6F9F7CC"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9517","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3040","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T18:30:03.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download.php and the (5) SYSTEMID parameter to group_show.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Open Computer and Software (OCS) Inventory NG v1.02 para Unix permite a atacantes remotos ejecutar comandos SQL a su elección a través de los parámetros (1) N, (2) DL, (3) O y(4) V en download.php y el parámetro (5) SYSTEMID en group_show.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:*:unix:*:*:*:*:*","matchCriteriaId":"1C4201BC-7C0A-4B66-9ECD-A395A5012AC8"}]}]}],"references":[{"url":"http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01returnid=72","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/503936/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01returnid=72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/503936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3041","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T18:30:04.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009."},{"lang":"es","value":"SPIP v1.9 anterior v1.9.2i y v2.0.x hasta 2.0.8 no usa propiedades de control de acceso para 1) ecrire/exec/install.php y(2) ecrire/index.php, permitiendo a atacantes remotos dirigir actividades no autorizadas relacionadas con la instalación y copias de seguridad, tal como se ha explotado en Agosto de 2009."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A5A71331-3291-4A16-80DC-32365C9EDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9:alpha2:*:*:*:*:*:*","matchCriteriaId":"324F81F8-E104-49FD-ABF5-96C9EFF42F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E65B5367-E751-40B9-B022-B10421B6E7F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2c:*:*:*:*:*:*:*","matchCriteriaId":"AD35BCDB-E05F-45D7-9B2A-604A1DEF0B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2d:*:*:*:*:*:*:*","matchCriteriaId":"56F0AC27-1BDD-435F-8ED1-0AD108E83DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2g:*:*:*:*:*:*:*","matchCriteriaId":"A29C0816-7A4E-49BE-AB9F-D6E51C5DA6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.2h:*:*:*:*:*:*:*","matchCriteriaId":"0D39BD0E-5B03-4B7B-86E4-AEDC8B9C185E"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:1.9.alpha1:*:*:*:*:*:*:*","matchCriteriaId":"EAEC67D9-8D16-4943-B66F-07C269498E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B5168F84-0D94-41A6-B0A2-CA43BF6BD0A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF1BEB1-2CCB-47F6-8EFB-E4F9AA6A4ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5698E04-FD77-45A1-8FBE-200897595CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5C1ED3E6-4FD2-43FE-A87B-FB7C39F0066E"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A69C6572-561B-400C-9060-55473A3F02EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E8F3FB07-3CA8-4A41-AAEA-9719B44DEDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7D4A7340-3BBE-4ABB-A7A2-6ECA951C46E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"16142135-D7C6-4090-8ADC-51979C95EE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"771B6518-8EAB-4A88-ACD9-6AA8AC551511"},{"vulnerable":true,"criteria":"cpe:2.3:a:spip:spip:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"956220B5-85C3-4C40-B6C5-99251360ADD7"}]}]}],"references":[{"url":"http://fil.rezo.net/secu-14346-14350+14354.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36008","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.spip-contrib.net/SPIP-Security-Alert-new-version","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52381","source":"cve@mitre.org"},{"url":"http://fil.rezo.net/secu-14346-14350+14354.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.spip-contrib.net/SPIP-Security-Alert-new-version","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3042","sourceIdentifier":"cve@mitre.org","published":"2009-09-01T18:30:04.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en machine.php en Open Computer and Software (OCS) Inventory NG v1.02.1 permite a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro systemid, un vector diferente que CVE-2009-3040."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02.1:*:*:*:*:*:*:*","matchCriteriaId":"1B7B35C5-6165-4377-ABC8-3474905F325F"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2009/Aug/0143.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9416","source":"cve@mitre.org"},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=147&cntnt01returnid=15","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505675/100/0/threaded","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Aug/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=147&cntnt01returnid=15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505675/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3043","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service (system crash, sometimes preceded by a NULL pointer dereference) or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrated by KernelTtyTest.c."},{"lang":"es","value":"La función tty_ldisc_hangup en el archivo drivers/char/tty_ldisc.c en el kernel de Linux versiones 2.6.31-rc anteriores a 2.6.31-rc8, permite a los usuarios locales causar una denegación de servicio (bloqueo de sistema, a veces precedido por una desreferencia de puntero NULL) o posiblemente alcanzar privilegios por medio de cierta actividad de I/O pseudoterminal, como es demostrado por el archivo KernelTtyTest.c."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG, as they do not contain a backport of the tty ldisc rewrite (upstream commits 65b770468e98 and cbe9352fa08f).","lastModified":"2009-09-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"36B533F1-9794-41F4-BEF6-B923232B0C76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5c58ceff103d8a654f24769bb1baaf84a841b0cc","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/8/20/21","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/8/20/27","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/8/20/68","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc8","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/6","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36191","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5c58ceff103d8a654f24769bb1baaf84a841b0cc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/8/20/21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/8/20/27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/8/20/68","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2009-3044","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.00 does not properly handle a (1) '\\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."},{"lang":"es","value":"Opera anterior v10.00 no maneja apropiadamente (1) caracter '\\0' o (2)el carácter comodín invalido en el nombre de dominio en el campo Common Name (CN) de un certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación legítima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta3:*:*:*:*:*:*","versionEndIncluding":"10.00","matchCriteriaId":"ECEF9B68-A095-4FE2-8270-EAE060034064"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:alpha:*:*:*:*:*:*","matchCriteriaId":"85DB12A2-D43F-47BE-9719-466BE967E30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*","matchCriteriaId":"F12E0FE8-3982-453B-9C01-ABB2DE96866F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*","matchCriteriaId":"DA76A537-6A1B-41D8-A923-24DC77F92E0E"}]}]}],"references":[{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/934/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6444","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/934/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3045","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate."},{"lang":"es","value":"opera anterior a v10.00 confía en los certificados raíz X.509 firmados con el algoritmo MD2, lo que facilita a atacantes hombre-en-el-medio (Man-in-the-middle) suplantar cualquier servidor SSL a través de un certificado de servidor manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*","versionEndIncluding":"10.00","matchCriteriaId":"9D8253AD-F98A-4110-AC5B-ED979F97CFDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"}]}]}],"references":[{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/933/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/933/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3046","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate."},{"lang":"es","value":"Opera anterior v10.00 no chequea todos los certificados X.509 de revocación, lo que hace que los servidores remotos SSL superen fácilemente la validación del certificado a través de certificados revocados."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"10.00","matchCriteriaId":"72795166-DE8D-400D-B5A5-82839ED19708"}]}]}],"references":[{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/929/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/929/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3047","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs."},{"lang":"es","value":"Opera anterior a v10.00, cuando se usa una dirección colapsada en la barra, no actualiza adecuadamente el nombre de dominio del sitio web previo al sitio web actual, lo que podría permitir a atacantes remotos suplantar URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*","versionEndIncluding":"10.00","matchCriteriaId":"9D8253AD-F98A-4110-AC5B-ED979F97CFDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"}]}]}],"references":[{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/930/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6460","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/930/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3048","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the \"INPUT TYPE=file\" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a \"dropped file.\""},{"lang":"es","value":"Opera anterior a la v10.00 sobre Linux, SOlaris y FreeBSD no implementa adecuadamente la funcionalidad \"INPUT TYPE=file\", lo que permite a atacantes remotos engañar al usuario para que suba un archivo a través de vectores que involucran un \"archivo para descargar\" (dropped file)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta3:*:*:*:*:*:*","versionEndIncluding":"10.00","matchCriteriaId":"ECEF9B68-A095-4FE2-8270-EAE060034064"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*","matchCriteriaId":"177B7245-4E8F-44E7-BF34-43939DD75AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.63:*:*:*:*:*:*:*","matchCriteriaId":"5F2B3A26-D8C3-4508-8A6B-3858D5CB8381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:alpha:*:*:*:*:*:*","matchCriteriaId":"85DB12A2-D43F-47BE-9719-466BE967E30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*","matchCriteriaId":"F12E0FE8-3982-453B-9C01-ABB2DE96866F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*","matchCriteriaId":"DA76A537-6A1B-41D8-A923-24DC77F92E0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"C74C8F2C-92F4-4A9F-BF5A-8B5DF1A50DC7"},{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","matchCriteriaId":"D9EC02F3-3905-460D-8949-3B26394215CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"}]}]}],"references":[{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/931/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5679","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/931/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3049","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode."},{"lang":"es","value":"Opera anterior v10.00 no muestra apropiadamente todos los caracteres en el nombre de dominio (IDN) en la barra de direcciones, lo que permite a atacantes remotos falsificar las URLs y derivar en ataques phishing, relacionado con Unicode y Punycode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta_3:*:*:*:*:*:*","versionEndIncluding":"10.00","matchCriteriaId":"9D8253AD-F98A-4110-AC5B-ED979F97CFDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"}]}]}],"references":[{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"cve@mitre.org"},{"url":"http://www.opera.com/support/kb/view/932/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/freebsd/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/linux/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/solaris/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/windows/1000/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/support/kb/view/932/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3050","sourceIdentifier":"cve@mitre.org","published":"2009-09-02T17:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment.  NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries."},{"lang":"es","value":"Desbordamiento de búfer en la función set_page_size en util.cxx en HTMLDOC 1.8.27 y versiones anteriores permite a atacantes dependientes de contexto ejecutar código de su elección mediante un comentario MEDIA SIZE largo. NOTA: más tarde se informó que había vectores adicionales en htmllib.cxx y ps-pdf.cxx utilizando un archivo de fuentes AFM con un nombre glyph largo, pero estos vectores no traspasan la frontera de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htmldoc:htmldoc:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.27","matchCriteriaId":"869A7EC3-6B3E-45B8-A507-CE0004CC12E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:htmldoc:htmldoc:1.8.24:*:*:*:*:*:*:*","matchCriteriaId":"DC979928-F1B0-43C6-97A2-066BC6DC5B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:htmldoc:htmldoc:1.8.25:*:*:*:*:*:*:*","matchCriteriaId":"8ACF69DD-2922-4B08-A13C-8F5AB50E2FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:htmldoc:htmldoc:1.8.26:*:*:*:*:*:*:*","matchCriteriaId":"FE1F2321-B852-4660-BAF2-A19B3A501897"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=278186","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.htmldoc.org/str.php?L214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/25/3","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/26/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/01/1","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=278186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.htmldoc.org/str.php?L214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/07/25/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/07/26/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3051","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en lib/silcclient/client_entry.c de Secure Internet Live Conferencing (SILC) Toolkit anterior a v1.1.10, y SILC Client anterior a v1.1.8, permite a atacantes remotos ejecutar código de su elección a través de especificadores de formato de cadena en un campo nickname (apodo). Está relacionado con las funciones (1) silc_client_add_client, (2) silc_client_update_client y (3) silc_client_nickname_format."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libsilc as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2009-09-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"818C2A1A-90A7-4B9C-8A41-F99B641C679E"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"69F3F92C-7A47-4F14-BB23-74902AACB8E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F0F083A8-E3BD-4434-9F55-93E7D5B8F735"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7036B3C2-0D64-474E-81CF-2013F2F20AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C3471C30-9633-4A9D-A445-8B286C1294E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"75B46F7C-353D-41C7-8F39-7BE3FC2C83EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"3F1B96DE-36B1-484B-87FC-6156D8B65F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C06811A1-DF33-4EC9-A2EE-49CE2F4A4EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FE803FA-43C9-4565-A1B6-6890A2275A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9754DA96-8464-412C-8337-51F8DE9884B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A4BC8115-1A4B-4CFD-9431-3C2A231D0237"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"262AEDC5-8FB8-4D15-AC4D-906110718D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F422F232-FDA3-4FB4-AD84-2641EF0A0134"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"301B0871-8F41-483F-B457-488A89428975"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3B207531-E87A-49F4-8D49-BF7BB9F791DF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Client%201.1.8","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/release/SILC%20Client%201.1.8","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_client.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:235","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35940","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2150","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Client%201.1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/release/SILC%20Client%201.1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_client.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3052","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:08.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote authenticated users to execute arbitrary SQL commands via the prime_quick_style parameter to ucp.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en root/includes/prime_quick_style.php en el complemento Prime Quick Style anterior a v1.2.3 para phpBB v3 permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro prime_quick_style en ucp.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpbb:phpbb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF122E0D-ABB7-4042-A127-B061CD1F1165"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:absoluteanime:prime_quick_style:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"30E94124-565E-4A76-878B-E1BB0F41CDBA"}]}]}],"references":[{"url":"http://secunia.com/advisories/36532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.absoluteanime.com/forum/mods/Prime%20Quick%20Style/install.xml","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9569","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=70&t=692625&start=150#p10649315","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.absoluteanime.com/forum/mods/Prime%20Quick%20Style/install.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/community/viewtopic.php?f=70&t=692625&start=150#p10649315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3053","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:10.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Agora (com_agora) v3.0.0b para Joomla! permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de secuencias de salto de directorio en el parámetro action en la página avatars, al que se puede acceder a través de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jvitals:com_agora:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"DFFECA50-71D5-433A-80D2-61517336B3AF"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9564","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36207","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52964","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3054","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:10.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the portalid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Artetics.com Art Portal (com_artportal) v1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro portalid en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artetics:com_artportal:1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D3B1D5-D273-4406-B1B6-E7297BD18623"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36206","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52962","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3055","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:12.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dle_config_api parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en engine/api/api.class.php en DataLife Engine (DLE) v8.2 permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro dle_config_api."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dlecms:dle:8.2:*:*:*:*:*:*:*","matchCriteriaId":"337E0A15-7D57-4FB3-8F82-98BADF6ADD60"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36212","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3056","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:14.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[AdminPath] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en include/engine/content/elements/menu.php en KingCMS v0.6.0, permite a atacantes remotos ejecutar archivos PHP de su elección a través de una URL en el parámetro CONFIG[AdminPath]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bas_bloemsaat:kingcms:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"8DE9907F-75BB-457C-A129-FB8FE316BCA9"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9566","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3057","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:14.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to (1) news.php and (2) partneralle.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en AOM Software Beex v3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro navaction en (1) news.php and (2) partneralle.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aom-software:beex:3:*:*:*:*:*:*:*","matchCriteriaId":"70F5C74B-4E2E-4F79-B61F-3256A9F69EA6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/beex-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/beex-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3058","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:14.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in akPlayer 1.9.0 allows remote attackers to execute arbitrary code via a long string in a .plt playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en akPlayer v1.9.0, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un archivo de lista de reproducción .plt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aksoft:akplayer:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A11B1CD9-D540-4530-A9F6-4B23DC852F1D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/akplayer-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36521","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9568","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/akplayer-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3059","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:17.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) core/select.php or (2) the city parameter to top_add.inc.php, reachable through sboard.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Joker Board (también conocido como JBoard) v2.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de 1) core/select.php o (2) el parámetro city en top_add.inc.php, reachable through sboard.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allpublication:jboard:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"18825BF9-B4C6-4BFF-8778-F800469E38D5"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/jboard-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/jboard-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3060","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:17.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the notice parameter to editform.php, (2) the edit_user_message parameter to core/edit_user_message.php, or (3) the user_title parameter to inc/head.inc.php, reachable through any PHP script."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Joker Board (también conocido como JBoard) v2.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"notice\"  aeditform.php, (2) \"edit_user_message\" a core/edit_user_message.php, o (3) \"user_title parameter\" a inc/head.inc.php, posible mediante cualquier secuencia de comandos PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allpublication:jboard:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"18825BF9-B4C6-4BFF-8778-F800469E38D5"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/jboard-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/jboard-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3061","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:20.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en lesson.php en Alqatari Q R Script v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\". NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alqa6ari:script_q_r:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8E38BB0-0243-4BC8-B469-C13B7B3400B7"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/alqatarigroup-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/alqatarigroup-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3062","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:20.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in message_box.php in OSI Codes PHP Live! 3.3 allows remote attackers to execute arbitrary SQL commands via the deptid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en message_box.php en OSI Codes PHP Live! v3.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro deptid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplivesupport.:phplive\\!:3.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4D5513-B742-451E-8FBF-A7E93D0C8E31"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9578","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3063","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:21.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Game Server (com_gameserver) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a gamepanel action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL el componente Game Server(com_gameserver) v1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gamepanel\" en una acción a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:indianpulses:com_gameserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5E132EBB-F9CB-42DB-94B6-F5F97F43E239"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9571","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36213","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3064","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:21.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in debugger/debug_php.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _GET[filename] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en debugger/debug_php.php en Ve-EDIT v0.1.4 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un ..(punto punto) en el parámetro _GET[nombre de fichero]"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rein_velt:vedit:01.4:*:*:*:*:*:*:*","matchCriteriaId":"DCF62AEA-85CD-4802-A1EE-2D2AAAF5469C"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9570","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3065","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:21.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the highlighter parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en editor/edit_htmlarea.php en Ve-EDIT v0.1.4 permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro highlighter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rein_velt:vedit:01.4:*:*:*:*:*:*:*","matchCriteriaId":"DCF62AEA-85CD-4802-A1EE-2D2AAAF5469C"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9577","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3066","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:23.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) videoid parameter to tools/email.php and (2) redirect parameter to tools/login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PropertyWatchScript.com Property Watch v2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) videoid en tools/email.php y (2) redirect en tools/login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:propertywatchscript:property_watch:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA4C93B8-3413-4940-9438-F51C50372CDA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/propertywatch-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/propertywatch-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3067","sourceIdentifier":"cve@mitre.org","published":"2009-09-03T17:30:23.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Reservation Manager allows remote attackers to inject arbitrary web script or HTML via the resman_startdate parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución secuencias de comandos en sitios cruzados (XSS) en index.php en Reservation Manager permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro resman_startdate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webformatique:reservation_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"1E139D9C-2B10-4925-A003-5D77E7995006"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/resvman-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/resvman-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3068","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T18:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file in the robohelp/robo/reserved/web directory under its sessionid subdirectory, as demonstrated by the vd_adobe module in VulnDisco Pack Professional 8.7 through 8.11."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin restricciones en el Servlet RoboHelpServer (robohelp/server) en RoboHelp Server de Adobe versión 8, permite a los atacantes remotos ejecutar código arbitrario mediante la carga de un archivo Java Archive (.jsp) durante una acción PUBLISH, y luego, acceder a él por medio de una petición directa al archivo en el directorio robohelp/robo/reserved/web bajo su subdirectorio sessionid, como es demostrado por el módulo vd_adobe en VulnDisco Pack Professional versiones 8.7 hasta 8.11."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:robohelp_server:8:*:*:*:*:*:*:*","matchCriteriaId":"FD8557D7-2DFA-4AD0-BEDC-28A60570C774"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/09/potential_robohelp_server_8_is.html","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://twitter.com/elegerov/statuses/3727947465","source":"cve@mitre.org"},{"url":"http://twitter.com/elegerov/statuses/3737538715","source":"cve@mitre.org"},{"url":"http://twitter.com/elegerov/statuses/3737725344","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-14.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.intevydis.com/blog/?p=26","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=69","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506687/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36245","source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-066","source":"cve@mitre.org"},{"url":"http://blogs.adobe.com/psirt/2009/09/potential_robohelp_server_8_is.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://twitter.com/elegerov/statuses/3727947465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/elegerov/statuses/3737538715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/elegerov/statuses/3737725344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.intevydis.com/blog/?p=26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.intevydis.com/blog/?p=69","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506687/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3069","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el motor del navegador en Mozilla Firefox  v3.5.x anterior a v3.5.3,  permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución remota de código a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=506838","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5989","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=506838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3070","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el motor del navegador de Mozilla Firefox en versiones anteriores a la v3.0.14 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o probablemente ejecutar código de su elección a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430569","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=437565","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=465651","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11702","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6073","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=430569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=437565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=465651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3071","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el motor del navegador Mozilla Firefox anteriores a v3.0.14, y v3.5.x anteriores a v3.5.2, permite a los atacantes remotos causar una denegación de servicios (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar arbitrariamente código a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490196","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=493649","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=495444","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502017","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10698","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5905","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=490196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=493649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=495444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3072","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el motor de navegación de Mozilla Firefox anterior a v3.0.14 y v3.5.x anterior a v3.5.3; permiten a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o puede que ejecutar código de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38977","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39001","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-07.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=494283","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=501900","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508074","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=494283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=501900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3073","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el motor JavaScript en Mozilla Firefox  v3.5.x anterior a v3.5.3,  permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución remota de código a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=507292","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6398","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=507292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3074","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el motor JavaScript de Mozilla Firefox en versiones anteriores a la v3.0.14 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar código de su elección a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=467493","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53157","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6053","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9444","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=467493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3075","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el motor JavaScript en Mozilla Firefox anterior a v3.0.14, y v3.5.x anterior a v3.5.2,  permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución remota de código a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38977","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39001","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-07.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441714","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=505305","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53158","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-47.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=441714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=505305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3076","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module."},{"lang":"es","value":"Mozilla Firefox anterior a v3.0.4 no implementa adecuadamente ciertos dialogos asociados con las operaciones  (1) pkcs11.addmodule y (2) pkcs11.deletemodule, lo que facilita a atacantes remotos engañar a un usuario instalando o eliminando un módulo PKCS11 de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-48.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022877","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=326628","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=509413","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-48.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=326628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=509413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3077","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\""},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a la v3.0.14 y las versiones v3.5.x anteriores a v3.5.3, no gestiona apropiadamente los punteros para las columnas (también conocido como \"TreeColumns\") de un elemento de árbol XUL, lo que permite a atacantes remotos ejecutar código de su elección a través de un documento HTML modificado. Vulnerabilidad relacionada con la \"dangling pointer vulnerability\" (vulnerabiliad de puntero colgado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38977","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39001","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-49.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=506871","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-49.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=506871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3078","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property."},{"lang":"es","value":"Vulnerabilidad de truncado visual en Mozilla Firefox anteriores a v3.0.14, y v3.5.x anteriores a  v3.5.3, permite a atacantes remotos iniciar un scroll vertical y falsificar URLs a traves de caracteres Unicode con una propiedad \"line-height\" alta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36692","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-50.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022875","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453827","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10871","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5418","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-50.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3079","sourceIdentifier":"secalert@redhat.com","published":"2009-09-10T21:30:01.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter."},{"lang":"es","value":"Vulnerabilidad inespecífica en Mozilla Firefox anteriores a la v3.0.14, y v3.5.x anterior a la v3.5.3, permite a atacantes remotos ejecutar Javascript arbitrario con privilegios de chrome a través de vectores que incluyen un objeto, el FeedWriter, y el BrowserFeedWriter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.13","matchCriteriaId":"667FC0BC-C1AD-46CD-BBB2-A7E58E644FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36670","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36757","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1886","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-51.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36343","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022873","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454363","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10390","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-51.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1430.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3080","sourceIdentifier":"secalert@redhat.com","published":"2009-11-20T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request."},{"lang":"es","value":"Error de indice de matriz en la función gdth_read_event en drivers/scsi/gdth.c en el kernel de Linux antes de v2.6.32-RC8 permite a usuarios locales provocar una denegación de servicio o posiblemente obtener privilegios a través de un índice de evento negativo en una solicitud IOCTL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-129"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.6","matchCriteriaId":"8373D74A-0480-4E80-9758-1F35F4904C7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*","matchCriteriaId":"37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:-:*:*:*","matchCriteriaId":"105187A7-2AFE-46F9-B0A9-F09C7E10BFBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*","matchCriteriaId":"79A35457-EAA3-4BF9-A4DA-B2E414A75A02"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:5.0:*:*:*:*:*:*:*","matchCriteriaId":"FCFEF451-4B77-4259-8000-B252E699A950"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C079-C887-481A-B706-7EB35C400C98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"BA70E035-8475-4046-ABD7-5AE59F874EBA"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37720","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38276","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc8","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:030","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0041.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0882.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37068","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10989","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12862","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7101","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3081","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Uiga Church Portal permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"month\" en la acción calendar. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uiga:church_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"A0FE5883-4483-4C83-81F7-2F925C185CF3"}]}]}],"references":[{"url":"http://osvdb.org/57464","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52893","source":"cve@mitre.org"},{"url":"http://osvdb.org/57464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3082","sourceIdentifier":"cve@mitre.org","published":"2009-09-04T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en wcategory.php en Snow Hall Silurus System v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snowhall:silurus_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C30A6EFA-CE20-44CA-B354-B3DFE5900328"}]}]}],"references":[{"url":"http://secunia.com/advisories/36124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3083","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client."},{"lang":"es","value":"La función msn_slp_sip_recv de libpurple/protocols/msn/slp.c en el \"plugin\" (complemento) del protocolo MSN de libpurple de Pidgin en sus versiones anteriores a la v2.6.2 permite a atacantes remotos provocar una denegación de servicio (resolución de una referencia a puntero NULL y caída de la aplicación) a través de un mensaje SLP invite que carece de determinados campos obligatorios, tal como se ha demostrado con un mensaje mal formado desde un cliente KMess."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:libpurple:*:*:*:*:*:*:*:*","matchCriteriaId":"DD5DB51C-9FD1-41CB-AAFD-5F6A072C3F82"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"4B6B929B-1F85-4584-AA92-5B30BE110D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"A7D1DFC7-4B7F-4006-9058-8335A292821E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*","matchCriteriaId":"12095F49-8DFD-4C74-9454-5C3A5992A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"C62110B5-61D7-406D-B1A5-65AEC202DDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"3FEE4F73-A426-4B47-8BAF-1C7D2F955850"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"777EF35C-195A-4784-986D-3811CF1DCF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*","matchCriteriaId":"F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E593BFF0-650E-4EDB-BF65-C509C8A807C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*","matchCriteriaId":"01256F83-6E67-409A-B99A-6E27E83DA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C80012AD-8F49-4287-8AEC-C21AC5774CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7CB3CF0C-BECE-4685-A370-96424B0A5703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"}]}]}],"references":[{"url":"http://developer.pidgin.im/ticket/10159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/6d3fc30a0a0a379281efc5a6872a9c1d7c24c650/with/b4a95ea62b81a06ffc1993912471c511b786efdd/libpurple/protocols/msn/slp.c","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=39","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/ticket/10159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/6d3fc30a0a0a379281efc5a6872a9c1d7c24c650/with/b4a95ea62b81a06ffc1993912471c511b786efdd/libpurple/protocols/msn/slp.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3084","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect \"UTF16-LE\" charset name."},{"lang":"es","value":"La función msn_slp_process_msg de libpurple/protocols/msn/slpcall.c en el conector de protocolo MSN de libpurple v2.6.0 y v2.6.1, como se ha utilizado en Pidgin anterior a v2.6.2; permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de un mensaje manuscrito (también llamado Tinta). Está relacionado con una variable no iniciada y el nombre del conjunto de caracteres \"UTF16-LE\" incorrecto."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Pidgin packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-10T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"4B6B929B-1F85-4584-AA92-5B30BE110D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"A7D1DFC7-4B7F-4006-9058-8335A292821E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*","matchCriteriaId":"12095F49-8DFD-4C74-9454-5C3A5992A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"C62110B5-61D7-406D-B1A5-65AEC202DDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"3FEE4F73-A426-4B47-8BAF-1C7D2F955850"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"777EF35C-195A-4784-986D-3811CF1DCF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*","matchCriteriaId":"F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E593BFF0-650E-4EDB-BF65-C509C8A807C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*","matchCriteriaId":"01256F83-6E67-409A-B99A-6E27E83DA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C80012AD-8F49-4287-8AEC-C21AC5774CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7CB3CF0C-BECE-4685-A370-96424B0A5703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:libpurple:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E8CE5BE-03B4-4556-8ADE-6E645AD211F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:libpurple:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"78BDC1AE-C390-42D5-A0EF-80A59C350F5D"}]}]}],"references":[{"url":"http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44bedb100c07/with/567e16cbc46168f52482e5ec27626c48e7a5ba95/libpurple/protocols/msn/slpcall.c","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=38","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/92ce3e48744b40fb0fea89e3de5e44bedb100c07/with/567e16cbc46168f52482e5ec27626c48e7a5ba95/libpurple/protocols/msn/slpcall.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=38","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3085","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images."},{"lang":"es","value":"El plugin para el protocolo XMPP en libpurple en Pidgin anterior a v2.6.2 no maneja adecuadamente un error en la trama IQ (petición de información) durante un intento de traer un smiley personalizado, permitiendo a atacantes remotos provocar una denegación de servicio (fin de la aplicación) mediante contenido XHTML-IM con imagenes \"cid:\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:libpurple:*:*:*:*:*:*:*:*","matchCriteriaId":"DD5DB51C-9FD1-41CB-AAFD-5F6A072C3F82"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"4B6B929B-1F85-4584-AA92-5B30BE110D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:linux:*:*:*:*:*","matchCriteriaId":"5C5B2A50-6734-4B64-AFD0-DB34C3BDA86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"A7D1DFC7-4B7F-4006-9058-8335A292821E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:32_bit:*:*:*:*:*:*","matchCriteriaId":"12095F49-8DFD-4C74-9454-5C3A5992A3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"C62110B5-61D7-406D-B1A5-65AEC202DDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"CD01B8C6-7D3E-4FF9-A5B5-AAF33F4CEBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:32_bit:*:*:*:*:*:*","matchCriteriaId":"AD6D98DC-06FC-46E7-A790-98A0B43A4E8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:32_bit:*:*:*:*:*:*","matchCriteriaId":"3FEE4F73-A426-4B47-8BAF-1C7D2F955850"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:32_bit:*:*:*:*:*:*","matchCriteriaId":"777EF35C-195A-4784-986D-3811CF1DCF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:32_bit:*:*:*:*:*:*","matchCriteriaId":"F2DD21F1-7A08-4F2D-B8EA-C02771E960FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E593BFF0-650E-4EDB-BF65-C509C8A807C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:32_bit:*:*:*:*:*:*","matchCriteriaId":"01256F83-6E67-409A-B99A-6E27E83DA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C80012AD-8F49-4287-8AEC-C21AC5774CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7CB3CF0C-BECE-4685-A370-96424B0A5703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"}]}]}],"references":[{"url":"http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=37","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434","source":"cve@mitre.org"},{"url":"http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pidgin.im/news/security/index.php?id=37","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3086","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts."},{"lang":"es","value":"Un determinado algoritmo de Ruby on Rails v2.1.0 hasta v2.2.2 y v2.3.x antes de v2.3.4, filtra información de la complejidad de la verificación de firmas Hash en el almacen de cookies, lo que podría permitir crear una firma Hash a atacantes remotos a través de múltiples intentos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B4B121-94BD-4E0F-8860-6239890043B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"63CF211C-683E-4F7D-8C62-05B153AC1960"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"456A2F7E-CC66-48C4-B028-353D2976837A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9B1CDAFA-2AC6-4C46-9E65-0BE9127E770F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9806A84-2160-40EA-9960-AE7756CE4E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"07EC67D4-3D0F-4FF9-8197-71175DCB2723"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D1467583-23E9-4E2B-982D-80A356174BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4DC784C0-5618-4C32-8C17-BE7041656E14"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36600","source":"cve@mitre.org"},{"url":"http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2011/dsa-2260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37427","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2011/dsa-2260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3087","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en nserver.exe en el servidor de IBM Lotus Domino v8.0 para Windows Server 2003, permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de vectores desconocidos, como se ha demostrado en cierto módulo de VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack es una fuente fiable, se ha decidido asignarle un identificador al CVE para poder realizar un seguimiento del mismo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*","matchCriteriaId":"6C3DB9C3-4DAC-4663-9097-95600E13FCDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"31A64C69-D182-4BEC-BA8A-7B405F5B2FC0"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3088","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en ibmdiradm de IBM Tivoli Directory Server (TDS) v6.0 en Linux permite a atacantes remotos tener un impacto sin especificar a través de vectores de ataque desconocidos que provocan una corrupción de la memoria dinámica, tal como se ha demostrado por ciertos módulos en VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, esta información no es explotable. Si embargo, como el autor de VulnDisco Pack es un investigador fiable se ha asignado un identificador CVE a está información con propósitos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1EF905E9-DDA5-4369-AC6C-FD6E2573E667"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3089","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"IBM Tivoli Directory Server (TDS) v6.0 permite a atacantes remotos provocar una denegación de servicio (referencia a puntero nulo y fin del demonio) mediante vectores no especificados, relacionados con (1) el demonio \"ibmslapd.exe\" para Windows y (2) el demonio \"ibmdiradm\" en el servidor de administración para Linux, como se ha demostrado por cierto módulo en VulnDisco Pack Professional v8.11, siendo una vulnerabilidad diferente a CVE-2006-0717. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1EF905E9-DDA5-4369-AC6C-FD6E2573E667"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3090","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en IBM Tivoli Directory Server (TDS) v6.0 para Linux permite a atacantes remotos provocar una denegación de servicio mediante vectores no especificados, como se ha demostrado por cierto módulo en VulnDisco Pack Professional 8.11. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1EF905E9-DDA5-4369-AC6C-FD6E2573E667"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3091","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en el ASUS WL-330gE, tiene impacto y vectores de ataque desconocidos, como se ha demostrado en cierto módulo de VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack es una fuente fiable, se ha decidido asignarle un identificador al CVE para poder realizar un seguimiento del mismo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:asus:asus_wl-330ge:-:*:*:*:*:*:*:*","matchCriteriaId":"A821FCAD-C6B8-412F-A2E0-670FA790C546"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3092","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer en el router wireless ASUS WL-500W tiene un impacto y vectores de ataque desconocidos, como se ha demostrado por cierto módulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:asus:asus_wl-500w:-:*:*:*:*:*:*:*","matchCriteriaId":"C349BDCD-F00C-4A19-BAD0-65A87FAE3A71"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36236","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3093","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en el router inalámbrico ASUS WL-500W tiene impacto y vectores de ataque desconocidos, como se ha demostrado con cierto módulo de VulnDisco Pack Professional 8.11. NOTA: A fecha de 03/09/2009 este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack en un investigador fiable, le hemos asignado un identificador CVE a este problema para poder hacer un seguimiento del mismo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:asus:asus_wl-500w:-:*:*:*:*:*:*:*","matchCriteriaId":"C349BDCD-F00C-4A19-BAD0-65A87FAE3A71"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36236","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3094","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command."},{"lang":"es","value":"La función ap_proxy_ftp_handler en modules/proxy/proxy_ftp.c en el módulo mod_proxy_ftp en Apache HTTP Server v2.0.63  y v2.2.13, permite a servidores FTP remotos provocar una denegación de servicio (referencia a puntero NULL o caída de proceso hijo) a través de una respuesta mal formada al comando EPSV."}],"vendorComments":[{"organization":"Red Hat","comment":"List of the errata fixing this flaw in affected products can be found at:\nhttps://www.redhat.com/security/data/cve/CVE-2009-3094.html","lastModified":"2009-11-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.64","matchCriteriaId":"838655CB-43E7-4BDA-A80C-2314C9870717"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.14","matchCriteriaId":"2979A101-9EC8-4E80-BFFC-7300F94C8453"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36549","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK96858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM09161","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.intevydis.com/blog/?p=59","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/0609","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521619","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8087","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK96858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM09161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.intevydis.com/blog/?p=59","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/0609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3095","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11."},{"lang":"es","value":"El módulo mod_proxy_ftp en el sevidor HTTP Apache, permite a atacantes remotos evitar las restricciones de acceso establecidas y enviar comandos de su elección a un servidor FTP mediante vectores relacionados con la incrustación de estos comandos en una cabecera \"Authorization HTTP\", como se demostró con un determinado módulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 03/09/2009 esta vulnerabilidad no tenía información para su puesta en práctica. Sin embargo, ya que el autor de VulnDisco Pack en un investigador de confianza, se ha asignado un CVE al problema para su seguimiento."}],"vendorComments":[{"organization":"Red Hat","comment":"List of the errata fixing this flaw in affected products can be found at:\nhttps://www.redhat.com/security/data/cve/CVE-2009-3095.html","lastModified":"2009-11-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.64","matchCriteriaId":"838655CB-43E7-4BDA-A80C-2314C9870717"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.14","matchCriteriaId":"2979A101-9EC8-4E80-BFFC-7300F94C8453"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*","matchCriteriaId":"79A35457-EAA3-4BF9-A4DA-B2E414A75A02"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.3","matchCriteriaId":"04C722E3-68B2-4E05-BFE0-1F2139151165"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522209","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8662","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9363","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126998684522511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133355494609819&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3096","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to (1) a \"Remote exploit\" on Windows platforms, and (2) a \"Remote preauthentication exploit\" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en HP Performance Insight v5.3 permiten a usuarios remotos tener un impacto desconocido sobre el sistema, relacionado con (1) un exploit remoto en plataformas Windows, y (2) un exploit de pre-autenticación remota en la plataforma Windows Server 2003 SP2, tal como se ha demostrado por ciertos módulos en VulnDisco Pack Professional 8.11. NOTA: a fecha de 03/09/2009, esta información no es explotable. Si embargo, como el autor de VulnDisco Pack es un investigador fiable se ha asignado un identificador CVE a está información con propósitos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:performance_insight:5.3:*:*:*:*:*:*:*","matchCriteriaId":"65B29A22-B34C-4A34-A67B-E1E51E0545A1"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3097","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obtain sensitive information via unknown vectors, as demonstrated by certain modules in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en HP Performance Insight v5.3 sobre Windows, permite a atacantes obtener información sensible a través de vectores no especificados, como se ha demostrado mediante determinados módulos en VulnDisco Pack Professional v8.11.  NOTA: hasta el 03/09/2009 la vulnerabilidad no tiene ninguna información para ponerla en práctica. Sin embargo, como el autor de VulnDisco Pack es un investigador fiable, el problema ha sido asignado a un CVE para su seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:performance_insight:5.3:*:*:*:*:*:*:*","matchCriteriaId":"65B29A22-B34C-4A34-A67B-E1E51E0545A1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36520","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3098","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a \"Remote exploit,\" as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en el portal en HP Operations Dashboard v2.1 para Windows Server 2003 SP2 permite a atacantes remotos provocar un impacto desconocido, relacionado con un exploit remoto, como se ha demostrado por cierto módulo en VulnDisco Pack Professional v8.11. NOTA: hasta el 3-3-2009, esta divulgación no tenía información para su puesta en práctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_dashboard:2.1:*:*:*:*:*:*:*","matchCriteriaId":"1C861EC3-DD39-423F-9D80-59CBFEBDF258"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3099","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a \"Remote exploit,\" as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872.  NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en HP OpenView Operations Manager v8.1 en Windows Server 2003 SP2 permite a atacantes remotos tener un impacto no determinado, relativo a \"Remote exploit,\" como se demostró por un módulo concreto en VulnDisco Pack Professional v8.11, es una vulnerabilidad distinta a CVE-2007-3872. NOTA: como en 20090903, de esto no se tiene información de la acción. Sin embargo como el autor de VulnDisco Pack es un investigador fiable, se le ha asignado un identificador CVE con el propósito de hacer un seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_manager:8.1:*:*:*:*:*:*:*","matchCriteriaId":"833AEA20-60E8-4F1F-95B9-3520315ABF6D"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36541","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3100","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain Solaris and OpenSolaris patches."},{"lang":"es","value":"xscreensaver (también conocido como Gnome-XScreenSaver) en Sun Solaris v9 y v10, OpenSolaris snv_109 hasta snv_122, y X11 v6.4.1 en Solaris 8 no maneja apropiadamente el soporte Accesibilidad, lo que permite a los usuarios locales causar una denegación de servicio (parada del sistema) cerrando la pantalla y logrando lanzar una venta emergente de Accesibilidad, relativa a una regresión en ciertos parches Solaris y OpenSolaris."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"09908FC0-5C90-4BEE-92A4-D7D67D657468"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"}]}]}],"references":[{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6839026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6839026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3101","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CPU consumption and console hang) by locking the screen, related to a regression in certain Solaris and OpenSolaris patches."},{"lang":"es","value":"xscreensaver (también conocido como  Gnome-XScreenSaver) en Sun Solaris v0, y OpenSolaris snv_109 hasta snv_122, no maneja adecuadamente Trusted Extensions, permitiendo a usuarios locales provocar una denegación de servicio (consumo de CPU y bloqueo de consola) mediante el cierre de pantalla, relacionado con una regresión en ciertos parches para Solaris y OpenSolaris."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6839026","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.opensolaris.org/view_bug.do?bug_id=6839026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266469-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3102","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T18:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_BINPATH variable."},{"lang":"es","value":"La subrutina soHotCopy en socket-server.pl en Zmanda Recovery Manager (ZRM) para  MySQL  v2.x anterior a v2.1.1, permite a atacantes remotos ejecutar comandos de su elección a través de vectores que involucran una variable $MYSQL_BINPATH manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zmanda:zrm_for_my_sql:2.1:*:community:*:*:*:*:*","matchCriteriaId":"AF0F5FC6-EEE9-4515-BE89-72798BCC9644"}]}]}],"references":[{"url":"http://forums.zmanda.com/showthread.php?p=8068","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36429","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://twitter.com/elegerov/statuses/3518763099","source":"cve@mitre.org"},{"url":"http://twitter.com/elegerov/statuses/3547652507","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=51","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52978","source":"cve@mitre.org"},{"url":"http://forums.zmanda.com/showthread.php?p=8068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://twitter.com/elegerov/statuses/3518763099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/elegerov/statuses/3547652507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.intevydis.com/blog/?p=51","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3103","sourceIdentifier":"secure@microsoft.com","published":"2009-09-08T22:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via an & (ampersand) character in a Process ID High header field in a NEGOTIATE PROTOCOL REQUEST packet, which triggers an attempted dereference of an out-of-bounds memory location, aka \"SMBv2 Negotiation Vulnerability.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Error de índice de matriz en la implementación del protocolo SMBv2 en srv2.sys en Windows Vista versión Gold, SP1 y SP2, Windows Server 2008 versión Gold y SP2, y Windows 7 RC, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (bloqueo de sistema) por medio de un carácter & (ampersand) en un campo de encabezado Process ID High en un paquete NEGOTIATE PROTOCOL REQUEST, que activa un intento de desreferencia de una ubicación de memoria fuera de límites, también se conoce como \"SMBv2 Negotiation Vulnerability\" NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*","matchCriteriaId":"9517571A-BC1A-4838-A094-30081A86D36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:sp2:x64:*:*:*:*:*:*","matchCriteriaId":"CD7CA7F0-9C4D-4172-91BD-90A8C86EE337"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.html","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://blog.48bits.com/?p=510","source":"secure@microsoft.com"},{"url":"http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://isc.sans.org/diary.html?storyid=7093","source":"secure@microsoft.com"},{"url":"http://osvdb.org/57799","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/36623","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9594","source":"secure@microsoft.com"},{"url":"http://www.kb.cert.org/vuls/id/135940","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/975497.mspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.reversemode.com/index.php?option=com_content&task=view&id=64&Itemid=1","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/506300/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/archive/1/506327/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/36299","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022848","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050","source":"secure@microsoft.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53090","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489","source":"secure@microsoft.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://blog.48bits.com/?p=510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://isc.sans.org/diary.html?storyid=7093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/135940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/975497.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.reversemode.com/index.php?option=com_content&task=view&id=64&Itemid=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506300/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506327/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3104","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T22:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Symantec Norton AntiVirus 2005 hasta 2008; Norton Internet Security 2005 hasta 2008; AntiVirus Corporate Edition v9.0 anteriores a MR7, v10.0, v10.1 anteriores a MR8, y v10.2 anteriores a MR3; y Client Security v2.0 anteriores a MR7, v3.0, y v3.1 anteriores a MR8; cuando Internet Email Scanning está instalado y habilitado, permite a los atacantes remotos causar una denegación de servicio (consumo CPU y pérdida de conexión persistente) a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:9.0:*:corporate:*:*:*:*:*","matchCriteriaId":"655D99D5-1805-4A6F-A5C1-FB4A8B3A6520"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:9.0:mr6:corporate:*:*:*:*:*","matchCriteriaId":"BF932C81-A605-4A38-8642-A903692860BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*","matchCriteriaId":"EEB639EF-B434-42ED-A162-A2593FA78E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*","matchCriteriaId":"0048A5E9-B07B-44BE-B79C-A37DBE96592A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*","matchCriteriaId":"436B467D-0C3C-44FF-A900-431197CA9033"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*","matchCriteriaId":"09C311A9-7F82-46C1-8A69-49C2890B1CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*","matchCriteriaId":"9ADCB5F2-CCE8-4123-8E7E-EAF4885FD482"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*","matchCriteriaId":"6110CF45-3C3D-4560-A8F3-A5C47CD5265F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*","matchCriteriaId":"D1F6FC33-2929-45A3-9AD1-057456EC366E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*","matchCriteriaId":"084FCB30-F79A-45D0-B310-F3DB20EE3D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*","matchCriteriaId":"B24D11E4-5927-4C3D-BBEB-21DC2990122F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*","matchCriteriaId":"94E10F15-5F41-4B6B-9C42-7ED34E8420C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*","matchCriteriaId":"8F35EA2A-B446-446F-8FDE-1C09D9A73687"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0DDD0E02-306D-4675-B73A-2C2F619CDDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:2.0:mr6:*:*:*:*:*:*","matchCriteriaId":"437DD896-93F5-49E1-AEE6-F7910F087FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"844A6963-F60C-4D48-8445-9056C99201D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*","matchCriteriaId":"6D4A3BB0-C293-47D5-AC66-4AFAEC45EFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*","matchCriteriaId":"120CD307-806A-45A8-9DCF-D23FEE072432"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D24019B-20F0-4B4D-86A5-9409698E6216"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*","matchCriteriaId":"CD25A172-D70C-44E0-9551-F390AF0AD8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*","matchCriteriaId":"8FB89648-5727-4F8F-83B7-3E11CE69EA3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*","matchCriteriaId":"7E5A8C92-95C4-4ECC-AEA4-37F830B890E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*","matchCriteriaId":"589E62A1-067B-4220-9959-03367E5E014F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*","matchCriteriaId":"11477B6E-C4C5-4664-91A7-D253077981F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*","matchCriteriaId":"44843812-35FC-4378-B239-EEC74A0C8A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*","matchCriteriaId":"C988B309-F397-412A-8570-C3823C7FE7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*","matchCriteriaId":"FA990FD5-DF2F-470A-936D-155A36BEDE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*","matchCriteriaId":"06C7CD61-A47B-4521-8C6F-4BB1F4C95614"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*","matchCriteriaId":"C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*","matchCriteriaId":"692ECBCD-AB6B-4965-93F4-BDAD4777C018"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*","matchCriteriaId":"3EF87752-C86D-4C89-9DE9-F874068C89EC"}]}]}],"references":[{"url":"http://osvdb.org/57429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36493","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34670","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2449","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52820","source":"cve@mitre.org"},{"url":"http://osvdb.org/57429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3105","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T22:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR EZEL7UURYC."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS)IBM Lotus iNotes (conocido como Domino Web Access o DWA) anterior v211.241 para Domino v8.0.1 permite a atacantes remotos ejecutar código web o HTML de su elección a través de vectores no especificados, como SPR EZEL7UURYC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:domino_web_access:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D6608F6B-DA78-4CCF-8496-67EA0AB87D84"}]}]}],"references":[{"url":"http://secunia.com/advisories/36626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27016745","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36292","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53086","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27016745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3106","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T22:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended access restrictions and obtain sensitive information via a crafted HTTP HEAD request to a Web Application."},{"lang":"es","value":"El componente Servlet Engine/Web Container en IBM WebSphere Application Server (WAS) v6.0.2 anterior a v6.0.2.37, no implementa adecuadamente las restricciones de seguridad sobre los métodos (1) doGet y (2) doTrace, lo que permite a atacantes remotos evitar las restricciones de acceso intencionadas y obtener información sensible a través de una petición de cabecera (HEAD) HTTP a la Aplicación Web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"714C405D-1E8F-45C1-8A09-5103F0080C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2:*:fp17:*:*:*:*:*","matchCriteriaId":"D592217D-3489-40AE-8338-BF5AA5BBA251"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7F31FD3-8681-4F07-9644-5CC87D512520"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C2604E01-E43E-4882-8896-5E646E850286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"458BAD79-958E-4665-B1F8-0D46E0C57045"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B68EE27-CC4F-4530-9DFE-D94171C45F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AC1A723F-D685-4FE5-8938-5682A2D02155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"810E5AEC-5C35-4962-B9BB-32D66290D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9643B593-DADF-4F57-B41E-541C7F554A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1CEBF289-F630-4386-8F79-5A1BF73BE6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"521DB050-3C94-49BF-8666-6EC2C358AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A98E5593-1534-48E2-8CD5-B2D1CACDDAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB4AB6BD-4439-4100-A3CE-4600AED10B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FD71D5EA-9AF5-422C-810A-D136A5F132F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"375DF4AF-3C7C-47C3-BBB8-AF2B3827AC13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"2C9D6BDA-39E1-4D15-9D86-E212809998FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"91CC2DA7-BAA6-4061-8D0C-81F002DEF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"4F2A78FE-8FA6-4532-9E9E-CF6F860EFAE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"59BEDD70-B6DB-448F-A998-3E8774B0DB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.18:*:*:*:*:*:*:*","matchCriteriaId":"63099EF9-0512-44CD-946A-9B25144E50D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"F200042C-D45E-4CAD-BF6E-E3DADF4D1D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9132BB1-5E2E-4CA6-9B63-027CF2A7229D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.21:*:*:*:*:*:*:*","matchCriteriaId":"D839EDB9-A44F-4F7F-94EF-1A77371D705C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.22:*:*:*:*:*:*:*","matchCriteriaId":"4421929D-C4B9-43C5-BE61-E68484D3B198"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.23:*:*:*:*:*:*:*","matchCriteriaId":"EB622117-C91F-47D2-9832-B7DB340796E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.24:*:*:*:*:*:*:*","matchCriteriaId":"0D65E0CC-FA8C-41FD-B256-47DB0C9757FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"6D87691D-0719-4447-B258-5FA2BD10F11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"A5827DEC-ED8A-48D9-8C27-3B49D720E7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"4D0B1A00-191D-49B2-8841-FB6C48A5D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"BF771E28-65AC-4A94-8A51-4EA77BC3D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"E5594891-E790-44E7-BC9E-0A413B385E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"C286007A-361F-47BB-A099-E041D5CF6E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"CD464F13-942D-40EC-8144-6D23A0AEAA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.33:*:*:*:*:*:*:*","matchCriteriaId":"05BC8C52-DA95-4BF2-AD47-9922741CAAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:6.0.2.35:*:*:*:*:*:*:*","matchCriteriaId":"0D51FEAC-6D35-4DDA-AB7E-6226A27CCA85"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK83258","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53051","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27006876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1PK83258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3107","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service."},{"lang":"es","value":"Symantec Altiris Deployment Solution v6.9.x anterior a v6.9 SP3 Build 430 no restringe el acceso de forma adecuada al puerto de escucha para el servicio DBManager, esto permite a atacantes remotos evitar la autenticación y modificar tareas o la base de datos Altiris mediante una conexión a este servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:N","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.8},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*","matchCriteriaId":"EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*","matchCriteriaId":"4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/36502","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36110","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022779","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3108","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program."},{"lang":"es","value":"Aclient GUI en Symantec Altiris Deployment Solution v6.9.x anterior v6.9 SP3 Build 430 instala un cliente ejecutable con permisos no seguros (todos: control total), que permite a usuarios locales obtener privilegios y reemplazar el ejecutable con un programa troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*","matchCriteriaId":"EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*","matchCriteriaId":"BA744B2A-B81E-4E97-A720-307041478B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:*","matchCriteriaId":"E9301CFC-5925-4249-8439-5E2BBAF06687"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:*","matchCriteriaId":"E4070F9F-F63E-4708-8DA0-339A777383B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:*","matchCriteriaId":"5C9DD5AC-7E4C-4A62-A5B3-B179359635A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36111","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022779","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3109","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending \"alternate commands\" before the handshake is completed."},{"lang":"es","value":"Vulnerabilidad no especificada en el agente AClient en Symantec Altiris Deployment Solution v6.9.x anteriores a 6.9 SP3 Build 430, cuando la autenticación basado en clave está siendo utilizada entre un servidor de desarrollo y un cliente, permite a los atacantes remotos evitar la autenticación y eje3cutar arbitrariamente comandos como SYSTEM suplantando el servidor de desarrollo y enviando \"comandos alternativos\" anteriores a que la negociación esté completada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*","matchCriteriaId":"EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*","matchCriteriaId":"4DC0FB60-BF58-455B-B5D1-97EDF2D6D0E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/36502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36112","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022779","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3110","sourceIdentifier":"cve@mitre.org","published":"2009-09-08T23:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does."},{"lang":"es","value":"Condición de carrera en la funcionalidad de transferencia de ficheros en Symantec Altiris Deployment Solution v6.9.x anterior a v6.9 SP3 Build 430, permite a atacantes remotos leer archivos sensibles y prevenir las actualizaciones de los clientes mediante la conexión a un puerto de transferencia antes de que lo  haga el autentico cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*","matchCriteriaId":"EBD29C7F-B147-4CDE-8AC3-FCA6CA15C464"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*","matchCriteriaId":"BA744B2A-B81E-4E97-A720-307041478B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:*","matchCriteriaId":"E9301CFC-5925-4249-8439-5E2BBAF06687"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:*","matchCriteriaId":"E4070F9F-F63E-4708-8DA0-339A777383B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:*","matchCriteriaId":"5C9DD5AC-7E4C-4A62-A5B3-B179359635A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36113","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022779","source":"cve@mitre.org"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3111","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T18:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967."},{"lang":"es","value":"La función rad_decode FreeRADIUS  anterior a v1.1.8, permite a atacantes remotos provocar una denegación de servicio (caída de radiusd) a través de los atributos zero-length Tunnel-Password. NOTA: esto es una regresión al error relacionado con el CVE-2003-0967."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.7","matchCriteriaId":"F6D6F259-6145-48C9-A81B-5A331F43A76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5AEDD86F-92B9-43EC-80E3-54010E249FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDB110B-4057-4BA4-993A-9DA14888A093"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.4:*:*:*:*:*:*:*","matchCriteriaId":"52C8708B-4D1A-48A7-87DF-DF4B53E66D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.5:*:*:*:*:*:*:*","matchCriteriaId":"0369C1A6-A0FE-4BF8-89F5-5ED384565DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.8:*:*:*:*:*:*:*","matchCriteriaId":"1638CC08-8886-4863-8532-883A8616592F"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"0E4FD4F2-0449-4562-ABF2-927206CB77DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.9:*:*:*:*:*:*:*","matchCriteriaId":"636F3F00-97A5-4497-A6A9-722AFC5BD689"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"EECDFCD7-0189-4C59-842D-C5F9064033A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"1D3EC2A3-5FB6-4D39-B1EA-C8E17AF1F0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AD634946-ED9B-47EB-8D0F-88EA6057D17C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49152208-4DBD-4AF7-BCB3-3D56650899F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90AF846A-F239-4963-B260-7CB48334B8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E95ADE53-BFBE-4B06-A1BF-EF576D567554"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4C48FE12-68CB-462D-B75E-204894325F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1321F1E7-4B14-4B16-91D0-AE9E9951D12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"313EFEC5-1580-4ACE-BB9C-84E3714F2C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5B93BEF0-09C1-4DF8-8761-582DE975F306"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4F927232-6275-497E-BF09-B4DCF19642C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F07F89D7-504B-4892-9840-A3FED5274F5A"}]}]}],"references":[{"url":"http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36509","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/09/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1451.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36263","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00242.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9919","source":"cve@mitre.org"},{"url":"http://github.com/alandekok/freeradius-server/commit/860cad9e02ba344edb0038419e415fe05a9a01f4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/09/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00242.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3112","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.0 allows remote attackers to gain administrator privileges and access the shop backend via a crafted parameter."},{"lang":"es","value":"Vulnerabilidad sin especificar en OXID eShop Professional, Enterprise y Community Edition anterior a v4.1.0, permite a atacantes remotos obtener privilegios de administrador y obtener acceso a la parte de administración de la tienda a través de un parámetro manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:community_edition:*:*:*:*:*","matchCriteriaId":"E44C79B6-3202-4BC2-B9B0-D64D901F9311"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"5C2B1CDA-C7C5-47E7-9546-30654B09EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13895:*:pro_edition:*:*:*:*:*","matchCriteriaId":"87B0B40A-D8E6-4012-ADFF-66D31D7C4527"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:community_edition:*:*:*:*:*","matchCriteriaId":"4D7542E8-0B6F-47D7-BF04-01E1B3BBA3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"8CFC66DD-A1C2-4480-97EA-DD27E9148D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_13934:*:pro_edition:*:*:*:*:*","matchCriteriaId":"C8D6A066-0BF4-4FEA-9954-D296865207AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:community_edition:*:*:*:*:*","matchCriteriaId":"56B2B231-EE68-4256-B1D5-64E2329AE0AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"4C263684-C635-4770-BBD4-2E4353D4D9B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.0_14260:*:pro_edition:*:*:*:*:*","matchCriteriaId":"EF6C39CF-0FF8-4539-AFAB-CACD20C37965"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:community_edition:*:*:*:*:*","matchCriteriaId":"877CDCA5-0224-42F9-AD1F-6C5267EACBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"BBBE0604-2224-4B36-9508-FB2CE995AB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.1_14455:*:pro_edition:*:*:*:*:*","matchCriteriaId":"46DE5EA3-A071-44D8-8E59-06A34F142F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14842:*:community_edition:*:*:*:*:*","matchCriteriaId":"63F3D137-A115-487D-88D0-3CDCF78A9786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14842:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"32DE0A8E-9586-408D-BC78-C6ACF0E5DAD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14842:*:pro_edition:*:*:*:*:*","matchCriteriaId":"5C93FF04-F9A5-4A29-A86E-76C68DF3521D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14967:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"541F6878-696B-4F12-B96F-CA61083C1C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.0.2_14967:*:pro_edition:*:*:*:*:*","matchCriteriaId":"7651E6B7-CC66-48EF-96C3-AD6BE284510A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.1.0_15990:*:enterprise_edition:*:*:*:*:*","matchCriteriaId":"9D0B0694-BD8E-463D-B069-D1A64F4017D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:4.0.1.0_15990:*:pro_edition:*:*:*:*:*","matchCriteriaId":"0E298B3E-64EF-4511-9401-AAB8F8680F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop:44.0.1.0_15990:*:community_edition:*:*:*:*:*","matchCriteriaId":"DF9E8AEC-F335-430F-95C4-B3C65230E73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxidforge:oxid_eshop4.0.0.2_14967:*:community_edition:*:*:*:*:*:*","matchCriteriaId":"55081C31-C15A-4EAF-81CE-7A47C705FAF3"}]}]}],"references":[{"url":"http://www.oxidforge.org/wiki/Security_bulletins/2009-001","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oxidforge.org/wiki/Security_bulletins/2009-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3113","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition before 4.1.2, 3.x, and 2.x allows remote attackers to gain write access to product reviews via a crafted parameter."},{"lang":"es","value":"Vulnerabilidad sin especificar en OXID eShop Professional, Enterprise y Community Edition anterior a v4.1.2, v3.x y 2.x, permite a atacantes remotos obtener privilegios de acceso a las revisiones de productos a través de un parámetro manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"2.7.0.3","matchCriteriaId":"B419C941-7801-40D4-B2BD-BD164714373B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:*:*:professional:*:*:*:*:*","versionEndIncluding":"3.0.4.1","matchCriteriaId":"76797267-F284-43E9-9B4B-76FCF0D5CF8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:community:*:*:*:*:*","matchCriteriaId":"35418237-65BC-4D9A-BBF0-B493AE5D614C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:enterprise:*:*:*:*:*","matchCriteriaId":"F0FFF17B-3157-4EC7-8771-0E80DC660AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13895:*:professional:*:*:*:*:*","matchCriteriaId":"B1DF3C0C-7C52-4CCF-852B-547E967C297D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:community:*:*:*:*:*","matchCriteriaId":"88F9BFE8-1F36-401E-B61E-05094B40DC2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:enterprise:*:*:*:*:*","matchCriteriaId":"78EABFE9-C31D-4010-85ED-2F4695CEEDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_13934:*:professional:*:*:*:*:*","matchCriteriaId":"09F5D5DA-2667-4EC7-BC17-7A5EDD555E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:community:*:*:*:*:*","matchCriteriaId":"EC8BD657-13BE-4AA8-97CF-BACA19D09BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:enterprise:*:*:*:*:*","matchCriteriaId":"F137D711-4793-41D7-8F93-18A9CB5BBE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.0_14260:*:professional:*:*:*:*:*","matchCriteriaId":"D7478417-B8F4-471E-8FDF-E4F0AE201306"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:community:*:*:*:*:*","matchCriteriaId":"06FF6116-54F6-4891-B625-155F4390F20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:enterprise:*:*:*:*:*","matchCriteriaId":"1788B08F-7904-4922-868A-DD3F080D420C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.1_14455:*:professional:*:*:*:*:*","matchCriteriaId":"74A7D3CB-5183-4191-88BC-2D9005078C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:community:*:*:*:*:*","matchCriteriaId":"677CFAC0-64FF-46BE-92EE-4F23EB2A86BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:enterprise:*:*:*:*:*","matchCriteriaId":"34A9F0DE-D85A-4D22-A2C9-6627D1240E26"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14842:*:professional:*:*:*:*:*","matchCriteriaId":"A1CBE1A6-B4B1-4DEA-9BC0-0E341D3EEDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:community:*:*:*:*:*","matchCriteriaId":"8E9A0B9A-0514-4ACE-95AB-7B270C9CDD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:enterprise:*:*:*:*:*","matchCriteriaId":"13FCEFC1-F560-4DB6-B5F7-9B66B72B8E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.0.2_14967:*:professional:*:*:*:*:*","matchCriteriaId":"3906AE67-EF4D-41EF-BF38-3159223FBF30"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:community:*:*:*:*:*","matchCriteriaId":"2D1FDBC8-7451-483E-BE6C-1B95596233C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:enterprise:*:*:*:*:*","matchCriteriaId":"70ABDEB3-A81F-4D63-B2AE-D86C63BC07FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.0.1.0_15990:*:professional:*:*:*:*:*","matchCriteriaId":"279D75B5-88C3-4B6F-986E-244F4135F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.0-17976:*:community:*:*:*:*:*","matchCriteriaId":"09C1716A-0B38-4E1D-9E1A-FD0E5E06A1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.0-17976:*:enterprise:*:*:*:*:*","matchCriteriaId":"E2C078EE-8AE9-4CB5-B5F2-A35C824B99CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.0-17976:*:professional:*:*:*:*:*","matchCriteriaId":"5830331E-8B65-4EDF-BF6C-9907F73C65E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.1-18442:*:professional:*:*:*:*:*","matchCriteriaId":"D51ABC69-676C-410D-8D63-884A614396BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.2-18998:*:community:*:*:*:*:*","matchCriteriaId":"91680B03-7671-4A9F-8366-EB27BFAA64C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.2-18998:*:enterprise:*:*:*:*:*","matchCriteriaId":"D460A617-8ECD-4EFD-A9D8-46A262AB57BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.2-18998:*:professional:*:*:*:*:*","matchCriteriaId":"140C7C21-60D3-4C0A-B964-56F27C53C384"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.3-19918:*:community:*:*:*:*:*","matchCriteriaId":"E72F522A-6901-4B41-9ADD-4F66A495F0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.3-19918:*:enterprise:*:*:*:*:*","matchCriteriaId":"F288FEDB-3AAD-4A4A-8526-9844EE0E5328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oxid:eshop:4.1.3-19918:*:professional:*:*:*:*:*","matchCriteriaId":"32FDCF5F-6AE0-4AD3-833C-159348FBF125"}]}]}],"references":[{"url":"http://www.oxidforge.org/wiki/Security_bulletins/2009-002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oxidforge.org/wiki/Security_bulletins/2009-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3114","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RSS reader widget in IBM Lotus Notes 8.0 and 8.5 saves items from an RSS feed as local HTML documents, which allows remote attackers to execute arbitrary script in Internet Explorer's Local Machine Zone via a crafted feed, aka SPR RGAU7RDJ9K."},{"lang":"es","value":"El widget RSS reader en Lotus Notes de IBM versiones 8.0 y 8.5, guarda elementos de una fuente RSS como documentos HTML locales, lo que permite a los atacantes remotos ejecutar scripts arbitrarios en la Local Machine Zone de Internet Explorer  por medio de un feed diseñado, también se conoce como SPR RGAU7RDJ9K."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*","matchCriteriaId":"0119A252-73B1-490F-9371-06E8FDB8B979"}]}]}],"references":[{"url":"http://secunia.com/advisories/36813","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.scip.ch/?vuldb.4021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506296/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36305","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.scip.ch/?vuldb.4021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506296/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3115","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"SolarWinds TFTP Server v9.2.0.111 y anteriores permite a atacantes remotos provocar una denegación de servicio (parada del servicio) a través de una petición Option Acknowledgement (OACK) manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:tftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.2.0.111","matchCriteriaId":"EEDEAA42-AD4C-4B17-BC26-43EE11F5F0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:tftp_server:5.0.55:*:standard:*:*:*:*:*","matchCriteriaId":"C0E7CE16-41F8-49E4-97B3-81D8A507E03A"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:tftp_server:5.0.60:*:standard:*:*:*:*:*","matchCriteriaId":"CC71B132-C2EE-490E-BF5F-7F4AF7FF49BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:tftp_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"2B81E06B-C2C5-435A-8801-2FAA7A9F6115"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:tftp_server:8.2:*:*:*:*:*:*:*","matchCriteriaId":"614A5ECD-4D35-4B02-9105-06C234AEA7A5"}]}]}],"references":[{"url":"http://secunia.com/advisories/36505","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9547","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36182","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3116","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Uiga Church Portal, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"year\" en una acción \"calendar\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uiga:church_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"A0FE5883-4483-4C83-81F7-2F925C185CF3"}]}]}],"references":[{"url":"http://osvdb.org/57464","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9535","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52893","source":"cve@mitre.org"},{"url":"http://osvdb.org/57464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3117","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en category.php en Snow Hall Silurus System v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"ID\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snowhall:silurus_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C30A6EFA-CE20-44CA-B354-B3DFE5900328"}]}]}],"references":[{"url":"http://secunia.com/advisories/36124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9538","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52904","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3118","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to incorrect input sanitization in base/danneo.function.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en mod/poll/comment.php en el módulo de voto en Danneo CMS v0.5.2  anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"context\", conjuntamente con los parámetros modificados \"comname\" y \"comtitle\" en una acción \"poll\" al index.php. Relacionado con una limpieza incorrecta de los datos de entrada en base/danneo.function.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:danneo:cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.2","matchCriteriaId":"A61C4D44-70DD-400C-82B0-33160DCCB9A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:danneo:cms:0.5:*:*:*:*:*:*:*","matchCriteriaId":"F34DB705-9A63-4B8A-953D-FA046D067412"},{"vulnerable":true,"criteria":"cpe:2.3:a:danneo:cms:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3096EA16-F0C8-4636-9CD1-D97CC05B7528"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2459","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3119","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the view_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en screen.php del módulo Download System mSF (dsmf) para PHP-Fusion, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"view_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x-iweb.ru:download_system_msf:*:*:*:*:*:*:*:*","matchCriteriaId":"76E40DF1-2A0A-4765-953B-4F26CF5AAA47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:php-fusion:php-fusion:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3E18BD-EA3F-4136-A256-A6A74F7066DD"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2469","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3120","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos de sitios cruzados (XSS) en public/index.php en BIGACE Web CMS v2.6, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través del parámetro \"id\". NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigace:bigace:2.6:*:*:*:*:*:*:*","matchCriteriaId":"A4F31B8D-9F25-44C6-8D25-A422F1A3D2A8"}]}]}],"references":[{"url":"http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3121","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el el módulo Ajax Table v5.x para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chris_shattuck:ajaxtable:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"67343C11-7314-4634-9B31-E5D4EFFC08B1"}]}]}],"references":[{"url":"http://drupal.org/node/560298","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36165","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52819","source":"cve@mitre.org"},{"url":"http://drupal.org/node/560298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/57436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3122","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors."},{"lang":"es","value":"El módulo Ajax Table v5.x para Drupal, no realiza un control de acceso, lo que permite a atacantes remotos eliminar archivos y nodos de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chris_shattuck:ajaxtable:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"67343C11-7314-4634-9B31-E5D4EFFC08B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/560298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36497","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57435","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36165","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52818","source":"cve@mitre.org"},{"url":"http://drupal.org/node/560298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3123","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the image parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en gallery/gallery.php en Wap-Motor anterior a 18.1, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"image\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visavi:wap-motor:*:*:*:*:*:*:*:*","versionEndIncluding":"18.0","matchCriteriaId":"4115BA8E-01F9-41C2-AB13-53A76BADACC2"}]}]}],"references":[{"url":"http://osvdb.org/57426","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0908-exploits/wapmotor-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36416","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52810","source":"cve@mitre.org"},{"url":"http://osvdb.org/57426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0908-exploits/wapmotor-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3124","sourceIdentifier":"cve@mitre.org","published":"2009-09-09T22:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. (dot dot) in the tf parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en get_message.cgi in QuarkMail, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"tf\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipmotor:quarkmail:-:*:*:*:*:*:*:*","matchCriteriaId":"1E194B0A-92FE-41B6-9EF1-2C6A2854A7DF"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3125","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T22:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función Bug.search de WebService en Bugzilla v3.3.2 hasta la v3.4.1 y v3.5, permite a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF288A74-070E-4EB4-BB92-7D4D41635DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5B8B31F0-6FCC-4258-865B-B65ECBFAF252"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"7A0CCF96-777F-4CEE-BC04-2974663CF5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*","matchCriteriaId":"D6A71919-DC70-4AE2-9D16-76A177DAE331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA43E47B-F474-4F5B-A91B-9AF99359FE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.5:*:*:*:*:*:*:*","matchCriteriaId":"850ADB66-21F2-49CB-B105-BDA16A286CFC"}]}]}],"references":[{"url":"http://secunia.com/advisories/36718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.0.8/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36371","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.0.8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3126","sourceIdentifier":"secure@microsoft.com","published":"2009-10-14T10:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Integer Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en GDI+ en Microsoft Internet Explorer v6 SP1, Windows XP SP2 y SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 y SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold y SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, y SP2, Office Compatibility Pack para Word, Excel, y PowerPoint 2007 File Formats SP1 y SP2, Expression Web, Expression Web v2, Groove 2007 Gold y SP1, Works v8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 y SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold y SP1, y Forefront Client Security v1.0 permite a atacantes remotos ejecutar código arbitrario a través de una fichero de imagen PNG manipulada, también conocido como \"Vulnerabilidad de desbordamiento de entero GDI+ PNG\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*","matchCriteriaId":"1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0BF6AE15-EAC3-4100-A742-211026C79CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F97EB992-2DC1-4E31-A298-072D8313130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"42A6DF09-B8E1-414D-97E7-453566055279"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EF6C51-17EA-43E4-84BA-08CE705C2D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:x64:*:*:*:*:*","matchCriteriaId":"7ADB520B-B847-4855-95B1-6CEA36D66C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:*:*:*:*:*:*","matchCriteriaId":"93B86335-EF14-4E4F-B192-2A5323A47D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:itanium:*:*:*:*:*","matchCriteriaId":"AA80EDC4-4E84-40BE-86D5-1825AFA85390"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp3:x64:*:*:*:*:*","matchCriteriaId":"0F3BF09C-04D2-4367-BE58-72AD396B4110"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server_reporting_services:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"377777D4-0649-4732-9E38-E4074056C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"FDB0020C-A804-4003-B411-1AC7A6E7193E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:*:*:*:*:*:*:*:*","matchCriteriaId":"2876FC23-21A0-4F56-B0D9-11187173F7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*","matchCriteriaId":"F6761A1C-EC1C-4B00-8126-D58DAB51267A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"69E6B9EB-D3F7-4C57-BF2F-61664E5C2C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"08AF794A-435D-4171-9DBB-EB7FAED96DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"C5C94F2C-786B-45E4-B80A-FC668D917014"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"A4B44889-AEEB-4713-A047-C27B802DB257"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"4A2613CE-C469-43AE-A590-87CE1FAADA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:*:*:*:*:*:*:*","matchCriteriaId":"828A3CB6-EB0A-4CCD-B786-7316564EE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_groove:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F646992A-D3B7-4474-8E0B-65B99086D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"70B39422-2E91-4F2C-8338-8A9292956260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7F9C3119-B118-41E2-9622-FD40C6CC4B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_powerpoint_viewer:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"B55849C3-649E-487B-B702-E2F4B25ECAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*","matchCriteriaId":"1889A686-9565-4958-99BB-2EC24ABDF272"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"5D7B01AE-F457-45C1-8A37-7ED65CAF8638"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:8.5:*:*:*:*:*:*:*","matchCriteriaId":"83EE0CCD-69AD-4705-9BB0-24688F7957F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:platform_sdk:*:*:redistrutable_gdi\\+:*:*:*:*:*","matchCriteriaId":"5E9AC6E2-D6C2-48E1-87C5-86470AC622DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2005:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"86B3074F-1673-4439-8582-F2786D0ED54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:*:redistributable_package:*:*:*:*:*","matchCriteriaId":"28A57C4D-A305-4FF4-B9AC-853CAF7E30AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:report_viewer:2008:sp1:redistributable_package:*:*:*:*:*","matchCriteriaId":"16FD5898-64D7-4F4F-A4C5-5E7BDF340E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:*:*:*:*:*:*:*","matchCriteriaId":"ED077FFC-EBCC-4CD9-BF0E-0286B99C1965"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*","matchCriteriaId":"9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*","matchCriteriaId":"85959AEB-2FE5-4A25-B298-F8223CE260D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*","matchCriteriaId":"F40C30AF-7D70-4FE8-B7D1-F4734F791664"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:forefront_client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"578221F3-4C20-4A3F-A286-5A4680E8785D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E5DE8B76-FA09-4EA2-9535-758C56C4C099"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*","matchCriteriaId":"5E711CC3-9094-4C54-A794-9C7A3E7F4AFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3127","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Cache Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel v2002 SP3 y v2003 SP3, Office v2004 y 2008 para Mac, Open XML File Format Converter para Mac, y Office Excel Viewer v2003 SP3 no analiza adecuadamente el formato de archivo Excel, lo que permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo manipulada, como \"vulnerabilidad de corrupción de memoria caché de Excel\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6146","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3128","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka \"Excel SxView Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel v2002 SP3 y v2003 SP3, y Office Excel Viewer v2003 SP3, no analiza adecuadamente el formato de archivo Excel, permitiendo a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo con un objeto manipulado, como \"vulnerabilidad de corrupción de memoria SxView en Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6474","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3129","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.530","lastModified":"2025-10-22T01:15:34.800","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka \"Excel Featheader Record Memory Corruption Vulnerability.\""},{"lang":"es","value":"Office Excel 2002 SP3, 2003 SP3 y 2007 SP1 y SP2; Office 2004 y 2008 para Mac; Open XML File Format Converter para Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 y SP2; y Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 y SP2, de Microsoft, permite a los atacantes remotos ejecutar código arbitrario por medio de una hoja de cálculo con un registro FEATHEADER que contiene un elemento de tamaño cbHdrData no válido que afecta a un desplazamiento del puntero, también se conoce como \"Excel Featheader Record Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:-:sp1:*:*:*:*:*:*","matchCriteriaId":"8BF0474E-FD34-4CCA-8D94-22DA734AA197"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:-:sp2:*:*:*:*:*:*","matchCriteriaId":"9AEBCD21-942F-44A9-B77E-8FC944F969F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*","matchCriteriaId":"0B191155-67F2-4C6E-BD0C-AF5AF6F04BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*","matchCriteriaId":"421ACF1B-1B21-4416-98ED-BAA5C210EAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:*:*:*:macos:*:*","matchCriteriaId":"DB814642-71A7-4537-9476-A0D5E0BE96DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-11/0080.html","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=832","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://osvdb.org/59860","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/14706","source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36945","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-083","source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6521","source":"secure@microsoft.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-11/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/59860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/14706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3129","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-3130","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka \"Excel Document Parsing Heap Overflow Vulnerability.\""},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Microsoft Office Excel v2002 SP3, Office v2004 y v2008 para Mac, y Open XML File Format Converter para Mac permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo que contiene un formato de archivo binario manipulado (como BIFF)registro que lanza una corrupción de memoria, como \"Vulnerabilidad de desbordamiento de pila en el análisis de documentos Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6137","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3131","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet with a crafted formula embedded in a cell, aka \"Excel Formula Parsing Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel v2002 SP3, v2003 SP3, y 2007 SP1 y SP2; Office v2004 y v2008 para Mac; Open XML File Format Converter para Mac; Office Excel Viewer v2003 SP3; Office Excel Viewer SP1 y SP2; y Office Compatibility Pack para Word, Excel, para PowerPoint v2007 File Formats SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo con una fórmula manipulada embebida en una celda, como \"vulnerabilidad de corrupción de memoria en el análisis de fórmulas de Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6518","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3132","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed formula, related to a \"pointer corruption\" issue, aka \"Excel Index Parsing Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel v2002 SP3, v2003 SP3, y v2007 SP1 y SP2; Office v2004 y v2008 para Mac; Open XML File Format Converter para Mac; Office Excel Viewer v2003 SP3; Office Excel Viewer SP1 y SP2; y Office Compatibility Pack para Word, Excel, y PowerPoint v2007 File Formats SP1 y SP2 permite a atacantes remotos ejecutar código de su elección a através de una hoja de cálculo que contiene una formula manipulado, relacionado con el tema \"corrupción de puntero\", como \"vulnerabilidad de análisis de índices de Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6526","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3133","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to \"loading Excel records,\" aka \"Excel Document Parsing Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel v2002 SP3, Office v2004 y v2008 para Mac, y Open XML File Format Converter para Mac permite a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo que contiene un objeto manipulado que lanza una corrupción de memoria, relacionado con \"carga de registros Excel,\" como \"vulnerabilidad de corrupción de memoria en el análisis de documentos Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6265","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3134","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka \"Excel Field Sanitization Vulnerability.\""},{"lang":"es","value":"Microsoft Office Excel 2002 SP3, v2003 SP3, y v2007 SP1 y SP2; Office v2004 y v2008 para Mac; Open XML File Format Converter para Mac; Office Excel Viewer v2003 SP3; Office Excel Viewer SP1 y SP2; y Office Compatibility Pack para Word, Excel, y PowerPoint v2007 File Formats SP1 y SP2 no analiza adecuadamente el formato de archivo Excel, permitiendo a atacantes remotos ejecutar código de su elección a través de una hoja de cálculo con un objeto manipulada como \"Vulnerabilidad en la limpieza de campo Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"7EB896B5-611E-4457-B438-C6CC937D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:compatibility_pack_word_excel_powerpoint:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"3F9109ED-34C9-45E0-9E8B-FC05054E0F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"896E23B1-AB34-43FF-96F3-BA6ED7F162AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CEBB33CD-CACF-4EB8-8B5F-8E1CB8D7A440"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*","matchCriteriaId":"F703901F-AD7C-42E7-BBFA-529A8C510D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*","matchCriteriaId":"273729C3-56BF-454A-8697-473094EA828F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8E8D1DDD-8996-43A3-9FC7-60539E09CFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:*:sp2:*:*:*:*:*:*","matchCriteriaId":"D65CAA23-16D8-4AE7-8BC4-F73B1C5F9C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"AE2F0B8B-0600-4324-93A9-07DBE97E1BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023157","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5878","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3135","sourceIdentifier":"secure@microsoft.com","published":"2009-11-11T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka \"Microsoft Office Word File Information Memory Corruption Vulnerability.\""},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Office Word 2002 SP3 y 2003 SP3, Office 2004 y 2008 para Mac, Open XML File Format Converter para Mac, Office Word Viewer 2003 SP3 y Office Word Viewer, de Microsoft, permiten a los atacantes remotos ejecutar código arbitrario por medio de un Documento de Word con una estructura de Bloque de Información de Archivo (FIB) malformado, también se conoce como \"Microsoft Office Word File Information Memory Corruption Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*","matchCriteriaId":"9409A9BD-1E9B-49B8-884F-8FE569D8AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*","matchCriteriaId":"5BA91840-371C-4282-9F7F-B393F785D260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"0E99B12F-0DB7-4D0F-AD54-DD906CC8E3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"CDA5243A-BA58-41BC-8FFC-317239E511C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*","matchCriteriaId":"E647A7B3-7A92-4584-BDA7-81752FF59411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_word_viewer:2003:sp3:*:*:*:*:*:*","matchCriteriaId":"B4B148CC-6C58-411B-8503-01F3BE1D5906"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*","matchCriteriaId":"3807A4E4-EB58-47B6-AD98-6ED464DEBA4E"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831","source":"secure@microsoft.com"},{"url":"http://osvdb.org/59857","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/37277","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36950","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023158","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3194","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-068","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6555","source":"secure@microsoft.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-314A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3146","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en search_advance.php en ArticleFriend Script permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro SearchWd. NOTA: la procedencia de esta información es desconocida; los detalles han sido obtenidos únicamente de información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:articlefriend:articlefriend_script:-:*:*:*:*:*:*:*","matchCriteriaId":"3051D0B0-D329-4FC3-A1C2-C97F789B862E"}]}]}],"references":[{"url":"http://osvdb.org/56732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52207","source":"cve@mitre.org"},{"url":"http://osvdb.org/56732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3147","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en showproduct.php de ReviewPost Pro vB3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro date -fecha-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allenthusiast:reviewpost_php_pro:b3:*:*:*:*:*:*:*","matchCriteriaId":"0E8D26B4-A26F-48F4-9E38-9A53E0DDAA81"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/reviewpost-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56615","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/reviewpost-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3148","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) calendar.php, (2) news.php, and (3) links.php; and the (4) assignment_id parameter to assignments.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PortalXP Teacher Edition v1.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro \"id\" a (1) calendar.php, (2) news.php, y (3) links.php; (4) y el parámetro assignment_id  a assignments.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portalxp:portalxp:1.2:*:teacher:*:*:*:*:*","matchCriteriaId":"FB31A994-1773-49FA-9279-1282F511E0F4"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9325","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3149","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the js parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en _css/js.php en Elgg v1.5, cuando magic_quotes_gpc es activado, permite a atacantes remotos leer ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"js\". NOTA: Algunos de los detalles fueron obtenidos de una tercera parte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:curveriderhq:elgg:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F9972881-543F-46F9-BA0F-FACD80F92B70"}]}]}],"references":[{"url":"http://secunia.com/advisories/36147","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9355","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3150","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de Multi Website v1.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Browse -Navegar-, en una acción vote -votar-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:multi-website:multi_website:1.5:*:*:*:*:*:*:*","matchCriteriaId":"CD754924-6DA1-47AA-8C1A-BDE02426F7B0"}]}]}],"references":[{"url":"http://secunia.com/advisories/36107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9344","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3151","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en actions/downloadFile.php de Ultrize TimeSheet v1.2.2, permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro nombre de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrize:timesheet:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"06931148-04EA-4996-B0B7-53D0A590B037"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9307","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52166","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3152","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) bt_code, and (3) b_no parameters in a board view action."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en becommunity/community/index.php en NTSOFT BBS E-Market Professional permite a atacantes remotos inyectar secuencias de comandos arbitrarios web o HTML a través de los parametros (1) page, (2) bt_code, y (3) b_no en una accion \"board view\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nt:bbs_e-market:*:*:professional:*:*:*:*:*","matchCriteriaId":"B35AF236-5EF9-4753-B8E6-38E372155581"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/ntsoft-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/26117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35893","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52157","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/ntsoft-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/26117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3153","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, id parameter to (3) templates/header1.php and (4) mp3/lyrics.php, key parameter to (5) video_listing.php and (6) adult/video_listing.php, and name parameter to (7) mp3/embed.php and (8) mp3/info.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados - XSS - en el motor de búsquedas MP3 x10 v1.6.5, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del (1) parámetro pic_id para includes/video_ad.php, (2) parámetro category para linkvideos_listing.php, parámetro id para (3) templates/header1.php y (4) mp3/lyrics.php, parámetro key para (5) video_listing.php y (6) adult/video_listing.php, y parámetro name para (7) mp3/embed.php y (8) mp3/info.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x10media:mp3_search_engine:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"C7950272-B78B-42FD-86CE-EBD56BB38FDF"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/x10mp3se-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36059","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52165","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/x10mp3se-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3154","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action to index.php, a different vector than CVE-2009-2567."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Almond Classifieds (com_aclassf) v7.5 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"replid\" en la acción manw_repl add_form a index.php, un vector diferente del que aparece en CVE-2009-2567."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:com_aclassf:7.5:*:*:*:*:*:*:*","matchCriteriaId":"7B682F8B-6F2D-4345-9021-64641E31C7F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/35998","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3155","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados - XSS - en gmap.php en el componente Almond Classifieds (com_aclassf) v7.5 para Joomla! permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro addr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:com_aclassf:7.5:*:*:*:*:*:*:*","matchCriteriaId":"7B682F8B-6F2D-4345-9021-64641E31C7F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/35998","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9258","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56561","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3156","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with \"use date tools\" or \"administer content types\" privileges, to inject arbitrary web script or HTML via a \"Content type label\" field."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos de sitios cruzados (XSS) en el sub-modulo Date Tools del modulo Date v6.x anteriores a 6.x-2.3 para Drupal permite a usuarios remotos autenticados con privilegios de \"use date tools\" o \"administer content types\" inyectar secuencias de comandos web o HTML arbitrarios a través del campo \"Content type label\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-1.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"B0415C2C-C9BB-4DD6-B827-C140B2EB08B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"47962BD0-9938-4DF4-AA83-FC36E962EE6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"F3F26B0B-F3C3-45BF-90F8-0F3EAB5F2C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BB57869E-0886-4770-B26B-E1D8542B5C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8C5BDB03-7356-4522-BD20-6322D726EDD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"77038900-2F18-42E7-8E45-7C1A7E3AE1B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"A922CA8F-2AAD-4842-9887-D3D4BCE6868C"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"17BA84A3-E818-482F-9B33-32C709BFE21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"FA0D09CD-F116-4186-9F60-EC44AB22CA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"34871D3D-233B-41C6-8A74-F93A5C640D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"69506981-E5A4-4089-BF94-509A5F005CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"6A78FE81-E49F-4766-BB8F-6253D0B56ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"BFE3BF49-9D2B-4182-BBA9-A491A2F89AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"20844EE0-6771-45FE-8B4E-AA9462488F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:date:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"B4DF0E66-9076-4535-B42E-326A9A6C0D7F"}]}]}],"references":[{"url":"http://drupal.org/node/534332","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534636","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-date-xss-vulnerability","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/36006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56608","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35790","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2103","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52143","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01312.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01339.html","source":"cve@mitre.org"},{"url":"http://drupal.org/node/534332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-date-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/36006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01312.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01339.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3157","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with \"create new content types\" privileges, to inject arbitrary web script or HTML via the title of a content type."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo \"Calendar\" (calendario) en versiones v6.x anteriores a la v6.x-2.2 para Drupal permite a atacantes remotos autenticados, con privilegios \"create new content types\" (crear nuevos tipos de contenido), inyectar codigo de script web o código HTML a través de  el título de un tipo de contenido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"8AF461E1-BAD6-4EA9-999B-28E515B3C9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta:*:*:*:*:*:*","matchCriteriaId":"DF802478-60B4-4EED-880C-320CF940F850"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"48570299-4C69-44E6-B2B6-183A747FE114"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"72B43E12-93F6-4DC0-8A6F-BADEF1C4BF30"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5984E48E-8F38-4A9B-9CFF-10C60DD70053"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E2E1C221-0634-4288-BF67-867F07256362"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"26A44D34-643D-4BC4-99F0-397BCF3BE1EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"3704AAC9-8924-4FBB-A0BA-6216B9F12D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"072BD158-7B67-427F-ACE0-1DBA02C1E525"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"7BBED39D-C109-4BEB-BC23-E8F6FFA46BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"39ADC5A2-E80B-48F4-9D55-7826846B4687"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"31A30A1F-88EA-40B6-88A8-1E14C4B2CDAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:karen_stevenson:calendar:6.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"292DA7F8-A5EE-4359-98DB-481AACD73AD0"}]}]}],"references":[{"url":"http://drupal.org/node/534336","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534652","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-date-xss-vulnerability","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/36012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35790","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/534336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lampsecurity.org/drupal-date-xss-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/36012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3158","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"admin/files.php en simplePHPWeb 0.2 no requiere autenticación, lo que permite a los atacantes remotos desarrollar acciones administrativas no especificadas a través de vectores desconocidos. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carsten_wulff:simplephpweb:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A1DFDEC-C80C-4965-9804-042F559D7E02"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9337","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52215","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3159","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the rriDecompress function in IBM WebSphere MQ 7.0.0.0, 7.0.0.1, and 7.0.0.2 allows remote attackers to cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en la función rriDecompress function de IBM WebSphere MQ v7.0.0.0, v7.0.0.1 v7.0.0.2 permite a atacantes remotos provocar una denegación de servicio a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"985DE0C7-1F86-4128-B177-0A2C84C138EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"896273C9-11F9-45A0-BA46-66F37DFACCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF396289-8409-4FE2-96DB-99818D5680B4"}]}]}],"references":[{"url":"http://secunia.com/advisories/36647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC62450","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36310","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2578","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC62450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3160","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue."},{"lang":"es","value":"IBM WebSphere MQ v6.x desde v6.0.2.7, v7.0.0.0, v7.0.0.1, v7.0.0.2, y v7.0.1.0, cuando \"read ahead\" o \"asynchronous message consumption\" esta activado, permite a atacantes remotos obtener un impacto desconocido a traves de vectores desconocidos, relacionado con la sobrescritura de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6:*:*:*:*:*:*:*","matchCriteriaId":"548ED888-1255-456C-88FD-2884539C157F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D2279B-482A-4CA6-9EF2-C57A95969BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9728448F-E295-4C33-B2F4-17FAAFCDF169"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0F36C644-664C-4758-9762-E808C80AE904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9C670A3F-7BBB-4115-A037-B5E732ABB6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CCD33A5-6567-43CB-909D-D1851ACF4AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D3664585-D0B4-467C-9B6D-4F8E239F7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2216808-BAE9-4034-9618-5EC4CCB80E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6263B9D-A62A-4E41-958A-968F9ACA0CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"19983CDF-4769-4B56-98ED-CE7EE0C1AFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:6.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9377F533-15D0-4F81-B7C1-A84E5346EF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"985DE0C7-1F86-4128-B177-0A2C84C138EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"896273C9-11F9-45A0-BA46-66F37DFACCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF396289-8409-4FE2-96DB-99818D5680B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F6E60ABB-E703-4745-98F3-22609FF70F6F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36310","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2578","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3161","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecified other impact via malformed data."},{"lang":"es","value":"El servidor IBM WebSphere MQ v7.0.0.1, v7.0.0.2, y v7.0.1.0 permite a los atacantes causar una denegación de servicio (compuerta) o posiblemente otro impacto no especificado a través de datos mal formados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"896273C9-11F9-45A0-BA46-66F37DFACCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AF396289-8409-4FE2-96DB-99818D5680B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F6E60ABB-E703-4745-98F3-22609FF70F6F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC62164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36310","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC62164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3162","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T18:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Multi Website v1.5 permite a usuarios remotos inyectar codigo de script web o código HTML a través del parámetro \"search\" (búsqueda) en una acción \"search\" a una URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:multi-website:multi_website:1.5:*:*:*:*:*:*:*","matchCriteriaId":"CD754924-6DA1-47AA-8C1A-BDE02426F7B0"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/multiwebsite-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/multiwebsite-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3163","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T21:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, and (4) silc_client_command_users."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en lib/silcclient/command.c en Secure Internet Live Conferencing (SILC) Toolkit anteriores a v1.1.10, y SILC Client v1.1.8 y anteriores , permite a atacantes remotos ejecutar código arbitrario a través de los especificadores de cadena en el nombre de canal, relacionado con (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, y (4) silc_client_command_users."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libsilc as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2009-09-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.8","matchCriteriaId":"238D6CE9-A76F-4010-B4CD-A27879EE5F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"69F3F92C-7A47-4F14-BB23-74902AACB8E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F0F083A8-E3BD-4434-9F55-93E7D5B8F735"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7036B3C2-0D64-474E-81CF-2013F2F20AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C3471C30-9633-4A9D-A445-8B286C1294E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"75B46F7C-353D-41C7-8F39-7BE3FC2C83EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_client:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F0293F28-E7E8-49B4-AFA6-7A20EAA6F876"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"3F1B96DE-36B1-484B-87FC-6156D8B65F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C06811A1-DF33-4EC9-A2EE-49CE2F4A4EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FE803FA-43C9-4565-A1B6-6890A2275A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9754DA96-8464-412C-8337-51F8DE9884B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A4BC8115-1A4B-4CFD-9431-3C2A231D0237"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"262AEDC5-8FB8-4D15-AC4D-906110718D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F422F232-FDA3-4FB4-AD84-2641EF0A0134"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"301B0871-8F41-483F-B457-488A89428975"},{"vulnerable":true,"criteria":"cpe:2.3:a:silcnet:silc_toolkit:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"3B207531-E87A-49F4-8D49-BF7BB9F791DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/36614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10","source":"cve@mitre.org"},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:235","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://silcnet.org/general/news/news_toolkit.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/08/31/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3164","sourceIdentifier":"cve@mitre.org","published":"2009-09-10T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_122, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames.  NOTE: this issue exists because of an incomplete fix for CVE-2009-2136."},{"lang":"es","value":"Vulnerabilidad sin especificar en la pila de red IPv6 en Sun Solaris v10, y Open Solaris desde snv_01 hasta snv_82 y desde snv_111 hasta snv_122, cuando se utiliza la interfaz de Cassini GigaSwift Ethernet Adapter (aka CE), permite a atacantes remotos producir una denegación de servicio (panic) a través de vectores que incluyen frames jumbo. NOTA: Esta vulnerabilidad existe debido a un arreglo incompleto de CVE-2009-2136."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36616","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-10-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265608-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020829.1-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2556","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-10-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265608-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020829.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3165","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T22:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función de WebService Bug.create en Bugzilla v2.23.4 hasta la v3.0.8, v3.1.1 a v3.2.4, y v3.3.1 hasta la v3.4.1 permite a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C4880D54-CA42-4CCA-B01E-2C125002BF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D4D9F54A-15A7-4899-B695-D9D8B96C4A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BD56D9C0-38C6-4679-8104-1A0B88B71C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF2DF96F-E45E-45AF-85E5-E939F923EC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11C6713F-01ED-4AE9-AE42-89926067E6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7AB5010D-37A3-4B6E-92B6-6F41A3708851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EEB09719-122F-4D25-B680-18029D5D9DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AF585D92-9FAF-4858-A956-68AF77227333"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"CB0F7531-A660-4604-80BD-15B01E2916BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"585F05F2-B294-4218-9209-C487B4D2994B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3246890-8D66-474F-AC9C-BC556426467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7090332F-4CC2-4ADD-AEEC-75238BCA55CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F960BE59-05B1-4438-A854-279612E13A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"170EB43B-9488-4E25-9401-B84DE838247B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2:rc2:*:*:*:*:*:*","matchCriteriaId":"B1ED7682-A315-4F92-9F9F-38290BCC058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"14B5A433-526F-436E-9FCD-B71E661180FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"48EDC5BC-AD4B-4E67-B79C-F44292307AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6FEC62B7-2CAA-4A0D-A9B2-B4A6B105A6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"4B4A7A67-1355-4648-B8C9-3231BED96547"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2962084-F778-4574-8105-8C5A260CCBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF288A74-070E-4EB4-BB92-7D4D41635DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5B8B31F0-6FCC-4258-865B-B65ECBFAF252"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"7A0CCF96-777F-4CEE-BC04-2974663CF5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*","matchCriteriaId":"D6A71919-DC70-4AE2-9D16-76A177DAE331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:rc1:*:*:*:*:*:*","matchCriteriaId":"780896D3-3B49-486F-A136-D3D175C00A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA43E47B-F474-4F5B-A91B-9AF99359FE5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.0.8/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36373","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.0.8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3166","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"token.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login session that occurs immediately after a password reset, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history."},{"lang":"es","value":"token.cgi en Bugzilla v3.4rc1 hasta v3.4.1 coloca una contraseña en una URL al comienzo del inicio de sesión que ocurre inmediatamente después del restablecimiento de la contraseña, lo que permite dependiendo del contexto a atacantes descubrir contraseñas leyendo (1) logs de acceso del servidor web, (2) logs Referer del servidor web, o (3) el historial del navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*","matchCriteriaId":"D6A71919-DC70-4AE2-9D16-76A177DAE331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:rc1:*:*:*:*:*:*","matchCriteriaId":"780896D3-3B49-486F-A136-D3D175C00A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA43E47B-F474-4F5B-A91B-9AF99359FE5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.0.8/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36372","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022902","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508189","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.0.8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3167","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T18:30:03.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en  index.php en Anantasoft Gazelle CMS v1.0, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos leer ficheros de su elección a través de un .. (punto punto) en el parámetro template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"799EE835-86AB-492B-8536-558CBC2504DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/7895","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9425","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33483","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/7895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3168","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request."},{"lang":"es","value":"Mevin Productions Basic PHP Events Lister v2.0 no restringe de forma adecuada el acceso a (1) admin/reset.php y (2) admin/user_add.php, lo que permite a usuarios remotos autenticados resetear las contraseñas administrativas o añadir administradores a través de una petición directa."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mevin:basic_php_events_lister:2.0:*:*:*:*:*:*:*","matchCriteriaId":"32244E1A-2E1F-4AF2-BC45-871DA3772C02"}]}]}],"references":[{"url":"http://secunia.com/advisories/36525","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9558","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/57595","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36198","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2497","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/57595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3169","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no específicas en Hitachi JP1/File Transmission Server/FTP anteriores a v09-00, permite a atacantes remotos ejecutar código de su elección a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:*:*:*:*:*:*:*:*","versionEndIncluding":"08_10","matchCriteriaId":"AD99DDF8-D9AC-4E2D-AB04-214D7B47D8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:01_00:*:*:*:*:*:*:*","matchCriteriaId":"8FBE0448-61B1-49AB-90BD-C37661CB0F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:01_00:*:hpux:*:*:*:*:*","matchCriteriaId":"EF81446A-2D08-46B2-87CF-2EA8BD512BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_00:*:*:*:*:*:*:*","matchCriteriaId":"15F58F18-1941-41B3-9610-7E25FAED171E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_00:*:hpux:*:*:*:*:*","matchCriteriaId":"AAF342C6-FC8A-40FB-91A6-7A0FD44BFED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10:*:*:*:*:*:*:*","matchCriteriaId":"FDC215EB-7A90-413C-A1D9-35F996714586"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"0E46D311-0B79-47BD-BE12-075EC9729B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10:*:hpux:*:*:*:*:*","matchCriteriaId":"73A89817-B1B7-4B0E-AB75-A073751872B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_a:*:*:*:*:*:*:*","matchCriteriaId":"7527DBE0-63CC-4047-A62C-134711014FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_a:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"18933B6C-DDCC-4CFB-B9C9-47CFF416741F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_a:*:hpux:*:*:*:*:*","matchCriteriaId":"202DF268-5756-4FB5-B928-28FF5B8E0BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_b:*:*:*:*:*:*:*","matchCriteriaId":"273E5D41-C86B-439A-A4D3-5F579256DE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_b:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"F9FC56B4-3F85-4C5E-BC9B-9146BD656EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_b:*:hpux:*:*:*:*:*","matchCriteriaId":"4C704103-1A13-4EAC-AAA6-AAC8ECA20F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_c:*:*:*:*:*:*:*","matchCriteriaId":"426002CA-8C3B-41B2-A113-EDAF2C702F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_c:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"C8597815-5459-4900-A47F-3C455209F1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_c:*:hpux:*:*:*:*:*","matchCriteriaId":"D68EF6E7-13E3-444E-9226-379D732AC621"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_d:*:*:*:*:*:*:*","matchCriteriaId":"DF217230-B3DC-4690-B5F3-BDBDB5163307"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_d:*:hpux:*:*:*:*:*","matchCriteriaId":"B8E9A295-40ED-481E-8A45-46A982277EB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_e:*:*:*:*:*:*:*","matchCriteriaId":"4571607C-0617-4906-ABD9-04B80055E42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_e:*:hpux:*:*:*:*:*","matchCriteriaId":"0D6E7413-4FC1-487B-9854-A9215DDB3255"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_f:*:*:*:*:*:*:*","matchCriteriaId":"02188B74-EB40-4F36-A038-CA3363C39DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_f:*:hpux:*:*:*:*:*","matchCriteriaId":"0E7784F1-A565-4D96-B72E-961D453C2738"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_g:*:*:*:*:*:*:*","matchCriteriaId":"556D9B15-C7D4-4F76-A134-07221A550012"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_g:*:hpux:*:*:*:*:*","matchCriteriaId":"0997AB0C-68B4-4EDE-8EAE-E847BA2E40A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_h:*:*:*:*:*:*:*","matchCriteriaId":"61FFC2A7-D782-4981-9E50-C014302E7E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:05_10_h:*:hpux:*:*:*:*:*","matchCriteriaId":"90408D2A-28F5-44F5-8A37-0D32A357A7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:*:*:*:*:*:*","matchCriteriaId":"F288B1A5-C69E-4D66-8D4C-5973730DE9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:aix:*:*:*:*:*","matchCriteriaId":"C21C16FB-811E-41ED-B499-6B6E1CD09649"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"E9E44AAF-80DF-4DCA-808C-1B655050AF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:hpux:*:*:*:*:*","matchCriteriaId":"8E920A63-F7FB-4850-AACD-8C341E2319DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:hpux_english:*:*:*:*:*","matchCriteriaId":"F4C5F1B0-5806-442D-8B80-B06368330BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00:*:solaris:*:*:*:*:*","matchCriteriaId":"6E59B66F-2B8D-4FA3-8432-3592BE10FC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:*:*:*:*:*:*","matchCriteriaId":"A01C34F8-F3A3-4F4D-BBA0-521A49C8C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:aix:*:*:*:*:*","matchCriteriaId":"29C2FEBA-DE8E-4366-9F0C-4633067C7997"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"D2143AD6-3731-488C-BA82-0620D0B85A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_a:*:solaris:*:*:*:*:*","matchCriteriaId":"BA0044E2-69DB-4CF2-B668-409929245101"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:*:*:*:*:*:*","matchCriteriaId":"F6D9BCC1-48DE-4A8B-B875-257633B6DB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:aix:*:*:*:*:*","matchCriteriaId":"8C88ACDD-B947-4D72-8B37-9057D1DFFD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"964ECD84-5323-4178-BE7B-70EB1A4212DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_b:*:solaris:*:*:*:*:*","matchCriteriaId":"D487F7F3-40D6-4154-AD4C-152509DD0460"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:*:*:*:*:*:*","matchCriteriaId":"34EE1745-5D52-43A3-AF42-B37ED64D0709"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:aix:*:*:*:*:*","matchCriteriaId":"70B0E258-5F40-47C2-96E8-D91EF164E711"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"5C12A76F-7CAC-4562-911F-85A1C456C1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_c:*:solaris:*:*:*:*:*","matchCriteriaId":"27958F22-A138-4B30-82FE-8328EB76FB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_d:*:*:*:*:*:*:*","matchCriteriaId":"BA1BF327-3C1C-4E1F-B510-CDB4B204243B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_d:*:aix:*:*:*:*:*","matchCriteriaId":"A55F3117-FFB1-43EA-A390-7A05DC9BF873"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_d:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"464AAE8F-0713-4E76-B150-4606449F97D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_e:*:*:*:*:*:*:*","matchCriteriaId":"41C60045-319E-4C41-8EF0-A47AF5CA5535"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_e:*:aix:*:*:*:*:*","matchCriteriaId":"47AB2A76-2D62-486B-BBF6-45613245DF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_e:*:hiux_we2:*:*:*:*:*","matchCriteriaId":"2FD0CC65-A536-4B3F-8823-65E9484AFA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_f:*:*:*:*:*:*:*","matchCriteriaId":"E2E50726-2775-4E34-A610-D54C6A19EC04"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_00_f:*:aix:*:*:*:*:*","matchCriteriaId":"500954E0-4F6F-4248-8550-401FA0799935"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01:*:*:*:*:*:*:*","matchCriteriaId":"CC25BACE-89C0-4E09-8D22-8DBBE8759C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01:*:aix:*:*:*:*:*","matchCriteriaId":"F18298FB-DD15-41C6-A210-3C2B45380D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01:*:hpux:*:*:*:*:*","matchCriteriaId":"71F9B852-7EF5-4F61-B552-040C81193B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_a:*:*:*:*:*:*:*","matchCriteriaId":"CF63E661-0896-47CD-9394-08A535CFA0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_a:*:aix:*:*:*:*:*","matchCriteriaId":"58A89F21-407F-4F31-A0E3-2F2DAE31E888"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_a:*:hpux:*:*:*:*:*","matchCriteriaId":"184575C8-BE51-410E-8616-62DE5CABD790"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_b:*:*:*:*:*:*:*","matchCriteriaId":"E1193473-45A7-4F64-8C61-BDCABEC8E3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_b:*:aix:*:*:*:*:*","matchCriteriaId":"3AA12B4D-2C3B-4EBF-8F22-C93F9AC6170D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_b:*:hpux:*:*:*:*:*","matchCriteriaId":"B5887BF2-7DEE-40CF-9ED8-ED07DD6457C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_c:*:*:*:*:*:*:*","matchCriteriaId":"B92FA6B5-95F5-4096-9AE2-F444E5DC4842"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_c:*:aix:*:*:*:*:*","matchCriteriaId":"63EA8CF9-A957-4E85-8D61-5D854EC3F7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_c:*:hpux:*:*:*:*:*","matchCriteriaId":"ACB2F505-E6E3-4185-8771-ACC30E3C26C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_d:*:*:*:*:*:*:*","matchCriteriaId":"65E696B5-284C-4049-BCA9-EE8B583B1066"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_d:*:hpux:*:*:*:*:*","matchCriteriaId":"0EEF2942-CE53-4D37-AF26-B33F000B8DC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_e:*:*:*:*:*:*:*","matchCriteriaId":"C3FCE070-ABD8-4732-9695-CF7B44F918E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_01_e:*:hpux:*:*:*:*:*","matchCriteriaId":"230F32E6-D98D-441D-A416-8C41891B9132"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:*:*:*:*:*:*","matchCriteriaId":"F3145838-952A-4D02-86D2-0B69D752BA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:aix:*:*:*:*:*","matchCriteriaId":"3EE965E9-85A1-4119-8B29-9D7B8AB1D6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:hpux:*:*:*:*:*","matchCriteriaId":"BCE46442-A9D0-42A8-BEBC-F45A6E4EAE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02:*:solaris:*:*:*:*:*","matchCriteriaId":"989FB0A1-7223-4577-AB1F-358BA7C577E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:*:*:*:*:*:*","matchCriteriaId":"F02B2A8C-53BD-431C-B37D-AB1A8839F743"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:aix:*:*:*:*:*","matchCriteriaId":"EF8DB303-B7F0-41B2-9675-7EB982BCBB22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:hpux:*:*:*:*:*","matchCriteriaId":"FB3CBE91-5D2A-46E6-8161-AC14267F4249"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_a:*:solaris:*:*:*:*:*","matchCriteriaId":"5C366FDF-12FC-471A-9EFE-601442426B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:*:*:*:*:*:*","matchCriteriaId":"F644F620-E3B3-4226-AAB4-6B4E7898CFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:aix:*:*:*:*:*","matchCriteriaId":"10722BA3-02FD-4496-BB57-593A3CC34366"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:hpux:*:*:*:*:*","matchCriteriaId":"AD179968-7315-4A62-A091-95CA68916355"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_b:*:solaris:*:*:*:*:*","matchCriteriaId":"9D0E4456-81B4-46A3-A1FC-0EB4E8B7A1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:*:*:*:*:*:*","matchCriteriaId":"80C8141E-F14A-4116-9198-6E88E25DD9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:aix:*:*:*:*:*","matchCriteriaId":"764C2EF8-E058-4CEA-96CC-27A4FD951C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:hpux:*:*:*:*:*","matchCriteriaId":"B9055C38-3CAB-45E0-A4AC-0C7032E4239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_c:*:solaris:*:*:*:*:*","matchCriteriaId":"163BCB99-45AF-49F4-AD63-3702D2ECB043"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:*:*:*:*:*:*","matchCriteriaId":"81AD1688-AD56-488A-A1F4-8A6074EDE8CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:aix:*:*:*:*:*","matchCriteriaId":"F4E4CF0E-D11D-4C75-9F47-F688094A7BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:hpux:*:*:*:*:*","matchCriteriaId":"8E3D0406-0BF8-4BA5-9AE7-B677D7B7250A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_d:*:solaris:*:*:*:*:*","matchCriteriaId":"8AF82674-52DD-4895-8384-89119DAF9976"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:*:*:*:*:*:*","matchCriteriaId":"2BAB3E52-93D3-4B03-BB1C-46D79798A91D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:aix:*:*:*:*:*","matchCriteriaId":"A131402C-B591-4F94-B0B2-B5B9F652B4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:hpux:*:*:*:*:*","matchCriteriaId":"68076473-40D4-43B3-A25A-C10594ED8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_e:*:solaris:*:*:*:*:*","matchCriteriaId":"906EF61F-ED87-4EC4-A9DE-2ADFBA68AC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_f:*:*:*:*:*:*:*","matchCriteriaId":"F3229750-6EA2-470B-BB1A-C16E5167AB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_2_f:*:*:*:*:*:*:*","matchCriteriaId":"3EACB301-4AA3-4A63-912F-05A125CEC9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_f:*:aix:*:*:*:*:*","matchCriteriaId":"516D8403-4618-4FE4-B2EF-7158E5E6A421"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_f:*:hpux:*:*:*:*:*","matchCriteriaId":"1E788908-B37E-450F-9F2F-5960A3D9F6B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_g:*:*:*:*:*:*:*","matchCriteriaId":"BE20E759-3863-4E46-997E-8DF5D1E88B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:06_02_g:*:aix:*:*:*:*:*","matchCriteriaId":"FB513ADF-35B3-43E1-8A07-6E209E40C2BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:aix:*:*:*:*:*","matchCriteriaId":"2E4CEFA6-69E5-4802-AD51-67CA3D3B814D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:hpux:*:*:*:*:*","matchCriteriaId":"9D7D645F-DA6E-4801-9181-7447C741C758"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:hpux_english:*:*:*:*:*","matchCriteriaId":"227F52CD-0125-4BE5-818D-D52D75B753BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"B0902AE1-ADED-4D6B-BA70-092BC1347F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:linux:*:*:*:*:*","matchCriteriaId":"D8E33B84-B5AF-4F4A-90CF-3FD68DF5A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"3F388090-6A8C-422D-9EC6-A4F5A0ADAA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00:*:solaris:*:*:*:*:*","matchCriteriaId":"2F981134-414B-41BA-9269-C7C9699C39BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:*:*:*:*:*:*","matchCriteriaId":"0BC0CA73-E65C-4D02-B178-AFC64C2A0579"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:aix:*:*:*:*:*","matchCriteriaId":"EC41F6BB-CDCD-4E42-8387-61782E3B3EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:hpux:*:*:*:*:*","matchCriteriaId":"DEDC97E8-60D7-4331-9C7F-AC0B7ED69A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"74665C79-D477-4BD1-803A-B37222CBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_a:*:solaris:*:*:*:*:*","matchCriteriaId":"9EC4A29B-CD3A-4B3A-B740-2C2B2EE56EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_b:*:*:*:*:*:*:*","matchCriteriaId":"7EC93484-A03D-49BC-BE49-719CC9B24124"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_00_b:*:hpux:*:*:*:*:*","matchCriteriaId":"F33D8922-8EEE-48AD-8E8C-C20F59BEB800"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:*:*:*:*:*:*","matchCriteriaId":"CF3A7BA5-AFCA-4D2C-8DF7-1375C34EA7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:aix:*:*:*:*:*","matchCriteriaId":"308D4AA3-1501-4A42-A467-1A8C307F77AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:hpux:*:*:*:*:*","matchCriteriaId":"EB0E3AAA-F85F-476C-81FE-B4A7F9CBBFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"FC7E6148-2404-4D61-A6D1-A032E537489A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:linux:*:*:*:*:*","matchCriteriaId":"3C2C7DC7-54DF-4437-A149-BF5F2BDD863D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10:*:solaris:*:*:*:*:*","matchCriteriaId":"45D98BFF-7A7F-42CD-8168-107B2D67F12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_:*:*:*:*:*:*:*","matchCriteriaId":"B3CF881F-CD40-4F82-B281-206BC68372BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:*:*:*:*:*:*","matchCriteriaId":"C293E3A6-F0EA-476F-A6E4-45C89C4213B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:aix:*:*:*:*:*","matchCriteriaId":"FCF7ED11-7D09-432B-9421-0FDEB9C66A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:hpux:*:*:*:*:*","matchCriteriaId":"69C5D050-1240-489E-A902-1C4FAC034468"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"76CB079C-DDFC-4EF4-A356-5976C54ECA13"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:linux:*:*:*:*:*","matchCriteriaId":"2E1C8468-70D9-44DB-B549-D382B932098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_a:*:solaris:*:*:*:*:*","matchCriteriaId":"7BD0BE6C-F8AD-4B30-9BAB-937BE8C3AF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:*:*:*:*:*:*","matchCriteriaId":"8E69E6AE-6C98-4865-A648-646639C2D31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:aix:*:*:*:*:*","matchCriteriaId":"CA3887A0-7202-4AD8-88E8-BAE91A00B60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:hpux:*:*:*:*:*","matchCriteriaId":"614868BC-5B90-4D11-B9C3-16FC04E92F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_b:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"894F972F-37C6-4374-8163-3187906C4C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_c:*:*:*:*:*:*:*","matchCriteriaId":"4AEB2F88-5CF0-48A7-A214-3BA00F945F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_10_c:*:hpux:*:*:*:*:*","matchCriteriaId":"14B0A0FD-C241-4459-9B9A-D88C4763382E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11:*:*:*:*:*:*:*","matchCriteriaId":"E8471E11-F0A4-4FFC-B5F8-28DEE544CDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11:*:linux:*:*:*:*:*","matchCriteriaId":"9EAC2573-2A46-450E-9551-70CB69B431D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11_a:*:*:*:*:*:*:*","matchCriteriaId":"6E77194E-E1DD-483F-A6C5-B40B36CC1BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_11_a:*:linux:*:*:*:*:*","matchCriteriaId":"8080D59E-9E0D-40F3-B9A5-885A199C7E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20:*:*:*:*:*:*:*","matchCriteriaId":"342A3909-8330-4895-BB2D-89347E003984"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"BACF8A84-514F-4B6A-A366-1705A135CFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_a:*:*:*:*:*:*:*","matchCriteriaId":"2F9F958C-53DA-441D-8E0B-C3B3C0056587"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_a:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"0D90A7C6-ACDD-4D5E-AB4C-3229F944DED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_b:*:*:*:*:*:*:*","matchCriteriaId":"9F4698F1-23C0-43AF-A746-1A98EB444879"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_20_b:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"0CEA8BD0-B040-4677-AA2C-89EE2F45C3AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:*:*:*:*:*:*","matchCriteriaId":"A4AF7614-EFC9-4155-BDEE-25273EBF4C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:aix:*:*:*:*:*","matchCriteriaId":"6017FEE8-445A-45A4-888C-73F71ED1B98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:hpux:*:*:*:*:*","matchCriteriaId":"309CADB4-AE42-49C6-9D4D-6FEDEA845CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:hpux_english:*:*:*:*:*","matchCriteriaId":"0D11C6D7-7D39-4B4A-935F-1214BE167A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"03EE8AD1-0536-43D7-9B90-CCE30BCBD694"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:linux:*:*:*:*:*","matchCriteriaId":"C963245D-EF66-493F-B2EB-2DD86E0F9336"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50:*:solaris:*:*:*:*:*","matchCriteriaId":"B0CCB26A-662D-43DE-B7C9-B7C7D05C6D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:*:*:*:*:*:*","matchCriteriaId":"EEEE70C5-F0DE-4E5E-BD22-92C336F3595F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:aix:*:*:*:*:*","matchCriteriaId":"D50370E9-9784-4D08-9974-43673DC602B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:hpux:*:*:*:*:*","matchCriteriaId":"0F4EB6B1-E6CA-498C-A4F5-C4AB03B872B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"BF2C37BE-A91E-4B92-A143-00DE4DC9619D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:linux:*:*:*:*:*","matchCriteriaId":"488176F9-3AF4-424B-8784-475AD89FAA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_01:*:solaris:*:*:*:*:*","matchCriteriaId":"3B7BEBA0-0D96-4795-A836-12A9078670D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:*:*:*:*:*:*","matchCriteriaId":"39C5A11E-5014-46E5-83CB-9A207BE5C022"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:aix:*:*:*:*:*","matchCriteriaId":"F810B138-B86C-42AB-8EBA-CACB3B72116D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:hpux:*:*:*:*:*","matchCriteriaId":"17E9CEBA-EFA3-4AF9-AD70-429F8C34AADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"66913023-3DEB-4D88-AAAF-9DE03A5A73CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:linux:*:*:*:*:*","matchCriteriaId":"AB4E8243-F3C5-40A6-BC09-BBC044F30046"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_02:*:solaris:*:*:*:*:*","matchCriteriaId":"CE9D9D8C-32E6-4664-9573-CB2440DB98BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_03:*:*:*:*:*:*:*","matchCriteriaId":"DB786338-49A4-4BF3-AD8D-CCBDD2AFC9D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_03:*:aix:*:*:*:*:*","matchCriteriaId":"DE4DBB57-E897-4F4A-8FE0-76DAD9257EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_04:*:*:*:*:*:*:*","matchCriteriaId":"221210B4-2F87-4227-B041-50F304E32580"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:07_50_04:*:aix:*:*:*:*:*","matchCriteriaId":"CCAAFF95-0349-445A-AFE5-9D51E964CD60"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:*:*:*:*:*:*","matchCriteriaId":"A48055C8-003A-4293-A11D-7350B0304FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:aix:*:*:*:*:*","matchCriteriaId":"F3D0F3EC-2BA3-4583-9BAB-5F4C99FDF09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:hpux:*:*:*:*:*","matchCriteriaId":"C11F5485-16E3-485A-BAD9-AD07FAA6D6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:hpux_english:*:*:*:*:*","matchCriteriaId":"E444521C-FF09-4373-B668-99656EAC1E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:linux:*:*:*:*:*","matchCriteriaId":"9670D972-B0CD-470E-B933-8B2383A74B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"FC08AB71-65D0-4D04-AEDF-0EE9DD7DA379"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00:*:solaris:*:*:*:*:*","matchCriteriaId":"209E781E-0DEA-4873-8D93-991738965E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:*:*:*:*:*:*","matchCriteriaId":"11A1B56C-A019-4098-A214-592D77A0180B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:aix:*:*:*:*:*","matchCriteriaId":"2367C73D-C7B9-43DA-B4C4-B0178B46F639"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:hpux:*:*:*:*:*","matchCriteriaId":"D204C355-3251-49D7-A49D-2E9FC80E6945"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:hpux_english:*:*:*:*:*","matchCriteriaId":"53D98B0A-6089-46A4-8531-13CBCC7BC03D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"FF4B9C90-6C6A-442A-B9D8-AAA6055C87CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:linux:*:*:*:*:*","matchCriteriaId":"C9B2C145-3217-4FF0-B339-B94F891844C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"844F7145-AC3A-43DE-B151-EF972563175A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_01:*:solaris:*:*:*:*:*","matchCriteriaId":"23FB6A44-7090-4CC5-9451-3C387861841C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:*:*:*:*:*:*","matchCriteriaId":"EDFE8E4A-3E79-4425-AD2A-AC03FB46E7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:aix:*:*:*:*:*","matchCriteriaId":"1A12B662-BCCD-472F-B61E-17ACB66754A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:hpux:*:*:*:*:*","matchCriteriaId":"F1C5150E-F572-4950-8C2D-7F9E7F1F503B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"1BDF0556-AD35-4608-9B88-752C2A409E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:linux:*:*:*:*:*","matchCriteriaId":"24592C37-7BAF-4BE4-B015-792C5D7D2F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"C6F9C9D8-0994-4EB5-896F-733F9C6CD885"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_02:*:solaris:*:*:*:*:*","matchCriteriaId":"09E80E47-F13A-4BDF-87A4-1ED750FE1AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:*:*:*:*:*:*","matchCriteriaId":"5CDD3EBD-C2CD-4671-8A0D-ADC37447EB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:aix:*:*:*:*:*","matchCriteriaId":"D89CA486-CEF9-469A-8D87-85FF2F7D6E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:hpux:*:*:*:*:*","matchCriteriaId":"12A5B0AA-69FA-46F7-9AAC-7B86A79C840F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"8EE5ED61-B5A9-40EC-838A-CB8B617179E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:linux:*:*:*:*:*","matchCriteriaId":"2487D5DB-9DFA-4148-B800-49E6C42817DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"699DEE9D-1230-4E4F-925D-4F9D44BFB12F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_03:*:solaris:*:*:*:*:*","matchCriteriaId":"15A35184-D3FC-4CD6-9762-8D10FA0D9123"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:*:*:*:*:*:*","matchCriteriaId":"E3E5C69A-F118-4487-992D-C4CF6B5A0934"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:aix:*:*:*:*:*","matchCriteriaId":"A1F16DB0-F5A9-40BC-83B5-92248636248E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:hpux:*:*:*:*:*","matchCriteriaId":"395076C2-8A86-47BE-966D-2EAAAC2F74AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"919BBE2C-9768-4D5E-903E-CAF327BAD569"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:linux:*:*:*:*:*","matchCriteriaId":"F4CB544D-5E61-40B4-B370-15CB9C00A836"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"E17A95B4-C12E-4080-A259-73576D307CF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_04:*:solaris:*:*:*:*:*","matchCriteriaId":"6848C367-DCE5-4E33-9250-66BD41CF79FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_05:*:*:*:*:*:*:*","matchCriteriaId":"E6A08FCF-C92E-40BC-9EDC-752C5449DC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_00_05:*:hpux:*:*:*:*:*","matchCriteriaId":"784AAEF2-F980-4908-AEBC-8E42AF9CF018"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:*:*:*:*:*:*","matchCriteriaId":"A3F2C866-BBC7-426E-B499-FD8A3A8D5BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:aix:*:*:*:*:*","matchCriteriaId":"2F0A7DB2-D536-4B5D-B756-6F20F286DB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:hpux:*:*:*:*:*","matchCriteriaId":"CBCF0AA0-D9CC-4F89-80E6-5C93BF5E23FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"A5A260A4-5021-4AFB-B5F7-030D153C9C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:linux:*:*:*:*:*","matchCriteriaId":"6513CD3C-C8A3-4EAC-B649-A1A3FA7F1EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"9191BA12-86DC-49EF-8B93-E39DCEFC56B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01:*:solaris:*:*:*:*:*","matchCriteriaId":"41F30472-B564-4071-9CCD-3786296879FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:*:*:*:*:*:*","matchCriteriaId":"719CCDCD-1B6B-4380-9674-DF0B1768AF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:aix:*:*:*:*:*","matchCriteriaId":"68F55638-CE02-47BB-92A6-ABB9AFD64CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:hpux:*:*:*:*:*","matchCriteriaId":"95295734-5B6D-4083-B974-C98F6BACAAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"DB7E0059-D039-48B5-943E-A47BBEE406DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:linux:*:*:*:*:*","matchCriteriaId":"E83748E9-391E-4FFF-913D-B5D82639809B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"38EC3D66-448B-46D6-80C7-264516103973"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_01:*:solaris:*:*:*:*:*","matchCriteriaId":"557DFE66-CE0D-46D9-8B6D-18B641881BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:*:*:*:*:*:*","matchCriteriaId":"8AEE45DA-18F1-4B14-9824-27506BE9712B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:aix:*:*:*:*:*","matchCriteriaId":"D021D98B-1909-4999-9A2F-2A1A7501C4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:hpux:*:*:*:*:*","matchCriteriaId":"FEF0574F-223F-4C00-A6DF-2BEC41CA0D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"F67CF3FE-097D-44EE-9125-F7EC0DAD622C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:linux:*:*:*:*:*","matchCriteriaId":"04667F7A-50E3-4D5D-ACCE-1ED83C7E248C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"D765B86F-7FEA-4ABE-8AF2-7AEFCF3CF1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_02:*:solaris:*:*:*:*:*","matchCriteriaId":"E1AC962C-5AD1-4B30-9157-5571402D0258"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:*:*:*:*:*:*","matchCriteriaId":"7DA650FA-8345-465A-ADE4-EF8A5C8C351D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:aix:*:*:*:*:*","matchCriteriaId":"48892DB9-CBB2-47C6-855F-59A3ECE39ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:hpux:*:*:*:*:*","matchCriteriaId":"A6CF3AF7-B174-45A0-B5ED-4D24385CCBDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"124DCB14-7CE3-414C-B4A9-869478EEB2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:linux:*:*:*:*:*","matchCriteriaId":"EA2B5714-4E5D-4FCC-BADD-6ED4331F3E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:linux_ipf:*:*:*:*:*","matchCriteriaId":"3BC9EF6E-AC69-43FA-A6FE-69685A9A8A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_03:*:solaris:*:*:*:*:*","matchCriteriaId":"0BA1F29C-B73D-47EA-A7AD-275DD034AB21"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_04:*:*:*:*:*:*:*","matchCriteriaId":"0CF680E0-BE3B-4902-BC4C-9930C01ED063"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_04:*:aix:*:*:*:*:*","matchCriteriaId":"CAC2123D-22EA-47EE-9018-C000E6493403"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_01_04:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"A7CCF8AE-36E2-4520-9786-02CB354DCB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:*:*:*:*:*:*","matchCriteriaId":"F6786B05-00BC-4B56-9618-EA18211C0B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:aix:*:*:*:*:*","matchCriteriaId":"1C05C30B-8304-4E3A-9367-6C10AD94E5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:hpux:*:*:*:*:*","matchCriteriaId":"23B0AD10-693F-4C58-BDDE-5CD4588B53BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:hpux_ipf:*:*:*:*:*","matchCriteriaId":"87C7DBAA-E515-43F2-AF69-09F3E5A0B7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:linux:*:*:*:*:*","matchCriteriaId":"E3A05199-9071-4972-A411-75591E653250"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:jp1_file_transmission_server:08_10_01:*:solaris:*:*:*:*:*","matchCriteriaId":"4FD19784-7E66-40D1-92C9-A00580089CF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-015/index.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36307","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-015/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3170","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a (1) .pls or (2) .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en AIMP2 Audio Converter v2.53 (build 330) y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código a través de un argumento File1 largo en una lista de reproducción (1) .pls o (2) .m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aimp:aimp2_audio_converter:*:*:*:*:*:*:*:*","versionEndIncluding":"2.53","matchCriteriaId":"25F4206E-5800-4E16-80FA-FFC59F9CF184"}]}]}],"references":[{"url":"http://secunia.com/advisories/35295","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9561","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2530","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3171","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Anantasoft Gazelle CMS v1.0 y anteriores, permiten a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro (1) user sobre user.php o (2) lookup sobre search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anantasoft:gazelle_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"37EB6459-F0E4-493A-BF5B-606D3E147159"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9425","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2541","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52415","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3172","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Server Set 03-00 through 06-52, and Scheduler Server Set 03-00 through 06-52 has unknown impact and attack vectors related to invalid access rights."},{"lang":"es","value":"Vulnerabilidades no específicas en Hitachi Groupmax Groupware Server v07-00 hasta v07-50-/A, Groupmax Server Set v03-00 hasta v06-52, Groupware Server Set v03-00 hasta v06-52, y Scheduler Server Set v03-00 hasta 06-52 tiene un impacto y vectores de ataque desconocidos, relativo a derechos de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:*:*:*:*:*:*:*:*","matchCriteriaId":"9DBE4E1A-6297-4A28-BBFA-D8C275C46C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07-00-_j:*:*:*:*:*:*:*","matchCriteriaId":"92057239-5161-4905-91D8-0DCE42C541D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07-00-_k:*:*:*:*:*:*:*","matchCriteriaId":"64BF4F72-D600-4705-9EC0-6B2463953C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07-00-_l:*:*:*:*:*:*:*","matchCriteriaId":"8E3D3990-1A4C-426F-8104-A51C9D00A2E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07-10-_f:*:*:*:*:*:*:*","matchCriteriaId":"34C7B902-9522-4B16-AC33-57186EF907E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07-10-_g:*:*:*:*:*:*:*","matchCriteriaId":"8B8F3974-787F-470B-BE77-E904997E3F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07-20_g:*:*:*:*:*:*:*","matchCriteriaId":"452F9BC1-C515-451E-963D-B7DC43B36FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_f:*:*:*:*:*:*:*","matchCriteriaId":"EE64BF64-C49A-41CC-BE1A-8CF4A3666F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_f:*:aix:*:*:*:*:*","matchCriteriaId":"FAA844C9-56E5-449A-AC9F-CC617E5F28DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_g:*:*:*:*:*:*:*","matchCriteriaId":"EB7B537C-170C-49B5-95A2-9878F1FFAA15"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_g:*:aix:*:*:*:*:*","matchCriteriaId":"5F15F76E-B900-429E-862E-34CC8C96EC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_i:*:*:*:*:*:*:*","matchCriteriaId":"E0A66334-FB4B-4715-A379-7FE50659FDA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_i:*:hp-ux:*:*:*:*:*","matchCriteriaId":"0C67283E-04D4-4D5F-8A90-69225244AA20"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:*:*:*:*:*:*","matchCriteriaId":"E87BE121-C8A3-4D89-819E-69B60AD9FB16"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:hp-ux:*:*:*:*:*","matchCriteriaId":"65016992-A3FE-4835-A006-CCB4BFC73384"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:windows:*:*:*:*:*","matchCriteriaId":"188F6E6F-8D13-46B7-AF2C-1A18D1EBE9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_k:*:*:*:*:*:*:*","matchCriteriaId":"38DD41D4-EB35-4439-9249-A45192BA7173"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_l:*:*:*:*:*:*:*","matchCriteriaId":"A64047F0-4401-4ECD-BC45-BDC6009F6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_l:*:windows:*:*:*:*:*","matchCriteriaId":"F20DA526-B4D8-4383-815B-4A219DE643E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_d:*:*:*:*:*:*:*","matchCriteriaId":"561430CF-247B-412E-9259-1AAB220BDA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_d:*:aix:*:*:*:*:*","matchCriteriaId":"D41C58B6-BB81-4935-ACDD-B2F9F986CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_e:*:*:*:*:*:*:*","matchCriteriaId":"5F71C3C8-1740-4E2C-96BD-E27BC121A707"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_e:*:aix:*:*:*:*:*","matchCriteriaId":"4007788F-6FFD-45C9-B234-7B9A5205BC84"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_f:*:*:*:*:*:*:*","matchCriteriaId":"34ADEF69-AFD4-4553-A457-777B24E20B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_f:*:windows:*:*:*:*:*","matchCriteriaId":"300ED48E-7580-4A97-954A-C3A3243682F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:*:*:*:*:*:*","matchCriteriaId":"14C91C9E-535B-4746-AA07-C2B5E4919CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:hp-ux:*:*:*:*:*","matchCriteriaId":"D7FFA518-E68A-4480-992F-C08356812658"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:windows:*:*:*:*:*","matchCriteriaId":"926876A2-265C-49A4-85CD-64BBC4AC85C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_i:*:*:*:*:*:*:*","matchCriteriaId":"1F74F79D-91B9-4999-A2FB-1CD7D7E15B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_i:*:hp-ux:*:*:*:*:*","matchCriteriaId":"1923CB6D-8CB7-4F4F-9E58-301367C7A0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_c:*:*:*:*:*:*:*","matchCriteriaId":"01F46C61-72D0-40A5-9E85-5F2B593CD891"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_c:*:aix:*:*:*:*:*","matchCriteriaId":"B0A4588E-17E6-44B3-9B3A-F88251454608"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_d:*:*:*:*:*:*:*","matchCriteriaId":"94F369A9-D325-4B53-8088-C4317C877489"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_d:*:aix:*:*:*:*:*","matchCriteriaId":"50A3864A-6829-4139-A076-175600CFEB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_e:*:*:*:*:*:*:*","matchCriteriaId":"BEAD7742-F9CA-48D4-803C-6A1A71C7D007"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_e:*:windows:*:*:*:*:*","matchCriteriaId":"969E8DE5-2C20-4141-BB55-D9729748A8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_f:*:*:*:*:*:*:*","matchCriteriaId":"FCC270B0-50A6-421E-AA6E-AEB5D50EB394"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_f:*:hp-ux:*:*:*:*:*","matchCriteriaId":"C412964F-A106-405E-823D-EABD9C4A2CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:*:*:*:*:*:*","matchCriteriaId":"76A9E4A8-0D99-45C0-AACC-6500FD254CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:hp-ux:*:*:*:*:*","matchCriteriaId":"C62FC6ED-0A1F-4F20-B3D1-D02DBE0E0F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:windows:*:*:*:*:*","matchCriteriaId":"6A64F8CC-C020-483B-943E-AC03BAB76CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:*:*:*:*:*:*","matchCriteriaId":"6B237B90-82DD-4269-A360-B9C1BA80CC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:aix:*:*:*:*:*","matchCriteriaId":"4F46E1FE-F777-44A5-BAF9-7BB49EC5470B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:windows:*:*:*:*:*","matchCriteriaId":"E2C0C532-5317-4455-87E6-708009D811B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:*:*:*:*:*:*","matchCriteriaId":"5F23B6C4-E5E2-4BFF-BC2B-68F4D9A2A3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:aix:*:*:*:*:*","matchCriteriaId":"E705A335-F420-4B64-859A-97A2B6D085BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:hp-ux:*:*:*:*:*","matchCriteriaId":"29B7DF20-D862-4D8E-B470-62E681DDE2F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:*:*:*:*:*:*","matchCriteriaId":"EB58FE90-AE7B-4CF0-A9C5-12C590B2096F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:hp-ux:*:*:*:*:*","matchCriteriaId":"BDC0FE3D-82D9-4C5C-8D28-B6939F267F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:windows:*:*:*:*:*","matchCriteriaId":"F9B9C058-E426-4ADB-9BEE-497004BAD98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:*:*:*:*:*:*","matchCriteriaId":"26A289A1-32EE-4B5B-AA4B-37B60D0A1CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:aix:*:*:*:*:*","matchCriteriaId":"19DECC03-B259-45B3-87A5-9C685FF66236"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:hp-ux:*:*:*:*:*","matchCriteriaId":"6500B180-3149-49EA-B316-F74C271656E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:windows:*:*:*:*:*","matchCriteriaId":"0C1E6BDF-BA08-4A9D-A1BA-8FB6BC8815FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:*:*:*:*:*:*","matchCriteriaId":"CCB0B451-78FE-4F2C-A86F-4334A88FA25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:aix:*:*:*:*:*","matchCriteriaId":"B5D0E285-AC9A-4A8B-ABBC-5622EB398751"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:hp-ux:*:*:*:*:*","matchCriteriaId":"93A8B977-1920-42A5-8745-2A26BC5359BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:windows:*:*:*:*:*","matchCriteriaId":"68205969-80E4-49D4-ABB2-8D2FD6B3DFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_scheduler_server_set:03:00:*:*:*:*:*:*","matchCriteriaId":"FA47EEA4-E702-415B-88F8-1B83E9D823DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_scheduler_server_set:06-52:*:*:*:*:*:*:*","matchCriteriaId":"C6A0B8E8-36A4-4AEB-A429-E0DA62D17804"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_server_set:03-00:*:*:*:*:*:*:*","matchCriteriaId":"98FC495A-38B6-4E8D-972D-50434E44C84A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_server_set:06-52:*:*:*:*:*:*:*","matchCriteriaId":"5F8F27AC-20F9-4DDE-AE79-2B5F8BC76458"}]}]}],"references":[{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001930.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-012/index.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36184","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2480","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001930.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-012/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3173","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en admin/add_album.php en The Rat CMS Alpha 2, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con extensión ejecutable, después accediendo al mismo a través de una petición directa al fichero en images/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:theratstudios:the_rat_cms:2:alpha:*:*:*:*:*:*","matchCriteriaId":"484CD1A2-DB95-4355-8179-09B83F38BB85"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9599","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36295","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53087","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3174","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin_lib parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en fonctions_racine.php en OBOphiX v2.7.0 y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro chemin_lib."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:odelao:obophix:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.0","matchCriteriaId":"2773D5E3-2B6C-410C-8D64-D2E2CF1E14D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:odelao:obophix:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E0CD7F92-EE3A-4373-A184-AB5742746FA7"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9600","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3175","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id parameter to (1) view.php, (2) photos.php, and (3) motm.php; and the (4) id parameter to forum_message.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Model Agency Manager PRO (anteriormente Modeling Agency Content Management Script), permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro user_id sobre (1) view.php, (2) photos.php, y (3) motm.php; y a través del parámetro id sobre (4) forum_message.php.."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boldfx:model_agency_manager_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"6314816A-948A-46DE-A20E-0458A41EAC6E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9603","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3176","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.1, \"Novell iPrint Client 4.38 ActiveX exploit.\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"El desbordamiento de búfer en el control ActiveX en Novell iPrint Client versión 4.38 permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de vectores de ataque desconocidos, como es demostrado por un módulo en VulnDisco Pack Professional versión 8.1, \"Novell iPrint Client 4.38 ActiveX exploit \". NOTA: a partir de 09-09-2009, esta divulgación no tiene información procesable. Sin embargo, debido a que el autor del VulnDisco Pack es un investigador confiable, al problema se le asigna un identificador de CVE para fines de rastreo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:iprint:4.38:*:client:*:*:*:*:*","matchCriteriaId":"5DEEE521-1D76-4ED8-951E-058D9311C6BC"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36579","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57922","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36231","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3177","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, (1) \"Kaspersky Online Antivirus Scanner 7.0 exploit (Linux)\" and (2) \"Kaspersky Online Antivirus Scanner 7.0 exploit (Windows).\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no específica en Kaspersky Online Scanner v7.0, tiene un impacto y verctores de ataque desconocidos, como se demostró por un módulo concreto en VulnDisco Pack Professional v8.8, (1) \"Kaspersky Online Antivirus Scanner v7.0 exploit (Linux)\" y (2) \"Kaspersky Online Antivirus Scanner 7.0 exploit (Windows).\" NOTA, como en 20090909, de esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus_scanner:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"1CF0832A-FC08-4C37-8FBB-98AAC24E63BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus_scanner:7.0:*:windows:*:*:*:*:*","matchCriteriaId":"D8EBF8A6-A017-4AFA-B480-40C756198DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_online_scanner:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EEFDD623-1862-439D-9991-275DDD8C6D4C"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36570","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36243","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022831","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3178","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, \"Symantec Altiris Deployment Solution 6.9 DoS.\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no específica en mm.exe en Symantec Altiris Deployment Solution v6.9, permite a atacantes remotos provocar una denegación de servicio a través de vectores de ataque desconocidos, como se demostró por un módulo concreto en VulnDisco Pack Professional v7.18, \" Symantec Altiris Deployment Solution 6.9 DoS\". NOTA, como en 20090909, de esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36587","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36247","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3179","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.17, as identified by (1) \"Symantec Altiris Deployment Solution 6.9 exploit, (2) \"Symantec Altiris Deployment Solution 6.9 exploit (II),\" and (3) \"Symantec Altiris Deployment Solution 6.9 exploit (III).\" NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Symantec Altiris Deployment Solution v6.9, podrían permitir a atacantes remotos ejecutar código de su elección a través de vectores de ataque del lado del cliente, como se demostró por un módulo concreto en VulnDisco Pack Professional v7.17, como se identificó por (1) exploit \"Symantec Altiris Deployment Solution v6.9, (2) exploit \"Symantec Altiris Deployment Solution v6.9 (II),\" y (3) exploit \"Symantec Altiris Deployment Solution v6.9 (III).\" NOTA, como en 20090909, de esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*","matchCriteriaId":"F0002047-0965-4086-A5E6-AEC02200B6CF"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36587","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36247","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3180","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php."},{"lang":"es","value":"Anantasoft Gazelle CMS v1.0 permite a usuarios remotos realizar un restablecimiento de la contraseña a otros usuarios a través de un parámetro user modificado sobre  renew.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"799EE835-86AB-492B-8536-558CBC2504DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3181","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the customizetemplate parameter in a direct request to admin/settemplate.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Anantasoft Gazelle CMS v1.0, permite a atacantes remotos sobrescribir ficheros de su elección a través de un .. (punto punto) en el parámetro customizetemplate en una petición directa sobre admin/settemplate.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"799EE835-86AB-492B-8536-558CBC2504DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9425","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3182","sourceIdentifier":"cve@mitre.org","published":"2009-09-11T20:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en admin/editor/filemanager/browser.html en Anantasoft Gazelle CMS v1.0, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con extensión ejecutable, después accediendo al mismo a través de una petición directa en user/file/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anantasoft:gazelle_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"799EE835-86AB-492B-8536-558CBC2504DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/33686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9433","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3183","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en w en Sun Solaris 8 hasta 10, y OpenSolaris anterior a snv_124, permite a usuarios locales obtener privilegios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:x86:*:*:*:*:*","matchCriteriaId":"B38088AD-968D-44B9-ABCE-4E4D8675A88A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:x86:*:*:*:*:*","matchCriteriaId":"7C385492-0B33-4757-9907-E69C7F709527"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:x86:*:*:*:*:*","matchCriteriaId":"01C7A393-6744-4913-A9CC-75F311D2C59F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:x86:*:*:*:*:*","matchCriteriaId":"F4961C98-1C39-4E6E-A0DB-C48E40F4FF54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:x86:*:*:*:*:*","matchCriteriaId":"4DCF6792-8671-4CC0-99D5-7224E2B751A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:x86:*:*:*:*:*","matchCriteriaId":"FFB7E165-13D6-41D5-B1C3-F96669E54796"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:x86:*:*:*:*:*","matchCriteriaId":"D6011B94-9326-47A7-8292-BA0210401DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:x86:*:*:*:*:*","matchCriteriaId":"9C2C4B0B-9B7A-4861-8CA8-64FC84DF31BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:x86:*:*:*:*:*","matchCriteriaId":"F36C1E99-8CCD-48B7-94A7-8753AD7D6FBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:x86:*:*:*:*:*","matchCriteriaId":"2F57B586-3593-41F9-9D01-0E18F58EB81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*","matchCriteriaId":"45B5E359-6FF2-4029-AB6A-3C906DE6AF1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*","matchCriteriaId":"A5991C3F-29F6-462F-A34E-2446E357A220"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/58110","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53188","source":"cve@mitre.org"},{"url":"http://osvdb.org/58110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3184","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the (1) x and (2) y parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en Piratas del Caribe en E-Gold Game Series permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)x y (2)y."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grapari:e-gold_game_series_pirates_of_the_caribbean:-:*:*:*:*:*:*:*","matchCriteriaId":"2B6C04ED-F191-49DB-A4CD-CCB72AB2DB33"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/egoldgame-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/egoldgame-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3185","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en plugin.php en el plugin v2.0 Crazy Star para Discuz! permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro fmid en una acción view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comsenz:crazy_star_plugin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D640F28-0F1F-4B4C-A6AE-1761F3A97B01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:comsenz:discuz\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"FFEC31FB-8FAC-40EC-A320-1F0AAD6C5878"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9529","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3186","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php."},{"lang":"es","value":"Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en VideoGirls BiZ permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de (1) el parámetro t en forum.php, (2) parámetro profile_name en profile.php, y (3) parámetro p en view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videogirls:videogirls_biz:*:*:*:*:*:*:*:*","matchCriteriaId":"EE358E2F-B3E9-4B56-95DE-268FE472C6EF"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/videogirls-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36480","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36168","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2437","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/videogirls-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3187","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en gamelist.php en Stand Alone Arcade v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro cat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:standalonearcade:saa:1.1:*:*:*:*:*:*:*","matchCriteriaId":"823EB6EE-2D19-4E81-9ACA-FFD337407CCA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/saa-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/saa-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3188","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the file_save parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en save.php en phpSANE v0.5.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro file_save."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_frohlich:phpsane:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A3E13629-8B1F-4B6D-9571-8498EEEB4B80"}]}]}],"references":[{"url":"http://secunia.com/advisories/36476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9533","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2436","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3189","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos de sitios cruzados (XSS) en search.php en DigiOz Guestbook v1.7.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro search_term."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digioz:digioz_guestbook:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CA758418-00B7-42E0-9B60-4D8BA7859427"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/digiozgb-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36489","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2443","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/digiozgb-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3190","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to list.php and (2) cat parameter to rss.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en PAD Site Scripts v3.6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del (1) parámetro search en list.php y (2) parámetro cat en rss.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pad-site-scripts:pad_site_scripts:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F6F08379-EC8B-4FDF-8650-72ECED9DD7A6"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9531","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2434","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3191","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to (1) rss.php and (2) opml.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en PAD Site Scripts v3.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro cat en (1) rss.php y (2) opml.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pad-site-scripts:pad_site_scripts:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F6F08379-EC8B-4FDF-8650-72ECED9DD7A6"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9531","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2434","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3192","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname, (3) realname, (4) homepage, or (5) city parameter in a registration action."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en LinkorCMS v1.2 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través (1) del parámetro searchstr en una acción search; o del (2) nikname, (3) realname, (4) homepage, o (5) del parámetro city en una acción registration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkorcms:linkorcms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"DB139560-ADE9-4CED-A31C-C5A54C1062C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkorcms:linkorcms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"629FB767-1DA1-4F1E-91CC-489DEF7CD2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkorcms:linkorcms:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"0D3BB694-2012-4E7B-92F6-3706188A28A4"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/linkorcms-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36487","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/linkorcms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3193","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a project action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente DigiFolio(com_digifolio) v1.58 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"project\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uwix:com_digifolio:1.52:*:*:*:*:*:*:*","matchCriteriaId":"4755FA33-3ADB-4EE6-8714-611E2C544C1B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9534","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3194","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en index.php en JCE-Tech SearchFeed Script permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jce-tech:searchfeed_script:*:*:*:*:*:*:*:*","matchCriteriaId":"59C4030D-00FB-44D0-9616-AD5AF56E9209"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/searchfeed-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/searchfeed-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3195","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en JCE-Tech Auction RSS Content Script v3.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"id\" a (1) rss.php y (2) search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jce-tech:auction_rss_content_script:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9967A014-F1E5-4B39-88A3-6D3CD5E4251E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/auctionrsscs-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/auctionrsscs-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3196","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en JCE-Tech PHP Video Script, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"key\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jce-tech:php_video_script:*:*:*:*:*:*:*:*","matchCriteriaId":"8B5C2F2A-93CF-4EDF-ABAF-79D78B00495A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/phpvideoyoutube-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36483","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/phpvideoyoutube-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3197","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en JCE-Tech PHP Calendars Script permite a atacantes remotos inyectar secuencias de comandos web o HTML mediante el parámetro de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jce-tech:php_calendars_script:*:*:*:*:*:*:*:*","matchCriteriaId":"23399CF7-CEC0-4C5C-9F53-AAC32762A657"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/phpcalsearch-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36484","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2441","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/phpcalsearch-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3198","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en JCE-Tech Affiliate Master Datafeed Parser Script v2.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jce-tech:affiliate_master_datafeed_parser:2.0:*:*:*:*:*:*:*","matchCriteriaId":"747DFB7F-9572-4337-A944-343AB565396D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/ams-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36491","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/ams-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3199","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T21:30:06.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf."},{"lang":"es","value":"Uebimiau Webmail v3.2.0-2.0 almacena información sensible bajo la raíz del directorio web con control de acceso insuficiente, lo que permite a atacantes remotos descargar una base de datos con nombres de usuarios y hashes de contraseñas a través de un petición directa a system_admin/admin.ucf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uebimiau:uebimiau:3.2.0-2.0:*:*:*:*:*:*:*","matchCriteriaId":"083301CE-D67D-49A9-BD92-196BD627A4E2"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52724","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3200","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command."},{"lang":"es","value":"QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 crea una clave de recuperación no documentada y la almacena en la variable ENCK en memoria flash, permitiendo a usuarios locales saltar el requisito de contraseña y desencriptar el disco duro mediante la lectura de esta variable, desofuscando la clave, y ejecutando un comando cryptsetup luksOpen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-239_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*","matchCriteriaId":"5EE9055C-121F-4DB7-8C31-0C25860EB956"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*","matchCriteriaId":"DBD938AD-4FF6-43F7-BDBA-C751DBE670F9"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*","matchCriteriaId":"5D3675EC-CB39-4D51-9D38-D921A67F5085"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-639_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*","matchCriteriaId":"8C6B1151-66DD-41AC-BCE2-076B72738CF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*","matchCriteriaId":"8BE092C1-DE91-4DE2-90CB-7A3BD2B84B0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*","matchCriteriaId":"EF79B187-CD61-45B6-9D71-3C73D9490970"}]}]}],"references":[{"url":"http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346","source":"cve@mitre.org"},{"url":"http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36793","source":"cve@mitre.org"},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36467","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53391","source":"cve@mitre.org"},{"url":"http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3201","sourceIdentifier":"cve@mitre.org","published":"2009-09-15T23:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (application crash) via a MIDI file (.mid) with a malformed header, which triggers a buffer overflow, a different vulnerability than CVE-2007-4940."},{"lang":"es","value":"Desbordamiento de enteros en Media Player Classic v6.4.9 permite a atacantes remotos asistidos por usuarios provocar una denegación de servicio (cuelgue de aplicación) a través de un archivo MIDI (.mid) con un encabezado mal formado, que provoca un desbordamiento de búfer, una vulnerabilidad diferente que CVE-2007-4940."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_schultz:media_player_classic:6.4.9:*:*:*:*:*:*:*","matchCriteriaId":"15C545CC-97AF-4F01-AB08-8AF3A63F30EC"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36333","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3202","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.php en ULoKI PHP Forum v2.1 permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro term."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uloki:uloki_php_forum:2.1:*:*:*:*:*:*:*","matchCriteriaId":"028193DB-AA18-43BD-97DC-45002AA45372"}]}]}],"references":[{"url":"http://osvdb.org/57176","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0908-exploits/uloki-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52611","source":"cve@mitre.org"},{"url":"http://osvdb.org/57176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0908-exploits/uloki-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3203","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en store.php en AJ Auction Pro OOPD v2.x permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ajsquare:aj_auction_pro-oopd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7FCF81AC-EF99-454A-920A-1B9AB96160F3"}]}]}],"references":[{"url":"http://osvdb.org/57159","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/ajauctionoopd2-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36369","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52527","source":"cve@mitre.org"},{"url":"http://osvdb.org/57159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0908-exploits/ajauctionoopd2-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3204","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) demo.php and (2) forum.php, and the PATH_INFO to (3) include_forum.php."},{"lang":"es","value":"Múltiple vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Stiva Forum v1.0 permite a atacantes remotos ejecutar código web y HTML de su elección a través del parámetro id en (1) demo.php y(2) forum.php, y PATH_INFO en (3) include_forum.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stivaforum:stiva_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"827F106F-A5F3-4F2A-9CCD-0EC19FF9F2DC"}]}]}],"references":[{"url":"http://osvdb.org/57177","source":"cve@mitre.org"},{"url":"http://osvdb.org/57178","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/stivaforum-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36409","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52613","source":"cve@mitre.org"},{"url":"http://osvdb.org/57177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0908-exploits/stivaforum-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3205","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_product action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CBAuthority permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción view_product."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cbauthority:cbauthority:*:*:*:*:*:*:*:*","matchCriteriaId":"C2712D77-EEC9-4490-A0BB-1A520F23E9AA"}]}]}],"references":[{"url":"http://osvdb.org/57161","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/cbauthority-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36345","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52547","source":"cve@mitre.org"},{"url":"http://osvdb.org/57161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0908-exploits/cbauthority-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3206","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, allow remote authenticated users, with \"administer imagecache\" permissions, to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Multiple vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el módulo ImageCache v5.x anterior v5.x-2.5 y v6.x anterior v6.x-2.0-beta10, un módulo para Drupal, permite a usuarios autentificados remotamente, con permisos \"administer imagecache\", inyectar código web y HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E982E5E-D0A8-4A85-9929-BC18D987A24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"9A7BDD21-2283-4985-B003-4F78FBA0099E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"0735BB2F-3945-4211-995E-CD8AD6CFCDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"48AF9DF0-2EF1-4E05-9D36-2CC1E8063ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"B2F5151F-8721-48C2-AFEE-0764DAEB82CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9958DAE2-AA70-4289-8422-800C0B3FC195"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"249681B4-A22C-4B1B-B660-1524331E379E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"C69FBB8C-C8CE-42C6-9EB8-6AD42456A8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"9A345EBF-8312-48B4-9360-9A27B8AD992E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"F451BE63-D858-48D9-934D-9F5552C5F8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:alpha:*:*:*:*:*:*","matchCriteriaId":"FA3329BA-B4B8-4EF1-8EDC-F28BF1AC2483"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:beta:*:*:*:*:*:*","matchCriteriaId":"156B4E1E-BC71-4A82-89C7-8CC0894F495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"204EB521-0F5F-4668-828E-6572C93DDB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0FA39C0A-DAC6-42CD-AF77-EEC3A9FFD569"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC6E5797-038D-4D34-8725-5D597046A031"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"5D678996-D8C7-44DD-9D3B-C80C2DA9C801"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"74201E80-46E1-4C25-8265-05DBB05729F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"403B89A6-005B-4513-A28B-DF7AEA617A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"E8E5509B-FAC1-4C06-A619-0980BFCF0904"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"AD07C419-D7A7-4767-A824-BCFD0CDB40D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"1B0CD381-AE3C-4809-88B9-54719D0E064A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5A24AC64-B2EE-41A4-9FC9-3EE895044881"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"68583881-F8A6-426F-A370-25C5089C74FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"205FF3A1-65C7-441C-A1EF-B7F01C9AAB0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CEB6455A-7D4B-41C7-9AFD-DFF3F5341F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"FBAD2CBB-F518-40EB-8543-92E7CAF2679B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"A112BBAE-2500-47B8-907F-4ED4E9C3D16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"E87457B0-1E46-42AE-90AD-733A23851CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta8:*:*:*:*:*:*","matchCriteriaId":"3B457D48-4F6D-4EE5-BC0C-59C4124CE9CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta9:*:*:*:*:*:*","matchCriteriaId":"80F548C6-1B06-4B0A-8835-BCE38391C45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"2631AA34-AC24-4BF5-9682-D2CC0F32D4DD"}]}]}],"references":[{"url":"http://drupal.org/node/554084","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36412","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52594","source":"cve@mitre.org"},{"url":"http://drupal.org/node/554084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3207","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote attackers to view arbitrary images via a request that specifies an image's filename."},{"lang":"es","value":"El módulo ImageCache v5.x anterior v5.x-2.5 y v6.x anterior v6.x-2.0-beta10, un modulo para Drupal, cuando el sistema de archivos privados es usado, no realiza un control de acceso para imágenes derivadas, lo que permite a atacantes remotos ver imágenes a su elección a través de peticiones que especifican el nombre de la imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E982E5E-D0A8-4A85-9929-BC18D987A24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"9A7BDD21-2283-4985-B003-4F78FBA0099E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"0735BB2F-3945-4211-995E-CD8AD6CFCDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"48AF9DF0-2EF1-4E05-9D36-2CC1E8063ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"B2F5151F-8721-48C2-AFEE-0764DAEB82CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9958DAE2-AA70-4289-8422-800C0B3FC195"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"249681B4-A22C-4B1B-B660-1524331E379E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"C69FBB8C-C8CE-42C6-9EB8-6AD42456A8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"9A345EBF-8312-48B4-9360-9A27B8AD992E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"F451BE63-D858-48D9-934D-9F5552C5F8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:alpha:*:*:*:*:*:*","matchCriteriaId":"FA3329BA-B4B8-4EF1-8EDC-F28BF1AC2483"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:beta:*:*:*:*:*:*","matchCriteriaId":"156B4E1E-BC71-4A82-89C7-8CC0894F495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"204EB521-0F5F-4668-828E-6572C93DDB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"0FA39C0A-DAC6-42CD-AF77-EEC3A9FFD569"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC6E5797-038D-4D34-8725-5D597046A031"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"5D678996-D8C7-44DD-9D3B-C80C2DA9C801"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"74201E80-46E1-4C25-8265-05DBB05729F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"403B89A6-005B-4513-A28B-DF7AEA617A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:5.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"E8E5509B-FAC1-4C06-A619-0980BFCF0904"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"AD07C419-D7A7-4767-A824-BCFD0CDB40D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"1B0CD381-AE3C-4809-88B9-54719D0E064A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5A24AC64-B2EE-41A4-9FC9-3EE895044881"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"68583881-F8A6-426F-A370-25C5089C74FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"205FF3A1-65C7-441C-A1EF-B7F01C9AAB0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CEB6455A-7D4B-41C7-9AFD-DFF3F5341F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"FBAD2CBB-F518-40EB-8543-92E7CAF2679B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"A112BBAE-2500-47B8-907F-4ED4E9C3D16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta7:*:*:*:*:*:*","matchCriteriaId":"E87457B0-1E46-42AE-90AD-733A23851CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta8:*:*:*:*:*:*","matchCriteriaId":"3B457D48-4F6D-4EE5-BC0C-59C4124CE9CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.0:beta9:*:*:*:*:*:*","matchCriteriaId":"80F548C6-1B06-4B0A-8835-BCE38391C45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drewish:imagecache:6.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"2631AA34-AC24-4BF5-9682-D2CC0F32D4DD"}]}]}],"references":[{"url":"http://drupal.org/node/505904","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://drupal.org/node/554084","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554090","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36412","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52595","source":"cve@mitre.org"},{"url":"http://drupal.org/node/505904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://drupal.org/node/554084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3208","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en phpfreeBB v1.0 permite a atacantes remotos ejecutar comandos SQL a través de (1) parámetro id en permalink.php y (2) parámetro year en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prakashatma_mishra:phpfreebb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"314F0615-4B9D-4F08-A1FD-312CB67F767F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52550","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3209","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en remove.php en PHP eMail Manager v3.3.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raizlabs:php_email_manager:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C7A4B219-21F0-403D-A290-ABB47C9C2926"}]}]}],"references":[{"url":"http://osvdb.org/57171","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/phpem-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52548","source":"cve@mitre.org"},{"url":"http://osvdb.org/57171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0908-exploits/phpem-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3210","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en el módulo Print (también conocido como Printer, versión para e-mail y PDF) v5.x anterior a v5.x-4.8 y v6.x anterior a v6.x-1.8 para Drupal, permite a usuarios autenticados inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"2893881B-C60B-4786-9C96-642840809B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"FF7F4CFF-4DE4-44CC-A1AF-8A1AEB8E6A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"FF1CFCAA-B1C3-4786-8DDA-692F5469A559"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"2301487B-942B-4F0B-9E45-05AC26902DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"A355B60A-196D-450D-9234-509C2977575A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.4:*:*:*:*:*:*:*","matchCriteriaId":"E3504933-2428-4F1B-B9A1-4883CD7246FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.5:*:*:*:*:*:*:*","matchCriteriaId":"E950A2A1-2A92-4A26-88CE-1806BE758B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.6:*:*:*:*:*:*:*","matchCriteriaId":"751FE639-78A3-4B8A-B5BC-478C4C9E7411"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.7:*:*:*:*:*:*:*","matchCriteriaId":"ABBDB896-8B17-4A6B-A36D-57A39ED12C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-3.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A4C15189-5BA1-413F-9B61-D8F41DCF4686"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"929EF949-E619-4663-8E5A-32DC1FB759F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"E46041FE-A508-42CE-A944-08A2590DFEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"026E16DA-B5ED-4295-8A90-91C4039BB4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"570C4DBC-86CE-42AF-81D6-9D8A4C0E9233"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.4:*:*:*:*:*:*:*","matchCriteriaId":"871017DE-E12E-495D-A208-07EE6CCDF4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.5:*:*:*:*:*:*:*","matchCriteriaId":"6F9EAB0F-606A-4D87-A704-56A7A54CAA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.6:*:*:*:*:*:*:*","matchCriteriaId":"DBBC7558-7A67-41C0-BDDC-ED32645F387B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.7:*:*:*:*:*:*:*","matchCriteriaId":"605EC83A-E689-4D45-AB0E-1B8B3A7D9CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D0A17598-3ED7-4B2A-B4F8-0B7425CFF6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"86C1B4CE-7783-4A6F-9FED-82B3A70DA5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B841C77C-FEF8-4253-9887-9CE4942431DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"15C9FE51-FD7F-472F-8C44-EA20578244CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D11FD1BF-ABD6-4D38-96C8-2E32CBD9473D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5F787E18-3790-4F33-928F-59E2398FB76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"A156B352-D91A-4408-8240-88EAACA55B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc8:*:*:*:*:*:*","matchCriteriaId":"8BC82E86-F2AB-4FF8-98C5-1A35D467C358"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc9:*:*:*:*:*:*","matchCriteriaId":"EC8E8F4D-D9FF-4A9D-9861-E1C5A9C6DBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"938C1B6D-7449-49C9-853F-2AD939E784B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"15BA3E26-5B28-4DFD-8B6B-24119139B274"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"FD23BBD1-7550-4D9B-9A88-12B2E5F20189"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"E1FD0BC0-AEC5-4DD5-986A-F6B0CADD9368"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"A819F021-0530-4AE3-802F-E73C6669D607"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"1C8453CB-2E8E-4108-81C2-A7B2B61C44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"99B1C895-6087-4D83-9347-760CCEB1E41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"290B7085-8CC9-494E-85F7-28BE1A32E975"}]}]}],"references":[{"url":"http://drupal.org/node/554326","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554328","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554448","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52593","source":"cve@mitre.org"},{"url":"http://drupal.org/node/554326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/554448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3211","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the options[style_dir] parameter to the default URI."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en VivaPrograms Infinity Script v2.x.x, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro options[style_dir] a la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dimofinf:infinity_script:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9CBCA4B4-962A-4EFF-AD2E-1AFD4525144F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52555","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3212","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en VivaPrograms Infinity Script v2.x.x, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo \"username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dimofinf:infinity_script:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9CBCA4B4-962A-4EFF-AD2E-1AFD4525144F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52559","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3213","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .mp3 file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en broid 1.0 Beta 3a, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código de su elección a través de una cadena larga en un archivo .mp3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broid:broid:1.0:beta_3a:*:*:*:*:*:*","matchCriteriaId":"EE5EF20A-9FE4-4D77-B551-CC95E9FFFCD6"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/broid-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52532","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/broid-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3214","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Photodex ProShow Gold v4.0.2549 permite a atacantes remotos ejecutar código de su elección a través de ficheros crafted Slideshow project (.psh), referidos a los campos (1) cell[n].images[m].image y (2) cell[n].sound.file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photodex:proshow_gold:4.0.2549:*:*:*:*:*:*:*","matchCriteriaId":"DF768F11-CBAE-433F-9A7A-DBA277EC05CE"}]}]}],"references":[{"url":"http://blog.bkis.com/?p=737","source":"cve@mitre.org"},{"url":"http://osvdb.org/57226","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36357","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505957/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52606","source":"cve@mitre.org"},{"url":"http://blog.bkis.com/?p=737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/505957/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3215","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en componentes IXXO Cart Standalone anterior v3.9.6.1, y IXXO Cart para Joomla! v1.0.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro parent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-shop-system:ixxo_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"F37976DD-34B9-4F70-8EA3-BB36212200FF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9709F901-EDD2-4369-89F0-8AF3A63655E5"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CC268591-FDFD-42A2-887F-4F1639CAB73C"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"89946AA1-0694-44A5-962E-ED36B4BFCE9C"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6024ABB5-0CB7-4874-8758-CC6FBF3073D7"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"05C21464-3FD4-4528-A512-7C0DE70E331C"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"663EE640-2BE7-42FC-B848-7379C6DADA60"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A0B64E85-CA80-46A6-9E62-B1F28CBED5CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D4007FCB-589A-413D-8009-64404926CA7B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F6B0B037-5E62-4069-AF35-F05A777E05D8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"314E12E1-107E-4AB3-8092-9F6C2C5FA11B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"65860314-7B34-46B4-BA29-1A8EA715BF00"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A235591C-1860-4877-8B61-7390EE359E12"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B2D9FB89-D522-410F-8E68-763E9931E955"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:*","matchCriteriaId":"A4E9C4B0-5B4B-4103-AA4E-419E08C22306"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2017D307-89B3-4D94-A266-C7D8D45960A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"302D47E2-CFA8-438C-82DB-335319454448"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"94B01AD8-2B71-4A6A-8932-E61B0FE54246"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1058A361-4B10-4D7C-B789-64A38FE7E201"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*","matchCriteriaId":"D548B3C9-483F-492C-A6BB-694B7217FEE8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9813E813-2983-4471-9E56-6F254810A66B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A4F4F9E7-BA44-4235-A246-DB6C432C3873"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"495BD724-45BE-4214-B120-3A83BD9AD11B"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCDBF4D-A797-4828-A084-8C775FA94BDF"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BB1B7CF2-B717-4F37-A923-0E188FF3C47F"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBA35EF1-1F8C-4AEA-89A0-3C1DD2DFBFE8"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3333C204-A022-4B53-B61F-3C5601F21FC0"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F2752717-AA95-4398-8091-24FD5925C4F7"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F7B3B3FB-E67D-4D9A-BE01-855FA2545772"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B29D3E39-7B43-4D19-B39F-2EB56E30F737"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5F155C3B-AAF5-4393-A964-E655113D84DE"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D1DA8EEE-F091-49D0-9F9D-4C83574B6A36"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"731CC868-70FC-44A0-8CC2-D0A4AC5CE094"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*","matchCriteriaId":"FDFF92A2-FEBD-49F6-8C41-3DF2D9AB56C0"},{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"04931295-5046-4B39-ABA7-CFBC47500F5A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-shop-system:ixxo_cart:*:*:standalone:*:*:*:*:*","versionEndIncluding":"3.9.6.0","matchCriteriaId":"FD489728-7E9F-43DE-B179-B97741C2109B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505266/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35810","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/36009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505266/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2009-3216","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the show parameter to the admin module, reachable through index.php; or (2) the module parameter to index.php."},{"lang":"es","value":"Multiples vulnerabilidades de salto de directorio en iWiccle v.1.01, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos leer archivos a su elección  a través de un ... (punto a punto) en (1)el parámetro show en el módulo admin, accesible a través de index.php; o (2) parámetro module en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wiccle:iwiccle:1.01:*:*:*:*:*:*:*","matchCriteriaId":"2B91FDDC-0572-4A6F-98BA-4E559155FAC8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9266","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3217","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo de administración en iWiccle v1.01 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro member_id en una acción edit_user en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wiccle:iwiccle:1.01:*:*:*:*:*:*:*","matchCriteriaId":"2B91FDDC-0572-4A6F-98BA-4E559155FAC8"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9266","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3218","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in control/login.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en control/login.php en AR Web Content Manager (AWCM) v2.1, cuando magic_quotes_gpc es disactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the-ghost:ar_web_content_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"587C48D9-A6C5-41A5-8180-5C3747286698"}]}]}],"references":[{"url":"http://osvdb.org/56338","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51980","source":"cve@mitre.org"},{"url":"http://osvdb.org/56338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3219","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the a parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en a.php en AR Web Content Manager (AWCM) v2.1, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de ... (punto a punto) en el parámetro a."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the-ghost:ar_web_content_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"587C48D9-A6C5-41A5-8180-5C3747286698"}]}]}],"references":[{"url":"http://osvdb.org/56336","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51979","source":"cve@mitre.org"},{"url":"http://osvdb.org/56336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3220","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en All In One Control Panel (AIOCP) v1.4.001 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tecnick:aiocp:1.4.001:*:*:*:*:*:*:*","matchCriteriaId":"2AC7DB67-3FCE-4EF7-81EA-A90FE4B61B21"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/505250/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35811","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505250/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3221","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Audio Lib Player (ALP) permite a atacantes remotos ejecutar código de su elección a través de la URL larga en un archivo de reproducción de lista .m3u"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basicunivers.free.fr:audio_lib_player:*:*:*:*:*:*:*:*","matchCriteriaId":"712FF30A-7B4A-45B5-8880-40F07CA4B1F8"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/alp-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35867","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56047","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51873","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/alp-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3222","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in FreeWebScriptz Honest Traffic (FWSHT) 1.x allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en FreeWebScriptz Honest Traffic (FWSHT) v1.x permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebscriptz:honest_traffic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61269ED6-9E39-49F5-B295-6DDE355536CA"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/honesttraffic-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56036","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51821","source":"cve@mitre.org"},{"url":"https://security-shell.ws/showthread.php?t=38085","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://packetstormsecurity.org/0907-exploits/honesttraffic-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-shell.ws/showthread.php?t=38085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-3223","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ppc-add-keywords.php en Inout Adserver permite a usuarios autentificados remotamente ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inoutscripts:inout_adserver:*:*:*:*:*:*:*:*","matchCriteriaId":"8D8C0CFC-27BB-42A3-B89B-5C859B677777"}]}]}],"references":[{"url":"http://secunia.com/advisories/35975","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9271","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2028","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3224","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Super Mod System, cuando es usado 68 Classifieds v3.1 Core System, permite a atacantes remotos ejecutar comandos SQL a través del parámetro s."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:68classifieds:68_classifieds:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A9F2A809-30D7-4651-AC58-96D4B66EA5D2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:classified-software:super_mod_system:*:*:*:*:*:*:*:*","matchCriteriaId":"84D206C9-B5A5-4FCF-B73B-BE0DD31D8DEC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35973","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9270","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2027","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3225","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Multiple vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en AlmondSoft Almond Classifieds Wap and Pro, y probablemente en Almond Affiliate Network Classifieds permite a atacantes remotos ejecutar código web o HTML de su elección a través del (1)parámetro pthe page en una acción de busqueda en index.php o (2) el parámetro addr  en gmap.php. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:almond_classifieds:*:*:pro:*:*:*:*:*","matchCriteriaId":"E89433A5-C49A-4A53-90CB-096CFF091379"},{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:almond_classifieds:*:*:wap:*:*:*:*:*","matchCriteriaId":"19CC3E34-2ED7-4766-B3E8-E871246A97BB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3226","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en AlmondSoft Almond Classifieds Ads Enterprise y Almond Affiliate Network Classifieds permite a atacantes remotos ejecutar comandos SQL de su elección  a través del parámetro replid en una acción manw_repl add_form. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:affiliate_network_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"3F745A40-D1C4-49FC-B7BA-A813B3B6808C"},{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:almond_classifieds:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"79AF613E-4185-488B-85AB-BE039DA1669E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3227","sourceIdentifier":"cve@mitre.org","published":"2009-09-16T19:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en AlmondSoft Almond Classifieds Ads Enterprise y Almond Affiliate Network Classifieds permite a atacantes remotos inyectar código web y HTML de su elección a través del parámetro city en una acción de busqueda. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:affiliate_network_classifieds:*:*:*:*:*:*:*:*","matchCriteriaId":"3F745A40-D1C4-49FC-B7BA-A813B3B6808C"},{"vulnerable":true,"criteria":"cpe:2.3:a:almondsoft:almond_classifieds:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"79AF613E-4185-488B-85AB-BE039DA1669E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3228","sourceIdentifier":"cve@mitre.org","published":"2009-10-19T20:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors."},{"lang":"es","value":"La función tc_fill_tclass en net/sched/sch_api.c del subsistema tc en el kernel de Linux v2.4.x anteriores a la v2.4.37.6 y v2.6.x anteriores a la v2.6.31-rc9 no inicializa un determinado miembro de la estructura (1) tcm__pad1 y (2) tcm__pad2, lo que permite a atacantes locales obtener información confidencial de la memoria del kernel a través de vectores de ataque sin especificar."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1522.html , https://rhn.redhat.com/errata/RHSA-2009-1548 and https://rhn.redhat.com/errata/RHSA-2009-1540 respectively.\n\nIt has been rated as having moderate security impact and is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/\n","lastModified":"2009-11-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-909"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"2.4.37.6","matchCriteriaId":"9E1FDE50-BE6F-44A9-9A66-C8B0EDB10923"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.31","matchCriteriaId":"EDDD2288-DF54-44E9-A60B-A7FFDCCC694F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:-:*:*:*:*:*:*","matchCriteriaId":"2887290A-1B43-4DB9-A9D0-B0B56CD78E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://patchwork.ozlabs.org/patch/32830/","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37084","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc9","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/05/2","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/2","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/07/2","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/1","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/9","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1522.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1023073","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520990","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6757","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9409","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://patchwork.ozlabs.org/patch/32830/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/05/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/07/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1522.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1023073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3229","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by \"re-LOAD-ing\" libraries from a certain plugins directory."},{"lang":"es","value":"El componente core server de PostgreSQL desde v8.4 anteriores a v8.4.1, desde v8.3 anteriores a v8.3.8, y desde v8.2 anteriores a v8.2.14  permite a usuarios remotos autenticados producir una denegación de servicio (caída del backend) mediante \"recarga\" de librerías desde cierto directorio de plugins."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n\nIn PostgreSQL versions prior to 8.2, only database administrator was able to LOAD additional plugins and use it to cause server crash.  However, this does not bypass trust boundary, so its not a security flaw for older PostgreSQL versions.  Additionally, no plugins are shipped in Red Hat PostgreSQL packages by default.\n\nThis issue was addressed in Red Hat Application Stack v2 via https://rhn.redhat.com/errata/RHSA-2009-1461.html .","lastModified":"2009-09-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"06253BA8-7F1E-4C79-9B2E-197307A627F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2A213AB8-A5FE-4062-B895-2FC4B19F60A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9A3F083E-59A8-41B1-826F-2CA39BD425C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DE49E2D5-8EAC-49C7-B704-E626FBE7EC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5059B2F-B588-463E-8E96-BC9DA129C12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C919AF97-9713-44F8-B742-89C438DB0B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*","matchCriteriaId":"400BBC62-5D03-465B-A864-9CD479B963F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*","matchCriteriaId":"BC8C96F7-7F85-4E47-A05F-15E3C70AF583"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6C236CF1-72C0-4C3D-AE04-B67E3F18EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3:*:*:*:*:*:*:*","matchCriteriaId":"A2A705DF-3654-427F-8B11-62DB0B6C9813"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D33-86F4-4BFF-BA84-02AA1347BEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"02FDCF30-D0F7-48AA-9633-9CC060495F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"788975F6-B3F1-4C21-B963-6BA59F14B71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6713D96-338B-4467-9F05-3153997F62E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"01EB1A77-92AD-47FB-8290-D05C9B6C19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*","matchCriteriaId":"74857259-30C7-422D-A24D-BE1E33F09466"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CD80066B-787E-496B-88FD-F0AE291468C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*","matchCriteriaId":"8F30CA60-0A82-45CD-8044-CE245393593D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36800","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36837","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/support/security.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36314","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-834-1","source":"cve@mitre.org"},{"url":"http://www.us.debian.org/security/2009/dsa-1900","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522092","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/support/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-834-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us.debian.org/security/2009/dsa-1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3230","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges.  NOTE: this is due to an incomplete fix for CVE-2007-6600."},{"lang":"es","value":"El componente core server en PostgreSQL desde v8.4 anteriores a v8.4.1, desde v8.3 anteriores a v8.3.8, desde v8.2 anteriores a v8.2.14, desde v8.1 anteriores a v8.1.18, desde v8.0 anteriores a v8.0.22, y v7.4 anteriores a v7.4.26 no maneja adecuadamente los privilegios para las operaciones (1)BORRADO DE ROL (2)BORRADO DE AUTORIZACIÓN DE SESIÓN, lo que permite a usuarios remotos autenticados ganar privilegios. NOTA: Esto es debido a un arreglo incompleto de CVE-2007-6600."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4:*:*:*:*:*:*:*","matchCriteriaId":"FBE2567C-BF48-4255-9E56-590A6F9DD932"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20C8302B-631A-4DF7-839B-C6F3CC39E000"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FB318EB9-1B49-452A-92CF-89D9BA990AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5913A53B-7B72-4CBD-ADAE-318333EB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"815E58C0-327D-4F14-B496-05FC8179627E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3EF2D056-5120-4F98-8343-4EC31F962CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"516E0E86-3D8A-43F9-9DD5-865F5C889FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A7FC7F18-B227-4C46-9A33-FB34DDE456CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BCDB903F-0C89-4E65-857E-553CF9C192E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"CD0DEB63-CA70-44C1-9491-E0790D1A8E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"DA8E73E5-BA41-4FA2-8457-803A97FB00C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9B64CA-778F-405D-A441-34599246A3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"8AC4A04B-738C-4018-BB2F-FBEC8746200C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*","matchCriteriaId":"36A2824A-A43F-436B-B9DA-B7E283A00426"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*","matchCriteriaId":"DBBAF0F1-7A70-41DC-89A7-2EF9851E4FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*","matchCriteriaId":"4A12EC07-1938-41BF-BCFC-C269668F1EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*","matchCriteriaId":"14D7CE0D-510C-46BB-8896-42DD84F57017"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*","matchCriteriaId":"1AA5858F-7DFF-460D-B862-83DD636D0A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*","matchCriteriaId":"4394564D-131D-41C8-AE3A-BFF44779F27B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*","matchCriteriaId":"2CCC06DB-1C93-4DE5-AEDC-03E532DA89F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0:*:*:*:*:*:*:*","matchCriteriaId":"94222D76-82BE-4FFB-BE4B-5DBAF3080D4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"105E9F52-D17E-4A0B-9C46-FD32A930B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE2055D-AAA4-4A6A-918F-349A9749AF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C12409B2-161B-4F78-B7AD-3CF69DDCC574"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD2F1DA4-6625-469D-988B-5457B68851A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"870F4348-6001-4C2F-A547-61964074E7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2E26D52-D95A-4547-BE6E-4F142F54A624"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4AAB2D1D-BE61-4D7C-B305-58B4F4126620"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E260F1F9-0068-4289-A8E8-C30220C2E1F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EEE16023-9A5E-46D5-B597-E6885C224786"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"84D64D74-9645-4CB7-B710-4FC26FB65B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8EB12063-F487-4067-A7A5-4482E19D8D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"51AE5B72-DDC5-4207-B467-A9583F3AC781"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*","matchCriteriaId":"99398182-C98C-4B16-9DBA-B1980BDFFA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"E6FEC1DE-A2A5-4945-95B8-75FDC9ED3B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"264AB44D-D014-4734-B538-09E5834EC30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*","matchCriteriaId":"8D5DD1E6-E190-4D75-9D27-5EFB2544B158"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"3CD7F8CA-09B3-4038-B8B0-2D62A77F2478"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"64815C3D-1A1A-4525-9BCD-D89BAEACC950"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF590F2-899F-42E1-8A57-6F514C94CE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FEEC35A2-B17C-46EC-8697-9E03568339BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"00562C18-DD81-4B09-AF93-739AF8757A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B52D093-7867-4FE8-B055-D8190103A1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF855730-C61C-4FDC-96CB-57775A903421"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D93296E1-AEA2-443E-B9AA-D70535DDD093"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"02DC4E8A-A728-4734-B67A-C58C37DA90C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D59B0E32-9E71-4E41-BBAF-7A20008E43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*","matchCriteriaId":"CA6511DE-AF52-4953-8394-37D24A732538"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.12:*:*:*:*:*:*:*","matchCriteriaId":"51B93DC5-F632-47A5-9C58-52429B034D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D011C676-47D3-4D78-9C58-749AF6C7DBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.14:*:*:*:*:*:*:*","matchCriteriaId":"DFD5BE40-CF55-4C0E-BD89-5CC7DF41F6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.15:*:*:*:*:*:*:*","matchCriteriaId":"7C1EE1C3-4472-4CE2-AB60-9535C1C4AF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*","matchCriteriaId":"3B903334-2F67-4725-8277-6913E03BEFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"06253BA8-7F1E-4C79-9B2E-197307A627F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2A213AB8-A5FE-4062-B895-2FC4B19F60A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9A3F083E-59A8-41B1-826F-2CA39BD425C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DE49E2D5-8EAC-49C7-B704-E626FBE7EC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5059B2F-B588-463E-8E96-BC9DA129C12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C919AF97-9713-44F8-B742-89C438DB0B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*","matchCriteriaId":"400BBC62-5D03-465B-A864-9CD479B963F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*","matchCriteriaId":"BC8C96F7-7F85-4E47-A05F-15E3C70AF583"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6C236CF1-72C0-4C3D-AE04-B67E3F18EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D33-86F4-4BFF-BA84-02AA1347BEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"02FDCF30-D0F7-48AA-9633-9CC060495F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"788975F6-B3F1-4C21-B963-6BA59F14B71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6713D96-338B-4467-9F05-3153997F62E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"01EB1A77-92AD-47FB-8290-D05C9B6C19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*","matchCriteriaId":"74857259-30C7-422D-A24D-BE1E33F09466"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CD80066B-787E-496B-88FD-F0AE291468C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*","matchCriteriaId":"8F30CA60-0A82-45CD-8044-CE245393593D"}]}]}],"references":[{"url":"http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36695","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36800","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36837","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"cve@mitre.org"},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.postgresql.org/support/security.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36314","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-834-1","source":"cve@mitre.org"},{"url":"http://www.us.debian.org/security/2009/dsa-1900","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522085","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","source":"cve@mitre.org"},{"url":"http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.postgresql.org/support/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-834-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us.debian.org/security/2009/dsa-1900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3231","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password."},{"lang":"es","value":"El componente core server en PostgreSQL desde v8.3 anteriores a v8.3.8 y desde v8.2 anteriores a v8.2.14, cuando se utiliza la autenticación de LDAP con imposiciones anónimas, permite a atacantes remotos evitar la autenticación a través de una contraseña vacía."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 3, 4, or 5, as they do not support LDAP authentication, which was introduced upstream in version 8.2.\n\nThis issue was addressed in Red Hat Application Stack v2 via https://rhn.redhat.com/errata/RHSA-2009-1461.html .","lastModified":"2009-09-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2","versionEndExcluding":"8.2.14","matchCriteriaId":"8E2B520E-AB78-490D-87F0-1CEAB599D73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3","versionEndExcluding":"8.3.8","matchCriteriaId":"18915BE0-FFBE-4B74-B8F1-1E55DB6C06D3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3","versionEndIncluding":"11.1","matchCriteriaId":"FF141FBE-4CA5-4695-94A0-8BE1309D28CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:sp2:*:*:*:*:*:*","matchCriteriaId":"6A3B50EE-F432-40BE-B422-698955A6058D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*","matchCriteriaId":"1608E282-2E96-4447-848D-DBE915DB0EF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/36660","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36727","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36800","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36837","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.postgresql.org/support/security.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36314","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-834-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us.debian.org/security/2009/dsa-1900","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522084","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/36660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.postgresql.org/docs/8.3/static/release-8-3-8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.postgresql.org/support/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-834-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us.debian.org/security/2009/dsa-1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00305.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-3232","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an \"empty selection\" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication."},{"lang":"es","value":"pam-auth-update para PAM, tal y como se utiliza Ubuntu v8.10 y v9.4, y Debian GNU/Linux,  no gestiona adecuadamente una \"selección vacía\" para los módulos de autenticacion del sistema en ciertas configuraciones poco frecuentes, lo que lleva a que cualquier intento de autenticación tenga exito lo que permite a atacantes remotos evitar este paso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List"]},{"url":"http://secunia.com/advisories/36620","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/08/7","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/36306","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://launchpad.net/bugs/410171","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"https://usn.ubuntu.com/828-1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List"]},{"url":"http://secunia.com/advisories/36620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/08/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/36306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://launchpad.net/bugs/410171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://usn.ubuntu.com/828-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3233","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack."},{"lang":"es","value":"changetrack v4.3 permite a usuarios locales ejecutar comandos arbitrarios a través de secuencias CRLF y metacaracteres de shell en un nombre de fichero en un directorio que es chequeado por changetrack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cameron_morland:changetrack:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A22EC7BE-E511-428B-819F-366B2AD8F791"}]}]}],"references":[{"url":"http://bugs.debian.org/546791","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/36756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/16/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36420","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/546791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/36756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3234","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local users to cause a denial of service (crash) and execute arbitrary code via a \"big size data\" to the perf_counter_open system call."},{"lang":"es","value":"Un desbordamiento de búfer en la función perf_copy_attr en el archivo kernel/perf_counter.c en el kernel de Linux versión 2.6.31-rc1, permite a los usuarios locales causar una denegación de servicio (bloqueo) y ejecutar código arbitrario por medio de un \"big size data\" en la llamada del sistema perf_counter_open."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue only affected kernels version v2.6.31-rc1 and later. Therefore this issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.","lastModified":"2009-09-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.kernel/890654","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/16/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/13","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36423","source":"cve@mitre.org"},{"url":"http://article.gmane.org/gmane.linux.kernel/890654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/16/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/17/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3235","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en el complemento -plugin- Sieve de Dovecot v1.0 anterior a v1.0.4 y v1.1 anterior a v1.1.7, como se deriva de Cyrus libsieve, permiten a atacantes dependientes del contexto provocar una denegación de servicio (caída) y puede que ejecutar código de su elección a través de una secuencia de comandos SIEVE, como se ha demostrado reenviando un mensaje de correo a un gran número de usuarios. Se trata de una vulnerabilidad diferente de CVE-2009-2632."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4240BD98-3C31-42CE-AF8F-045DD4BFC084"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D7A4A82-6C8D-453E-ACC5-2C8BAC7804D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05ACA0-ED87-4DDF-94B6-8D25BE1790F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A8C0C4A-F9DB-4BB7-BFC5-BEC22C3FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8BE860F-A3C2-43E0-BC75-503C437DAADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E4E57B06-8650-4374-B643-6FCBE3ABDAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0384E42-1506-4C08-AA5A-18B2A711C7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F5DC1CE5-50B9-426E-B98A-224DC499AB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"350A26D6-A8BA-4125-A640-264E08D28CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"71057F4B-3040-4771-B989-9F3453934AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1730EBB1-4071-4A23-B770-D564AF422273"},{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"10A27394-E1C7-4EF0-94C8-71D6EA33CE6D"}]}]}],"references":[{"url":"http://dovecot.org/list/dovecot-news/2009-September/000135.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36698","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36904","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36377","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53248","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10515","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dovecot.org/list/dovecot-news/2009-September/000135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/14/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-838-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3236","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with privileges to write to the address book, to overwrite arbitrary files and execute PHP code via crafted Horde_Form_Type_image form field elements."},{"lang":"es","value":"La biblioteca de formularios en Horde Application Framework versión 3.2 anterior a 3.2.5 y versión 3.3 anterior a 3.3.5; Groupware versión 1.1 anterior a 1.1.6 y versión 1.2 anterior a 1.2.4; y Groupware Webmail Edition versión 1.1 anterior a 1.1.6 y versión 1.2 anterior a 1.2.4; reutiliza los nombres de archivo temporales durante el proceso de carga, lo que permite a los atacantes remotos, con privilegios para escribir en la libreta de direcciones, sobrescribir archivos arbitrarios y ejecutar código PHP por medio de elementos de campo de formulario Horde_Form_Type_image creados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D1F91CDA-B425-4DB2-89E4-12267B600D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8BB743-A760-4C72-880C-759E54FB7CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89477FCC-C925-418A-A3FF-F5B02736600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D5862181-4CE7-452F-8877-41E099440188"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B3E601FE-94F1-48AD-A0F2-42824A3A4FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*","matchCriteriaId":"BDE2B06C-EDBD-4FA1-90AA-148E39EF5AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D5CF33A8-C497-4C86-8C5D-7181597BEC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B312DB-14BE-425C-9B07-0CBED6F39E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A2CF2865-CA12-4C4C-9BEC-7A97E6AAB377"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DF389AE4-D2AD-4992-BFBD-68FB1CBEE50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A849DD3E-882A-4621-BB6C-315A76677BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"37B76B27-ADF0-4E88-B92C-304FB38A356E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"965F245A-879A-4DF0-ABC5-588E78C4CBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3DCB29F9-3875-4264-8117-5751FEDC3350"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"59FC250F-EF0B-4604-99A2-3EEB8B2DEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A849DD3E-882A-4621-BB6C-315A76677BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F577A169-8354-4218-B3C6-04DA4BDF1E3C"}]}]}],"references":[{"url":"http://marc.info/?l=horde-announce&m=125291625030436&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292088004087&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292314007049&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292339907481&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125294558611682&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125295852706029&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1897","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58107","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53202","source":"cve@mitre.org"},{"url":"http://marc.info/?l=horde-announce&m=125291625030436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292088004087&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292314007049&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292339907481&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125294558611682&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125295852706029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3237","sourceIdentifier":"cve@mitre.org","published":"2009-09-17T10:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; allow remote attackers to inject arbitrary web script or HTML via the (1) crafted number preferences that are not properly handled in the preference system (services/prefs.php), as demonstrated by the sidebar_width parameter; or (2) crafted unknown MIME \"text parts\" that are not properly handled in the MIME viewer library (config/mime_drivers.php)."},{"lang":"es","value":"Múltiple vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Horde Application Framework desde v3.2 anteriores a v3.2.5 y desde v3.3 anteriores a v3.3.5; Groupware desde v1.1 anteriores a v1.1.6 y 1.2 anteriores a  v1.2.4; y Groupware Webmail Edition desde v1.1 anteriores a v1.1.6 y desde v1.2 anteriores a v1.2.4; permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de (1) preferencias numéricas manipuladas que no han sido adecuadamente gestionadas en el sistema de preferencias (services/prefs.php), como quedo demostrado por el parámetro sidebar_width o (2) \"fragmentos de texto\" MIME desconocidos manipulados que no son gestionados adecuadamente por la librería de visor de MIME (config/mime_drivers.php)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.2:*:*:*:*:*:*:*","matchCriteriaId":"88BE4BD4-174C-4EC5-BCE7-CA63D1369043"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D32C974-121E-4FAB-8E39-2933C912935F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"60A02DC9-3602-43B2-8574-15A6D4528142"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"61F847C8-7775-4FC0-BBE1-C56DFC3D9A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C1ECC0C8-DE09-4079-8476-B0C82ABE980A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8ADA6AAC-7511-47F6-B805-A5C48BA4CD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9B3CB720-A1C0-4E49-BA2C-02283499F252"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"3CE83C51-175E-4FB9-BA2B-505A8B559D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"172260F8-D4E5-470D-84EA-00B88B090A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_application_framework:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"51487521-E1DB-4CD0-9071-C9449EFB681E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"26FB18AE-EDA5-48DF-9592-9970FFD3C72F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"30FF79BF-E978-49BF-BF07-DF4A75C6E52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"633B142D-AAF2-49EE-B152-C1C4524E4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E8CFFA11-C38E-4F92-8BF2-223B97911E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4C4151CC-DC68-4883-91E2-712D9FD0C160"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F359B33-A791-4792-9CD3-BA551F1291DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"16F105C6-75E5-4BD8-A7A2-0DB31B6F5498"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2187B702-3598-4353-81AA-EBDCC3E48A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde_groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"52D84C54-EAFF-4368-ADEF-589F95EA6BD5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"37B76B27-ADF0-4E88-B92C-304FB38A356E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"965F245A-879A-4DF0-ABC5-588E78C4CBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3DCB29F9-3875-4264-8117-5751FEDC3350"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"59FC250F-EF0B-4604-99A2-3EEB8B2DEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AAF1A6AE-0748-476B-ACE2-DA43A9443B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F577A169-8354-4218-B3C6-04DA4BDF1E3C"}]}]}],"references":[{"url":"http://bugs.horde.org/ticket/?id=8311","source":"cve@mitre.org"},{"url":"http://bugs.horde.org/ticket/?id=8399","source":"cve@mitre.org"},{"url":"http://marc.info/?l=horde-announce&m=125291625030436&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292088004087&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292314007049&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292339907481&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125294558611682&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125295852706029&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58108","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58109","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53202","source":"cve@mitre.org"},{"url":"http://bugs.horde.org/ticket/?id=8311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.horde.org/ticket/?id=8399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=horde-announce&m=125291625030436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292088004087&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292314007049&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125292339907481&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125294558611682&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=125295852706029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3238","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to \"return the same value over and over again for long stretches of time.\""},{"lang":"es","value":"La función get_random_int de drivers/char/random.c en el kernel de Linux anterior a v2.6.30, produce números que nos son suficientemente aleatorios, esto permite a los atacantes predecir el valor devuelto y permite que se puedan superar los mecanismos de protección basados en la aleatoriedad, a través de vectores que eleven la tendencia de la función a \"devolver el mismo valor una y otra vez durante largos periodos de tiempo\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.30","matchCriteriaId":"F029386E-52D4-46E9-84BF-4D24CA35383E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://patchwork.kernel.org/patch/21766/","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37351","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499785","source":"cve@mitre.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519692","source":"cve@mitre.org","tags":["Issue Tracking","Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://patchwork.kernel.org/patch/21766/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03836en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3239","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.327","lastModified":"2023-11-07T02:04:23.920","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2139, CVE-2009-2140.  Reason: This candidate is a duplicate of CVE-2009-2139 and CVE-2009-2140.  Notes: All CVE users should reference CVE-2009-2139 and CVE-2009-2140 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3240","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Happy Linux XF-Section module 1.12a for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos cruzados (XSS) en el módulo Happy Linux XF-Section v1.12a para XOOPS, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ohwada:xf-section:1.12a:*:*:*:*:*:*:*","matchCriteriaId":"3E3D24E7-E91B-4840-96F8-0E9FB7644442"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN00425482/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000062.html","source":"cve@mitre.org"},{"url":"http://linux.ohwada.jp/modules/smartsection/item.php?itemid=458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN00425482/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.ohwada.jp/modules/smartsection/item.php?itemid=458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3241","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets."},{"lang":"es","value":"Vulnerabilidad no especificada en el analizador OpcUa (OPC UA) de Wireshark v0.99.6 hasta v1.0.8 y v1.2.0 hasta v1.2.1, permite a atacantes remotos provocar una denegación de servicio (consumo de la memoria y la CPU) a través de paquetes OPCUA Service CallRequest mal formados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.9:*:*:*:*:*:*:*","matchCriteriaId":"DA611B86-AB5C-4CA1-9620-6F5532F4C819"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26CB9265-B7A4-4EB4-9C20-F747F3786C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37477","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36408","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-05.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3242","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors related to \"an uninitialized dissector handle,\" which triggers an assertion failure."},{"lang":"es","value":"Vulnerabilidad sin especificar en packet.c en el analizador GSM A RR en Wireshark v1.2.0 y v1.2.1, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de vectores desconocidos relacionados con \"el manejo no inicializado del analizador\", que provoca un fallo de aserción."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"}]}]}],"references":[{"url":"http://secunia.com/advisories/36754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36408","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3893","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5423","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3243","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations."},{"lang":"es","value":"Vulnerabilidad no especificada en el analizador TLS de Wireshark v1.2.0 y v1.2.1, cuando se ejecuta en Windows, permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de vectores desconocidos relacionados con las conversaciones TLS v1.2."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/36754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36408","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"cve@mitre.org"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-06.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4008","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6413","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3244","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T10:30:01.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en el control ActiveX de la biblioteca SwDir.dll en Shockwave Player de Adobe versiones 11.5.1.601 y  anteriores, permite a los atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario por medio de un valor de propiedad PlayerVersion largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5.1.601","matchCriteriaId":"E2616516-18CA-4F56-803F-8CD3DBC56006"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0.196:*:*:*:*:*:*:*","matchCriteriaId":"9282EC1A-DFDB-49A9-8BE1-013D9B494D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0.196a:*:*:*:*:*:*:*","matchCriteriaId":"C4A8422D-39E4-490C-B3EC-FED7468D6B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0.204:*:*:*:*:*:*:*","matchCriteriaId":"88A75AF4-F7BA-4CA4-8079-5D9794E1BD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0.205:*:*:*:*:*:*:*","matchCriteriaId":"712325E1-B37A-4994-B42E-F02553A3CB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1.100:*:*:*:*:*:*:*","matchCriteriaId":"FADB5808-5F9A-4FBD-A6FC-3DB17A6C6CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1.103:*:*:*:*:*:*:*","matchCriteriaId":"BFC415B5-F7C8-4277-A4A3-ECFA2CB38515"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1.105:*:*:*:*:*:*:*","matchCriteriaId":"3454FF46-3D72-4FF9-AF5B-2E948DA412D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1.106:*:*:*:*:*:*:*","matchCriteriaId":"E4726504-850B-4434-A149-09000D21F917"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.321:*:*:*:*:*:*:*","matchCriteriaId":"C6D89450-C92C-4541-917B-AD047803A2AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.323:*:*:*:*:*:*:*","matchCriteriaId":"798EB26B-14D6-4E90-AC84-FF47B89B82E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.324:*:*:*:*:*:*:*","matchCriteriaId":"CA562619-7FAA-4FA6-AE42-55801AF00D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.325:*:*:*:*:*:*:*","matchCriteriaId":"BA961FB2-C543-4A1C-9C9E-C56641EB13FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9.0.383:*:*:*:*:*:*:*","matchCriteriaId":"56D23F59-4939-4ABE-A5BC-283BFC362E45"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9.0.432:*:*:*:*:*:*:*","matchCriteriaId":"DE1DB962-10C6-4536-B693-4AF59F0C4D94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.0.0.210:*:*:*:*:*:*:*","matchCriteriaId":"FA60B4FB-2BA4-4304-A7B8-8F0676C4F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.0.1.004:*:*:*:*:*:*:*","matchCriteriaId":"F7D6B993-1CF8-4944-8456-B99A72F24814"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.011:*:*:*:*:*:*:*","matchCriteriaId":"AD29AACC-E101-494B-BFD4-D97FDBE4A584"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.1.016:*:*:*:*:*:*:*","matchCriteriaId":"3F52120E-9CAB-40D9-A577-5D8278139F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.4.020:*:*:*:*:*:*:*","matchCriteriaId":"AAB05A7D-3017-4589-AE5C-B1A377AF02B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.2.0.021:*:*:*:*:*:*:*","matchCriteriaId":"58C665F7-E05D-4A8C-B217-6689C95D3FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.2.0.022:*:*:*:*:*:*:*","matchCriteriaId":"8441B2BB-3837-4EDE-B44E-323B434CBF56"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.2.0.023:*:*:*:*:*:*:*","matchCriteriaId":"2007F032-06BA-4347-9D9E-2C7C4C9BBCD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*","matchCriteriaId":"BF19CBB1-F047-4472-A19D-48A147396383"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.0.3.471:*:*:*:*:*:*:*","matchCriteriaId":"C51EB3CF-6770-4626-BDA7-9ED94A374911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*","matchCriteriaId":"C61B9485-2A42-4C95-9A10-3F1102E4EBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*","matchCriteriaId":"79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*","matchCriteriaId":"4B9506D5-D8CA-4845-B2FA-0E47C9BB3C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.6.606:*:*:*:*:*:*:*","matchCriteriaId":"9FBAFFFF-D658-45F0-AF14-BA29AA2D5394"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.7.609:*:*:*:*:*:*:*","matchCriteriaId":"7BFB28F3-ADA5-4BD1-9723-73FA291307BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.8.612:*:*:*:*:*:*:*","matchCriteriaId":"9760A554-1D44-4249-97DE-8423A97BA9FB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023123","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9682","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36905","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6530","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3246","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en spnews.php de MyBuxScript PTC-BUX, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción spnews a la URI por defecto. NOTA: Algunos de estos detalles se han obtenidos de fuentes de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybuxscript:pts-bux:*:*:*:*:*:*:*:*","matchCriteriaId":"E0079B19-21F6-4D80-A148-01AECB1F17E4"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9555","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2495","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52945","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3247","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject arbitrary web script or HTML via the action parameter to phprint.php.  NOTE: the query_string vector is already covered by CVE-2008-3101.3."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo Activities en vtiger CRM v5.0.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"action\" al phprint.php. NOTA: el vector query_String actualmente está reportado en el CVE-2008-3101."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE51A9-59AF-47F9-8AFC-5219505FD170"}]}]}],"references":[{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9450","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57240","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3248","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo RSS de vtiger CRM v5.0.4, permite a atacantes remotos secuestrar la autenticación de los usuarios Admin para solicitudes que modifican el sistema de fuentes de noticias a través del parámetro rssurl en una acción Save -guardar- en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE51A9-59AF-47F9-8AFC-5219505FD170"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125060676515670&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9450","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57238","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125060676515670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3249","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the module parameter to graph.php; or the (2) module or (3) file parameter to include/Ajax/CommonAjax.php, reachable through modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php, and modules/Portal/PortalAjax.php; and allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the step parameter in an Import action to the (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potentials, (9) Products, or (10) Vendors module, reachable through index.php and related to modules/Import/index.php and multiple Import.php files."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en vtiger CRM versión 5.0.4, permiten a los atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en (1) el parámetro module en el archivo graph.php; o el parámetro (2 ) module o (3) file en el archivo include/Ajax/CommonAjax.php, accesible por medio de los archivos modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/ NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/ HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php y modules/Portal/PortalAjax.php; y permitir que los usuarios autenticados remotos incluyan y ejecuten archivos locales arbitrarios por medio de un .. (punto punto) en el parámetro step en una acción Import en el módulo (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potenciales, (9) Products, o (10) Vendors, accesible por medio del archivo index.php y relacionado al archivo modules/Import/index.php y múltiples archivos Import.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE51A9-59AF-47F9-8AFC-5219505FD170"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125060676515670&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8118","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9450","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57239","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125060676515670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/8118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3250","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/."},{"lang":"es","value":"El procedimiento \"saveForwardAttachments\" de la funcionalidad \"Crear correo\" de vtiger CRM v5.0.4 permite a usuarios remotos autenticados ejecutar código de su elección creando un mensaje de correo electrónico con un fichero adjunto cuyo nombre acabe en (1) .php en entornos basados en configuraciones determinadas del servidor HTTP Apache, (2) .php. en Windows, o (3) .php/ en Linux; y, a continuación, realizando una petición directa a una ruta de directorio bajostorage/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE51A9-59AF-47F9-8AFC-5219505FD170"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125060676515670&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9450","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57237","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125060676515670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3251","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access restrictions and read the (1) visibility, (2) location, and (3) recurrence fields of a calendar via a custom view."},{"lang":"es","value":"include/utils/ListViewUtils.php en vtiger CRM anteriores a 5.1.0 permite a usuarios remotos autenticados evitar las restricciones de acceso previstas y leer los campos (1) visibilidad, (2) localización, y (3) recurrencia de un calendario a través de una vista personalizada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.0","matchCriteriaId":"29C2C106-F074-445B-9C3C-B28252EE36D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://www.osvdb.org/57241","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://www.osvdb.org/57241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3252","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en news.php en Rock Band CMS v0.10 que permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) \"year\" y (2) \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dave_robinson:rockbandcms:0.10:*:*:*:*:*:*:*","matchCriteriaId":"D0DCFB87-A797-433F-9544-40D1F0E25778"}]}]}],"references":[{"url":"http://secunia.com/advisories/36517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9553","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2494","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52940","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3253","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en TriceraSoft Swift Ultralite v1.032 permite a atacantes remotos producir una denegación de servicio (caída) o ejecutar código arbitrario a través de una cadena larga en un fichero de lista de reproducción .m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tricerasoft:swift_ultralite:1.032:*:*:*:*:*:*:*","matchCriteriaId":"F6217FB0-E561-4738-AA41-8C16B5F2C796"}]}]}],"references":[{"url":"http://secunia.com/advisories/36508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3254","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl playlist file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Ultimate Player v1.56 beta el cual permite a atacantes remotos ejecutar código arbitrario a través de una cadena larga en un fichero de lista de reproducción del tipo (1) .m3u o (2) .upl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultimatevideosite:ultimate_player:1.56:beta:*:*:*:*:*:*","matchCriteriaId":"7274EC33-660B-471E-B65E-A20D614197D4"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9548","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2491","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3255","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en RASH Quote Management System (RQMS) v1.2.2  y anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de el parámetro \"user\" en una acción administrativa a una URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"77B44607-A988-415A-908E-A0F7F8395691"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA86ADDC-71F0-46D6-962E-67972D4E612B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6D20AFB9-2D82-4FAB-B26B-A8D5CCA13247"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F36A4EF6-1A5B-4BA4-BD52-6C6CA90355F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EEB01C78-FEEE-478D-BA75-6E2AD5F2994E"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FFB39FF4-2BAE-434E-8A56-B0AE176DBF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.2:*:*:*:*:*:*:*","matchCriteriaId":"36E9CDF8-7363-49A7-93A6-358FD9A3F2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D0A9851E-0EB5-40D6-B4B5-BEF53CA1944B"}]}]}],"references":[{"url":"http://osvdb.org/57468","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2446","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52895","source":"cve@mitre.org"},{"url":"http://osvdb.org/57468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3256","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T20:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en include/ajax/blogInfo.php en LiveStreet v0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a traves de una URI, como se demuestra mediante un elemento \"SCRIPT\" en un parametro arbitrario como el parametro \"asd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livestreet:livestreet:0.2:*:*:*:*:*:*:*","matchCriteriaId":"D882ADEF-CB0F-4695-9536-BA2616CA764F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3257","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T21:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile."},{"lang":"es","value":"vtiger CRM anteriores a v5.1.0 permite a usuarios remotos autenticados evitar los permisos de los campos (1) Cuenta de dirección de pago y (2) Dirección de envío en un perfil de Orden de Ventas (SO) asociado con aquel perfil."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*","versionEndExcluding":"5.1.0","matchCriteriaId":"42168098-4C0F-4AC4-B4C6-5C96784CB7FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3258","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T21:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors."},{"lang":"es","value":"vtiger CRM anteriores a v5.1.0 permite a usuarios autenticados, con algunos privilegios de Vista, borrar (1) adjuntos, (2) informes, (3) filtros, (4) Vistas, y (5) tickets; insertar (6) adjuntos, (7) informes, (8) filtros, (9) vistas, y (10) tickets; y editar (11) informes, (12) filtros, (13) vistas, y (14) tickets a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E55C900-AAB5-46A2-B650-ED3A9DE52C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FB4792CC-85E3-4317-A632-5A130E9C6F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAB300C8-ABE4-45BA-B260-570DD1E32F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BF0C897F-2066-43C3-AB44-EE66DB0C2B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:3:*:*:*:*:*:*:*","matchCriteriaId":"458323BE-8583-435D-85B6-9F5F66F664A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D67FC276-11EB-4196-BDD9-84D69173EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:3.0:beta:*:*:*:*:*:*","matchCriteriaId":"81A5C9AA-0C13-4DA4-845B-28CCE80D5A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:3.2:*:*:*:*:*:*:*","matchCriteriaId":"288A4DD7-765B-4957-869F-98A836E4EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4:*:*:*:*:*:*:*","matchCriteriaId":"5F5C4B4A-507F-4389-9094-96AE7D84DE93"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4:beta:*:*:*:*:*:*","matchCriteriaId":"B6CDF5A9-E641-4FC3-8602-D47594524B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4:beta:*:it:*:*:*:*","matchCriteriaId":"83868C6E-8280-428D-9162-443FE263581F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4:rc1:*:*:*:*:*:*","matchCriteriaId":"04C6B97E-408B-49B1-A1F3-C0D1107500D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4.0:*:*:*:*:*:*:*","matchCriteriaId":"23F2DEEE-E081-4ED2-AB1A-9ED966474CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33644DF3-9777-405A-A106-1A6B4F1D6FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B3F151-0398-42C7-B194-FF528696D1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:validation:*:*:*","matchCriteriaId":"DA72C37D-EB9E-46BD-946C-B87DAC303CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"57840915-C75E-4D62-A017-E60DD1396D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20038138-B797-40A5-A45B-9AB6C21033D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"98DE0A56-EA74-4EA8-B941-F0DFF0F86F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FAF126B8-8BE9-4775-904B-5F6FD0FC97CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE51A9-59AF-47F9-8AFC-5219505FD170"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7983E217-C378-4D29-AB23-0A1F6FF483B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vtiger:vtiger_crm:5.1.0:rc:*:*:*:*:*:*","matchCriteriaId":"16C7FC4B-4253-45C5-92A4-26705A1D98FF"}]}]}],"references":[{"url":"http://forums.vtiger.com/viewtopic.php?t=15094","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://forums.vtiger.com/viewtopic.php?t=16756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36309","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://forums.vtiger.com/viewtopic.php?t=15094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://forums.vtiger.com/viewtopic.php?t=16756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3259","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T21:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the search parameter in a search action, (2) the quote parameter in a quote addition, or (3) a User_Name cookie in unspecified administrative actions.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en RASH Quote Management System (RQMS) v1.2.2 permite a atacantes remotos ejecutar comandos SQL a traves de (1) el parámetro \"search\" en una acción de búsqueda, (2) el parámetro \"quote\" en una adición de quote o (3) en una cookie \"User_Name\" en acciones administrativas inespecíficas. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos únicamente de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_cuchta:rash:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"57068B74-8CD7-4494-8235-624D8543AD88"}]}]}],"references":[{"url":"http://osvdb.org/57467","source":"cve@mitre.org"},{"url":"http://osvdb.org/57469","source":"cve@mitre.org"},{"url":"http://osvdb.org/57470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52895","source":"cve@mitre.org"},{"url":"http://osvdb.org/57467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3260","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T21:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en LiveStreet v0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de la cabecera del tema de un comentario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livestreet:livestreet:0.2:*:*:*:*:*:*:*","matchCriteriaId":"D882ADEF-CB0F-4695-9536-BA2616CA764F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3261","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T21:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors."},{"lang":"es","value":"update/update_0.1.2_to_0.2.php in LiveStreet v0.2 no exige autenticación administrativa, lo que permite a atacantes remotos realizar operaciones DROP TABLE a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livestreet:livestreet:0.2:*:*:*:*:*:*:*","matchCriteriaId":"D882ADEF-CB0F-4695-9536-BA2616CA764F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3262","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T21:30:01.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747\r\n\r\n A fix is available\r\n\r\nIBM Tivoli Identity Manager, ver 5.0, Interim Fix 5.0.0.6-TIV-TIM-IF0031","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Self Service UI (SSUI) in IBM Tivoli Identity Manager (ITIM) 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Self Service UI (SSUI) en IBM Tivoli Identity Manager (ITIM) v5.0.0.5 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML de forma arbitraria a través de el campo \"last name\" en un perfil."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_identity_manager:5.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B4908A93-BA67-4031-8794-F6A87A3A072C"}]}]}],"references":[{"url":"http://secunia.com/advisories/36511","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022837","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3263","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per http://www.securityfocus.com/archive/1/archive/1/506517/100/0/threaded\r\n\r\n\r\nVII. SOLUTION\r\n-------------------------\r\nChrome: Upgrade to latest version of Google Chrome (v3.0.195.21 or higher).\r\nIf you remain connected to the internet, this should be automatic.\r\nOpera: Wait for upcoming patch for Scenario (3) in next minor release\r\n(non-alpha/beta) of Opera 10 [Opera 9 users need to upgrade]. However, you\r\nwill still continue to be vulnerable to script execution.","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML \"active content.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Google Chrome 2.x y 3.x anteriores a 3.0.195.21 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de feeds (1) RSS o (2) Atom, relacionado con el renderizado de un contenido del tipo application/rss+xml como \"contenido activo\" XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=21238","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506517/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36416","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=21238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506517/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3264","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified \"access check,\" which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document."},{"lang":"es","value":"El método getSVGDocument en Google Chrome anteriores a v3.0.195.21 omite una comprobación de acceso inespecífica, lo que permite a servidores web remotos evitar la politica Same Originy dirigir ataques de ejecución de secuencias de comandos en sitios cruzados (XSS) a través de vectores desconocidos, relacionado con la visita de usuarios a un servidor diferente del que hospeda el documento SVG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:beta:*:*:*:*:*:*","versionEndIncluding":"3.0.193.2","matchCriteriaId":"72A0D17D-4BA8-4726-9D8E-BCD675199A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=21338","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/58193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36416","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=21338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3265","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as \"scripted content.\" NOTE: the vendor reportedly considers this behavior a \"design feature,\" not a vulnerability."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Opera 9 y 10 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de feeds (1) RSS o (2) Atom, relacionado con el renderizado de contenido del tipo application/rss+xml como \"contenido de secuencias de comandos\". NOTA: El fabricante considera esto como una \"característica de diseño\" y no una vulnerabilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*","matchCriteriaId":"2D03F8C2-1193-45ED-B38E-C76C41A0FD9A"}]}]}],"references":[{"url":"http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506517/100/0/threaded","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6370","source":"cve@mitre.org"},{"url":"http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506517/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3266","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as \"scripted content.\""},{"lang":"es","value":"El navegador Opera anterior a la versión 10.01 no restringe de manera apropiada el HTML en un (1) RSS o (2) Atom feed, que permite a los atacantes remotos realizar ataques de tipo Cross-Site Scripting (XSS), y realizar ataques de tipo cross-zone scripting, que involucran la página Feed Subscription, para leer feeds o crear subscripciones feed, por medio de un feed creado, relacionado con la representación del tipo de contenido application/rss+xml como \"scripted content.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:*:*:*:*:*:*:*","matchCriteriaId":"1FB76FFE-CB54-4A5B-B8FF-02B1A5D55D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*","matchCriteriaId":"DFA48444-F998-425B-896A-CE9276869BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*","matchCriteriaId":"8D9BFC45-39DF-47A6-B013-4299D2A0FB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.62:*:*:*:*:*:*:*","matchCriteriaId":"177B7245-4E8F-44E7-BF34-43939DD75AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.63:*:*:*:*:*:*:*","matchCriteriaId":"5F2B3A26-D8C3-4508-8A6B-3858D5CB8381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*","matchCriteriaId":"2D03F8C2-1193-45ED-B38E-C76C41A0FD9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*","matchCriteriaId":"F12E0FE8-3982-453B-9C01-ABB2DE96866F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*","matchCriteriaId":"DA76A537-6A1B-41D8-A923-24DC77F92E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:*","matchCriteriaId":"2FA36E65-596D-4E84-A15C-1DF5FA3AAC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*","matchCriteriaId":"320B5684-5006-4BA8-87ED-25C40E90F2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*","matchCriteriaId":"4FE9E7F2-68B1-448D-86B6-52B345DD3C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:*","matchCriteriaId":"5D3C98DA-3261-4BEB-8403-BE2E54A7056C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*","matchCriteriaId":"137E9883-BF1D-4B54-A904-AFDE179452A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:*","matchCriteriaId":"872AEFA4-F7B2-49CF-8279-8BE602D70B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.50:beta2:*:*:*:*:*:*","matchCriteriaId":"35400232-18B1-4641-8C98-6E8EB3A9C7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:*","matchCriteriaId":"90EFC130-7E02-47AE-AC4E-569B59241FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.52:*:*:*:*:*:*:*","matchCriteriaId":"3D2745A8-9F99-48AF-A3C9-9659FA542B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.53:*:*:*:*:*:*:*","matchCriteriaId":"57C77E63-E7CF-4EFF-9177-715C1815A0F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.53:b:*:*:*:*:*:*","matchCriteriaId":"4D74A8DF-DCD2-41AB-BDC1-A314B3B55DAD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37182","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads/","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1001/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/unix/1001/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/1001/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/kb/view/939/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59358","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506517/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36850","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54021","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/unix/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/kb/view/939/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506517/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3267","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828."},{"lang":"es","value":"Microsoft Internet Explorer v6 desde v6.0.2900.2180, y v7.0.6000.16711, permite a atacantes remotos producir una denegación de servicio (consumo de CPU) a través de un envío automático de un formulario que contenga un elemento generador de claves, una vulnerabilidad relacionada con CVE-2009-1828."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"6.00.2900.2180","matchCriteriaId":"3471C9B5-B59C-4242-927B-C403574A931D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.0.6000.16711","matchCriteriaId":"B9ADEE72-541B-42CB-BAF8-3071F653DA3E"}]}]}],"references":[{"url":"http://websecurity.com.ua/3194/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5519","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://websecurity.com.ua/3194/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-3268","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828."},{"lang":"es","value":"Google Chrome v1.0.154.48 y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de CPU) a través de un envío automático de un formulario que contenga un elemento generador de claves, una vulnerabilidad relacionada con CVE-2009-1828."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.154.48","matchCriteriaId":"4E9FA397-22DD-448C-8CC5-93549EAD7738"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"}]}]}],"references":[{"url":"http://websecurity.com.ua/3194/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3194/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3269","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828."},{"lang":"es","value":"Opera v9.52 y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de CPU) a través de series de envíos automáticos de un formulario que contiene un elemento generador de claves, una vulnerabilidad relacionada con CVE-2009-1828."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"9.52","matchCriteriaId":"BC7CF5F1-7CB8-4E77-8462-CE1BF0591D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"0F892EEF-54EC-4EC0-84B3-BD5C216AED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*","matchCriteriaId":"089BEFE3-24B2-4C73-BA25-7C905ED68A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*","matchCriteriaId":"3B73E6B0-2113-4D09-A665-7D8FEC3A3D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*","matchCriteriaId":"76AECDD0-C14D-4A68-AF2E-1C41A51089EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*","matchCriteriaId":"1C06EBBF-8B64-4C22-9EDA-E133AFD205DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*","matchCriteriaId":"D888C22C-41F9-427D-9249-F010891DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*","matchCriteriaId":"326AE3EE-3BF3-4B7E-B3FC-445FB9D6E4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*","matchCriteriaId":"94FAD06C-830A-4CB6-B9AF-7E093B64B69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*","matchCriteriaId":"C9BDFBD0-3CAC-4617-B1B2-7F95E7C648D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5366D587-7E77-4288-AB31-48108D04E0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:*","matchCriteriaId":"60EFFC44-A329-4FA5-B57C-FA8892F8226B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:*","matchCriteriaId":"9241CFD0-9E61-487F-B076-2D7B8ACEA381"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:*","matchCriteriaId":"ACEE8213-BD3A-405B-BC4C-8B80EBDF5A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:*","matchCriteriaId":"0A9A60F2-516D-4ECA-9ABC-4887EC4176E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:*","matchCriteriaId":"AB49750B-DAA1-4417-8384-1F4D47F2227D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:*","matchCriteriaId":"1099D38B-82EC-43C9-9DF5-D5EDC19834DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:*","matchCriteriaId":"A6D64030-1877-4F29-8340-93DB6E0F1F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:*","matchCriteriaId":"E5AC1241-B922-4BE7-93C1-077FC0DA1CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:*","matchCriteriaId":"D65D0F7A-9414-4CF5-8460-DFDB55F61E5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:*","matchCriteriaId":"85184E8A-C42D-4CBD-ACB4-B58752C305D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:*","matchCriteriaId":"D422BB16-9F9C-4554-B2F1-826EB5BCB1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:*","matchCriteriaId":"DA682571-536B-4CD9-A820-47E897B01480"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:*","matchCriteriaId":"298457B8-051B-46D0-81B4-C5B63B69EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D7D4BC07-C37E-4F99-8DEA-54A45250050A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:*","matchCriteriaId":"8E2B80FF-7ACB-43F5-9BD5-BF18A0EB4DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"57824075-E3F7-4B23-B4D6-8417C3147085"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FE078F27-6FC1-466C-8331-A89F8B6FE0B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"822FC5FB-3A6F-4F5B-A75B-7D42C3DB8E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7B7673C9-C69E-4CD8-9AF4-57AA81B8038A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*","matchCriteriaId":"5839EB88-DF5E-4AB0-899B-DF9F72F5F442"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*","matchCriteriaId":"2E1865A4-E038-4A1C-877D-5A3CFA9576BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*","matchCriteriaId":"93966A66-4332-4E76-9B1A-2BBF10AF0ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9D2F38FE-7E98-48B2-B0B2-35312368B21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63687D75-860D-4A36-B6BB-45BD4268B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*","matchCriteriaId":"BD500741-CF39-4F0C-9F96-6CBDFF8973D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*","matchCriteriaId":"359941FD-A5CE-43C1-AA76-C1B79BCB08C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*","matchCriteriaId":"CC9AC78A-CA47-476D-935E-67932BAB98A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E9662C-441F-4AB2-AC4C-30F31C32949A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*","matchCriteriaId":"CAD1A2C1-74F6-4CFC-B4F3-4CE3F1E49E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*","matchCriteriaId":"0ABC3435-77CD-4591-8282-7ADA60225CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*","matchCriteriaId":"91FA8A44-2CAF-4EE4-940F-0D09BD07FD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*","matchCriteriaId":"FFEC078C-A8F4-471B-A367-59A86B78590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*","matchCriteriaId":"0B147C1A-EA6C-40C8-A54A-96840A6FE9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*","matchCriteriaId":"E20418A7-1FA7-45EF-99B5-12D283EA6CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*","matchCriteriaId":"B54B2BD7-AB8F-4124-87EE-7A4BBEB348C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*","matchCriteriaId":"97452A26-7231-43BE-B70E-B8D05365CAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*","matchCriteriaId":"B332FF1C-731D-454C-AA9E-3534040F09E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*","matchCriteriaId":"5CBAA39D-01A0-4B6B-926B-C36C238E5258"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*","matchCriteriaId":"6F3707AA-D67A-4966-8DE4-8AEAC3C99B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9754B270-E01D-415E-9A91-09ECB9B82B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A01CAF7E-F196-4851-BF1B-CADA51DDBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"D4682E92-E5E7-4351-959E-25A79CA4271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*","matchCriteriaId":"76C58A91-23BA-4336-A81B-B7FDFAF6CA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EC6E40C4-FA29-4D7A-9018-44154503A68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*","matchCriteriaId":"DF0002A4-8A90-471C-9813-F648D53E4F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*","matchCriteriaId":"8A15E0FA-5570-4C5F-B087-38591D9EBABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*","matchCriteriaId":"3D9F72B1-F398-4E07-8652-2042ADDB8414"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*","matchCriteriaId":"2FA2F504-6690-4AAD-97A6-6487E450C92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*","matchCriteriaId":"19B927D3-D766-4D53-9870-15A7184E4C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*","matchCriteriaId":"54FE202A-E068-4ECE-B61D-230EFF0E60B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*","matchCriteriaId":"5B43E22F-D894-4763-BF55-C9B77911C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*","matchCriteriaId":"4218D36C-CCE7-443B-842B-AA1A2C865734"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*","matchCriteriaId":"3311565E-3971-416B-AC9C-6CF9F4EF0F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"}]}]}],"references":[{"url":"http://websecurity.com.ua/3194/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6358","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3194/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3270","sourceIdentifier":"cve@mitre.org","published":"2009-09-18T22:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821."},{"lang":"es","value":"Microsoft Internet Explorer 7 desde 7.0.6000.16711 permite a atacantes remotos producir una denegación de servicio (navegador inutilizable) mediante una llamada en bucle a la función window.print, también conocido como \"ataque DoS de impresión\", posiblemente relacionado con CVE-2009-0821."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.0.6000.16711","matchCriteriaId":"B9ADEE72-541B-42CB-BAF8-3071F653DA3E"}]}]}],"references":[{"url":"http://websecurity.com.ua/2872/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/79354","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6281","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://websecurity.com.ua/2872/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506328/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/79354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-3271","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element."},{"lang":"es","value":"Apple Safari en iPhone OS 3.0.1 permite a atacantes remotos provocar una denegación de servicio (fin de la aplicación) mediante una URL tel: larga en el atributo \"SRC\" de un elemento IFRAME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36386","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53251","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3272","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences."},{"lang":"es","value":"Vulnerabilidad de agotamiento de pila en WebKit.dll en WebKit en Apple Safari v3.2.3, y posiblemente otras versiones anteriores a v4.1.2, permite a atacantes remotos provocar una denegación de servicio (fin de la aplicación) mediante código JavaScript que realiza peticiones de evaluación sobre una cadena larga compuesta de secuencias A/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36EA71E0-63F7-46FF-AF11-792741F27628"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"80E36485-565D-4FAA-A6AD-57DF42D47462"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9606","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3273","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate."},{"lang":"es","value":"iPhone Mail en Apple iPhone OS, y en iPhone OS para iPod touch, no valida los certificados X.509, permitiendo a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores de e-mail SSL de su elección mediante un certificado manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"41DB23F0-7226-4D0B-A3FA-A801F02EBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"B669868B-F358-4D5B-9D64-4A462F261553"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B4AEDE82-E317-4066-A34F-BB3BCD3F53E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*","matchCriteriaId":"4261E5C1-DC93-437E-B84F-A30380AFDC40"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"079BB54C-25FD-4B26-B171-368911960F76"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*","matchCriteriaId":"DF292FED-19A4-4031-9B1F-151C0146F3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*","matchCriteriaId":"5183082C-556F-479F-9FC1-42B59BBB840B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*","matchCriteriaId":"2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"7E7AA027-8CF9-49BD-A000-82880E41D622"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*","matchCriteriaId":"4FA51920-223B-4DF4-802C-188F5A8B0563"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"4385635D-46F2-4642-9C78-1346DC120492"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*","matchCriteriaId":"2C63C36E-1997-4F44-80AD-E665CE46A278"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"20DAE911-C037-4F10-82A3-EF42D5FB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*","matchCriteriaId":"02BFDD6F-B9C3-42BB-A84A-828193FAA137"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"CFD4325B-A86A-4C1B-930F-56C17FB6281D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"2904DEFA-7769-43DB-B3D0-B552AE8F06A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"D4CE4199-BBF5-4F42-8BBC-BD946079C912"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*","matchCriteriaId":"0AD5106E-CD7C-4952-A9B1-5F72D99276E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"34346F55-4972-427B-8F96-780FA91DB95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*","matchCriteriaId":"B7235341-983F-4578-98DC-39BC278A7556"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AE65CA8B-68CB-428C-AC32-6F9100F9E507"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*","matchCriteriaId":"BA5C2D75-4019-45EB-8AF9-A850B5349507"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AD136376-331D-494F-9D12-7E631546E8CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"F07B3FE7-96B3-493A-A230-5642BA11FBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"4E2507AC-FD19-4A97-B91F-E45AF0C6BA4B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506428/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36370","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53234","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506428/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3274","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Mozilla Firefox v3.6a1, v3.5.2, y versiones anteriores a v2.x y v3.x en Linux usa una ruta predecible al directorio /tmp para los ficheros seleccionados en la ventana de descargas, permitiendo a usuarios locales reemplazar un fichero descargado de su elección al poner un fichero en la localización /tmp antes de que la descarga ocurra, posiblemente relacionado con el componente Archive Manager. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:a1:*:*:*:*:*:*","matchCriteriaId":"B5969D73-8985-4B52-930D-AEF5D2445F1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://jbrownsec.blogspot.com/2009/09/vamos-updates.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36649","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-53.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514823","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://jbrownsec.blogspot.com/2009/09/vamos-updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-53.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3275","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many \\ (backslash) characters followed by a \" (double quote), related to a certain regular expression, aka a \"ReDoS\" vulnerability."},{"lang":"es","value":"Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs en Microsoft patterns & practices Enterprise Library (también conocido como EntLib) permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de CPU) mediante un cadena de entrada compuesta por muchos caracteres \\ (barra invertida) seguidos de un carácter \" (comillas dobles\"), relacionado con cierta expresión regular, también conocido como vulnerabilidad \"ReDoS\" (Denegación de servicio mediante expresión regular)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:enterprise_library:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4B9A6699-874A-4240-B138-3D9D790A70EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:enterprise_library:4.0:*:*:*:*:*:*:*","matchCriteriaId":"755CF81F-C9B7-4AA8-9EA0-167B096A6801"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:enterprise_library:4.1:*:*:*:*:*:*:*","matchCriteriaId":"8A9738E2-E5D1-4082-991D-65CF7A5F49CD"}]}]}],"references":[{"url":"http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506419/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506419/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3276","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a \"ReDoS\" vulnerability."},{"lang":"es","value":"Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs en WinFormsAdvansed en NASD CORE.NET Terelik (también conocido como corenet1) permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de CPU) mediante un cadena de entrada compuesta por muchos caracteres alfanuméricos seguidos de un carácter ! (cerrar exclamación), relacionado con cierta expresión regular, también conocido como vulnerabilidad \"ReDoS\" (Denegación de servicio mediante expresión regular)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D42BF5D-CDD5-475C-9D48-8D659C862F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.7:*:*:*:*:*:*:*","matchCriteriaId":"89BD2E52-2232-49FA-B0B0-54C487AD3551"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.8:*:*:*:*:*:*:*","matchCriteriaId":"11BACB4F-618D-4C8D-B897-4555ABC6AE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AE516BED-63B9-4248-986F-2DC6ADA8E02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.10:*:*:*:*:*:*:*","matchCriteriaId":"B28785AB-4A88-42A2-B4CC-E17BE15155B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.12:*:*:*:*:*:*:*","matchCriteriaId":"8F9054C5-76E0-4127-8571-B4EF19C88F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.13:*:*:*:*:*:*:*","matchCriteriaId":"A07BBED0-A3FB-4E8F-AA93-E1B50A4139EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.15:*:*:*:*:*:*:*","matchCriteriaId":"400FD5D4-A3B2-4B72-8CC2-2DAEE8C443DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.17:*:*:*:*:*:*:*","matchCriteriaId":"24610D30-1AA1-4F05-9657-FED5E36B67DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.18:*:*:*:*:*:*:*","matchCriteriaId":"71ACAB79-64A4-42DF-B5E6-DC704DDE6494"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.19:*:*:*:*:*:*:*","matchCriteriaId":"E8D19C42-DD9B-4B7A-B714-2E8D388D8DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:1.24:*:*:*:*:*:*:*","matchCriteriaId":"E057CC24-6071-4557-8585-2A33C577017C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.7:*:*:*:*:*:*:*","matchCriteriaId":"FD04F591-3773-4A6A-8525-817F2CAD6FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.8:*:*:*:*:*:*:*","matchCriteriaId":"8E888FA9-4E5E-492C-8F65-475ACB3312AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.9:*:*:*:*:*:*:*","matchCriteriaId":"5F5A9E88-4D43-4CEE-BC27-8665C9F22606"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.11:*:*:*:*:*:*:*","matchCriteriaId":"55F3D610-59C2-440F-B200-12FB2387028A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.12:*:*:*:*:*:*:*","matchCriteriaId":"23640347-3356-4CF9-8F06-A0D95D47852A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.13:*:*:*:*:*:*:*","matchCriteriaId":"676F702B-21DF-461A-9088-237449DC2023"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.14:*:*:*:*:*:*:*","matchCriteriaId":"620339D2-B472-467C-A0C1-1D7B53A3350C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.15:*:*:*:*:*:*:*","matchCriteriaId":"6B94B046-C129-4A5F-9238-4477FBB71937"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.16:*:*:*:*:*:*:*","matchCriteriaId":"28007EF9-690D-4AA9-ADB4-674F89AE2E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9FB5A92D-97FB-4D3A-B551-18A27855F626"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.18:*:*:*:*:*:*:*","matchCriteriaId":"EC4346B8-CB40-4597-B1E7-8419A3C0B83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:2.19:*:*:*:*:*:*:*","matchCriteriaId":"DBCE10A5-652A-4047-B8C8-400F404BC85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44D2592E-2FDB-4A7A-A0EA-E305B19D4119"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.11:*:*:*:*:*:*:*","matchCriteriaId":"595C5309-EF80-41C4-B2F8-EFD171DE15ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.12:*:*:*:*:*:*:*","matchCriteriaId":"3F4BC782-F0DB-4E45-8226-97C7E75C0C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.13:*:*:*:*:*:*:*","matchCriteriaId":"08D850BC-B14C-4FCC-9496-80A994ED0C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.14:*:*:*:*:*:*:*","matchCriteriaId":"8C4BFE87-9C43-4BB3-A18F-D00AB12C8FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.15:*:*:*:*:*:*:*","matchCriteriaId":"5392D13A-C9EB-45F3-843A-8AA7C3F310D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nasd:corenet1:3.16:*:*:*:*:*:*:*","matchCriteriaId":"86BD8455-2879-4D78-AAE4-F9A5C5ADA8C0"}]}]}],"references":[{"url":"http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506419/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506419/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3277","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regular expression, aka a \"ReDoS\" vulnerability."},{"lang":"es","value":"DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs en datavault permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de CPU) mediante un cadena de entrada compuesta por un [ (abrir corchete) seguido de muchas comas, relacionado con cierta expresión regular, también conocido como vulnerabilidad \"ReDoS\" (Denegación de servicio mediante expresión regular)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xenu_by:datavault:*:*:*:*:*:*:*:*","matchCriteriaId":"D1E6B304-0BE7-42CF-8E1E-3536E4F3C2AB"}]}]}],"references":[{"url":"http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506419/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506419/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3278","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack."},{"lang":"es","value":"El QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 emplea la función \"rand\" de la biblioteca para generar ciertos tipos de claves de recuperación, lo que facilita a usuarios locales adivinar esa clave a través de un ataque de fuerza bruta."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-239_pro_firmware:2.1.7:build0613:*:*:*:*:*:*","matchCriteriaId":"6F5C7FE8-D003-4640-9F64-0B2160236F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-239_pro_firmware:3.1.0:build0627:*:*:*:*:*:*","matchCriteriaId":"CA882F2B-0BEE-4233-AA06-AA926FF178F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-239_pro_firmware:3.1.1:build0815:*:*:*:*:*:*","matchCriteriaId":"95C06ACE-A307-485E-A929-C6125F817F73"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qnap:ts-239_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"F035666A-5CFC-43A2-AD57-20A3F0C5E747"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-639_pro_firmware:2.1.7:build0613:*:*:*:*:*:*","matchCriteriaId":"C7CFDE40-352B-472F-8448-49CA3CA850FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-639_pro_firmware:3.1.0:build0627:*:*:*:*:*:*","matchCriteriaId":"73D2A5A6-85A0-4DC9-9DFE-AD36D4F85893"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:ts-639_pro_firmware:3.1.1:build0815:*:*:*:*:*:*","matchCriteriaId":"5F574D92-A200-4883-9D79-BB035B857C63"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:qnap:ts-639_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"CB1E8394-AE01-4838-8348-7E118350C21F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36793","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36467","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/36793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3279","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack."},{"lang":"es","value":"El QNAP TS-239 Pro y TS-639 Pro con firmware v2.1.7 0613, v3.1.0 0627, y v3.1.1 0815 crea una partición LUKS empleando el cifrado AES-256 en modo CBC plano, lo que permite a usuarios locales obtener información sensible a través de un ataque \"watermark\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-239_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*","matchCriteriaId":"5EE9055C-121F-4DB7-8C31-0C25860EB956"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*","matchCriteriaId":"DBD938AD-4FF6-43F7-BDBA-C751DBE670F9"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*","matchCriteriaId":"5D3675EC-CB39-4D51-9D38-D921A67F5085"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-639_pro_turbo_nas:2.1.7_0613:*:*:*:*:*:*:*","matchCriteriaId":"8C6B1151-66DD-41AC-BCE2-076B72738CF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.0_0627:*:*:*:*:*:*:*","matchCriteriaId":"8BE092C1-DE91-4DE2-90CB-7A3BD2B84B0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:qnap:ts-639_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*","matchCriteriaId":"EF79B187-CD61-45B6-9D71-3C73D9490970"}]}]}],"references":[{"url":"http://secunia.com/advisories/36793","source":"cve@mitre.org"},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506607/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3280","sourceIdentifier":"cve@mitre.org","published":"2009-09-21T19:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets."},{"lang":"es","value":"Error de presencia de signo en entero en la función find_ie en net/wireless/scan.c en el subsistema cfg80211 del kernel de linux anterior a v2.6.31.1-rc1, permite a atacantes remotos provocar una denegación de servicio (cuelgue -soft lockup) a través de paquetes mal formados."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This vulnerability was introduced into the Linux kernel in version 2.6.30-rc1 via upstream commit 2a519311, and therefore does not affect users of Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG.","lastModified":"2009-09-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"EA80C8C8-30E5-4DC6-B3CC-2BA506FBEC8D"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/45106/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/16/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36421","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fcc6cb0c13555e78c2d47257b6d1b5e59b0c419a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/45106/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.31.1-rc1.bz2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/16/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3281","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors."},{"lang":"es","value":"La extensión del núcleo vmx86 en VMware Fusion v2.0.6 anterior a build 196839 no utiliza los permisos de archivo correctos, lo cual permite a los usuarios del sistema operativo anfitrion obtener privilegios en el sistema operativo anfitrión a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"A8A8DAA7-1031-4F9A-8E53-9F675EF193A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"942B4ED3-A68E-4106-A98B-FA7CD3505140"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BDA2CE1-E26E-4347-BD60-2764A19F5E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B503A45-D9F3-414D-9BFA-C58B1E81A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8E18541B-36B6-40A7-9749-FA47A10379C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A6DA47C9-3D1A-49A7-8976-AE05D6730673"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"692CC131-5C6C-4AD6-B85C-07DF21168BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"617EFBFF-D047-4A0B-ACB6-83B27710F6F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000066.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022981","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3282","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://lists.vmware.com/pipermail/security-announce/2009/000066.html \r\n\r\nSolution\r\n\r\n   Please review the patch/release notes for your product and version\r\n   and verify the md5sum and/or the sha1sum of your downloaded file.\r\n\r\n   VMware Fusion 2.0.6 (for Intel-based Macs): Download including\r\n   VMware Fusion and a 12 month complimentary subscription to McAfee\r\n   VirusScan Plus 2009\r\n\r\n   md5sum: d35490aa8caa92e21339c95c77314b2f\r\n   sha1sum: 9c41985d754ac718032a47af8a3f98ea28fddb26\r\n\r\n   VMware Fusion 2.0.6 (for Intel-based Macs): Download including only\r\n   VMware Fusion software\r\n\r\n   md5sum: 2e8d39defdffed224c4bab4218cc6659\r\n   sha1sum: 453d54a2f37b257a0aad17c95843305250c7b6ef\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors."},{"lang":"es","value":"Desbordamiento de enteros en la extensión del núcleo vmx86 en VMware Fusion v2.0.6 anterior a build 196839 permite a los usuarios del sistema operativo anfitrión causar una denegación de servicio al sistema operativo anfitrión a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"A8A8DAA7-1031-4F9A-8E53-9F675EF193A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"942B4ED3-A68E-4106-A98B-FA7CD3505140"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD1338C-8FC1-40A1-BAE8-B11F4354A0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AC862199-8AA7-4E5E-BA2B-DF5FC9A056BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BDA2CE1-E26E-4347-BD60-2764A19F5E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B503A45-D9F3-414D-9BFA-C58B1E81A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8E18541B-36B6-40A7-9749-FA47A10379C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55EBD95F-3DF7-49F3-A7AA-47085E0B7C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A6DA47C9-3D1A-49A7-8976-AE05D6730673"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"692CC131-5C6C-4AD6-B85C-07DF21168BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"617EFBFF-D047-4A0B-ACB6-83B27710F6F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000066.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022981","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3283","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, y webshot, fechado antes de 20090914, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar relacionados con las cookies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_\\&_css_bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"5463F0FB-CD71-4CDB-894C-5BCDB05129A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"9F85FCFE-A1C9-4B5F-A54F-EE60A2BF51D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_bbs_ce:*:*:*:*:*:*:*:*","matchCriteriaId":"4EA3E12B-7C61-4EEF-B7A2-61A07B8ADC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_image_capture_bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"15014F65-71F5-4BAF-A54D-6709924F328C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_rss_builder:*:*:*:*:*:*:*:*","matchCriteriaId":"89132DD2-4977-4FC0-B2F7-745A4AA8E8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:webshot:*:*:*:*:*:*:*:*","matchCriteriaId":"DC8B2D23-C212-4FBB-A1F4-056AA7B59D3C"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN53591199/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html","source":"cve@mitre.org"},{"url":"http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN53591199/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3284","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, y webshot, fechado antes de 20090914, permite a atacantes remotos leer ficheros arbitrarios a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_\\&_css_bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"5463F0FB-CD71-4CDB-894C-5BCDB05129A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"9F85FCFE-A1C9-4B5F-A54F-EE60A2BF51D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_bbs_ce:*:*:*:*:*:*:*:*","matchCriteriaId":"4EA3E12B-7C61-4EEF-B7A2-61A07B8ADC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_image_capture_bbs:*:*:*:*:*:*:*:*","matchCriteriaId":"15014F65-71F5-4BAF-A54D-6709924F328C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:php_rss_builder:*:*:*:*:*:*:*:*","matchCriteriaId":"89132DD2-4977-4FC0-B2F7-745A4AA8E8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpspot:webshot:*:*:*:*:*:*:*:*","matchCriteriaId":"DC8B2D23-C212-4FBB-A1F4-056AA7B59D3C"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN65914253/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html","source":"cve@mitre.org"},{"url":"http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN65914253/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3286","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails."},{"lang":"es","value":"NFSv4 en el kernel de Linux versión 2.6.18, y posiblemente otras versiones, no limpia apropiadamente un inode cuando se produce un fallo de creación de O_EXCL, lo que causa que los archivos se creen con configuraciones no confiables, tales como bits setuid, y posiblemente permite a los usuarios locales alcanzar privilegios, relacionados con la ejecución de la función do_open_permission incluso cuando se produce un fallo en una creación."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG.\n\nIt was addressed in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1548.html","lastModified":"2009-11-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=81ac95c5","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/21/2","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=524520","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7527","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9757","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=81ac95c5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/21/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=524520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3287","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header."},{"lang":"es","value":"lib/thin/connection.rb en el servidor web Thin anterior a v1.2.4 permite determinar la dirección IP del cliente sobre la cabecera X-Forwarded-For, lo que permite a atacantes remotos suplantar la dirección IP y ocultar la actividad a través de una cabecera X-Forwarded-For."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"DDB8B96B-7544-4ED1-97AF-BED85A6E02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3722C121-CA76-4BD6-9B17-059C1051BD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A8DFE094-2523-47F6-9310-BE48DF205825"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA76B41-8699-4AB9-8569-98D792359C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BDC31A-0F16-4817-802B-C603050D7E83"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"EB082342-11F8-479C-B884-0D3E6074A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C5367748-33ED-4AFC-951A-B3B10B9CA94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"627C15A0-669D-4E56-9C31-8B8FBF60F3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"72D1B13B-96DE-4151-BEEC-2D438CBD4B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F90B1079-9276-486F-86B8-B7E2FEF49B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"9A8E67F2-6A68-4DF2-BBFC-CD5FB8401CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D151CA6-9C63-489D-B4AC-19F357E75C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A47C57AC-1892-40FE-9F03-DAFBAF509976"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"9EB06946-318C-4E86-8F73-43E16A9EFEA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"5F03A874-0753-49F6-A9BD-3798929B3C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"57048132-7659-444A-B78A-12B199E935B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F00DA27E-EB76-4773-A7DE-14246C24FFFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A8B33E0-77F2-405F-8755-02C30509C652"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49E5A94C-3262-4AA3-90F0-5E7B45E213A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"63C61B64-0B37-4F7B-8C47-BCA425E09A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:macournoyer:thin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2F2E2ACB-9ED2-4712-8A25-DE288DBF27DE"}]}]}],"references":[{"url":"http://github.com/macournoyer/thin/blob/master/CHANGELOG","source":"cve@mitre.org"},{"url":"http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/12/1","source":"cve@mitre.org"},{"url":"http://github.com/macournoyer/thin/blob/master/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/12/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3288","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD.  NOTE: this is only exploitable by users who can open the cdrom device."},{"lang":"es","value":"La función sg_build_indirect en drivers/scsi/sg.c en el kernel de linux v 2.6.28-rc1 a la v2.6.31-rc8 emplea una variable incorrecta cuando accede a una matriz, lo que permite a usuarios locales provocar una denegación de servicio (Kernel OOPS y una deferencia a puntero NULL), como se ha demostrado usando xcdroast para duplicar un CD. NOTA: esto es explotable únicamente por usuarios que pueden abrir la unidad de CD."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. This issue was introduced by upstream commit 10db10d1, and only affected kernels version 2.6.28-rc1 and later.","lastModified":"2009-09-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kernel:linux_kernel:2.6.28-rc1:*:*:*:*:*:*:*","matchCriteriaId":"EB876AB2-97A5-42DE-AC69-C564513FA837"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc2:*:*:*:*:*:*:*","matchCriteriaId":"3C86BC69-06B6-45C7-9821-45D42D44B240"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc3:*:*:*:*:*:*:*","matchCriteriaId":"EA0353B9-907F-4B89-9104-2F4434159F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc4:*:*:*:*:*:*:*","matchCriteriaId":"7D1FF505-4135-4005-BD1A-3AC913FEE20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc5:*:*:*:*:*:*:*","matchCriteriaId":"5D31D04B-1E65-4FD6-AEED-3F365C65FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc6:*:*:*:*:*:*:*","matchCriteriaId":"24CFD647-3926-462F-B264-56E136B74F81"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc7:*:*:*:*:*:*:*","matchCriteriaId":"BE71B9D7-B52E-426A-831D-ADEDC38318E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc8:*:*:*:*:*:*:*","matchCriteriaId":"C6FFA2CD-0EC9-4FBB-93DC-80736622CFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc9:*:*:*:*:*:*:*","matchCriteriaId":"B64401A9-58F5-4CB6-B0E2-A3A2B92659EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31-rc10:*:*:*:*:*:*:*","matchCriteriaId":"89137307-D97D-4D8B-9291-21DE1E6C56D3"}]}]}],"references":[{"url":"http://lkml.org/lkml/2009/9/3/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/9/3/107","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/4","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/9/3/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lkml.org/lkml/2009/9/3/107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/03/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3289","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory."},{"lang":"es","value":"La función g_file_copy en glib v2.0 establece los permisos del archivo objetivo sobre un enlace simbólico (777), lo que permite a usuarios locales asistidos por el usuario modificar los archivos de otros usuarios, como se ha demostrados usando Nautilus para modificar los permisos del directorio \"home\" de un usuario."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue does not affect the versions of glib2 as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-09-23T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:glib:2.0:*:*:*:*:*:*:*","matchCriteriaId":"510CF799-7651-4494-A420-6BD7CAF89A22"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"DE5FEEB4-95BC-47AF-A6EA-FEF4C2AF1A2C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39656","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/08/8","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.vupen.com/english/advisories/2010/1001","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/418135","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=593406","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/08/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.vupen.com/english/advisories/2010/1001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/418135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=593406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]}]}},{"cve":{"id":"CVE-2009-3290","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified \"random addresses.\""},{"lang":"es","value":"La función kvm_emulate_hypercall en el archivo arch/x86/kvm/x86.c en KVM en el kernel de Linux versión 2.6.25-rc1 y otras versiones anteriores a 2.6.31, cuando se ejecuta en sistemas x86, no impide el acceso a hiperllamadas MMU desde el timbre 0, lo que permite a los usuarios del sistema operativo invitado local causar una denegación de servicio (bloqueo del kernel invitado) y leer o escribir la memoria del kernel invitado por medio de \"random addresses” no especificadas."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-3290\n\nThis issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as KVM (Kernel-based Virtual Machine) is only supported in Red Hat Enterprise Linux 5. A future kernel update in Red Hat Enterprise Linux 5 will address this flaw.","lastModified":"2009-09-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.30","matchCriteriaId":"E8EFD951-8815-4199-9A17-E0AD64F5F8BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:rc1:*:*:*:*:*:*","matchCriteriaId":"DC2C3D3E-3765-423F-B41B-35096E5154A4"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=07708c4af1346ab1521b26a202f438366b7bcffd","source":"cve@mitre.org"},{"url":"http://patchwork.kernel.org/patch/38926/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/21/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/22/8","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1465.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=524124","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11328","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=07708c4af1346ab1521b26a202f438366b7bcffd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/38926/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/18/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/09/22/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1465.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-852-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=524124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3291","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates."},{"lang":"es","value":"La función php_openssl_apply_verification_policy de PHP en versiones anteriores a la v5.2.11 no realiza adecuadamente la validación de un certificado, lo que tiene un impacto y vectores de ataque desconocidos, probablemente relacionados con la posibilidad de suplantar certificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"AFD586D6-585F-4259-B845-24D7057678F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/40262","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58185","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022914","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53334","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10438","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7394","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3292","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to \"missing sanity checks around exif processing.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en PHP en versiones anteriores a la v5.2.11 tiene un impacto desconocido y vectores de ataque relacionados con un \"missing sanity checks around exif processing.\" (comprobaciones de validez no encontradas del procesamiento exif.)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"AFD586D6-585F-4259-B845-24D7057678F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://news.php.net/php.announce/79","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37412","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37482","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58186","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"cve@mitre.org"},{"url":"http://www.php.net/releases/5_3_1.php","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022914","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.php.net/php.announce/79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_3_1.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3293","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect \"sanity check for the color index.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en la función imagecolortransparent de PHP en versiones anteriores a la v5.2.11 tiene un impacto desconocido y vectores de ataque relacionados con un incorrecto \"sanity check for the color index.\" (comprobación de validez de un índice de color.)."}],"vendorComments":[{"organization":"Red Hat","comment":"This problem is not a security flaw in the PHP versions 4.3.5 and later. For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3293\n\nPHP versions shipped in Red Hat Enterprise Linux 4 and 5 do not need this fix. We do not plan to address this flaw in Red Hat Enterprise Linux 3.","lastModified":"2009-11-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"AFD586D6-585F-4259-B845-24D7057678F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40262","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58187","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022914","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7047","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3294","sourceIdentifier":"cve@mitre.org","published":"2009-09-22T10:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) \"e\" or (2) \"er\" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function."},{"lang":"es","value":"La función popen de la API en el archivo TSRM/tsrm_win32.c en PHP anterior a versión 5.2.11 y versión 5.3.x anterior a 5.3.1, cuando se ejecuta en ciertos sistemas operativos de Windows, permite que los atacantes dependiendo del contexto causen una denegación de servicio (bloqueo) mediante una cadena (1) \"e\" o (2) \"er\" en el segundo argumento (también se conoce como modo), posiblemente relacionado a la función _fdopen en la biblioteca runtime de Microsoft C. NOTA: esto podría no cruzar los límites de privilegios, excepto en casos excepcionales en los que el argumento mode es accesible para un atacante fuera de una aplicación que utiliza la función popen."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 3, 4, or 5, and Red Hat Application Stack v2.","lastModified":"2009-09-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.11","matchCriteriaId":"FFD822BB-D59C-4EFB-8E57-668CA6D477A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.1","matchCriteriaId":"54C23FEC-84BD-4C66-8B70-F24F4C26066F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"6B33C9BD-FC34-4DFC-A81F-C620D3DAA79D"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=44683","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://news.php.net/php.announce/79","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.php.net/viewvc?view=revision&revision=287779","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/20/1","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.osvdb.org/58188","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_3_1.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.php.net/bug.php?id=44683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://news.php.net/php.announce/79","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.php.net/viewvc?view=revision&revision=287779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.osvdb.org/58188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.php.net/ChangeLog-5.php#5.2.11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_11.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_3_1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3295","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:19.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request."},{"lang":"es","value":"La función prep_reprocess_req de kdc/do_tgs_req.c en la implementación de \"cross-realm referral\" (referencia entre dominios cruzados) en el Key Distribution Center (KDC) de MIT Kerberos 5 (krb5) v1.7 anteriores a v1.7.1 permite a atacantes remotos provocar una denegación de servicio (dereferenciación de un puntero NULL y caída del servicio) a través de una petición de ticket."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of krb5 as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2010-01-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*","matchCriteriaId":"DFB1190E-BE7A-4C6B-862D-D5747C64E980"}]}]}],"references":[{"url":"http://secunia.com/advisories/37977","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023392","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508622/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37486","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3652","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508622/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3296","sourceIdentifier":"cve@mitre.org","published":"2009-10-20T17:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows."},{"lang":"es","value":"Múltiples desbordamientos de entero en tiffread.c en CamlImages v2.2 permitiría a atacantes remotos ejecutar código arbitrario a través de imágenes TIFF que contengan valores muy grandes de alto y ancho que inician un desbordamiento de búfer basado en pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallium.inria:camimages:2.2:*:*:*:*:*:*:*","matchCriteriaId":"F9F39997-63DB-4596-8743-C0FD5BCA70F1"}]}]}],"references":[{"url":"http://secunia.com/advisories/37067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1912","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36713","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.2.0-4+lenny3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/c/camlimages/camlimages_2.20-8+etch3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3298","sourceIdentifier":"cve@mitre.org","published":"2009-11-03T16:30:12.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors."},{"lang":"es","value":"Mahara anterior a v1.0.13, y v1.1.x anterior a v1.1.7, permite a administradores \"institution\" autenticados remotamente restablecer las contraseñas de los administradores del sitio web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.12","matchCriteriaId":"075F7F07-0600-4536-ACDC-B7E3CDA68842"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8B49D797-AF1B-4F7E-A71D-AABD0F802912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"18048333-3E64-4AB4-9F20-2B1B8E7AB9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"68167317-977B-48EE-9320-2A4539A93B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CB25DF09-D88F-4633-9956-D64E3497153F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E32430EE-5F2B-4936-A297-2DF55CC22937"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1CC0259C-E628-4BBA-9D97-41A130B1E741"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"974F2D63-488C-41D7-A627-BF9B085A8D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E26420D4-20D8-4D6D-88B5-C74F39B88720"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"321475F4-1548-4FD1-BED9-12D944388FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8FA6F03B-F449-424E-A856-5BE5FB98814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7EFDC009-9CEB-450C-8704-CA73B147F220"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"831676A2-1A33-4605-A5F4-97FAC8A1BB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"84652E40-1C88-438D-BCA1-4FF4C069F9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"08F53776-5F58-4C20-8FE7-9DF06F1704A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"79228F92-00A8-4B74-A914-11BDF9641F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F7FB1F02-A03F-45E5-8D26-C007C10EE97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A09C63AC-15A8-4722-B18E-98A86EC8A856"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"62452677-EE4C-4E5E-9DD2-D11C4211DA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"92848F08-EBFC-4579-A088-EC15D0B3EE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"894C07CE-BDF4-4652-9591-6DB6877582F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D4D278FD-9892-4B8F-BB0C-9E2323F7B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F6537E2-0A45-4CFB-82A4-5BF25E59C8DF"}]}]}],"references":[{"url":"http://eduforge.org/frs/shownotes.php?release_id=546","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://eduforge.org/frs/shownotes.php?release_id=547","source":"cve@mitre.org"},{"url":"http://mahara.org/interaction/forum/topic.php?id=1169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1924","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59584","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36893","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3101","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://eduforge.org/frs/shownotes.php?release_id=546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://eduforge.org/frs/shownotes.php?release_id=547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mahara.org/interaction/forum/topic.php?id=1169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3299","sourceIdentifier":"cve@mitre.org","published":"2009-11-03T16:30:12.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el resume blocktype en Mahara anterior a v1.0.13, y v1.1.x anterior a v1.1.7, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.12","matchCriteriaId":"075F7F07-0600-4536-ACDC-B7E3CDA68842"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E32430EE-5F2B-4936-A297-2DF55CC22937"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E26420D4-20D8-4D6D-88B5-C74F39B88720"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8FA6F03B-F449-424E-A856-5BE5FB98814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7EFDC009-9CEB-450C-8704-CA73B147F220"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"831676A2-1A33-4605-A5F4-97FAC8A1BB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"84652E40-1C88-438D-BCA1-4FF4C069F9AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"08F53776-5F58-4C20-8FE7-9DF06F1704A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"D5D55D2C-E6E5-44A4-831A-3EAE5C1568CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"79228F92-00A8-4B74-A914-11BDF9641F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"9EEB3BF7-C4D3-4BB8-893F-B0FE252F0405"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"3BE91ED4-EA2A-4402-813C-1A2E5B10EA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F7FB1F02-A03F-45E5-8D26-C007C10EE97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A09C63AC-15A8-4722-B18E-98A86EC8A856"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"62452677-EE4C-4E5E-9DD2-D11C4211DA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2FDC6F32-24C0-4B5E-8338-FF85B0BBF801"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"92848F08-EBFC-4579-A088-EC15D0B3EE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D97D8A87-390E-45AC-B1B0-CFD63C7F07E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"894C07CE-BDF4-4652-9591-6DB6877582F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D4D278FD-9892-4B8F-BB0C-9E2323F7B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mahara:mahara:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3F6537E2-0A45-4CFB-82A4-5BF25E59C8DF"}]}]}],"references":[{"url":"http://eduforge.org/frs/shownotes.php?release_id=546","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://eduforge.org/frs/shownotes.php?release_id=547","source":"cve@mitre.org"},{"url":"http://mahara.org/interaction/forum/topic.php?id=1170","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1924","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59583","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36892","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3101","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://eduforge.org/frs/shownotes.php?release_id=546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://eduforge.org/frs/shownotes.php?release_id=547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mahara.org/interaction/forum/topic.php?id=1170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3300","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3, in Internet2 Middleware Initiative Shibboleth allow remote attackers to inject arbitrary web script or HTML via URLs that are encountered in redirections, and appear in automatically generated forms."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Identity Provider (IdP) v1.3.x anteriores a v1.3.4 y v2.x anteriores a v2.1.5, y el Service Provider v1.3.x anteriores a v1.3.5 y v2.x anteriores a v2.3, en Internet2 Middleware Initiative Shibboleth permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante URLs que se encuentran en redirecciones, y aparecen en formularios generados automáticamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8F4FDCC-6F62-46B3-BDE4-47E97C42A8BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8E506CFD-FA07-4AF2-B5D0-E2445CE8E187"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BAD4C302-0D8A-4D87-A221-AEA7860AFBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F79E5936-403C-4B39-BF9E-D2CE37BF0FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E860B355-440B-42B0-8529-E61B5906EDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"983E964B-7EED-4CD7-9008-65CF4F7F9267"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABEDD8A8-7178-4147-8AF8-E01DFDE3695C"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"381F5C77-56C3-4423-BEDD-03D6D9A36904"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:identity_provider:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"439E3E35-657A-4DF2-8448-6A83C24E38AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4FBF9D0E-7284-48A3-86B8-13B939A0122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B580FD0A-623A-4B8B-9FF2-521761C7DAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"383415FC-3B9D-435E-B492-D906E8C2B9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C5DC9602-44EB-433D-99BB-2BA487E1B441"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D1747D4-FD56-4635-8C0C-CC56C95A09E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F800773B-4EC2-4409-856D-4827A9FDEEA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:service_provider:2.2:*:*:*:*:*:*:*","matchCriteriaId":"23335793-69A9-44C3-9EC9-2D5486B7010D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37237","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20091104.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1947","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20091104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3303","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en www/help/tracker.php en GForge v4.5.14, v4.7 rc2, y v4.8.1 permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro helpname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.7:rc2:*:*:*:*:*:*","matchCriteriaId":"C732A7C4-93A0-4680-9663-EB362570C950"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"0F367F95-9998-4866-BC5F-D61186D010C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/37450","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch12.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1937","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37088","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch12.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3304","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php."},{"lang":"es","value":"GForge v4.5.14, v4.7 rc2, y v4.8.2 permite a usuarios locales sobrescribir ficheros de su elección mediante un ataque de enlace simbólico en ficheros authorized_keys en los directorios de inicio de los usuarios, estando relacionado con deb-specific/ssh_dump_update.pl y cronjobs/cvs-cron/ssh_create.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.7:rc2:*:*:*:*:*:*","matchCriteriaId":"C732A7C4-93A0-4680-9663-EB362570C950"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"C2A16067-DC16-4102-8594-F61247E3D1AC"}]}]}],"references":[{"url":"http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch13.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1945","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37195","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch13.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3305","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in http_parse.c, and possibly other unspecified vectors."},{"lang":"es","value":"Polipo v1.0.4, y probablemente otras versiones, permite a atacants remotos causar una denegación de servicio (caída) a través de una petición con una cabecera Cache-Control que carece de valor para el campo max-age, lo que provoca un fallo de segmentación en la función httpParseHeaders en http_parse.c, y probablemente otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDA6AD38-1D25-43BE-8FCB-B337FFA0A137"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=547047","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/dca6877a8117f0df","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38647","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37463","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=547047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/dca6877a8117f0df","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3306","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:34.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en include/header.php en ClearSite v4.50, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro cs_base_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:richrumble:clearsite:4.50:*:*:*:*:*:*:*","matchCriteriaId":"B8D1689C-A4DA-4DA3-85ED-36C64104B957"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/511507/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/40457","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2702","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/511507/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/40457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3307","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHP_LIB parameter to (1) FSphp.php, (2) navigation.php, and (3) pathwrite.php in lib/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en FSphp v0.2.1, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro FSPHP_LIB a (1) FSphp.php, (2) navigation.php, y (3) pathwrite.php en lib/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frank_lichtenheld:fsphp:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5DE3023A-A2CD-43F4-BCC6-735853607393"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9720","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3308","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands via the listingid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en show-cat.php en FanUpdate v2.2.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"listingid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fanupdate:fanupdate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"01DFDD3F-8A94-4A33-9494-4C363480FFBB"}]}]}],"references":[{"url":"http://secunia.com/advisories/36795","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9719","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3309","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.cfm en CF ShopKart v5.4 beta, permite a atacantes remotos ejecutar comando SQL de su elección a través del parámetro \"itemid\" en una acción ViewDetails. Vector distinto de CVE-2008-6320."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cfshopkart:cf_shopkart:5.4:beta:*:*:*:*:*:*","matchCriteriaId":"ACF54448-EF83-449D-9FF9-2B8DB81651CE"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9710","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36442","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53331","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3310","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the album_id parameter in an AlbumSongs action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  index.php en Zainu v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"album_id\" en una acción AlbumSongs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shalwan:zainu:1.0:*:*:*:*:*:*:*","matchCriteriaId":"464B51DC-99B0-40E9-AA3C-BAE906EC9657"}]}]}],"references":[{"url":"http://secunia.com/advisories/36798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9715","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36453","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3311","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en RSSMediaScrip, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rssmediascript:rssmediascript:*:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C4CB-D317-4ACA-A145-06B57B24D560"}]}]}],"references":[{"url":"http://osvdb.org/58169","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/rssms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53319","source":"cve@mitre.org"},{"url":"http://osvdb.org/58169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0909-exploits/rssms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3312","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the include_class parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en php/init.poll.php en phpPollScript v1.3 y anteriores, cuando register_globals están activados, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL manipulada en el parámetro \"include_class\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tomex:phppollscript:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"0FC8B4BB-E034-4169-909A-BD486B3E075E"}]}]}],"references":[{"url":"http://osvdb.org/58181","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9703","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53316","source":"cve@mitre.org"},{"url":"http://osvdb.org/58181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3313","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en FMyClone v2.3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"comp\" a (1) index.php y (2) editComments.php, y (3) permite a administradores autenticados ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"comment\" a edit.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fmyclone:fmyclone:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B1527AFC-08E0-4205-8C8E-00E5789A1D5B"}]}]}],"references":[{"url":"http://osvdb.org/58182","source":"cve@mitre.org"},{"url":"http://osvdb.org/58183","source":"cve@mitre.org"},{"url":"http://osvdb.org/58184","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9711","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53329","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53330","source":"cve@mitre.org"},{"url":"http://osvdb.org/58182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3314","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL commands via the platform parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ladders.php en Elite Gaming Ladders v3.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"plattform\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eliteladders:elite_gaming_ladders:3.2:*:*:*:*:*:*:*","matchCriteriaId":"06939231-5AFB-47B6-A62C-7FECD33E0DC3"}]}]}],"references":[{"url":"http://osvdb.org/58168","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36732","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9702","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53317","source":"cve@mitre.org"},{"url":"http://osvdb.org/58168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3315","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en  NeLogic Nephp Publisher Enterprise v3.5.9 y v4.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo \"field\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nelogic:nephp_publisher:3.5.9:*:enterprise:*:*:*:*:*","matchCriteriaId":"8200FBD5-65E3-460A-9981-24F6D3EC2F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:nelogic:nephp_publisher:4.5:*:enterprise:*:*:*:*:*","matchCriteriaId":"6044A3E0-275D-442B-9D2E-0E0D6966ADBF"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9712","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36444","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53332","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3316","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente  JReservation (com_jreservation) v1.0 y v1.5 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"pid\" en una acción propertycpanel a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jforjoomla:com_jreservation:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D0E4B987-06B6-44DC-B977-52395C67E11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jforjoomla:com_jreservation:1.5:*:*:*:*:*:*:*","matchCriteriaId":"525A4B37-3433-405C-8DFE-C271C615E960"}]}]}],"references":[{"url":"http://osvdb.org/58176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36446","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53327","source":"cve@mitre.org"},{"url":"http://osvdb.org/58176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3317","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to execute arbitrary PHP code via a URL in the path parameter, a different vector than CVE-2008-0648."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en pages/pageHeader.php en OpenSiteAdmin v0.9.7 BETA, permite a atacantes remotos ejecutar código PHP a través de una URL en el parámetro \"path\". Vector distinto de CVE-2008-0648."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thecodeweasel:opensiteadmin:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"5152028C-75FC-47A0-A8A3-F9FB68969C08"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9708","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36445","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53326","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3318","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Roland Breedveld Album (com_album) v1.14 para Joomla!, permite a atacantes remotos  acceder a directorios de su elección y tener otro impacto a través de ..(punto punto) en parámetro \"target\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:breedveld:com_album:1.14:*:*:*:*:*:*:*","matchCriteriaId":"F9D56F7E-A139-4960-95CE-F25FFACF4D99"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36441","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3319","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en poems.php en DCI-Designs Dawaween v1.03, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción \"list\". Vector distinto del  CVE-2006-1018."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dimofinf:dawaween:1.03:*:*:*:*:*:*:*","matchCriteriaId":"EACE66EA-9547-4CD7-999B-4D53CF47F8D9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506616/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/16909","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506616/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/16909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3320","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en scrivi.php en Zenas PaoLink(también conocido como Pao-Link) v1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenas:paolink:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DAD8EF-4D6B-44D3-A536-88280B468CC2"}]}]}],"references":[{"url":"http://osvdb.org/58166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0909-exploits/paolink-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53324","source":"cve@mitre.org"},{"url":"http://osvdb.org/58166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0909-exploits/paolink-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3321","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP HTTP header."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en SaphpLesson v4.3, cuando magic_quotes_gpc está deshabilitado, permite a atacantes remotos ejecutar comandos SQL de su elección a través de la cabecera HTTP CLIENT_IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:saphplesson:saphplesson:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A90B486F-DC87-43E1-9CE8-6109267BC2DE"}]}]}],"references":[{"url":"http://osvdb.org/58173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9700","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36422","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53305","source":"cve@mitre.org"},{"url":"http://osvdb.org/58173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3322","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port 1723."},{"lang":"es","value":"El router Siemens Gigaset SE361 WLAN permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una inundación de paquetes TCP manipulados al  puerto 1723."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:gigaset_se361_wlan_router:*:*:*:*:*:*:*:*","matchCriteriaId":"65773CEF-E2D9-4EC2-957B-053CFA3227B7"}]}]}],"references":[{"url":"http://secunia.com/advisories/36697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9646","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58199","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506414/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36366","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506414/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3323","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the baros_path parameter to (1) include/common_functions.php, and the main_path parameter to (2) lib_users.php, (3) lib_stats.php, and (4) lib_slots.php in include/lib/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en BAnner ROtation System mini (BAROSmini) v0.32.595, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros: baros_path a(1) include/common_functions.php, y main_path parameter a (2) lib_users.php, (3) lib_stats.php, y (4) lib_slots.php in include/lib/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robig:barosmini:0.32.595:*:*:*:*:*:*:*","matchCriteriaId":"1FAAE119-C1DB-49F1-8A59-B3630254B917"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9724","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53378","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3324","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en include/prodler.class.php en ProdLer v2.0, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro sPath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andres_g_aragoneses:prodler:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"C574B33D-DA8E-4161-B3FA-19AE486D5819"},{"vulnerable":true,"criteria":"cpe:2.3:a:andres_g_aragoneses:prodler:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD1542F-4FC9-4439-B700-7E416754B7E5"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9728","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3325","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Focusplus Developments Survey Manager(com_surveymanager) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"stype\" en una acción \"editsurvey\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:focusdev:com_surveymanager:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A198EB83-2A0D-4FC5-B0D6-37F906428FB8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9721","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36464","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3326","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the id_menu parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en CMScontrol Content Management System v7.x, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id_menu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmscontrol:cmscontrol:7:*:*:*:*:*:*:*","matchCriteriaId":"F04EE06C-BCA7-403F-AC43-C84BCFC454CF"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9727","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3327","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands via the (1) QUERY parameter to search.php and (2) USERNAME parameter to login.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en WX-Guestbook v1.1.208, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) QUERY  a search.php y (2) USERNAME a login.php. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webilix:wx-guestbook:1.1.208:*:*:*:*:*:*:*","matchCriteriaId":"45C9E73C-DABD-4652-BA46-BCBBE1F628C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3328","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary web script or HTML via the sName parameter (aka the name field).  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en sign.php en WX-Guestbook v1.1.208, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"sName\" (también conocido como el campo \"name\"). NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webilix:wx-guestbook:1.1.208:*:*:*:*:*:*:*","matchCriteriaId":"45C9E73C-DABD-4652-BA46-BCBBE1F628C8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3329","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Plot2D (.wp2) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Winplot  v1.25.0.1, permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un archivoPlot2D(.wp2) manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exeter:winplot:1.25.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0FC642C8-B91C-4F6B-B70C-2FBC0A37A061"}]}]}],"references":[{"url":"http://secunia.com/advisories/36817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3330","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tickets parameter in a support ticket action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en cP Creator v2.7.1, cuando magic_quotes_gpc están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"tickets\" en una acción \"support tickets\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpecreator:cp_creator:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8FADBA17-CCD1-40A0-B1AE-358A0913AC06"}]}]}],"references":[{"url":"http://secunia.com/advisories/36815","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3331","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parameter to (1) header.php, (2) submit.php, (3) submitted.php, and (4) autosubmitter/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo PHP en DDL CMS v1.0, permite a atacantes remotos ejecutar código PHP de su elección a través del  una URL en el parámetro wwwRoot a (1) header.php, (2) submit.php, (3) submitted.php, y (4) autosubmitter/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ddlcms:ddl_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"610A5D1E-5554-41B6-8CB8-10A38B0367F8"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9722","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53373","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3332","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the bid parameter in a mybudget action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el  componente JBudgetsMagic(com_jbudgetsmagic) v0.3.2 a la v0.4.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"bid\" en una acción \"mybudget\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sopinet:com_jbudgetsmagic:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7BC79F9E-848C-4CF7-B151-C750C1089D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sopinet:com_jbudgetsmagic:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"90DD4827-A24D-4B68-A188-B2688D15445E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sopinet:com_jbudgetsmagic:0.4.0:beta:*:*:*:*:*:*","matchCriteriaId":"1046D14B-ADD0-44D1-AD6B-00CD63595762"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36461","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3333","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en koesubmit.php en el componente koeSubmit (com_koesubmit) v1.0 para Mambo, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alibasta:com_koesubmit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A6E2365-B2EA-4138-904A-9BC655AEEE2B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36447","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3334","sourceIdentifier":"cve@mitre.org","published":"2009-09-23T12:08:35.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (también conocido como JINC o com_jinc)JINC or com_jinc)para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su eleccióna través del parámetro \"newsid\" en un acción \"messages\" a index.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lhacky:com_jinc:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1573029B-AF02-45B4-8DF7-EA8E4745FC36"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9732","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36471","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3335","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Name field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente TurtuShout v0.11 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo Name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turtus:turtushout:0.11:*:*:*:*:*:*:*","matchCriteriaId":"C3961E64-C6B1-40F6-B014-9B4D7A811866"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9653","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53209","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3336","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en auction_details.php en PHP Pro Bid , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro auction_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpprobid:php_pro_bid:*:*:*:*:*:*:*:*","matchCriteriaId":"C1DE9365-1CA1-4FA1-932F-FC1C87714BE9"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36389","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3337","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el complemento reetag (serendipity_event_freetag) anteriores a v3.09 para Serendipity (S9Y), permite a atacantes remotos ejecutar comandos SQL de su elección a través de un parámetro no especificado asociado con la clave METE en una entrada de un blog.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity_event_freetag:*:*:*:*:*:*:*:*","versionEndExcluding":"3.09","matchCriteriaId":"54D83768-FCC7-42B2-8A16-6AD030EBE5B3"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36706","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36376","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3338","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code via a long string in a .mor file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en EffectMatrix (E.M.) Magic Morph v1.95b, permite a atacantes remotos ejecutar código de su elección a través de una cadena larga en un fichero .mor"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:effectmatrix:magic_morph:1.95b:*:*:*:*:*:*:*","matchCriteriaId":"091D7A5A-66D7-445F-87F7-6329F707EB1F"}]}]}],"references":[{"url":"http://secunia.com/advisories/36721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9659","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3339","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per http://www.mcafee.com/us/enterprise/products/virtualization_security/email_and_web_security_appliance_virtual.html\r\n\r\nExperience McAfee Email and Web Security Appliance through the power of virtualization\r\n\r\nWe’ve made it easier than ever to evaluate McAfee Email and Web Security Appliance, our email and web security appliance. Thanks to VMware virtualization technology, you can download a free 30-day software trial—with all of the features and functionality of the appliance. Install it on your server and experience uncompromising protection against spam, phishing, viruses, spyware, and more.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en McAfee Email y Web Security Appliance v5.1 VMtrial permite a los atacantes remotos leer arbitrariamente archivos a través de vectores desconocidos, como se demuestra en un cierto módulo en VulnDisco Pack Professional v8.9 hasta v8.11. NOTA: como en 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:email_and_web_security_appliance:5.1:-:vmtrial:*:*:*:*:*","matchCriteriaId":"F74E6F29-D3AE-4FCD-B87C-4CFCA4795761"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:mcafee:email_and_web_security_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"400C7DFE-129B-4BDB-8437-933FAAE01A6D"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36574","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022829","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3340","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en FreeSSHD v1.2.4 permite a los atacantes remotos causar una denegación de servicio  através de vectores desconocidos, como se demostró en cierto módulo en VulnDisco Pack Professional v8.11. NOTA como en 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confianza, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freesshd:freesshd:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E9257888-498B-4FA3-B7E8-DE36F673E85D"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36506","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022811","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3341","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer en el router inalámbrico Linksys WRT54GL permite a los atacantes remotos ejecutar arbitrariamente código a través de vectores no especificados, como se demuestra en cierto módulo en VulnDisco Pack Professional v8.10 hasta v8.11. NOTA: como en 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confianza, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54gl:*:*:*:*:*:*:*:*","matchCriteriaId":"74623411-FCF0-4ECA-8D3E-F7CC6DF8AD65"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022827","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3342","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) component 1.5.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the username2points parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en frontend/assets/ajax/checkusername.php en the AlphaUserPoints (com_alphauserpoints) componente v1.5.2 para Joomla! permite a los atacantes remotos, ejecutar arbitrariamente comandos SQL a través del parámetro username2points."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alphaplug:com_alphauserpoints:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A38F4650-3E21-451F-9401-D305F25C0767"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36383","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/9654","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/9654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3343","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en details.asp en HotWeb Rentals, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro PropId."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotwebscripts:hotweb_rentals:*:*:*:*:*:*:*:*","matchCriteriaId":"EDBD5470-B5E3-41D8-81FB-9E37C1056C90"}]}]}],"references":[{"url":"http://secunia.com/advisories/36747","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3344","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en SAP Crystal Reports Server 2008 en Windows XP permite a los atacantes causar una denegación de servicio (bucle infinito) a través de vectores desconocidos, como se demuestra en un módulo en VulnDisco Pack Professional v8.3 hasta v8.11. NOTA: como en 20090917, esta información no se tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador de confianza, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*","matchCriteriaId":"86409332-CE42-450B-8824-18663C8ECA75"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36267","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3345","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica -heap- en SAP Crystal Reports Server 2008, tiene impacto y vectores de ataque desconocidos, como se ha demostrado en determinado módulo de VulnDisco Pack Professional v8.3 hasta v8.11. NOTA: a fecha de 17/09/2009, este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador fiable, se ha decidido asignarle un identificador al CVE para poder realizar un seguimiento del mismo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*","matchCriteriaId":"86409332-CE42-450B-8824-18663C8ECA75"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36267","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3346","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en AP Crystal Reports Server 2008 permite a los atacantes remotos ejecutar arbitrariamente código a través de vectores desconocidos, como se demuestra en ciertos módudos en VulnDisco Pack Professional v8.3 hasta v8.11. NOTA: como 20090917, esta información no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador de confianza, se le ha asignado un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*","matchCriteriaId":"86409332-CE42-450B-8824-18663C8ECA75"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36267","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3347","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer en el router inalámbrico D-Link DIR-400, permite a atacantes remotos ejecutar código de su elección a através de vectores no especificados, como se ha demostrado en determinado módulo de VulnDisco Pack Professional v8.10 hasta v8.11. NOTA: A fecha de 17/09/2009 este aviso no cuenta con más información. Sin embargo, debido a que el autor de VulnDisco Pack en un investigador fiable, le hemos asignado un identificador CVE a este problema para poder hacer un seguimiento del mismo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dir-400:*:*:*:*:*:*:*:*","matchCriteriaId":"78C4EF20-5623-45E4-8517-CFEFCF628182"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36454","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57791","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36237","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022826","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3348","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en Datavore Gyro v5.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"cid\" en una acción cat contra el componente home."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datavore:gyro:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AE15FBF1-22A2-405D-8188-2C10C9D1E93E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9640","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53195","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3349","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Datavore Gyro v5.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro cid en una acción cat en el componente home -inicio-."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datavore:gyro:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AE15FBF1-22A2-405D-8188-2C10C9D1E93E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9640","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53194","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3350","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el módulo Subdomain Manager para Drupal con un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roshan_shah:subdomain_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"973F48A8-901B-45FF-BE06-AF4DE40E08BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/572852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36329","source":"cve@mitre.org"},{"url":"http://drupal.org/node/572852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3351","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el módulo Node para Drupal con un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kristy_frey:node_browser_module:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"43A4DE59-A334-4762-AD25-51122B52322B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristy_frey:node_browser_module:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"9CFE68E9-AFE5-4420-AE54-9E3D4AFDEE90"}]}]}],"references":[{"url":"http://drupal.org/node/572852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36325","source":"cve@mitre.org"},{"url":"http://drupal.org/node/572852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3352","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:01.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el módulo quota_by_role (Quota by role) de Drupal, tienen impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"7.0","matchCriteriaId":"B1EFC65F-D384-4412-8780-64428B186D66"}]}]}],"references":[{"url":"http://drupal.org/node/572852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36330","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/node/572852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3353","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el módulo Node2Node para Drupal con un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_lockwood:node2node:*:*:*:*:*:*:*:*","matchCriteriaId":"39D4BCFC-C372-47A2-BA6E-7A08D585FF14"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/572852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36323","source":"cve@mitre.org"},{"url":"http://drupal.org/node/572852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3354","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el módulo Rest API para Drupal tienen impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_sterling_hanenkamp:rest_api_module:*:*:*:*:*:*:*:*","matchCriteriaId":"DD9951C6-D514-4FC0-B841-4A9620C7B52F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/572852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36331","source":"cve@mitre.org"},{"url":"http://drupal.org/node/572852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3355","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the s_r parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en profile.php de Datetopia Buy Dating Site v1.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro s_r."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datetopia:buy_dating_site:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C2B1E72-192D-4E78-A3FF-43E9383209AF"}]}]}],"references":[{"url":"http://osvdb.org/57967","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/buydatingsite-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53176","source":"cve@mitre.org"},{"url":"http://osvdb.org/57967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0909-exploits/buydatingsite-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3356","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Image voting v1.0 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través del parámetro show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plohni:image_voting:1.0:*:*:*:*:*:*:*","matchCriteriaId":"04321387-FE41-45D9-B2C5-65CA5F513C03"}]}]}],"references":[{"url":"http://secunia.com/advisories/36705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9639","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3357","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) h_id, (2) id, and (3) rid parameters to longDesc.php, and the h_id parameter to (4) detail.php, (5) detail1.php, (6) detail2.php, (7) detail3.php, (8) detail4.php, (9) detail5.php, (10) detail6.php, (11) detail7.php, and (12) detail8.php, different vectors than CVE-2008-5865, CVE-2008-5874, and CVE-2008-5875."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el componente Hotel Booking Reservation System (también conocido como HBS o com_hbssearch) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"h_id\", (2) \"id\", y (3) \"rid\"\r\na longDesc.php; y el parámetro \"h_id\" a (4) detail.php, (5) detail1.php, (6) detail2.php, (7) detail3.php, (8) detail4.php, (9) detail5.php, (10) detail6.php, (11) detail7.php, y (12) detail8.php. Vectores distintos de CVE-2008-5865, CVE-2008-5874 y CVE-2008-5875."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:com_hbssearch:*:*:*:*:*:*:*:*","matchCriteriaId":"10562B5E-A126-4CC2-826A-0D6004B787F6"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=142","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506444/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://e-rdc.org/v1/news.php?readmore=142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506444/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3358","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the user_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en  profile.php en Tourism Scripts Adult Portal escort listing permite a los atacantes remoto, ejecutar arbitrariamente comandos SQL a través del parámetro user_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tourismscripts:adult_portal_escort_listing:*:*:*:*:*:*:*:*","matchCriteriaId":"3D8D4387-0E86-4A51-95FC-49D94D2A5439"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9634","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53134","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3359","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Match Agency BiZ v1.0, permiten a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de los parámetros (1) important -importante- de edit_profile.php y (2) pid de report.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datetopia:match_agency_biz:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9289EB2A-5DB2-4440-9BF0-F8CB4F6D6811"}]}]}],"references":[{"url":"http://osvdb.org/57968","source":"cve@mitre.org"},{"url":"http://osvdb.org/57969","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36672","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53173","source":"cve@mitre.org"},{"url":"http://osvdb.org/57968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0909-exploits/matchagencybiz-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3360","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) return parameter to photo_view.php, and st parameter to (2) photo_search.php and (3) search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Datemill v1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"return\" a photo_view.php y  \"st\" a (2) photo_search.php y(3) search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datemill:datemill:1.0:*:*:*:*:*:*:*","matchCriteriaId":"87DC42CF-F8A9-4291-859D-9A6749B15823"}]}]}],"references":[{"url":"http://osvdb.org/57989","source":"cve@mitre.org"},{"url":"http://osvdb.org/57991","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/datemill-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57990","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53177","source":"cve@mitre.org"},{"url":"http://osvdb.org/57989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0909-exploits/datemill-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3361","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincat_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php de PHP-IPNMonitor, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro maincat_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_gibbs:php-ipnmonitor:*:*:*:*:*:*:*:*","matchCriteriaId":"62D4B471-D938-4E3F-8842-0C2A20DBF057"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9647","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3362","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en printnews.php3 en SZNews v2.7, permite a atacantes ejecutar archivos PHP de su elección a través de una URL en el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sznews:sznews:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2E549418-D5B4-483E-A0F9-44704FA2B6F9"}]}]}],"references":[{"url":"http://osvdb.org/57986","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/sznews-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/57986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0909-exploits/sznews-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3363","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the BUEditor module 5.x before 5.x-1.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the \"plain textarea editor.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo BUEditor v5.x anteriores a v5.x-1.2 y v6.x anteriores a v6.x-1.4,, un módulo para Drupal, permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de entradas en el \"el área de texto del editor de texto plano\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"434A317B-67BB-4326-AE25-4BA8B3A0CBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"19310183-AA17-4039-BD1C-2CCE65D6E821"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"DFC85803-94EF-4A8E-843E-EA529858AB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D88290C-CD64-41F6-A967-AC87CABA4D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"52125C12-1F62-4B12-8E95-D2594881BE1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"935D8AFD-C3F7-4CDA-8CEC-4924B561876C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"4809C1FD-7491-4901-B4BF-896FB0DB9962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ufku_bayburt:bueditor:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"2BC1F135-35A0-46DD-AA47-D3569026D9BA"}]}]}],"references":[{"url":"http://drupal.org/node/572850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36678","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57870","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36320","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53132","source":"cve@mitre.org"},{"url":"http://drupal.org/node/572850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/57870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3364","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en FTPShell Client v 4.1 RC2, permite a servidores FTP remotos ejecutar código de su elección mediante una respuesta larga al comando PASV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftpshell:ftpshell:4.1:rc2:client:*:*:*:*:*","matchCriteriaId":"0C182093-5889-4746-A960-79D919819009"}]}]}],"references":[{"url":"http://secunia.com/advisories/36628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9613","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36327","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2604","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53126","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3365","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORA_MODULES_FOLDER parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en add-ons/modules/sysmanager/plugins/install.plugin.php en Aurora CMS v1.0.2, permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro AURORA_MODULES_FOLDER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:traza:aurora:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D04784A-D575-4859-A490-162C1850A2EB"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9656","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3366","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en navigation.php en An image gallery v1.0, permite a atacantes remotos listar archivos de su elección a través de ..(punto punto) en el parámetro \"path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plohni:an_image_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF8D1B26-A292-487B-800D-A273A9418FC6"}]}]}],"references":[{"url":"http://osvdb.org/57943","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36680","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9636","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53148","source":"cve@mitre.org"},{"url":"http://osvdb.org/57943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3367","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad múltiple de ejecución de secuencias de comandos en sitios cruzados - XSS en una galería de imágenes v1.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comando web o HTML a travé del parámetro path para (1) index.php y (2) main.php, y el parámetro (3) show para main.php NOTA: la procedencia de esta información es desconocida; los detalles ha sido obtenidos únicamente a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plohni:an_image_gallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF8D1B26-A292-487B-800D-A273A9418FC6"}]}]}],"references":[{"url":"http://osvdb.org/57944","source":"cve@mitre.org"},{"url":"http://osvdb.org/57945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36680","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/57944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3368","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el componente Hotel Booking Reservation System (también conocido por HBS o com_hbssearch) para Joomla! permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro adult -adulto- en una acción showhoteldetails en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlahbs:com_hbssearch:*:*:*:*:*:*:*:*","matchCriteriaId":"10562B5E-A126-4CC2-826A-0D6004B787F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://e-rdc.org/v1/news.php?readmore=142","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9648","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506444/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36380","source":"cve@mitre.org"},{"url":"http://e-rdc.org/v1/news.php?readmore=142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/33215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506444/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3369","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T16:30:02.407","lastModified":"2025-09-08T16:54:12.430","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then initiating a backup or restore."},{"lang":"es","value":"CgiUserConfigEdit en BackupP v3.1.0, cuando las claves SSH y Rsync están en uso en un entorno multiusuario, no limita el acceso a los usuarios desde la función CLientNameAlias, lo que permite a usuarios autenticados remotamente la lectura y escritura de archivos sensibles mediante la modificación de ClientNameAlias para que coincida con el de otro sustema, y después iniciando una copia de seguridad o restaurándola."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:backuppc:backuppc:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0509FE0E-E483-4A6B-9653-F1DBDA321DA5"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542218","source":"cve@mitre.org"},{"url":"http://osvdb.org/57236","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37161","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518412","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00694.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00729.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00729.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3370","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.15, y v3.5.x anteriores a v3.5.4, permite a atacantes remotos leer la historia de un formulario mediante la falsificación de los eventos de teclado y ratón, que la característica de auto completado rellena los campos del formulario, en un formulario de ataque con entradas del historial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-52.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511615","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10836","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6455","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-52.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3371","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en Mozilla Firefox v3.5.x anteriores a v3.5.4 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario mediante la creación de web-workers de JavaScript recursivos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-54.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514554","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-54.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3372","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4, y SeaMonkey anteriores a v2.0, permite a atacantes remotos ejecutar código arbitrario a través de un expresión regular manipulada en un fichero de autoconfiguración de proxy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.0.10","matchCriteriaId":"78D4B6BB-B349-47FC-A13E-8C4C95D9959B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-55.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500644","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10977","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6347","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3373","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el parseador de imágenes GIF en Mozilla Firefox anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4, y SeaMonkey anteriores a v2.0, permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.0.10","matchCriteriaId":"78D4B6BB-B349-47FC-A13E-8C4C95D9959B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-56.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511689","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-56.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3374","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to \"doubly-wrapped objects.\""},{"lang":"es","value":"La función XPCVariant::VariantDataToJS en la implementacion XPCOM en Mozilla Firefox v3.0.x anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4  no aplica adecuadamente las restricciones previstas en la interacción entre código del chrome y objetos procedentes de paginas web remotas, lo que permite a atacantes remotos ejecutar JavaScript arbitrario con privilegios chrome a través de métodos de llama sin especificar, relacionado con \"objetos doubly-wrapped\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-57.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=505988","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6565","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9789","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-57.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=505988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3375","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function."},{"lang":"es","value":"content/html/document/src/nsHTMLDocument.cpp en Mozilla Firefox v3.0.x anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4  permite a atacantes remotos ayudados por un usuario evitar la politica \"Same Origin\" y leer contenido arbitrario a través de la función document.getSelection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-61.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503226","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10440","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5935","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-61.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3376","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file."},{"lang":"es","value":"Mozilla Firefox anteriores a v3.0.15 y v3.5.x anteriores a v3.5.4, y SeaMonkey anteriores a v2.0, no maneja adecuadamente una anulación de carácter Unicode \"right-to-left\" (también conocido como RLO o U+202E) en un nombre de fichero de descarga, lo que permite a atacantes remotos falsificar las extensiones de fichero a través de un nombre de fichero manipulado como se demuestra en una extensión no ejecutable de un fichero ejecutable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.0.10","matchCriteriaId":"78D4B6BB-B349-47FC-A13E-8C4C95D9959B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38977","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-62.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511521","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-62.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3377","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en liboggz anteriores a cf5feeaab69b05e24, tal y como es utilizado en Mozilla Firefox v3.5.x anteriores a v3.5.4, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-63.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=512327","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515376","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-63.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=512327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3378","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file."},{"lang":"es","value":"La función oggplay_data_handle_theora_frame en media/liboggplay/src/liboggplay/oggplay_data.c en liboggplay, tal y como se utiliza en Mozilla Firefox v3.5.x anteriores a v3.5.4, intenta reutilizar un frame de estructura de datos cuando encuentra un error de decodificado para el primer frame, lo que permite a atacantes remotos producir una denegación de servicio (desreferencia a puntero NULL y caída de aplicación) o posiblemente ejecutar código arbitrario a través de un fichero de vídeo manipulado .ogg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-63.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500311","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-63.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3379","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663."},{"lang":"es","value":"Múltiples vulnerabilidades inespecíficas en libvorbis, tal y como se utiizan en Mozilla Firefox v3.5.x anteriores a v3.5.4, lo que permitiría a atacantes remotos producir una denegación de servicio (caída de aplicación)o posiblemente la ejecución de código arbitrario a través de vectores desconocidos. NOTA: Esta vulnerabilidad se solaparía con CVE-2009-2663."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://secunia.com/advisories/37306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37340","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-63.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1561.html","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-861-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=499512","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500254","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=501279","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=507167","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515889","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-63.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1561.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-861-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=499512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=500254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=501279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=507167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3380","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades inespecíficas en el motor del navegador en Mozilla Firefox v3.0.x anteriores a v3.0.15  y v3.5.x anteriores a v3.5.4 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente la ejecución de código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454872","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489925","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=497013","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508927","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=509244","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=509602","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514776","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522030","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=454872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=489925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=497013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=509244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=509602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3381","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Multiples vulnerabilidades inespecíficas en el motor del navegador Moxilla Firefox v3.5.x anteriores a v3.5.4 lo que permitiría a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502168","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503196","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508057","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=513394","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516709","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=502168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=508057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=513394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3382","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"layout/base/nsCSSFrameConstructor.cpp en el motor del navegador en Mozilla Firefox v3.0.x anteriores a v3.0.15 no maneja adecuadamente los frames, lo que permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514960","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11219","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5581","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3383","sourceIdentifier":"cve@mitre.org","published":"2009-10-29T14:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades inespecíficas en el motor JavaScript en Mozilla Firefox v3.5.x anteriores a 3.5.4 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=510987","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=518675","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-64.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=510987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=518675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3384","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en WebKit en Apple Safari en versiones anteriores a la 4.0.4 en Windows permiten a servidores FTP remotos ejecutar código de su elección, provocar una denegación de servicio (caída de la aplicación) o obtener información sensible mediante un listado de directorios manipulado en una respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"276684F5-5CD2-44E6-931A-E8B11D022B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*","matchCriteriaId":"09F4ADD0-449B-4DDD-9878-DE86CBD56756"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2E0AECB7-FE62-4664-B3B8-8161DA6DA4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"64FE1AA1-32D1-4825-8B2B-E66093937D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E760CD65-A10E-44F1-B835-DA6B77057C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30663B7F-3EDA-4B6B-9F39-65E2CEEB4543"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"91A09DA0-83E9-491D-A0A5-AF97B5463D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*","matchCriteriaId":"D91C7EF0-A56B-40E6-9CED-1228405D034E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE6078B0-4756-4E04-BAC4-C4EC90548A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6B5A3F2-70EE-4ECD-AD6A-0A72D9EBC755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C87EDB53-FB6E-4B10-B890-A7195D841C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD75A4F-F529-4F5E-957D-380215F7B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"834EC299-2010-4306-8CEE-35D735583101"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D29B98E-2F62-4F6F-976D-FEC4EB07F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"25032A3A-9D05-4E69-9A22-C9B332976769"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AF75A31C-FE42-4CB4-A0E6-0CAB7B122483"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4EDD80AB-2A6C-47FF-A1E9-DEB273C6B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAC0DC3-7B55-49BC-89BC-C588E6FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9315ADD-5B97-4639-9B59-806EFD7BC247"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DD81AB-27D6-4CB0-BBF0-5710DAD55A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2:*:*:*:*:*:*:*","matchCriteriaId":"7E44913D-BC8B-4AA1-84EB-EFEAC531B475"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D3889ED-9329-4C84-A173-2553BEAE3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7B74019F-C365-4E13-BBB4-D84AD9C1F87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E0E57D5-A7C9-4985-8CE4-E0D4B8BBF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06494FA8-F12A-435A-97A4-F38C58DF43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D1BB047B-D45E-4695-AAEB-D0830DB1663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*","matchCriteriaId":"018A7A39-2AFD-47A9-AE88-7ABDBFE5EDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*","matchCriteriaId":"1082B33F-33B5-453A-A5AA-10F65AB2E625"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*","matchCriteriaId":"6CF4DB54-AA7E-44C3-83E3-1A8971719D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*","matchCriteriaId":"EC348464-F08D-4ABF-BB90-3FA93C786F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*","matchCriteriaId":"61652033-FD15-47D6-8B18-CF28E6CE346C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*","matchCriteriaId":"B6D113B5-070D-4F91-AB5E-222D71C90EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"5E86DEDD-ABDC-46BD-BAD3-A409635F7801"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*","matchCriteriaId":"E3BAE980-449F-4F8C-A5BC-6CB7226E971A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A33F900-D405-40A8-A0A5-3C80320FF6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4444A309-5A97-4E1C-B4EA-C4A070A98CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"5B29951B-9A98-45B7-8E4B-5515C048EC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CEB23DE-1A9D-480E-8B8B-9F110A8ABDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"4CED950D-38AB-4D66-B97A-FB982D86057F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D0FDEB4F-133A-43DF-A89B-53E249F1293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84E78F43-07BD-4D62-9512-DA738A92BC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4AE25E9E-826E-4782-AED8-AC6297B18D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3180366-2240-467E-8AB9-BEA0430948F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"B5E834B8-545E-4472-9D60-B4CF1340D62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5AB9CC52-E533-4306-9E92-73C84B264D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C814DE-1884-4F3E-944D-068F7FD55B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"14A5CA99-8B1C-4C35-85E3-DB0495444A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*","matchCriteriaId":"912A26D1-3264-464F-B101-1796B35437E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"01D8C2EF-D552-4279-A12E-70E292F39E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"C00082E3-EBF5-4C23-9F57-BF73E587FC05"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C453B588-15FD-4A9C-8BC1-6202A21DAE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"460A6F14-7CCE-47CA-BE0C-6DF32CD6A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD634B1-4986-4E80-8BDC-58941893F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"15BB6761-3581-4AE6-85E0-1609D15D7618"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EFA1A4C8-9F87-449F-A11F-52E5D52247E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8498D2-DECC-4B88-BC1B-F8E2D076EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D1D70D21-2FFC-4006-92AE-CFD7D5AE99CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*","matchCriteriaId":"9DC87F61-3463-468A-BF0B-070816BBC3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"02EAC196-AE43-4787-9AF9-E79E2E1BBA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2FD40E4-D4C9-492E-8432-ABC9BD2C7E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36EA71E0-63F7-46FF-AF11-792741F27628"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/59943","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3949","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36995","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023166","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525788","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54241","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3386","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a private bug by reading the (1) Depends On or (2) Blocks field of a related bug."},{"lang":"es","value":"El fichero Template.pm en Bugzilla v3.3.2 hasta la v3.4.3 y v3.5 hasta la v3.5.1 permite descubrir a atacantes remotos el alias de un bug privado al leer los campos (1) \"Depends On\" o (2) \"Blocks\" de un bug relacionado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF288A74-070E-4EB4-BB92-7D4D41635DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5B8B31F0-6FCC-4258-865B-B65ECBFAF252"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"7A0CCF96-777F-4CEE-BC04-2974663CF5E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*","matchCriteriaId":"D6A71919-DC70-4AE2-9D16-76A177DAE331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4:rc1:*:*:*:*:*:*","matchCriteriaId":"780896D3-3B49-486F-A136-D3D175C00A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA43E47B-F474-4F5B-A91B-9AF99359FE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A7A3A453-EE50-458C-8F31-D7AA232006FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3D920D39-683D-4F9F-AA85-3C4D1600DAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.5:*:*:*:*:*:*:*","matchCriteriaId":"850ADB66-21F2-49CB-B105-BDA16A286CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1907D4D0-9D6E-476E-BD1A-88A32D3EFE38"}]}]}],"references":[{"url":"http://osvdb.org/60271","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.4.3/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37062","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3288","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=529416","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54332","source":"cve@mitre.org"},{"url":"http://osvdb.org/60271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bugzilla.org/security/3.4.3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=529416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3388","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to \"memory safety issues.\""},{"lang":"es","value":"liboggplay en Mozilla Firefox v3.5.x antes de v3.5.6 y SeaMonkey antes de v2.0.1 podría permitir a atacantes dependientes de contexto causar una denegación de servicio (por caída de la aplicación) o ejecutar código arbitrario a través de vectores no especificados, relacionados con \"cuestiones de seguridad de la memoria.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023335","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023336","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-66.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37369","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504843","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=523816","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54804","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8009","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-66.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=523816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3389","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions."},{"lang":"es","value":"Un desbordamiento de entero en libtheora en Xiph.Org Theora antes de v1.1, tal como se utiliza en Mozilla Firefox v3.5 antes de v3.5.6 y SeaMonkey antes de v2.0.1, permite a atacantes remotos causar una denegación de servicio (mediante caída de la aplicación) o posiblemente ejecutar código arbitrario a través de un vídeo de grandes dimensiones."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libtheora as shipped with Red Hat Enterprise Linux 4, or 5.","lastModified":"2009-12-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39317","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:043","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-67.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37368","source":"cve@mitre.org"},{"url":"http://www.theora.org/news/#libtheora-1.1.0","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504613","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54805","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7967","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-67.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theora.org/news/#libtheora-1.1.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=504613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3390","sourceIdentifier":"cve@mitre.org","published":"2009-09-24T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris snv_28 through snv_109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library."},{"lang":"es","value":"Múltiples vulnerabilidades sin identificar en  los programas (1) iscsiadm y (2) iscsitadm en Sun Solaris 10 y OpenSolaris snv_28 a la snv_109, permite a usuarios locales obtener privilegios a través de vectores desconocidos relacionados con la biblioteca libima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261849-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261849-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3392","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Agile Engineering Data Management (EDM) de Oracle E-Business Suite v6.1.0.0, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"00B2807F-60F1-4E10-9BCA-37D679D3BCFB"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36770","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3393","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente en Oracle E-Business Suite v11.5.10.2 permite a atacantes remotos afectar la integridad a través de vectores no conocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36757","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3395","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no específica en el componente AutoVue en Oracle E-Business Suite v19.3.2 permite a a atacantes remotos afectar a la disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:19.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0EDD06C9-BC1B-48F8-87EC-3015A75A32B1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36761","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3396","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente WebLogic Server en BEA Product Suite v9.0, v9.1, v9.2.3, v10.0.1 y v10.3, permite a atacantes remotos comprometer la integridad. Relacionado con el WLS Console."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*","matchCriteriaId":"6B5D9ABA-10EE-4EE2-9814-BDFBBE9A6014"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*","matchCriteriaId":"09215858-8A4F-4595-98DD-39027EC6CC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FC0ABBCC-A586-490D-A9ED-2A641E197F59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A4E81EB8-8581-45F2-BE9B-05E97B2DF4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1C64BD-7C8C-4B28-9EA8-5198B6C71AD1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36766","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023062","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3397","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Application Object Library en Oracle E-Business Suite v12.0.6 y v12.1.1 permite a los atacantes remotos comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36762","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3399","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente WebLogic Server de BEA Product Suite v7.0.6 y v8.1.5 , permite a atacantes remotos comprometer la integridad. Está relacionado con WLS Console."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"899E4712-E866-45FD-9667-4220D499A5F1"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36769","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023062","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3400","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Advanced Benefits en Oracle E-Business Suite v11.5.10.2, v12.0.6 y v12.1.1, permite a usuarios autenticados remotamente comprometer la  confidencialidad e integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36767","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3401","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows local users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Applications Technology Stack de Oracle E-Business Suite v11.5.10.2, v12.0.6 y v12.1.1, permite a usuarios locales comprometer la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36768","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3402","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Applications Framework en Oracle E-Business Suite v11.5.10.2, v12.0.6 y v12.1.1, permite a usuarios autenticados remotamente comprometer la  confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36764","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3403","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html\r\n\r\n\"Sun MicroSystems released a Security Alert in August 2009 to address multiple vulnerabilities affecting the Sun Java Runtime Environment. Oracle CVE-2009-3403 refers to the advisories that were applicable to JRockit from the Sun Alert. The CVSS score of this vulnerability CVE# reflects the highest among those fixed in JRockit. The score is calculated by National Vulnerability Database (NVD), not Oracle. The complete list of all advisories addressed in JRockit under CVE-2009-3403 is as follows: CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, CVE-2009-2676.\"","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: this issue subsumes CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, and CVE-2009-2676."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente JRockit en BEA Product Suite R27.6.4: JRE/JDK, v1.4.2, 5, y, y v6 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. NOTA: Esta vulnerabilidad influye CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, y CVE-2009-2676."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:bea_product_suite:r27.6.4:*:*:*:*:*:*:*","matchCriteriaId":"DB9D26D0-4E96-4874-8491-11735D0CB613"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3404","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente PeopleSoft PeopleTools & Enterprise Portal en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.49.23, permite a usuarios autenticados remotamente comprometer la  integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.49.23:*:*:*:*:*:*:*","matchCriteriaId":"30F9B181-59A5-41B3-A10C-6ACA81FFF346"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.49.23:*:*:*:*:*:*:*","matchCriteriaId":"38E95031-1BFB-48A0-A367-796FB0C43A3B"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36773","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023061","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3405","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente JD Edwards Tools de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.98.1.4, permite a usuarios autenticados en remoto comprometer la integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:S/C:N/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.1},"baseSeverity":"MEDIUM","exploitabilityScore":5.1,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.98.1.4:*:*:*:*:*:*:*","matchCriteriaId":"768E4605-1871-435B-8FB6-DDFBD17355CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.98.1.4:*:*:*:*:*:*:*","matchCriteriaId":"90E4D5EA-6AE3-4F81-AFD0-CBB8E25C02E9"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36772","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023061","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3406","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente JD Edwards Tools en Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v8.98.2.1 permite a usuarios autentificados remotamente afectar la confidencialidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:S/C:P/I:N/A:N","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.7},"baseSeverity":"LOW","exploitabilityScore":5.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.98.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8DB2A4D7-4E33-42DC-ABA1-7F0C035974ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:8.98.2.1:*:*:*:*:*:*:*","matchCriteriaId":"74C73108-878A-45F1-A764-A19CE936E221"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36771","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023061","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3407","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-0983."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.2.3 y 10.1.4.2 permite a atacantes remotos afectar la integridad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-0974 y CVE-2009-0983."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"96C617ED-3D8C-4B64-A56A-30BDE6E9B8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CAFAB607-303D-4E51-B586-59E6B452BC16"}]}]}],"references":[{"url":"http://osvdb.org/59116","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/37099","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36753","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023058","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/59116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3408","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Oracle Application Object Library en Oracle E-Business Suite v11.5.10, permite a atacantes remotos comprometer la confidencialidad, integridad y disponibilidad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C9B1BE09-4A96-41A3-AA1D-74533F396998"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023059","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3409","sourceIdentifier":"secalert_us@oracle.com","published":"2009-10-22T18:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente PeopleSoft Enterprise HCM (TAM) de Oracle PeopleSoft Enterprise y JD Edwards EnterpriseOne v9.0 Bundle 10, permite a usuarios autenticados en remoto comprometer la confidencialidad y la integridad a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle10:*:*:*:*:*:*","matchCriteriaId":"F04181E3-4D46-475F-B639-8CD206B1F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise:9.0:bundle10:*:*:*:*:*:*","matchCriteriaId":"1962EB4D-FA1A-4646-B8F4-8F4982C5FB3E"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/36776","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1023061","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-294A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2009-3417","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:06.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action to index.php, a different vector than CVE-2008-2627."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente DoBlog (com_idoblog) v1.1 build 30 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"userid\" en una acción \"profile\" de index.php, siendo una vulnerabilidad diferente que CVE-2008-2627."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idojoomla:com_idoblog:1.1:*:*:*:*:*:*:*","matchCriteriaId":"87C1691C-E132-47B7-A368-4B7E4C5BD803"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://secunia.com/advisories/36243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9413","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3418","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:09.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit_link action to manager/tools.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Plume CMS v1.2.3 permite (1) a usuarios autenticados remotamente ejecutar comandos SQL de su elección mediante el parámetro \"m\" de manager/index.php y (2) a administradores autenticados remotamente ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"edit_link\" de manager/tools.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plume-cms:plume_cms:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1B1B8EA7-E01F-4DAD-8A53-5F190E9854E5"}]}]}],"references":[{"url":"http://secunia.com/advisories/36277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-006.pdf","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/36277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-006.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-3419","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:09.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en el módulo Publisher v2.0 para Miniweb permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"historymonth\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intesync:miniweb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E2694BB6-5DEB-48F5-9C62-CBE04F005919"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9338","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3420","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:09.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php en el módulo Publisher v2.0 para Miniweb permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) el parámetro \"begin\" y (2) \"PATH_INFO\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intesync:miniweb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E2694BB6-5DEB-48F5-9C62-CBE04F005919"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9338","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3421","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1."},{"lang":"es","value":"login.php en Zenas PaoBacheca Guestbook v2.1, cuando está habilitado \"register_globals\", permite a atacantes remotos saltar la autenticación y obtener acceso de administrador al poner el valor 1 en el parámetro \"login_ok\"."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenas:pao-bacheca_guestbook:2.1:*:*:*:*:*:*:*","matchCriteriaId":"29556A62-90D9-41C7-8ADF-E40439A0418E"}]}]}],"references":[{"url":"http://secunia.com/advisories/36023","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9293","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/56757","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52100","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/36023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/56757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3422","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1."},{"lang":"es","value":"login.php en Zenas PaoLiber v1.1, cuando está habilitado \"register_globals\", permite a atacantes remotos saltar la autenticación y obtener acceso de administrador al poner el valor 1 en el parámetro \"login_ok\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenas:paoliber:1.1:*:*:*:*:*:*:*","matchCriteriaId":"90B10C32-3042-4FEB-A8C0-840A1F696936"}]}]}],"references":[{"url":"http://secunia.com/advisories/36023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9294","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56758","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3423","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1."},{"lang":"es","value":"login.php en Zenas PaoLink v1.0, cuando está habilitado \"register_globals\", permite a atacantes remotos saltar la autenticación y obtener acceso de administrador al poner el valor 1 en el parámetro \"login_ok\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenas:paolink:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DAD8EF-4D6B-44D3-A536-88280B468CC2"}]}]}],"references":[{"url":"http://secunia.com/advisories/36023","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9292","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56756","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52099","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3424","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) is_projectPath parameter to includes/InstantSite/inc.is_root.php; GLOBALS[thCMS_root] parameter to (2) classes/class.Tree.php, (3) includes/inc.thcms_admin_mediamanager.php, and (4) modul/mod.rssreader.php; is_path parameter to (5) class.tasklist.php, (6) class.thcms.php, (7) class.thcms_content.php, (8) class.thcms_modul_parent.php, (9) class.thcms_page.php, and (10) class.thcsm_user.php in classes/; and (11) includes/InstantSite/class.Tree.php; and thCMS_root parameter to (12) classes/class.thcms_modul.php; (13) inc.page_edit_tasklist.php, (14) inc.thcms_admin_overview_backup.php, and (15) inc.thcms_edit_content.php in includes/; and (16) class.thcms_modul_parent_xml.php, (17) mod.cmstranslator.php, (18) mod.download.php, (19) mod.faq.php, (20) mod.guestbook.php, (21) mod.html.php, (22) mod.menu.php, (23) mod.news.php, (24) mod.newsticker.php, (25) mod.rss.php, (26) mod.search.php, (27) mod.sendtofriend.php, (28) mod.sitemap.php, (29) mod.tagdoc.php, (30) mod.template.php, (31) mod.test.php, (32) mod.text.php, (33) mod.upload.php, and (34) mod.users.php in modul/."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión de archivos remotos PHP en MaxCMS versión 3.11.20b, cuando register_globals está habilitado, permiten a los atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el (1) parámetro is_projectPath en el archivo includes/InstantSite/inc.is_root.php; parámetro GLOBALS[thCMS_root] en los archivos (2) classes/class.Tree.php, (3) includes/inc.thcms_admin_mediamanager.php, y (4) modul/mod.rssreader.php; parámetro is_path en los archivos (5) class.tasklist.php, (6) class.thcms.php, (7) class.thcms_content.php, (8) class.thcms_modul_parent.php, (9) class.thcms_page.php, y (10) class.thcsm_user.php en classes/; y (11) includes/InstantSite/class.Tree.php; y el parámetro thCMS_root en los archivos (12) clases/class.thcms_modul.php; (13) inc.page_edit_tasklist.php, (14) inc.thcms_admin_overview_backup.php, y (15) inc.thcms_edit_content.php en includes/; y en los archivos (16) class.thcms_modul_parent_xml.php, (17) mod.cmstranslator.php, (18) mod.download.php, (19) mod.faq.php, (20) mod.guestbook.php, (21) mod.html.php, (22) mod.menu.php, (23) mod.news.php, (24) mod.newsticker.php, (25) mod.rss.php, (26) mod.search.php, (27) mod.sendtofriend.php, (28) mod.sitemap.php, (29) mod.tagdoc.php, (30) mod.template.php, (31) mod.test.php, (32) mod.text.php, (33) mod.upload.php, y (34) mod.users.php en modul/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:databay:maxcms:3.11.20b:*:*:*:*:*:*:*","matchCriteriaId":"5750B559-FF5B-4CB4-B2C3-80434B6EEC03"}]}]}],"references":[{"url":"http://secunia.com/advisories/36105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9322","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2136","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3425","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/inc.thcms_admin_dirtree.php en MaxCMS v3.11.20b permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en el parámetro \"thCMS_root\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:databay:maxcms:3.11.20b:*:*:*:*:*:*:*","matchCriteriaId":"5750B559-FF5B-4CB4-B2C3-80434B6EEC03"}]}]}],"references":[{"url":"http://secunia.com/advisories/36105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9350","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2136","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3426","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fm_includes_special parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/file_manager/special.php en MaxCMS v3.11.20b permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"fm_includes_special\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:databay:maxcms:3.11.20b:*:*:*:*:*:*:*","matchCriteriaId":"5750B559-FF5B-4CB4-B2C3-80434B6EEC03"}]}]}],"references":[{"url":"http://secunia.com/advisories/36105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9350","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2136","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3427","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web script or HTML via the subject field in a ticket."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Kayako SupportSuite v3.50.06 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo \"subject\" en un ticket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.50.06:*:*:*:*:*:*:*","matchCriteriaId":"92135838-7596-42DD-B04A-B8ABFF790817"}]}]}],"references":[{"url":"http://secunia.com/advisories/36253","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505637/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ngenuity.org/wordpress/2009/08/08/ngenuity-ticket-subject-persistent-xss-in-kayako-supportsuite/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/505637/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3428","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Easy Music Player v1.0.0.2 permite a atacantes remotos ejecutar código de su elección mediante un fichero .wav modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otbcode:easy_music_player:1.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9949B8D9-05C0-48F8-8172-BD4DECEBE493"}]}]}],"references":[{"url":"http://secunia.com/advisories/36267","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9412","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9418","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9420","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3429","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in a .pls playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Pirate Radio Destiny Media Player v1.61 permite a atacantes remotos ejecutar código de su elección mediante una cadena larga en un fichero .pls de lista de ejecución."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pirateradio:destiny_media_player:1.61:*:*:*:*:*:*:*","matchCriteriaId":"2BEC1F99-E9C3-4D60-A583-040867D04055"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9321","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3430","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T22:30:16.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en login.php en Allomani Mobile v2.5 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"username\" en una acción de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allomani:mobile:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D69F736F-A006-4B71-86D7-58544841254D"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9273","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52012","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3431","sourceIdentifier":"cve@mitre.org","published":"2009-09-25T23:30:02.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; and possibly 7.1.4 and earlier 7.x versions allows remote attackers to cause a denial of service (application crash) via a PDF file with a large number of [ (open square bracket) characters in the argument to the alert method. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de consumo de pila en Reader y Acrobat de Adobe versiones 9.1.3, 9.1.2, 9.1.1 y  anteriores a versiones 9.x; versiones 8.1.6 y anteriores a versiones 8.x ; y posiblemente versiones 7.1.4 y anteriores a versiones 7.x, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de un archivo PDF con un gran número de caracteres [ (corchete abierto) en el argumento al método de alerta. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:professional:*:*:*:*:*","matchCriteriaId":"AC8F85CD-8371-4B36-8D6A-8B2CA580631B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"C74ECCD2-4E9B-407B-9B14-8A6FB4F768F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:professional:*:*:*:*:*","matchCriteriaId":"FE88C274-CC72-4341-9BF6-1924054A12FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:standard:*:*:*:*:*","matchCriteriaId":"507C02CF-7E81-4131-99DE-63E4EEC45F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:professional:*:*:*:*:*","matchCriteriaId":"3D68FF87-5DCE-4D52-B95A-8ADB6F8C0DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:standard:*:*:*:*:*","matchCriteriaId":"47EBEF8E-3C53-41D5-B344-297ED7C432F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:professional:*:*:*:*:*","matchCriteriaId":"DC0DF265-984D-462D-878E-612783BF0BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:standard:*:*:*:*:*","matchCriteriaId":"0335D33B-20D8-483F-AB5E-E2517F2F900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:professional:*:*:*:*:*","matchCriteriaId":"4B066C6A-E3ED-4E7B-BE5E-45CDBF1E8959"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:standard:*:*:*:*:*","matchCriteriaId":"2341215F-97A7-40B6-B618-7FF022C7CFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:professional:*:*:*:*:*","matchCriteriaId":"D61F0564-59B9-4811-B7FD-BA044C6A94AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:standard:*:*:*:*:*","matchCriteriaId":"9C9A3E43-7334-44B0-BF01-04BB19B6FE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:professional:*:*:*:*:*","matchCriteriaId":"D3E43C1B-D76D-4486-AE7A-943D34D0A92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:standard:*:*:*:*:*","matchCriteriaId":"9F7310F9-CF09-4B83-B6CA-3FE6DBAB6008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:professional:*:*:*:*:*","matchCriteriaId":"F52F86E7-E845-48A5-9CC4-98E6DAA43C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:standard:*:*:*:*:*","matchCriteriaId":"32C79CBE-CE27-46B2-BD3C-D56DC62CBB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:elements:*:*:*:*:*","matchCriteriaId":"60B53243-BF52-4028-8345-17636668A830"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:professional:*:*:*:*:*","matchCriteriaId":"CC9D669B-7E9D-4F39-894A-D9438000F2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:standard:*:*:*:*:*","matchCriteriaId":"0D9CA54D-9D60-4064-B6AC-8CED8D064465"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:professional:*:*:*:*:*","matchCriteriaId":"55836D2A-487E-4B94-AC48-75A427D414F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E102FB9C-DE4B-481D-8F21-20143DDE3992"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:professional:*:*:*:*:*","matchCriteriaId":"AA7E35B4-035C-4BB7-9FC3-4CD0E5F192DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1:*:standard:*:*:*:*:*","matchCriteriaId":"023C5C61-6629-480E-93AD-5F2691E51AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"7BBE4EBC-DB7C-420F-AA39-E652CCC00A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:professional:*:*:*:*:*","matchCriteriaId":"0E16B425-B123-4BA3-AC93-5F400ED8F6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:standard:*:*:*:*:*","matchCriteriaId":"C6F47894-50FB-4192-A3CC-D944124F08A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:standard:*:*:*:*:*","matchCriteriaId":"5D6C9969-DFEF-4059-BE92-28969930EACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:professional:*:*:*:*:*","matchCriteriaId":"06E1842C-E6D7-497A-8AE4-F12C4DCFCAC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:standard:*:*:*:*:*","matchCriteriaId":"EA23452E-F5C7-4756-8245-1F398BA78E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"21113403-CA7D-4082-9516-C672C9A487C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:standard:*:*:*:*:*","matchCriteriaId":"8F04372D-60A1-4407-8CF1-113262846783"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:security_update:professional:*:*:*:*:*","matchCriteriaId":"C8B8CCBC-F0F9-4EA0-AB7B-82E7CC98324E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:professional:*:*:*:*:*","matchCriteriaId":"AFEAEE1D-2906-4D28-8298-22F4F43FBDFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:standard:*:*:*:*:*","matchCriteriaId":"1406DBAC-C84B-4A98-8B27-E4AFD2586B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:professional:*:*:*:*:*","matchCriteriaId":"56691A9A-4C98-4D5F-9734-B225F534CC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:standard:*:*:*:*:*","matchCriteriaId":"43F1C1B8-20B5-4534-A753-19EC415D0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:standard:*:*:*:*:*","matchCriteriaId":"74B6AF0A-DBEA-4EBD-A528-80AE31386375"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:standard:*:*:*:*:*","matchCriteriaId":"76F4F77C-1931-4245-B1A1-A2BEEA8AC0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5849F63A-4E06-411F-95F0-A40B88F0C609"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:security_update:*:*:*:*:*:*","matchCriteriaId":"B6CDBD40-C67F-4F59-88CF-5C0953056420"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9:*:*:*:*:*:*:*","matchCriteriaId":"F234ECA6-375B-493B-A659-F013DAEE5B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B5C251D2-4C9B-4029-8BED-0FCAED3B8E89"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35148","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3432","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T19:30:01.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events."},{"lang":"es","value":"Vulnerabilidad sin especificar en xscreensaver de Sun Solaris 10, y OpenSolaris en versiones anteriores a la snv_112, cuando Xorg o Xnewt es utilizado y RandR está activado, permite a atacantes próximos fisicamente leer una pantalla bloqueada a través de vectores de ataque desconocidos relacionados con eventos de dimensionamiento XRandR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:sparc:*:*:*:*:*","versionEndIncluding":"snv_111","matchCriteriaId":"A1B3EE79-B099-44AD-A775-386C6E209AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","versionEndIncluding":"snv_111","matchCriteriaId":"84F189A5-2C57-433C-B92D-8D0B8C2AA9A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:sparc:*:*:*:*:*","matchCriteriaId":"7317C4A1-1365-40DD-A86F-808B64863750"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:x86:*:*:*:*:*","matchCriteriaId":"7188371F-AE6E-437D-8F75-DE7049A51000"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:sparc:*:*:*:*:*","matchCriteriaId":"79D94087-1308-408F-8C73-600B73AD958F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:x86:*:*:*:*:*","matchCriteriaId":"015968E1-B81E-4242-B4DF-94716179053B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:sparc:*:*:*:*:*","matchCriteriaId":"DA468ACC-9AE2-4EF6-9B09-CF63092021D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:x86:*:*:*:*:*","matchCriteriaId":"92262770-06B3-4B68-8DBE-AB6C61135F7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:sparc:*:*:*:*:*","matchCriteriaId":"16719C48-5A35-4FEC-BE5F-3EA10A0357CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:x86:*:*:*:*:*","matchCriteriaId":"C4DC58C1-792B-433D-A27B-5731C8414EBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:sparc:*:*:*:*:*","matchCriteriaId":"5F87D3D5-0D3F-44BB-B15B-BB6D903A56E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:x86:*:*:*:*:*","matchCriteriaId":"4AC63928-38F2-4677-8CBC-2F7DE0EF078F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:sparc:*:*:*:*:*","matchCriteriaId":"438EA608-2748-49E9-9B2A-663C774E627F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:x86:*:*:*:*:*","matchCriteriaId":"41B216C6-4BE9-4D47-A86E-4AD50ECB8F07"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:sparc:*:*:*:*:*","matchCriteriaId":"B7E3945D-1580-4C68-93E0-E4CF96620C6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:x86:*:*:*:*:*","matchCriteriaId":"32AE7035-EA81-4A9B-A4C3-B85844E24FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:sparc:*:*:*:*:*","matchCriteriaId":"51469BA0-7B46-4E79-9E35-A388AD834B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:x86:*:*:*:*:*","matchCriteriaId":"948CAA3F-C5B0-434E-A4B1-16600729A17E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:sparc:*:*:*:*:*","matchCriteriaId":"49F52449-96AB-45BA-95F6-581F720D1819"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:x86:*:*:*:*:*","matchCriteriaId":"168AD0C1-B437-4B5D-8AC4-BA4C6C60829B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FC6243A-A896-4E52-B241-BDEA7486DAC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_10:*:x86:*:*:*:*:*","matchCriteriaId":"CDAD01B1-25E3-4ABD-BA48-03491D9C0D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:sparc:*:*:*:*:*","matchCriteriaId":"E88850F1-A647-44B3-806A-71FC157D4964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_13:*:sparc:*:*:*:*:*","matchCriteriaId":"311FC329-D973-4F51-B110-7FF1ED40DFA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:sparc:*:*:*:*:*","matchCriteriaId":"0288EC6B-C561-475C-9A3D-1ACF395B7326"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CBEFF0-7B69-4831-AAC7-C02455D42900"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:sparc:*:*:*:*:*","matchCriteriaId":"6D4F7E6E-330F-4E02-A2FE-F7288ADFFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:sparc:*:*:*:*:*","matchCriteriaId":"B5D6CD58-C4AF-42AC-9377-EC1F1308FF29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:sparc:*:*:*:*:*","matchCriteriaId":"AF924217-C227-4B90-9781-00561CE9C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:sparc:*:*:*:*:*","matchCriteriaId":"114D9D19-23BC-41AF-9B30-40AB2852E74F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:sparc:*:*:*:*:*","matchCriteriaId":"F620054A-4D53-443B-8897-B2A5AB928CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:sparc:*:*:*:*:*","matchCriteriaId":"FD1FDEB4-E659-41D0-B81E-FC1A1391288E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:x86:*:*:*:*:*","matchCriteriaId":"2E3B6A48-CA60-4ED9-BFF9-0FCDFABA865A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:sparc:*:*:*:*:*","matchCriteriaId":"218570AD-18C7-440E-A5BD-F16708ED4B08"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:x86:*:*:*:*:*","matchCriteriaId":"09162A43-7EF2-464D-AD60-7046456932B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:sparc:*:*:*:*:*","matchCriteriaId":"2336F214-18CC-42A5-9DD0-1F1C09959CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:x86:*:*:*:*:*","matchCriteriaId":"3A4ECA0D-AB73-4790-945B-98CF6E27B94F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:sparc:*:*:*:*:*","matchCriteriaId":"207D2103-58A9-4BF9-81EF-74B264DB1B4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:x86:*:*:*:*:*","matchCriteriaId":"530E1CDB-3B46-4762-875F-0B1075790204"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:sparc:*:*:*:*:*","matchCriteriaId":"8A4F9110-059D-4F6E-9414-762BD6142CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:x86:*:*:*:*:*","matchCriteriaId":"55888CA5-938A-42D4-9898-93ED1AD88650"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:sparc:*:*:*:*:*","matchCriteriaId":"F1B245F6-DE46-4D52-98EE-32601FBCD254"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:x86:*:*:*:*:*","matchCriteriaId":"5D99E1F3-0341-43A9-9692-2AC812811EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:sparc:*:*:*:*:*","matchCriteriaId":"28F4B989-7F55-467F-AD1A-AB965D31F504"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:x86:*:*:*:*:*","matchCriteriaId":"27CA0C51-8331-459A-8256-9E363BE313BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:sparc:*:*:*:*:*","matchCriteriaId":"9B6404BC-090E-419B-B10C-D275D5C0BFE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:x86:*:*:*:*:*","matchCriteriaId":"3FD00DE9-D8A8-4A03-B4B8-3F4368ADDDE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:sparc:*:*:*:*:*","matchCriteriaId":"4CF81FF0-D544-4C56-AD2E-51098DF2A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:x86:*:*:*:*:*","matchCriteriaId":"4EFFA4CB-0984-4686-94BD-CE4D8AD70C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:sparc:*:*:*:*:*","matchCriteriaId":"65F861F1-E66D-479D-838D-19D94DF03736"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:x86:*:*:*:*:*","matchCriteriaId":"BF0C5932-3B2B-44C8-8C0C-31A0CB66FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:sparc:*:*:*:*:*","matchCriteriaId":"71FDF1A5-BD49-4E00-979E-3F953265E681"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:x86:*:*:*:*:*","matchCriteriaId":"B40B4B4C-34F3-4591-8989-D7D138D54C88"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:sparc:*:*:*:*:*","matchCriteriaId":"815771B3-541B-41D5-925F-29CB74900668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:x86:*:*:*:*:*","matchCriteriaId":"14FD3B27-6379-4F5C-9172-2A0494667727"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:sparc:*:*:*:*:*","matchCriteriaId":"1EEAE62A-8BFA-4EB4-B4E9-DF83F4A33CCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:x86:*:*:*:*:*","matchCriteriaId":"114D8B9E-BDE9-49E6-9CD3-18B087522577"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:sparc:*:*:*:*:*","matchCriteriaId":"72827B1E-3F3D-40A0-AEEB-0CFFB12BF6D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:x86:*:*:*:*:*","matchCriteriaId":"8275DABB-E792-4134-8418-496109936C1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:sparc:*:*:*:*:*","matchCriteriaId":"6F61F300-FEB0-42A7-87AE-E99AF2C26827"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:x86:*:*:*:*:*","matchCriteriaId":"56768A4B-ABC8-4CF8-ABF1-059C8D4373CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:sparc:*:*:*:*:*","matchCriteriaId":"E64D67D0-E57D-46A9-BA7E-BB7FA05C0907"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:x86:*:*:*:*:*","matchCriteriaId":"E249DDE1-EC3B-4A5C-A900-498526173570"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/58278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36488","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022936","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2728","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53424","source":"cve@mitre.org"},{"url":"http://osvdb.org/58278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3433","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T19:30:01.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en clsetup en la utilidad de configuración en Sun Solaris Cluster v3.2 permite a usuarios locales obtener privilegios mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:3.2:*:solaris_10:*:*:*:*:*","matchCriteriaId":"D22BB8AF-86E2-4791-9ACF-E088A81CF3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:3.2:*:solaris_9:*:*:*:*:*","matchCriteriaId":"0BDD15FD-58F6-4EE9-9A72-D18A6A7BCCE8"}]}]}],"references":[{"url":"http://osvdb.org/58277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36816","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267148-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36486","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022937","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2729","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53426","source":"cve@mitre.org"},{"url":"http://osvdb.org/58277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267148-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3434","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the proyecto parameter in a verproyecto action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Tupinambis (com_tupinambis) v1.0 para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"proyecto\" en una acción \"verproyecto\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onestopjoomla:com_tupinambis:1.0:*:*:*:*:*:*:*","matchCriteriaId":"14D656D9-BD5A-4258-A8C7-5392A498298D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"6A453A9F-12E9-40FC-8C42-D80C780154E2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/mambojoomlatupinambis-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53454","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/mambojoomlatupinambis-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3435","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el editor de variables del módulo Devel de Dupral en versiones del módulo v5.x en versiones anteriores a la v5.x-1.2 y v6.x en versiones anteriores a la v6.x-1.18. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de un nombre de variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-0.1:*:*:*:*:*:*:*","matchCriteriaId":"805C8DD9-92C9-4330-A992-AA05B3CF5ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCD83713-F54C-4A5C-8CA0-5A991195624A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-0.3:*:*:*:*:*:*:*","matchCriteriaId":"59EA1E40-36F6-4259-A274-698B206A0215"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-0.4:*:*:*:*:*:*:*","matchCriteriaId":"946D26A6-E9D7-4A5C-B72F-7D17EA601105"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"624D23B7-A105-4AAE-9590-8BECB6021DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"7D204385-0BA3-4A38-B96F-A8F5AD89F90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D31C9B3F-8B8F-4A70-8454-92A3F6F1C6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"930DAB6D-03EC-4968-AAC7-BE25C145607A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"86014F7F-64E9-4A71-A5EE-C50A865237A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"57A2DD81-8CC4-4275-882E-A1EB446D4ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"C364C73C-6B29-45DA-B49F-721890A4CD99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"F92251DA-285D-47EA-B095-A894448104F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"02174F14-399E-4048-B096-C383B978650B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"1C36B68D-51EB-4659-9ACE-0D7EDC83D599"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"13E253C3-91E1-4EBD-B025-DDB559BA2F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"C17493B2-2AC2-4F82-83B3-E65B7CEB8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"562CB6C9-20AE-45DF-BDD0-11E5E1D8F474"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"0DDF5408-078A-4052-BC54-F02AD3373F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"B4D1BEEE-BC98-498B-A62B-9D9266728F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"A215C8D9-7A67-49B2-8DB9-0FD89772750B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"290606EB-0158-4C38-AD02-14D76EB5180A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.14:*:*:*:*:*:*:*","matchCriteriaId":"3EB4752E-A951-43FC-9139-AD2890E39646"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.15:*:*:*:*:*:*:*","matchCriteriaId":"33215327-847E-44DE-88C2-6459E0ED83BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.16:*:*:*:*:*:*:*","matchCriteriaId":"28733076-53A2-466D-9E92-A94D0E129E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.17:*:*:*:*:*:*:*","matchCriteriaId":"385CC1C1-DCA3-4291-92EA-92D69B9746EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:devel:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"7DC988C5-B667-42BC-B99B-824DB7D20B4B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/585952","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58313","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36859","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36508","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53449","source":"cve@mitre.org"},{"url":"http://drupal.org/node/585952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3436","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter.  NOTE: this might overlap CVE-2005-1417."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en forum.asp de MaxWebPortal permiten a usuarios remotos ejecutar comandos SQL de su elección a través de los parámetros (1) FORUM_ID o (2) CAT_ID.  NOTA: este vulnerabilidad puede solaparse con la CVE-2005-1417."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxwebportal:maxwebportal:*:*:*:*:*:*:*:*","matchCriteriaId":"C73F4583-C060-4BFE-B1B7-302B18B09DB4"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/maxwebportal-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36480","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53435","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/maxwebportal-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3437","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via \"Markdown input.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad de previsualización en vivo en el módulo Markdown Preview v6.x para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante \"Markdown input\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:henriksjokvist:markdown_preview:6.x:*:*:*:*:*:*:*","matchCriteriaId":"226FE58D-06EC-45E5-A61C-DB8C5E2E239A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/585790","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36505","source":"cve@mitre.org"},{"url":"http://drupal.org/node/585790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3438","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JoomlaFacebook (com_facebook) para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"student\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:witchakorn_kamolpornwijit:com_facebook:*:*:*:*:*:*:*:*","matchCriteriaId":"719C370F-B94D-4CEE-8F6D-F2E5952CDAB3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/joomlafb-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36484","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53437","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/joomlafb-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3439","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpolicy.php; the name parameter to (5) host/newhostgroupform.php and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en Open Source Security Information Management (OSSIM) en versiones anteriores a la v2.1.2 permiten a usuarios remotos autenticados ejecutar comandos SQL de su elección a través de el parámetro \"id_document\" a (1) repository_document.php, (2) repository_links.php, y (3) repository_editdocument.php de repository/; el (4) parámetro \"group\" (grupo) a policy/getpolicy.php; el parámetro \"name\" (nombre) a (5) host/newhostgroupform.php y (6) net/modifynetform.php; y a través de otros vectores de ataque sin especificar relacionados con el menu \"policy\" (políticas)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"D331ECC2-2709-4A3E-ACDB-174CA343C082"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6078DC17-1842-4C1E-A550-6F00DCC8D246"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"910427FD-DFC6-452F-8F8D-8235AD0036A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:2.1:*:32bit:*:*:*:*:*","matchCriteriaId":"C5EBF296-9BF9-4D0A-A070-BCC085C90D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:2.1:*:64bit:*:*:*:*:*","matchCriteriaId":"49206954-EFFF-4B98-9B13-D0F6ED897CF2"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36867","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506663/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dsecrg.com/pages/vul/show.php?id=155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506663/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3440","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Open Source Security Information Management (OSSIM) versiones anteriores a v2.1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"option\" de la URI por defecto (también conocido como menú principal)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"D331ECC2-2709-4A3E-ACDB-174CA343C082"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6078DC17-1842-4C1E-A550-6F00DCC8D246"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"910427FD-DFC6-452F-8F8D-8235AD0036A5"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36867","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506663/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dsecrg.com/pages/vul/show.php?id=155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506663/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3441","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php."},{"lang":"es","value":"Open Source Security Information Management (OSSIM) versiones anteriores a v2.1.2 permite a atacantes remotos saltar la autenticación, y leer gráficas o información de la infraestructura, mediante una petición directa a (1) graphs/alarms_events.php o (2) host/draw_tree.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"D331ECC2-2709-4A3E-ACDB-174CA343C082"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6078DC17-1842-4C1E-A550-6F00DCC8D246"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:ossim:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"910427FD-DFC6-452F-8F8D-8235AD0036A5"}]}]}],"references":[{"url":"http://dsecrg.com/pages/vul/show.php?id=155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36867","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506663/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dsecrg.com/pages/vul/show.php?id=155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506663/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3442","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors."},{"lang":"es","value":"El módulo \"Meta tags\" (también conocido como Nodewords) en versiones anteriores a la v6.x-1.1 para Drupal no respeta apropiadamente los permisos durante la asignación de meta-etiquetas de un nodo, lo que permite a atacantes remotos obtener información confidencial a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC6A4DC0-C9E7-48DE-B651-0C49F99D7B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"DCA8D60C-FA65-4A1C-9C25-4CB9945D2D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"96B8D101-EB07-4F8B-B865-6E76F3C13954"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"41D06D59-E500-463F-B36F-9CA710FF57BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"6BA1D598-96B5-4E74-BB36-6204BBB32EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D1205E96-611F-40B1-B46B-E6F7C67922E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ariel_barreiro:meta_tags:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"A416A6F4-CF01-4822-BC00-B808BE4C3794"}]}]}],"references":[{"url":"http://drupal.org/node/585706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/585710","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36506","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53452","source":"cve@mitre.org"},{"url":"http://drupal.org/node/585706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/585710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3443","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the league parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Fastball (com_fastball) v1.1.0 a la v1.2 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"league\" al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastballproductions:com_fastball:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A49009EE-60E7-4F9B-9A55-4B7726D15C49"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastballproductions:com_fastball:1.2:*:*:*:*:*:*:*","matchCriteriaId":"84A6DD7C-8DD1-426C-A67D-C2FA27A73687"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36878","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3444","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 (aka news to email) action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en email.php en e107 v0.7.16 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la cabecera HTTP Referer en una acción news.1 (también conocida como noticias (news) a correo (email)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.16","matchCriteriaId":"358194A8-3BAB-4CA7-9546-C5A598FA911C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*","matchCriteriaId":"18C34EB0-7685-4346-81A2-371C1F19F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*","matchCriteriaId":"AB26A2A4-B0DE-4130-AA5F-76D5394A0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*","matchCriteriaId":"90909932-AD39-4648-8621-5866F0C4AB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*","matchCriteriaId":"37F208E9-3C39-4D00-B1E0-5CD0B315E740"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*","matchCriteriaId":"27C7402F-54C9-4FDA-B181-85941DDC7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*","matchCriteriaId":"70AB914E-D616-45D2-A451-1C247B8B6E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA03C1AC-97EA-47ED-9558-A7CA48420AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"32695A82-B042-46B7-9CB4-20F3446E0C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6716A040-0CBE-4402-AB2A-1621B1240B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"81627355-AB45-4D47-8DD2-4087E6971EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DAAA4F-B893-4914-8538-E68DDA211225"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"2FEEC90E-8640-4786-B014-CAD83EC4F2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"E29B9B12-4C94-4A8D-B407-2D288502EFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"F96C30A8-7E56-4806-B8D7-851D75B08738"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"F1C22711-AEC4-438F-9B37-64D36B0BDFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"5E2AA435-E5FC-4555-B582-5C6FFC99327B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"7A81364B-FB65-4591-ACA3-9D5991F0C30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*","matchCriteriaId":"437C4251-886C-4E94-B7F6-AE34A0142A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*","matchCriteriaId":"761D4EE9-0D54-4370-BCBC-3C23481C127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*","matchCriteriaId":"E11E3F9E-708E-44CB-8FD2-E4961028B732"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*","matchCriteriaId":"8F38EB42-437C-4381-B36A-FD3DB78E724E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*","matchCriteriaId":"ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*","matchCriteriaId":"1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*","matchCriteriaId":"0FC4B3A4-2563-4C06-A484-5C02CD8F7408"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*","matchCriteriaId":"7E80F85C-61AD-49C0-9EBF-B79F728F6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*","matchCriteriaId":"3FE097FC-A525-4599-9FDA-1A011EECE767"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*","matchCriteriaId":"9FF51B0D-E020-491D-92A9-D2A01A7417AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*","matchCriteriaId":"75197306-53DB-4C94-959B-C46D3FB1F42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*","matchCriteriaId":"D0C5C91C-C1C5-457D-9E09-24C7CACCC280"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*","matchCriteriaId":"6EB88C92-4F62-471A-8C10-C13C890E764F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*","matchCriteriaId":"5585DC36-C65F-4FCA-B26F-E4A7901863E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*","matchCriteriaId":"2C7DD56C-66F7-421C-B211-07C7856112C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*","matchCriteriaId":"8E14B108-228D-454F-AF16-9D9086E4C10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*","matchCriteriaId":"B5CB33E9-9AB8-482A-A196-768A2085A49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*","matchCriteriaId":"12BD5CAD-0EB8-48F2-AF80-510584A83446"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*","matchCriteriaId":"AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*","matchCriteriaId":"92E294FE-F0A2-45FC-BB67-D988DD89D2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*","matchCriteriaId":"9640315B-7F04-4F5A-B213-8FAF509DFF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*","matchCriteriaId":"CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*","matchCriteriaId":"DF75A192-81C1-4F58-A660-7EFE4F33E58B"}]}]}],"references":[{"url":"http://osvdb.org/58363","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://websecurity.com.ua/3528","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506704/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36517","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022947","source":"cve@mitre.org"},{"url":"http://osvdb.org/58363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://websecurity.com.ua/3528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506704/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3445","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command."},{"lang":"es","value":"Vulnerabilidad sin especificar en Code-Crafters Ability Mail Server v2.70, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través del comando IMAP4 FETCH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.63","matchCriteriaId":"F14D49D3-19D9-4AF7-B76E-290F7DF5D8E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:1.18:*:*:*:*:*:*:*","matchCriteriaId":"DB5EC297-5A2A-4359-B93C-BF9EDE4D99E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.01b:*:*:*:*:*:*:*","matchCriteriaId":"C6FFDB5D-9511-49A5-BA56-27F9E8EDBC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.02b:*:*:*:*:*:*:*","matchCriteriaId":"5EAA589C-28AF-44D7-B520-E15C06A3DBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.03b:*:*:*:*:*:*:*","matchCriteriaId":"80531858-C703-4C08-BC4A-12B02723C961"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.04b:*:*:*:*:*:*:*","matchCriteriaId":"2F852F1C-E8D7-48E8-92AA-B7CCF5AB3A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.05b:*:*:*:*:*:*:*","matchCriteriaId":"4D1E6919-5B04-4401-ACA5-F2A71A7483DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.10:*:*:*:*:*:*:*","matchCriteriaId":"D9EC47A8-37BC-4000-9323-AF81ED9A0699"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.11:*:*:*:*:*:*:*","matchCriteriaId":"F19F1B93-0423-4681-8821-9E4A9E3AE6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.12:*:*:*:*:*:*:*","matchCriteriaId":"AD744492-6BE6-4E30-8796-23581A344374"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.13:*:*:*:*:*:*:*","matchCriteriaId":"EE328F78-4C47-49E5-8A15-26475A739229"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.14:*:*:*:*:*:*:*","matchCriteriaId":"9036D941-EE6F-4182-A91C-D2871BB5B20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.15:*:*:*:*:*:*:*","matchCriteriaId":"488084AA-9C8D-497F-88CF-881480FFA6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.16:*:*:*:*:*:*:*","matchCriteriaId":"3E8E1AE7-1698-46A6-A377-0646DD124F37"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.17:*:*:*:*:*:*:*","matchCriteriaId":"FDA94B27-748C-4DA6-BEB0-FAA29F34A54E"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.18:*:*:*:*:*:*:*","matchCriteriaId":"784B5CE3-8D72-4DF6-86AE-5A7FB7EDDF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.19:*:*:*:*:*:*:*","matchCriteriaId":"149A348A-3F37-4853-B885-2EECF303536E"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"938529F4-31B5-47E9-A8AE-9DA3B25F9D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.21:*:*:*:*:*:*:*","matchCriteriaId":"C732C79B-E224-420D-B96D-1EB0D2EECE24"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.22:*:*:*:*:*:*:*","matchCriteriaId":"16B7A98B-A682-42B5-8CDD-1FE9F4CF74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.23:*:*:*:*:*:*:*","matchCriteriaId":"627FD5F2-302F-407E-9000-8D5358C9CF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.50:*:*:*:*:*:*:*","matchCriteriaId":"0004DD62-C64E-4F99-ADE0-EB91AEE1021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.51:*:*:*:*:*:*:*","matchCriteriaId":"D0119286-87F5-4D60-AF54-A0C8F948BF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.52:*:*:*:*:*:*:*","matchCriteriaId":"48993397-4379-48DF-969F-CAE0663C18E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.53:*:*:*:*:*:*:*","matchCriteriaId":"8446A8DB-5344-4087-A54E-9B1D505E6F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.54:*:*:*:*:*:*:*","matchCriteriaId":"40B6FD5A-1C29-4E3B-AB74-FD9600BE7EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.55:*:*:*:*:*:*:*","matchCriteriaId":"2DC685FC-37CA-4770-9159-B387C02E8EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.56:*:*:*:*:*:*:*","matchCriteriaId":"4FA42ACC-27A8-4673-9049-2CA48C00E87E"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.57:*:*:*:*:*:*:*","matchCriteriaId":"A18C7269-C786-4E19-B96A-0F417500B25B"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.58:*:*:*:*:*:*:*","matchCriteriaId":"51948C81-145A-434F-ACDA-D2738B65D29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.60:*:*:*:*:*:*:*","matchCriteriaId":"356004E2-A09E-4FAA-83D4-7402B41F29E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8E1F7399-24CC-4470-A4FB-BCB7CAF0DDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:2.62:*:*:*:*:*:*:*","matchCriteriaId":"1B717A33-965C-4A97-BA06-0A06DC97D31E"}]}]}],"references":[{"url":"http://secunia.com/advisories/36888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.code-crafters.com/abilitymailserver/updatelog.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36519","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.code-crafters.com/abilitymailserver/updatelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3446","sourceIdentifier":"cve@mitre.org","published":"2009-09-28T22:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a videos action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente MyRemote Video Gallery (com_mytube)v1.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"user_id\" en una acción \"videos\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rick_estrada:com_mytube:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"5F321A99-0789-4628-97D3-9B96C8F02615"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9733","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36470","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53401","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3447","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos ejecutar código de su elección a través subiendo un fichero con una extensión ejecutable, y enviando una petición a un fichero predecible durante una ventana de corta duración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*","versionEndIncluding":"2008.2.4.0","matchCriteriaId":"4F139A75-38DA-423B-BF6A-0F72D289C3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DE74540D-CEF8-4D69-9B5C-EF65AB75297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D9C87F5-72A5-4067-88B3-AF93063D299E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"013704F2-FE79-4576-8A9B-5BF8F57B64B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5482B06C-8E4E-46CD-B828-33BB9A535EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9D7C075F-0A1B-4216-B32C-B95CD73442E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E66E491-7785-4371-AE45-DA957D48DC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4E1B949F-5984-4726-B0AA-901A7C9B82C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F93132F-BD03-4731-9EBF-607F0C1E2CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"73C8F452-D278-4B4D-9C35-BF993894DF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A99B631-3142-413E-A00E-2A914A941A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"10AC750D-2FD5-40B2-807E-3A7693FAB4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C06A2416-1CD5-4F22-AD19-FADFE6D94997"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A30F2246-03AB-4A99-B2CB-2B116F70F7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"508A871B-64F7-411E-9911-95E51D070D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"556A339D-308F-4B16-8080-2756CC4225FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"54F277DA-2B18-4CFF-8C0B-03D8B226982D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"88B1BC55-4481-4B17-8137-C65D5F4BD651"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D573A940-3848-4653-B92A-3D0CA07962E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4CC98-79E6-4F92-86D8-31902D071556"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5222097B-5239-4545-BBC8-9EEDA96372F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"574A108B-091A-4061-88A0-3A4AC75737DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"344775B7-18C6-4689-A513-C9A9E2F0B7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C348E59F-085B-481D-A18F-CD9F20AE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"32BBAACD-9D5B-4160-9266-D2C31C19990F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*","matchCriteriaId":"4EF467CB-26D0-49C8-B0D5-20089E907FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*","matchCriteriaId":"01F0EDCD-B278-4B01-9048-5C316AB156AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E72C34E7-9E2E-4EB8-B942-9314444A4F9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*","matchCriteriaId":"55656D0E-1017-4C5A-BDC4-1182A744035E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*","matchCriteriaId":"B83A4E9F-9188-438B-BA04-293460EAAA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*","matchCriteriaId":"9F9EFA57-7AB4-4662-94CC-902C71546D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5C02639B-16A5-499A-959C-7BA9DC1696D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F506BE-4540-4419-866C-70D67F9B5A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"727B9CEA-AE45-4839-83A5-36D845823D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FBD2D6-A917-4BBF-A215-4B61056EF5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5FCA880C-7A43-42F0-B918-708A52301E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A88B8238-3B59-4005-9368-707F0AD6DD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B881471-9471-4C0C-8075-C13039237850"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"65A4543A-1774-4DD2-B7CA-59B373D9A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"302B973C-E014-4A4E-8F5D-558A18DF806E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"380F947D-2B8A-4768-B1F4-B04F6CC1E855"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E93F09B9-FD14-4ABE-A650-1CAE4727FE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"221D2428-6648-4B8D-8C38-68ED6480748A"}]}]}],"references":[{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58197","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"cve@mitre.org"},{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3448","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash) via a packet to (1) TCP or (2) UDP port 20031 with a large value in an unspecified size field, which is not properly handled in a malloc operation.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"npvmgr.exe en BakBone NetVault Backup v8.22 Build 29 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de paquetes (1) TCP o (2) UDP puerto 20031 con un valor largo en un campo de tamaño sin especipicar, que no es manejado adecuadamente en una operación alloc. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bakbone:netvault:8.22:*:*:*:*:*:*:*","matchCriteriaId":"33CE5E34-EB90-4283-89EB-48882843846A"}]}]}],"references":[{"url":"http://osvdb.org/58329","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=bakbone-netvault-backup-8-22-build-29-remote-dos","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/36489","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022941","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53434","source":"cve@mitre.org"},{"url":"http://osvdb.org/58329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insight-tech.org/index.php?p=bakbone-netvault-backup-8-22-build-29-remote-dos","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/36489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3449","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u playlist file."},{"lang":"es","value":"MP3 Collector v2.3 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una URL larga en un fichero de lista de reproducción .m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:collectorz:mp3_collector:2.3:*:*:*:*:*:*:*","matchCriteriaId":"9169BCB3-6B9A-43E3-A8FF-2ADFD6AEE7C7"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9689","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3450","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T15:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de parámetros con nombres que comienzan con secuencias  __ (guión bajo guión bajo)que es incompatible con un mecanismo de protección XSS proporcionado por Microsoft ASP.NET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*","versionEndIncluding":"2008.r2","matchCriteriaId":"1DA27D85-9DA0-4882-A1D4-5242AF972523"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DE74540D-CEF8-4D69-9B5C-EF65AB75297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D9C87F5-72A5-4067-88B3-AF93063D299E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"013704F2-FE79-4576-8A9B-5BF8F57B64B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5482B06C-8E4E-46CD-B828-33BB9A535EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9D7C075F-0A1B-4216-B32C-B95CD73442E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E66E491-7785-4371-AE45-DA957D48DC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4E1B949F-5984-4726-B0AA-901A7C9B82C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F93132F-BD03-4731-9EBF-607F0C1E2CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"73C8F452-D278-4B4D-9C35-BF993894DF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A99B631-3142-413E-A00E-2A914A941A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"10AC750D-2FD5-40B2-807E-3A7693FAB4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C06A2416-1CD5-4F22-AD19-FADFE6D94997"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A30F2246-03AB-4A99-B2CB-2B116F70F7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"508A871B-64F7-411E-9911-95E51D070D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"556A339D-308F-4B16-8080-2756CC4225FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"54F277DA-2B18-4CFF-8C0B-03D8B226982D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"88B1BC55-4481-4B17-8137-C65D5F4BD651"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D573A940-3848-4653-B92A-3D0CA07962E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4CC98-79E6-4F92-86D8-31902D071556"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5222097B-5239-4545-BBC8-9EEDA96372F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"574A108B-091A-4061-88A0-3A4AC75737DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"344775B7-18C6-4689-A513-C9A9E2F0B7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C348E59F-085B-481D-A18F-CD9F20AE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"32BBAACD-9D5B-4160-9266-D2C31C19990F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*","matchCriteriaId":"4EF467CB-26D0-49C8-B0D5-20089E907FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*","matchCriteriaId":"01F0EDCD-B278-4B01-9048-5C316AB156AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E72C34E7-9E2E-4EB8-B942-9314444A4F9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*","matchCriteriaId":"55656D0E-1017-4C5A-BDC4-1182A744035E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*","matchCriteriaId":"B83A4E9F-9188-438B-BA04-293460EAAA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*","matchCriteriaId":"9F9EFA57-7AB4-4662-94CC-902C71546D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5C02639B-16A5-499A-959C-7BA9DC1696D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F506BE-4540-4419-866C-70D67F9B5A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"727B9CEA-AE45-4839-83A5-36D845823D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FBD2D6-A917-4BBF-A215-4B61056EF5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5FCA880C-7A43-42F0-B918-708A52301E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A88B8238-3B59-4005-9368-707F0AD6DD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B881471-9471-4C0C-8075-C13039237850"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"65A4543A-1774-4DD2-B7CA-59B373D9A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"302B973C-E014-4A4E-8F5D-558A18DF806E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"380F947D-2B8A-4768-B1F4-B04F6CC1E855"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E93F09B9-FD14-4ABE-A650-1CAE4727FE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"221D2428-6648-4B8D-8C38-68ED6480748A"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B78DDD-E312-47AA-81DB-538AC5B21A69"}]}]}],"references":[{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/23807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58195","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53348","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"cve@mitre.org"},{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/23807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3451","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en WebCoreModule.ashx en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos leer ficheros de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*","versionEndIncluding":"2008.2.4.0","matchCriteriaId":"4F139A75-38DA-423B-BF6A-0F72D289C3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DE74540D-CEF8-4D69-9B5C-EF65AB75297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D9C87F5-72A5-4067-88B3-AF93063D299E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"013704F2-FE79-4576-8A9B-5BF8F57B64B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5482B06C-8E4E-46CD-B828-33BB9A535EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9D7C075F-0A1B-4216-B32C-B95CD73442E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E66E491-7785-4371-AE45-DA957D48DC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4E1B949F-5984-4726-B0AA-901A7C9B82C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F93132F-BD03-4731-9EBF-607F0C1E2CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"73C8F452-D278-4B4D-9C35-BF993894DF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A99B631-3142-413E-A00E-2A914A941A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"10AC750D-2FD5-40B2-807E-3A7693FAB4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C06A2416-1CD5-4F22-AD19-FADFE6D94997"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A30F2246-03AB-4A99-B2CB-2B116F70F7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"508A871B-64F7-411E-9911-95E51D070D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"556A339D-308F-4B16-8080-2756CC4225FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"54F277DA-2B18-4CFF-8C0B-03D8B226982D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"88B1BC55-4481-4B17-8137-C65D5F4BD651"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D573A940-3848-4653-B92A-3D0CA07962E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4CC98-79E6-4F92-86D8-31902D071556"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5222097B-5239-4545-BBC8-9EEDA96372F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"574A108B-091A-4061-88A0-3A4AC75737DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"344775B7-18C6-4689-A513-C9A9E2F0B7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C348E59F-085B-481D-A18F-CD9F20AE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"32BBAACD-9D5B-4160-9266-D2C31C19990F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*","matchCriteriaId":"4EF467CB-26D0-49C8-B0D5-20089E907FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*","matchCriteriaId":"01F0EDCD-B278-4B01-9048-5C316AB156AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E72C34E7-9E2E-4EB8-B942-9314444A4F9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*","matchCriteriaId":"55656D0E-1017-4C5A-BDC4-1182A744035E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*","matchCriteriaId":"B83A4E9F-9188-438B-BA04-293460EAAA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*","matchCriteriaId":"9F9EFA57-7AB4-4662-94CC-902C71546D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5C02639B-16A5-499A-959C-7BA9DC1696D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F506BE-4540-4419-866C-70D67F9B5A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"727B9CEA-AE45-4839-83A5-36D845823D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FBD2D6-A917-4BBF-A215-4B61056EF5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5FCA880C-7A43-42F0-B918-708A52301E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A88B8238-3B59-4005-9368-707F0AD6DD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B881471-9471-4C0C-8075-C13039237850"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"65A4543A-1774-4DD2-B7CA-59B373D9A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"302B973C-E014-4A4E-8F5D-558A18DF806E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"380F947D-2B8A-4768-B1F4-B04F6CC1E855"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E93F09B9-FD14-4ABE-A650-1CAE4727FE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"221D2428-6648-4B8D-8C38-68ED6480748A"}]}]}],"references":[{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58196","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"cve@mitre.org"},{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3452","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname."},{"lang":"es","value":"WebCoreModule.ashx en RADactive I-Load anterior a v2008.2.5.0 permite a atacantes remotos obtener información sensible a través de peticiones no especificadas que lanzan respuestas conteniendo el nombre de ruta de la carpeta saved-image."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*","versionEndIncluding":"2008.2.4.0","matchCriteriaId":"4F139A75-38DA-423B-BF6A-0F72D289C3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DE74540D-CEF8-4D69-9B5C-EF65AB75297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D9C87F5-72A5-4067-88B3-AF93063D299E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"013704F2-FE79-4576-8A9B-5BF8F57B64B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"5482B06C-8E4E-46CD-B828-33BB9A535EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9D7C075F-0A1B-4216-B32C-B95CD73442E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3E66E491-7785-4371-AE45-DA957D48DC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4E1B949F-5984-4726-B0AA-901A7C9B82C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3F93132F-BD03-4731-9EBF-607F0C1E2CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"73C8F452-D278-4B4D-9C35-BF993894DF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A99B631-3142-413E-A00E-2A914A941A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DD79EE0A-1603-43C3-BD22-3D3E6E3A542B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"10AC750D-2FD5-40B2-807E-3A7693FAB4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8A765BE3-9BE1-46B1-8C9C-A274D8AFBEC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C06A2416-1CD5-4F22-AD19-FADFE6D94997"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A30F2246-03AB-4A99-B2CB-2B116F70F7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"508A871B-64F7-411E-9911-95E51D070D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"556A339D-308F-4B16-8080-2756CC4225FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"54F277DA-2B18-4CFF-8C0B-03D8B226982D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"88B1BC55-4481-4B17-8137-C65D5F4BD651"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D573A940-3848-4653-B92A-3D0CA07962E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4CC98-79E6-4F92-86D8-31902D071556"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5222097B-5239-4545-BBC8-9EEDA96372F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"574A108B-091A-4061-88A0-3A4AC75737DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"344775B7-18C6-4689-A513-C9A9E2F0B7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"C348E59F-085B-481D-A18F-CD9F20AE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"32BBAACD-9D5B-4160-9266-D2C31C19990F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*","matchCriteriaId":"4EF467CB-26D0-49C8-B0D5-20089E907FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*","matchCriteriaId":"01F0EDCD-B278-4B01-9048-5C316AB156AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*","matchCriteriaId":"E72C34E7-9E2E-4EB8-B942-9314444A4F9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*","matchCriteriaId":"55656D0E-1017-4C5A-BDC4-1182A744035E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*","matchCriteriaId":"B83A4E9F-9188-438B-BA04-293460EAAA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*","matchCriteriaId":"9F9EFA57-7AB4-4662-94CC-902C71546D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5C02639B-16A5-499A-959C-7BA9DC1696D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F506BE-4540-4419-866C-70D67F9B5A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"727B9CEA-AE45-4839-83A5-36D845823D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FBD2D6-A917-4BBF-A215-4B61056EF5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D97E6B5-22B8-47F4-9C4B-61EB3E82FAD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5FCA880C-7A43-42F0-B918-708A52301E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A88B8238-3B59-4005-9368-707F0AD6DD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B881471-9471-4C0C-8075-C13039237850"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"65A4543A-1774-4DD2-B7CA-59B373D9A285"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"302B973C-E014-4A4E-8F5D-558A18DF806E"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"380F947D-2B8A-4768-B1F4-B04F6CC1E855"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E93F09B9-FD14-4ABE-A650-1CAE4727FE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"221D2428-6648-4B8D-8C38-68ED6480748A"}]}]}],"references":[{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"cve@mitre.org"},{"url":"http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506555/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20090917-0_RADactive_I-Load_Multiple_Vulnerabilities.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3453","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en IBM Lotus Quickr v8.1.0 servicios para WebSphere Portal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del nombre de fichero de un fichero .odt en Lotus Quickr place, relacionado con la plantilla Library."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_quickr:8.1.0:*:ibm_webpshere_portal:*:*:*:*:*","matchCriteriaId":"824834E1-101E-44B3-9260-18776F0E8EB6"}]}]}],"references":[{"url":"http://osvdb.org/58384","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36899","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO36646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36527","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022952","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2779","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53489","source":"cve@mitre.org"},{"url":"http://osvdb.org/58384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LO36646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3454","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.343","lastModified":"2023-11-07T02:04:26.517","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2510.  Reason: This candidate is a duplicate of CVE-2009-2510.  Notes: All CVE users should reference CVE-2009-2510 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3455","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"Apple Safari, posiblemente anterior a v4.0.3, en Mac OS X no maneja adecuadamente un carácter '\\0' en un nombre de dominio de sujeto en el campo Common Name (CN) de un certificado X.509, lo que permite a atacantes hombre-en-el-medio (Man-in-the-middle) suplantar cualquier servidor SSL a través de un certificado manipulado expedido por una Autoridad de Certificación legítima, relacionado con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*","versionEndIncluding":"4.0.2","matchCriteriaId":"9BD06245-0545-4364-8BB8-0271A041E25D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*","matchCriteriaId":"7F7275FE-C28A-4067-B9EF-BC99E10188DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*","matchCriteriaId":"E2249206-EF91-4168-B7C2-C1DB35CDFA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*","matchCriteriaId":"641D655F-E210-4795-836C-BBF6D90B92E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"8CB4DB96-AD8A-4E62-99DE-00E8A5BB79E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0b1:-:mac:*:*:*:*:*","matchCriteriaId":"C1AFF940-B682-4191-9FE9-41910EC9E701"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*","matchCriteriaId":"1FC456E7-727C-4932-A0D0-B0D168E8C523"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*","matchCriteriaId":"303E4616-1BB6-4D2D-8437-47F3D1B3C13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.0:-:mac:*:*:*:*:*","matchCriteriaId":"0C79FA5B-7641-4151-9009-19CE34E502A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"40F22441-057B-4EA3-ADF2-8BB9026F8D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:-:mac:*:*:*:*:*","matchCriteriaId":"1185F2FF-3F54-4268-975D-E0EEB81B6674"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"B9714662-F089-430F-8049-8CF2ACEA2B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.4:-:mac:*:*:*:*:*","matchCriteriaId":"CE1E0640-9B33-493A-9D0E-5CBA39863EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.5:-:mac:*:*:*:*:*","matchCriteriaId":"A927EAF2-D22F-453D-ACDE-5DE654CF9BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*","matchCriteriaId":"03C2A522-2D71-4909-B86F-DBEE2C703F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*","matchCriteriaId":"E75B3EAD-A9D3-4497-B3B0-E31E807010A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*","matchCriteriaId":"F837BE0E-9255-41C5-8E49-57090A574A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*","matchCriteriaId":"B8870C90-A1C9-4D8C-B1EF-9D72D55535EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"4BDF3264-D1BF-4F76-8BC9-FA264B34A324"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"826FA9E0-96A2-402A-98A1-7401140F2A8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*","matchCriteriaId":"586ED537-9BB4-4931-8891-E60740983C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"16654582-46DC-4E51-AE72-8C31B1E4FE80"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"73B23547-9710-44E9-A32A-6320C8E7A780"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*","matchCriteriaId":"30FA25DB-3525-4755-B038-6572B2457CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*","matchCriteriaId":"EBFEED2C-8822-44EB-9296-82862DB14DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.0:-:mac:*:*:*:*:*","matchCriteriaId":"29C67ABC-DD90-4989-9C20-80F7350CAA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"430E6664-DA03-41D5-A0F6-588DAE4E00C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*","matchCriteriaId":"9BE1D829-A6C9-4B5C-971B-5515FB92061D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*","matchCriteriaId":"FD35EC3D-01E2-4FA7-95AC-A2E57C652649"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*","matchCriteriaId":"8BC133D1-E120-4B84-85DC-1D528CB77FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*","matchCriteriaId":"C23C022E-293E-4247-A9AD-2F27C29E92A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*","matchCriteriaId":"90D8505E-35D2-40A1-9D75-1A023C4DD65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*","matchCriteriaId":"75359A0E-823A-45C5-8C61-ABE225FB939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.0:-:mac:*:*:*:*:*","matchCriteriaId":"7033FB61-BE7D-4F00-BFBC-2E7B681D1876"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*","matchCriteriaId":"1D087ECA-D214-4A6B-8F64-7F8AABB14706"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*","matchCriteriaId":"8CFED254-6277-4E5E-B8E7-B5CB1ED3E7FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*","matchCriteriaId":"B4ABDE92-E8A8-431D-BF9C-9A54667A8664"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*","matchCriteriaId":"F8283078-D722-40AC-AF7A-7BC9AD19D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2:-:mac:*:*:*:*:*","matchCriteriaId":"A38B1A36-9963-4F19-9828-192F5F70F6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*","matchCriteriaId":"94956778-7E73-4B42-B7B1-0D11837B8476"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*","matchCriteriaId":"66132AA6-F3EA-408D-9C43-8E6C577C8F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*","matchCriteriaId":"AC54BF41-2BF6-4604-AEFA-532453AB91E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*","matchCriteriaId":"D8CFE8E7-B970-4B86-99E9-AC3F8626737C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:-:mac:*:*:*:*:*","matchCriteriaId":"5DD711C6-5F41-4889-B818-2DFC9F8065DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.0b:-:mac:*:*:*:*:*","matchCriteriaId":"FB772DB8-165F-4BDC-95F1-587C2A332741"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.1:-:mac:*:*:*:*:*","matchCriteriaId":"A0E6F326-291D-4FC4-ACEE-02D8AC410E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.2:*:mac:*:*:*:*:*","matchCriteriaId":"9ED5F6E2-4E16-405F-8701-81D850A51F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0_beta:-:mac:*:*:*:*:*","matchCriteriaId":"DC06C0DC-9D59-483C-9043-B446C0A5B4A4"}]}]}],"references":[{"url":"http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36477","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3456","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Google Chrome, posiblemente v3.0.195.21 y anteriores, no controla correctamente un caracter '\\0' en el nombre de dominio en el campo Common Name (CN) de un certificado X.509 lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de un certificado manipulado expedido por un Autoridad de Certificación legítima , una cuestión relacionada con CVE-2009-2408. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.195.21","matchCriteriaId":"8B37560A-C9A9-4D6D-AD2A-C050DBD22628"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36479","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3457","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T18:00:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159."},{"lang":"es","value":"Cisco ACE XML Gateway (AXG) y  ACE Web Application Firewall (WAF), anterior a v6.1, permite  a atacantes remotos obtener información sensible mediante una petición HTTP que carece de manejador. Como ha sido demostrado por (1) una petición OPTIONS o (2) una petición GET manipulada, que dan lugar a mensajes de error del tipo Message-handling Errors y que contienen la dirección IP de determinados clientes de la intranet. También conocido como Bug ID CSCtb82159."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_web_application_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0\\(3\\)","matchCriteriaId":"EE6B32BA-DF80-4CDD-8524-7E9D12B1B761"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_web_application_firewall:6.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"2069D4D3-526D-4D95-8C6B-0B290B27F9D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_web_application_firewall:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"80E02AA7-7DFC-4F62-AD97-CFBE693FDC79"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_web_application_firewall:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"BE209A78-EF5A-4C61-82A6-451B950E7490"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_xml_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0\\(3\\)","matchCriteriaId":"2B805751-8CA7-4F46-BD06-1679DC8F8259"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_xml_gateway:6.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"8886926F-25CE-42CA-A949-DA50558F9A3B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_xml_gateway:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CDA26824-6F54-403C-ACD6-2115C93BC1AC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ace_xml_gateway:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3554A382-474E-4C76-89FB-359151959159"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2009/Sep/0369.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/36879","source":"cve@mitre.org"},{"url":"http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080af8965.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506716/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36522","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022949","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2778","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53482","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Sep/0369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/36879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080af8965.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506716/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3458","sourceIdentifier":"psirt@adobe.com","published":"2009-10-19T22:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nSolution\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.\r\nSeverity rating","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSummary\r\n\r\nCritical vulnerabilities have been identified in Adobe Reader 9.1.3 and Acrobat 9.1.3, Adobe Reader 8.1.6 and Acrobat 8.1.6 for Windows, Macintosh and UNIX, and Adobe Reader 7.1.3 and Acrobat 7.1.3 for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update represents the second quarterly security update for Adobe Reader and Acrobat.\r\n\r\nAdobe recommends users of Adobe Reader 9.1.3 and Acrobat 9.1.3 and earlier versions update to Adobe Reader 9.2 and Acrobat 9.2. Adobe recommends users of Acrobat 8.1.6 and earlier versions update to Acrobat 8.1.7, and users of Acrobat 7.1.3 and earlier versions update to Acrobat 7.1.4. For Adobe Reader users who cannot update to Adobe Reader 9.2, Adobe has provided the Adobe Reader 8.1.7 and Adobe Reader 7.1.4 updates. Updates apply to all platforms: Windows, Macintosh and UNIX.\r\nAffected software versions\r\n\r\nAdobe Reader 9.1.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.1.3 and earlier versions for Windows and Macintosh","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998."},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, v8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 no validan los datos de entrada apropiadamente, lo que puede permitir a los atacantes ejecutar código de su elección a través de vectores de ataque sin especificar. Es una vulnerabilidad distinta a la CVE-2009-2998."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"psirt@adobe.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6499","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3459","sourceIdentifier":"psirt@adobe.com","published":"2009-10-13T10:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Un Desbordamiento de búfer en la región heap de la memoria en Adobe Reader y Acrobat versión 7.x anterior a versión 7.1.4, versión 8.x anterior a 8.1.7, y versión 9.x anterior a 9.2, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado que desencadena la corrupción de memoria, tal y como fue explotado \"in the wild\" en octubre de 2009. NOTA: algunos de estos detalles se obtienen de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"465F9134-DD86-4F13-8C39-949BE6E7389A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB041EDF-EFF8-4AA6-8D59-411975547534"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AABA4FE3-662B-4956-904D-45086E000890"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"998CD79C-458E-46A8-8261-1C40C53D9FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"0155FB0B-7FAD-4388-96C8-A8543B4FDFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*","matchCriteriaId":"201F059D-33D1-4D9F-9C6F-FC8EB49E4735"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B025E795-5713-485E-8A15-EBE4451A1A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B453FA1D-0FE9-4324-9644-E167561926C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FDEA946E-B6D2-463B-89D0-F2F37278089E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"183B5940-2310-4D2E-99F0-9792A801A442"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F8BB13E-2732-4F9E-A588-EA1C00893C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5FCDCBF-597B-439C-8D8B-2819FC70C567"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"440B890A-90E9-4456-B92A-856CD17F0C78"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"79BD9D8D-39DA-403E-915D-E1B6A46A6BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8976A7DC-1314-4C4A-A7C5-AA789D2DAB9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9:*:*:*:*:*:*:*","matchCriteriaId":"37AF9870-B9F0-42D2-B2D1-4A7E569A4C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0","matchCriteriaId":"840D37C8-F30C-4A91-9B34-39AF1E4E34C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DA4A65AB-75F1-4F6B-83E4-354E7D1EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5AD49BF0-E8BC-4716-8B13-DF39267D9303"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"71FC1CDB-DF7C-45FF-973D-8C9310121B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"5C8951B8-0DF2-48C9-9EAC-9EDCCD389958"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.0.5c:*:*:*:*:*:*:*","matchCriteriaId":"DCCCF8E6-2117-4665-AC71-8F05771CDB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:4.5:*:*:*:*:*:*:*","matchCriteriaId":"99E14042-AF3B-4609-8CFE-6E02B3DF5CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"822D6CAA-4CF7-41BE-B2AC-E7CBAB6229C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"73579E5C-BDB2-4F9C-BB87-E3752B9030B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8A57B3C8-B127-4A52-AB08-A1B6F7830914"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F131F390-EA28-41C2-A054-42E6B070FA8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E26DE5FE-729C-4C3A-80FB-0FAFC90A8BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C85609BE-4385-4728-AC7E-4231B45A3CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"29BDD58D-3200-48C1-AB30-07808E029061"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FC93E153-9E21-4012-BFE0-0168488FFC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"30D445D4-2B00-451B-8744-CCA9F1E1ADA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53D60FEC-557F-456B-8F35-170078EC5C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"51A7B617-FDB3-4F46-AF1F-F9210FB2793B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4B5D145B-FD5B-430E-8E90-929B00271C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"40E8FD46-14E2-4D92-8A99-66EC41F38CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"78BA5B02-F565-4A7F-B9FD-DD08ABF258CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E3F0A07-7021-4D04-A8F2-1BCAB474CD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B4C1C3A0-B0DF-42E4-A8AC-D93FCB6526D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B3B5B11C-6E76-4A03-AC05-840EFE2F8504"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CFF8D072-305A-40B9-9E89-D98BDD951346"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"DEF52FAE-B6EF-457D-A61A-95B5E31CEF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0A7236C5-85F8-47C5-8A24-D5282F94D77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"718F2E95-E221-4928-B50F-AB840BBA0E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"123D2B4E-0D05-453C-B598-E41D43FE0E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0109ADA4-6BA0-4299-8043-7CD60DAD6DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1F00A8EC-10FC-42B6-BB3E-985C903B91DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"98BCBFB5-72DF-4B8A-8F4C-E958B4FAFB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"71EB6E18-5764-4916-9ECA-F4E880672217"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"61151189-E24C-4AB6-BC60-B9AF720E3D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1B65F7E5-05A4-45FC-BDC2-670166535721"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"026B1CF8-28A2-415D-A240-C9DF774BF9DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"FBE16943-CCD8-4A39-832F-F6ED3CF2936B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"42A1A800-D0CC-4593-A31A-EE308E63B454"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://isc.sans.org/diary.html?storyid=7300","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/36983","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023007","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/threats/348.html","source":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/bid/36600","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2851","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53691","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534","source":"psirt@adobe.com"},{"url":"http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://isc.sans.org/diary.html?storyid=7300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/threats/348.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3460","sourceIdentifier":"psirt@adobe.com","published":"2009-10-19T22:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nSolution\r\n\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\n\r\nThis update resolves a memory corruption issue that could potentially lead to code execution. This issue is specific to Acrobat and does not affect Adobe Reader. (CVE-2009-3460).\r\nNOTE: this issue is resolved in the Acrobat 9.2 and 8.1.7 updates.","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Adobe Acrobat v9.x anteriores a v9.2, v8.x anteriores a v8.1.7, y posiblemente v7.x anteriores a v7.1.4 permite a los atacantes provocar una denegación de servicio (corrupción de memoria) o probablemente ejecutar código de su elección a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"psirt@adobe.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6550","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3461","sourceIdentifier":"psirt@adobe.com","published":"2009-10-19T22:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves an issue that could allow a malicious user to bypass file extension security controls. This issue is specific to Acrobat 9.X.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en Adobe Acrobat v9.x anteriores a v9.2 permite a atacantes evitar las restricciones de extensión de archivo previstas a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5FF485FB-3317-4C89-B636-F22FF19B00BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"psirt@adobe.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3462","sourceIdentifier":"psirt@adobe.com","published":"2009-10-19T22:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nAdobe Reader\r\n\r\nAdobe Reader users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows.\r\n\r\nAdobe Reader users on Macintosh can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh.\r\n\r\nAdobe Reader users on UNIX can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix.\r\n\r\nAcrobat\r\n\r\nAcrobat Standard and Pro users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.\r\n\r\nAcrobat Pro Extended users on Windows can find the appropriate update here: http://www.adobe.com/support/downloads/product.jsp?product=158&platform=Windows\r\n\r\nAcrobat 3D users on Windows can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=112&platform=Windows.\r\n\r\nAcrobat Pro users on Macintosh can find the appropriate update here:\r\nhttp://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh.","evaluatorImpact":"Per: http://www.adobe.com/support/security/bulletins/apsb09-15.html\r\n\r\nThis update resolves a Unix-only format bug when running in Debug mode that could lead to arbitrary code execution","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a \"format bug.\""},{"lang":"es","value":"Adobe Reader y Acrobat v7.x anteriores a v7.1.4, 8.x anteriores a v8.1.7 y v9.x anteriores a v9.2 en Unix, cuando el modo Debug está activado, permite a atacantes ejecutar código de su elección a través de vectores de ataque sin especificar, relacionados con un \"bug\" (error o fallo de diseño) de formato."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"84209F08-D75D-4C02-94E4-5942B244E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0:*:*:*:*:*:*:*","matchCriteriaId":"FECFC942-4F04-420C-A9B4-AE0C0590317F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F81817F2-1E3A-4A52-88F1-6B614A2A1F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFFFF0D-A80F-4B67-BEE2-86868EF7AA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1DC97A87-2652-4AD6-8E10-419A9AC9C245"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3E1F71AE-3591-499E-B09F-AAC4E38F1CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D75174C-EBF9-4117-9E66-80E847012853"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"69B0305A-51D3-4E09-B96C-54B0ED921DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9762FE57-837B-4FFA-9813-AC038450EB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0055A38C-E421-40A1-8BC7-11856A20B8F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"758CC9EE-8929-405B-A845-83BAAECCB2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"24A7CF98-27EC-406A-98E2-ACC1AAAF5C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC1BD70D-7A92-4309-A40C-9BD500997390"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"21AC1961-12F7-456F-9CE4-9AAF116CF141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*","matchCriteriaId":"26AE76F7-D7F6-4AF2-A5C6-708B5642C288"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*","matchCriteriaId":"749FFB51-65D4-4A4B-95F3-742440276897"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8665E53-EC1E-4B95-9064-2565BC12113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"24218FDA-F9DA-465A-B5D5-76A55C7EE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2C5F1C5-85CD-47B9-897F-E51D6902AF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0E190FF-3EBC-44AB-8072-4D964E843E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B95C0A99-42E4-40A9-BF61-507E4E4DC052"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA53564-9ACD-4CFB-9AAC-A77440026A57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F475858-DCE2-4C93-A51A-04718DF17593"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"88687272-4CD0-42A2-B727-C322ABDE3549"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1.3","matchCriteriaId":"93E26221-1DC1-4742-9FD5-54EADCAB70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24262AFA-2EC8-479E-8922-36DB4243E404"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1E62096-08B2-4722-A492-11E9A441E85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5370AC6-90EE-48EA-8DBD-54002B102F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C36D10A8-D211-437D-98D8-9029D0A9CF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BA55D00C-3629-48E4-8699-F62B8D703E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EE5E1B7-7B91-4AE1-92AA-4F1763E1BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"623324C2-C8B5-4C3C-9C10-9677D5A6740A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B8EAF5E3-F3B4-4AD3-B5F1-281AB0F9C57F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"634396D6-4ED6-4F4D-9458-396373489589"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9A265869-EF58-428E-B8BB-30CABCBE0A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADB421CD-85DE-4495-93B7-46708449AE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5491D310-E1C0-4FCB-9DCA-97CA1F95D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*","matchCriteriaId":"996EB48E-D2A8-49E4-915A-EBDE26A9FB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*","matchCriteriaId":"97E20936-EE31-4CEB-A710-3165A28BAD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BEA847-A71E-4336-AB67-B3C38847C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D198253-0E52-4E7F-AA01-CA82B96CD5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"39F6994B-6969-485B-9286-2592B11A47BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC533775-B52E-43F0-BF19-1473BE36232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"18D1C85E-42CC-46F2-A7B6-DAC3C3995330"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*","matchCriteriaId":"562772F1-1627-438E-A6B8-7D1AA5536086"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F25C9167-C6D4-4264-9197-50878EDA2D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD1D7308-09E9-42B2-8836-DC2326C62A9E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023007","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"psirt@adobe.com","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-286B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3463","sourceIdentifier":"psirt@adobe.com","published":"2009-11-04T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Error de indexación de array en Adobe Shockwave Player anterior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través de un contenido Shockwave manipulado en un sitios web. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5.1.601","matchCriteriaId":"E2616516-18CA-4F56-803F-8CD3DBC56006"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*","matchCriteriaId":"BF19CBB1-F047-4472-A19D-48A147396383"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*","matchCriteriaId":"C61B9485-2A42-4C95-9A10-3F1102E4EBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*","matchCriteriaId":"79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023123","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"psirt@adobe.com"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54118","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5677","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3464","sourceIdentifier":"psirt@adobe.com","published":"2009-11-04T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an \"invalid pointer vulnerability,\" a different issue than CVE-2009-3465.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Adobe Shockwave Player anerior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través  un contenido Shockwave manipulado en una página web. Relacionado con la \"vulnerabilidad de puntero inválido. Cuestión distinta de CVE-2009-3465. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5.1.601","matchCriteriaId":"E2616516-18CA-4F56-803F-8CD3DBC56006"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*","matchCriteriaId":"BF19CBB1-F047-4472-A19D-48A147396383"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*","matchCriteriaId":"C61B9485-2A42-4C95-9A10-3F1102E4EBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*","matchCriteriaId":"79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023123","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54119","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6394","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3465","sourceIdentifier":"psirt@adobe.com","published":"2009-11-04T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an \"invalid pointer vulnerability,\" a different issue than CVE-2009-3464.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Adobe Shockwave Player anerior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través  un contenido Shockwave manipulado en una página web. Relacionado con la \"vulnerabilidad de puntero inválido. Cuestión distinta de CVE-2009-3464. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5.1.601","matchCriteriaId":"E2616516-18CA-4F56-803F-8CD3DBC56006"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*","matchCriteriaId":"BF19CBB1-F047-4472-A19D-48A147396383"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*","matchCriteriaId":"C61B9485-2A42-4C95-9A10-3F1102E4EBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*","matchCriteriaId":"79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023123","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"psirt@adobe.com"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54120","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5722","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3466","sourceIdentifier":"psirt@adobe.com","published":"2009-11-04T15:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an \"invalid string length vulnerability.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Adobe Shockwave Player anterior a v11.5.2.602, permite a atacantes remotos ejecutar código de su elección a través de una página web manipulada que provoca una corrupción de memoria. Relacionado con la \"vulnerabilidad de longitud de cadena inválida\". NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5.1.601","matchCriteriaId":"E2616516-18CA-4F56-803F-8CD3DBC56006"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"085FA7DD-8048-4768-816C-82828022FCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*","matchCriteriaId":"966A8542-E5E1-468F-989E-47F71123A426"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"A77F1733-6755-44E7-8ECC-CFB397FC79A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*","matchCriteriaId":"17F5982F-35BD-49A0-9DBE-774816136D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D18289BB-6568-4671-BC70-C8744DD2E0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*","matchCriteriaId":"BF19CBB1-F047-4472-A19D-48A147396383"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*","matchCriteriaId":"C61B9485-2A42-4C95-9A10-3F1102E4EBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*","matchCriteriaId":"79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023123","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"psirt@adobe.com"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54121","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6395","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3468","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T19:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control (MAC) policy via unknown vectors, related to a menu typo and the Style Manager."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Common Desktop Environment (CDE) en Solaris de Sun versión 10, cuando las extensiones de confianza están habilitadas, permiten a los usuarios locales ejecutar comandos arbitrarios u omitir la política de Control de Acceso Obligatorio (MAC) por medio de vectores desconocidos, relacionados con un error tipográfico de menú y el Administrador de Estilos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://osvdb.org/58319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36822","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126365-15-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139620-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267488-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36510","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022943","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53461","source":"cve@mitre.org"},{"url":"http://osvdb.org/58319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126365-15-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139620-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267488-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3469","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T19:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos remotos en tistios cruzados (XSS) en profiles/html/simpleSearch.do en  IBM Lotus Connections v2.0.1, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través del parámetro \"name\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEA241C8-79AC-4D90-A788-4CDA92ECB40A"}]}]}],"references":[{"url":"http://osvdb.org/58320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LO44244","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36513","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022945","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2760","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53460","source":"cve@mitre.org"},{"url":"http://osvdb.org/58320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LO44244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3470","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T21:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service (memory corruption, assertion failure, and daemon crash) by sending a long password over a JDBC connection."},{"lang":"es","value":"IBM Informix Dynamic Server (IDS) v10.00 anterior a v10.00.xC11, v11.10 anterior a v11.10.xC4, y v11.50 anterior a v11.50.xC5 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de demonio) enviando una contraseña larga sobre una conexión JDBC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"1716E256-B186-442F-8C4C-9305E0953081"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc1:*:*:*:*:*:*:*","matchCriteriaId":"257DA554-937D-4BA1-9131-2F978C6E5E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc2:*:*:*:*:*:*:*","matchCriteriaId":"A81C5A16-B696-4A8D-AFD2-1A51B3BE4EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc3:*:*:*:*:*:*:*","matchCriteriaId":"48562C58-0055-4394-9B40-D5730FE6A8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc4:*:*:*:*:*:*:*","matchCriteriaId":"45791C63-A04C-4990-A78D-0529C8E9CC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc5:*:*:*:*:*:*:*","matchCriteriaId":"55991F0F-2770-4367-9850-93504D33580C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc6:*:*:*:*:*:*:*","matchCriteriaId":"7F9C4B48-B294-4BAF-99EE-7D2E1B024BFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc8:*:*:*:*:*:*:*","matchCriteriaId":"461C0E60-9EB5-42EA-835C-B1F5234E8CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc9:*:*:*:*:*:*:*","matchCriteriaId":"69DB33A6-1D6E-476A-97E4-8EE60EA43127"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc10:*:*:*:*:*:*:*","matchCriteriaId":"809EB926-BCB1-4EEF-B385-5C487B1F8301"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.10:*:*:*:*:*:*:*","matchCriteriaId":"F3398187-9A9C-4584-A186-01DB36C88219"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1:*:*:*:*:*:*:*","matchCriteriaId":"BC21790C-D057-4B11-8D0C-202B71B1E7A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*","matchCriteriaId":"539DE4E7-8531-43E8-AE75-178BFC4324F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc3:*:*:*:*:*:*:*","matchCriteriaId":"429D6E5F-E249-4EA5-B2BB-DDF3B2B20676"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.50:*:*:*:*:*:*:*","matchCriteriaId":"DE122FD4-9164-4638-8E98-7670908E392B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc1:*:*:*:*:*:*:*","matchCriteriaId":"E99EBE74-8437-4DFD-B44A-5BD06B708BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc2:*:*:*:*:*:*:*","matchCriteriaId":"B1E504E6-5293-4255-9FDB-CB115A5719D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc3:*:*:*:*:*:*:*","matchCriteriaId":"9B96A8DF-88C4-499C-823B-3FB5ECDC9752"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:11.50.xc4:*:*:*:*:*:*:*","matchCriteriaId":"7697326E-CF54-46E3-9ECF-819F6BF53C1A"}]}]}],"references":[{"url":"http://secunia.com/advisories/36853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC61195","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36538","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022955","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC61195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3471","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors."},{"lang":"es","value":"IBM DB2 v8 anterior a FP18, v9.1 anterior a FP8, y v9.5 anterior a FP4 no realiza los borrados esperados de ciertas funciones de tabla por una perdida de privilegios por las definiciones de las funciones, lo cual tiene un impacto no especificado y vectores de ataque a distancia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*","matchCriteriaId":"E0252A93-49D5-4C5E-B774-8400526CA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp17:*:*:*:*:*:*","matchCriteriaId":"4EC433D0-58E3-4744-BAB4-421BC5C3F04C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*","matchCriteriaId":"72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*","matchCriteriaId":"BB299EAB-31AA-4BAA-B477-0F909A8418AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*","matchCriteriaId":"6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*","matchCriteriaId":"222C1B84-0C28-451F-BB02-4CB925263312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*","matchCriteriaId":"08177181-660C-4BF4-9031-74EE89297CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*","matchCriteriaId":"0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*","matchCriteriaId":"19584860-5ADF-4647-AF39-88C236407FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*","matchCriteriaId":"20FE296C-25D0-4689-BAA3-AFCA2C1CC388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"}]}]}],"references":[{"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://osvdb.org/58477","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63548","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46658","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46773","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46774","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21432298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36540","source":"cve@mitre.org"},{"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21432298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3472","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T21:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors."},{"lang":"es","value":"IBM DB2 8 anterior a FP18, v9.1 anterior a FP8, y v9.5 anterior a FP4 permite a usuarios remotos autenticados eludir las restricciones de acceso, y actualizar, insertar o eliminar filas de la tabla, a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp1:*:*:*:*:*:*","matchCriteriaId":"DE35AE57-E7D6-4CD0-AE86-D414009C361E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*","matchCriteriaId":"FBE50207-5779-445A-B3E7-FA548242BD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*","matchCriteriaId":"940D9A1D-DD61-4C78-8ADC-434F78E5626B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*","matchCriteriaId":"2185F942-DCEC-4EE4-840E-62C4C6F1D6FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*","matchCriteriaId":"333F67D2-27CC-4013-B3FA-63BF6F557269"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*","matchCriteriaId":"77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*","matchCriteriaId":"5AA59598-F121-491D-BE8C-D7712A3D6E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp16:*:*:*:*:*:*","matchCriteriaId":"E0252A93-49D5-4C5E-B774-8400526CA813"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp17:*:*:*:*:*:*","matchCriteriaId":"4EC433D0-58E3-4744-BAB4-421BC5C3F04C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*","matchCriteriaId":"72FA9A16-8AFD-4D93-95B4-EAB6E6030D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*","matchCriteriaId":"BB299EAB-31AA-4BAA-B477-0F909A8418AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*","matchCriteriaId":"6FD22E1E-F5BC-45D5-98F4-EDEE87D718F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*","matchCriteriaId":"222C1B84-0C28-451F-BB02-4CB925263312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*","matchCriteriaId":"08177181-660C-4BF4-9031-74EE89297CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*","matchCriteriaId":"0B5FF14E-2971-4F3F-AD25-D00B0FEDA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*","matchCriteriaId":"19584860-5ADF-4647-AF39-88C236407FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*","matchCriteriaId":"20FE296C-25D0-4689-BAA3-AFCA2C1CC388"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"}]}]}],"references":[{"url":"http://osvdb.org/58478","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36540","source":"cve@mitre.org"},{"url":"http://osvdb.org/58478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3473","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T21:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors."},{"lang":"es","value":"IBM DB2 v9.1 anterior a FP8 no requiere el privilegio SETSESSIONUSER para la sentencia SET SESSION AUTHORIZATION, lo que tiene un impacto y vectores de ataque no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"}]}]}],"references":[{"url":"http://osvdb.org/58479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36540","source":"cve@mitre.org"},{"url":"http://osvdb.org/58479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3474","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T23:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate."},{"lang":"es","value":"OpenSAML v2.x anterior a v2.2.1 y XMLTooling v1.x anterior a v1.2.1, utilizado por Internet2 Shibboleth Service Provider v2.x anterior a v2.2.1,no siguen el atributo Use del elemento KeyDescriptor, lo cual permite a atacantes remotos utilizar un certificado para la firma y encriptación, cuando esta designado para un solo fin, debilitando potencialmente el propósito de aplicación de seguridad del certificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:opensaml:2.0:*:*:*:*:*:*:*","matchCriteriaId":"258372E2-533F-46CB-B25A-5ECB3CC2F22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:opensaml:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1122AD73-8FDD-4387-A237-B493CE0D547E"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:opensaml:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0192C838-FD63-4CF7-9BF0-9BAFF101C612"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2D36F93-B9DE-422C-AD73-3D8AA58DB6BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FCBF08-0DD9-4899-B4F5-5D7BFB0B5830"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5457FF44-CB80-486B-B3B2-D40F34565976"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5C3A371A-AF3E-44E5-8854-C5D61FF5660C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CF3BEC-262B-4901-8D73-D8BB1869A166"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"C6EE490F-9E85-44F9-9608-86D4FBDAD331"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*","matchCriteriaId":"4515685C-B170-4829-9261-8FAD5C9F1874"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"673CCD0B-9202-4EBA-96B2-11A438E8D464"}]}]}],"references":[{"url":"http://secunia.com/advisories/36855","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36868","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817a.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1895","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1896","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36516","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugs.internet2.edu/jira/browse/CPPOST-28","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53474","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817a.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.internet2.edu/jira/browse/CPPOST-28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3475","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\\0' character in the subject or subjectAltName fields of a certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"El software Internet2 Shibboleth Service Provider v1.3.x anterior a v1.3.3 y v2.x anterior a v2.2.1, cuando se utiliza la validación de confianza PKIX, no controla correctamente un caracter '\\0' en los campos subject o subjectAltName de un certificado, lo cual permite a atacantes remotos hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación, un tema  relacionado con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CF3BEC-262B-4901-8D73-D8BB1869A166"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*","matchCriteriaId":"4515685C-B170-4829-9261-8FAD5C9F1874"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"673CCD0B-9202-4EBA-96B2-11A438E8D464"}]}]}],"references":[{"url":"http://secunia.com/advisories/36855","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36876","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1895","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1896","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3476","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T23:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL."},{"lang":"es","value":"Desbordamiento de búfer en OpenSAML anterior a v1.1.3 utilizado en Internet2 Shibboleth Service Provider software v1.3.x anterior a v1.3.4, y XMLTooling anterior a v1.2.2 utilizado en Internet2 Shibboleth Service Provider software v2.x anterior a 2.2.1, permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección a través de una URL codificada mal formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CF3BEC-262B-4901-8D73-D8BB1869A166"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6C44598D-2BB6-48AB-81E8-3789D0056B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*","matchCriteriaId":"4515685C-B170-4829-9261-8FAD5C9F1874"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:opensaml:1.1:*:*:*:*:*:*:*","matchCriteriaId":"619E183F-BAA6-4964-8B58-175856734146"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:opensaml:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"759EB34A-48FB-43E8-9030-545E41622371"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2D36F93-B9DE-422C-AD73-3D8AA58DB6BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FCBF08-0DD9-4899-B4F5-5D7BFB0B5830"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5457FF44-CB80-486B-B3B2-D40F34565976"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5C3A371A-AF3E-44E5-8854-C5D61FF5660C"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:xmltooling:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AB54B310-7562-48E3-A514-04D70AF7A28B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"673CCD0B-9202-4EBA-96B2-11A438E8D464"}]}]}],"references":[{"url":"http://secunia.com/advisories/36869","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090826.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53471","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090826.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3477","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle \"hidden\" characters including a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"El Navegador de Blackberry en RIM BlackBerry Device Software v4.5.0 anterior a v4.5.0.173, 4.6.0 anterior a v4.6.0.303, 4.6.1 anterior a v4.6.1.309, 4.7.0 anterior a v4.7.0.179, y 4.7.1 anterior a v4.7.1.57 no maneja apropiadamente caracteres \"ocultos\" incluyendo un carácter '\\0' en un nombre de dominio en el campo nombre común (NC) de un certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) remotos suplantar servidores SSL a su elección a través de de un certificado manipulado expedido por una Autoridad de Certificación legítima, un tema relacionado con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_device_software:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA413B7D-D802-4E3C-A7B6-336A18725F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_device_software:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9AA30719-43F4-4E82-BAAE-3BE053AB500A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_device_software:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"01B0686F-CEE0-49DB-8393-C1100E13AD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_device_software:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E36C6DD2-3695-4D65-B4F5-ADA6C3E69AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_device_software:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"59C49F10-787E-4AFB-8830-E6C3645BD2E7"}]}]}],"references":[{"url":"http://secunia.com/advisories/36875","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/viewContent.do?externalId=KB19552","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36528","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022951","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53490","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.blackberry.com/btsc/viewContent.do?externalId=KB19552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3478","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing \" (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en (1) src/content/js/connection/sftp.js y (2) src/content/js/connection/controlSocket.js.in en extensión FireFTP v1.0.5 para Firefox permite a usuarios SFTP autenticados remotamente provocar alteraciones de permisos de usuarios, eliminar, descargar, o mover  el fichero erróneo a través de un nombre de fichero que contenga \" (doble comilla), lo que no es filtrado o codificado adecuadamente cuando FireFTP crea el comando de envío a psftp.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nightlight:fireftp:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9727600C-CCB5-4D51-B788-D341259E659C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/36860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp105-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36536","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp105-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3479","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with \"create content displayed by the Bibliography module\" permissions, to inject arbitrary web script or HTML via a title."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos remotos en Bibliography (Biblio) v5.x anterior v5.x-1.17 y v6.x anterior v6.x-1.6, un módulo para Drupal, permite a atacantes remotos, con permisos \"create content displayed by the Bibliography module\", ejecutar código web o HTML de su elección a través de un título."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FD83453-158A-4EA6-9B31-6CBF9960BB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"31EDA16F-FE6F-496D-B09F-2990F4AF8F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9ED48E-8461-4674-9F24-B8C72D179D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"0F23F41C-02F3-4DA3-81DA-4F5579C7E4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"8414F9D4-584F-4B7A-8020-63E1AE226B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"1F22DA6A-D72C-40CC-8EED-BE649A29BE0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"1CFB1183-4F02-48CB-88DB-99E3DA3D00A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"28D56DF2-45FE-4A8E-9D87-0E8C25EA07C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"DC36595F-79CF-4694-B2EA-EA06CA236C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"2769ED5B-A596-4758-9EDB-000B2F4DFDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"0651B521-36B5-494E-9DC2-6C8CE5267B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"7965614B-DB2B-4C65-AB5B-2FAA2EF4E549"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"97495850-BE0F-477F-A18F-79B5399F7E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"931959BA-0C44-4BF2-A099-FDF07B05B662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.14:*:*:*:*:*:*:*","matchCriteriaId":"2464A305-75EC-46FE-A69A-98ABFC22324B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.15:*:*:*:*:*:*:*","matchCriteriaId":"2450F355-CD0A-4BDA-804D-4EA51DCC4029"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.16:*:*:*:*:*:*:*","matchCriteriaId":"3989C860-C412-4A91-B584-F7B09921AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"E3AF5118-CDD5-4CA5-9313-470C6C506D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A9E7CF2-3334-41FD-B2DA-340D9CC21108"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1F0873DC-E2E4-4FA5-9DD9-775D2657A680"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3AE0DEEE-453E-4BD0-89D8-9C10DD3FCC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"CFB166C7-5796-4AB1-BA10-1E3AA3F832C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"0763ACA3-4C1B-4A91-95D1-3DB6ACAE16D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"5475D821-4A6C-4A62-A92F-C29052F41D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"D46596EE-279E-47B0-A47F-C4FF688E04F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"8747E464-44C4-46BF-B016-19BD320152E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"D2C66244-92F3-4E05-A861-9C781082C500"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"8FC3A93D-812B-4D90-97E0-40EF6434AD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta5:*:*:*:*:*:*:*","matchCriteriaId":"5C275BC9-D6A8-4B95-9772-56B34A5A6BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta6:*:*:*:*:*:*:*","matchCriteriaId":"FCE4D9F1-17F5-4D49-A00C-BD61C6199AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"D8C9EC9D-0607-4C9F-AA3A-1AC732B5F8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta8:*:*:*:*:*:*:*","matchCriteriaId":"43B58F51-6EA3-4098-91AB-30271660E693"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.0-beta9:*:*:*:*:*:*:*","matchCriteriaId":"2C66CD23-A4DE-4991-BDFA-E5FDFC326177"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"CD580D94-4404-4873-9F73-BF92D6896BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"E7D8988D-7534-44C3-8D9B-C1CAE8F031DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"6470082E-169E-468C-8D9A-C39E4F0B26BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"2E87EA86-1311-404E-9BF7-2BE1CD3FCBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9003E136-0295-46E6-B9EB-F04F4CE0D3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"D8CCBB27-BCF3-4719-B407-BD218685AFD8"}]}]}],"references":[{"url":"http://drupal.org/node/534744","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534752","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534842","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36083","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35865","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/534744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/534842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3480","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! allows remote attackers to execute arbitrary SQL commands via the p3 parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente iCRM Basic (com_icrmbasic) v1.4.2.31 para Joomla! permite a los atacantes remotos ejecutar comandos SQL a través del parámetro p3 en index.php. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isygen:icrm_basic:1.4.2.31:*:*:*:*:*:*:*","matchCriteriaId":"7EB63CC1-A2EB-401F-8A1E-BD54AF5FA0C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/58381","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36533","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53493","source":"cve@mitre.org"},{"url":"http://osvdb.org/58381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3481","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain interface in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! does not require administrative authentication, which has unspecified impact and remote attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Ciertas interfaces en el componente iCRM Basic (com_icrmbasic) v1.4.2.31 para Joomla! no requiere autenticación administrativa, lo que tiene un impacto y vectores de ataque no especificados. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isygen:com_icrmbasic:1.4.2.31:*:*:*:*:*:*:*","matchCriteriaId":"054E90FC-DA5B-431A-9175-5A2E711524FF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/36892","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3482","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs."},{"lang":"es","value":"TrustPort Antivirus anterior v2.8.0.2266 y PC Security anterior v2.0.0.1291 usa permisos débiles (Todos: control total) para archivos bajo %PROGRAMFILES%, que permite a usuarios locales obtener privilegios reemplazando ejecutables con programas troyanos."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trustport:antivirus:*:*:*:*:*:*:*:*","versionEndExcluding":"2.8.0.2266","matchCriteriaId":"A3491438-D727-4570-9F06-2139AF4A7A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trustport:pc_security:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0.1291","matchCriteriaId":"4F10BB6D-0F52-4CB1-82BB-1EC91C7DF580"}]}]}],"references":[{"url":"http://secunia.com/advisories/36880","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506751/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustport.com/en/notices/security-update-of-trustport-products","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506751/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustport.com/en/notices/security-update-of-trustport-products","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3483","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a site list containing an entry with a long label."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica -heap- en Create New Site feature en GlobalSCAPE CuteFTP Professional, Home, y Lite v8.3.3 y v8.3.3.0054 permite a atacantes remotos asistidos por el usuario causar una denegación de servicio (caída de memoria) o probablemente ejecutar código de su elección a a través de un sitio list contenido en una entrada con una etiqueta larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.3.3:*:home:*:*:*:*:*","matchCriteriaId":"BCF5D9D6-3D4D-4F79-82E3-57E479D8A81D"},{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.3.3:*:lite:*:*:*:*:*","matchCriteriaId":"1D575E21-8EEB-4E11-BD32-BA5F22A85715"},{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.3.3:*:pro:*:*:*:*:*","matchCriteriaId":"06059F91-6E14-4825-8202-4E7F357CDC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.3.3.0054:*:home:*:*:*:*:*","matchCriteriaId":"1F29B63D-9616-4F46-886C-B675C268AAD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.3.3.0054:*:lite:*:*:*:*:*","matchCriteriaId":"CE306528-4AC4-40FA-BD4D-62428CD4724E"},{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:8.3.3.0054:*:pro:*:*:*:*:*","matchCriteriaId":"0127ED83-D5CF-4CE4-9EF3-4BACF6442282"}]}]}],"references":[{"url":"http://secunia.com/advisories/36874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58387","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53487","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3484","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Core FTP v2.1 build 1612 permite a atacantes remotos asistidos ejecutar código de su elección  a través del un hostname largo en una entrada al servidor FTP en un archivo backup. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coreftp:core_ftp:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6DDE96BE-78EE-474E-A2E4-ECAF508A21DD"}]}]}],"references":[{"url":"http://osvdb.org/58385","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36872","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0909-exploits/coreftp_local.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53488","source":"cve@mitre.org"},{"url":"http://osvdb.org/58385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0909-exploits/coreftp_local.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3485","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos remotos en sitios cruzados (XSS) en la interface J-Web en Juniper JUNOS v8.5R1.14 y v9.0R1.1 permite a atacantes remotos ejecutar código web o HTML de su elección a través de PATH_INFO en la URI por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:8.5:r1.14:*:*:*:*:*:*","matchCriteriaId":"4D5C18F9-DAA8-4F1A-8A5E-9A544C607624"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:9.0:r1.1:*:*:*:*:*:*","matchCriteriaId":"1A06F9D6-ED62-4985-9852-A528D63679E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-08","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3486","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to (1) the pinghost program, reachable through the diagnose program; or (2) the traceroute program, reachable through the diagnose program; or (3) the probe-limit parameter to the configuration program; the (4) wizard-ids or (5) pager-new-identifier parameter in a firewall-filters action to the configuration program; (6) the cos-physical-interface-name parameter in a cos-physical-interfaces-edit action to the configuration program; the (7) wizard-args or (8) wizard-ids parameter in an snmp action to the configuration program; the (9) username or (10) fullname parameter in a users action to the configuration program; or the (11) certname or (12) certbody parameter in a local-cert (aka https) action to the configuration program."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en (XSS) la interface J-Web en Juniper JUNOS v8.5R1.14 permite a usuarios autenticados remotamente ejecutar código web y HTML de su elección a través del parámetro host en (1) el programa pinghost, accesible a través del programa diagnose; o (2) el programa traceroute, accesible a través del programa diagnose; o (3)el parámetro probe-limit en el programa configuration; los (4) parámetros wizard-ids o (5)parámetro pager-new-identifier en una acción firewall-filters en el programa configuration (6) parámetro the cos-physical-interface-name en una acción cos-physical-interfaces-edit en el programa configuration; los parámetros (7) wizard-args o (8) wizard-ids en una acción snmp en el programa configuration; los parámetros(9) username o (10) fullname en una acción users en el programa configuration; o los parámetros (11) certname o (12) certbody en una acción local-cert (como https) en el programa configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:8.5:r1.14:*:*:*:*:*:*","matchCriteriaId":"4D5C18F9-DAA8-4F1A-8A5E-9A544C607624"}]}]}],"references":[{"url":"http://secunia.com/advisories/36829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3487","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via (1) the JEXEC_OUTID parameter in a JEXEC_MODE_RELAY_OUTPUT action to the jexec program; the (2) act, (3) refresh-time, or (4) ifid parameter to scripter.php; (5) the revision parameter in a rollback action to the configuration program; the m[] parameter to the (6) monitor, (7) manage, (8) events, (9) configuration, or (10) alarms program; (11) the m[] parameter to the default URI; (12) the m[] parameter in a browse action to the default URI; (13) the wizard-next parameter in an https action to the configuration program; or the (14) Contact Information, (15) System Description, (16) Local Engine ID, (17) System Location, or (18) System Name Override SNMP parameter, related to the configuration program."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la interface J-Web en Juniper JUNOS v8.5R1.14 permite a usuarios autentificados remotos ejecutar código web o HTML a su elección a través de (1) el parámetro JEXEC_OUTID en una acción EXEC_MODE_RELAY_OUTPUT en el programa jexec; los parámetros (2) act, (3) refresh-time, o (4) ifid en scripter.php; (5) el parámetro revision en una acción rollback en el programa configuration; el parámetro m[] en el(6) monitor, (7) manage, (8) events, (9) configuration, o (10) programa alarms; (11) el parámetro m[] en la URI por defecto; (12) el parámetro m[] en una acción browse en la URI por defecto; (13) el parámetro wizard-next en una acción https en el programa configuración; o (14) Contact Information, (15) System Description, (16) Local Engine ID, (17) System Location, o (18) parámetro System Name Override SNMP , relacionado con el programa configuration program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:8.5:r1.14:*:*:*:*:*:*","matchCriteriaId":"4D5C18F9-DAA8-4F1A-8A5E-9A544C607624"}]}]}],"references":[{"url":"http://secunia.com/advisories/36829","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36537","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3488","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bibliography (como Biblio) módulo v6.x-1.6 para Drupal permite a usuarios autentificados remotamente, con ciertos privilegios de creación de contenidos, ejecutar código web o HTML de su elección a través del campo Title, posiblemente una vulnerabilidad diferente que CVE-2009-3479."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ron_jerome:bibliography:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"093094D5-F095-4708-A74A-CB0E1B810584"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2009/Sep/0373.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36521","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53483","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Sep/0373.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3489","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command."},{"lang":"es","value":"Adobe Photoshop Elements v8.0 instala Adobe Active File Monitor V8 service con un descriptor de seguridad no seguro, que permite a usuarios locales (1) parar el servicio a través de comando stop, (2) ejecutar comandos de su elección como SYSTEM usando el comando config para modificar la variable binPaht, o (3) reiniciar el servicio a través del comando start."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:photoshop_elements:8.0:*:*:*:*:*:*:*","matchCriteriaId":"218766FE-4F82-4704-BA6A-C0CF1D148DA5"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://retrogod.altervista.org/9sg_adobe_pe_local.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/36895","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/506806/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36542","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022963","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2798","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://blogs.adobe.com/psirt/2009/09/potential_photoshop_elements_8.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://retrogod.altervista.org/9sg_adobe_pe_local.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/36895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/506806/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}},{"cve":{"id":"CVE-2009-3490","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU Wget before 1.12 does not properly handle a '\\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"GNU Wget, en versiones anteriores a la 1.12 no maneja adecuadamente un caracter '\\0' en un nombre de dominio, en el campo Common Name de una certificado X.509, lo cual permite a atacantes hombre-en-el-medio (man-in-the-middle) remotos suplantar servidores SSL a su elección a través de de un certificado manipulado expedido por una Autoridad de Certificación legítima, un tema relacionado con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11.4","matchCriteriaId":"AD0AF9BA-677F-423E-A9B2-0BEBA4A2E86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"50DD71F2-0B3C-4082-950A-CBFA5C601AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*","matchCriteriaId":"26B3B1B6-3985-4479-93B2-14E1AB52F768"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*","matchCriteriaId":"0BC975AA-0F98-4A3A-B3B4-2152156327D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7DEDFB88-C435-4FB9-838D-8199690A8F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*","matchCriteriaId":"D5BF2616-A99A-4229-A8A6-655155ED5EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"3A14454E-DDAE-4115-8323-8BB4E17DF208"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*","matchCriteriaId":"F88CD81A-7804-4316-8581-41689A318D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE0FCE2-ABB9-4943-96AE-C81277014396"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.10:*:*:*:*:*:*:*","matchCriteriaId":"FDE8FE2E-40EF-4B86-A01E-7777FBDABB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"5E097843-1854-4C5E-BB27-07280EB3EEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.10.2:*:*:*:*:*:*:*","matchCriteriaId":"1047974D-7A5D-4533-996B-2B09EC7E8789"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.11:*:*:*:*:*:*:*","matchCriteriaId":"C40562DA-2B50-4B30-B0D8-B62913FCC680"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"E5B63798-366A-4778-987D-19307228E13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"90DEBAA0-B537-4EEC-8EA2-E503F26A0496"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"DEC161C5-5247-4A3C-AB56-6562B0A65D21"}]}]}],"references":[{"url":"http://addictivecode.org/pipermail/wget-notify/2009-August/001808.html","source":"cve@mitre.org"},{"url":"http://hg.addictivecode.org/wget/mainline/rev/1eab157d3be7","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"cve@mitre.org"},{"url":"http://permalink.gmane.org/gmane.comp.web.wget.general/8972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36205","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520454","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11099","source":"cve@mitre.org"},{"url":"http://addictivecode.org/pipermail/wget-notify/2009-August/001808.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://hg.addictivecode.org/wget/mainline/rev/1eab157d3be7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://permalink.gmane.org/gmane.comp.web.wget.general/8972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3491","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a teamdetail action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Kinfusion SportFusion (com_sportfusion) 0.2.2 a 0.2.3 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cid[0]\" en una acción teamdetail a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kinfusion:com_sportfusion:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7B84A9DC-4539-4B73-AEA5-5021FEB77050"},{"vulnerable":true,"criteria":"cpe:2.3:a:kinfusion:com_sportfusion:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7F611837-B532-4D9C-A496-E530A0CDC0C9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/joomlasportfusion-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0909-exploits/joomlasportfusion-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3492","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to (1) Calendar.php, (2) Comment.php, (3) Rss.php and (4) Trackback.php in lib/Loggix/Module/; and (5) modules/downloads/lib/LM_Downloads.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Loggix Project v9.4.5 y versiones anteriores permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"pathToIndex\" para (1) Calendar.php, (2) Comment.php, (3) Rss.php y (4) Trackback.php en lib/Loggix/Module/; y (5) modules/downloads/lib/LM_Downloads.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gotdns:loggix_project:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.5","matchCriteriaId":"1D465280-C0EF-4A45-A049-EA01FEE7C8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gotdns:loggix_project:9.3.27:*:*:*:*:*:*:*","matchCriteriaId":"7745588B-A0F3-489B-BFC7-A2AF9C932C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:gotdns:loggix_project:9.3.28:*:*:*:*:*:*:*","matchCriteriaId":"6D9B9A38-96AF-4B40-8163-80F3B605D71B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9729","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53402","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3493","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Zenas PaoBacheca Guestbook 2.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el PATH_INFO para (1) scrivi.php y (2) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zenas:paobacheca_guestbook:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A08B66F4-4AE7-4D01-A2FE-E26B9A7313BB"}]}]}],"references":[{"url":"http://osvdb.org/58163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/58164","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0909-exploits/paobacheca-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53323","source":"cve@mitre.org"},{"url":"http://osvdb.org/58163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/58164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0909-exploits/paobacheca-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3494","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a delete_category action, (2) the name parameter in an update_category action, and other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en T-HTB Manager v0.5, cuando magic_quotes_gpc está deshabilitado, permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"id\" en una acción delete_category, (2) \"name\" en una acción update_category y otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:todor_lazarov:t-htb_manager:0.5:*:*:*:*:*:*:*","matchCriteriaId":"923CC654-EB9C-4C28-8EB2-0F7494B6B5E1"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9637","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506386/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53145","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506386/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3495","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the mag_id parameter, a different vector than CVE-2008-4465."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_mag.php en Vastal I-Tech DVD Zone permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"mag_id\", un vector diferente a CVE-2008-4465."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:dvd_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"7D15DAA3-D29B-4BD4-827E-C77D22EB7DC6"}]}]}],"references":[{"url":"http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36843","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36487","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3496","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arbitrary web script or HTML via the mag_id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en view_mag.php en Vastal I-Tech DVD Zone permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"mag_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:dvd_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"7D15DAA3-D29B-4BD4-827E-C77D22EB7DC6"}]}]}],"references":[{"url":"http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36843","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36487","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://antisecurity.org/dvd-zone-view_mag-phpmag_id-bsqlxss-multiple-remote-vulnerabilities.antisecurity","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3497","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_listing.php en Vastal I-Tech Agent Zone (alias The Real Estate Script) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:agent_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"D14595BF-746C-4A40-8453-C11BA3CD5855"}]}]}],"references":[{"url":"http://secunia.com/advisories/36812","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0909-exploits/realestaterealtors-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0909-exploits/realestaterealtors-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3498","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in php/update_article_hits.php in HBcms 1.7 allows remote attackers to execute arbitrary SQL commands via the article_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en php/update_article_hits.php en HBcms 1.7 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"article_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hbcms:hbcms:1.7:*:*:*:*:*:*:*","matchCriteriaId":"E497F5B4-AEF3-4BC1-A480-FA8CBC41A4B5"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/hbcms-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/hbcms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3499","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en employee.aspx en BPowerHouse BPLawyerCaseDocuments 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:bplawyercasedocuments:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A554FF7-83A9-4474-B8DD-7DF3739CD268"}]}]}],"references":[{"url":"http://antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36796","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3500","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to main.php and (2) game_id parameter to game.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en BPowerHouse BPGames 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"cat_id\" a main.php y (2) \"game_id\" a game.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:bpgames:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E41B437-4E64-4E7E-B5FE-9294DC80D6CB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/bpgames-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36828","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/bpgames-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3501","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en students.php en BPowerHouse BPStudents 1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"test\" en una acción de previsualizar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:bpstudents:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E6E3D85-6277-4D5A-A8E9-BA808F21A034"}]}]}],"references":[{"url":"http://osvdb.org/58293","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/bpstudent-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36826","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2741","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53428","source":"cve@mitre.org"},{"url":"http://osvdb.org/58293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0909-exploits/bpstudent-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3502","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL commands via the music_id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en music.php en BPowerHouse BPMusic v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"music_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:bpmusic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"624901E3-5116-43D8-A6BD-CD67CDE4C547"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/bpmusic-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/bpmusic-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3503","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en search.aspx en BPowerHouse BPHolidayLettings 1.0 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"rid\" y (2) \"tid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bpowerhouse:bpholidaylettings:1.0:*:*:*:*:*:*:*","matchCriteriaId":"03C3D157-B05F-4125-9A48-5759F0C45520"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2744","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3504","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en offers_buy.php en Alibaba Clone 3.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alibabaclone:alibaba_clone:3.0:*:*:*:*:*:*:*","matchCriteriaId":"78DE2C47-1E73-4ECE-8C72-B5004EB84B7A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/alibaba30-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36845","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/alibaba30-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3505","sourceIdentifier":"cve@mitre.org","published":"2009-09-30T15:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.  NOTE: the game_id vector is already covered by CVE-2008-4460."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en view_news.php en Vastal I-Tech MMORPG Zone permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"news_id\". NOTA: el vector game_id actualmente está reportado en el CVE-2008-4460."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vastal:mmorpg_zone:*:*:*:*:*:*:*:*","matchCriteriaId":"0FE767A1-0220-49D4-B6CF-C17E0786F86D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/mmorpgzone-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36483","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53436","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0909-exploits/mmorpgzone-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3506","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) cook_user parameter to index.php and the (2) name parameter to modules.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CMSphp 0.21 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro (1) cook_user para index.php y el (2) parámetro  name para modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jean-michel_wyttenbach:cmsphp:0.21:*:*:*:*:*:*:*","matchCriteriaId":"259A491F-5F57-4E64-A95C-52AEC56451C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/36075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9311","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3507","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en modules.php en CMSphp 0.21 permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro mod_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jean-michel_wyttenbach:cmsphp:0.21:*:*:*:*:*:*:*","matchCriteriaId":"259A491F-5F57-4E64-A95C-52AEC56451C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/36075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9311","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3508","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) _class parameter to admin.php and the (2) url parameter to install/install.php; and allow remote authenticated administrators to read arbitrary files via a .. (dot dot) in the (3) _htmlfile parameter to admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en MUJE CMS v1.0.4.34 permite a atacantes remotos incluir y ejecutar archivos locales de su elección  a través de .. (punto a punto)en el parámetro (1) _class en admin.php y el parámetro (2) url en install/install.php; y permite a administradores autenticarse remotamente para leer archivos de su elección a traves de .. (punto a punto) en el parámetro (3) _htmlfile en admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fcgphilipp:mujecms:1.0.4.34:*:*:*:*:*:*:*","matchCriteriaId":"350FA8BA-F8BD-40E6-9E10-D7436FB1214B"}]}]}],"references":[{"url":"http://secunia.com/advisories/36079","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3509","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin/admin_index.php en CJ Dynamic Poll PRO 2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cj-design:cj_dynamic_poll:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"18C2A57A-64FA-45E9-B533-96C02AAE991A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/cjdynamicpoll-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35799","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56181","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51925","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/cjdynamicpoll-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3510","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewListing.php in linkSpheric 0.74 Beta 6 allows remote attackers to execute arbitrary SQL commands via the listID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en viewListing.php en linkSpheric v0.74 Beta v6 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro listID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dataspheric:linkspheric:0.74:beta6:*:*:*:*:*:*","matchCriteriaId":"C9966582-DAB3-45C9-A8BD-3F4649ECEF1B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9316","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3511","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en justVisual 1.2 permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro fs_jVroot para (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php y (4) system/utilities.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fh54:justvisual:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEC1920B-4B38-43AB-92F5-E5EC99B99064"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9308","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3512","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to user_addfood.php, info parameter to (2) user_forgot_pwd_form.php and (3) user_login.php, and (4) return parameter to user_login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MyWeight 1.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro date para user_addfood.php, el parámetro info para  (2) user_forgot_pwd_form.php y (3) user_login.php y (4) el parámetro return para user_login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplemon:myweight:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4174C5BB-F3A1-42FB-8A6C-6A2928224F0D"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/myweight-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35919","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55997","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55998","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55999","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51861","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/myweight-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3513","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Pilot Group (PG) eTraining permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro  \"cat_id\" para courses_login.php, el parámetro \"id\" para (2) news_read.php o (3) lessons_login.php, o (4) el parámetro cur en una acción start para lessons_login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pilotgroup:pg_etraining:*:*:*:*:*:*:*:*","matchCriteriaId":"E1D9CEE2-A536-4F3F-A8E7-87D285CAE881"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/etraining-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35834","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52072","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/etraining-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3514","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via (1) the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (2) edit_id and (3) _p parameter in a news action to dnet_admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en  d.net CMS, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro (1) \"page\" a index.php; y permite a administradores autenticados remotamente ejecutar comandos SQL de su elección a través de los parámetros  (2) \"edit_id\" y (3) \"_p parameter\" en una acción \"news\" a dnet_admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcin_manek:d.net_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"C709A1EC-DAB8-4224-A574-74FD3E3FE096"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9312","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3515","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T14:30:01.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the type parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en dnet_admin/index.php en d.net CMS, permite a administradores autenticados remotamente añadir y ejecutar archivos locales de su elección a través de..(punto punto) en el parámetro \"type\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcin_manek:d.net_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"C709A1EC-DAB8-4224-A574-74FD3E3FE096"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9312","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3516","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T15:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors."},{"lang":"es","value":"gssd en IBM AIX v5.3.x hasta v5.3.9 y v6.1.0 hasta v6.1.2 no maneja adecuadamente las credenciales de caché NFSv4 Kerberos, lo que permite a atacantes locales eludir las restricciones de acceso para el recurso compartido \"Kerberized NFSv4\" a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DE57C2-E728-4016-9774-28FB4B0509AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"57B11497-5622-4759-906A-A93A3E815584"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1F9CD013-D904-45DF-AD43-493A22D5744B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF417123-CCB6-48AF-A21B-1974173D516B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36545","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2788","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3517","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T15:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors."},{"lang":"es","value":"nfs.ext en IBM AIX v5.3.x hasta v5.3.9 y v6.1.0 hasta v6.1.2 no usa apropiadamente la configuración nfs_portmon, lo que permite a atacantes remotos eludir las restricciones de acceso para NFSv4 compartidos a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DE57C2-E728-4016-9774-28FB4B0509AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"57B11497-5622-4759-906A-A93A3E815584"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1F9CD013-D904-45DF-AD43-493A22D5744B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF417123-CCB6-48AF-A21B-1974173D516B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36544","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2788","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3518","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T15:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en iim: manejador URI en IBMIM.exe en IBM Installation Manager v1.3.2 y anteriores, usado en IBM Rational Robot y Rational Team Concert, permite a atacantes remotos cargar librerías DLL de su elección a través de la opción -vm, como queda demostrado por una referencia a una ruta de fichero compartido UNC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:installation_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"3FECD493-7B46-4F1C-AC12-D779D31402FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:installation_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"632CE789-4E2F-4B37-A771-57572D7FA9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:installation_manager:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"984D6F98-FB9E-4E14-BA1A-5393A382E61C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:installation_manager:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5E47960B-7264-4A44-88D1-F97EE0F43BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:installation_manager:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B5BFEE9-DD95-4860-B8A6-4B6C1EF510EC"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_ibm_uri.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://retrogod.altervista.org/9sg_ibm_uri.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3519","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T15:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages."},{"lang":"es","value":"Múltiples fugas de memoria en el módulo IP en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anterior snv_109, permite a usuarios locales causar una denegación de servicio (consumo de memoria) a través de vectores relacionados con (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, y (4) mensajes M_SIG STREAMS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*","versionEndExcluding":"snv_109","matchCriteriaId":"A8F39E8E-4ADE-48A9-AFB6-67FB99BF2CB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*","matchCriteriaId":"4F864AD7-53A2-4225-870F-062876CE45DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-44-1","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36562","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-44-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3520","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T15:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Your_account module in CMSphp 0.21 allows remote attackers to hijack the authentication of administrators for requests that change an administrator password via the pseudo, pwd, and uid parameters in an admin_info_user_verif action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo Your_account en CMSphp v0.21 permite a atacantes remotos secuestrar la autenticación de administradores para peticiones que cambian el password de administrador a través de los parámetros pseudo, pwd y uid en una acción admin_info_user_verif."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsphp_project:cmsphp:0.21:*:*:*:*:*:*:*","matchCriteriaId":"E180220B-E6A7-4D9A-8B60-62176850E077"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/cmsphp-xsrf.txt","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/36075","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/cmsphp-xsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/36075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3521","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T17:00:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en Visualization Engine (VE) en IBM Tivoli Composite Application Manager para WebSphere (ITCAM) v6.1.0 permite a atacantes remotos inyectar código web o HTML a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_composite_application_manager_for_wesbsphere:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"940A1F93-0561-48FD-AE14-CD099EAC1DC7"}]}]}],"references":[{"url":"http://secunia.com/advisories/36901","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36551","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2797","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3522","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T17:00:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en aswMon2.sys en avast! Home y Professional para Windows v4.8.1351, y probablemente otras versiones anteriores v4.8.1356, permite a usuarios locales causar una denegación de servicios (caída sistema) y probablemente obtener privilegios a través de peticiones IOCTL manipuladas en IOCTL 0xb2c80018."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1351:*:windows:*:*:*:*:*","matchCriteriaId":"BC6D7AC9-3351-4AE7-B2E3-00AD7C7B2E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1351:*:windows:*:*:*:*:*","matchCriteriaId":"F398BFA7-75F1-49C5-A306-820C77EEBAE2"}]}]}],"references":[{"url":"http://osvdb.org/58402","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506681/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36507","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022940","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53456","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6226","source":"cve@mitre.org"},{"url":"https://www.evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/58402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506681/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3523","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T17:00:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625."},{"lang":"es","value":"aavmKer4.sys en avast! Home y Professional para Windows anterior v4.8.1356 no proporciona entradas validad en IOCTLs (1) 0xb2d6000c y (2) 0xb2d60034, que permite a usuarios locales obtener privilegios a través de peticiones IOCTL usando direcciones de kernel manipuladas que lanzan una caída de memoria, una vulnerabilidad diferente que CVE-2008-1625."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:*","versionEndIncluding":"4.8.1351","matchCriteriaId":"C47AF58C-5BC9-40EC-98F6-48E1B645F4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*","matchCriteriaId":"33A71A2C-36AC-4F36-9D94-AA824F4DE14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*","matchCriteriaId":"62618C12-3EAC-4434-B2A8-D83612F1A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*","matchCriteriaId":"B949535B-9771-4AC6-BBDB-8BB3A789A1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*","matchCriteriaId":"DC6DA89A-BF71-4031-9B51-E5941FDE5E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*","matchCriteriaId":"DB201D49-EB74-4A5D-B641-86C4429E3EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:*","matchCriteriaId":"D8C4E148-EAD0-433C-B0C3-3124B0288CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:*","matchCriteriaId":"1867FC4C-01BC-4FA1-B33F-66CE7D4AD9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:*","matchCriteriaId":"79057030-D57C-4DAC-B9F9-FE2CED222481"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:*","matchCriteriaId":"8CE03B00-0277-4738-8DA6-AFD09830B0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1229:*:windows:*:*:*:*:*","matchCriteriaId":"921BC39F-E4EC-4B4C-BC7D-8002B7C3A85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1282:*:windows:*:*:*:*:*","matchCriteriaId":"B03B958E-8FAA-48E4-BD0D-3577B7150284"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1290:*:windows:*:*:*:*:*","matchCriteriaId":"36902F71-4215-40B5-93B5-75A5634D4501"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1296:*:windows:*:*:*:*:*","matchCriteriaId":"0F087F04-EF9C-43F0-95F0-36AD5182F02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1335:*:windows:*:*:*:*:*","matchCriteriaId":"1757311C-A432-4056-A480-12713E4E0024"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:*:*:windows:*:*:*:*:*","versionEndIncluding":"4.8.1351","matchCriteriaId":"2C19547C-2369-4228-80CF-0A07735ED6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*","matchCriteriaId":"DF2D8C10-01E4-43D7-93EE-342BA7E9C489"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*","matchCriteriaId":"AAB7888A-E884-4C73-AF10-698C56E080F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*","matchCriteriaId":"1F7F2957-4422-4891-B573-F68882D7C8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:windows:*:*:*:*:*","matchCriteriaId":"FC6DE028-27FD-40D7-AD12-F3C648B445E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1169:*:windows:*:*:*:*:*","matchCriteriaId":"FC35E740-8BE7-4479-B684-6E304204B358"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1195:*:windows:*:*:*:*:*","matchCriteriaId":"083372F2-D738-4698-97CF-F71748BE4877"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1201:*:windows:*:*:*:*:*","matchCriteriaId":"38BAD92D-F9D8-4295-B9BD-FFB354937ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1227:*:windows:*:*:*:*:*","matchCriteriaId":"0348CFA9-6DC0-4FCE-B6B8-3D0D9086471F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1229:*:windows:*:*:*:*:*","matchCriteriaId":"03B69989-B458-4624-B40F-37A7FCD11BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1282:*:windows:*:*:*:*:*","matchCriteriaId":"FA7CEE2D-C92B-45A9-89F0-42A7DFAA7DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1290:*:windows:*:*:*:*:*","matchCriteriaId":"FDCB885F-8175-41B3-A6A6-1A9A3A239548"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1296:*:windows:*:*:*:*:*","matchCriteriaId":"82039FC7-19D9-471C-A781-87D4CCE807CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1335:*:windows:*:*:*:*:*","matchCriteriaId":"B6D8AF4B-27E2-4A7B-A474-AF453F6A22F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"cve@mitre.org"},{"url":"http://www.ntinternals.org/ntiadv0904/ntiadv0904.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6024","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntinternals.org/ntiadv0904/ntiadv0904.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3524","sourceIdentifier":"cve@mitre.org","published":"2009-10-01T17:00:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors."},{"lang":"es","value":"Vulnerabilidad inesperada en ashWsFtr.dll en avast! Home y Professional para Windows anterior v4.8.1356 tiene un impacto y vectores de ataque no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:*","versionEndIncluding":"4.8.1351","matchCriteriaId":"C47AF58C-5BC9-40EC-98F6-48E1B645F4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:*","matchCriteriaId":"33A71A2C-36AC-4F36-9D94-AA824F4DE14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:*","matchCriteriaId":"62618C12-3EAC-4434-B2A8-D83612F1A05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:*","matchCriteriaId":"B949535B-9771-4AC6-BBDB-8BB3A789A1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:*","matchCriteriaId":"DC6DA89A-BF71-4031-9B51-E5941FDE5E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:*","matchCriteriaId":"DB201D49-EB74-4A5D-B641-86C4429E3EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:*","matchCriteriaId":"D8C4E148-EAD0-433C-B0C3-3124B0288CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:*","matchCriteriaId":"1867FC4C-01BC-4FA1-B33F-66CE7D4AD9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:*","matchCriteriaId":"79057030-D57C-4DAC-B9F9-FE2CED222481"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:*","matchCriteriaId":"8CE03B00-0277-4738-8DA6-AFD09830B0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1229:*:windows:*:*:*:*:*","matchCriteriaId":"921BC39F-E4EC-4B4C-BC7D-8002B7C3A85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1282:*:windows:*:*:*:*:*","matchCriteriaId":"B03B958E-8FAA-48E4-BD0D-3577B7150284"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1290:*:windows:*:*:*:*:*","matchCriteriaId":"36902F71-4215-40B5-93B5-75A5634D4501"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1296:*:windows:*:*:*:*:*","matchCriteriaId":"0F087F04-EF9C-43F0-95F0-36AD5182F02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1335:*:windows:*:*:*:*:*","matchCriteriaId":"1757311C-A432-4056-A480-12713E4E0024"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:*:*:windows:*:*:*:*:*","versionEndIncluding":"4.8.1351","matchCriteriaId":"2C19547C-2369-4228-80CF-0A07735ED6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:windows:*:*:*:*:*","matchCriteriaId":"DF2D8C10-01E4-43D7-93EE-342BA7E9C489"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:windows:*:*:*:*:*","matchCriteriaId":"AAB7888A-E884-4C73-AF10-698C56E080F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:windows:*:*:*:*:*","matchCriteriaId":"1F7F2957-4422-4891-B573-F68882D7C8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.7.1098:*:windows:*:*:*:*:*","matchCriteriaId":"FC6DE028-27FD-40D7-AD12-F3C648B445E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1169:*:windows:*:*:*:*:*","matchCriteriaId":"FC35E740-8BE7-4479-B684-6E304204B358"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1195:*:windows:*:*:*:*:*","matchCriteriaId":"083372F2-D738-4698-97CF-F71748BE4877"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1201:*:windows:*:*:*:*:*","matchCriteriaId":"38BAD92D-F9D8-4295-B9BD-FFB354937ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1227:*:windows:*:*:*:*:*","matchCriteriaId":"0348CFA9-6DC0-4FCE-B6B8-3D0D9086471F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1229:*:windows:*:*:*:*:*","matchCriteriaId":"03B69989-B458-4624-B40F-37A7FCD11BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1282:*:windows:*:*:*:*:*","matchCriteriaId":"FA7CEE2D-C92B-45A9-89F0-42A7DFAA7DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1290:*:windows:*:*:*:*:*","matchCriteriaId":"FDCB885F-8175-41B3-A6A6-1A9A3A239548"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1296:*:windows:*:*:*:*:*","matchCriteriaId":"82039FC7-19D9-471C-A781-87D4CCE807CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1335:*:windows:*:*:*:*:*","matchCriteriaId":"B6D8AF4B-27E2-4A7B-A474-AF453F6A22F3"}]}]}],"references":[{"url":"http://osvdb.org/58403","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6509","source":"cve@mitre.org"},{"url":"http://osvdb.org/58403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.avast.com/eng/avast-4-home_pro-revision-history.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3525","sourceIdentifier":"cve@mitre.org","published":"2009-10-05T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the expected password."},{"lang":"es","value":"El pyGrub en Xen v3.0.3, v3.3.0, y Xen-3.3.1 no soporta la opción password en grub.conf para las invitaciones \"para-virtualized\", lo que permite a atacantes con acceso a la consola invitada para-virtualized iniciar la invitación o modificar los parámetros de arranque del kernel del invitado sin proporcionar el password esperado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2AFDE72E-1997-48BA-A065-E0DD4ABE6E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"92646AED-BF1E-4471-96A0-1926932AF4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xen:xen:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2D5FF923-28A9-406D-B825-8B882408C5E4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/25/1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1472.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36523","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022950","source":"cve@mitre.org"},{"url":"http://xenbits.xensource.com/xen-unstable.hg?rev/8f783adc0ee3","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525740","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525740#c0","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9466","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/25/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1472.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1022950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xensource.com/xen-unstable.hg?rev/8f783adc0ee3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525740#c0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3527","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T22:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption."},{"lang":"es","value":"Condición de carrera en la función Close Pipe (IPC)en FreeBSD v6.3 y v6.4, permite a usuarios locales provocar una denegación de servicio (caída) u obtener  privilegios a través de vectores relacionados con \"kqueues\", lo que provoca una liberación después del uso , aprovechando una deferencia a puntero NULL o una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"}]}]}],"references":[{"url":"http://osvdb.org/58544","source":"cve@mitre.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/506449","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36375","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022982","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/58544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/506449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1022982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3528","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Profile.php en MyMsg v1.0.3 permite a usuarios autenticarse remotamente para ejecutar comandos SQL a su elección a través del parámetro uid en una acción show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:al4us:mymsg:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FE1E3A7B-9FA0-47C3-8AD1-DF661238CB97"}]}]}],"references":[{"url":"http://secunia.com/advisories/35753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9105","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55792","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51635","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3529","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action, a different vector than CVE-2005-1074."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en RadScripts RadBids Gold v4 permite a atacantes remotos ejecutar comandos de su elección a través del parámetro fid en una acción view_forum, un vector diferente a CVE-2005-1074."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radscripts:radbids:4:*:gold:*:*:*:*:*","matchCriteriaId":"5A508205-CF66-4676-9CA7-71DFCB14A108"}]}]}],"references":[{"url":"http://secunia.com/advisories/35827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3530","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML via the mode parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en RadScripts RadBids Gold 4 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radscripts:radbids:4:*:gold:*:*:*:*:*","matchCriteriaId":"5A508205-CF66-4676-9CA7-71DFCB14A108"}]}]}],"references":[{"url":"http://secunia.com/advisories/35827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9194","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51837","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3531","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en vnews.php en Universe CMS permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:universe:universe_cms:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A9DA7F52-260D-4238-92B8-A11BB04DD17B"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/universecms-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9099","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51621","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/universecms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3532","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidad de inyección SQL en login.asp (como login screen) en LogRover v2.3 y v2.3.3 en Windows permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) uname y (2) pword. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logrover:logrover:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F418E0A6-86B0-437D-B791-37D001501126"},{"vulnerable":true,"criteria":"cpe:2.3:a:logrover:logrover:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0062A0DF-24F8-4F5E-898D-DAA0A8D6FF56"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/35821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55825","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504869/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51686","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0907-advisories/DDIVRT-2009-26.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3533","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in report.php in Meeting Room Booking System (MRBS) before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en report.php en Meeting Room Booking System (MRBS) anterior v1.4.2 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro typematch. NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"5DC04A18-963C-43D0-9E21-73FFE4856193"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.1:*:*:*:*:*:*:*","matchCriteriaId":"421AD89F-3ED6-4FFD-9742-FBF0FCAD42DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.2:*:*:*:*:*:*:*","matchCriteriaId":"F980185B-D9DB-4B19-BCDC-9ECC8FA63D86"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.5:*:*:*:*:*:*:*","matchCriteriaId":"0A6D7CF5-DF60-41A6-BE41-B757051FD6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8A3EDDCF-F6CD-41CB-8129-BAF968537D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.7:*:*:*:*:*:*:*","matchCriteriaId":"AFCD0C65-5C18-400C-BF7C-AF3ABE1168CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8:*:*:*:*:*:*:*","matchCriteriaId":"C9986257-5953-4768-803B-8BF70E6E7523"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre1:*:*:*:*:*:*:*","matchCriteriaId":"5020393F-EED7-4DDC-9193-BB68232C8606"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre2:*:*:*:*:*:*:*","matchCriteriaId":"6841D1CE-1BF5-48C0-96DD-83BCB9AFB2FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre3:*:*:*:*:*:*:*","matchCriteriaId":"F04E6381-CEC9-416B-AD08-A9D7B7C62D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre4:*:*:*:*:*:*:*","matchCriteriaId":"6CF34656-302A-49F0-B86E-0D504DA921CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre5:*:*:*:*:*:*:*","matchCriteriaId":"F4C7905A-12A1-4E3F-AEC9-21E993C54D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8-pre6:*:*:*:*:*:*:*","matchCriteriaId":"F238F274-B07F-4F1F-A890-B52CACB78278"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6159F627-20A1-4DFF-AD5C-79436FB20573"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9DFCA2FA-6E92-4FD0-BA51-B77E6DB16557"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9-pre1:*:*:*:*:*:*:*","matchCriteriaId":"4C76758C-E8BD-464F-855D-F2769B67E679"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9-pre2:*:*:*:*:*:*:*","matchCriteriaId":"EE233B81-62D6-4EEF-9FDE-832407138E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7DE4F300-10ED-4201-922E-E568D0159225"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"209C7517-46A1-4EC7-8081-D05CE2A9E756"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"04FDDA28-E37C-4CB0-BE8D-29DD336D7D0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.0-pre1:*:*:*:*:*:*:*","matchCriteriaId":"95C2ACC0-7D3B-4A27-870C-0AEB288C27C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.0-pre2:*:*:*:*:*:*:*","matchCriteriaId":"F580F4F9-E70F-4CDA-92C7-1D9F68CC4165"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27B8F4B5-6D12-43C4-B31C-81F2C59470F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.1-pre1:*:*:*:*:*:*:*","matchCriteriaId":"C0CDDF03-F2BD-4C33-BBFC-4CB10E4FA164"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.1-pre2:*:*:*:*:*:*:*","matchCriteriaId":"30FB9DA5-83FB-489B-AF38-86A12871083F"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ADB34BB1-20AD-49EF-BB47-8C359B157EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2-pre3:*:*:*:*:*:*:*","matchCriteriaId":"BC178F37-45DC-4F4E-9D5B-6E96D2A73A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"73AF4C98-744A-4556-AB2A-BE240765E04C"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.1-pre1:*:*:*:*:*:*:*","matchCriteriaId":"8DA7DBEC-2CFD-410D-8768-D0BA06D845B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.1-pre2:*:*:*:*:*:*:*","matchCriteriaId":"AA799F6C-10BF-43BF-A30B-0817C92F8B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"07387023-C4AE-46B1-A452-B283AE5DF483"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7B42C795-0A62-4FCB-B032-61A30AF5FA78"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B25C8DAD-74AA-49C3-B813-E6A3D38AC69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"29EDE276-EC6D-4B95-8C96-CBC1C86E2E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3A88A9E7-8BF5-4934-A26C-3D2CE5DC6104"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5214C975-36A2-426D-848C-9B9338FC2AFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_beranek:meeting_room_booking_system:1.4:*:*:*:*:*:*:*","matchCriteriaId":"30106CC6-D301-4305-A290-E7E190A3FED7"}]}]}],"references":[{"url":"http://mrbs.sourceforge.net/view_text.php?section=NEWS&file=NEWS","source":"cve@mitre.org"},{"url":"http://osvdb.org/55872","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35469","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51772","source":"cve@mitre.org"},{"url":"http://mrbs.sourceforge.net/view_text.php?section=NEWS&file=NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/55872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3534","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en LionWiki v3.0.3, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos leer archivos de su elección a traves de .. (punto punto) en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lionwiki:lionwiki:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"35FFAEBC-DD40-44BD-B4D6-02BC87CAE9CB"}]}]}],"references":[{"url":"http://secunia.com/advisories/35774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9119","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55801","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51659","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3535","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.  NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en image.php en Clear Content v.1.1 permite a atacantes remotos leer archivos a su elección a través .. (punto punto) en el parámetro url. NOTA: algunos investigadores sugieren una vulnerabilidad de inclusión remoto de archivo PHP, pero esto puede ser incorrecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allisclear:clear_content:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5769D40D-5E0E-4A62-8352-50064811B18E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/clearcontent-rfilfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9089","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55742","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51629","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/clearcontent-rfilfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3536","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in EpicDJSoftware EpicVJ 1.2.8.0 and 1.3.1.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a (1) .m3u or (2) .mpl playlist file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en EpicDJSoftware EpicVJ v1.2.8.0 y v1.3.1.2 permite a atacantes remotos causar una denegación de servicio (caída programa) o probablemente ejecutar código de su elección a través de una cadena larga en (1) archivos de lista .m3u o (2) .mpl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epicdjsoftware:epicvj:1.2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"7F5A47CD-3B49-46FB-9EBD-F3CDFF8C8188"},{"vulnerable":true,"criteria":"cpe:2.3:a:epicdjsoftware:epicvj:1.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"35B88601-3DF0-451E-A6AC-B8BA884649F4"}]}]}],"references":[{"url":"http://secunia.com/advisories/35869","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9200","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1955","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3537","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in EpicDJSoftware EpicDJ 1.3.9.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a (1) .m3u or (2) .mpl playlist file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en EpicDJSoftware EpicDJ v1.3.9.1 permite a atacantes remotos causar una denegación de servicio (caída programa) o probablemente ejecutar código de su elección a través de una cadena larga en un (1) .m3u o (2) archivo lista .mpl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epicdjsoftware:epicdj:1.3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"17DA0F64-9735-4AB1-9DA2-E359E39BE6E8"}]}]}],"references":[{"url":"http://secunia.com/advisories/35878","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9201","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51825","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3538","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en thumb.php en Clear Contet v1.1 permite a atacantes remotos leer archivos de su elección a través de un .. (punto punto) en el parámetro url. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allisclear:clear_content:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5769D40D-5E0E-4A62-8352-50064811B18E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55743","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3539","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and the (2) sn parameter to listads.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en YourFreeWorld Ultra Classifieds Pro permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro (1) cname en subclass.php y el parámetro (2) sn en listads.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:ultra_classifieds_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"99900BD2-E0CA-45B8-B7F4-090EB816695B"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35857","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1965","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0907-exploits/ultraclassifieds-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3540","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en listads.php en YourFreeWorld Ultra Classifieds Pro permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro cn. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yourfreeworld:ultra_classifieds_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"99900BD2-E0CA-45B8-B7F4-090EB816695B"}]}]}],"references":[{"url":"http://secunia.com/advisories/35857","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1965","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3541","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the DataDirectory parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remoto de archivo PHP en PHPGenealogy v2.0 permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro DataDirectory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgenealogy:phpgenealogy:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6600D972-00F6-46F5-B125-2A5E78BE279F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9155","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51728","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3542","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en ls.php en LittleSite (como LS o LittleSite.php) v0.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través .. (punto punto) en el parámetro file en index.php. NOTA: en algunas situaciones, esto puede ser ayudado mediante la inclusión remota de fichero mediante el uso del nombre de fichero UNC compartido o un FTP, FTPS, o ssh2.sftp URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kneuro:littlesite.php:0.1:*:*:*:*:*:*:*","matchCriteriaId":"AE7162F5-BFBD-4711-92C0-4A9F76C97E61"}]}]}],"references":[{"url":"http://osvdb.org/55969","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/ls-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51819","source":"cve@mitre.org"},{"url":"http://osvdb.org/55969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/ls-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3543","sourceIdentifier":"cve@mitre.org","published":"2009-10-02T19:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name)."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en _phenotype/admin/login.php en Phenotype CMS anterior v2.9 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user (como el nombre login)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"CBF0838A-2FC3-4407-BBFC-1C6D4632B0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A12B07C8-92E1-45A6-97C8-ED81A50B7A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D584096C-20F6-48E2-AFED-43C35E0D102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9D3DDB99-189F-4239-998E-FB03304F67B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E80761B-1C6C-4E1F-98BD-B4D65BA8ED10"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.3:*:*:*:*:*:*:*","matchCriteriaId":"29E323CC-81A8-4997-A89D-7951C51FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.4:*:*:*:*:*:*:*","matchCriteriaId":"CDFD819F-5AC0-47F3-A9F7-5E4D02058958"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.5:*:*:*:*:*:*:*","matchCriteriaId":"50DE5FF2-DD49-4B5C-B7AF-75824C8AAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"19F09617-AFBD-4FC7-820B-5A43F2AA9668"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.6:*:*:*:*:*:*:*","matchCriteriaId":"13EB4778-9EAB-4E5D-BAE8-75D58A4ECF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:phenotype-cms:phenotype_cms:2.7:*:*:*:*:*:*:*","matchCriteriaId":"C714422D-4A39-4ED7-B244-05F56CEDF7E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/35792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9107","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.phenotype-cms.com/wiki/development-changelog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51634","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.phenotype-cms.com/wiki/development-changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3544","sourceIdentifier":"cve@mitre.org","published":"2009-10-05T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name."},{"lang":"es","value":"Xerver HTTP Server v4.32 permite a atacantes remotos obtener el código fuente de una página web a través de una petición HTTP con un ::$DATA adicional después del nombre del archivo HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerver:xerver:4.32:*:*:*:*:*:*:*","matchCriteriaId":"F63E4FD4-425F-4756-89E7-3439ED68B7AA"}]}]}],"references":[{"url":"http://osvdb.org/58104","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9649","source":"cve@mitre.org"},{"url":"http://osvdb.org/58104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3545","sourceIdentifier":"cve@mitre.org","published":"2009-10-05T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via a long ABOR command."},{"lang":"es","value":"DataWizard Technologies FtpXQ FTP Server v3.0 permite a usuarios autentificados remotamente cuasar una denegación de servicio (caída) a través del comando largo ABOR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datawizard:ftpxq_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6E458AB1-C815-424B-8FA7-8A45373A4655"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36391","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2655","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3546","sourceIdentifier":"secalert@redhat.com","published":"2009-10-19T20:00:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"La función _gdGetColors en el archivo gd_gd.c en PHP versión 5.2.11 y versiones 5.3.x anteriores a 5.3.1, y GD Graphics Library versiones 2.x, no comprueba apropiadamente un determinado miembro de la estructura colorTotal, lo que podría permitir a los atacantes remotos conducir ataques de desbordamiento de búfer o de lectura excesiva de búfer por medio de un archivo GD especialmente diseñado, una vulnerabilidad diferente de CVE-2009-3293. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.33:*:*:*:*:*:*:*","matchCriteriaId":"83DED10C-5B2F-41A8-887F-E53C9498D620"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"B236A476-9FB9-46A0-859A-86B6B37F6960"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.34:rc1:*:*:*:*:*:*","matchCriteriaId":"B5C6F71F-A65F-4AEF-B846-BDBF8C1965A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.34:rc2:*:*:*:*:*:*","matchCriteriaId":"FB25E18F-7078-458C-B517-D7DCC942BF80"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"7D7EEB86-6942-4A27-9C6A-9CEA73192E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc1:*:*:*:*:*:*","matchCriteriaId":"B928D03E-BABF-4FFB-B068-63A763301D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc2:*:*:*:*:*:*","matchCriteriaId":"345F2194-D009-45A8-8606-F2DAEC328A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc3:*:*:*:*:*:*","matchCriteriaId":"FFB324F6-6271-412C-90D3-B91489200C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc4:*:*:*:*:*:*","matchCriteriaId":"0AC18015-92F0-458A-B27D-BA96645A0FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc5:*:*:*:*:*:*","matchCriteriaId":"EBE1488F-E22A-460E-B7AF-F9EBB56B188D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libgd:gd_graphics_library:2.0.36:rc1:*:*:*:*:*:*","matchCriteriaId":"84E950C3-0FA9-4AA2-9FC2-81F30398073A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"2CDFB7E9-8510-430F-BFBC-FD811D60DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125562113503923&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37069","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37080","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38055","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://svn.php.net/viewvc?view=revision&revision=289557","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0003.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36712","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2929","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2930","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125562113503923&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.php.net/viewvc?view=revision&revision=289557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3547","sourceIdentifier":"secalert@redhat.com","published":"2009-11-04T15:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname."},{"lang":"es","value":"Múltiples condiciones de carrera en fs/pipe.c en el kernel de Linux anteriores a  v2.6.32-rc6 permite a usuarios locales producir una denegación de servicio )desreferencia a puntero NULL y caída del sistema) o conseguir privilegios mediante la apertura de un canal anónimo en la ruta /proc/*/fd/."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"},{"lang":"en","value":"CWE-476"},{"lang":"en","value":"CWE-672"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.14","matchCriteriaId":"BEC4349F-7F67-435F-8909-94648A0E8F90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*","matchCriteriaId":"37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc2:*:*:*:*:*:*","matchCriteriaId":"1C8471AA-44D7-4D19-82B6-C4B999C65F97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:linux_desktop:9:*:*:*:*:*:*:*","matchCriteriaId":"5595E484-647C-4F85-94AB-5A4D55CD766B"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:mrg_realtime:1.0:*:*:*:*:*:*:*","matchCriteriaId":"04A20072-7DB7-4079-9456-E2CE98F888E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*","matchCriteriaId":"7F2976D5-83A5-4A52-A1E6-D0E17F23FD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5B5DCF29-6830-45FF-BC88-17E2249C653D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/14/184","source":"secalert@redhat.com","tags":["Exploit","Mailing List"]},{"url":"http://lkml.org/lkml/2009/10/21/42","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125724568017045&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1672.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36901","source":"secalert@redhat.com","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530490","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1541.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/14/184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://lkml.org/lkml/2009/10/21/42","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125724568017045&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1672.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/512019/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1541.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1550.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-3548","sourceIdentifier":"secalert@redhat.com","published":"2009-11-12T23:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges."},{"lang":"es","value":"El instalador de Windows para Apache Tomcat 6.0.0 a 6.0.20, 5.5.0 a 5.5.28, y posiblemente versiones anteriores, usa una contraseña en blanco por defecto para el usuario administrador, lo que permite a atacantes remotos obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BAFF8D91-80A2-454A-8B44-A5A889002692"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC42876-65AD-476A-8B62-25D4E15D1BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"724A8FF9-8089-4302-8200-08987A712988"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F97DDB7-E32B-422F-8AEA-07C75DEAD36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7079F63C-7CA8-4909-A9C8-45C4C1C1C186"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2C13A162-9F3A-41EB-BF4A-A54AD26F7F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"4BE08AEE-4801-4FAF-97AD-BBD5C5849E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EC829C8E-1061-4F62-BA4B-FE5C7F11F209"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"143BA75E-A186-47EF-A18C-B1A1A1F61C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C0CDF9E1-9412-450E-B1D4-438F128FFF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"32561F50-6385-4D71-AFAC-3D2F8DB55A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3.1a:*:*:*:*:*:*:*","matchCriteriaId":"D51D88E7-6F5C-42B0-BAD6-7DCD9A357B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C091BCC4-4B19-4304-A807-FE3BB3BCC8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"914E1404-01A2-4F94-AA40-D5EA20F55AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"401A213A-FED3-49C0-B823-2E02EA528905"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7641278D-3B8B-4CD2-B284-2047B65514A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BB7B9911-E836-4A96-A0E8-D13C957EC0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D2341C51-A239-4A4A-B0DC-30F18175442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"02860646-1D72-4D9A-AE2A-5868C8EDB3AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BE4B9B5-9C2E-47E1-9483-88A17264594F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE92A9B-4B8C-468E-9162-A56ED5313E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"AE21D455-5B38-4B07-8E25-4EE782501EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B9AE125C-EB8E-4D33-BB64-1E2AEE18BF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"47588ABB-FCE6-478D-BEAD-FC9A0C7D66DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"084B3227-FE22-43E3-AE06-7BB257018690"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2BFF1D5-2E34-4A01-83A7-6AA3A112A1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.14:*:*:*:*:*:*:*","matchCriteriaId":"6D536FF4-7582-4351-ABE3-876E20F8E7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.15:*:*:*:*:*:*:*","matchCriteriaId":"1C03E4C9-34E3-42F7-8B73-D3C595FD7EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.16:*:*:*:*:*:*:*","matchCriteriaId":"FB43F47F-5BF9-43A0-BF0E-451B4A8F7137"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.17:*:*:*:*:*:*:*","matchCriteriaId":"DFFFE700-AAFE-4F5B-B0E2-C3DA76DE492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.18:*:*:*:*:*:*:*","matchCriteriaId":"11DDD82E-5D83-4581-B2F3-F12655BBF817"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8A0F0C91-171E-421D-BE86-11567DEFC7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.20:*:*:*:*:*:*:*","matchCriteriaId":"F22D2621-D305-43CE-B00D-9A7563B061F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9A5D55E8-D3A3-4784-8AC6-CCB07E470AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.22:*:*:*:*:*:*:*","matchCriteriaId":"7F4245BA-B05C-49DE-B2E0-1E588209ED3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.23:*:*:*:*:*:*:*","matchCriteriaId":"8633532B-9785-4259-8840-B08529E20DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.24:*:*:*:*:*:*:*","matchCriteriaId":"B1D9BD7E-FCC2-404B-A057-1A10997DAFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.25:*:*:*:*:*:*:*","matchCriteriaId":"F935ED72-58F4-49C1-BD9F-5473E0B9D8CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.26:*:*:*:*:*:*:*","matchCriteriaId":"FADB75DC-8713-4F0C-9F06-30DA6F6EF6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.27:*:*:*:*:*:*:*","matchCriteriaId":"2EA52901-2D16-4F7E-BF5E-780B42A55D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.28:*:*:*:*:*:*:*","matchCriteriaId":"6A79DA2C-35F3-47DE-909B-8D8D1AE111C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.29:*:*:*:*:*:*:*","matchCriteriaId":"8BF6952D-6308-4029-8B63-0BD9C648C60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.30:*:*:*:*:*:*:*","matchCriteriaId":"94941F86-0BBF-4F30-8F13-FB895A11ED69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.31:*:*:*:*:*:*:*","matchCriteriaId":"17522878-4266-432A-859D-C02096C8AC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.32:*:*:*:*:*:*:*","matchCriteriaId":"951FFCD7-EAC2-41E6-A53B-F90C540327E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.33:*:*:*:*:*:*:*","matchCriteriaId":"BF1F2738-C7D6-4206-9227-43F464887FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.34:*:*:*:*:*:*:*","matchCriteriaId":"98EEB6F2-A721-45CF-A856-0E01B043C317"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.35:*:*:*:*:*:*:*","matchCriteriaId":"02FDE602-A56A-477E-B704-41AF92EEBB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.36:*:*:*:*:*:*:*","matchCriteriaId":"5A28B11A-3BC7-41BC-8970-EE075B029F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.37:*:*:*:*:*:*:*","matchCriteriaId":"4AD3E84C-9A2E-4586-A09E-CBDEB1E7F695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.38:*:*:*:*:*:*:*","matchCriteriaId":"6EF54C08-5FF1-4D02-AA16-B13096BD566C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.39:*:*:*:*:*:*:*","matchCriteriaId":"D8F3B31D-8974-4016-ACAF-E7A917C99F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"13D9B12F-F36A-424E-99BB-E00EF0FCA277"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A8FEEF0-8E57-43B1-8316-228B76E458D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D82F3FAE-91AD-4F0B-A1F7-11C1A97C5ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A3B2802B-E56C-462A-9601-361A9166B5F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"190FB4FD-22A5-4771-8F99-1E260A36A474"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4BD3785E-3A09-4BE4-96C7-619B8A7D5062"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"285F7969-09F6-48CC-89CE-928225A53CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3B9EDACC-0300-4DA7-B1CD-5F7A6029AF38"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6B387EF0-94AD-4C8E-8CD4-4F5F706481BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DA486065-18D5-4425-ADA5-284101919564"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A0141E20-2E3D-4CD0-A757-D7CA98499CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"9E62493D-FEAE-49E8-A293-CE18451D0264"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"FA01AB58-CAB2-420A-9899-EAB153DD898A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D731AFDD-9C33-4DC8-9BC6-06BB51048752"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"01706205-1369-4E5D-8936-723DA980CA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0DC4A52C-6FBC-420A-885A-F72BC1DBAEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A1C882D-949B-40B9-BC9F-E7FCE4FE7C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"9A1451D2-B905-4AD7-9BD7-10CF2A12BA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C505696B-10E4-4B99-A598-40FA0DA39F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"9EB2F3D8-25A1-408E-80D0-59D52A901284"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C3904E9A-585A-4005-B2E9-13538535383D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"AA1934BF-83E3-4B0B-A1DF-391A5332CE39"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F06B9809-5BFA-4DB9-8753-1D8319713879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"DF6631B0-9F2E-4C5F-AB21-F085A8C1559B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"15625451-E56D-405F-BE9B-B3CB1A35E929"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"97ADBDC4-B669-467D-9A07-9A2DD8B68374"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"8DA876C8-4417-4C35-9FEC-278D45CE6E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"03C08A88-9377-4B32-8173-EE2D121B06D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"F7225A43-8EAE-4DA6-BBDC-4418D5444767"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"A46C0933-3B19-40EA-8DED-2BF25AB85C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EB203AEC-2A94-48CA-A0E0-B5A8EBF028B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6E98B82A-22E5-4E6C-90AE-56F5780EA147"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"34672E90-C220-436B-9143-480941227933"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"92883AFA-A02F-41A5-9977-ABEAC8AD2970"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"989A78F8-EE92-465F-8A8D-ECF0B58AFE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1F5B6627-B4A4-4E2D-B96C-CA37CCC8C804"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"ACFB09F3-32D1-479C-8C39-D7329D9A6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D56581E2-9ECD-426A-96D8-A9D958900AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*","matchCriteriaId":"717F6995-5AF0-484C-90C0-A82F25FD2E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*","matchCriteriaId":"5B0C01D5-773F-469C-9E69-170C2844AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*","matchCriteriaId":"EB03FDFB-4DBF-4B70-BFA3-570D1DE67695"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"9F5CF79C-759B-4FF9-90EE-847264059E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*","matchCriteriaId":"357651FD-392E-4775-BF20-37A23B3ABAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*","matchCriteriaId":"585B9476-6B86-4809-9B9E-26112114CB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*","matchCriteriaId":"6145036D-4FCE-4EBE-A137-BDFA69BA54F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*","matchCriteriaId":"E437055A-0A81-413F-AB08-0E9D0DC9EA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*","matchCriteriaId":"9276A093-9C98-4617-9941-2276995F5848"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*","matchCriteriaId":"97C9C36C-EF7E-4D42-9749-E2FF6CE35A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*","matchCriteriaId":"C98575E2-E39A-4A8F-B5B5-BD280B8367BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*","matchCriteriaId":"5BDA08E7-A417-44E8-9C89-EB22BEEC3B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*","matchCriteriaId":"DCD1B6BE-CF07-4DA8-A703-4A48506C8AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*","matchCriteriaId":"5878E08E-2741-4798-94E9-BA8E07386B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*","matchCriteriaId":"69F6BAB7-C099-4345-A632-7287AEA555B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*","matchCriteriaId":"F3AAF031-D16B-4D51-9581-2D1376A5157B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*","matchCriteriaId":"51120689-F5C0-4DF1-91AA-314C40A46C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*","matchCriteriaId":"F67477AB-85F6-421C-9C0B-C8EFB1B200CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*","matchCriteriaId":"16D0C265-2ED9-42CF-A7D6-C7FAE4246A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*","matchCriteriaId":"5D70CFD9-B55D-4A29-B94C-D33F3E881A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:5.5.28:*:*:*:*:*:*:*","matchCriteriaId":"C1195878-CCC9-49BC-9AC7-1F88F0DFAB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D11D6FB7-CBDB-48C1-98CB-1B3CAA36C5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49E3C039-A949-4F1B-892A-57147EECB249"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F28C7801-41B9-4552-BA1E-577967BCBBEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25B21085-7259-4685-9D1F-FF98E6489E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"635EE321-2A1F-4FF8-95BE-0C26591969D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9A81B035-8598-4D2C-B45F-C6C9D4B10C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1096947-82A6-4EA8-A4F2-00D91E3F7DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0EBFA1D3-16A6-4041-BB30-51D2EE0F2AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B70B372F-EFFD-4AF7-99B5-7D1B23A0C54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9C95ADA4-66F5-45C4-A677-ACE22367A75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"11951A10-39A2-4FF5-8C43-DF94730FB794"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"351E5BCF-A56B-4D91-BA3C-21A4B77D529A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"2DC2BBB4-171E-4EFF-A575-A5B7FF031755"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6B0504-27C1-4824-A928-A878CBBAB32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"CE81AD36-ACD1-4C6C-8E7C-5326D1DA3045"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D903956B-14F5-4177-AF12-0A5F1846D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"81F847DC-A2F5-456C-9038-16A0E85F4C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"AF3EBD00-1E1E-452D-AFFB-08A6BD111DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*","matchCriteriaId":"C6B93A3A-D487-4CA1-8257-26F8FE287B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*","matchCriteriaId":"BD8802B2-57E0-4AA6-BC8E-00DE60468569"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*","matchCriteriaId":"1F4C9BCF-9C73-4991-B02F-E08C5DA06EBA"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"secalert@redhat.com"},{"url":"http://markmail.org/thread/wfu4nff5chvkb6xp","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40330","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57126","source":"secalert@redhat.com"},{"url":"http://tomcat.apache.org/security-5.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507720/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36954","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1023146","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3185","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1559","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54182","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/df497a37fbf98e38d4c83e44829745fe9851b5fde928409c950f80e6%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19414","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7033","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://markmail.org/thread/wfu4nff5chvkb6xp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507720/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/df497a37fbf98e38d4c83e44829745fe9851b5fde928409c950f80e6%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3549","sourceIdentifier":"secalert@redhat.com","published":"2009-10-30T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain other platforms, allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace."},{"lang":"es","value":"packet-paltalk.c en el analizador Paltalk en Wireshark desde v1.2.0 hasta v1.2.2, en SPARC y algunas otras plataformas, permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero que almacena la ruta de un paquete manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n","lastModified":"2009-11-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26CB9265-B7A4-4EB4-9C20-F747F3786C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sparc:*:*:*:*:*:*:*:*","matchCriteriaId":"727D196F-786C-4C50-BF72-BE9E14A243EA"}]}]}],"references":[{"url":"http://secunia.com/advisories/37175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36846","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-07.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54016","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3550","sourceIdentifier":"secalert@redhat.com","published":"2009-10-30T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"El analizador DCERPC/NT en Wireshark desde v0.10.10 hasta v1.0.9 y desde v1.2.0 hasta  v1.2.2 permite a atacantes remotos producir una denegación de servicio (desreferencia a puntero NULL y caída de aplicación) a través de un fichero que almacena la ruta de un paquete manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html","lastModified":"2010-04-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"090B987C-9880-4221-BC4C-8D53A8801649"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"06828062-5F31-4532-9E24-34F29CE30218"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"5738F4F0-41C6-48CF-8233-C94D79DCA807"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26CB9265-B7A4-4EB4-9C20-F747F3786C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1C13C7D5-D344-45D2-9FF0-2C3388C94584"}]}]}],"references":[{"url":"http://secunia.com/advisories/37175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37477","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36846","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-07.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-08.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54017","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3551","sourceIdentifier":"secalert@redhat.com","published":"2009-10-30T20:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in Wireshark 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en la función dissect_negprot_response en packet-smb.c en \"SMB dissector\" en Wireshark desde v1.2.0 hasta v1.2.2 permite a atacantes remotos producir una denegación de servicio (caída de aplicación) a través de un fichero que archiva la traza de un paquete manipulado. NOTA: Algunos de los detalles se obtuvieron de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-11-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26CB9265-B7A4-4EB4-9C20-F747F3786C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36846","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-07.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54018","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6049","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3553","sourceIdentifier":"secalert@redhat.com","published":"2009-11-20T02:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de uso anterior a la liberación en el descriptor de fichero abstracto de cuelgue de interface en la función cupsdDoSelect en scheduler/select.c en el scheduler en cupsd en CUPS v1.3.7 y v1.3.10 permite a los atacantes remoto causar una denegación de servicio (caída o cuelque del demonio) a través de una desconexión de cliente durante el listado de una elevado número de trabajos de impresión, en relación al mantenimiento inapropiado de un contador de referencia. NOTA: algunos de estos detalles han sido obtenidos de información de terceros."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"69BD64BB-BDA7-4F82-8324-B7C7C941133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"D8814509-8B08-46C6-AE50-19B7D30DCF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.8","matchCriteriaId":"80C038E4-C24D-45E9-8287-C205C0C07809"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.2","matchCriteriaId":"B30A1267-231F-44CA-9484-8849C1808DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.5.8","matchCriteriaId":"7F89C200-D340-4BB4-BC82-C26629184C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.2","matchCriteriaId":"4F769B77-FF42-442C-8D1A-4E2AE1F5DF39"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/37360","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37364","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38241","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43521","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201207-10.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4004","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs","source":"secalert@redhat.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs","source":"secalert@redhat.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs","source":"secalert@redhat.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.cups.org/str.php?L3200","source":"secalert@redhat.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2176","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1595.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37048","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-906-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0535","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530111","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/37360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201207-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.cups.org/str.php?L3200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1595.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-906-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-3554","sourceIdentifier":"secalert@redhat.com","published":"2009-12-15T18:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file."},{"lang":"es","value":"Twiddle en Red Hat en la plataforma de aplicaciones JBoss Enterprise (tambien conocido como JBoss EAP or JBEAP) v4.2 anteriores a v4.2.0.CP08 y v4.3 anteriores a v4.3.0.CP07 escribe la contraseña JMX, y otros argumentos de linea de comandos, al fichero twiddle.log, lo que permite a usuarios locales conseguir información sensible leyendo este fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E9830D64-C46F-4423-BE0B-0B1FDB765D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp01:*:*:*:*:*:*","matchCriteriaId":"E715EAF0-DAE9-4FD5-996E-18E61C9CC703"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2:cp02:*:*:*:*:*:*","matchCriteriaId":"4E6C7D0B-DBC0-4414-9C40-713E01146FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp01:*:*:*:*:*:*","matchCriteriaId":"599FBAC3-2E83-443B-AACB-99BBA896CB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp02:*:*:*:*:*:*","matchCriteriaId":"43590B58-A1C7-4105-A00F-6C4F46A6CC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp03:*:*:*:*:*:*","matchCriteriaId":"A44F907E-AE57-4213-B001-A23319B72CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp04:*:*:*:*:*:*","matchCriteriaId":"243ED156-851C-4897-AF59-86FCA5C9C66F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp05:*:*:*:*:*:*","matchCriteriaId":"125BF8B0-AF1B-4FB1-9D41-D9FB30AE23FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp06:*:*:*:*:*:*","matchCriteriaId":"A3E7C299-8A2D-4733-98AC-F6FA37CC1C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:cp07:*:*:*:*:*:*","matchCriteriaId":"7398F80B-8318-40E7-A0EE-6CCF7E066C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.2:ga:*:*:*:*:*:*","matchCriteriaId":"A04F68DF-F024-4349-B504-1D0588A20B20"}]}]}],"references":[{"url":"http://secunia.com/advisories/37671","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023316","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37276","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532111","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=539495","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54702","source":"secalert@redhat.com"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-2872","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=539495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-2872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1636.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1637.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3555","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue."},{"lang":"es","value":"El protocolo TLS y el protocolo SSL v3.0 y posiblemente versiones anteriores, tal y como se usa en Microsoft Internet Information Services (IIS) v7.0, mod_ssl en el servidor HTTP Apache v2.2.14 y anteriores, OpenSSL antes de v0.9.8l, GnuTLS v2.8.5 y anteriores, Mozilla Network Security Services (NSS) v3.12.4 y anteriores, y otros productos, no asocia apropiadamente la renegociación del Handshake SSL en una conexión existente, lo que permite ataques man-in-the-middle en los que el atacante inserta datos en sesiones HTTPS, y posiblemente otro tipo de sesiones protegidas por SSL o TLS, enviando una petición de autenticación que es procesada retroactivamente por un servidor en un contexto post-renegociación. Se trata de un ataque de \"inyección de texto plano\", también conocido como el problema del \"Proyecto Mogul\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3555\n\nAdditional information can be found in the Red Hat Knowledgebase article:\nhttp://kbase.redhat.com/faq/docs/DOC-20491","lastModified":"2009-11-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.14","matchCriteriaId":"F1BD8600-0EF7-4612-B5C4-E327C0828479"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.5","matchCriteriaId":"38090AC3-C511-4C40-91A5-084CBEC11F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12.4","matchCriteriaId":"285433B6-03F9-495E-BACA-AA47A014411C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8k","matchCriteriaId":"EB35F63F-7856-42EE-87A6-7EC7F10C2032"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0:*:openvms:*:*:*:*:*","matchCriteriaId":"718F8E8D-0940-4055-A948-96D25C79323B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*","matchCriteriaId":"A2D59BD0-43DE-4E58-A057-640AB98359A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*","matchCriteriaId":"BDE52846-24EC-4068-B788-EC7F915FFF11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.1.0","versionEndIncluding":"0.8.22","matchCriteriaId":"06B2E3E1-C2E0-4A4E-A84D-93C456E868E7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blogs.iss.net/archive/sslmitmiscsrf.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://clicky.me/tlsvuln","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://extendedsubset.com/?p=8","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://extendedsubset.com/Renegotiating_TLS.pdf","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-20491","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126150535619567&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126150535619567&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127419602507642&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127419602507642&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=cryptography&m=125752275331877&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata45.html#010_openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata46.html#004_openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/60521","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/60972","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/62210","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/65202","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/139","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37291","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37292","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37320","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37383","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37399","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37453","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37504","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37604","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37640","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37656","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37675","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37859","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38003","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38020","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38056","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38241","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38484","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38687","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38781","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39127","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39136","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39242","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39243","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39278","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39292","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39317","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39461","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39628","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39632","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39819","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40545","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40747","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40866","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41480","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41490","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41818","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41967","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41972","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42377","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42379","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42808","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42811","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43308","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44183","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44954","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48577","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023148","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4004","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4170","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4171","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100070150","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100081611","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114315","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114327","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX123359","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sysoev.ru/nginx/patch.cve-2009-3555.txt","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-923-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21432298","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24006386","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24025312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-020810.txt","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.betanews.com/article/1257452450","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03928.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03948.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ingate.com/Relnote.php?ver=481","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/120541","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.links.org/?p=780","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=786","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=789","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:089","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-22.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-3555.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20091111.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/06/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/07/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1060/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/support/search/view/944/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0130.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0155.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0165.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0167.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0337.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0338.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0339.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0768.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0770.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0786.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0807.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0865.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0986.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0987.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0880.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507952/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508130/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36935","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023163","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023204","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023205","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023206","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023207","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023208","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023209","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023210","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023211","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023212","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023213","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023214","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023215","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023216","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023217","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023218","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023219","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023224","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023243","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023270","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023271","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023272","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023273","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023274","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023275","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023411","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023426","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023427","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023428","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024789","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.tombom.co.uk/blog/?p=85","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1010-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-4","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-5","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-222A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-287A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3164","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3165","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3220","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3310","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3313","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3353","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3354","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3484","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3521","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3587","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0748","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0848","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0994","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1054","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1191","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1350","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2745","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3069","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0033","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=526689","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=545755","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533125","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54158","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blogs.iss.net/archive/sslmitmiscsrf.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://clicky.me/tlsvuln","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://extendedsubset.com/?p=8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://extendedsubset.com/Renegotiating_TLS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-20491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126150535619567&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126150535619567&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127419602507642&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127419602507642&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=cryptography&m=125752275331877&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata45.html#010_openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata46.html#004_openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/60521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/60972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/62210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/65202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100070150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100081611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX123359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sysoev.ru/nginx/patch.cve-2009-3555.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-923-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21432298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24006386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24025312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-020810.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.betanews.com/article/1257452450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03928.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ingate.com/Relnote.php?ver=481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/120541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.links.org/?p=780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-3555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20091111.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/06/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/07/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1060/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/support/search/view/944/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0167.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0337.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0768.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0786.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0807.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0986.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0987.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0880.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507952/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508130/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.tombom.co.uk/blog/?p=85","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1010-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-222A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-287A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=526689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=545755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3557","sourceIdentifier":"secalert@redhat.com","published":"2009-11-23T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safe_mode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments."},{"lang":"es","value":"La función tempnam de ext/standard/file.c de PHP v5.2.11 y anteriores, y v5.3.x anteriores a v5.3.1, permite a usuarios dependiendo del contexto evitar las restricciones safe_mode, y crear ficheros en directorios con permisos de sistema operativo de escritura para su grupo o para cualquier usuario, a través de los argumentos dir y prefix."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider safe_mode / open_basedir restriction bypass issues being security sensitive. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php","lastModified":"2009-11-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.11","matchCriteriaId":"DD613CC3-281B-43D1-A352-53D339B040FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E1F32DDF-17A3-45B5-9227-833EBEBD3923"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://news.php.net/php.announce/79","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37412","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37821","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40262","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/6601","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/standard/file.c?view=log","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/file.c?view=log","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc?view=revision&revision=288945","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_12.php","source":"secalert@redhat.com"},{"url":"http://www.php.net/releases/5_3_1.php","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7396","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.php.net/php.announce/79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/6601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/standard/file.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/file.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc?view=revision&revision=288945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_12.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_3_1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3558","sourceIdentifier":"secalert@redhat.com","published":"2009-11-23T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Access Complexity selected medium according to the information from X-force link regarding enabling \"open_basedir\" option.\r\n\r\nhttp://xforce.iss.net/xforce/xfdb/53568\r\n\r\n\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file."},{"lang":"es","value":"La función posix_mkfifo de ext/posix/posix.c de PHP v5.2.11 y anteriores, y v5.3.x anteriores a la v5.3.1, permite a atacantes dependiendo del contexto evitar las restricciones open_basedir, y crear ficheros FIFO, a través de los argumentos \"pathname\" y \"mode\", como se ha demostrado creando un fichero .htaccess."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider safe_mode / open_basedir restriction bypass issues being security sensitive. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php","lastModified":"2009-11-24T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"AFD586D6-585F-4259-B845-24D7057678F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":false,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://news.php.net/php.announce/79","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37412","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37821","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/6600","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/posix/posix.c?view=log","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/posix/posix.c?view=log","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc?view=revision&revision=288943","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.php.net/releases/5_2_12.php","source":"secalert@redhat.com"},{"url":"http://www.php.net/releases/5_3_1.php","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.php.net/php.announce/79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/6600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/posix/posix.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/posix/posix.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc?view=revision&revision=288943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_2_12.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_3_1.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3559","sourceIdentifier":"secalert@redhat.com","published":"2009-11-23T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"secalert@redhat.com","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy."},{"lang":"es","value":"** EN DISPUTA ** main / streams / plain_wrapper.c en PHP 5.3.x anterior a 5.3.1 no reconoce la directiva safe_mode_include_dir, que permite que los atacantes dependientes del contexto tengan un impacto desconocido al desencadenar la falla de los scripts PHP que incluyen incluir o requiere operaciones, como lo demuestra un script que intenta realizar un require_once en un archivo en un directorio de biblioteca estándar. NOTA: un tercero confiable informa que esto no es una vulnerabilidad, ya que resulta en una política de seguridad más restrictiva."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=50063","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://news.php.net/php.announce/79","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_3_1.php","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://bugs.php.net/bug.php?id=50063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.php.net/php.announce/79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_3_1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3560","sourceIdentifier":"secalert@redhat.com","published":"2009-12-04T21:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720."},{"lang":"es","value":"La función big2_toUt8 en lib/xmltok.c en libexpat de Expat v2.0.1, como el usado en el módulo XML-Twig para Perl, permite a los atacantes dependientes del contexto provocar una denegación de servicio (caída de aplicación) mediante un documento XML con secuencias UTF-8 malformadas que disparan un desbordamiento de lectura de búfer, relacionado con la función doProlog en lib/xmlparse.c, siendo una vulnerabilidad diferente a CVE-2009-2625 y CVE-2009-3720."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libexpat_project:libexpat:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D7036CC4-4CF6-4D3F-B5B4-09D879A55F8E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xmltwig:xml-twig_for_perl:*:*:*:*:*:*:*:*","matchCriteriaId":"0AA9A0F6-206B-4441-AFBC-1E6F00F40B9B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.64","matchCriteriaId":"838655CB-43E7-4BDA-A80C-2314C9870717"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.17","matchCriteriaId":"91F58140-8FBA-4733-9E2B-493BC9E5B284"}]}]}],"references":[{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.165","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?view=log#rev1.165","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://mail.python.org/pipermail/expat-bugs/2009-November/002846.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=130168502603566&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37537","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38231","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38832","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39478","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41701","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43300","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1953","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37203","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023278","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-1","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-6","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0896","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0359","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533174","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10613","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12942","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6883","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00394.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?view=log#rev1.165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://mail.python.org/pipermail/expat-bugs/2009-November/002846.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=130168502603566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00394.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3561","sourceIdentifier":"cve@mitre.org","published":"2009-10-05T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Xerver HTTP Server v4.32 permite a atacantes remotos leer archivos a su elección a través de un nombre de fichero completo con la letra de la unidad en el parámetro currentPath en una acción chooseDirectory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerver:xerver:4.32:*:*:*:*:*:*:*","matchCriteriaId":"F63E4FD4-425F-4756-89E7-3439ED68B7AA"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9718","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3562","sourceIdentifier":"cve@mitre.org","published":"2009-10-05T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en Xerver HTTP Server v4.32 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro currentPath en una acción chooseDirectory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerver:xerver:4.32:*:*:*:*:*:*:*","matchCriteriaId":"F63E4FD4-425F-4756-89E7-3439ED68B7AA"}]}]}],"references":[{"url":"http://secunia.com/advisories/36681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9718","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36457","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3563","sourceIdentifier":"cve@mitre.org","published":"2009-12-09T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons."},{"lang":"es","value":"ntp_request.c en ntpd en NTP anterior v4.2.4p8, y v4.2.5, permite a atacantes remotos causar una denegación de servicio (consumo de CPU y ancho de banda) por uso de MODE_PRIVATE para enviar una suplantación de (1) petición o (2) paquete respueta lo que lanza continuo intercambio de errores de respuesta MODE_PRIVATE entre dos demonios NTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.2p4","matchCriteriaId":"73B1FD64-D156-45BC-9713-77E163DF731C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.72:*:*:*:*:*:*:*","matchCriteriaId":"25AB2D70-2807-4970-ACD3-9B4751A1F9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.73:*:*:*:*:*:*:*","matchCriteriaId":"06C78C19-5A09-4883-8144-AE861A244FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.90:*:*:*:*:*:*:*","matchCriteriaId":"437C8BA8-F437-4166-838D-EDC64E7A67DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.91:*:*:*:*:*:*:*","matchCriteriaId":"104AEC97-3C2A-48D2-BA63-08502F88F8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.92:*:*:*:*:*:*:*","matchCriteriaId":"87D67E30-E303-4F79-9929-4A5B587FCDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.93:*:*:*:*:*:*:*","matchCriteriaId":"B9BD95B5-322C-4CDC-A2DB-A06D4DA3B104"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.94:*:*:*:*:*:*:*","matchCriteriaId":"0BD63969-D18D-41AF-9814-DA1A207BDE80"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.95:*:*:*:*:*:*:*","matchCriteriaId":"7EAD8958-173A-4FCC-9420-A148BA5F73E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.96:*:*:*:*:*:*:*","matchCriteriaId":"B271F6AD-D829-4671-8FA7-7D921364B426"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.97:*:*:*:*:*:*:*","matchCriteriaId":"C25E03A8-46B5-4AC7-8506-4C255D7CC400"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.98:*:*:*:*:*:*:*","matchCriteriaId":"2C76CD53-CC9F-491A-952F-9A82D6E20058"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E749D64E-5C47-4A34-9F3C-1D34F8348058"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"EE0C9CBB-D52F-4F7C-B343-E685A3996BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CB90A3FB-B107-46CF-A846-48EE0EDF637A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"088BFFA4-1AAB-4699-9793-F731A81B296A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B3475779-383A-4128-9145-474EC08030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"782BAA3D-A639-4B25-83F0-741074C88D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p2:*:*:*:*:*:*:*","matchCriteriaId":"EF367FA4-2C7F-4040-89DE-8A97A069A802"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2p3:*:*:*:*:*:*:*","matchCriteriaId":"01D11498-3FC4-4890-9B10-BBA74A01C9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"35C2B888-66D6-45D3-97E3-C711B1C6971A"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130168580504508&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130168580504508&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37629","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38764","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38832","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39593","source":"cve@mitre.org"},{"url":"http://security-tracker.debian.org/tracker/CVE-2009-3563","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023298","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/css/P8/documents/100071808","source":"cve@mitre.org"},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1948","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/568372","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7X7V6J","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7X7VD7","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37255","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2010/0510","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0993","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531213","source":"cve@mitre.org"},{"url":"https://lists.ntp.org/pipermail/announce/2009-December/000086.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1648.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1651.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cve@mitre.org"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1331","source":"cve@mitre.org"},{"url":"https://www.kb.cert.org/vuls/id/417980","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130168580504508&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130168580504508&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136482797910018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-tracker.debian.org/tracker/CVE-2009-3563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100071808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/568372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7X7V6J","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7X7VD7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2010/0510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.ntp.org/pipermail/announce/2009-December/000086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1648.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1651.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/417980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3564","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files."},{"lang":"es","value":"puppetmasterd en puppet v0.24.6 no borra los grupos adicionales cuando cambia a otro usuario, lo que permite a usuarios locales acceder a ficheros restringidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3564\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update for Red Hat Enterprise MRG may address this flaw.","lastModified":"2009-10-08T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reductivelabs:puppet:0.24.6:*:*:*:*:*:*:*","matchCriteriaId":"B151012D-7B18-4D3F-A342-AB1198158A48"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*","matchCriteriaId":"20294CE7-12C8-43CA-A702-5ED2A3044FFC"}]}]}],"references":[{"url":"http://projects.reductivelabs.com/issues/1806","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475201","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://puppet.com/security/cve/cve-2009-3564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://projects.reductivelabs.com/issues/1806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://puppet.com/security/cve/cve-2009-3564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3565","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en intruvert/jsp/module/Login.jsp en McAfee IntruShield Network Security Manager (NSM) en versiones anteriores a la 5.1.11.6 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro (1) iaction o (2) node."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:intrushield_network_security_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.7.74","matchCriteriaId":"6E2D5500-7A6A-47AF-B8C8-F61C9D43B153"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:intrushield_network_security_manager:5.1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"17C7524D-EEA2-45D9-B741-B9B02224A3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:intrushield_network_security_manager:5.1.7.73:*:*:*:*:*:*:*","matchCriteriaId":"5EE964A5-98D2-4690-90C3-89B91B1434E0"}]}]}],"references":[{"url":"http://kc.mcafee.com/corporate/index?page=content&id=SB10004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023171","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59911","source":"cve@mitre.org"},{"url":"http://www.secureworks.com/ctu/advisories/SWRX-2009-001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507820/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37003","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54250","source":"cve@mitre.org"},{"url":"http://kc.mcafee.com/corporate/index?page=content&id=SB10004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secureworks.com/ctu/advisories/SWRX-2009-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507820/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3566","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T15:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability."},{"lang":"es","value":"McAfee IntruShield Network Security Manager (NSM) en versiones anteriores a la 5.1.11.8.1 no incluye la bandera (flag) HTTPOnly en la cabecera Set-Cookie para la identificación de la sesión, lo que permite a atacantes remotos secuestrar una sesión aprovechando una vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:intrushield_network_security_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.7.74","matchCriteriaId":"6E2D5500-7A6A-47AF-B8C8-F61C9D43B153"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:intrushield_network_security_manager:5.1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"17C7524D-EEA2-45D9-B741-B9B02224A3FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:intrushield_network_security_manager:5.1.7.73:*:*:*:*:*:*:*","matchCriteriaId":"5EE964A5-98D2-4690-90C3-89B91B1434E0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023172","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59912","source":"cve@mitre.org"},{"url":"http://www.secureworks.com/ctu/advisories/SWRX-2009-002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507822/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54251","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10005","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secureworks.com/ctu/advisories/SWRX-2009-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507822/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3567","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en modules/tickets/functions_ticketsui.php en Kayako SupportSuite y eSupport v3.60.04 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar en el panel de control de plantilla, un vector diferente de CVE-2007-1145."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:*:*:*:*:*:*:*:*","versionEndIncluding":"3.60.04","matchCriteriaId":"F648C9B1-D21E-4B1B-9F72-779B497D73C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC09C97F-C24C-458E-9660-163CA3389065"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5E050349-5775-4CA5-BD12-B9E48A0CDDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB479D2B-AA67-47EC-89F7-73CFB4852BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C16F63-65D9-4644-AC8F-1B18CAC125D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*","matchCriteriaId":"4B098914-D522-426C-B54F-4844A2EEDC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"207C5C3A-27FF-4EDA-B435-2316492CE84A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:3.00.13:*:*:*:*:*:*:*","matchCriteriaId":"80744826-A306-4243-B600-313AF19246C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:3.00.90:*:*:*:*:*:*:*","matchCriteriaId":"F3C27692-8E90-4E08-A3AE-CA20109D99C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:3.04.10:*:*:*:*:*:*:*","matchCriteriaId":"9F5C0117-98CA-407A-936B-41EB8E6582B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:*:*:*:*:*:*:*:*","versionEndIncluding":"3.60.04","matchCriteriaId":"9CD0DB7E-26CB-4BB7-A133-AAB3F5D1ACAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.00.26:*:*:*:*:*:*:*","matchCriteriaId":"306A4240-7895-4B3F-B8FC-91F76DAA4ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.00.32:*:*:*:*:*:*:*","matchCriteriaId":"DCCD5F81-495F-4433-86BD-2F2AA7696334"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*","matchCriteriaId":"D9C022D3-42ED-442E-9125-E0EAA8E74705"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*","matchCriteriaId":"7FC5A1D5-8831-4032-92D8-DD490CC28774"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*","matchCriteriaId":"878901B9-06F2-49ED-A035-1BD86BB5F11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*","matchCriteriaId":"0F297ABB-E65C-4BBF-B846-AFCC5A572540"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.20.02:*:*:*:*:*:*:*","matchCriteriaId":"97A653BB-E814-4194-B911-CB3F6B69F5A9"},{"vulnerable":false,"criteria":"cpe:2.3:a:kayako:supportsuite:3.30:rc2:*:*:*:*:*:*","matchCriteriaId":"68CB9C07-C2DC-4186-8B6E-5B902B6261D3"},{"vulnerable":false,"criteria":"cpe:2.3:a:kayako:supportsuite:3.30:rc3:*:*:*:*:*:*","matchCriteriaId":"31270F05-C038-4C7D-9592-505FE936A993"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:supportsuite:3.50.06:*:*:*:*:*:*:*","matchCriteriaId":"92135838-7596-42DD-B04A-B8ABFF790817"}]}]}],"references":[{"url":"http://blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58516","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36568","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53558","source":"cve@mitre.org"},{"url":"http://blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3568","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed."},{"lang":"es","value":"El modulo de Drupal, Comment RSS v5.x anteriores a v5.x-2.2 y v6.x anteriores a  v6.x-2.2, no hace cumplir correctamente los permisos cuando un enlace se añade a un feed RSS, lo que permite a atacantes remotos obtener el titulo del nodo y posiblemente mas información sensible mediante la lectura del feed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dave_reid:commentrss:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"0891335F-6BBE-4517-947A-2D329A4582FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_reid:commentrss:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC9BF285-7CB3-4B6D-B422-74A1746BEC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"725FC7B8-6EA5-4F25-88A3-790B1758467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"20322FF6-A0D4-4D09-A7B1-06E3456EB91C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"B37843CC-5550-4807-BFD6-8125788718D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"19F8DFEF-46C8-4197-A1F4-722A8B6B5029"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2D753EC-88C3-43D6-8E17-DAAEA378445C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:5.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"94E8ACC7-9719-442F-810A-B76205C4F2DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"CEA997EE-B25C-4C24-B257-ECB13899C323"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"9E707A50-E544-466C-9D09-A16E47450D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"36C84085-3549-441C-A714-729C8369B232"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"0A672F19-3D97-4372-B038-D8418C1C54FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gabor_hojtsy:commentrss:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"8B9DB9CF-4F49-4C36-A16C-983866ADA337"}]}]}],"references":[{"url":"http://drupal.org/node/579280","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/579290","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/579292","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58177","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36429","source":"cve@mitre.org"},{"url":"http://drupal.org/node/579280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/579290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/579292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3569","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka \"Client-side stack overflow exploit.\" NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en OpenOffice.org (OOo) permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar, como se demuestra con cierto modulo de VulnDisco Pack Professional 8.8, también conocido como \"Exploit de desbordamiento de pila del lado del cliente\". NOTA: A fecha de 05/10/2009 no existe información para ponerlo en marcha. Sin embargo, debido a que el autor de VulnDisco es un autor reputado, lo asignamos un identificador CVE con el fin de realizar un seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:openoffice.org:-:*:*:*:*:*:*:*","matchCriteriaId":"F30ED14E-EE20-4C26-A8FD-24185D8AEB8F"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35036","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36285","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022832","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3570","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9.  NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en OpenOffice.org (OOo) tiene impacto y vectores de ataque remotos no especificados, según lo demostrado por cierto módulo en VulnDisco Pack Professional 8.9. NOTA: a partir de 20091005 , esta divulgación no tiene información práctica. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador fiable, al caso se le ha asignado un identificador CVE para fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","matchCriteriaId":"88C01AD4-CD39-4DAA-BB5A-42094938D9B3"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35036","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36285","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022828","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3571","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka \"Client-side exploit.\" NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad no especificada en OpenOffice.org (OOo) tiene un impacto desconocido y vector de ataque del lado del cliente, según lo demostrado por cierto módulo en VulnDisco Pack Professional 8.8, también conocido como \"Client-side exploit.\" NOTA: a partir de 20091005, esta divulgación no tiene información práctica. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador fiable, al caso se le ha asignado un identificador CVE para fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice.org:*:*:*:*:*:*:*:*","matchCriteriaId":"88C01AD4-CD39-4DAA-BB5A-42094938D9B3"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35036","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36285","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022832","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3572","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per: http://marc.info/?l=openbsd-security-announce&m=125474331811594\r\n\r\nXMM exceptions are incorrectly handled in the OpenBSD/i386 kernel, resulting\r\nin a kernel panic that can be triggered by a local user.\r\n\r\nThis issue has been fixed in -current. Source code patches are available for\r\nOpenBSD 4.4, 4.5 and 4.6.\r\n\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via unspecified vectors."},{"lang":"es","value":"OpenBSD v4.4, v4.5, y v4.6, cuando se ejecuta sobre un kernel i386 no maneja adecuadamente la excepciones XMM, lo que permite a usuarios locales producir una denegación de servicio (kernel panic) a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"89CA041B-4153-43C7-BA69-D6052F4EBEEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"B32BB973-60E5-402B-83FE-547786BC7A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"939CCA87-89B5-4772-BA2B-440C63A5921B"}]}]}],"references":[{"url":"http://marc.info/?l=openbsd-security-announce&m=125474331811594","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/errata44.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata45.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata46.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36589","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=openbsd-security-announce&m=125474331811594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openbsd.org/errata44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata46.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3573","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distributed Imaging 2.2 allow remote attackers to create or overwrite arbitrary files via the (1) SetLogFileName and (2) WriteToLog methods."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en el control ActiveX PDIControl.PDI.1 (PDIControl.dll) v2.2.3160.0 en EMC Captiva PixTools Distributed Imaging v2.2 permite a atacantes remotos crear o sobrescribir ficheros de forma arbitraria a traves de los métodos (1) SetLogFileName y (2) WriteToLog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:captiva_pixtools_distributed_imaging:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C4F21D5-C02D-45CE-BDF6-6BF227DB5BE3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36896","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36566","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/2808","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shinnai.net/xplits/TXT_17zVMhRhsRE6qC6DAj52.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/2808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3574","sourceIdentifier":"cve@mitre.org","published":"2009-10-06T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a .pls playlist file, possibly a buffer overflow."},{"lang":"es","value":"Tuniac 090517c, permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección a través de un argumento largo a File1 en un archivo de lista de reproducción  .pls, posibilitando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tony_million:tuniac:090517c:*:*:*:*:*:*:*","matchCriteriaId":"A2E9A444-0865-46FD-8E64-55CAEE5BC268"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9671","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3575","sourceIdentifier":"cve@mitre.org","published":"2009-10-07T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Desbordamiento de búfer en DHTRoutingTableDeserializer.cc en aria2 v0.15.3, v1.2.0 y otras versiones, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"6798D1A2-F961-48C5-A2F6-086A3A2DB456"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"40FAE4C8-7F23-4E67-BA06-276BC3A5DE62"}]}]}],"references":[{"url":"http://secunia.com/advisories/37971","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1957","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:226","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36332","source":"cve@mitre.org"},{"url":"https://qa.mandriva.com/show_bug.cgi?id=52840","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://qa.mandriva.com/show_bug.cgi?id=52840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3576","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents (aka .scntoc) file with a Script_Content element, as demonstrated by code that loads the WScript.Shell ActiveX control."},{"lang":"es","value":"Autodesk Softimage v7.x y Softimage XSI v6.x permite a atacantes remotos ejecutar código JavaScript de su elección a través de un paquete de escena que contiene un archivo Tabla de Contenidos de Escena (como .scntoc) con un elemento Script_Content, como queda demostrado por el código que carga el control ActiveX WScript.Shell. \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_softimage:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F1422CDB-EE7F-49D6-92FF-843E2DEAA2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_softimage_xsi:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5213DEA-5CB3-40B7-8487-D3AF555DE5B2"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023229","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/softimage-arbitrary-command-execution","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508011/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36637","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/softimage-arbitrary-command-execution","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508011/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3577","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to \"application callbacks.\""},{"lang":"es","value":"Autodesk 3D Studio Max (3DSMax) v6 hasta v9 y v2008 hasta v2010 permite a atacantes remotos ejecutar código de su elección a través de un archivo .max con una sentencia MAXScript que llama al método DOSCommand, relacionado con \"application callbacks.\"\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:6:*:*:*:*:*:*:*","matchCriteriaId":"48A6AC01-DD6A-47DC-A08F-CFF2B00E458A"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:7:*:*:*:*:*:*:*","matchCriteriaId":"21F34A76-B1BD-45C7-9EFE-221F5E35985F"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:8:*:*:*:*:*:*:*","matchCriteriaId":"9120C1A0-A615-4835-833E-D292813A3362"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:9:*:*:*:*:*:*:*","matchCriteriaId":"D53212F3-EB04-4AC2-8C18-9FE4C63FBB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:2008:*:*:*:*:*:*:*","matchCriteriaId":"541F19B1-3E53-4558-BC21-6A14D7567DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:2009:*:*:*:*:*:*:*","matchCriteriaId":"2CD0EF4E-539D-42CB-B9E7-86A0C8154294"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:3ds_max:2010:*:*:*:*:*:*:*","matchCriteriaId":"AA2F7BFB-ABB7-4ABA-BCBC-EC507C7C52CB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023230","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/3dsmax-arbitrary-command-execution","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508012/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36634","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1023230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/3dsmax-arbitrary-command-execution","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508012/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3578","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to \"Script Nodes.\""},{"lang":"es","value":"Autodesk Maya v8.0, v8.5, v2008, v2009, y v2010 y Alias Wavefront Maya v6.5 y v7.0 permite a atacantes remotos ejecutar código de su elección a través de archvio (1) .ma o (2) .mb que usa comando python de Maya Embedded Language (MEL)  u otros comandos MEL no especificados, relacionado con (Script Nodes). \r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:alias_wavefront_maya:6.5:*:*:*:*:*:*:*","matchCriteriaId":"20859414-D768-4094-AF5F-D9A291FC64A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:alias_wavefront_maya:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E2AFDD10-A460-444A-9976-7D273624D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_maya:8.0:2008:*:*:*:*:*:*","matchCriteriaId":"07199D2C-17B7-4E7A-AD4A-5D0FBE4642C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_maya:8.0:2009:*:*:*:*:*:*","matchCriteriaId":"BC5F2645-4D92-412C-841F-00D841433607"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_maya:8.0:2010:*:*:*:*:*:*","matchCriteriaId":"DA84789E-C639-435C-A6AC-922C4B968A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_maya:8.5:2008:*:*:*:*:*:*","matchCriteriaId":"1CE43DCB-DF17-4B90-ADBC-2DD05C6C3A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_maya:8.5:2009:*:*:*:*:*:*","matchCriteriaId":"1096BD88-DC22-4228-872A-70300C6A51C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:autodesk:autodesk_maya:8.5:2010:*:*:*:*:*:*","matchCriteriaId":"6FCFED79-D472-4CF4-A240-F549DB3DD600"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023228","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/maya-arbitrary-command-execution","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36636","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/maya-arbitrary-command-execution","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3579","sourceIdentifier":"cve@mitre.org","published":"2009-10-07T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la aplicación CookieDum.java  en Mort Bay Jetty v6.1.19 y v6.1.20, permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través del parámetro \"Value\" en una petición GET a cookie/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.19:*:*:*:*:*:*:*","matchCriteriaId":"8F616992-6D50-457F-B699-D0DCA3D46C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mortbay:jetty:6.1.20:*:*:*:*:*:*:*","matchCriteriaId":"DAE13225-F90F-4ABC-87A0-DBE63E91FC18"}]}]}],"references":[{"url":"http://www.coresecurity.com/content/jetty-persistent-xss","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507013/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/jetty-persistent-xss","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507013/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3580","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger 2.8.24 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password via the login, new_password, and confirm_password parameters in a preferences action."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en am.pl en SQL-Ledger v2.8.24 permite a atacantes remotos secuestrar la autenticación de usuarios de su elección para solicitar el cambio de contraseña mediante los parámetros \"login\", \"new_password\", y \"confirm_password\" en una acción preferences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:2.8.24:*:*:*:*:*:*:*","matchCriteriaId":"E37F91C4-5164-4428-82B6-10DAFC0C3FAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3581","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8.24 allow remote authenticated users to inject arbitrary web script or HTML via (1) the DCN Description field in the Accounts Receivables menu item for Add Transaction, (2) the Description field in the Accounts Payable menu item for Add Transaction, or the name field in (3) the Customers menu item for Add Customer or (4) the Vendor menu item for Add Vendor."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en SQL-Ledger v2.8.24 permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML de su elección mediante (1) el campo DCN Description en el elemento de menú Accounts Receivables para Add Transaction, (2) el campo Description en el elemento de menú Accounts Payable para Add Transaction, o el campo nombre en (3) el elemento de menú Customers para Add Customer o (4) el elemento de menú Vendor para Add Vendor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:2.8.24:*:*:*:*:*:*:*","matchCriteriaId":"E37F91C4-5164-4428-82B6-10DAFC0C3FAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54965","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3582","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the (1) id and possibly (2) db parameters in a Delete action to the output of a Vendors>Reports>Search search operation."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la subrutina de borrado en SQL-Ledger v2.8.24 permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección mediante los parámetros (1) \"id\" y posiblemente (2) \"db\" en una acción Delete en la salida de una operación de búsquedaVendors>Reports>Search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:2.8.24:*:*:*:*:*:*:*","matchCriteriaId":"E37F91C4-5164-4428-82B6-10DAFC0C3FAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54966","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3583","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the countrycode field."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el elemento de menú Preferences en SQL-Ledger v2.8.24 permite a atacantes remotos incluir y ejecutar ficheros locales mediante los caracteres .. (punto punto) en el campo \"countrycode\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:2.8.24:*:*:*:*:*:*:*","matchCriteriaId":"E37F91C4-5164-4428-82B6-10DAFC0C3FAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3584","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL-Ledger 2.8.24 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session."},{"lang":"es","value":"SQL-Ledger v2.8.24 no inicializa el flag de seguridad para la cookie de sesión en una conexión https, lo que facilita a atacantes remotos la captura de esta cookie interceptando su transmisión con una sesión http."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:2.8.24:*:*:*:*:*:*:*","matchCriteriaId":"E37F91C4-5164-4428-82B6-10DAFC0C3FAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54968","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3585","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same domain."},{"lang":"es","value":"Vulnerabilidad de permanencia de sesión en html/Elements/SetupSessionCookie en Best Practical Solutions RT desde v3.0.0 hasta v3.6.9 y desde v3.8.x hasta v3.8.5 permite a atacantes remotos secuestrar sesiones web fijando el identificador de sesión a través de una manipulación que aprovecha un segundo servidor web dentro del mismo dominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BA418CF5-49D6-4E0E-A1B5-8CB23752989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8E238F87-8D8C-4E62-A8F0-3DB9EFDB8328"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3FD8A7EF-5DB8-40C6-9124-A97A23B3EA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2AD553B8-8495-47E5-A543-4DC963B3511A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"28ADB191-4787-4FDB-B70A-F4C8BDF0F4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2772389A-9BCD-4B13-88C8-75BC64E40AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B1F9D05F-C86D-40D8-A7D9-5448918B72DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"311485DA-5381-4EAD-AF58-B8C67373413A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2EAF6671-8C77-448B-BF29-E2CF51176CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B55D762D-A723-435C-8D80-F7230F1648D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"4CC63EDC-541E-445D-8B72-799E4184B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D5E6196E-4A90-4F64-BA99-A8E04A09D5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91D7CE86-3FCD-472E-BF01-31FFB36701BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"70B3F0B2-8C70-4046-AAA0-FBD344FE4DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCD0173D-F699-4864-8856-D1792BDA0F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC2E53-5DE8-4A31-9B8A-79335DFBAFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"404AFC5C-20B4-41E5-ACDE-56626D68AFEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F37D1380-965B-40E0-8A20-61FEA072B8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E101B0FE-499F-44D8-8B68-BB7FEE40D2B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"747D8CD1-EE12-48A4-A795-88BC66A8DA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5FDE201D-F31A-4738-B9AB-7BB11417990E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4D6ED4EC-F860-47BD-B699-551FB5DBF039"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E3398823-1813-4D7B-9EC9-74222A240051"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F98B7895-BDB3-477C-8B34-88BD3E02EAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1512169D-DCEF-4964-B05A-3DF19CDE8F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B427F5D4-ACD6-46E5-B94F-CA30330C6492"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E9B38C33-D680-4285-A849-E6CDA9F4802F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"646CFD82-15FE-48E4-83C9-E3E037E9F928"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57404A14-6E1C-4F3B-8120-75F1073A3E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3F40ED56-CDAC-40BB-A026-5D6A09DCB72C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"33C325D9-CB88-430F-B1AE-3544C7176398"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"F1E86D15-8435-46B9-88FF-8A51771C55E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"543C8E63-9A49-4D6A-899A-7D244D0CCC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"00AFB893-E37A-4E81-A984-66D677161D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C503726A-4AAB-4444-A204-7F53A6369919"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F2B93F59-E22F-47E0-A5EA-D5716E9EAB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0BF01543-2929-4ADA-BD74-ABE00BF066BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.3:*:*:*:*:*:*:*","matchCriteriaId":"562E9782-259B-42C6-BC3E-C452799A78FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"C4D2E2C8-15E8-45E4-9DBF-6CF2BEB30576"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"9E4D117A-92C0-4884-A3E6-F6FCC8B89458"}]}]}],"references":[{"url":"http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patch","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patch","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patch","source":"cve@mitre.org"},{"url":"http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.html","source":"cve@mitre.org"},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37546","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37728","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37162","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54472","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.html","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3586","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en src/http.c en CoreHTTP v0.5.3.1 y anteriores permite a atacantes remotos causar una denegación de servicio o probablemente ejecutar código de su elección a través de una petición HTTP con una primera línea larga que lanza un desbordamiento de buffer. Esta vulnerabilidad existe por una corrección incompleta de CVE-2007-4060."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frank_yaul:corehttp:0.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"709CD947-62B3-4D61-86FB-659642F03062"}]}]}],"references":[{"url":"http://census-labs.com/media/corex.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://census-labs.com/news/2009/12/02/corehttp-web-server/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508272/100/0/threaded","source":"cve@mitre.org"},{"url":"http://census-labs.com/media/corex.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://census-labs.com/news/2009/12/02/corehttp-web-server/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508272/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3587","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente arclib en el motor Anti-Virus en CA Anti-Virus para Enterprise (formalmente eTrust Antivirus) v7.1 hasta v8.1; Anti-Virus 2007 (v8) hasta 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) hasta Plus 2009; y otros productos CA permite a atacantes remotos causar una denegación de servicio y ejecutar probablemente código de su elección a través del archivo RAR manipulado que provoca una corrupción de la memoria dinámica, una vulnerabilidad diferente que CVE-2009-3588."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*","matchCriteriaId":"C469EBBE-EE96-4CED-BD8C-36461750C6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"9C5E892B-0EE8-4B76-97B8-0BAF17E83F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*","matchCriteriaId":"607CCBDA-7288-4496-A7ED-EF6DED40CA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:r8:*:*:*:*:*:*:*","matchCriteriaId":"11BCD267-E8CE-4A97-B769-5F4CAF9830D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*","matchCriteriaId":"865B7BD2-3AD1-41CA-842B-47BC4F1426DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*","matchCriteriaId":"0E2FA702-184A-44FF-8DEA-7811804EE175"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*","matchCriteriaId":"D301B65D-A20B-4991-A0D8-DFE3363F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"8A08C715-A351-466D-99EC-006C106A3366"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:*","matchCriteriaId":"05185A74-8484-419D-A3CE-8603928AF0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus:8.1:*:*:*:*:*:*:*","matchCriteriaId":"52C533CA-ACB7-4C0F-98E2-B5E51E24A554"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_integrated_threat_management:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FD8D5F0-9606-4BBA-B7F9-ACD089B84DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3DDF2EE3-753B-4C7E-84EF-144FA5986A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"69184A5E-4FA9-4896-B6E8-1B9D4D62D099"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:internet_security_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"F30C4FF9-DB76-4B3F-9582-752097B3D521"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"285013A5-E058-4B2B-B8B6-1BFF72388589"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*","matchCriteriaId":"0FF55705-42ED-4503-8534-FDEA365E84E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"AB548763-E1A7-4DB1-BE86-ED5AA1CA81BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r11:*:*:*:*:*:*:*","matchCriteriaId":"6B28429A-F343-4BE8-A94D-5A5AC3F6258C"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"CFF64064-1C35-4888-BBC2-52F68EF9517F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DADD1E6-3454-4C1E-AD46-82D79CB8F528"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5E02DA21-B25B-4626-BFDC-61AA8AF3537E"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2EFA39E3-A614-4A64-B29C-86D6F12F1557"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:*","matchCriteriaId":"5B4434A4-EE82-46A1-9293-345991515369"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*","matchCriteriaId":"43CD3B48-C978-4FDB-B157-85F3E971446B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus:2009:*:*:*:*:*:*:*","matchCriteriaId":"6050CADE-7BAF-45B7-A031-F70558C7CE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus_for_the_enterprise:r8.1:*:*:*:*:*:*:*","matchCriteriaId":"B0186ADA-0E20-4E14-B9D5-19CDFC1BD98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus_gateway:7.1:*:*:*:*:*:*:*","matchCriteriaId":"FD75FF0F-A36C-40AF-A99E-1596A6A6FE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus_plus:2009:*:*:*:*:*:*:*","matchCriteriaId":"BED8CEF9-6AEC-4771-98F7-051E4B3E0848"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_for_windows_client_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"5603FDAD-A347-4A44-BC45-1ADC44601D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_for_windows_server_component:*:*:*:*:*:*:*:*","matchCriteriaId":"5086D7CF-EBAB-4E30-98E0-0D276CC1C707"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:common_services:3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FAD043E-3ABE-46D7-AD17-A68858692A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_anti-virus_gateway:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C13B0E1-DCEE-46E5-81A3-C08C07C58B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_anti-virus_sdk:*:*:*:*:*:*:*:*","matchCriteriaId":"257CC950-F1BB-4D0A-9B05-98A58DB67532"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_ez_antivirus:r7.1:*:*:*:*:*:*:*","matchCriteriaId":"A0A641A2-4147-4C41-B102-18417ECA9339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"29FEABEE-DC17-4620-B088-B24249865931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D10B864B-AA39-4702-A42B-F33BAF2D8059"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB54A16-5E56-46FC-A49C-56C98C0B8F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:gateway_security:r8.1:*:*:*:*:*:*:*","matchCriteriaId":"B44F941C-83DC-4EDA-B258-C35F5EDA819E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"0281F80B-CF9C-482D-B7A9-3B2651BD0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"33F7E184-EA23-487C-83ED-65CF8DD2DB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_plus_2009:*:*:*:*:*:*:*:*","matchCriteriaId":"951062B1-C72B-4EAF-BA54-6986434036FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*","matchCriteriaId":"47C10BA4-B241-4F65-8FA1-AD88266C03B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*","matchCriteriaId":"253A8082-9AE4-4049-A1D0-B7ACB5C2E8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"CC845898-3D77-4793-971E-5E1555ED9CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager:8.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"0115D81C-2CA2-424C-BE4B-0896C9ADA68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager:r8:*:enterprise:*:*:*:*:*","matchCriteriaId":"A38801CD-167E-408E-89BD-52BB1B89041B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager_total_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"B6AEE8BC-8D0E-464F-88B7-5C2C2D372AFA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://osvdb.org/58691","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36976","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36653","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022999","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53697","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/58691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3588","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587."},{"lang":"es","value":"Vulnerabilidad inespecífica en el componente arclib en el motor antivirus en CA Anti-Virus para empresas (anteriormente eTrust Antivirus) desde v7.1 hasta r8.1; Anti-Virus desde 2007 (v8) hasta 2009; eTrust EZ Antivirus r7.1; Internet Security Suite desde 2007 (v3) hasta Plus 2009; y otros productos de CA permite a atacantes remotos producir una denegación de servicio a través de un archivo RAR manipulado que inicia la corrupción de la pila, una vulnerabilidad diferente que CVE-2009-3587."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus:2007:8:*:*:*:*:*:*","matchCriteriaId":"C469EBBE-EE96-4CED-BD8C-36461750C6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus:2008:*:*:*:*:*:*:*","matchCriteriaId":"9C5E892B-0EE8-4B76-97B8-0BAF17E83F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:*","matchCriteriaId":"607CCBDA-7288-4496-A7ED-EF6DED40CA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:r8:*:*:*:*:*:*:*","matchCriteriaId":"11BCD267-E8CE-4A97-B769-5F4CAF9830D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:anti-virus_sdk:*:*:*:*:*:*:*:*","matchCriteriaId":"865B7BD2-3AD1-41CA-842B-47BC4F1426DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:11:*:*:*:*:*:*:*","matchCriteriaId":"0E2FA702-184A-44FF-8DEA-7811804EE175"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:11.1:*:*:*:*:*:*:*","matchCriteriaId":"D301B65D-A20B-4991-A0D8-DFE3363F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"8A08C715-A351-466D-99EC-006C106A3366"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus:8:*:*:*:*:*:*:*","matchCriteriaId":"05185A74-8484-419D-A3CE-8603928AF0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus:8.1:*:*:*:*:*:*:*","matchCriteriaId":"52C533CA-ACB7-4C0F-98E2-B5E51E24A554"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_integrated_threat_management:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FD8D5F0-9606-4BBA-B7F9-ACD089B84DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_intrusion_detection:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3DDF2EE3-753B-4C7E-84EF-144FA5986A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"69184A5E-4FA9-4896-B6E8-1B9D4D62D099"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:internet_security_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"F30C4FF9-DB76-4B3F-9582-752097B3D521"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"285013A5-E058-4B2B-B8B6-1BFF72388589"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r3.0:*:*:*:*:*:*:*","matchCriteriaId":"0FF55705-42ED-4503-8534-FDEA365E84E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"AB548763-E1A7-4DB1-BE86-ED5AA1CA81BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r11:*:*:*:*:*:*:*","matchCriteriaId":"6B28429A-F343-4BE8-A94D-5A5AC3F6258C"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:network_and_systems_management:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"CFF64064-1C35-4888-BBC2-52F68EF9517F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DADD1E6-3454-4C1E-AD46-82D79CB8F528"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:secure_content_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5E02DA21-B25B-4626-BFDC-61AA8AF3537E"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2EFA39E3-A614-4A64-B29C-86D6F12F1557"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11:*:*:*:*:*:*:*","matchCriteriaId":"5B4434A4-EE82-46A1-9293-345991515369"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:11.1:*:*:*:*:*:*:*","matchCriteriaId":"43CD3B48-C978-4FDB-B157-85F3E971446B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus:2009:*:*:*:*:*:*:*","matchCriteriaId":"6050CADE-7BAF-45B7-A031-F70558C7CE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus_for_the_enterprise:r8.1:*:*:*:*:*:*:*","matchCriteriaId":"B0186ADA-0E20-4E14-B9D5-19CDFC1BD98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus_gateway:7.1:*:*:*:*:*:*:*","matchCriteriaId":"FD75FF0F-A36C-40AF-A99E-1596A6A6FE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:anti-virus_plus:2009:*:*:*:*:*:*:*","matchCriteriaId":"BED8CEF9-6AEC-4771-98F7-051E4B3E0848"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_for_windows_client_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"5603FDAD-A347-4A44-BC45-1ADC44601D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_for_windows_server_component:*:*:*:*:*:*:*:*","matchCriteriaId":"5086D7CF-EBAB-4E30-98E0-0D276CC1C707"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:common_services:3.1:*:*:*:*:*:*:*","matchCriteriaId":"7FAD043E-3ABE-46D7-AD17-A68858692A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_anti-virus_gateway:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C13B0E1-DCEE-46E5-81A3-C08C07C58B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_anti-virus_sdk:*:*:*:*:*:*:*:*","matchCriteriaId":"257CC950-F1BB-4D0A-9B05-98A58DB67532"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_ez_antivirus:r7.1:*:*:*:*:*:*:*","matchCriteriaId":"A0A641A2-4147-4C41-B102-18417ECA9339"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_intrusion_detection:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"29FEABEE-DC17-4620-B088-B24249865931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_intrusion_detection:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D10B864B-AA39-4702-A42B-F33BAF2D8059"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_secure_content_manager:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB54A16-5E56-46FC-A49C-56C98C0B8F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:gateway_security:r8.1:*:*:*:*:*:*:*","matchCriteriaId":"B44F941C-83DC-4EDA-B258-C35F5EDA819E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"0281F80B-CF9C-482D-B7A9-3B2651BD0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_plus_2008:*:*:*:*:*:*:*:*","matchCriteriaId":"33F7E184-EA23-487C-83ED-65CF8DD2DB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:internet_security_suite_plus_2009:*:*:*:*:*:*:*:*","matchCriteriaId":"951062B1-C72B-4EAF-BA54-6986434036FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*","matchCriteriaId":"47C10BA4-B241-4F65-8FA1-AD88266C03B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r3:*:*:*:*:*:*:*","matchCriteriaId":"253A8082-9AE4-4049-A1D0-B7ACB5C2E8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:protection_suites:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"CC845898-3D77-4793-971E-5E1555ED9CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager:8.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"0115D81C-2CA2-424C-BE4B-0896C9ADA68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager:r8:*:enterprise:*:*:*:*:*","matchCriteriaId":"A38801CD-167E-408E-89BD-52BB1B89041B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:threat_manager_total_defense:*:*:*:*:*:*:*:*","matchCriteriaId":"B6AEE8BC-8D0E-464F-88B7-5C2C2D372AFA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:sp1:*:*:*:*:*:*","matchCriteriaId":"0486108C-E36C-4746-919E-C760E10EBAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:r12.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CD2F60F0-E8B8-46E6-932E-DF9F4457B47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"D8713893-59CE-486A-9262-E755A8F2D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:r11.5:*:*:*:*:*:*:*","matchCriteriaId":"D8275AC1-81C5-4D9F-A61B-1A908BDDE0F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/36976","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36653","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022999","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2852","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53698","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://secunia.com/advisories/36976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=218878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507068/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3589","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T15:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"incron 0.5.5 does not initialize supplementary groups when running a process from a user's incrontabs, which causes the process to be run with the incrond supplementary groups and allows local users to gain privileges via an incrontab table."},{"lang":"es","value":"incron v0.5.5 no inicializa grupos adicionales cuando ejecuta un proceso desde las incrontabs de usuario, lo que provoca el proceso sea ejecutado con el grupo adicional incrond y permite a los usuarios locales obtener privilegios a través de una tabla incrontab."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inotify:incron:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"405D9683-14A6-43B4-9631-A5D85361D5CE"}]}]}],"references":[{"url":"http://koji.fedoraproject.org/koji/buildinfo?buildID=134880","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5","source":"cve@mitre.org"},{"url":"http://koji.fedoraproject.org/koji/buildinfo?buildID=134880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://admin.fedoraproject.org/updates/incron-0.5.5-2.el5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3590","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T16:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the Cat_ID parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en showcat.php en VS PANEL v7.3.6 permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro Cat_ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vspanel:vs_panel:7.3.6:*:*:*:*:*:*:*","matchCriteriaId":"D19BDFB5-C850-4D28-8770-C69F59F7A605"}]}]}],"references":[{"url":"http://secunia.com/advisories/34848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34648","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49990","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3591","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location."},{"lang":"es","value":"Dopewars v1.5.12 permite a los atacantes remotos causar una denegación de servicio (fallo de segmentación) a través de un mensaje REQUESTJET con una posición no válida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ben_webb:dopewars:1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"78A97ED7-B4FD-49B2-BCE9-9D410F1C5D54"}]}]}],"references":[{"url":"http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507012/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36606","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507012/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3592","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en customer/home.php en Qualiteam X-Cart permite a los atacantes remoto inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro email en una acción subscribed, un vector diferente a CVE-2005-1823."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qtmsoft:x-cart:*:*:*:*:*:*:*:*","matchCriteriaId":"C9271175-73A6-4E39-BA5C-61AEE72F8384"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/X-Cart-submail-XSS.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36601","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53664","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/X-Cart-submail-XSS.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3593","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to placebid.php and (2) jobid parameter to post_resume.php."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Freelancers v1.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comando web o HTML a través de (1) el parámetro id para placebid.php y (2) el parámetro jobid para post_resume.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebscriptz:freelancers:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B14C26CA-9078-4284-85C7-4AE5044F7FB3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0907-exploits/freelancers-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35903","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55992","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51828","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/freelancers-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/55992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3594","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows remote attackers to inject arbitrary web script or HTML via the postid parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en bpost.php en BLOB Blog System v1.2 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro postid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blob:blog_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"84BDD777-48E2-4EF1-A645-C81EA3DB39BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:blob:blog_system:1.1:*:*:*:*:*:*:*","matchCriteriaId":"709BCA4A-88DF-44FD-8B9C-4E3AC92F75C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:blob:blog_system:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D21DDABA-533C-4809-8B29-6F0E744800A7"}]}]}],"references":[{"url":"http://blob.yewipeya.net/bpost.php?postid=0008","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35938","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56261","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51959","source":"cve@mitre.org"},{"url":"http://blob.yewipeya.net/bpost.php?postid=0008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/56261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3595","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the Cat_ID parameter, a different vector than CVE-2009-3590."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en results.php en VS PANEL v7.5.5 permite a los atacantes remoto ejecutar arbitrariamente comandos SQL a través del parámetro Cat_ID, es un vector diferente a CVE-2009-3590."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vspanel:vs_panel:7.5.5:*:*:*:*:*:*:*","matchCriteriaId":"976B505A-0B76-45E9-8EFB-64BD8637EB65"}]}]}],"references":[{"url":"http://secunia.com/advisories/35953","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9171","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56570","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51783","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51783","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3596","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypass authentication and gain administrative access via a direct request."},{"lang":"es","value":"JoxTechnology Ajox Poll no restringe apropiadamente el acceso a admin/managepoll.php, lo que permite a los atacantes remotos evitar la autenticación y obtener acceso de administración a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joxtechnology:ajox_poll:*:*:*:*:*:*:*:*","matchCriteriaId":"01F65337-A553-4588-9F0B-F8EEDA3E15EB"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9182","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51809","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3597","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig.dd."},{"lang":"es","value":"Digitaldesign CMS v0.1 guarda información sensible en el directorio web raíz con insuficiente control de acceso, lo que permite a los atacantes remotos descargar el fichero de la base de datos a través de una petición directa a autoconfig.dd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-552"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digitaldesign_cms_project:digitaldesign_cms:0.1:*:*:*:*:*:*:*","matchCriteriaId":"52B7D35A-5E54-446B-83BF-159DA34E1C69"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9115","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51676","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3598","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en survey_result.php en eCardMAX FormXP 2007 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro sid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecardmax.com:formxp:2007:*:*:*:*:*:*:*","matchCriteriaId":"2CB5BA5B-641E-44CC-B129-22A8383904DE"}]}]}],"references":[{"url":"http://osvdb.org/55859","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/formxp-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35836","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51723","source":"cve@mitre.org"},{"url":"http://osvdb.org/55859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/formxp-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3599","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the bid_id parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en single_winner1.php en HUBScript v1.0 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro bid_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebscriptz:hubscript:1.0:*:*:*:*:*:*:*","matchCriteriaId":"20DA17AD-8F52-4AAC-A87A-8D2F6F8540BD"}]}]}],"references":[{"url":"http://osvdb.org/55961","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51829","source":"cve@mitre.org"},{"url":"http://osvdb.org/55961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3600","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function."},{"lang":"es","value":"HUBScript v1.0 permite a los atacantes remotos obtener información de configuración a través de peticiones directa a manage/phpinfo.php, que llama a la función phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebscriptz:hubscript:1.0:*:*:*:*:*:*:*","matchCriteriaId":"20DA17AD-8F52-4AAC-A87A-8D2F6F8540BD"}]}]}],"references":[{"url":"http://osvdb.org/55962","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51830","source":"cve@mitre.org"},{"url":"http://osvdb.org/55962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3601","sourceIdentifier":"cve@mitre.org","published":"2009-10-08T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject arbitrary web script or HTML via the clr parameter in a vote action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en demo_page.php en Scriptsez Ultimate Poll permite a los atacantes inyectar arbitrariamente una secuencia de comandos web o HTML a través del parámetro clr en una acción vote."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ultimate_poll:*:*:*:*:*:*:*:*","matchCriteriaId":"33A59AE2-318A-4D6F-9841-651B7E091DE9"}]}]}],"references":[{"url":"http://osvdb.org/55914","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/ultimatepoll-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51773","source":"cve@mitre.org"},{"url":"http://osvdb.org/55914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0907-exploits/ultimatepoll-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3602","sourceIdentifier":"secalert@redhat.com","published":"2009-10-13T10:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses."},{"lang":"es","value":"Unbound anterior v1.3.4 no comprueba las firmas para registros NSEC3, lo que permite a atacantes remotos causar una delegación de seguridad para ser descargada a través de suplantación de DNS u otros ataques relativos al DNS conjuntamente con respuestas de delegación manipuladas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"B7158CA2-29DF-4705-96DF-4166D43FB0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.0:*:*:*:*:*:*:*","matchCriteriaId":"9C91D9B3-201C-4090-8AB7-22B3B017C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.1:*:*:*:*:*:*:*","matchCriteriaId":"54DA5D37-9D1E-483D-AD56-FD9B32BE62BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.2:*:*:*:*:*:*:*","matchCriteriaId":"CD25EC11-5C51-4072-AFBC-CB6C7173E1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.3:*:*:*:*:*:*:*","matchCriteriaId":"19BD88F4-8CF7-4C02-9A68-0F57A5C221AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FBA46C5-4E08-4B9F-897B-05DE3AF9A10D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C96D1B54-4C99-4B36-97A5-40D7A3691041"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.6:*:*:*:*:*:*:*","matchCriteriaId":"D62F9F20-8A6E-4736-A3ED-879BCE4E4F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.7:*:*:*:*:*:*:*","matchCriteriaId":"52C42FEA-5001-41D4-8CA3-A25D8CB0A9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"29B38799-BBFD-42B3-8DF3-1C2957BEE205"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ADE80A0-3D9D-4C4E-859B-E0A7EE5A3C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.8:*:*:*:*:*:*:*","matchCriteriaId":"785E8B09-CC33-4812-923F-3168FA73B814"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.09:*:*:*:*:*:*:*","matchCriteriaId":"E3F22E5E-185B-411E-BD1A-9F2774F87E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.10:*:*:*:*:*:*:*","matchCriteriaId":"798B325D-4612-493C-BDF3-D09F9AF99C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:0.11:*:*:*:*:*:*:*","matchCriteriaId":"28DF2FEF-AED3-43C3-8877-EB5A724232BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AA2F7047-5435-4616-8357-B72BB3F9A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"05137329-C056-4E1E-811E-0AF2899E9EE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"850E4420-3B05-4F99-A4C6-AD22E127E7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B6A23044-AB7D-4303-804B-11ADC8CF4CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C9DFA469-124B-4F6A-9D86-2B615CC1F5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D463CB7-2B65-4A4D-8AC2-35F6C51CAC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7701F4B-6FF1-463E-BF6D-6B7EA96DB192"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"661E72ED-666D-4532-B503-683E2C84686F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DDF5BCB9-1950-4099-8E08-5D1CBF6749FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nlnetlabs:unbound:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"04981A8D-F3F8-4D83-818B-775E8FE9CE77"}]}]}],"references":[{"url":"http://osvdb.org/58836","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36996","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37913","source":"secalert@redhat.com"},{"url":"http://unbound.net/pipermail/unbound-users/2009-October/000852.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1963","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/09/2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/09/3","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2875","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53729","source":"secalert@redhat.com"},{"url":"http://osvdb.org/58836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://unbound.net/pipermail/unbound-users/2009-October/000852.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/09/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3603","sourceIdentifier":"secalert@redhat.com","published":"2009-10-21T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188."},{"lang":"es","value":"Desbordamiento de entero en la función SplashBitmap::SplashBitmap en Xpdf v3.x anterior a v3.02pl4  y Poppler anteior a v0.12.1, podría permitir  a atacantes remotos  la ejecución de código de su elección a través de un documento PDF manipulado que provoca un  un desbordamiento de búfer basado en memoria dinámica (heap). NOTA: algunos detalles han sido obtenidos a partir de información de terceros. Esta vulnerabilidad existe por un corrección incompleta de CVE-2009-1188."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*","matchCriteriaId":"0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*","matchCriteriaId":"9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*","matchCriteriaId":"BD38AC59-7518-40FB-BC29-EC64142DE682"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"F7D4E256-FF91-47BA-B1D4-940FB2D970AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.12.0","matchCriteriaId":"C16CA37E-F28E-47E6-B77B-4CB0A859F831"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C52995D0-0986-427F-B37D-2F6726EA330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"B91206CA-7EBE-4E64-9A49-D7EC0D051012"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"BFD43644-7F02-42AF-8EC3-C326A13E2F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"81FE2E6F-44B2-42D5-B986-D1FE2B510968"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0A605079-3705-4E2C-8F6D-C21B4D875817"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3ABBD590-8092-4920-BBC7-F3ACB9CCC900"}]}]}],"references":[{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37034","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37054","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37159","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39938","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023029","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36703","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526915","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53793","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9671","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3604","sourceIdentifier":"secalert@redhat.com","published":"2009-10-21T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función Splash.cc en Xpdf v3.02pl4  y Poppler v0.x, usado en n kdegraphics KPDF y GPdf, no asigna la memoria adecuadamente, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) y probablemente, la ejecución de código de su elección a través de un documento PDF manipulado que provoca un deferencia a puntero nulo o un desbordamiento de búfer basado en memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"E4A9A98B-5E37-4938-9506-927E0C8FACB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*","matchCriteriaId":"0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*","matchCriteriaId":"9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*","matchCriteriaId":"BD38AC59-7518-40FB-BC29-EC64142DE682"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:*","matchCriteriaId":"1672587F-ED28-4A8A-A6C1-AD1D6B5DF9F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:*","matchCriteriaId":"D5A45EAF-B511-4360-A201-D588E7EEB39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:*","matchCriteriaId":"D14637F7-DC99-4AC4-854C-DBA0B4C6BE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:*","matchCriteriaId":"9EE03979-D564-4ABD-BEBD-E86E7C1BAF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"F7D4E256-FF91-47BA-B1D4-940FB2D970AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C52995D0-0986-427F-B37D-2F6726EA330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"B91206CA-7EBE-4E64-9A49-D7EC0D051012"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"BFD43644-7F02-42AF-8EC3-C326A13E2F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"81FE2E6F-44B2-42D5-B986-D1FE2B510968"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0A605079-3705-4E2C-8F6D-C21B4D875817"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3ABBD590-8092-4920-BBC7-F3ACB9CCC900"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"14D812D5-BC8B-4907-AA70-F8D7F982A8DD"}]}]}],"references":[{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37023","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37028","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37042","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37079","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37159","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39938","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023029","source":"secalert@redhat.com"},{"url":"http://site.pi3.com.pl/adv/xpdf.txt","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36703","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526911","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53795","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cgit.freedesktop.org/poppler/poppler/diff/?id=284a928996&id2=75c3466ba2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://site.pi3.com.pl/adv/xpdf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3605","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/.  NOTE: this may overlap CVE-2009-0791."},{"lang":"es","value":"Múltiples desbordamientos de entero en Poppler v0.10.5 y anteriores permiten a usuarios remotos provocar una denegación de servicio (caida de la aplicación) o probablemente ejecutar código de su elección a través de un fichero PDF modificado. Relacionado con (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc y (7) SplashOutputDev.cc en poppler/; y (8) SplashBitmap.cc, (9) Splash.cc y (10) SplashFTFont.cc en splash/.  NOTA: esta vulnerabilidad se puede sobrelapar con CVE-2009-0791."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.5","matchCriteriaId":"E0299F4A-A027-430C-9A53-AFEF9022960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=284a92899602daa4a7f429e61849e794569310b5","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=7b2d314a61fd0e12f47c62996cb49ec0d1ba747a","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb22f812b31858e519411f57747d39bd8","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37114","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/bugs/cve/2009-3605","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491840","source":"secalert@redhat.com"},{"url":"https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.10.5-1ubuntu2.4.diff.gz","source":"secalert@redhat.com"},{"url":"https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.8.7-1ubuntu0.4.diff.gz","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7731","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=284a92899602daa4a7f429e61849e794569310b5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=7b2d314a61fd0e12f47c62996cb49ec0d1ba747a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=9cf2325fb22f812b31858e519411f57747d39bd8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/bugs/cve/2009-3605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.10.5-1ubuntu2.4.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/ubuntu/+archive/primary/+files/poppler_0.8.7-1ubuntu0.4.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3606","sourceIdentifier":"secalert@redhat.com","published":"2009-10-21T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función PSOutputDev::doImageL1Sep en Xpdf v3.02pl4  y Poppler v0.x, usado en n kdegraphics KPDF, podría permitir a atacantes remotos la ejecución de código de su elección a través de un documento PDF manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*","matchCriteriaId":"0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*","matchCriteriaId":"9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*","matchCriteriaId":"BD38AC59-7518-40FB-BC29-EC64142DE682"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"F7D4E256-FF91-47BA-B1D4-940FB2D970AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C52995D0-0986-427F-B37D-2F6726EA330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"B91206CA-7EBE-4E64-9A49-D7EC0D051012"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"BFD43644-7F02-42AF-8EC3-C326A13E2F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"81FE2E6F-44B2-42D5-B986-D1FE2B510968"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0A605079-3705-4E2C-8F6D-C21B4D875817"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3ABBD590-8092-4920-BBC7-F3ACB9CCC900"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"14D812D5-BC8B-4907-AA70-F8D7F982A8DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"}]}]}],"references":[{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37023","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37042","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37159","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39938","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023029","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36703","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526877","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53798","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cgit.freedesktop.org/poppler/poppler/diff/poppler/PSOutputDev.cc?id=7b2d314a61","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3607","sourceIdentifier":"secalert@redhat.com","published":"2009-10-21T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"la función create_surface_from_thumbnail_data en glib/poppler-page.cc  en Poppler v0.x, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente la ejecución de código de su elección  a través de un documento PDF manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap). NOTA: algunos de los detalles han sido obtenidos a partir de información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the version of poppler as shipped with Red Hat Enterprise Linux 5.","lastModified":"2009-10-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.90:*:*:*:*:*:*:*","matchCriteriaId":"F0213390-08FA-4E04-835B-8BE0FC61B464"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.91:*:*:*:*:*:*:*","matchCriteriaId":"0B304657-740A-4F8D-99CD-22E283FEE6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"8B2CD8A0-2DBA-4AC9-A97D-D4DAEB6C7A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C52995D0-0986-427F-B37D-2F6726EA330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"B91206CA-7EBE-4E64-9A49-D7EC0D051012"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"BFD43644-7F02-42AF-8EC3-C326A13E2F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"81FE2E6F-44B2-42D5-B986-D1FE2B510968"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0A605079-3705-4E2C-8F6D-C21B4D875817"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3ABBD590-8092-4920-BBC7-F3ACB9CCC900"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"14D812D5-BC8B-4907-AA70-F8D7F982A8DD"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37054","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37159","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36718","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526924","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53801","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/commit/?id=c839b706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3608","sourceIdentifier":"secalert@redhat.com","published":"2009-10-21T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función ObjectStream::ObjectStream  en XRef.cc en Xpdf  y Poppler, usado en GPdf, kdegraphics KPDF, y CUPS pdftopf y teTeX, podría permitir a atacantes remotos ejecutar código de su elección a través de un documento PDF manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*","matchCriteriaId":"0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*","matchCriteriaId":"9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*","matchCriteriaId":"BD38AC59-7518-40FB-BC29-EC64142DE682"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"F7D4E256-FF91-47BA-B1D4-940FB2D970AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.12.0","matchCriteriaId":"C16CA37E-F28E-47E6-B77B-4CB0A859F831"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C52995D0-0986-427F-B37D-2F6726EA330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"B91206CA-7EBE-4E64-9A49-D7EC0D051012"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"BFD43644-7F02-42AF-8EC3-C326A13E2F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"81FE2E6F-44B2-42D5-B986-D1FE2B510968"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0A605079-3705-4E2C-8F6D-C21B4D875817"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3ABBD590-8092-4920-BBC7-F3ACB9CCC900"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:*","matchCriteriaId":"1833267E-3B18-4CF8-B996-6226D5439F5F"},{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"E4A9A98B-5E37-4938-9506-927E0C8FACB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"},{"vulnerable":false,"criteria":"cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:*","matchCriteriaId":"87CCAA71-B817-48A0-81C0-9E4DC4953C9C"}]}]}],"references":[{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37028","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37034","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37051","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37054","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37061","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37079","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37159","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39938","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023029","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2009-016.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36703","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2926","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526637","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53794","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1513.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1513.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3609","sourceIdentifier":"secalert@redhat.com","published":"2009-10-21T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read."},{"lang":"es","value":"Desbordamiento de entero en la función ImageStream::ImageStream  en Stream.cc en Xpdf v3.02pl4 y Poppler v0.12.1, usado en GPdf, kdegraphics KPDF, y CUPS pdftops, permite a atacantes remotsos provocar una denegación de servicio (caída de aplicación) a través de un documento PDF manipulado que provoca un deferencia a puntero nulo o un desbordamiento de búfer fuera del límite (over-read)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:*","matchCriteriaId":"0BC500DA-7B3F-4CD5-BB0E-B244000CD19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:*","matchCriteriaId":"9D5D9CEA-0707-46FC-AEC3-9EC540B22BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:*","matchCriteriaId":"BD38AC59-7518-40FB-BC29-EC64142DE682"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:*","matchCriteriaId":"15D08CFD-BEE1-4DEE-926D-F4291F88224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D244903F-5407-4C35-AE2C-1A05D3C227D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:*","matchCriteriaId":"F7D4E256-FF91-47BA-B1D4-940FB2D970AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:*:*:*:*:*:*:*:*","versionEndIncluding":"0.12.0","matchCriteriaId":"C16CA37E-F28E-47E6-B77B-4CB0A859F831"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E23EBF88-10DE-4EA6-9F0E-F33C88541F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"54F75CFD-3523-4017-992C-4FA6406D49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DB116A19-6436-40BE-B5C6-32C22D888B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4C1429-593B-47B6-AC84-832F2296FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"18240BA6-3390-4925-AC25-DA4C42397CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3090A142-2240-4A8D-A122-C037931A277C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFD63240-4599-4212-8AF2-7C4089CA9D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3C7EE965-EE3F-4B17-AF38-FA3AA0B11164"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE488E5-B3D9-4723-ABBA-A8753EC2DA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1259C59E-517F-40BE-8BA6-01AB76257C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63C92F1C-3005-4EA6-B9C0-2BC2E3D611D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"576152B4-9ACD-4C4E-B423-4A5EF44332D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"322F9E62-6A74-4805-8F6B-9C61739B2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F51C453F-6A87-49FB-83F6-22316F28161F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"75F532F0-6653-4275-A85A-BD9A9A611E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4CC7300E-0CBE-47FD-A241-B4B4F0164EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"255102DA-A2C0-4795-9539-B4CBD587554A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"349B06F1-772A-4A12-A7B9-EA220ED96D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"B779800A-FF4B-47DD-B56F-77D10D6A335C"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"178680C2-DB1B-4250-9B6E-6ADABA60DE44"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FCA9036F-92DA-45C2-9FBC-DE03444D34F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B6855B98-DAA2-4850-A765-2F4D6D93A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4743EC55-B61D-4C1A-9ED7-060268F2DB27"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"8CD4454E-3D2B-4582-B5E5-0317A6417654"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"96402B67-A7A8-44E3-914E-A10A69FAD735"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"66C608C8-F382-4D6B-A638-98763C1CBB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"21F0F4E0-91B7-4B1F-BFA9-829101A7F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"22287102-80B1-4E1F-85E4-488B020A51E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FF3030D6-DE07-418B-AB40-87C85FCA3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3583D56-F653-457A-B1F8-25842A15CB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"6EEA5DBB-5A80-439E-A135-77CB40772916"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"D4A5C43B-3978-4D0A-8166-A99622106781"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"2A940AF2-A7CA-408F-86E2-797C7BA8A6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"AA56CB7C-E7B3-4F0B-8BEB-F133FAF0D6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6323ED7A-6FE8-4885-B743-3E2F82ECA08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"90D3345C-2D35-413C-B6F9-C308BC7C2AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"26216EEC-26B7-41C8-ADFB-64D2EA8DAA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D3618D-A183-4B09-9CA2-8D622C3486DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"A88294D9-563E-4AB3-9FE6-971F43B052B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"1A39F672-B238-4B21-A48E-5121771949F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"58A5D199-E952-44B5-B5E5-170040FA813E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"349B4B75-32E2-49FB-9606-8B057AFA2E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"55A8D058-224E-467E-AB61-06F90B541F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"77C47EDD-2212-4259-8229-FF05E1A7B5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"C52995D0-0986-427F-B37D-2F6726EA330D"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"B91206CA-7EBE-4E64-9A49-D7EC0D051012"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"BFD43644-7F02-42AF-8EC3-C326A13E2F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"81FE2E6F-44B2-42D5-B986-D1FE2B510968"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"0A605079-3705-4E2C-8F6D-C21B4D875817"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"3ABBD590-8092-4920-BBC7-F3ACB9CCC900"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:glyph_and_cog:pdftops:*:*:*:*:*:*:*:*","matchCriteriaId":"1833267E-3B18-4CF8-B996-6226D5439F5F"},{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:gpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"E4A9A98B-5E37-4938-9506-927E0C8FACB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:kde:kpdf:*:*:*:*:*:*:*:*","matchCriteriaId":"41EF2714-DEC9-407F-9D1B-EF2A4D8B4DC3"}]}]}],"references":[{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com"},{"url":"http://poppler.freedesktop.org/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37023","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37028","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37034","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37051","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37054","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37061","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37079","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37159","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39327","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39938","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023029","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0755.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36703","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2926","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526893","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53800","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1513.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl4.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://poppler.freedesktop.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274030-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021706.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0755.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ubuntu.com/usn/USN-850-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-850-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1501.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1503.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1513.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00750.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00784.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3610","sourceIdentifier":"secalert@redhat.com","published":"2009-11-10T01:30:00.217","lastModified":"2023-11-07T02:04:29.553","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3695.  Reason: This candidate is a duplicate of CVE-2009-3695.  Notes: All CVE users should reference CVE-2009-3695 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3611","sourceIdentifier":"secalert@redhat.com","published":"2009-10-26T16:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots."},{"lang":"es","value":"common/snapshots.py en Back In Time (también conocido como backintime) v0.9.26 cambia ciertos permisos al valor 0777 antes de eliminar los ficheros en una copia de seguridad antigua de un punto de restauración, lo que permite a usuarios locales obtener información sensible mediante la lectura de esos ficheros, o interferir con la integridad de la copia de seguridad modificando ficheros que están compartidos a través de puntos de restauración.\r\n"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:le-web:backintime:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"E6A8AFD9-1CE5-4985-911E-648A7206B365"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=289047","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125553645511436&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125554894700336&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520210","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00821.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00823.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=289047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125553645511436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125554894700336&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00821.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00823.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2009-3612","sourceIdentifier":"secalert@redhat.com","published":"2009-10-19T20:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2005-4881."},{"lang":"es","value":"La función tcf_fill_node en net/sched/cls_api.c del subsistema netlink en el kernel de Linux v2.6.x hasta la v2.6.32-rc5, y v2.4.37.6 y anteriores, no inicializa un determinado miembro de la estructura tcm__pad2, lo que puede permitir a usuarios locales obtener información confidencial de la memoria del kernel a través de vectores de ataque sin especificar. NOTA: esta vulnerabilidad existe debido a una solución incompleta de CVE-2005-4881."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/CVE-2009-3612\n\nThis issue has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nA future kernel update in Red Hat Enterprise Linux 4 will address this flaw.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3 due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about the Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2009-12-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.37.6","matchCriteriaId":"93F6511F-D405-456D-B7B4-3F73EABDFA77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.32","matchCriteriaId":"0289F2BE-8029-4F64-961F-07D0857861B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*","matchCriteriaId":"37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc2:*:*:*:*:*:*","matchCriteriaId":"1C8471AA-44D7-4D19-82B6-C4B999C65F97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"25CBACD3-AFB7-410D-927F-0C1FF477D396"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp2:*:*:*:*:*:*","matchCriteriaId":"D3BEE9CB-F0AF-44B1-B454-1AE2F04D7299"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*","matchCriteriaId":"3DB8A616-865B-4E70-BA2E-BE5F0BA7A351"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c44316940404891d5082c63e79c256a","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://patchwork.ozlabs.org/patch/35412/","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/14/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/14/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/15/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/15/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528868","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c44316940404891d5082c63e79c256a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://patchwork.ozlabs.org/patch/35412/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/14/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/14/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/15/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/15/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3613","sourceIdentifier":"secalert@redhat.com","published":"2009-10-19T20:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping."},{"lang":"es","value":"La funcionalidad swiotlb en el controlador r8169 en drivers/net/r8169.c en el núcleo de Linux anterior a v2.6.27.22 permite a atacantes remotos provocar una denegación de servicio (agotamiento de espacio en la Unidad de Gestión de E/S de memoria y parada del sistema) mediante la utilización de una tramas grandes para una gran cantidad de tráfico de red, como se ha demostrado con un desbordamiento ping."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.27.21","matchCriteriaId":"45F60110-70D6-45AF-A52C-572DFB4EBB5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*","matchCriteriaId":"241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=9468","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125561712529352&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36706","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529137","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10209","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7377","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"secalert@redhat.com"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=9468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125561712529352&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1548.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3615","sourceIdentifier":"secalert@redhat.com","published":"2009-10-20T17:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client."},{"lang":"es","value":"El conponente OSCAR protocol en libpurple en Pidgin v2.6.3 y Adium anterior v1.3.7, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de datos de una lista de contactos manipulada para (1) ICQ y probablemete (2) AIM, como se ha demostrado con el cliente SIM IM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.6","matchCriteriaId":"AB1F576D-5609-4C06-BF75-53D7744E26A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0:*:*:*:*:*:*:*","matchCriteriaId":"55D44D7E-116F-488C-8566-F7EA78C847FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E8857D0-14C2-49F6-AE8F-287792895776"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56022448-6CEE-4DE9-BC5D-F3F401470257"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B9D4A6BA-AB30-4EFA-BF5E-9212CBF6B141"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B33448B4-31F3-434F-96D4-934D65BF65FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ED8C3F99-1E0C-4FDB-8E76-46CF6CBBA7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A7B851E0-5D86-4D7F-A1AD-903ADA6A2C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6B6DEA45-1C3C-432E-9746-F1C548C8E8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE2A0AA-BD45-4A8B-BB3C-D69BFDC7E363"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6A1C31-EA56-406F-AE65-10F838E4292B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7223E59A-FA39-4D8A-A48D-1ACCF0454703"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"45233B3A-A3A1-45C0-A9F4-548B076742F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6B5D964-9F9C-4EE0-AF9F-4FE64935D8AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5FAFC986-0E07-48D7-9B67-66B65CAA9AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EFA83F88-808F-4D8B-A33D-16994C9074A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3779F8B3-15A9-4FBC-9176-B9B3CAB39DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D2A75801-F3AD-49E5-B981-6158E9B8F598"},{"vulnerable":true,"criteria":"cpe:2.3:a:adium:adium:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D99412CA-98D5-46A9-84FE-0FA1D2FD841F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"EDDF8BD7-6D64-4894-8CA2-D6953E6833A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DBC2EBF3-73A7-4542-8E9C-47A4241A224C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF62072D-4956-4FE6-931E-E6EE9C49F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6499D8D5-0801-498C-BD4D-508506918CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73CC76CD-FF35-4B3A-9F1E-4E5A65963057"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F694A1FC-2F10-48F9-8E8D-C88A8E7397AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D22A117-78BE-4BAC-8A2A-6C00C9E3A4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"59E216BC-29E4-4C31-9CF0-DE22C2E84968"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD203F7-B983-4FDD-9837-D68D4F388A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CB90B7CB-1A11-45A8-B0BC-9B2143D84A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9C8E3CBA-2B33-49EF-9105-8DDBB938F519"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"72AA3282-CA7D-438C-A07C-A63392333630"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BEEFF420-2868-422B-BD22-9A5749C2398F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B139D83D-7D18-42C7-988C-2070B66CB943"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"047D9636-BCCE-4956-B5A3-D276F1C2EF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"5A8A794E-E1CB-4F0F-9739-D625E94EA566"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E64EEEA0-89CE-46BD-B387-A96521E76A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F6E96AA3-B567-4E97-979A-D97A4F786D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"09C407C0-99A2-477B-87CF-6BE9F7B367E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EBEF0457-39D8-465B-86A7-8DFA44A1F820"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E593BFF0-650E-4EDB-BF65-C509C8A807C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E39468D5-1378-4441-B927-5C34C85B18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"C80012AD-8F49-4287-8AEC-C21AC5774CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7CB3CF0C-BECE-4685-A370-96424B0A5703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"3D5BC0FC-2F7D-41BE-83E4-AEDACD71F427"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A8321D92-B935-4C2A-81B1-5984BFF4FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"43679F1D-E48D-483B-A67B-9DB8C641F649"}]}]}],"references":[{"url":"http://developer.pidgin.im/ticket/10481","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/wiki/ChangeLog","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37017","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37072","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:085","source":"secalert@redhat.com"},{"url":"http://www.pidgin.im/news/security/?id=41","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36719","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2949","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2951","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1020","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53807","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18388","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9414","source":"secalert@redhat.com"},{"url":"http://developer.pidgin.im/ticket/10481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/viewmtn/revision/info/781682333aea0c801d280c3507ee25552a60bfc0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://developer.pidgin.im/wiki/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pidgin.im/news/security/?id=41","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3616","sourceIdentifier":"secalert@redhat.com","published":"2009-10-23T18:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities."},{"lang":"es","value":"Múltiples vulnerabilidades de uso anterior a la liberación en vnc.c del servidor VNC en QEMU v0.10.6 y anteriores, permite a usuarios del sistema anfitrión ejecutar código de su elección en el sistema hospedado, estableciendo una conexión desde el cliente VNC y a continuación (1) desconectando durante la transferencia de datos, (2) enviando un mensaje utilizando tipos de datos enteros incorrectos, o (3) utilizando el protocolo Fuzzy Screen Mode, relativo a una doble liberación de vulnerabilidades."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.1,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10.6","matchCriteriaId":"27270035-8337-4B8E-8305-951D7063F2D1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=198a0039c5","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=753b405331","source":"secalert@redhat.com","tags":["Broken Link","Exploit"]},{"url":"http://marc.info/?l=qemu-devel&m=124324043812915","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHEA-2009-1272.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/5","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/8","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.securityfocus.com/bid/36716","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501131","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=505641","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508567","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=198a0039c5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=753b405331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://marc.info/?l=qemu-devel&m=124324043812915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHEA-2009-1272.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.securityfocus.com/bid/36716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=505641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2009-3617","sourceIdentifier":"secalert@redhat.com","published":"2009-10-20T17:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función AbstractCommand::onAbort src/AbstractCommand.cc en aria2 anterior a la v1.6.2, cuando \"loggin\" está activado, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de aplicación) a través de los especificadores de formato de cadena en una URI de descarga. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"0408A5B5-1B7B-4984-8634-6FDDA2D73583"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"C997A75D-C176-4A6A-8997-D6F74BBBDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.4:*:*:*:*:*:*:*","matchCriteriaId":"540A0ACA-6E2A-45DF-B3C4-37F1DB6AA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.5:*:*:*:*:*:*:*","matchCriteriaId":"D4FDABE1-D6AA-498A-9E75-29D4E2231565"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"23D21ADF-742F-4B5E-BE76-2D79BD090A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"FE3B0EB4-BEE9-4EAA-B347-376C04550098"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"CD4F3902-615A-4EDD-BB81-03841E686C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.0\\+1:*:*:*:*:*:*:*","matchCriteriaId":"B371FD0E-49A2-4A74-A047-16AC1FC5FB85"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"3427790A-846E-4F5D-B28A-3C175AEF6ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.1\\+1:*:*:*:*:*:*:*","matchCriteriaId":"FAAADBF9-839C-486D-821B-460DCEDAF548"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"378CD567-A5CD-48E2-BCA6-5E08335685EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.2\\+1:*:*:*:*:*:*:*","matchCriteriaId":"4BEF6895-6555-48B2-8FED-2747BAAEB9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"5260D845-B580-49B7-8BEB-8EE3F0919BFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.14.0\\+1:*:*:*:*:*:*:*","matchCriteriaId":"744775BE-7FAF-4FFC-8F68-81C2B6FD71FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"19533000-5927-478D-A786-CB63E93948B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"70F2BDE0-CC4B-4C1C-9FFA-D4E3F5AA37DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1\\+1:*:*:*:*:*:*:*","matchCriteriaId":"973F6E89-D2E8-4C92-B534-43248587840D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1\\+2:*:*:*:*:*:*:*","matchCriteriaId":"3BC24DE0-7D6B-4284-A73A-E5982B49ACB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"06C66BAD-4A07-4FAB-9BFF-50FB37D06647"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"6798D1A2-F961-48C5-A2F6-086A3A2DB456"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"55F425AA-624E-41A9-83CD-19F913E39C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"B3D3774F-C55C-40B6-A85D-DBD5DAE666C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.2:*:*:*:*:*:*:*","matchCriteriaId":"E8315C60-79EF-4484-B54B-2E7E1FEB5FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E9ED06F2-8669-4C90-BB22-5DDE01DFD4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"371FD10B-90BB-417C-A37E-F5C50EFAEF22"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D1FC3F03-3890-4466-8A0A-B020460B8507"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"40FAE4C8-7F23-4E67-BA06-276BC3A5DE62"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CE6E9CCB-8DCF-41F8-A4DE-5B4D139E719A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E0594B76-BE61-451D-8512-B9C81F476372"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D248E3DA-D9FF-4A08-9C63-9B72AE946AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3BBCD24D-B863-4516-A7DD-1264D5D81BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4F72DB79-0C01-481A-A442-4489C5C859B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4166DE3D-3019-434F-9EC5-C74057F91F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"836C565A-B1EB-4ED1-BCFB-EF60CFE9ED8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F4EB136B-45C1-439D-810F-E234267A44EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F49FE022-33DC-4F05-8D64-1E64816E391F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2C0ECA2A-043C-4C36-9618-E3EAE45AA5CD"}]}]}],"references":[{"url":"http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NEWS?revision=1586","source":"secalert@redhat.com"},{"url":"http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/src/AbstractCommand.cc?r1=1539&r2=1572","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125568632528906&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125572053420493&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/59087","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31732","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2960","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529342","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://fedorahosted.org/rel-eng/ticket/2495","source":"secalert@redhat.com"},{"url":"http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NEWS?revision=1586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/src/AbstractCommand.cc?r1=1539&r2=1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125568632528906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125572053420493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://fedorahosted.org/rel-eng/ticket/2495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3618","sourceIdentifier":"secalert@redhat.com","published":"2009-11-10T02:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in viewvc.py in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the view parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en viewvc.py en ViewVC v1.0 anterior a v1.0.9 y v1.1 anterior a v1.1.2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"view\". NOTA: algunos de estos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"007977CF-1BF9-4713-AFDF-50DEE2530AD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"793F6DB3-A6C2-4813-BD2D-AF34D85F6CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B6F2BC5-D099-427C-9513-75551ABF1997"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4748AA05-D2ED-4365-83AE-74CD33592B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"91ADB624-1826-405C-BB1E-3D286ED03D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A4AE31C7-1929-48A4-8A3A-860A110E4820"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F71721BF-9010-4595-96F8-CF499B0FFE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"96AD0DD2-206B-4231-B09E-9B83F6E0239E"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8ECD4F7E-011C-4E92-9D8E-AC378B204C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4FE78493-E4EB-4555-BA56-A29AFE680B56"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/56997","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36292","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36311","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.2/CHANGES?revision=2235&pathrev=HEAD","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/10","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2257","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52430","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00557.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00566.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/56997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.2/CHANGES?revision=2235&pathrev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00557.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00566.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3619","sourceIdentifier":"secalert@redhat.com","published":"2009-11-10T02:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ViewVC 1.0 before 1.0.9 and 1.1 before 1.1.2 has unknown impact and remote attack vectors related to \"printing illegal parameter names and values.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en ViewVC v1.0 anterior a v1.0.9 y v1.1 anterior a v1.1.2, tiene un impacto y vectores de ataque desconocidos relacionado con la \"impresión ilegal de nombres de parámetros y valores\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"007977CF-1BF9-4713-AFDF-50DEE2530AD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"793F6DB3-A6C2-4813-BD2D-AF34D85F6CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B6F2BC5-D099-427C-9513-75551ABF1997"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4748AA05-D2ED-4365-83AE-74CD33592B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"91ADB624-1826-405C-BB1E-3D286ED03D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A4AE31C7-1929-48A4-8A3A-860A110E4820"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F71721BF-9010-4595-96F8-CF499B0FFE6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"96AD0DD2-206B-4231-B09E-9B83F6E0239E"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8ECD4F7E-011C-4E92-9D8E-AC378B204C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4FE78493-E4EB-4555-BA56-A29AFE680B56"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36292","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36311","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.2/CHANGES?revision=2235&pathrev=HEAD","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/10","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2257","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00557.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00566.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.2/CHANGES?revision=2235&pathrev=HEAD","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/16/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00557.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00566.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3620","sourceIdentifier":"secalert@redhat.com","published":"2009-10-22T16:00:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls."},{"lang":"es","value":"El controlador ATI Rage 128 (también conocido como r128), en el Kernel de Linux anterior a v2.6.31-git11 no verifica de forma adecuada el estado de inicialización del \"Concurrent Command Engine (CCE)\", lo que permite a usuarios locales provocar una denegación de servicio (desreferenciación de puntero nulo y caída del sistema) o posiblemente obtener privilegios a través de llamadas ioctl sin especificar."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"},{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.31.1","matchCriteriaId":"7C1AF884-1852-4B68-AAC8-91E97CCE1201"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:mrg_realtime:1.0:*:*:*:*:*:*:*","matchCriteriaId":"04A20072-7DB7-4079-9456-E2CE98F888E7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*","matchCriteriaId":"3E135846-8959-4D7E-A8E6-07F0EC15F010"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp3:*:*:*:*:*:*","matchCriteriaId":"6E0623AA-88D4-4E53-AD50-C9AF8E0B0247"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"513797E6-FCE6-4E84-9B66-202541F9601E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*","matchCriteriaId":"FA1E7EFF-1CCA-473B-8D5C-30D59C26DC70"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:-:*:*:*","matchCriteriaId":"105187A7-2AFE-46F9-B0A9-F09C7E10BFBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*","matchCriteriaId":"79A35457-EAA3-4BF9-A4DA-B2E414A75A02"}]}]}],"references":[{"url":"http://article.gmane.org/gmane.linux.kernel/892259","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c4626937406756d7","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36707","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.31-git11.log","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:088","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/1","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/3","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0882.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36824","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529597","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6763","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes"]},{"url":"http://article.gmane.org/gmane.linux.kernel/892259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7dc482dfeeeefcfd000d4271c4626937406756d7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/36707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.31-git11.log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes"]}]}},{"cve":{"id":"CVE-2009-3621","sourceIdentifier":"secalert@redhat.com","published":"2009-10-22T16:00:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket."},{"lang":"es","value":"net/unix/af_unix.c en el kernel de Linux v2.6.31.4 y anteriores permite a usuarios locales causar una denegación de servicio (el servidor se bloquea) creando un socket  abstract-namespace AF_UNIX y realizando una operación de apagado en ese socket, para luego luego realizar una serie de operaciones de conexión en dicho socket."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3621\n\nThis issue has been rated as having moderate security impact.\n\nIt was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1671.html , https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively.\n\nThis issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/","lastModified":"2009-12-17T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.4","matchCriteriaId":"D3D7715A-8ED8-48D3-B467-CFC9430B6D45"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp2:*:*:*:*:*:*","matchCriteriaId":"14DF1463-F23F-465F-8A35-D550A7438CB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"F140C5CF-5141-4F8D-B667-522A698AC632"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp2:*:*:*:*:*:*","matchCriteriaId":"02E6A767-B9A5-4054-BE70-286E0A464248"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"A516C153-239B-4F41-88B4-8B8D4F92115C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7426B5AC-D0FD-424D-9A1E-0875C2102D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/19/50","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/54678/","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37086","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/2","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/4","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/10/19/50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/54678/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3622","sourceIdentifier":"secalert@redhat.com","published":"2009-10-23T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated \"UTF-8\" substrings, related to the mb_convert_encoding function in PHP."},{"lang":"es","value":"Vulnerabilidad de complejidad algorítmica en wp-trackback.php en WordPress anteriores a v2.8.5 permite a atacantes remotos provocar una denegación de servicio (Consumo de CPU y cuelgue del servidor) a través de un valor largo en el parámetro \"title\" en conjunción con un parámetro \"charset\" compuesto por muchas subcadenas \"UTF-8\" separadas por coma, está relacionado con la función mb_convert_encoding en PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.4","matchCriteriaId":"62D2F1D6-CDAE-4870-8C54-319811E9A93C"}]}]}],"references":[{"url":"http://codes.zerial.org/php/wp-trackbacks_dos.phps","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://marc.info/?l=oss-security&m=125612393329041&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125614592004825&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Oct/263","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37088","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023072","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59077","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2986","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530056","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53884","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://codes.zerial.org/php/wp-trackbacks_dos.phps","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=oss-security&m=125612393329041&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125614592004825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2009/Oct/263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/2986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3623","sourceIdentifier":"secalert@redhat.com","published":"2009-10-30T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request."},{"lang":"es","value":"La función lookup_cb_cred en fs/nfsd/nfs4callback.c en el subsistema nfsd4 en el kernel de Linux en versiones anteriores v2.6.31.2 intenta acceder a la cache de credenciales incluso cuando un cliente especifica la autenticación AUTH_NULL, lo que permite a atacantes remotos producir una denegación de servicio (desreferencia a un puntero NULL y una caída de sistema) a través de una petición de montado de NFSv4."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, or Red Hat Enterprise MRG. Those versions do not include the upstream patch that introduced this vulnerability.","lastModified":"2009-11-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.1","matchCriteriaId":"024C81CA-BF5B-4699-A209-CA97F64CC586"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80fc015bdfe1f5b870c1e1ee02d78e709523fee7","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc73","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125618753029631&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125624036516377&w=2","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530269","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80fc015bdfe1f5b870c1e1ee02d78e709523fee7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc73","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125618753029631&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125624036516377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3624","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands."},{"lang":"es","value":"La función get_instantiation_keyring de security/keys/keyctl.c en el subsistema KEYS del kernel de Linux en versiones anteriores a la v2.6.32-rc5 no mantiene apropiadamente la cuenta de referencias de un \"keyring\", lo que permite a usuarios locales obtener privilegios o provocar una denegación de servicio (OOPS) a través de vectores de ataque que involucran llamadas a esta función sin especificar un \"keyring\" por ID, como se ha demostrado por series de \"keyctl request2\" y comandos \"keyctl list\"."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, or Red Hat Enterprise MRG. Those versions do not include the upstream patch that introduced this vulnerability.","lastModified":"2009-11-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"1760FDC9-BB79-4299-8A6D-482085EE5BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"56EEB157-5037-4EAD-8625-35B91B167111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc4:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"9856A8C4-B306-4E06-81F8-540F92D7CD4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2.27.13:*:*:*:*:*:*:*","matchCriteriaId":"241FF5F5-516B-4F77-ABAF-787DFEFEC1AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*","matchCriteriaId":"EC36074C-C310-4341-8B3C-BB34E572BF94"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*","matchCriteriaId":"ECCC155A-C68C-44A8-8C44-7979C9889C34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*","matchCriteriaId":"040EBFDA-7F8D-428F-BB69-BB1B52BB868B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*","matchCriteriaId":"69E703D2-8CC9-421A-9728-75E8FCFB4FE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc5:*:*:*:*:*:*","matchCriteriaId":"D25556CC-C522-4C79-99DD-9A7329697B8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.32:*:*:*:*:*:*:*","matchCriteriaId":"AA036609-ADD3-4903-AB9D-E8BF81CFC776"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.33:*:*:*:*:*:*:*","matchCriteriaId":"38F9E122-994B-4276-9FCF-A8E4D2D06D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.34:*:*:*:*:*:*:*","matchCriteriaId":"7A15720C-3BDF-4343-B270-2575978293EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.35:*:*:*:*:*:*:*","matchCriteriaId":"FB5ADCFA-2CD8-4A00-AFEC-B84F7E0015A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.36:*:*:*:*:*:*:*","matchCriteriaId":"6EA2EE9B-27FD-49FE-8665-159DABA0E3C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.37:*:*:*:*:*:*:*","matchCriteriaId":"4C81C5F8-2224-4D84-B7C0-E18421276AFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:git7:*:*:*:*:*:*","matchCriteriaId":"CBEBA0F6-5453-4993-932B-BB8941DCC5CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*","matchCriteriaId":"0D5FC0A9-A78A-4D09-BDCC-208AFC899824"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*","matchCriteriaId":"7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21279cfa107af07ef985539ac0de2152b9cba5f5","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125619420905341&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125624091417161&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37086","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com"},{"url":"http://twitter.com/spendergrsec/statuses/4916661870","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21279cfa107af07ef985539ac0de2152b9cba5f5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125619420905341&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125624091417161&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/4916661870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3625","sourceIdentifier":"secalert@redhat.com","published":"2009-10-26T16:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en www/index.php en Sahana v0.6.2.2, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección al utilizar caracteres .. (punto punto) en el parámetro mod."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sahana:sahana:0.6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0E7010EC-FC88-4F06-B7EB-2D361BA54DA2"}]}]}],"references":[{"url":"http://sahana.cvs.sourceforge.net/viewvc/sahana/sahana-phase2/www/index.php?r1=1.83&r2=1.84","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=5d9043b70910191044l4bb0178fs563a5128a0f5db01%40mail.gmail.com&forum_name=sahana-maindev","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/3","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/6","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36826","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530255","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://fedorahosted.org/rel-eng/ticket/2635","source":"secalert@redhat.com"},{"url":"http://sahana.cvs.sourceforge.net/viewvc/sahana/sahana-phase2/www/index.php?r1=1.83&r2=1.84","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=5d9043b70910191044l4bb0178fs563a5128a0f5db01%40mail.gmail.com&forum_name=sahana-maindev","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://fedorahosted.org/rel-eng/ticket/2635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3626","sourceIdentifier":"secalert@redhat.com","published":"2009-10-29T14:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match."},{"lang":"es","value":"Perl v5.10.1 permite a atacantes dependientes de contexto producir una denegación de servicio (caida de aplicación) a través de un carácter UTF-8 con un codepoint largo invalido, lo que no es adecuadamente gestionado cuando se produce una coincidencia de expresiones regulares."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of perl as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-10-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*","matchCriteriaId":"4D67E248-C0B8-4713-9D9A-47097885A2C7"}]}]}],"references":[{"url":"http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973","source":"secalert@redhat.com"},{"url":"http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37144","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023077","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/8","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/59283","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36812","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3023","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53939","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225","source":"secalert@redhat.com"},{"url":"http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3627","sourceIdentifier":"secalert@redhat.com","published":"2009-10-29T14:30:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character."},{"lang":"es","value":"La función decode_entities en util.c en HTML-Parser anteriores a v3.63 permite a atacantes dependientes de contexto causar una denegación de servicio (bucle infinito) a través de una referencia a un carácter numérico SGML, lo que inicia la generación de un carácter UTF-8 invalido."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue does not affect Red Hat Enterprise Linux 3, 4, or 5.\n\nThis flaw can only lead to a denial of service if perl-HTML-Parser is used in conjunction with perl 5.10.1. If perl-HTML-Parser is used with earlier versions of perl, this flaw does not lead to a denial of service.","lastModified":"2009-11-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:*:*:*:*:*:*:*:*","versionEndIncluding":"3.54","matchCriteriaId":"584FAFFA-0414-4349-975B-2E904D38B860"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.00:*:*:*:*:*:*:*","matchCriteriaId":"A9E67465-54D2-4AA2-BB67-603B1D49083F"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.1:*:*:*:*:*:*:*","matchCriteriaId":"65FE25CE-94D5-4A61-B034-346BEC994A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.2:*:*:*:*:*:*:*","matchCriteriaId":"65B96867-60F7-4109-BD82-7A2278C5C349"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.3:*:*:*:*:*:*:*","matchCriteriaId":"87D32366-FFD9-452F-BD80-557AB3615E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.4:*:*:*:*:*:*:*","matchCriteriaId":"AC159D89-ED63-4807-B408-20B62E5CC384"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.5:*:*:*:*:*:*:*","matchCriteriaId":"281FF9B4-1940-4750-B284-01BE9076D32B"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.6:*:*:*:*:*:*:*","matchCriteriaId":"44FF2B73-3FA0-4A24-ABDB-329453F08AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.41:*:*:*:*:*:*:*","matchCriteriaId":"92AF09B1-9199-446B-B578-43027372E32A"},{"vulnerable":true,"criteria":"cpe:2.3:a:derrick_oswald:html-parser:1.42:*:*:*:*:*:*:*","matchCriteriaId":"D803A4BE-CD19-4495-8048-6F56FB52836B"}]}]}],"references":[{"url":"http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37155","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/9","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36807","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3022","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530604","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53941","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3628","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element."},{"lang":"es","value":"El subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2 permite a atacantes remotos autenticados determinar la clave de encriptación a través de una entrada modificada al elemento de formulario tt_content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9297C028-4875-4370-8A47-E5BB4DC04A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C8B51D2-B985-405E-8D87-1572D5096F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A9AB9DE7-3AB0-4B5B-9825-486111386852"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D954FE3D-B766-4D39-B0CA-31A24EDB362C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59AE3831-400B-4974-9C69-6787CF03433A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*","matchCriteriaId":"66333A00-5D7D-4467-9495-79D715EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"71E7C6DF-C63B-4B16-9107-3C15490951D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AEAD468-F39F-4B92-9ABD-F43C636B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6154F853-6DAF-4A34-8019-CB5BA87CCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"67CF0EA5-E984-40BE-BA90-1C85568A0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"395C04FB-3390-4E97-B2F1-BEF9C42F15E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E53B002D-18FD-4C6A-97C0-AA9C83ABD382"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3885B69F-B9C0-488F-8775-E8E801418E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A3390E31-A149-4D83-94D2-63AF63D02A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53917","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3629","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permiten a usuarios remotos autenticados inyectar codigo de script web o código HTML a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.13","matchCriteriaId":"8684CAE0-A8FB-493D-BC2B-25FF092EE93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"71C92B1F-20A4-4354-A85D-F9B96DA09970"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:beta:*:*:*:*:*:*","matchCriteriaId":"FAF2DAA1-356C-4C77-B673-6F5F5817352E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E28432FD-6A1B-479F-866E-7F6F762C2207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:beta1:*:*:*:*:*:*","matchCriteriaId":"DAFC7A20-5CC0-4B64-93C6-609D44FE3874"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.10:*:*:*:*:*:*:*","matchCriteriaId":"720AF20D-C44C-48B2-9627-BA49A330F89D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.11:*:*:*:*:*:*:*","matchCriteriaId":"2AD4EC2E-A886-4FF3-9A20-54BFBA35C10E"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53918","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3630","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a \"frame hijacking\" issue."},{"lang":"es","value":"El subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2 permite a usuarios autenticados remotos situar sitios web de su elección en los \"framesets\" (conjuntos de marcos) de backend a través de parámetros modificados, relacionado con un asunto de \"frame hijacking\" (secuestro de marco)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9297C028-4875-4370-8A47-E5BB4DC04A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C8B51D2-B985-405E-8D87-1572D5096F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A9AB9DE7-3AB0-4B5B-9825-486111386852"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D954FE3D-B766-4D39-B0CA-31A24EDB362C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59AE3831-400B-4974-9C69-6787CF03433A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*","matchCriteriaId":"66333A00-5D7D-4467-9495-79D715EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"71E7C6DF-C63B-4B16-9107-3C15490951D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AEAD468-F39F-4B92-9ABD-F43C636B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6154F853-6DAF-4A34-8019-CB5BA87CCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"67CF0EA5-E984-40BE-BA90-1C85568A0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"395C04FB-3390-4E97-B2F1-BEF9C42F15E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E53B002D-18FD-4C6A-97C0-AA9C83ABD382"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3885B69F-B9C0-488F-8775-E8E801418E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A3390E31-A149-4D83-94D2-63AF63D02A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53920","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3631","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename."},{"lang":"es","value":"El subcomponente Backend de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2, cuando la extensión DAM o la subida por ftp está activada, permite a usuarios autenticados remotos ejecutar comandos de su elección a través metacaracteres de shell en un nombre de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9297C028-4875-4370-8A47-E5BB4DC04A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C8B51D2-B985-405E-8D87-1572D5096F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A9AB9DE7-3AB0-4B5B-9825-486111386852"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D954FE3D-B766-4D39-B0CA-31A24EDB362C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59AE3831-400B-4974-9C69-6787CF03433A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*","matchCriteriaId":"66333A00-5D7D-4467-9495-79D715EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"71E7C6DF-C63B-4B16-9107-3C15490951D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AEAD468-F39F-4B92-9ABD-F43C636B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6154F853-6DAF-4A34-8019-CB5BA87CCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"67CF0EA5-E984-40BE-BA90-1C85568A0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"395C04FB-3390-4E97-B2F1-BEF9C42F15E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E53B002D-18FD-4C6A-97C0-AA9C83ABD382"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3885B69F-B9C0-488F-8775-E8E801418E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A3390E31-A149-4D83-94D2-63AF63D02A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53923","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3632","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la funcionalidad de edición del \"frontend\" (portal de usuario) tradicional del subcomponente \"Frontend Editing\" (edición del portal de usuario) de TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos ejecutar comandos SQL de su elección a través parámetros sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.13","matchCriteriaId":"8684CAE0-A8FB-493D-BC2B-25FF092EE93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"71C92B1F-20A4-4354-A85D-F9B96DA09970"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:beta:*:*:*:*:*:*","matchCriteriaId":"FAF2DAA1-356C-4C77-B673-6F5F5817352E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1:rc1:*:*:*:*:*:*","matchCriteriaId":"E28432FD-6A1B-479F-866E-7F6F762C2207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:beta1:*:*:*:*:*:*","matchCriteriaId":"DAFC7A20-5CC0-4B64-93C6-609D44FE3874"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.10:*:*:*:*:*:*:*","matchCriteriaId":"720AF20D-C44C-48B2-9627-BA49A330F89D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.11:*:*:*:*:*:*:*","matchCriteriaId":"2AD4EC2E-A886-4FF3-9A20-54BFBA35C10E"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53924","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3633","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función de API t3lib_div::quoteJSvalue en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque sin especificar relacionados con el algoritmo de sanitización."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9297C028-4875-4370-8A47-E5BB4DC04A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C8B51D2-B985-405E-8D87-1572D5096F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A9AB9DE7-3AB0-4B5B-9825-486111386852"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D954FE3D-B766-4D39-B0CA-31A24EDB362C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59AE3831-400B-4974-9C69-6787CF03433A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*","matchCriteriaId":"66333A00-5D7D-4467-9495-79D715EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"71E7C6DF-C63B-4B16-9107-3C15490951D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AEAD468-F39F-4B92-9ABD-F43C636B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6154F853-6DAF-4A34-8019-CB5BA87CCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"67CF0EA5-E984-40BE-BA90-1C85568A0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"395C04FB-3390-4E97-B2F1-BEF9C42F15E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E53B002D-18FD-4C6A-97C0-AA9C83ABD382"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3885B69F-B9C0-488F-8775-E8E801418E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A3390E31-A149-4D83-94D2-63AF63D02A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53925","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3634","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el subcomponente \"Frontend Login Box\" (también conocido como felogin) de TYPO3 v4.2.0 hasta la v4.2.6 permite a usuarios remotos inyectar codigo de script web o código HTML a través de parámetros sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53926","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3635","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential."},{"lang":"es","value":"El subcomponente \"Install Tool\" (herramienta de instalación) en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2 permite a usuarios remotos obtener acceso usando únicamente el hash md5 como credencial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9297C028-4875-4370-8A47-E5BB4DC04A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C8B51D2-B985-405E-8D87-1572D5096F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A9AB9DE7-3AB0-4B5B-9825-486111386852"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D954FE3D-B766-4D39-B0CA-31A24EDB362C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59AE3831-400B-4974-9C69-6787CF03433A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*","matchCriteriaId":"66333A00-5D7D-4467-9495-79D715EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"71E7C6DF-C63B-4B16-9107-3C15490951D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AEAD468-F39F-4B92-9ABD-F43C636B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6154F853-6DAF-4A34-8019-CB5BA87CCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"67CF0EA5-E984-40BE-BA90-1C85568A0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"395C04FB-3390-4E97-B2F1-BEF9C42F15E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E53B002D-18FD-4C6A-97C0-AA9C83ABD382"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3885B69F-B9C0-488F-8775-E8E801418E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A3390E31-A149-4D83-94D2-63AF63D02A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53928","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3636","sourceIdentifier":"secalert@redhat.com","published":"2009-11-02T15:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el subcomponente \"Install Tool\" (herramienta de instalación) en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de parámetros sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9297C028-4875-4370-8A47-E5BB4DC04A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C8B51D2-B985-405E-8D87-1572D5096F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"A9AB9DE7-3AB0-4B5B-9825-486111386852"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D954FE3D-B766-4D39-B0CA-31A24EDB362C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59AE3831-400B-4974-9C69-6787CF03433A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.09:*:*:*:*:*:*:*","matchCriteriaId":"66333A00-5D7D-4467-9495-79D715EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"71E7C6DF-C63B-4B16-9107-3C15490951D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1AEAD468-F39F-4B92-9ABD-F43C636B1145"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6154F853-6DAF-4A34-8019-CB5BA87CCA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"67CF0EA5-E984-40BE-BA90-1C85568A0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.0:*:*:*:*:*:*:*","matchCriteriaId":"395C04FB-3390-4E97-B2F1-BEF9C42F15E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.3.x:*:*:*:*:*:*:*","matchCriteriaId":"349BDDAD-35AE-44B6-9623-1ABAAFA16D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5:*:*:*:*:*:*:*","matchCriteriaId":"C553D36B-B446-4D63-B37F-FA32D1E5A524"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.5.x:*:*:*:*:*:*:*","matchCriteriaId":"33152254-3B0B-4413-90F3-72A8B1ADDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.6.x:*:*:*:*:*:*:*","matchCriteriaId":"78413B61-AAB7-485D-BD24-C8A6D7631281"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E53B002D-18FD-4C6A-97C0-AA9C83ABD382"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3885B69F-B9C0-488F-8775-E8E801418E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.7.x:*:*:*:*:*:*:*","matchCriteriaId":"CD6EAF89-59F9-4D06-A7AE-175816BB7E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A3390E31-A149-4D83-94D2-63AF63D02A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:3.8.x:*:*:*:*:*:*:*","matchCriteriaId":"CFF63F45-3E42-4DD6-ABD3-BA67D04C8A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25EAE65C-1E17-48CD-B48C-E0BC09FB6596"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"501A9157-044A-4856-8092-418D7329EED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4EA47174-9BC4-4B74-8618-6A7B0773553B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5A13146E-EC04-4354-9123-BC7CB292C66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F27B173-8D10-47F7-8450-F8808A918295"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0D1FAD0A-6B98-476B-BCD2-361996CA1C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE992D57-AF82-4BF0-96E8-98110C0AEBF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7A9A484F-C34D-4885-8125-D9C8725EEB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DCCB2DE6-4407-4E40-8574-9C813183565B"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E19647A4-C422-42D0-863B-5B6E0B08BFAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C842A284-8360-4DE4-8D05-8082D0A0AA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3A4600DD-C9CA-4D71-BD31-12FE40A14D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC2F89D7-D34C-4ADD-8A9E-34C37122C3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"273F2E33-0655-46DE-9397-E16658B4BD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3B8F7039-4117-4D53-ABE8-99C10518D351"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"161E310F-F2D8-40B3-8390-8C52ACDD0B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6B33D32-4D59-4768-A2C6-9DC7CD30F5E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4679B5DF-25FA-40E9-A322-DF1FF1BC7E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96D69530-AE74-4012-B522-01D0B6B01662"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5514D17F-95A5-48C5-9F91-554F8D3C3DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E46E35EC-FF7B-4510-A5F2-FC230B7477B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5A671ED2-91AA-4447-8996-A8A16FE753A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"4219A367-8431-4A72-AF73-ED2A853B14E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74F10D45-FA29-4534-8789-201D194C46B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"878A3B3A-91B6-4EB3-995C-46CEF6FE4343"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"51B3DD65-A811-47DD-ADC6-015EE9BC2A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"B8E06499-FC41-4B7F-B76E-37FA423F17C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D93919E9-B3E8-483E-A701-D87570127207"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B1326B-CB9E-4B40-85BD-05AF52E6A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDEAF6A-8A99-4872-98CC-12BD54515B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"8D8185B9-D244-43B3-9DF1-FF137A2108DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7FFAD319-DDFC-499F-86AB-141FBE435F6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E068CC16-6995-40C6-BA24-9CA334C4CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E3B79B49-B4A1-472D-9F6E-BF9ADA3E2EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"26DF36E3-785F-4515-8999-BF48A255907F"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F143436A-848B-443F-95E2-B20BC2403CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"EB5B21D3-7955-450F-8357-A37905B963B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:*:*:*:*:*:*:*","matchCriteriaId":"386C2885-7543-43F0-9680-B57898C4F118"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:4.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"231CD899-2DC5-42CD-A4F9-4D00C2C11159"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53929","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632856206736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125633199111438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3638","sourceIdentifier":"secalert@redhat.com","published":"2009-10-29T14:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function."},{"lang":"es","value":"Desbordamiento de entero en la función kvm_dev_ioctl_get_supported_cpuid en arch/x86/kvm/x86.c en el subsistema KVM en el kernel de Linux anteriores a v2.6.31.4 permite  a usuarios locales conseguir un impacto desconocido a través de una petición KVM_GET_SUPPORTED_CPUID a la función kvm_arch_dev_ioctl."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of KVM as shipped with Red Hat Enterprise Linux 5. KVM is only supported on AMD64/x86_64 architecture on Red Hat Enterprise Linux 5.","lastModified":"2009-10-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.3","matchCriteriaId":"13FE8DEC-E0B0-4912-BDBF-19F2DDC0BD3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125628917011048&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=125632898507373&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36803","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530515","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53934","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125628917011048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=125632898507373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3639","sourceIdentifier":"secalert@redhat.com","published":"2009-10-28T14:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"El módulo mod_tls en ProFTPD anterior v1.3.2b, y v1.3.3 anterior v1.3.3rc2, cuando la opción dNSNameRequired TLS es activada, no maneja adecuadamente el caracter '/0' en un nombre de dominio, dentro del campo Subject Alternative Name de un certificado cliente X.509, lo que permite a atacantes remotos eludir las restricciones cliente-hostname a través de un certificado manipulado concedido por una Autoridad Certificadora legítima, esta relacionado con CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:*:a:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"8ADC9F57-ADAE-4620-97ED-EBF96BEBF3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0629F25F-B9C6-4FC7-B67E-E6B38E59E60B"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"185E727C-E4DB-4713-866D-957D20838D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"8B43EDB7-7B67-43E0-AAE9-F8120C6E607C"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.2:rc2:*:*:*:*:*:*","matchCriteriaId":"F615B39A-5E30-454B-B851-14C5735578E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.2:rc4:*:*:*:*:*:*","matchCriteriaId":"5884F593-C977-4AFC-9428-6A915D962C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.3:rc1:*:*:*:*:*:*","matchCriteriaId":"29FBDF30-0E17-46DA-8548-DEE5E3CD9EAB"}]}]}],"references":[{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3275","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125630966510672&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125632960508211&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37131","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37219","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1925","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:288","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36804","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530719","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53936","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00642.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00649.html","source":"secalert@redhat.com"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=3275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125630966510672&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125632960508211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00642.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00649.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3640","sourceIdentifier":"secalert@redhat.com","published":"2009-10-29T14:30:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via a call to the kvm_vcpu_ioctl function."},{"lang":"es","value":"La función update_cr8_intercept en arch/x86/kvm/x86.c en el subsistema KVM en el kernel de Linux anteriores v2.6.32-rc1 no gestiona adecuadamente la ausencia del \"Advanced Programmable Interrupt Controller (APIC)\", lo que permite a usuarios locales producir una denegación de servicio (desreferencia a puntero nulo y caída del sistema) o posiblemente conseguir privilegios a través de una llamada a la funcion kvm_vcpu_ioctl."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of KVM as shipped with Red Hat Enterprise Linux 5 as it does not contain the patch that introduced this vulnerability (upstream commit f0a3602c).","lastModified":"2009-10-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc8:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"9E10CEA2-5392-4E77-9A17-A66448508C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd42b53a7e01a2ac3253ef31fef74cb5af","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125626965020571&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125640417219385&w=2","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36805","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53947","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd42b53a7e01a2ac3253ef31fef74cb5af","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125626965020571&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125640417219385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3641","sourceIdentifier":"secalert@redhat.com","published":"2009-10-28T14:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol."},{"lang":"es","value":"Snort anterior v.2.8.5.1, cuando la opción -v es activada, permite a atacantes remotos causar una denegación de servicio (caída aplicación) a través de un paquete Ipv6 manipulado que usa el protocolo (1) TCP o (2)ICMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.3.5","matchCriteriaId":"22D46C54-E778-4B2F-83ED-FE2F5BDB21A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EB5D24B-44B7-4BA1-B988-BBB3342F0C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"AB872377-FADD-4603-8B5E-B07FB623303F"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"12D3E0FE-0557-4B8F-A97B-1FBE6030C8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B1FB45D9-AD03-43F0-8349-48E22BEB4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"42E91565-395C-49C3-9EFA-8C9102542FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9F219B8B-4B47-41AB-838C-D0CAA9C1E700"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"76ADDBD4-6870-4B3A-9113-FF74F91FA60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"EE7F86C7-1A9D-4B7B-B928-4CCA836B898B"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"117FE0B7-B508-4394-8CB3-9511D89DD011"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6F14606E-17DC-472F-AC73-C2EB809DA6A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C55576D9-78CE-4A7E-8671-E1D680823090"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"9B0FA051-0F54-4555-BEE3-902A0C6AE7BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"29313843-C4EB-4EF7-99C9-F8D79D8DF1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D28E9711-C9BB-4351-A6C3-0DDB26BC4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8F630B-DD44-4095-B90D-2D18CD321580"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CE956C2B-8647-497B-A4C1-05A526629B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"634BE41F-E9DF-4C32-8604-F607745EBF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.7_beta1:*:*:*:*:*:*:*","matchCriteriaId":"9C41D0F1-BDB9-4F50-81CF-F5DF07770DDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4E1A93B0-6B57-4D7C-8CEB-A90435502A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F2D004-B87F-4EA4-A798-1991B5BD632E"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"80841CC2-D80D-4961-A995-81D6B7684733"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A17D59E1-7B1D-4401-AE39-949331320E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B443015A-8E47-478C-8567-D56095D6B015"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"394CC663-F87F-4100-ABDD-BA92B3AE7567"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:2.8.3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B8309F3D-16B2-4061-B08A-E5A6F06E9623"}]}]}],"references":[{"url":"http://dl.snort.org/snort-current/release_notes_2851.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125649553414700&w=2","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2009/Oct/299","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/37135","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023076","source":"secalert@redhat.com"},{"url":"http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/25/5","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/59159","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36795","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3014","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530863","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53912","source":"secalert@redhat.com"},{"url":"http://dl.snort.org/snort-current/release_notes_2851.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125649553414700&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/Oct/299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/37135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/25/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3642","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en la funcionalidad de Registro de llamadas de FrontRange HEAT v8.01 permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) UserName y (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontrange:heat:8.01:*:*:*:*:*:*:*","matchCriteriaId":"F8CB680E-FF9C-44C6-950D-08248926F578"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/heat-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/heat-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3643","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to the (1) LIST and (2) NLST commands, a differnt issue than CVE-2008-5626 and CVE-2006-5728."},{"lang":"es","value":"Dxmsoft XM Easy Personal FTP Server v5.8.0 permite a atacantes remotos provocar una denegación de servicio a través de un argumento demasaido largo discusión a los comandos (1) LIST y (2) NLST. Se trata de un problema diferente al de CVE-2008-5626 y CVE-2006-5728."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C970FC7F-E24F-4E06-8120-9ACE057739EA"}]}]}],"references":[{"url":"http://osvdb.org/58542","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/XM-ftp-dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36941","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53643","source":"cve@mitre.org"},{"url":"http://osvdb.org/58542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0910-exploits/XM-ftp-dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3644","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente de Joomla! \"Soundset\" (com_soundset) v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro cat_id a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soundset:com_soundset:1.0:*:*:*:*:*:*:*","matchCriteriaId":"37F20D59-B58B-445C-96FF-5BB5ACC5468F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/joomlasoundset-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36597","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0910-exploits/joomlasoundset-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3645","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the group_id parameter in a group_members action to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el componente de Joomla! JoomlaCache Resume CB Builder (com_cbresumebuilder), permite a atacantes remotos ejecutar comandos SQL a través del parámetro group_id en una acción group_members sobre index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlacache:com_cbresumebuilder:*:*:*:*:*:*:*:*","matchCriteriaId":"77852647-BDDC-4649-9491-F7954EF90E13"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/joomlacbrb-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0910-exploits/joomlacbrb-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3646","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name."},{"lang":"es","value":"InterVations NaviCOPA Web Server v3.01 permite obtener el código fuente de una página web a atacantes remotos a través de una solicitud HTTP con la adición de ::$DATA después del nombre de archivo HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intervations:navicopa_web_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"12C5D193-3446-4A3A-8CB3-54AF5D282B05"}]}]}],"references":[{"url":"http://secunia.com/advisories/33766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9694","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58386","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3647","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en emaullinks.php en YABSoft Mega File Hosting Script (alias MFH o MFHS) v1.2 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro moudi. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:mega_file_hosting_script:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3A06E0F8-5235-4C71-9473-C75051AF5C00"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36413","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53642","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3648","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.madirish.net/?article=251\r\n\r\n\r\nPatch\r\n\r\nApplying the following patch mitigates these threats.\r\n\r\n--- service_links/service_links.module\t2008-02-26 12:01:27.000000000 -0500\r\n+++ service_links/service_links.module\t2009-10-02 06:33:21.000000000 -0400\r\n@@ -35,11 +35,12 @@ function service_links_admin_settings() \r\n     '#title' => t('Where to show the service links'),\r\n     '#description' => t('Set the node types and categories you want to display links for.'),\r\n   );\r\n+  $names = array_map('filter_xss', node_get_types('names'));\r\n   $form['where_to_show_the_links']['service_links_node_types'] = array(\r\n     '#type' => 'checkboxes',\r\n     '#title' => t('Node types'),\r\n     '#default_value' => variable_get('service_links_node_types', array()),\r\n-    '#options' => node_get_types('names'),\r\n+    '#options' => $names,\r\n   );\r\n   if (module_exists('taxonomy')) {\r\n     $form['where_to_show_the_links']['service_links_category_types'] = array(\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Service Links\" v6.x-1.0, permite inyectar HTML o scripts we aleatorios a usuarios remotos autenticados, con permisos para \"administrar tipos de contenido \", a través de vectores no especificados cuando se muestran los nombres de tipo de contenido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apsivam:service_links:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF61CB4-6946-493A-AB36-BF7DBBBE08BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://www.madirish.net/?article=251","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/36584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53633","source":"cve@mitre.org"},{"url":"http://www.madirish.net/?article=251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/36584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3649","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2.0.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a new_topic action."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en forums/index.php en Power Bulletin Board (PBBoard) v2.0.2 (y posiblemente versiones anteriores) permite a atacantes remotos inyectar HTML o scripts web a través del parámetro id en una acción new_topic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pbboard:pbboard:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84BEF64F-3D81-48B5-84B4-C9F7FBD67F13"}]}]}],"references":[{"url":"http://www.sec-area.com/?p=141%23more-141&gtlang=en","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/506992/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.sec-area.com/?p=141%23more-141&gtlang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/506992/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3650","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Dex\" en sus versiones v5.x-1.0 y anteriores y v6.x-1.0-RC1 y anteriores, permite a atacantes remotos inyectar HTML o scripts web aleatorios a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_strauss:dex:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0","matchCriteriaId":"6EB24706-C26D-4261-AFD3-E5C7C82A8AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_strauss:dex:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"022D18EA-B294-492D-9892-40F858966E40"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/592394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53569","source":"cve@mitre.org"},{"url":"http://drupal.org/node/592394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3651","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the \"Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la opción \"Monitor Browsers\" del módulo de Drupal \"Browscap\" antes de v5.x-1.1 y v6.x-1.1, permite a atacantes remotos inyectar HTML o scripts web a través de la cabecera HTTP User-Agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mikeryan:browscap:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.0","matchCriteriaId":"EA279A02-7B75-4616-9084-E184B1D9BE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mikeryan:browscap:4.7.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"B1BD11BA-AB45-4741-B4C1-B03178862400"},{"vulnerable":true,"criteria":"cpe:2.3:a:mikeryan:browscap:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"EC919445-9754-4AEE-98E5-490D52B0CE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:mikeryan:browscap:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"BBE23509-BD29-4659-AC28-3BA78F029698"},{"vulnerable":true,"criteria":"cpe:2.3:a:mikeryan:browscap:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"3F49DB0A-E41D-4322-ABE2-2FD7D4AA9E55"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/592262","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592264","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592272","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58444","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36557","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53571","source":"cve@mitre.org"},{"url":"http://drupal.org/node/592262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3652","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095."},{"lang":"es","value":"Una vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Organic Groups (OG)\" en sus versiones v5.x-7.x antes de v5.x-7.4, v5.x-8.x antes de v5.x-8.1, y v6.x-1.x antes de v6.x-1.4, permite inyectar HTML o scripts web a usuarios remotos autenticados, con el permiso \"crear o editar nodos de grupo\",  a través de la cabecera HTTP User-Agent. Se trata de un problema diferente al de CVE-2008-3095."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0:*:*:*:*:*:*:*","matchCriteriaId":"B90F1F5A-AE01-477D-9C26-F6F1300651D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"F769B727-9FEE-4B57-ACAC-CA4C86D118C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc2:*:*:*:*:*:*:*","matchCriteriaId":"41151443-9846-4961-A255-A8E602BD8577"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"256EDA03-31F0-4AFC-91C6-3E4B7951C394"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"BD8CD09A-A0C9-4375-AD57-775EC42742CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"3A19B1B9-1A0C-41D4-9511-AA77A37C87D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.1:*:*:*:*:*:*:*","matchCriteriaId":"AF1411A6-18E7-4E10-B8A2-E3691654DFED"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.2:*:*:*:*:*:*:*","matchCriteriaId":"91FF0124-BB8D-47C3-A0D9-93EC49808F41"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.3:*:*:*:*:*:*:*","matchCriteriaId":"CAF6197F-1411-47CE-81AF-B14994205DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:5.x-8.0:*:*:*:*:*:*:*","matchCriteriaId":"878827FB-3379-4685-977E-DCB0110E6229"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"1C30366D-E552-47BA-BE65-592CCDAFFD3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"75EC00B9-8722-4361-9757-FC90E91C09BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"7523E3F8-571C-4CC7-96A9-A4A7323B3EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc2:*:*:*:*:*:*:*","matchCriteriaId":"CEE30251-B0EA-4A32-BBD3-39FD0F6DDB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"6BFD1AA9-A5F0-4373-9020-E69324224664"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"2B067F9C-0C3A-4704-915C-69AE6F7705B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"BCE71C59-7C3D-488B-B497-2C8C99FFE750"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc6:*:*:*:*:*:*:*","matchCriteriaId":"F7D58CC3-38E9-48D0-B0DD-49B7A3B3F7B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc7:*:*:*:*:*:*:*","matchCriteriaId":"6829D3FA-E07F-4541-8555-F5D7070519B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc8:*:*:*:*:*:*:*","matchCriteriaId":"FA7E15C8-6406-48C6-BAD4-EE999D62375E"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.0-rc9:*:*:*:*:*:*:*","matchCriteriaId":"8565EBF3-3524-4B02-8445-A55A0C24ABE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"24763B2D-97C2-4C05-B51E-B674D00D745F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"074960A4-8356-419F-87AF-68FA413F1A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:organic_groups:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"99A24FF3-0E21-4BE8-81E6-3A830275652F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/592358","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592410","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592412","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58445","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36923","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36558","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53570","source":"cve@mitre.org"},{"url":"http://drupal.org/node/592358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/592414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3653","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with \"administer site configuration\" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output."},{"lang":"es","value":"Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados(XSS) en la interfaz \"enlaces adicionales\" en el modulo de Drupal \"XML Sitemap\" v5.x-1.6, permite inyectar HTML o scripts web a usuarios remotos autenticados con el permiso \"administrar la configuración del sitio\", a través de vectores no especificados relacionados con la ruta de enlace de salida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darren_oh:xml_sitemap:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"2AADA67F-6B98-4B7E-86F0-FE4426F610D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/591724","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/591732","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36556","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53572","source":"cve@mitre.org"},{"url":"http://drupal.org/node/591724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/591732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3654","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo de Drupal \"Boost\" antes de v6.x-1.03, permite a atacantes remotos para crear directorios webroot nuevos a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.01","matchCriteriaId":"C776FC76-983B-417E-8D2D-9C6030EB828B"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"499F1230-CC5E-4E7C-97DB-5A86D2EB201E"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"E733ACBC-95F7-4A9A-B5F6-A2C130FB393E"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-alpha1:*:*:*:*:*:*:*","matchCriteriaId":"0CCB8ED0-136E-4A8C-9BD5-56AF647C4255"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-alpha2:*:*:*:*:*:*:*","matchCriteriaId":"5BC5F2A5-2B28-4568-938B-9F45A65D2090"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-alpha3:*:*:*:*:*:*:*","matchCriteriaId":"6028B533-8FEE-480F-A085-C9A378CF192E"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-alpha4:*:*:*:*:*:*:*","matchCriteriaId":"6A56D7F3-D21D-44E7-A199-67F62ECABD52"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"C4004B5C-1535-4D09-AB6F-10594705A841"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"2E1B5166-B9DF-4084-8177-3EC5FFC53E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"E97250B2-5A19-43D0-9480-5DC81CB167F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-rc2:*:*:*:*:*:*:*","matchCriteriaId":"215CBCF7-243E-4D42-BB4F-095A0D1C8C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"11099A30-D191-4031-88D5-5EBB5F8D8263"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"6F0E5BED-0B3F-4BEB-A64E-679C0B8577B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.0-rc5:*:*:*:*:*:*:*","matchCriteriaId":"A5DA28CF-0CC8-4D1E-8E6A-F3798C4688AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:316solutions:boost:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A83E0181-627C-41B6-8819-95DF2E066355"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/592470","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/592490","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36925","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36561","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53553","source":"cve@mitre.org"},{"url":"http://drupal.org/node/592470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/592490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3655","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the \"SITE SET TRANSFERPROGRESS ON\" FTP command."},{"lang":"es","value":"Rhino Software Serv-U v7.0.0.1 a v8.2.0.3 permite a atacantes remotos causar una denegación de servicio (mediante caída del servidor) a través de vectores no especificados relacionados con el comando FTP \"SITE SET TRANSFERPROGRESS ON\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CD3CE83-3E37-464C-A511-CDF7E735E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"243CCCC8-9860-4440-9E80-12668270F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6D6DD1-D98B-46C1-921C-9B045C234377"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"480EE765-C9AF-495E-810E-4153DC250F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"955439D8-7449-4E82-9EB5-6379002E6D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6B101C-1058-45D7-A0B9-26C616691F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F7EC7360-6AD8-4689-A927-57881C4BF974"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CF3956BE-95DE-4656-B987-796053032621"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"391013B0-D304-49AF-9FAB-89E9A4E16686"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1A4BCC0E-1F1B-4956-BE5D-67FF788652EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B9637A62-B1A9-41D1-905C-DA200DB5A4DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E7FE5332-0928-4743-832D-D7E9AB86B5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EF325569-354C-4C70-A6EC-A8BFF1FF2AB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/36873","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.serv-u.com/releasenotes/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3656","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados en el modulo de Drupal Shared Sign-On v5.x y v6.x, permite a atacantes remotos secuestrar la autenticación de los usuarios arbitrarios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tim_nelson:shared_sign-on:5.x:*:*:*:*:*:*:*","matchCriteriaId":"38931259-3FF4-4781-BEF4-0BBCC4D9BE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_nelson:shared_sign-on:6.x:*:*:*:*:*:*:*","matchCriteriaId":"BB2E4918-88A5-4771-A554-3717AC5A3CF8"}]}]}],"references":[{"url":"http://drupal.org/node/592488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36563","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53559","source":"cve@mitre.org"},{"url":"http://drupal.org/node/592488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3657","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack web sessions via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión del módulo de Drupal Shared Sign-On 5.x y 6.x, permite a atacantes remotos secuestrar sesiones web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tim_nelson:shared_sign-on:5.x:*:*:*:*:*:*:*","matchCriteriaId":"38931259-3FF4-4781-BEF4-0BBCC4D9BE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_nelson:shared_sign-on:6.x:*:*:*:*:*:*:*","matchCriteriaId":"BB2E4918-88A5-4771-A554-3717AC5A3CF8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/592488","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36563","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53560","source":"cve@mitre.org"},{"url":"http://drupal.org/node/592488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3658","sourceIdentifier":"cve@mitre.org","published":"2009-10-09T14:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method."},{"lang":"es","value":"El control ActiveX Sb.SuperBuddy.1 (sb.dll) en America Online (AOL) v9.5.0.1 no gestiona adecuadamente la memoria, lo que permite a atacanates remotos generar una corrupción de memoria o posiblemente ejcutar codigo arbitrario a través de un argumento del método SetSuperBuddy debidamente modificado."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:superbuddy_activex_control:9.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A03F9C31-AFF9-4D6E-A7EC-AD9F14B70A78"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_aol_91_superbuddy.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/36919","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506889/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36580","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2812","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53614","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6704","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://retrogod.altervista.org/9sg_aol_91_superbuddy.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/36919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506889/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/2812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3659","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en file/stats.php en BS Counter v2.5.3 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanback:bs_counter:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BAC9759C-3404-4022-8632-9A2559FFAF76"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53236","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3660","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.  NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos PHP en libraries/database.php en Efront v3.5.4 y anteriores, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro \"path\". NOTA: esto es sólo una vulnerabilidad cuando el administrador no sigue las recomendaciones de seguridad en la documentación del producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"136730A5-4699-4292-89DF-AB19E8081FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC4945EB-C2DC-41FB-8B49-8F27D1EBF19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9648CD63-D34E-4298-8D54-2FF72C257477"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E993440A-7730-4540-B6BC-5CFC1636FE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B9A7A13D-A022-49A0-BED7-701D333724B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8802C5D3-64CD-4199-ABBC-F5AEE5AFDE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"BD62DC8C-619B-4B61-AFAC-B7F6AFCBEB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A230995D-9925-4774-9CFC-4329F756EE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"395AFAEC-9811-4CB8-A105-AB9B9C85DA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"E7699ABE-E6AB-490F-9D1E-34F1EE2467B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"964B61AA-BB5B-4B19-8077-0AD5415D4788"}]}]}],"references":[{"url":"http://forum.efrontlearning.net/viewtopic.php?f=1&t=1354&p=7174#p7174","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36411","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://forum.efrontlearning.net/viewtopic.php?f=1&t=1354&p=7174#p7174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2009-3661","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el componente de Joomla! \"DJ-catalog\" (com_djcatalog) permiten a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro \"id\" en una acción de showItem y (2) el parámetro cid en una acción show a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueconstantmedia:com_djcatalog:*:*:*:*:*:*:*:*","matchCriteriaId":"E576D60B-3985-44B8-BB8E-11ABCF47836E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://secunia.com/advisories/36696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.design-joomla.eu/joomla-news/dj-catalog-sql-bsql-injection-multiple-vulnerability-fix.html","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9693","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36412","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.design-joomla.eu/joomla-news/dj-catalog-sql-bsql-injection-multiple-vulnerability-fix.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3662","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a large number of crafted NOOP commands."},{"lang":"es","value":"FileCOPA FTP Server v5.01 permite a atacantes remotos causar una denegación de servicio (el servidor se bloquea) a través de un gran número de comandos NOOP modificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filecopa-ftpserver:ftp_server:5.01:*:*:*:*:*:*:*","matchCriteriaId":"BB79806B-2673-4FC2-BC3A-CD773C66B2B2"}]}]}],"references":[{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/36397.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36773","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36397","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/36397.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3663","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función h_readrequest en http.c en httpdx Web Server v1.4 permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código arbitrario a través de especificadores de formato de cadena en la cabecera Host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D490B4E8-E863-4856-8031-3E08FBED4E66"}]}]}],"references":[{"url":"http://httpdx.sourceforge.net/downloads/changelog.log","source":"cve@mitre.org"},{"url":"http://osvdb.org/58129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9657","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2654","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53205","source":"cve@mitre.org"},{"url":"http://httpdx.sourceforge.net/downloads/changelog.log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3664","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. (dot dot) in the (1) p and (2) s parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en index.php en Nullam blog v0.1.2 permiten incluir o ejecutar archivos arbitrarios a atacantes remotos a través de un .. (punto punto) en los parámetros (1) p y (2) s."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullam:nullam_blog:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AD96C6A6-3B35-4EA0-ABE4-6F026B9A6DA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36648","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9625","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57919","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506380/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53217","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506380/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3665","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en index.php en Nullam blog v0.1.2 permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros 1) \"i\" o (2) \"v\" en una acción de registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullam:nullam_blog:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AD96C6A6-3B35-4EA0-ABE4-6F026B9A6DA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36648","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9625","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506380/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53218","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506380/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3666","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote attackers to inject arbitrary web script or HTML via the e parameter in an error action."},{"lang":"es","value":"Ejecución de comandos en sitios cruzados (XSS) en index.php en Nullam blog v0.1.2 permite a atacantes remotos inyectar HTML o scripts weba través del parámetro \"e\" en una acción de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullam:nullam_blog:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AD96C6A6-3B35-4EA0-ABE4-6F026B9A6DA3"}]}]}],"references":[{"url":"http://secunia.com/advisories/36648","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9625","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/57921","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506380/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53216","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/57921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506380/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3667","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/index.php en AdsDX v3.05 permite a atacantes remotos ejecutar comandos SQL a través del campo nombre de usuario (UserName)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adsdx:adsdx:3.05:*:*:*:*:*:*:*","matchCriteriaId":"EF838B55-6A65-4B1A-BA15-5F381BFC1C58"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9696","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3668","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ardguest.php in Ardguest 1.8 allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Una ejecución de comandos en sitios cruzados (XSS) en ardguest.php en Ardguest v1.8 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:promosi-web:ardguest:1.8:*:*:*:*:*:*:*","matchCriteriaId":"0183A62A-237D-41E6-A5F6-4A38FF8CF592"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/ardguest-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0909-exploits/ardguest-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3669","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the idea_id parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente para Joomla! foobla Suggestions (com_foobla_suggestions) v1.5.11 permite a atacantes remotos ejecutar comandos SQL a través del parámetro idea_id a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foobla:com_foobla_suggestions:1.5.11:*:*:*:*:*:*:*","matchCriteriaId":"5B77BF8D-DF1C-4ED8-9E55-DB5A762AB4EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36425","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3670","sourceIdentifier":"cve@mitre.org","published":"2009-10-11T22:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en KSP Sound Player 2009 R2 y R2.1 permite a atacantes remotos ejecutar código arbitrario a través de una cadena larga en un archivo de lista de reproducción .m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ksplayer:ksp_sound_player:2009:r2:*:*:*:*:*:*","matchCriteriaId":"26BDE165-C0A3-42ED-8ECB-1C7546BB46B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ksplayer:ksp_sound_player:2009:r2.1:*:*:*:*:*:*","matchCriteriaId":"CE600CD7-7560-4AFC-ADFA-BFB6A044ABEC"}]}]}],"references":[{"url":"http://osvdb.org/57983","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9624","source":"cve@mitre.org"},{"url":"http://osvdb.org/57983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3671","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-3674."},{"lang":"es","value":"Microsoft Internet Explorer no maneja adecuadamente objetos en memoria, lo que permite a atacantes remotos ejecutar código de su elección accediendo a un objeto que (1) no fue inicializado adecuadamente o (2) es borrado, provocando una corrupción de memoria, conocido como \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-3674."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023293","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6382","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3672","sourceIdentifier":"secure@microsoft.com","published":"2009-12-02T11:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the single element in the returned list, and a change to the outerHTML property of this element, related to Cascading Style Sheets (CSS) and mshtml.dll, aka \"HTML Object Memory Corruption Vulnerability.\" NOTE: some of these details are obtained from third party information. NOTE: this issue was originally assigned CVE-2009-4054, but Microsoft assigned a duplicate identifier of CVE-2009-3672. CVE consumers should use this identifier instead of CVE-2009-4054."},{"lang":"es","value":"Microsoft Internet Explorer versiones 6 y 7 no controlan apropiadamente los objetos en la memoria que (1) no se inicializaron apropiadamente o (2) se eliminan, lo que permite a los atacantes remotos ejecutar código arbitrario por medio de vectores que implican una llamada al método getElementsByTagName para el nombre de etiqueta STYLE , selección del elemento único en la lista devuelta y un cambio a la propiedad outerHTML de este elemento, relacionados con Hojas de Estilos en Cascada (CSS) y mshtml.dll, también se conoce como \"HTML Object Memory Corruption Vulnerability\" Nota: algunos de estos detalles se obtienen de información de terceros. Nota: A este problema le fue asignado originalmente el CVE-2009-4054, pero Microsoft asignó un identificador duplicado de CVE-2009-3672. Los consumidores de CVE deben usar este identificador en lugar de CVE-2009-4054."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7AE15F6C-80F6-43A6-86DA-B92116A697A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*","matchCriteriaId":"BA99C751-91CB-43D4-93FF-1C12342CAF1E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/37448","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/515749","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/977981.mspx","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507984/100/0/threaded","source":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/37085","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023293","source":"secure@microsoft.com"},{"url":"http://www.symantec.com/connect/blogs/zero-day-internet-explorer-exploit-published","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3301","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6381","source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/37448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/515749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/security/advisory/977981.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507984/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/connect/blogs/zero-day-internet-explorer-exploit-published","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3673","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer v7 and v8 no maneja adecuadamente los objetos en memoria, lo que permite a atacantes remotos ejecutar código de su elección accediendo a un objeto que (1) no fue adecuadamente inicializado o (2) es borrado, desencadenando en una corrupción de memoria, conocido como \"Uninitialized Memory Corruption Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023293","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6519","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3674","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-3671."},{"lang":"es","value":"Microsoft Internet Explorer 8 no maneja de manera apropiada objetos en memoria, lo que permite a atacantes remotos ejecutar código de su elección accediendo a un objeto que (1) no fue iniciado adecuadamente o (2) está borrado, provocando una corrupción de memoria. También conocido como \"Vulnerabilidad Uninitialized Memory Corruption\", una vulnerabilidad diferente a CVE-2009-3671."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"7C684420-1614-4DAE-9BD9-F1FE9102A50F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*","matchCriteriaId":"E33796DB-4523-4F04-B564-ADF030553D51"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*","matchCriteriaId":"B2B19826-5516-4899-9599-F95D0A03FBCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*","matchCriteriaId":"4945F25F-2828-4D03-930B-A109BA73E00C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*","matchCriteriaId":"B8A32637-65EC-42C4-A892-0E599562527C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFF81F4B-7D92-4398-8658-84530FB8F518"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*","matchCriteriaId":"0A0D2704-C058-420B-B368-372D1129E914"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023293","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6570","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3675","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a denial of service (CPU consumption) via a malformed ISAKMP request over IPsec, aka \"Local Security Authority Subsystem Service Resource Exhaustion Vulnerability.\""},{"lang":"es","value":"LSASS.exe en Local Security Authority Subsystem Service (LSASS) en Microsoft Windows 2000 SP4, XP SP2 y SP3 y Server 2003 SP2 permite a atacantes remotos autenticados provocar una denegación de servicio (consumo de CPU) mediante una petición ISAKMP sobre IPsec malformada. También conocido como \"Vulnerabilidad de consumo de recuersos Local Security Authority Subsystem Service\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*","matchCriteriaId":"11AFB73A-1C61-40F1-8415-E4D40BB2699B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*","matchCriteriaId":"C0D88E59-0DDC-4AE0-83B8-0C9DADAB2733"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"4D5F7729-A095-43DF-BF2F-B4B6938087FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"57ECAAA8-8709-4AC7-9CE7-49A8040C04D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-069","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6639","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3676","sourceIdentifier":"secure@microsoft.com","published":"2009-11-13T15:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka \"SMB Client Incomplete Response Vulnerability.\""},{"lang":"es","value":"El cliente SMB en el kernel de Microsoft Windows Server 2008 R2 y Windows 7 permite que los servidores SMB remotos y los atacantes de tipo man-in-the-middle generen una denegación de servicio (bucle infinito y bloqueo del sistema) por medio de un (1) paquete de respuesta SMBv1 o (2) SMBv2 que contenga (a) un paquete de respuesta SMBv2 (1) valor de longitud inapropiado en un encabezado NetBIOS o (b) un campo de longitud adicional al final de este paquete de respuesta, también se conoce como \"SMB Client Incomplete Response Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*","matchCriteriaId":"36559BC0-44D7-48B3-86FF-1BFF0257B5ED"}]}]}],"references":[{"url":"http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx","source":"secure@microsoft.com"},{"url":"http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://news.cnet.com/8301-27080_3-10395891-245.html","source":"secure@microsoft.com"},{"url":"http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008/","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/134","source":"secure@microsoft.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37347","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/blog/66/","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/977544.mspx","source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1023179","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3216","source":"secure@microsoft.com","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7186","source":"secure@microsoft.com"},{"url":"http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://news.cnet.com/8301-27080_3-10395891-245.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/blog/66/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/977544.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1023179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3677","sourceIdentifier":"secure@microsoft.com","published":"2009-12-09T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the credentials in an MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication request, which allows remote attackers to access network resources via a malformed request, aka \"MS-CHAP Authentication Bypass Vulnerability.\""},{"lang":"es","value":"Internet Authentication Service (IAS) en Microsoft Windows 2000 SP4, XP SP2 y SP3, Server 2003 SP2, Vista Gold y SP1 y Server 2008 Gold no verifica de manera apropiada las credenciales en una petición de autenticación MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP), lo que permite a atacantes remotos tener acceso a recuersos de red mediante una petición malformada. También conocido como \"Vulnerabilidad de evasión de autenticación MS-CHAP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"},{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D3B5E4F-56A6-4696-BBB4-19DF3613D020"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*","matchCriteriaId":"7F6EA111-A4E6-4963-A0C8-F9336C605B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*","matchCriteriaId":"9CFB1A97-8042-4497-A45D-C014B5E240AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*","matchCriteriaId":"7F9C7616-658D-409D-8B53-AC00DC55602A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*","matchCriteriaId":"3852BB02-47A1-40B3-8E32-8D8891A53114"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*","matchCriteriaId":"1DD1D5ED-FE7C-4ADF-B3AF-1F13E51B4FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*","matchCriteriaId":"C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*","matchCriteriaId":"9B339C33-8896-4896-88FF-88E74FDBC543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://www.securitytracker.com/id?1023291","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"secure@microsoft.com","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6209","source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1023291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-342A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3691","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de entero en setnet32.exe v3.50.0.13752 en IBM Informix Client SDK v3.0 y v3.50 y Informix Connect Runtime v3.x permite a atacantes remotos ejecutar código a su elección a través de un archivo .nfx con un (1) HostSize manipulado, y probablemente (2) ProtoSize y (3) ServerSize, campo que lanza un desbordamiento de búfer basado en pila incluyendo un campos HostList manipulado. NOTA: algunos de estos detalles fueron obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_client_sdk:3.0:*:*:*:*:*:*:*","matchCriteriaId":"918D0408-FC1C-49AA-A528-08474DDE1D40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_client_sdk:3.50:*:*:*:*:*:*:*","matchCriteriaId":"C08DA2EA-0B5F-4FB8-9AC6-16CAF7CEAB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_connect_runtime:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDB963B2-9E8C-4CEB-A832-02F974ED44C3"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_ibm_setnet32.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022985","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58530","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36588","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53644","source":"cve@mitre.org"},{"url":"http://retrogod.altervista.org/9sg_ibm_setnet32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3692","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la herramienta de configuración VBoxNetAdpCtl en Sun VirtualBox v3.0.x anterior v3.0.8 en Solaris x86, Linux, y Mac OS X permite a usuarios locales obtener privilegios a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DEB28343-0302-4490-AD8C-C0C5F9B0527B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44193C48-D911-457D-B152-DE36E37AC6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D151779F-5C0C-449E-BBEE-32830C03B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6C043BB9-6FC5-427E-A7E3-B1D883E918A4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"F8222C41-435E-4017-A8C7-D7AB624A6D05"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"}]}]}],"references":[{"url":"http://secunia.com/advisories/36929","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022990","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268188-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/58652","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36604","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.virtualbox.org/wiki/Changelog","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2845","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53671","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/36929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268188-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/58652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.virtualbox.org/wiki/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3693","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \\.. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el control Vulnerabilidad de salto de directorio en (XUpload.ocx) en HP LoadRunner v9.5 permite a atacantes remotos crear archivos a su elección a través de la secuencia \\.. (barra invertida punto punto) en el tercer argumento en el método MakeHttpRequest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:persits:xupload:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7F151EAF-714D-4E3E-BBCF-26D416865D4B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:loadrunner:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11C140E6-D09F-4B81-A1E0-F7661855FC5D"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_hp_loadrunner.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36898","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://retrogod.altervista.org/9sg_hp_loadrunner.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3694","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg[prePath] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en config/config.php en ezRecipe-Zee v91, cuando register_globals es habilitado, permite a atacantes remotos incluir y ejecutar archivos locales a su elección a través de ..(punto punto) en el parámetro cfg[prePath]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdtmmsm:ezrecipe-zee:91:*:*:*:*:*:*:*","matchCriteriaId":"EAA953C8-F6F6-44A9-BC7C-58DD5D624C7A"}]}]}],"references":[{"url":"http://osvdb.org/58709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36992","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/expldownload/1/7380/1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53696","source":"cve@mitre.org"},{"url":"http://osvdb.org/58709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/expldownload/1/7380/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3695","sourceIdentifier":"cve@mitre.org","published":"2009-10-13T10:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression."},{"lang":"es","value":"Vulnerabilidad de complejidad algorítmica en la forma library en Django v1.0 anterior v1.0.4 y v1.1 anterior v1.1.1 permite a atacantes remotos causar una denegación de servicio (consumo CPU( a través de (1) EmailField (dirección email) o (2) URLField (URL)que provoca una gran cantidad de backtracking (vuelta a atrás) en una expresión regular."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F9023348-07A7-46E8-B45A-CC19563C5961"},{"vulnerable":true,"criteria":"cpe:2.3:a:djangoproject:django:1.1:*:*:*:*:*:*:*","matchCriteriaId":"56846659-96C8-497C-8404-3975E5B6385B"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550457","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1905","source":"cve@mitre.org"},{"url":"http://www.djangoproject.com/weblog/2009/oct/09/security/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/13/6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36655","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2871","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53727","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.djangoproject.com/weblog/2009/oct/09/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/13/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3696","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table."},{"lang":"es","value":"Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) en phpMyAdmin v2.11.x anterior a v2.11.9.6 y v3.x anterior a v3.2.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un nombre de tabla MySQL manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*","matchCriteriaId":"346DF9C7-40BE-44FD-BB5A-23F60616E97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B00F4D78-34C3-4934-8AFA-B7283388B246"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*","matchCriteriaId":"BDA3305E-CBC2-4469-923F-29EDA0402CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*","matchCriteriaId":"40CE5E7C-A965-492F-AE85-535C3E5F1B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"52F3DA64-2099-4A4F-9F38-F28255F47BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*","matchCriteriaId":"D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*","matchCriteriaId":"4EFCA67E-49E1-41FF-8B40-0209FF7893FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AF4BA83-50C0-4D90-9755-CC99A0FF987E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*","matchCriteriaId":"8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A26E7D37-FA99-42EA-8E19-ED2343E8E70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A982E152-5A20-4A3A-9A98-6CF9EEF9141A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA11353-1DD1-4593-84E8-1D3CBB2C2166"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0C19FB-60DF-440F-9A32-B9C62EBA9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9716FC40-F759-4D24-9604-7A2DB32A8F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.5:*:*:*:*:*:*:*","matchCriteriaId":"399A4EF5-FBDC-4856-89A5-821011E5E7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"613C697A-7CFF-4529-BD15-0ED4B753527A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:*:*:*:*:*:*:*","matchCriteriaId":"5899F407-1D31-452A-954C-966895ED7D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"EDFDEFBE-E512-4B0C-BBEC-8FCA29228DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"82DFC89B-F989-41C5-87E2-11A259E7F5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F21917E9-A820-4A5F-B38B-E3E0F79A380C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"CFAD5F7D-AA93-46B7-996B-B0761143B334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*","matchCriteriaId":"F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0284F72-2126-4BE8-90CA-82D2E4B3E96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C24AEFB1-7070-4F9B-BCDA-60F33C17D536"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"E8D735F4-165E-45C9-BF3B-9B618A8E3720"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"62E60F6F-C855-45BF-8840-398FA62626EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"F4EDCE1E-436A-4369-A734-7D620F5D89B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"98051D18-43E3-47D6-A8D4-AD9F0C8B0A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"78BC489B-E02E-4C6E-9EA1-EDC926EBA5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"1DD4EF8B-EA44-46F2-9C28-1D9D1D8BA2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"426ED65D-8B72-4106-A75E-1CB74106DD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCB1657-8C8F-44FE-8C1D-BF191DE70657"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"35F44A77-1169-4A0D-8864-EB7AF56324AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"AE0CFF97-8F8B-405D-BA59-B88C1C07A4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"BA3C0B46-3964-4A22-9AD4-4F4C8B4B4790"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=288899","source":"cve@mitre.org"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html","source":"cve@mitre.org"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306667","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306669","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125553728512853&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125561979001460&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:274","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36658","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2899","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528769","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53742","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=288899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125553728512853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125561979001460&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3697","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la funcionalidad generador de esquema PDF en phpMyAdmin v2.11.x anterior a v2.11.9.6 y v3.x anterior a v3.2.2.1 permite a atacantes remotos ejecutar comandos SQL a su elección a través de parámetros de la interfaz no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A98FF47C-8BA8-40E1-98F5-743CAD5DC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*","matchCriteriaId":"346DF9C7-40BE-44FD-BB5A-23F60616E97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B00F4D78-34C3-4934-8AFA-B7283388B246"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"962B49A9-380D-4B19-929B-50793EF621C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"AEC66C23-0133-4A39-B8C0-BCFF6F1E4D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9F52BC-AC6A-41BB-8276-6176FA068929"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*","matchCriteriaId":"BDA3305E-CBC2-4469-923F-29EDA0402CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC82C85-C9CF-424D-A07A-E841F7AC1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E0549FC5-B8E8-455D-867B-BAF321DE7004"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01DA6D40-2D3A-4490-B4E6-1367C585ED9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"9E351CA2-71DB-4025-8477-24DFE5349195"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"34AB221E-3DFA-43E4-9DBA-5565F81C0120"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCB774D1-8B5D-4118-8A5B-D7D14D7DE162"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C10F7C9-FAAA-4D05-8CB2-F5CB397F8410"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"54669C6E-C13B-4602-9CC1-53B24CB897FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*","matchCriteriaId":"40CE5E7C-A965-492F-AE85-535C3E5F1B17"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F8AAB78-8460-43BB-9326-0395F7496EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"2909BBB8-AB67-45DC-BAF0-015CBF97AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"52F3DA64-2099-4A4F-9F38-F28255F47BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3329598B-BEA5-4119-A558-DAA432239A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"80E1F897-861F-4E10-8E05-3C0DD60C7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5:rc1:*:*:*:*:*:*","matchCriteriaId":"D8CC1C1E-2B8C-4E59-B5ED-ED2957B46743"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EA5BCF7D-43FC-459C-8564-F0DCDC301FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DA6A75C9-C695-45DF-9526-8DEA506FB21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"03246EF4-F805-4C1C-9E6C-D85AFBD2D168"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"DE432385-9FC2-4EB3-9770-4CA9A2979019"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6:rc1:*:*:*:*:*:*","matchCriteriaId":"4EFCA67E-49E1-41FF-8B40-0209FF7893FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0AF4BA83-50C0-4D90-9755-CC99A0FF987E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"AE588389-7B4F-4949-BB7A-233C6BE31859"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E709A6B-B580-414B-8CEE-8FF99F8409C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.8:*:*:*:*:*:*:*","matchCriteriaId":"4B9AA2E6-CF57-40A1-9A9C-B704D8B009F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*","matchCriteriaId":"8DE75CBB-4EC2-4B97-9E86-28BB05DEA30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.0:*:*:*:*:*:*:*","matchCriteriaId":"A26E7D37-FA99-42EA-8E19-ED2343E8E70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A982E152-5A20-4A3A-9A98-6CF9EEF9141A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FFA11353-1DD1-4593-84E8-1D3CBB2C2166"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.3:*:*:*:*:*:*:*","matchCriteriaId":"FB0C19FB-60DF-440F-9A32-B9C62EBA9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9716FC40-F759-4D24-9604-7A2DB32A8F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9.5:*:*:*:*:*:*:*","matchCriteriaId":"399A4EF5-FBDC-4856-89A5-821011E5E7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7ED38B88-A4D2-40B4-A5A8-A9FD1BCAAF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"613C697A-7CFF-4529-BD15-0ED4B753527A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-alpha:*:*:*:*:*:*:*","matchCriteriaId":"5899F407-1D31-452A-954C-966895ED7D48"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0-beta:*:*:*:*:*:*:*","matchCriteriaId":"EDFDEFBE-E512-4B0C-BBEC-8FCA29228DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56908EFC-CCA8-4B22-8F8F-FB23C934D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"82DFC89B-F989-41C5-87E2-11A259E7F5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F21917E9-A820-4A5F-B38B-E3E0F79A380C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"400E2D41-CB1F-4E5C-B08D-35294F8D1402"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"CFAD5F7D-AA93-46B7-996B-B0761143B334"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBEBBAAF-BAA7-40E9-A0FF-F8618A3ED2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AFEEBA-01BA-46D6-86A3-B1B5A8F1B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"3F72014B-B168-4FFA-ADDC-86CE84D19681"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFFE8553-D8FF-4BA3-9325-A3C366FDFBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"72CD1784-3F48-49B5-A154-61C1F7EC3F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CAAA1171-F570-4E4D-B667-2D4C8F8ECDD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*","matchCriteriaId":"F0BD3CDF-31C5-4B8A-8314-A5F0F9D28AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"278B4EF3-4331-4334-AB55-EC05C069F48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4943CF80-91E5-42CD-BD51-6CAFC83EA5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0284F72-2126-4BE8-90CA-82D2E4B3E96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C24AEFB1-7070-4F9B-BCDA-60F33C17D536"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"E8D735F4-165E-45C9-BF3B-9B618A8E3720"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"62E60F6F-C855-45BF-8840-398FA62626EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"F4EDCE1E-436A-4369-A734-7D620F5D89B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"98051D18-43E3-47D6-A8D4-AD9F0C8B0A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"78BC489B-E02E-4C6E-9EA1-EDC926EBA5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"1DD4EF8B-EA44-46F2-9C28-1D9D1D8BA2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"426ED65D-8B72-4106-A75E-1CB74106DD46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCB1657-8C8F-44FE-8C1D-BF191DE70657"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"35F44A77-1169-4A0D-8864-EB7AF56324AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"AE0CFF97-8F8B-405D-BA59-B88C1C07A4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"BA3C0B46-3964-4A22-9AD4-4F4C8B4B4790"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=288899","source":"cve@mitre.org"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html","source":"cve@mitre.org"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306667","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306669","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125553728512853&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125561979001460&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:274","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36658","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2899","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528769","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53741","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=288899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/phpmyadmin/releases/306669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125553728512853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125561979001460&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3698","sourceIdentifier":"cve@mitre.org","published":"2009-10-14T10:30:02.110","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service (system process restart) via a crafted application, possibly a related issue to CVE-2009-2656."},{"lang":"es","value":"Una función sin especificar en la API de Dalvik en Android v1.5 y anteriores permite a atacantes remotos producir una denegación de servicio (reinicio de sistema) a través de una aplicación manipulada posiblemente un tema relacionado con CVE-2009-2656."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"8406C10C-F61D-4AFB-8DFE-6F6AD09A6D29"}]}]}],"references":[{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=cf4550c3198d6b3d92cdc52707fe70d7cc0caa9f","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022986","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2009-014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/506948/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36590","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53654","source":"cve@mitre.org"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=cf4550c3198d6b3d92cdc52707fe70d7cc0caa9f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2009-014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506948/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3699","sourceIdentifier":"cve@mitre.org","published":"2009-10-15T10:30:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long XDR string in the first argument to procedure 21 of rpc.cmsd."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en libcsa.a (también conocido como biblioteca del demonio calendario (calendar daemon library)) en IBM AIX v5.x hasta v5.3.10 y v6.x hasta v6.1.3, y VIOS v2.1 y versiones anteriores, permite a atacantes remotos ejecutar código arbitrario a través de una cadena XDR larga en el primer argumento al procedimiento 21 de rpc.cmsd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"A99FBC6A-75A0-433F-BD5A-ECBFDF1D9BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F2AB87CE-4A33-4C35-8A5B-FC2696712550"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"732619AA-7504-4B02-9878-D23D2CD4AEE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A10D42BF-B7FB-4977-B4C2-3FC6B87BBCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"07D7B5D5-9C6C-4EFD-8433-6A134B824EC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*","matchCriteriaId":"D084700A-713E-48C9-8ED9-A55024552B78"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"54254625-FC83-4617-8161-CA1FB3092753"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*","matchCriteriaId":"43E38D56-80BA-460C-A296-ED7F506E4364"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A8A7DBFF-B11B-47EC-9E52-C12B156739D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0.50:*:*:*:*:*:*:*","matchCriteriaId":"B380F93D-5B13-49D0-B130-D45C2849A135"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.0.54:*:*:*:*:*:*:*","matchCriteriaId":"11C8004D-639C-47BC-BE3E-CF5F06C1679C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBD01F19-4B30-4147-AC48-7F5C64EE80CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*","matchCriteriaId":"104E5C14-6D87-494B-8D60-0443ADDCD31A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:sp6:*:*:*:*:*:*","matchCriteriaId":"0BBBA4A5-D191-41D0-886C-C428F4F6252C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DE57C2-E728-4016-9774-28FB4B0509AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"CE79D7E9-DF50-42FD-A255-FF2A29131946"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"57B11497-5622-4759-906A-A93A3E815584"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1F9CD013-D904-45DF-AD43-493A22D5744B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"307B47F5-D903-4763-A353-2538AFD6C9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"A16950BB-11BC-4A40-BB3B-841807BB2546"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*","matchCriteriaId":"435340B0-AD02-4174-BC7F-6A7C222A7F6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3_ml03:*:*:*:*:*:*:*","matchCriteriaId":"2AEF9658-0479-43E5-99A2-620ED3E018E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5l:*:*:*:*:*:*:*","matchCriteriaId":"FCFE1A11-6750-4275-B5F7-CFFCD5308D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF417123-CCB6-48AF-A21B-1974173D516B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"362CFB2F-817A-4E55-A315-86B6243E3F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53544921-1C1A-4382-99D7-0F3011BA76DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"15FF1838-81E0-4AFE-8DEE-505CC7692CE9"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022996","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ61628","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ61717","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62123","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62237","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62569","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62570","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62571","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62672","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/58726","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36615","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2846","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53681","source":"cve@mitre.org"},{"url":"https://www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1022996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ61628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ61717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ62672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/58726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.immunityinc.com/downloads/immpartners/aixcmsd10092009.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3700","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T14:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to \"emergency mode.\""},{"lang":"es","value":"Desbordamiento de búffer en squidGuard v1.3 y v1.4 permite a atacantes remotos causar una denegación de servicio (cuelgue de aplicación o pérdida de la funcionalidad de bloqueo) a través de una URL larga con muchos caracteres / car(barra), relacionado con \"modo emergencia\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squidguard:squidguard:1.3:*:*:*:*:*:*:*","matchCriteriaId":"505E2348-620E-442D-A636-1CE1792A77C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squidguard:squidguard:1.4:*:*:*:*:*:*:*","matchCriteriaId":"2A13B1EC-6F1F-4A9A-A9AC-65548B3E27B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39679","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023079","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2040","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507440/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36800","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3013","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53921","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507440/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3701","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) phpshell.php, (2) cmdshell.php, or (3) sqlshell.php in admin/, related to the PHP_SELF variable."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en el interfaz de administración en Horde Application Framework versiones anteriores a v3.3.6, Horde Groupware versiones anteriores a v1.2.5, y Horde Groupware Webmail Edition versiones anteriores a v1.2.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el PATH_INFO en (1) phpshell.php, (2) cmdshell.php, o (3) sqlshell.php en admin/, relacionado con la variable PHP_SELF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.5","matchCriteriaId":"5CD5438E-7D99-4286-81F3-1A304E9A7BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2D3532FD-0E85-4EDC-A3A7-76F8BA915B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D39B3B91-16B9-4B5B-AB4E-9BA568CC1E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"ACBE1BB3-EAB6-4388-95C2-0513B0D6A327"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8B402F70-BAAD-44D6-B414-F615F973DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F2DA0C-C8A3-429C-83C7-B2983D3FF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7535FE38-0FBD-48CC-9FDE-C7CA2C18CA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A14A770E-60BC-4698-8BFC-5FB745A52279"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"23A0AA21-C88D-45C4-9D95-414B2278E601"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8AE35AF8-CA38-42FB-BA32-057BCA2CA2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C91CA767-F49D-48E9-80CE-78B65DD14DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CEC8BBFC-263E-4735-847D-5544D18922E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8DB1F389-5D64-4B8C-B207-7D23F0C12DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8892DF-11F2-4991-97E8-D561DEAC4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3B46B6F5-055E-44EB-BB78-503811C0E57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"66B197B0-F3B7-40D6-9872-C1A94622C242"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2698E2D7-09BF-4490-B362-4245CD3087D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A3B40A46-117D-4D85-8CC8-27236A3280C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FEFBECFF-D1A4-465D-B59F-E70246DE4BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"57ABD1BD-6676-4B54-9F3E-FACF1346794F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.1:*:*:*:*:*:*:*","matchCriteriaId":"79EC6167-5D16-4236-8EBC-412EE1784802"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5A4F6A2A-05B6-42EA-8F61-D0AB610A6757"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D1F91CDA-B425-4DB2-89E4-12267B600D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8BB743-A760-4C72-880C-759E54FB7CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89477FCC-C925-418A-A3FF-F5B02736600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D5862181-4CE7-452F-8877-41E099440188"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B3E601FE-94F1-48AD-A0F2-42824A3A4FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*","matchCriteriaId":"BDE2B06C-EDBD-4FA1-90AA-148E39EF5AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D5CF33A8-C497-4C86-8C5D-7181597BEC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B312DB-14BE-425C-9B07-0CBED6F39E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A2CF2865-CA12-4C4C-9BEC-7A97E6AAB377"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DF389AE4-D2AD-4992-BFBD-68FB1CBEE50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"5611B7D8-8AEF-42A8-8132-39CE773A7C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"71C2653B-7F0B-4628-9E77-44744BC05463"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B574D428-0A3A-47CA-A926-5C936F83919A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D59C23FB-E223-4EED-8F69-3CC1EE7DF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"904EEFF0-CF66-43E6-BAA9-1A6FB4115CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B3AB0176-9CB3-4D49-B644-2C413C9B6E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A849DD3E-882A-4621-BB6C-315A76677BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"5611B7D8-8AEF-42A8-8132-39CE773A7C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"71C2653B-7F0B-4628-9E77-44744BC05463"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E55009DF-EDF1-4FAE-88E7-1CF33BFFEBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"980162BB-48B3-4921-987A-6D18C62965A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B574D428-0A3A-47CA-A926-5C936F83919A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D59C23FB-E223-4EED-8F69-3CC1EE7DF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"904EEFF0-CF66-43E6-BAA9-1A6FB4115CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B3AB0176-9CB3-4D49-B644-2C413C9B6E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C95E9B57-2DB0-4692-A7D1-180EC3687D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6E7D8683-8DD4-4EB0-A28F-0C556304BB2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9F68E5D5-7812-4FB2-ACF9-76180B038D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"37B76B27-ADF0-4E88-B92C-304FB38A356E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"965F245A-879A-4DF0-ABC5-588E78C4CBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3DCB29F9-3875-4264-8117-5751FEDC3350"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"59FC250F-EF0B-4604-99A2-3EEB8B2DEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A849DD3E-882A-4621-BB6C-315A76677BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AAF1A6AE-0748-476B-ACE2-DA43A9443B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F577A169-8354-4218-B3C6-04DA4BDF1E3C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0388.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2009/000529.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=126100750018478&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=horde-announce&m=126101076422179&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37709","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023365","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508531/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37351","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3572","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54817","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0388.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2009/000529.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=126100750018478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=horde-announce&m=126101076422179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508531/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3702","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10.php.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio absoluto en PHP-Calendar v1.1 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través del nombre de archivo en el parámetro configfile en (1)update08.php or (2) update10.php. NOTA: en algunos entornos, esto puede ser ser aprovechado para inclusión remota a archivos usando el nombre de fichero UNC compartido o un ftp, ftps, o URL ssh2.sftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6BCCE6BD-B271-4595-9272-5AC074B3DDAF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/508548/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508548/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3703","sourceIdentifier":"cve@mitre.org","published":"2009-12-18T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the search_max parameter in a search action to the default URI, related to wpf.class.php; (2) the forum parameter to an unspecified component, related to wpf.class.php; (3) the topic parameter in a viewforum action to the default URI, related to the remove_topic function in wpf.class.php; or the id parameter in a (4) editpost or (5) viewtopic action to the default URI, related to wpf-post.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el plugin WP-Forum para WordPress antes de v2.4 permiten a atacantes remotos ejecutar comandos SQL arbitrarios a través de (1) el parámetro 'search_max' en una acción de búsqueda a la URI por defecto, en relación con wpf.class.php; (2) el parámetro 'forum' a un componente no especificado, en relación con wpf.class.php; (3) el parámetro 'topic' en una acción de la vista del Foro de la URI por defecto, en relacion con la función remove_topic en wpf.class.php, o el parámetro 'id' en una acción (4) 'editpost' o (5) 'viewtopic' a la URI por defecto, en relación con wpf-post.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"1565D880-7E80-41A3-8195-88F3F5D7F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.5:*:*:*:*:*:*:*","matchCriteriaId":"98445733-1C33-4395-AC1A-4E868D2CCAC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.6:*:*:*:*:*:*:*","matchCriteriaId":"62E080D2-696D-4544-916E-EB80FBE9F77B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.7:*:*:*:*:*:*:*","matchCriteriaId":"60063708-9783-43B7-A54A-901D14CBD6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"F5987635-99C6-4EAD-A6DB-C5587308BA6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"24761E14-6295-483D-85D6-6A7FE5DBEDAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"93719296-DB05-48C1-A2B5-32828DD169E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:1.8:*:*:*:*:*:*:*","matchCriteriaId":"9F51B17F-9582-4B7E-9FB3-F495414D3CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C589E6AD-ECFA-4143-ABD6-DD1204F0E7BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fahlstad:wp-forum:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F300AB0F-938B-4EE5-BDB1-3CBF1C290F48"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/508504/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37357","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508504/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3704","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header."},{"lang":"es","value":"ZoIPer v2.22, y posiblemente otras versiones anteriores a v2.24 Library 5324, permite a atacantes remotos causar una denegación de servicio (cuelgue) a través de una  petición SIP INVITE con una cabecera de información de llamada vacío."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoiper:zoiper:*:*:*:*:*:*:*:*","versionEndIncluding":"2.22","matchCriteriaId":"224B7F2A-DC8E-4019-972A-2679D4D7592B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoiper:zoiper:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C47444D3-5546-4F3C-ABA7-64A869A622C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoiper:zoiper:2.10:*:*:*:*:*:*:*","matchCriteriaId":"4AD39882-A6BA-40AC-A412-848FDEF75232"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoiper:zoiper:2.11:*:*:*:*:*:*:*","matchCriteriaId":"27F07097-B1CA-40BA-875A-18E73B14B931"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53792","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3705","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en debugger.php en Achievo anterior a v1.4.0 permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en el parámetro config_atkroot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"AF54DB83-0DA5-41B7-89C0-AED8BFB98412"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"51E5D3DE-9D27-47B8-AEBE-0A0100389D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"819F0D23-FA81-4558-9F33-B48749269FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EB2D06-61A0-4000-8C04-FAA86C1F6CD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"CDAF7860-994A-4566-926D-5194FC970F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5AC2E5B0-F4F0-4DFE-A4F6-3F3429B0AC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FCC5B27A-4A90-4F8D-A008-21F26907A1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.0:rc2:*:*:*:*:*:*","matchCriteriaId":"9FB73C9C-88A3-4102-9F25-C8EDF8D44B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6BF133D4-427D-46DD-95F5-88E3AC9EEB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"93DC3C06-2069-436B-BB29-5EAA412FF165"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFFF94E2-9071-408A-AAEA-6ABDCDD1CDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6519E24E-D08B-4176-A21D-6231567CF149"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"FC0F696B-60E7-4560-A03D-627993F77279"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5639EDD0-DA0B-419E-9DDE-746C1B2AF8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"9FDAF1F0-7498-4F64-B0E4-9542DA7BAEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C37FD450-1AF0-4DBF-BECB-73F584F49BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"356CC90D-9078-4943-B97C-4BEA3CBF1EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6A3DFF52-2035-43D3-935D-EE6A122A59BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F4BF2551-8009-40BB-9541-3885C8D93B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5D5AEF1-38CE-4B89-A15A-89D9BF3BEA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"804AC3CE-270F-47EC-B501-75B296A99424"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"59B2745F-D0AA-426B-AA95-C2F0D2AA1774"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"00D07959-FE90-4907-9BAE-7C72DFD0D3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8633CE2A-7814-4963-BB65-B4499BBA5186"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B82CEEC2-19AF-4175-A0E4-0F97F875B192"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1B9C0B0D-5E4A-45BD-9150-90FC615357EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B835A00C-FFEA-4A88-ABD3-1C17A2FDC96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"9FCA1AFB-11FC-4484-937C-0160C10B21F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"3BF4DC9F-E62B-470F-AD63-818554544769"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"951EC99D-4FFB-4388-AAF0-84A60A67AC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D901628D-D446-45EE-B131-EAA04D48A352"},{"vulnerable":true,"criteria":"cpe:2.3:a:achievo:achievo:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"119EB712-D1E9-4AFC-A9C2-D33E1FE10F38"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1023017","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.achievo.org/download/releasenotes/1_4_0","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://packetstormsecurity.org/0909-exploits/achievo134-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1023017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.achievo.org/download/releasenotes/1_4_0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2009-3706","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per:  http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1\r\n\r\n\"Notes:\r\n\r\n1. Solaris 8 and 9 are not impacted by this issue.\r\n\r\n2. OpenSolaris distributions may include additional bug fixes above and beyond the build from which it was derived. The base build can be derived as follows:\r\n\r\n$ uname -v\r\nsnv_86\r\n\r\n3. This issue only affects systems with ZFS file systems where local users have been granted the {PRIV_FILE_CHOWN_SELF} (see chown(2)) privilege which allows them to modify ownership of files where the ownership matches the user's current effective user ID. If the default operating system configuration option '{_POSIX_CHOWN_RESTRICTED}' has been disabled then the 'file_chown_self' privilege is asserted in the inheritable set of all processes unless overridden by policy.conf(4) or user_attr(4).\"","evaluatorImpact":"Per:  http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1\r\n\r\n1. Impact\r\n\r\nA security vulnerability in the ZFS file system in OpenSolaris and Solaris 10 systems with patches 137137-09 (SPARC) or 137138-09 (x86) installed may allow a local unprivileged user with the 'file_chown_self' privilege to take ownership of files belonging to another user.","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the file_chown_self privilege via certain uses of the chown system call."},{"lang":"es","value":"Vulnerabilidad no especificada en el sistema de archivos ZFS en Sun Solaris 10 y OpenSolaris snv_100 hasta snv_117, permite a usuarios locales eludir las limitaciones de permisos de file_chown_self a través de determinados usos de la llamada al sistema chown."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://secunia.com/advisories/37010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36702","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265908-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3707","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \\x25\\xFF sequence in the USER and PASS commands, related to a \"format string DoS\" issue. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"VMware Authentication Daemon versión 1.0 en el archivo vmware-authd.exe en el Servicio de Autorización de VMware en VMware Workstation versiones 7.0 anteriores a 7.0.1 build 227600 y versiones 6.5.x anteriores a 6.5.4 build 246459, VMware Player versiones 3.0 anteriores a 3.0.1 build 227600 y versiones 2.5.x anteriores a  2.5.4 build 246459, VMware ACE versiones 2.6 anteriores a 2.6.1 build 227600 y versiones 2.5.x anteriores a 2.5.4 build 246459, y VMware Server versiones 2.x, permite a los atacantes remotos causar una denegación de servicio (bloqueo del proceso) por medio de una secuencia de \\x25\\xFF en los comandos USER y PASS, relacionada con un problema de \"format string DoS\". NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B71537AE-346D-4BA9-90E7-EA0AB0CD0886"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5674C3DD-F510-4701-ACA8-437576307528"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E62960B2-91AE-4DD7-8085-9BA6BCB84473"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CBCA2A03-0A31-4290-987A-BE715758BA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DFB84B42-8C68-4B65-93F9-287B699B7540"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.6:*:*:*:*:*:*:*","matchCriteriaId":"E87681DB-CBD8-46A6-BD9A-FB621B627B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3997440A-B731-4F26-A90B-BB14A8F93E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*","matchCriteriaId":"FE944A70-CB9C-4712-9802-509531396A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"62DA49FA-6657-45B5-BF69-D3A03BA62A4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"949C3917-4D7E-4B51-A872-BFBECB4D2CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"656039E8-8082-4208-B046-518D95769B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5F747AC1-E163-41A4-BAC7-FDF46F4057D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5A115959-9CDA-45ED-9002-BA1A31074E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2543D5-AE09-4E90-B27E-95075BE4ACBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6CFDD84-A482-42C2-B43F-839F4D7F1130"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E565F23-AEEE-41A4-80EC-01961AD5560E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3E658DA-56E8-49F0-B486-4EF622B63627"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"541D77A2-99C5-4CDB-877F-7E83E1E3369E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A6B53C0A-5A0C-4168-8AD3-F3E957AE8919"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3684F0D0-B8BE-442B-AA27-0A485E6BFFAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"AB33DBC9-3B63-457E-A353-B9E7378211AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"34F436D4-B7B7-43CB-A2BD-C5E791F7E3C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000090.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36988","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39215","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1022997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36630","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/exploits/abFwcLOuFqmD20yqhYpQ.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/index.php?mod=02_Forum&group=02_Bugs_and_Exploits&argument=01_Remote&topic=1254924405.ff.php","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_JtYUv6C6j5b6Bw6iIkF4.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0007.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000090.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1022997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/exploits/abFwcLOuFqmD20yqhYpQ.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/index.php?mod=02_Forum&group=02_Bugs_and_Exploits&argument=01_Remote&topic=1254924405.ff.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.shinnai.net/xplits/TXT_JtYUv6C6j5b6Bw6iIkF4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3708","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a (1) description or (2) keyword META tag.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en  Meta Content Optimizer in Konae Technologies Alleycode HTML Editor v2.21 permite a atacantes remotos asistidos por usuarios ejecutar código arbitrario mediante un valor largo en un META tag (1) description o (2) keyword. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:konae:alleycode_html_editor:2.21:*:*:*:*:*:*:*","matchCriteriaId":"97E300A0-0BFB-4E8A-AB09-3B8018BEB107"}]}]}],"references":[{"url":"http://osvdb.org/58649","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36940","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/58649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3709","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Meta Content Optimizer en Konae Technologies Alleycode HTML Editor v2.21 permite a atacantes remotos asistidos por usuarios ejecutar código arbitrario mediante un valor largo en una etiqueta TITLE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:konae:alleycode_html_editor:2.21:*:*:*:*:*:*:*","matchCriteriaId":"97E300A0-0BFB-4E8A-AB09-3B8018BEB107"}]}]}],"references":[{"url":"http://osvdb.org/58649","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/alleycode-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36940","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506987/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/58649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0910-exploits/alleycode-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/506987/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3710","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022."},{"lang":"es","value":"RioRey RIOS v4.6.6 y v4.7.0 utiliza un nombre de usuario (dbadmin) y contraseña (sq!us3r) indocumentados, no modificables para un túnel SSH, que permite a atacantes remotos obtener privilegios a través del puerto 8022."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:riorey:rios:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"D5AB04E9-061E-446D-8B36-8ABEC77C5F2A"},{"vulnerable":true,"criteria":"cpe:2.3:h:riorey:rios:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F257DDA1-109B-4218-9205-381173A9D117"}]}]}],"references":[{"url":"http://osvdb.org/58858","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/riorey-passwd.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36971","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/58858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0910-exploits/riorey-passwd.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3711","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en la función h_handlepeer en http.cpp en httpdx v1.4, y posiblemente v1.4.3, permite a atacantes remotos causar una denegación de servicio (cuelgue) y posiblemente ejecutar código arbitrario a través de una solicitud HTTP GET larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D490B4E8-E863-4856-8031-3E08FBED4E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:jasper:httpdx:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3B2C8BF8-73D0-4F02-B9DB-6211FA68F72D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125544914512291&w=2","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/58714","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pank4j.com/exploits/httpdxb0f.php","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/507042/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507073/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53700","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=125544914512291&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/58714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pank4j.com/exploits/httpdxb0f.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/507042/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507073/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3712","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php; and the item_id parameter to (2) view_full_size.php, (3) classifide_ad.php, and (4) crosspromoteitems.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Ebay Clone 2009 permite a atacantes remotos ejecutar comandos SQL a través de (1) el parámetro user_id a feedback.php; y el parámetro item_id a (2) view_full_size.php, (3) classifide_ad.php, y (4) crosspromoteitems.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ebayclonescript:ebay_clone:2009:*:*:*:*:*:*:*","matchCriteriaId":"DB71071D-3A42-4054-BD4F-F45527927962"}]}]}],"references":[{"url":"http://secunia.com/advisories/35713","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9125","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3713","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en fichero.php en MorcegoCMS v1.7.6 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de la cadena de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:morcego:morcegocms:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.6","matchCriteriaId":"01F6BCC5-5373-4001-AFFC-0F7A677045F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:morcego:morcegocms:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"CE2D6037-7007-42BC-A7E9-2446B5CFC267"},{"vulnerable":true,"criteria":"cpe:2.3:a:morcego:morcegocms:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"688EB4F8-9D53-4CF7-95C8-690EF0D11E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:morcego:morcegocms:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D49B8EB-B07F-4614-AAE9-78CD1765B371"}]}]}],"references":[{"url":"http://osvdb.org/55796","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51658","source":"cve@mitre.org"},{"url":"http://osvdb.org/55796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3714","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter."},{"lang":"es","value":"Vulnerabilidad de Ejecución de secuencias de comandos en sitios cruzados (XSS) \r\nen admin_login.php en MCshoutbox v1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro loginerror."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maniacomputer:mcshoutbox:1.1:*:*:*:*:*:*:*","matchCriteriaId":"600FE77F-F19F-48D4-8915-1A2C1004643F"}]}]}],"references":[{"url":"http://osvdb.org/56062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9205","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51862","source":"cve@mitre.org"},{"url":"http://osvdb.org/56062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3715","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en scr_login.php en MCshoutbox v1.1, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través de los parámetros (1)username y (2)password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maniacomputer:mcshoutbox:1.1:*:*:*:*:*:*:*","matchCriteriaId":"600FE77F-F19F-48D4-8915-1A2C1004643F"}]}]}],"references":[{"url":"http://osvdb.org/56063","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9205","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51863","source":"cve@mitre.org"},{"url":"http://osvdb.org/56063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3716","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in smilies/."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en admin.php en MCshoutbox v1.1 permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un archivo con una extensión ejecutable, luego accediendo a él a través de una solicitud directa al archivo en smilies/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maniacomputer:mcshoutbox:1.1:*:*:*:*:*:*:*","matchCriteriaId":"600FE77F-F19F-48D4-8915-1A2C1004643F"}]}]}],"references":[{"url":"http://osvdb.org/56064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9205","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51864","source":"cve@mitre.org"},{"url":"http://osvdb.org/56064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3717","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.140","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URI in a playlist (.m3u) file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en LucVil PatPlayer v3.9 permite a atacantes remotos causar una denegación de servicio (cuelgue) o ejecutar código arbitrario a través de una URI larga en un archivo de lista de reproducción (.m3u)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lucvil:patplayer:3.9:*:*:*:*:*:*:*","matchCriteriaId":"C54B4131-B7F1-4231-9237-6DD67E22C9F8"}]}]}],"references":[{"url":"http://osvdb.org/55746","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35756","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9102","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51624","source":"cve@mitre.org"},{"url":"http://osvdb.org/55746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3718","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/authenticate.asp en Battle Blog v1.25 y v1.30 build 2 permite a atacantes remotos ejecutar comandos SQL a través del parámetro UserName."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davethewebguy:battle_blog:1.25:*:*:*:*:*:*:*","matchCriteriaId":"3AF9E1FE-8D5F-46C8-AA4A-49E74B3A0527"},{"vulnerable":true,"criteria":"cpe:2.3:a:davethewebguy:battle_blog:1.30:*:*:*:*:*:*:*","matchCriteriaId":"68D09AD4-B30F-44C0-A2BF-CE7EEA298A41"}]}]}],"references":[{"url":"http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9183","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/55991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35726","source":"cve@mitre.org"},{"url":"http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/55991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3719","sourceIdentifier":"cve@mitre.org","published":"2009-10-16T16:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en comment.asp en Battle Blog v1.25 y v1.30 build 2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un comentario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davethewebguy:battle_blog:1.25:*:*:*:*:*:*:*","matchCriteriaId":"3AF9E1FE-8D5F-46C8-AA4A-49E74B3A0527"},{"vulnerable":true,"criteria":"cpe:2.3:a:davethewebguy:battle_blog:1.30:build2:*:*:*:*:*:*","matchCriteriaId":"B5477288-6C46-42EC-9898-2A2B8FB338F7"}]}]}],"references":[{"url":"http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9183","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35726","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51807","source":"cve@mitre.org"},{"url":"http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3720","sourceIdentifier":"secalert@redhat.com","published":"2009-11-03T16:30:12.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625."},{"lang":"es","value":"La función updatePosition en lib/xmltok_impl.c en libexpat en Expat v2.0.1, usado en  Python, PyXML, w3c-libwww, ay otros programas, permite a atacantes dependientes de contexto, provocar una denegación de servicio (caída de aplicación) a través de un documento XML con una secuencia de caracteres UTF-8 manipulada que provoca un desbordamiento de búfer fuera de límite (over-read). Vulnerabilidad distinta de CVE-2009-2625."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3720\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact in Python, a future update may address this flaw. If a system has PyXML installed, Python will use PyXML for expat-related functions and is then not vulnerable to the issue.","lastModified":"2010-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libexpat_project:libexpat:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D7036CC4-4CF6-4D3F-B5B4-09D879A55F8E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:a_m_kuchling:pyxml:*:*:*:*:*:*:*:*","matchCriteriaId":"F56B0C2E-698D-40DC-875B-DF384DEE996F"},{"vulnerable":false,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","matchCriteriaId":"9C18D8AC-D77C-44CD-B5DF-AF6E3F3851CB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.64","matchCriteriaId":"838655CB-43E7-4BDA-A80C-2314C9870717"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.17","matchCriteriaId":"91F58140-8FBA-4733-9E2B-493BC9E5B284"}]}]}],"references":[{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130168502603566&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37324","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37537","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37925","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38050","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38231","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38832","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39478","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41701","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42326","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42338","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43300","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://svn.python.org/view?view=rev&revision=74429","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:211","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:212","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:215","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:218","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:219","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:220","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/21/2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/4","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/27/6","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/1","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/5","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/9","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/6","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/28/3","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0002.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1023160","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-890-6","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0896","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3035","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3053","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3061","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0359","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=280615","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531697","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130168502603566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/39478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/43300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://svn.python.org/view?view=rev&revision=74429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/21/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/26/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/27/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/09/06/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/22/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/23/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1023160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-890-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-890-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/3061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2011/0359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=280615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3722","sourceIdentifier":"secalert@redhat.com","published":"2009-10-30T20:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application."},{"lang":"es","value":"La función handle_dr en arch/x86/kvm/vmx.c en el subsistema KVM en el kernel de Linux en versiones anteriores a v2.6.31.1 no comprueba adecuadamente el Current Privilege Level (CPL, Nivel de Privilegios Actual) antes de acceder a un registro de depuración, lo que permite a un usuario invitado del sistema operativo obtener una denegación de servicio (trampa) en el sistema operativo hospedador a través de aplicaciones manipuladas."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3722\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update will address this flaw.","lastModified":"2010-02-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"EA80C8C8-30E5-4DC6-B3CC-2BA506FBEC8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125678631403558&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125680666827148&w=2","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0126.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37221","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531660","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125678631403558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125680666827148&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3725","sourceIdentifier":"secalert@redhat.com","published":"2009-11-06T15:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems."},{"lang":"es","value":"La capa de conector en el kernel Linux versiones anteriores a v2.6.31.5 no requiere de la capacidad CAP_SYS_ADMIN para ciertas interacciones de los subsistemas (1) uvesafb, (2) pohmelfs, (3) dst, o (4) dm, permitiendo a usuarios locales saltar las restricciones de acceso implementadas y obtener privilegios mediante peticiones a las funciones en esos subsistemas."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG, as they do not include the upstream change introducing this flaw.","lastModified":"2009-11-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.31.5","matchCriteriaId":"61EA5B82-D1EB-4D3D-B82C-3A6CD1FB4938"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=125449888416314&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125715484511380&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125716192622235&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/51382/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51383/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51384/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51387/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37113","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38905","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36834","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=125449888416314&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125715484511380&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125716192622235&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://patchwork.kernel.org/patch/51382/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51383/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51384/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://patchwork.kernel.org/patch/51387/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3726","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state."},{"lang":"es","value":"La función nfs4_proc_lock en fs/nfs/nfs4proc.c en el cliente NFSv4 en el Kernel de  Linux\r\nanteriores a v2.6.31-rc4 permite a servidores NFS remotos provocar una denegación de servicio (desreferenciación de puntero NULL y pánico) si se envía cierta respuesta conteniendo atributos de fichero no correctos, lo que provoca un intento de uso de un fichero abierto que carece de un estado NFSv4."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3726.\n\nThe Linux kernel as shipped with Red Hat Enterprise Linux 3 did not have support for NFSv4, and therefore is not affected by this issue.\n\nIt was addressed in Red Hat Enterprise Linux 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1635.html respectively.\n\nA future kernel update in Red Hat Enterprise Linux 4 will address this issue.","lastModified":"2009-12-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc3:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"F5DB57A3-D3BA-4AFA-B5B7-8285D239E399"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*","matchCriteriaId":"43F9DBB0-8AF7-42CA-95DD-68A344E9D549"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:-rc1:*:*:*:*:*:*","matchCriteriaId":"965725B8-8501-4C33-9B7F-4AC2865616B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:-rc2:*:*:*:*:*:*","matchCriteriaId":"9ED02D9F-6BEE-475F-B080-6F712E176A00"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*","matchCriteriaId":"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*","matchCriteriaId":"637A08D0-E382-4DE8-AEEC-6A53A72849B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*","matchCriteriaId":"550DFE6E-DCE6-4649-8746-522996021DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*","matchCriteriaId":"E17BB496-749A-40C8-BAA9-6CFBBE308065"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"0C30F255-1297-46EA-9FBC-05564792FF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.3:*:*:*:*:*:*:*","matchCriteriaId":"E283E518-3A3E-4D39-B11F-E4B71D6ADF90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.4:*:*:*:*:*:*:*","matchCriteriaId":"FB58C532-186F-4C1F-A107-1BF17C19AA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.5:*:*:*:*:*:*:*","matchCriteriaId":"4A31F446-FB7E-4D6C-8703-0A730E2C71AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.6:*:*:*:*:*:*:*","matchCriteriaId":"52BA2E08-09BC-4EE4-822E-0F6FEF92E721"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.1:*:*:*:*:*:*:*","matchCriteriaId":"97AA815F-E07C-4989-B190-D5E52451D0BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.3:*:*:*:*:*:*:*","matchCriteriaId":"5C171597-F06E-48BA-A897-E753ECBEE68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.4:*:*:*:*:*:*:*","matchCriteriaId":"99E0D1AD-E8B0-4125-BCA7-8487D9490EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.5:*:*:*:*:*:*:*","matchCriteriaId":"F99F78D3-A2FA-4033-8E21-FE3FFCE9D94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*","matchCriteriaId":"BA39D4CE-22F0-46A2-B8CF-4599675E7D3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD00664-A27C-4514-A2A4-079E8F9B0251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*","matchCriteriaId":"E336C792-B7A1-4318-8050-DE9F03474CEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:*","matchCriteriaId":"7228AE50-BACB-4AB8-9CE5-17DB0CD661AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:*","matchCriteriaId":"D6D260FD-E55E-4A95-AB7F-B880DBE37BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:*","matchCriteriaId":"E36D0159-1A05-4628-9C1C-360DED0F438C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:*","matchCriteriaId":"3E6654B9-42EB-4C2C-8F71-710D50556180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.7:*:*:*:*:*:*:*","matchCriteriaId":"086E5B7B-A31B-44A1-92CF-D88E118545D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.8:*:*:*:*:*:*:*","matchCriteriaId":"BAC24F28-2C48-43D7-B8FB-7DCF499C9627"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.36.9:*:*:*:*:*:*:*","matchCriteriaId":"76B549FD-5315-4DB1-8A3B-76B2E28DDDBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37:*:*:*:*:*:*:*","matchCriteriaId":"4E506CC5-BB82-423E-A99A-F77A4C8CA26B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37:-rc1:*:*:*:*:*:*","matchCriteriaId":"5561C408-CFDD-47F7-A430-ADF47007F8E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.1:*:*:*:*:*:*:*","matchCriteriaId":"B075A26C-356F-41A5-A2AB-4AB130F4B503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.2:*:*:*:*:*:*:*","matchCriteriaId":"8BE7521F-BC6A-470A-AF3D-36E9243330E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.3:*:*:*:*:*:*:*","matchCriteriaId":"37E510D6-5ED5-4EF8-BEFB-B84FDCF44F5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.4:*:*:*:*:*:*:*","matchCriteriaId":"9E6FEE93-0FCB-4289-9F76-540A1E48950F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.5:*:*:*:*:*:*:*","matchCriteriaId":"08A8E327-3DFD-4109-93EB-23A5C12ED933"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.37.6:*:*:*:*:*:*:*","matchCriteriaId":"CD9B5D95-0E69-4A33-8A6E-B6FF852A8866"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0FC560CC-F785-42D5-A25B-1BA02E7AC464"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"1817C772-D367-4ABE-B835-466D31A6DC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*","matchCriteriaId":"C667B8E4-64EB-4A05-84FF-B2243DEF757D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*","matchCriteriaId":"9484B41A-DFB6-4481-80D8-440C711CEA53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*","matchCriteriaId":"53D373AF-DE6B-428E-9F0F-F1D220900A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*","matchCriteriaId":"F2975DF7-F916-456C-BF7C-2694559E5282"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*","matchCriteriaId":"6D156EFF-D2E5-4F42-B6E7-954DE6CD90B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*","matchCriteriaId":"784EB96E-2FD3-4F77-8DB6-4D6C7A928946"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc1:*:*:*:*:*:*:*","matchCriteriaId":"44FDF616-E410-4540-B377-98D1FB88CE35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22_rc7:*:*:*:*:*:*:*","matchCriteriaId":"5313B736-9904-442A-84D6-8FC7B9AC2059"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*","matchCriteriaId":"0E249774-CE05-43D5-A5A3-7CCE24BB2AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*","matchCriteriaId":"8D42BA44-C69B-4170-9867-CABF93CA9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*","matchCriteriaId":"085259B8-9D41-42B0-B32B-66B8D365F106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*","matchCriteriaId":"9A12DE15-E192-4B90-ADB7-A886B3746DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*","matchCriteriaId":"FF6588E7-F4FA-40F5-8945-FC7B6094376E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*","matchCriteriaId":"AE87E13E-ACF7-4F74-8938-729F3B0D694C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*","matchCriteriaId":"D4965A12-1BBA-4494-A5C1-43E0C0F48C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*","matchCriteriaId":"6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*","matchCriteriaId":"388414A1-C9B4-41BA-AD35-6501A463A095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*","matchCriteriaId":"FDBA01DD-C129-48F1-800B-838418F4A4A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*","matchCriteriaId":"185F1EF8-04EB-43ED-B909-8BDF60F23E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*","matchCriteriaId":"D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*","matchCriteriaId":"3483FAFA-353C-498F-AF68-8F5B84A0F30D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*","matchCriteriaId":"B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*","matchCriteriaId":"6B11A9E1-9D90-46DC-81B5-17A137205AB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*","matchCriteriaId":"07EEC559-9240-46BE-9057-0F17D1F61F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*","matchCriteriaId":"BBBC127F-D67E-43FE-BCFE-606C200084F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*","matchCriteriaId":"42B18945-EE09-4E6B-8C11-E382E5F8F850"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*","matchCriteriaId":"12D0C03A-7D30-485F-8431-638918FE9658"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc1:*:*:*:*:*:*","matchCriteriaId":"F8B59FCD-8161-48EF-844D-8FA1AB2FAA76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc2:*:*:*:*:*:*","matchCriteriaId":"2DA311B8-D32E-4853-9B07-58EAF1019D0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc3:*:*:*:*:*:*","matchCriteriaId":"F0F0F679-43C8-426E-A97E-C3B207A3331C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc4:*:*:*:*:*:*","matchCriteriaId":"FAE6A7F3-3D04-4119-874D-DA2FA86B7BE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc5:*:*:*:*:*:*","matchCriteriaId":"BA40BC48-D6B5-4424-B306-F99E85EBBCB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc6:*:*:*:*:*:*","matchCriteriaId":"6C2DF2BB-F94A-4692-AFDC-47C42F04081B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc7:*:*:*:*:*:*","matchCriteriaId":"BB286B42-E739-46CD-BC96-972CFFAECB0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc8:*:*:*:*:*:*","matchCriteriaId":"7636014B-CC2A-43A3-9C9A-04B26AEB06D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:rc9:*:*:*:*:*:*","matchCriteriaId":"A4ED7CE5-3388-4CB9-AF60-A2AF19611327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*","matchCriteriaId":"3463B83B-E46F-456E-98BA-801C59AEB337"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*","matchCriteriaId":"C8A1A8F2-F892-4EDC-A5DA-1BBD6993E84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*","matchCriteriaId":"60EFBFAD-1AF4-49AC-A0E6-A88AB84CD919"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*","matchCriteriaId":"05FD0767-03F3-416C-AB6D-6BC4A12220B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*","matchCriteriaId":"8452D554-8DEB-4265-839C-6B40CCFB56B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*","matchCriteriaId":"94F445F9-57A5-4453-BB5D-290349C04A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*","matchCriteriaId":"62C97D20-4152-47C4-B21B-8206CF49E20A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d953126a28f97ec965d23c69fd5795854c048f30","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40218","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc4","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/4","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0474.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36936","source":"secalert@redhat.com"},{"url":"http://www.spinics.net/linux/lists/linux-nfs/msg03357.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529227","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6636","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9734","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d953126a28f97ec965d23c69fd5795854c048f30","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0474.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.spinics.net/linux/lists/linux-nfs/msg03357.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3727","sourceIdentifier":"secalert@redhat.com","published":"2009-11-10T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error messages depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames via multiple crafted REGISTER messages with inconsistent usernames in the URI in the To header and the Digest in the Authorization header."},{"lang":"es","value":"Asterisk Open Source versión 1.2.x anterior a 1.2.35, versión 1.4.x anterior a 1.4.26.3, versión 1.6.0.x anterior a 1.6.0.17 y versión 1.6.1.x anterior a 1.6.1.9; Business Edition versión A.x.x, versión B.x.x anteriores a B.2.5.12, versión C.2.x.x anterior a C.2.4.5 y versión C.3.x.x anterior a C.3.2.2; AsteriskNOW versión 1.5; y s800i versión 1.3.x anterior a 1.3.0.5, causan diferentes mensajes de error dependiendo de si un nombre de usuario SIP sea válido, lo que permite a los atacantes remotos enumerar nombres de usuario válidos mediante múltiples mensajes de REGISTER creados con nombres de usuario inconsistentes en el URI en el encabezado To y el Digest en el encabezado Authorization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"39358795-09A6-44C6-B969-1560CEF40057"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"8C2DAB51-91ED-43D4-AEA9-7C4661089BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A596A018-2FBC-4CEB-9910-756CC6598679"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"14BDCF8E-0B68-430A-A463-EE40C1A9AD65"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"CA2CD93E-71A5-49EC-B986-5868C05553EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2B66B213-4397-4435-8E48-8ED69AAE13D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55131A3D-C892-44EC-83D6-5888C57B11A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.2:netsec:*:*:*:*:*:*","matchCriteriaId":"E017DD53-B8EC-4EA2-BF59-18C075C5771D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B940EEC6-4451-42B9-A56D-BDB8801B3685"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"CE4AB19F-1338-466D-AAD8-584C79FED1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"175954A5-E712-41B8-BC11-4F999343063D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"FF5A2AA3-BB1F-4DEA-A369-183877BBDAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"1DF9E41E-8FE6-4396-A5D4-D4568600FE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"7B43C508-91E3-49C9-86F0-3643D8F2B7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"4457486F-E9B4-46B8-A05D-3B32F8B639A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"0831E658-36AB-4A4B-9929-3DB6BE855A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"69417F54-D92F-46FB-9BFA-995211279C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12.1:netsec:*:*:*:*:*:*","matchCriteriaId":"46A770C7-A7D4-44E3-A8B4-AC2189EAC3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"4611BEA0-25EC-4705-A390-6DF678373FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"4BCD1F97-4B56-4DA8-A6EC-FA42A3CB9B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"53022458-F443-4402-AC52-FC3AE810E89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"120B85AA-E9B8-4A4D-81CE-FD36CDB63074"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"64D94742-7CA1-487B-90E8-5063FBF88925"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"12302460-5D3F-4045-9DBF-606562E03BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"78546FDF-C843-4E48-ABEE-CC3514AA7C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"8D6EBC0B-9842-44D1-B9D6-EFB88BE22879"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"052969F1-6758-46E8-9273-E0F872BD65BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"624A0F00-4629-4550-847F-F24CC93DFF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"E473F645-F8B0-43FE-957B-F053427465DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"10FC9AAB-1FAD-4953-A2FC-D42E9687D27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"460C9907-AA19-402A-85DE-D3CEA98B107B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"CD80F0D6-6B5B-41D3-AC41-F1643865088A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"734D5198-53C1-40D3-B5BF-D74FC71FD3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"788DEF5E-8A99-463D-89DC-0CC032271554"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"C0996D7A-9419-4897-A0AF-498AC3A2A81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"62D670E6-47E5-4B40-9217-F97D5F39C3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"94C23DB8-3C92-40FE-B8A6-ADF84D28510E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"A6CE7E4E-DA2D-4F03-A226-92965B40AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"0C59A947-457E-47EB-832E-3DA70CB52695"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"55F74B56-B412-4AF1-AED0-C948AB6DC829"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"3B50ADDB-D3C2-407D-8844-F93866E5F20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"2775A7CC-2D88-4F2D-8C26-1E0DDDD681E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"F4149B59-E773-4ED8-A71D-EB7D00808819"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"5A0408C3-0FA7-4A17-9451-C4D46CDA8F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"1726090D-0C37-44A4-AD9B-7ED733B8702D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"B92B045B-8CD6-4C04-9CCB-DCE9A44F6C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"54354E16-3238-43E8-BAA9-93CA7EB44D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"6867EED4-FC3B-4B72-88A5-DED96C729FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"1A0867FC-7161-433F-A416-D7207C8D4D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"97BE6B60-3276-4580-843B-743D0D71E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"36491B32-A405-4C5B-938F-9BEA50A8AF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"6141909B-EBC4-4726-AE9F-669C31257A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"754A51AC-EF20-4736-ADDB-D2A70BCB79EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.28.1:*:*:*:*:*:*:*","matchCriteriaId":"4600BB66-6DEB-444B-AF9E-BDD06CFD2876"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"EE089E31-3521-4D12-B81C-B6E386AE1409"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"FFE86E95-1110-46DF-9A7A-0E1AA56ACE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.1:*:*:*:*:*:*:*","matchCriteriaId":"5B6DF5C5-85B4-4595-A69B-1DE70B5E0E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5E9888-16CD-4DB2-8889-CE4477559C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.3:*:*:*:*:*:*:*","matchCriteriaId":"C29C9A2C-6435-444E-A20B-5881F3798B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.4:*:*:*:*:*:*:*","matchCriteriaId":"E77A2569-CFAE-498D-A633-803849CFECE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"D16E88E6-42D0-400E-AF43-111B35CE11E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AE15A42E-030B-48F0-9498-1755DAAEDFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.32:*:*:*:*:*:*:*","matchCriteriaId":"39511726-1202-4179-9708-4D3B28496768"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.33:*:*:*:*:*:*:*","matchCriteriaId":"2A9A4328-F274-4591-A386-943FD6608374"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.34:*:*:*:*:*:*:*","matchCriteriaId":"1B4A8C9A-A475-4F02-A6BC-F17CEECBF0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E56DB29-571D-4615-B347-38CF4590E463"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FC1188DA-6C27-48D2-9CE7-74D77B24EE9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A93B8F91-5C56-44DE-AE29-8468E853759F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BF7F4D02-7C8E-403C-A53E-A5F8C07F33A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"D85031A3-3444-4650-905D-721F1EBAA24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6F0AC2B3-6E8A-4B26-8A6C-792D9E5072C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2BC8D6D4-A389-4A78-8DA8-351A9CB896E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E979AC4-58EA-4297-9F90-350924BBE440"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"3A58CCD3-4A0C-468B-85F2-59A52B7293A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"3542DB91-8487-49D6-AA15-E8FD9D6B99D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"6BA4F3F1-C3F1-4E15-A854-9BB84E33E4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"661D710E-79F0-4E98-B35B-ED0549D35C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"68291ADE-F9D1-427B-B150-FDA7F2F4788B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"7F80CBCB-F58D-4BE7-8E78-67E04C900D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"EB61D32E-3400-480E-BD27-BA3F98F94427"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"D9154EDB-CAE6-4BB0-8D02-9EC2B81D93C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A432B0A7-F158-4B9C-97F6-6A29DB13EAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"687C67CB-46AF-40C2-8A02-081C7F78568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"6E8D6EC0-A61E-4DBC-A0C7-864E9C4BDA1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF7F65A-45FD-4586-901E-49B057100BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"300F158E-ED27-46C8-85E4-AA0AA6B201DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"FB6F04C0-3226-4D2C-97A3-39999483C62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"30685A20-963A-48D4-B7D7-2C11C2C812AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"C54C3AAC-4D5D-4661-86AB-6849982E8C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"6F847916-89F1-4AA6-973D-6002C8B54EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"5359815E-671A-4DFD-9E99-8CF903A03C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"E2EFBC9E-4DCA-43CB-93EB-6807E2383A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"98755B1B-CAD5-4AC5-8571-52E67C3A8274"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:*:*:*:*:*:*:*","matchCriteriaId":"C9D8C8FE-3D09-4F60-AD03-9D4439942141"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc1:*:*:*:*:*:*","matchCriteriaId":"902FBE4B-5237-43CD-8EB6-D2CAC0F30879"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc2:*:*:*:*:*:*","matchCriteriaId":"708DCACA-49EC-468D-81EC-CE5367F8A164"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc3:*:*:*:*:*:*","matchCriteriaId":"BA9E3314-7D23-414C-8187-16D807410B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc4:*:*:*:*:*:*","matchCriteriaId":"D824ED7B-BAB6-4C0F-A6B0-A75AB072EC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19.1:*:*:*:*:*:*:*","matchCriteriaId":"7A01CE63-F834-48B2-826D-2DAD1B4AE8C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19.2:*:*:*:*:*:*:*","matchCriteriaId":"88B9CC9D-3DC2-4674-BA52-4C6D4E2056C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:*:*:*:*:*:*:*","matchCriteriaId":"43F1849F-1230-45E7-B6A3-D6FC72EB0F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:rc1:*:*:*:*:*:*","matchCriteriaId":"873C9C7E-93A3-4269-B19C-AB33A21C1AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:rc2:*:*:*:*:*:*","matchCriteriaId":"457F2112-7C5E-4953-8F4C-117925D486DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:rc3:*:*:*:*:*:*","matchCriteriaId":"BD15ADD6-D7FA-441A-A9BC-487BCC15F2A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20.1:*:*:*:*:*:*:*","matchCriteriaId":"792A8901-B7B8-40E8-9258-6338B72770FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21:*:*:*:*:*:*:*","matchCriteriaId":"0E6C8F78-0C00-45A5-8FEB-2A4BD5AC1A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21:rc1:*:*:*:*:*:*","matchCriteriaId":"F3E04247-C4EF-4C1B-B879-5C02986950D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21:rc2:*:*:*:*:*:*","matchCriteriaId":"5E382FC8-4001-4058-9151-05AE98B4A35E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21.1:*:*:*:*:*:*:*","matchCriteriaId":"11FECE6B-B6A6-4DDA-9019-9A10B05EC1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21.2:*:*:*:*:*:*:*","matchCriteriaId":"D9813D27-0688-4989-99EB-1DC0F82D59F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"D4333904-9D21-4149-965F-F49F0A34BD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc1:*:*:*:*:*:*","matchCriteriaId":"F7180626-F0FD-46F3-AD52-5C67525C4B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc2:*:*:*:*:*:*","matchCriteriaId":"85A1E3A3-C157-4F3D-9477-F63771E7F627"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc3:*:*:*:*:*:*","matchCriteriaId":"FEE739CC-7A9C-489E-BFC0-6257129C043D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc4:*:*:*:*:*:*","matchCriteriaId":"ADC0E947-A95A-44ED-8DED-CC769FF00569"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc5:*:*:*:*:*:*","matchCriteriaId":"DE52BD9F-3728-455C-BC45-1A4DB926FFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF82D41-9222-42D3-ADAD-94B4F950C63F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22.2:*:*:*:*:*:*:*","matchCriteriaId":"2AE9F181-A8E4-4700-A30F-211CDE251606"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*","matchCriteriaId":"5B10AE4B-EC2D-4D5B-B842-50F5097A0650"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc1:*:*:*:*:*:*","matchCriteriaId":"83E854D0-17A2-473B-B7E8-41E6447C81DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc2:*:*:*:*:*:*","matchCriteriaId":"47169133-3854-4D8F-B79E-3CC77A166EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc3:*:*:*:*:*:*","matchCriteriaId":"6071601F-CF37-4E66-9D6D-AFC3434C18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc4:*:*:*:*:*:*","matchCriteriaId":"2A575824-E005-4820-824A-4875594619E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*","matchCriteriaId":"080C7089-5662-4A94-9842-C4A26095DA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23.2:*:*:*:*:*:*:*","matchCriteriaId":"7AE38697-0B16-4032-9234-CA263E4A9885"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.24:*:*:*:*:*:*:*","matchCriteriaId":"DCB18BE2-B073-429C-ABE7-B8305793DAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.24:rc1:*:*:*:*:*:*","matchCriteriaId":"FA7216BA-A42F-4ED8-8086-B4FA483FDAB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.24.1:*:*:*:*:*:*:*","matchCriteriaId":"CB7D2048-CD61-46C0-830B-11976B275783"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.25:*:*:*:*:*:*:*","matchCriteriaId":"8DBA63FE-62AF-4F3D-B30C-550D17C4E35F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.25:rc1:*:*:*:*:*:*","matchCriteriaId":"AD0A0F19-020D-4578-9023-12B0CB646D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.25.1:*:*:*:*:*:*:*","matchCriteriaId":"96D5A1E3-FF0B-4C71-AA51-655D7106880D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:*:*:*:*:*:*:*","matchCriteriaId":"E5D425E6-E2E5-4452-9EAA-2697C1155784"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc1:*:*:*:*:*:*","matchCriteriaId":"9855FA26-0930-4AC9-A920-B394F6916349"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc2:*:*:*:*:*:*","matchCriteriaId":"BBA21246-7DF4-41BC-998A-05D38FC97C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc3:*:*:*:*:*:*","matchCriteriaId":"EE9A7984-22C9-4296-8E44-C010E67F193D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc4:*:*:*:*:*:*","matchCriteriaId":"51B2C42A-C252-4BD8-A908-8F30C2BF15E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc5:*:*:*:*:*:*","matchCriteriaId":"2137CEAD-0F19-43C5-A26D-1972564FCD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc6:*:*:*:*:*:*","matchCriteriaId":"B7552466-B782-4F16-8561-A2A51E94FED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F8C82D-3031-4C62-89FA-3BF56EA29727"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26.2:*:*:*:*:*:*:*","matchCriteriaId":"B3074CEA-46BD-4CAD-BF5C-10008A80E434"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B8374B5D-DE7A-4C3C-A5FE-579B17006A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C7494CE2-D3CC-404D-BE61-09A2E1FB3E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06E48482-D9AF-4038-80DA-27D9B4907C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9BC3C441-290F-471A-BA19-6B1C4D72A670"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"632ED295-B67D-43CF-BF38-CCE04088BA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"50F3835F-6F2B-4EA7-B111-3B3C26548BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta6:*:*:*:*:*:*","matchCriteriaId":"0DCF7BD2-7903-4DC5-ADDC-EFCDC58736C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta7:*:*:*:*:*:*","matchCriteriaId":"E5BECFE0-286F-4DA1-8CA9-6CEE861C3012"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta7.1:*:*:*:*:*:*","matchCriteriaId":"AFFF3245-2D0F-46E3-A1D6-319086489DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta8:*:*:*:*:*:*","matchCriteriaId":"C91F2524-99D1-4C4B-9A31-21C0FB8B4D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta9:*:*:*:*:*:*","matchCriteriaId":"7B1BC0FF-9DB6-4FCC-A845-053943CF0D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"419D4D16-E790-4872-B9AF-1320978768C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc5:*:*:*:*:*:*","matchCriteriaId":"73D30BA6-1EE0-4C3F-8F69-65C698A1B9A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D39FA25D-AB56-470D-94AB-14446DB7D475"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4225252F-5960-4A42-A575-00C125860E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A65D76A8-BBDD-4BDE-B789-D745C400DCBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A8B0F5A5-4252-4A9C-B830-2419E87AE5A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F9085056-3BE9-4309-9601-9CA0569BC215"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D8432455-9064-479F-B060-BF2A74ECC3EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8EF2D7-371B-4268-989E-25225CC1F7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"ABAC4CE9-1CFA-4279-B0CE-18F3C6FB9AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E16E37A0-F739-4EEE-A1BB-EBC558C62767"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DF0E2562-D0FC-404C-B725-617AEEF20AB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C831EC2A-C99D-4FB1-8E5C-2FF685792F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F37C4158-6C4E-448D-929B-288480748289"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"6BBA9D27-E3DC-45CE-B56B-2C6781AA6A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.11:rc1:*:*:*:*:*:*","matchCriteriaId":"14CD1CCD-DFF2-4813-B56F-EA1C78AA818E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.11:rc2:*:*:*:*:*:*","matchCriteriaId":"4499411B-C92E-47F3-A6F2-8C9011B1CBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"57325096-F4D8-4146-A6FD-93219F2C72D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.14:rc1:*:*:*:*:*:*","matchCriteriaId":"9684FD88-7422-4272-B9BC-D8638B1AA0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"648639A2-26C4-4EDA-A982-25D400836696"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"4F9F6FF8-8B88-4A02-B23A-0CADA8CE316E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.16:rc1:*:*:*:*:*:*","matchCriteriaId":"37DE011D-1C1B-46AC-9265-F82693CE3C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.16:rc2:*:*:*:*:*:*","matchCriteriaId":"790BF14A-0193-4A5C-802B-D82200B22342"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8FE4BCF-9AE7-4F41-BA84-E9537CC1EBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F25B0D15-7C09-4BBB-AC84-A1898F448DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F259057F-3720-45D8-91B4-70A11B759794"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"A106C460-4CE2-4AC3-B2FD-310F05507511"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"3E119FF9-2AD3-450D-8BBF-C6DD063246EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"759221D5-FC37-446D-9628-233B8D0B9120"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F82D4812-0429-42D4-BD27-C76CB9E7C368"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F8FE11D6-8C0A-450E-B6DA-3AFE04D82232"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D1FBCC8-4637-4A67-BFFD-C052C3C03C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F7307E10-9FA5-4940-B837-7936384F61DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"3D0DC9D6-D4D6-46CB-98DA-F4FC1835B6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DBBD0747-F3FF-46D8-A3C4-8268E37BC5AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"3F759F27-008E-47FB-AC0A-EF11DA19918E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"D15C82BA-BD1F-4A19-A907-E6C30042F537"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2E802481-C8BD-4218-8CDC-5DB112DA946C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.10:rc1:*:*:*:*:*:*","matchCriteriaId":"0004AADE-1652-4242-A97D-E9818FE03CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.10:rc2:*:*:*:*:*:*","matchCriteriaId":"543E9C91-60FE-43AE-9B94-08DD730BA814"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisknow:1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF81215F-0DD3-48FC-BA1C-19E42FCD47B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"565444DE-F67C-4B6E-AC1E-92FC0D8A87CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80E356B2-4AEA-4532-A6F8-13B814BEB2C8"},{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"60F261AB-3172-4245-8090-744294A0D08A"},{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3DD6B08-D77D-4275-8F91-2CA47FF6E363"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:a:-:business:*:*:*:*:*","matchCriteriaId":"B1868709-03F9-47AA-A196-367D783C62BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b:-:business:*:*:*:*:*","matchCriteriaId":"564A4529-997D-4615-BED8-AE3FB159689A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.1.3.2:-:business:*:*:*:*:*","matchCriteriaId":"FE9D66C4-F49D-4EC4-B5A9-24F28726A9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.1.3.3:-:business:*:*:*:*:*","matchCriteriaId":"BEFA5054-D5F9-4D07-9A66-D7AAD6953F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.2.0:-:business:*:*:*:*:*","matchCriteriaId":"D110DCEB-F2F9-4600-B49F-22952C71B785"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.2.1:-:business:*:*:*:*:*","matchCriteriaId":"3333A119-D92F-433C-BF5D-0037199256C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.1:-:business:*:*:*:*:*","matchCriteriaId":"19C44C33-EADA-48FD-A634-8066A003AFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.2:-:business:*:*:*:*:*","matchCriteriaId":"294A2BA2-26EB-40AD-B861-7FA9043CD097"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.3:-:business:*:*:*:*:*","matchCriteriaId":"4FAC61AF-BDF2-4397-A8F8-9D9155836E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.4:-:business:*:*:*:*:*","matchCriteriaId":"33DE61C2-8C6A-4CD3-8D56-E70C4356CD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.5:-:business:*:*:*:*:*","matchCriteriaId":"EECB5F75-BCE2-4777-933E-25EB5657750C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.6:-:business:*:*:*:*:*","matchCriteriaId":"B5D51557-3E67-4C9A-9753-472D13FCA5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.0:-:business:*:*:*:*:*","matchCriteriaId":"C063FCFA-B1C3-4ACB-B9E7-B3FC973FD898"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.1:-:business:*:*:*:*:*","matchCriteriaId":"761DB3A3-1540-4976-AEB2-F8E45CCCC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.2:-:business:*:*:*:*:*","matchCriteriaId":"B53CD2C1-9BF0-42F9-B3E3-2C9915E531C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.3:-:business:*:*:*:*:*","matchCriteriaId":"947F58B8-21AF-460B-8203-D2605A1F91D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c:-:business:*:*:*:*:*","matchCriteriaId":"7CD989BE-8FA0-4EDB-8442-C2E12BD01D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c.2.3:-:business:*:*:*:*:*","matchCriteriaId":"3FA908BA-BEF8-44A5-AC95-E7CF020D0C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c.3.0:-:business:*:*:*:*:*","matchCriteriaId":"78E8936C-033B-49E6-BB39-D5BBBC80EB55"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2009-008.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/59697","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37265","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37479","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37677","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36924","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1023133","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523277","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533137","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html","source":"secalert@redhat.com"},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/59697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1023133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523277","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3728","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el método ICC_Profile.getInstance en Java Runtime Environment (JRE) en Sun Java SE v5.0 anteriores a Update 22 y 6 anteriores a Update 17, y OpenJDK, permite a atacantes remotos saber que existen perfiles locales de color del consorcio internacional del color (IIC) a través de .. (punto punto) en el path, también conocido como Bug Id 6631533."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"B0E0373B-201D-408F-9234-A7EFE8B4970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"ABB1D4B3-54E6-455D-9238-B185DB012A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37581","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3969","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3970","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530098","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10520","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6657","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3729","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service (application crash) via a certain test suite, aka Bug Id 6815780."},{"lang":"es","value":"Vulnerabilidad no especificada en la funcionalidad de análisis sintáctico de fuentes TrueType en Sun Java SE v5.0 anteriores a Update 22 y 6 anteriores a Update 17 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través de cierto programa de chequeo, también conocido como Bug Id 6815780.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"349EC26C-D1B9-44E4-A58E-E05326B7EC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532904","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7537","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3730","sourceIdentifier":"cve@mitre.org","published":"2009-10-20T17:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the (2) searchWord, (3) maxHits, (4) scopedSearch, or (5) scope parameter to ReqWebHelp/basic/searchView.jsp."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en la característica ReqWeb Help (También conocida como Web Client Help system) en IBM Rational RequisitePro v7.1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de (1) el parámetro operation a ReqWebHelp/advanced/workingSet.jsp, o (2) searchWord, (3) maxHits, (4) scopedSearch, o el parámetro (5) scope a ReqWebHelp/basic/searchView.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_requisitepro:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"439CCAA6-D94A-484B-A475-56A54BE7E536"}]}]}],"references":[{"url":"http://osvdb.org/59088","source":"cve@mitre.org"},{"url":"http://osvdb.org/59089","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37052","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK83895","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36721","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2958","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK83895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3731","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks Publisher 6.x through 8.x; WebWorks Publisher 2003; and WebWorks ePublisher 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3 allow remote attackers to inject arbitrary web script or HTML via (1) wwhelp_entry.html, reachable through index.html and wwhsec.htm, (2) wwhelp/wwhimpl/api.htm, (3) wwhelp/wwhimpl/common/html/frameset.htm, (4) wwhelp/wwhimpl/common/scripts/switch.js, or (5) the window.opener component in wwhelp/wwhimpl/common/html/bookmark.htm, related to (a) unspecified parameters and (b) messages used in topic links for the bookmarking functionality."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebWorks Help v2.0 a la v5.0 en VMware vCenter v4.0 anterior a Update 1 Build 208156; VMware Server v2.0.2; VMware ESX v4.0; VMware Lab Manager v2.x; VMware vCenter Lab Manager v3.x y v4.x anterior a v4.0.1; VMware Stage Manager v1.x anterior a v4.0.1; WebWorks Publisher v6.x a la v8.x; WebWorks Publisher 2003; y WebWorks ePublisher v9.0.x a la v9.3, 2008.1 a la 2008.4, y 2009.x anterior a 2009.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección  a través de (1) wwhelp_entry.html alcanzable a través d index.html y wwhsec.htm, (2) wwhelp/wwhimpl/api.htm, (3) wwhelp/wwhimpl/common/html/frameset.htm, (4) wwhelp/wwhimpl/common/scripts/switch.js, o (5) el componente window.opener en wwhelp/wwhimpl/common/html/bookmark.htm, relacionado con (a) parámetros desconocidos y (b) mensajes usados en los enlaces de \"topic\" para la funcionalidad de marcadores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:9.0:*:*:*:*:*:*:*","matchCriteriaId":"0152043F-D767-431B-ADCF-154C43F3FB23"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:9.1:*:*:*:*:*:*:*","matchCriteriaId":"63A601BB-625C-41AD-888D-A8FC43621E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:9.2:*:*:*:*:*:*:*","matchCriteriaId":"477AD476-65A3-4901-8A51-0EC4BD1407D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:9.3:*:*:*:*:*:*:*","matchCriteriaId":"D4B5DDB8-B5F9-4F5A-8CA6-457EAC55C940"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:2008.1:*:*:*:*:*:*:*","matchCriteriaId":"D1F3B683-43E8-47E1-A156-B8B5B78F140E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:2008.2:*:*:*:*:*:*:*","matchCriteriaId":"7A80FBF8-39B1-485F-83F6-48E1AE50E15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:2008.3:*:*:*:*:*:*:*","matchCriteriaId":"328F3A49-3A14-486F-82C5-BD3CBF91C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:2008.4:*:*:*:*:*:*:*","matchCriteriaId":"984EAE97-3457-4ED7-AB2C-88CDFADCEDCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:2009.1:*:*:*:*:*:*:*","matchCriteriaId":"951EB18F-72AD-4984-8521-A241B51532D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:epublisher:2009.2:*:*:*:*:*:*:*","matchCriteriaId":"663DA7E2-02D8-4EDE-8BD9-55D318C80261"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:help:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B3C61DC8-4E65-4DDE-8718-BD55EF293F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:help:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8CFAF1F7-0F12-483A-AAF6-A186B96089A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:help:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D4F0F35-2597-4350-BF95-9B289C6B5BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:help:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8F0E0770-2B8E-4F34-B311-572546DF42C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:publisher:6.0:*:*:*:*:*:*:*","matchCriteriaId":"18F068C7-4ACB-40ED-BCFC-D9ABC531FD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:publisher:7.0:*:*:*:*:*:*:*","matchCriteriaId":"B072DD95-C59E-40BB-A037-3044E8C5A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:publisher:8.0:*:*:*:*:*:*:*","matchCriteriaId":"20AC0582-144C-4A65-A0EC-333819958D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:webworks:publisher:2003:*:*:*:*:*:*:*","matchCriteriaId":"2BB09974-DE62-4C4C-8AC5-84E5FED80341"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"60B31894-78E7-41A6-857C-D7A0C1C52838"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"25395564-5FFF-40BC-BE82-21FA9214EBE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:lab_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"35E0F13A-6576-4388-B382-9EF6F5C340C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E565F23-AEEE-41A4-80EC-01961AD5560E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:stage_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"F98A2B29-348C-4142-8D86-89E7FD3531AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:stage_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"21FBEF2D-D9E0-47D5-9B36-6D0049C51A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_lab_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0BD3006F-B84C-43C8-B451-64ECBF6A3656"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_lab_manager:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A9E308D2-12B1-411D-B4AC-8F6CE964A951"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_lab_manager:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6985CAE9-0FB0-4D5E-A227-010B09A5EE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_lab_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BAE62CE8-9951-472F-AFD3-6858B2E6FB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:vcenter_stage_manager:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6AB621E8-4E4B-410A-B57B-1B788442ED3F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000073.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38749","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38842","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023683","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/62738","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/62739","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/62740","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/62741","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/62742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/509883/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37346","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.webworks.com/Security/2009-0001/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/62738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/62739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/62740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/62741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/62742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/509883/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.webworks.com/Security/2009-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3733","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en VMware Server v1.x anteriores a v1.0.10 build 203137 y v2.x anteriores a v2.0.2 build 203138 en Linux, VMware ESXi v3.5 y VMware ESX v3.0.3 y v3.5 permite a atacantes remotos leer ficheros de su elección a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B6F7416-E694-4EC9-9FE5-0C24448ECB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"EE5ECA1B-7415-4390-8018-670F2C3CDF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BD59C463-F352-4F6C-853F-415E3FB4ABDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"73EC33AB-E92A-4AA8-A523-C341133BB515"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53197903-0614-4460-8944-C1B5257D71A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:*","matchCriteriaId":"EB051A5C-5F66-4732-949A-48B0FDE4AFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F037B05F-6F92-4BE1-B672-F677CBEFD075"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DD6D27-1335-44EF-8B69-A9163A67BC2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BFEAE8-0118-4548-A6EA-E90FA8FE7AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.4_build_56528:*:*:*:*:*:*:*","matchCriteriaId":"87489138-7756-453C-A149-F2C4F95EFF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42049891-38B7-4BB7-8DA5-A87169E2D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"07139DF7-C36B-4FED-8558-7FA49BE0BCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"7E0D7307-5946-45DC-88D3-6BC72EF50184"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"89699BB6-9E41-41DC-B597-B45CA05313A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C9D09AC-7D9B-4150-86BC-19F44F6F2CA8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A2543D5-AE09-4E90-B27E-95075BE4ACBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E6CFDD84-A482-42C2-B43F-839F4D7F1130"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37186","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023088","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1023089","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36842","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3062","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2009/000069.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1023089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3736","sourceIdentifier":"cret@cert.org","published":"2009-11-29T13:07:52.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file."},{"lang":"es","value":"ltdl.c en libltdl en GNU Libtool v1.5.x, y v2.2.6 anterior v2.2.6b, intenta abrir un archivo .la en el directorio de trabajo, lo que permite a usuarios locales obtener privilegios a través de un troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0418D690-1347-49A7-9962-BA70DA7858E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8C580E0A-701E-4AB9-8B28-A56FC5BFF389"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"70A39F0F-45B0-49D9-8793-D73FD0E86829"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"5BE3BBE7-28DD-47EF-9342-BFE9F5083653"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5E95FAA6-739A-4E5E-AB22-8626B77E54EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"ABF88238-E786-4F8E-8101-ACD0264D0AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"4F4EFADC-D576-4A2F-B41D-8786721B89DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.14:*:*:*:*:*:*:*","matchCriteriaId":"749BF2C8-250D-4416-A037-2D0F74C209C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.16:*:*:*:*:*:*:*","matchCriteriaId":"5DF254A6-7175-4D61-82E7-82FAD2BA6787"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"93146915-94E2-402A-87FC-F4BEEDB5DEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.20:*:*:*:*:*:*:*","matchCriteriaId":"3D960318-4293-48E2-8C09-C9BE463FE9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.22:*:*:*:*:*:*:*","matchCriteriaId":"3E8C014C-FD29-4E76-925F-9AD066BF2FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.24:*:*:*:*:*:*:*","matchCriteriaId":"BC2F6775-5513-4BCA-9E0C-44D25335331C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5.26:*:*:*:*:*:*:*","matchCriteriaId":"738DA48E-A669-40D3-AAF1-547272AE1D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:2.2.6a:*:*:*:*:*:*:*","matchCriteriaId":"00FB75A4-05E0-427A-B6E3-1319761B7820"}]}]}],"references":[{"url":"ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz","source":"cret@cert.org","tags":["Patch"]},{"url":"http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec","source":"cret@cert.org","tags":["Patch"]},{"url":"http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup","source":"cret@cert.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html","source":"cret@cert.org"},{"url":"http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html","source":"cret@cert.org","tags":["Patch"]},{"url":"http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html","source":"cret@cert.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/37414","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37489","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37997","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38190","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38577","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38617","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38696","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/38915","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/39299","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/39347","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/43617","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/55721","source":"cret@cert.org"},{"url":"http://security.gentoo.org/glsa/glsa-201311-10.xml","source":"cret@cert.org"},{"url":"http://support.avaya.com/css/P8/documents/100074869","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:307","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0039.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/37128","source":"cret@cert.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2011/0574","source":"cret@cert.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=537941","source":"cret@cert.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687","source":"cret@cert.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951","source":"cret@cert.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cret@cert.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html","source":"cret@cert.org"},{"url":"ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201311-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100074869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2011/0574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=537941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3744","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144."},{"lang":"es","value":"rep_serv.exe v6.3.1.3 en el servidor en EMC RepliStor permite a atacantes remotos causar una denegación de servicio a través del un paquete manipulado al puerto TCP 7144."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:replistor:6.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B5DA5667-D435-4100-87ED-537C3F8232F1"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_emc_repli_crash.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507322/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36738","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://retrogod.altervista.org/9sg_emc_repli_crash.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3745","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la página de ayuda en IBM Rational AppScan Enterprise Edition v5.5.0.2 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de la cadena de consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_appscan:5.5.0.2:*:enterprise:*:*:*:*:*","matchCriteriaId":"ED2603F1-AA5C-4CCA-A4E7-B53661864CFB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37093","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024704","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36734","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2974","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3746","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711."},{"lang":"es","value":"XScreenSaver de Sun Solaris 10, cuando la característica de accesibilidad está habilitada, permite a atacantes cercanos físicamente obtener información sensible leyendo las ventanas emergentes que se muestran incluso con el monitor bloqueado. Se trata de una vulnerabilidad diferente de CVE-2009-1276 y CVE-2009-2711."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-29-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268288-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-29-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268288-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3747","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter.  NOTE: this was originally reported for tbmnet.php, but that program does not exist in the TBmnetCMS 1.0 distribution."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en TBmnetCMS v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro \"content\". NOTA: Esta vulnerabilidad fue originalmente reportada por tbmnet.php, pero ese programa ya no existe en la distribución de TBmnetCMS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tbmnet:tbmnetcms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1C13B18B-7B8A-4CD8-84E0-2CBE34FB7A69"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/tbmnetcms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53828","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/tbmnetcms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3748","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, and (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName parameters to actions/msgForwardToRiskFilter.asp and viewHeaders.asp in web/msgList/viewmsg/; and (11) the subject in an e-mail message that is held in a Queue."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Web Administrator en Websense Personal Email Manager v7.1 anteriores a Hotfix v4 y Email Security v7.1 anteriores a Hotfix v4 permite a los atacantes remotos inyectar arbitrariamente una secuencia de comandos web o HTML a través de los parámetros (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, y (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName para actions/msgForwardToRiskFilter.asp y viewHeaders.asp en web/msgList/viewmsg/; y (11) el asunto en un mensaje de correo electrónico que se mantiene en una Queue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websense:personal_email_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6950059E-09FD-4CE8-ABAE-396590138D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:websense_email_security:7.1:*:*:*:*:*:*:*","matchCriteriaId":"098603E7-B186-451E-ACC6-113185D2D7DE"}]}]}],"references":[{"url":"http://kb.websense.com/display/4/kb/article.aspx?aid=4786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sotiriu.de/adv/NSOADV-2009-003.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507330/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36741","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2987","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://kb.websense.com/display/4/kb/article.aspx?aid=4786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sotiriu.de/adv/NSOADV-2009-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507330/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3749","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response."},{"lang":"es","value":"El Web Administrator service (STEMWADM.EXE) en Websense Personal Email Manager v7.1 anterior Hotfix v4 y Email Security v7.1 anterior Hotfix v4 permite a atacantes remotos causar una denegación de servicio (caída) enviando una petición HTTP GET en el puerto TCP 8181 y cerrando el socket antes de que el servicio pueda enviar la respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websense:email_security:7.1:*:*:*:*:*:*:*","matchCriteriaId":"89437E13-AB86-465A-97A7-67076408552F"},{"vulnerable":true,"criteria":"cpe:2.3:a:websense:personal_email_manager:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6950059E-09FD-4CE8-ABAE-396590138D63"}]}]}],"references":[{"url":"http://kb.websense.com/article.aspx?article=4786&p=12","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://kb.websense.com/display/4/kb/article.aspx?aid=4786","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sotiriu.de/adv/NSOADV-2009-002.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507329/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2987","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://kb.websense.com/article.aspx?article=4786&p=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://kb.websense.com/display/4/kb/article.aspx?aid=4786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sotiriu.de/adv/NSOADV-2009-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507329/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3750","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en read.php en ToyLog v0.1, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"idm\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:santostefano_giovanni:toylog:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F620BC7C-3FB5-44D9-96A2-44B1A274967B"}]}]}],"references":[{"url":"http://osvdb.org/55804","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9109","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51633","source":"cve@mitre.org"},{"url":"http://osvdb.org/55804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3751","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en home.php de Opial v1.0, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través del parámetro genres_parent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D17DD783-6541-487C-A2D7-5A3AC3142023"}]}]}],"references":[{"url":"http://secunia.com/advisories/35677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9122","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35641","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3752","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en home.php en Opial v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro genres_parent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D17DD783-6541-487C-A2D7-5A3AC3142023"}]}]}],"references":[{"url":"http://secunia.com/advisories/35677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9122","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35641","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3753","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en Opial v1.0, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con una extensión ejecutable como \"User Image\" y posteriormente accediendo a él a través de una petición del archivo en \"userimages\". Relacionado con register.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opial:opial:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D17DD783-6541-487C-A2D7-5A3AC3142023"}]}]}],"references":[{"url":"http://secunia.com/advisories/35677","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9122","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35641","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3754","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to modules/bms/invoices_discount_ajax.php, (2) f parameter to dbgraphic.php, and (3) tid parameter in a show action to advancedsearch.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en phpBMS v0.96 permite a los atacantes remotos ejecutar arbitrariamente comandos SQL a través de el parámetro (1) id para modules/bms/invoices_discount_ajax.php, (2) f para  dbgraphic.php, y (3) parámetro tid en una acción show para advancedsearch.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*","matchCriteriaId":"5F66ED14-9F1C-4DBD-A67C-E2CC9BFF2797"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51650","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3755","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\\base\\myaccount.php; and the PATH_INFO to (3) modules_view.php, (4) tabledefs_options.php, and (5) adminsettings.php in phpbms\\modules\\base\\."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en phpBMS v0.96 permite a atacantes remotos inyectar código web o HTML a su elección a través de PATH_INFO en(1) index.php y (2) modules\\base\\myaccount.php; y  PATH_INFO en (3) modules_view.php, (4) tabledefs_options.php, y (5) adminsettings.php en phpbms\\modules\\base\\."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*","matchCriteriaId":"5F66ED14-9F1C-4DBD-A67C-E2CC9BFF2797"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51651","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3756","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message."},{"lang":"es","value":"phpBMS v0.96 permite a atacantes remotos obtener información sensible a través de peticiones directas en (1) footer.php, (2) header.php, (3) la acción show en advancedsearch.php, y (4) choicelist.php, lo que revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kreotek:phpbms:0.96:*:*:*:*:*:*:*","matchCriteriaId":"5F66ED14-9F1C-4DBD-A67C-E2CC9BFF2797"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51652","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3757","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to config/edituser.php; (2) location, (3) sessionid, and (4) vmname parameters to console.php; (5) vmrefid and (6) vmname parameters to forcerestart.php; and (7) vmname and (8) vmrefid parameters to forcesd.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en en el XenServer Resource Kit de Citrix XenCenterWeb, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de (1) el parámetro username de config/edituser.php; (2) los parámetros location, (3) sessionid y (4) vmname de console.php; (5) los parámetros vmrefid y (6) vmname de forcerestart.php; y (7) los parámetros vmname (8) vmrefid de forcesd.php.\r\nNOTA: Algunos de estos detalles han sido obtenidos de fuentes externas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xencenterweb:*:*:*:*:*:*:*:*","matchCriteriaId":"CA67DCE8-9246-467B-872C-FF9518EF94CA"}]}]}],"references":[{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022520","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504764","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51575","source":"cve@mitre.org"},{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3758","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en ogin.php en sample code en XenServer Resource Kit en Citrix XenCenterWeb permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro username. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xencenterweb:*:*:*:*:*:*:*:*","matchCriteriaId":"CA67DCE8-9246-467B-872C-FF9518EF94CA"}]}]}],"references":[{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022520","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504764","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51574","source":"cve@mitre.org"},{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3759","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for (1) requests that change the password via the username parameter to config/changepw.php or (2) stop a virtual machine via the stop_vmname parameter to hardstopvm.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en sample code en el XenServer Resource Kit en Citrix XenCenterWeb en  Citrix XenCenterWeb, permite a atacantes remotos secuestras la autenticación de los administradores para (1) peticiones que modifican la contraseña mediante el parámetro \"username\" en config/changepw.php o (2)parar una máquina virtual mediante el parámetro stop_vmname en hardstopvm.php. NOTA: algunos detalles han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xencenterweb:-:*:*:*:*:*:*:*","matchCriteriaId":"017F01DD-E95A-4073-9AA1-69A55786ABA3"}]}]}],"references":[{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022520","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9106","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504764","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35592","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51576","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1022520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/9106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/504764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/35592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3760","sourceIdentifier":"cve@mitre.org","published":"2009-10-22T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary PHP code into include/config.ini.php via the pool1 parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en config/writeconfig.php en el código de muestra en XenServer Resource Kit en Citrix XenCenterWeb permite a los atacantes remotos inyectar arbitrariamente código PHP en include/config.ini.php a través del parámetro pool1. NOTA: alguna de estos detalles han sido obtenidos de información de terceros"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:xencenterweb:*:*:*:*:*:*:*:*","matchCriteriaId":"CA67DCE8-9246-467B-872C-FF9518EF94CA"}]}]}],"references":[{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022520","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/504764","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1022520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/9106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/504764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/35592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3765","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"mutt_ssl.c en mutt 1.5.19 y 1.5.20, cuando usa OenSSL, no maneja de forma adecuada el caracter  '\\0' en un nombre de dominio, dentro del campo sujeto del Common Name (CN) en los certificados X.509, lo que permite a atacantes man-in-the-middle, espíar servidores SSL de su elección a través de certificados manipulados concedidos por Autoridades Certificadoras, esta relacionado con CVE-2009-2408."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mutt as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n","lastModified":"2009-10-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.5.19:*:*:*:*:*:*:*","matchCriteriaId":"89C33B31-B9BC-4E43-8221-219380B4B682"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.5.20:*:*:*:*:*:*:*","matchCriteriaId":"591AA471-643C-49FB-8922-F91774946177"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]}]}],"references":[{"url":"http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"cve@mitre.org"},{"url":"http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3766","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."},{"lang":"es","value":"En el archivo mutt_ssl.c en mutt versión 1.5.16 y otras versiones anteriores a 1.5.19, cuando es usado OpenSSL, no comprueba el nombre de dominio en el campo Common Name (CN) de un certificado X.509, que permite a los atacantes de tipo man-in-the-middle falsificar servidores SSL por medio de un certificado válido arbitrario."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3766\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw.","lastModified":"2009-11-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.16","versionEndExcluding":"1.5.19","matchCriteriaId":"7A318134-FDFF-4D07-9DCD-7C7F04148552"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]}]}],"references":[{"url":"http://dev.mutt.org/trac/ticket/3087","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://dev.mutt.org/trac/ticket/3087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3767","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"libraries/libldap/tls_o.c en OpenLDAP, cuando se usa OpenSSL, no maneja de forma adecuada el caracter  '\\0' en un nombre de dominio, dentro del campo sujeto del Common Name (CN) en los certificados X.509, lo\r\nque permite a atacantes man-in-the-middle, espíar servidores SSL de su elección a través de certificados manipulados concedidos por Autoridades Certificadoras, esta relacionado con CVE-2009-2408.\r\n"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3767\n\nThis issue was addressed in the openldap packages as shipped with Red Hat Enterprise Linux 5 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0198.html and https://rhn.redhat.com/errata/RHSA-2010-0543.html respectively.\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future openldap update may address this flaw in Red Hat Enterprise Linux 3.","lastModified":"2010-07-20T00:00:00.000"},{"organization":"OpenLDAP","comment":"OpenLDAP reported this issue and published a patch for it on 2009-07-30. The patch was included in OpenLDAP 2.4.18 which was released on 2009-09-06. The current release of OpenLDAP is available from the following location:\n\nhttp://www.openldap.org/software/download/","lastModified":"2009-10-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.18","matchCriteriaId":"1479E6E9-32C0-437A-97D0-896D354BCF46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.2","matchCriteriaId":"8333C974-DF5B-4098-A766-EB8D875817F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38769","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40677","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-36.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0543.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3056","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-36.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0543.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3778","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Moodle Course List v6.x anteriores a v6.x-1.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adam_gerson:moodle_courselist:6.x-1.2:beta1:*:*:*:*:*:*","matchCriteriaId":"87DA686A-DCF9-4195-80BD-6D48B1E122BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_gerson:moodle_courselist:6.x-1.2:beta2:*:*:*:*:*:*","matchCriteriaId":"88DF37C4-2FC0-43CF-BB70-391304590477"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/610986","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59100","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36787","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3001","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53895","source":"cve@mitre.org"},{"url":"http://drupal.org/node/610986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3779","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the theme_vcard function to a theme and the use of default content."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo para Drupal vCard v5.x anteriores a v5.x-1.4 y v6.x anteriores a v6.x-1.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados, relativos a añadir la función theme_vcard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"68E24484-76FB-47A3-BA11-AB184EF0132C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"D46E1985-7447-45AB-A134-873ACC037745"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"A3DDF905-F7F8-406C-B0C8-AC8C2C7F35B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"5A49EFFA-FE52-45F6-87B0-20FBDEC2506A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"E4C7798D-100B-492C-B8E4-45832E9858F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"D4039EB8-B9E2-4A9F-93AE-2B6C8CF9F54F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"B5ED742A-5E9D-4ABD-ADCA-FA19294FA8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"28DE2004-2E0B-4F5D-9A8D-471105CA1C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_auditor:vcard:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"EAB8891E-ADE2-4D6A-8EBE-A14044CCAC59"}]}]}],"references":[{"url":"http://drupal.org/node/610416","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610420","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610996","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37127","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36789","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53903","source":"cve@mitre.org"},{"url":"http://drupal.org/node/610416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3780","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1-alpha1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Abuse v5.x anteriores a v5.x-2.1 y v6.x anteriores a v6.x-1.1-alpha1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de véctores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ashok_modi:abuse:5.x-1.0:beta:*:*:*:*:*:*","matchCriteriaId":"3E1DAD14-7289-4D27-95A9-48A2531B2A1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ashok_modi:abuse:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"DCBF43A6-9FAD-4646-913F-9572220493C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ashok_modi:abuse:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"43207B8E-B1B7-40B8-80C2-30B82FFD5CB9"}]}]}],"references":[{"url":"http://drupal.org/node/610784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610900","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611078","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36791","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53898","source":"cve@mitre.org"},{"url":"http://drupal.org/node/610784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3781","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors."},{"lang":"es","value":"La función filefield_file_download en módulo de Drupal, FileField v6.x-3.1, no comprueba de forma adecuada los permisos de acceso al nodo para los ficheros privados del núcleo, lo que permite a los atacantes remotos acceder a ficheros no autorizados a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quicksketch:filefield:6.x-3.1:*:*:*:*:drupal:*:*","matchCriteriaId":"5157C153-BECD-4169-BCF7-FB8B6D99FB98"}]}]}],"references":[{"url":"http://drupal.org/files/issues/filefield-node-access-fix-516104-3.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/516104","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://drupal.org/node/609874","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://drupal.org/node/611128","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37130","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36792","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53897","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://drupal.org/files/issues/filefield-node-access-fix-516104-3.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/516104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://drupal.org/node/609874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://drupal.org/node/611128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3782","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with \"View own userpoints\" permissions to read the userpoint data of arbitrary users via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el módulo para drupal Userpoints v6.x anteriores a 6.x-1.1, permite a usuarios remotos autenticado, con permisos \"View own userpoints\", leer los datos de puntos de usuario de usuarios de su elección a través de vectores de ataque desconocidos.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2bits:userpoints:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"D003179B-E321-467C-962E-9D57DEBB2EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:2bits:userpoints:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"47E44176-5E7E-4BA3-B6C5-32932BE70691"}]}]}],"references":[{"url":"http://drupal.org/node/610818","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610828","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37123","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36786","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2998","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53896","source":"cve@mitre.org"},{"url":"http://drupal.org/node/610818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3783","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vector."},{"lang":"es","value":"Vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo para Drupal Simplenews Statistics v6.x anteriores a v6.x-2.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del un vector no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E5DB81-4CAD-4A99-9470-2CE3844BD69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"CE2B09EB-73C8-42C9-A997-BA259C32CE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D3AA66A-3888-499B-86E9-5C78C89306FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4E3DAFA9-41B8-46D9-BD3F-AA9B5F0CF6FF"}]}]}],"references":[{"url":"http://drupal.org/node/590098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36790","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53905","source":"cve@mitre.org"},{"url":"http://drupal.org/node/590098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3784","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en el módulo para drupal Simplenews Statistics v6.x anteriores a v6.x-2.0, permite a atacantes remotos redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E5DB81-4CAD-4A99-9470-2CE3844BD69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"CE2B09EB-73C8-42C9-A997-BA259C32CE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D3AA66A-3888-499B-86E9-5C78C89306FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4E3DAFA9-41B8-46D9-BD3F-AA9B5F0CF6FF"}]}]}],"references":[{"url":"http://drupal.org/node/590098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36790","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/590098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3785","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allow remote attackers to hijack the authentication of arbitrary users via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en el módulo de Drupal Simplenews Statistics v6.x anteriores a v6.x-2.0, permite a atacantes remotos secuestras la autenticación de usuarios de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E5DB81-4CAD-4A99-9470-2CE3844BD69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"CE2B09EB-73C8-42C9-A997-BA259C32CE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D3AA66A-3888-499B-86E9-5C78C89306FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sjoerd_arendsen:simplenews_statistics:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4E3DAFA9-41B8-46D9-BD3F-AA9B5F0CF6FF"}]}]}],"references":[{"url":"http://drupal.org/node/590098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36790","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53906","source":"cve@mitre.org"},{"url":"http://drupal.org/node/590098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/611002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3786","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title."},{"lang":"es","value":"Vulnerabilidad de tipo cross-site scripting (XSS) en Organic Groups (OG) Vocabulary versiones 5.x anteriores a 5.x-1.1 y versiones 6.x anteriores a 6.x-1.1, un módulo para Drupal, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del título group."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:og_vocab:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DD25E2-9A5F-47B8-B3AC-EAC2A2038D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:og_vocab:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"99E3FF10-3656-426F-BBB1-35D103BEE915"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/605094","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610948","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/621960","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623674","source":"cve@mitre.org"},{"url":"http://osvdb.org/59129","source":"cve@mitre.org"},{"url":"http://osvdb.org/59673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36784","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36929","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3000","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53902","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54150","source":"cve@mitre.org"},{"url":"http://drupal.org/node/605094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/610948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/621960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/623674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3787","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with \"logs/\" in between two . (dot) characters, which is filtered into a \"../\" sequence."},{"lang":"es","value":"files.php en Vivvo CMS v4.1.5.1 permite a atacates remotos a conducir ataques de directorio transversal y leer ficheros de su elección a través del parámetro \"file\" con \"logs/\" entre dos caracteres . (punto), que es filtrado en una secuencia \"../\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vivvo:vivvo:4.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C77B153E-144B-4502-8AA8-03517C217DA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/37117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507358/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36783","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-75.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507358/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/advisory-75.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3788","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en OpenDocMan v1.2.5, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro frmuser (también conocido como Username)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"}]}]}],"references":[{"url":"http://osvdb.org/59301","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36777","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53886","source":"cve@mitre.org"},{"url":"http://osvdb.org/59301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3789","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the last_message parameter to (1) add.php, (2) toBePublished.php, (3) index.php, and (4) admin.php; the PATH_INFO to the default URI to (5) category.php, (6) department.php, (7) profile.php, (8) rejects.php, (9) search.php, (10) toBePublished.php, (11) user.php, and (12) view_file.php; and (13) the caller parameter in a Modify User action to user.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en OpenDocMan v1.2.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"last_message\" sobre (1) add.php, (2) toBePublished.php, (3) index.php, y (4) admin.php; el parámetro PATH_INFO sobre la dirección Web por defecto (5) category.php, (6) department.php, (7) profile.php, (8) rejects.php, (9) search.php, (10) toBePublished.php, (11) user.php, y (12) view_file.php; y (13) el parámetro caller en una acción Modify User sobre user.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"}]}]}],"references":[{"url":"http://osvdb.org/59302","source":"cve@mitre.org"},{"url":"http://osvdb.org/59303","source":"cve@mitre.org"},{"url":"http://osvdb.org/59304","source":"cve@mitre.org"},{"url":"http://osvdb.org/59305","source":"cve@mitre.org"},{"url":"http://osvdb.org/59306","source":"cve@mitre.org"},{"url":"http://osvdb.org/59307","source":"cve@mitre.org"},{"url":"http://osvdb.org/59308","source":"cve@mitre.org"},{"url":"http://osvdb.org/59309","source":"cve@mitre.org"},{"url":"http://osvdb.org/59310","source":"cve@mitre.org"},{"url":"http://osvdb.org/59311","source":"cve@mitre.org"},{"url":"http://osvdb.org/59312","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36777","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53887","source":"cve@mitre.org"},{"url":"http://osvdb.org/59302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3790","sourceIdentifier":"cve@mitre.org","published":"2009-10-26T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FormMax import (.aim) file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en FormMax (formalmente AcroForm) Evalucación v3.5 ,permite a atacantes remotos causar una denegación de servicio o posiblemente ejecutar código arbitrario a través de fichero de importación FormMax (.aim). NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido de información de terceros.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutepdf:formmax:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3DB60568-4735-450E-B807-1FB4F819E735"}]}]}],"references":[{"url":"http://osvdb.org/59079","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36943","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53890","source":"cve@mitre.org"},{"url":"http://osvdb.org/59079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3791","sourceIdentifier":"psirt@adobe.com","published":"2009-12-21T16:30:00.267","lastModified":"2025-04-23T16:15:19.770","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Adobe Flash Media Server (FMS) versiones anteriores a v3.5.3 permite a atacantes remotos provocar una denegación de servicio (agotamiento de recursos) mediante vectores desconocidos."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"152EFBB2-7E21-4D65-A332-B321A954CB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"27046DD1-3C16-486F-B685-26DBAA024578"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73544702-D995-43BA-92CB-01ED3642D22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7C5602CE-0860-46EC-9D31-13A83A81476A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CE2057CB-905A-4E81-A9EB-898105B2DF0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"95E05CA6-B186-4213-A46F-C4E0458B2CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9F9D585C-DBD6-4E13-A8FF-E043EC162D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE4A07B6-E5DA-4781-ABB3-DB2663E2A737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"84681400-0CBD-41D1-94D0-B9045958793D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29A5E8DC-E664-4FAF-9ED9-7191433F01E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7718612E-7563-4E7B-B8F1-0DA6DAA74E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CCFF63A0-DCF8-484A-A8B0-010ECED76CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8334A448-0DFF-4571-81BC-81ADEDBD9D7C"}]}]}],"references":[{"url":"http://www.adobe.com/support/security/bulletins/apsb09-18.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37419","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3792","sourceIdentifier":"psirt@adobe.com","published":"2009-12-21T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Adobe Flash Media Server (FMS) versiones anteriores a v3.5.3 permite a atacantes remotos cargar fichero DLL de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"152EFBB2-7E21-4D65-A332-B321A954CB46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"27046DD1-3C16-486F-B685-26DBAA024578"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73544702-D995-43BA-92CB-01ED3642D22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7C5602CE-0860-46EC-9D31-13A83A81476A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CE2057CB-905A-4E81-A9EB-898105B2DF0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"95E05CA6-B186-4213-A46F-C4E0458B2CA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9F9D585C-DBD6-4E13-A8FF-E043EC162D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE4A07B6-E5DA-4781-ABB3-DB2663E2A737"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"84681400-0CBD-41D1-94D0-B9045958793D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"29A5E8DC-E664-4FAF-9ED9-7191433F01E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7718612E-7563-4E7B-B8F1-0DA6DAA74E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CCFF63A0-DCF8-484A-A8B0-010ECED76CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8334A448-0DFF-4571-81BC-81ADEDBD9D7C"}]}]}],"references":[{"url":"http://www.adobe.com/support/security/bulletins/apsb09-18.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37420","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3794","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file."},{"lang":"es","value":"Desbordamiento del búfer de la pila en Adobe Flash Player anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 permite a atacantes remotos ejecutar código arbitrario a través de las dimensiones manipuladas de datos JPEG en un fichero SWF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.32.18","matchCriteriaId":"6EBD1150-4225-46AC-AF3A-A981FF80EB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"33AC4365-576C-487A-89C5-197A26D416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*","matchCriteriaId":"FE848097-01E6-4C9B-9593-282D55CC77D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://osvdb.org/60885","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023306","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"psirt@adobe.com"},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"psirt@adobe.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508336/100/0/threaded","source":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-092/","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"psirt@adobe.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54631","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15948","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7465","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8686","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508336/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-092/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3796","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a \"data injection vulnerability.\""},{"lang":"es","value":"Adobe Flash Player anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 podría permitir a atacantes ejecutar código arbitrario a través de vectores sin especificar, relacionado con la \"vulnerabilidad de inyección de datos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.32.18","matchCriteriaId":"6EBD1150-4225-46AC-AF3A-A981FF80EB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"33AC4365-576C-487A-89C5-197A26D416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*","matchCriteriaId":"FE848097-01E6-4C9B-9593-282D55CC77D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://osvdb.org/60886","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023306","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"psirt@adobe.com"},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54632","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16216","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7460","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7763","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3797","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption."},{"lang":"es","value":"Adobe Flash Player v10.x anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 podría permitir a atacantes ejecutar código arbitrario a través de vectores que inicia una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*","matchCriteriaId":"60540FDE-8C31-4679-A85E-614B1EFE1FF0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023306","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"psirt@adobe.com"},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54633","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15795","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7140","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8350","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3798","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption."},{"lang":"es","value":"Adobe Flash Player anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 podría permitir a atacantes ejecutar código a través de vectores sin especificar que inician una corrupción de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.32.18","matchCriteriaId":"6EBD1150-4225-46AC-AF3A-A981FF80EB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"33AC4365-576C-487A-89C5-197A26D416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*","matchCriteriaId":"FE848097-01E6-4C9B-9593-282D55CC77D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023306","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"psirt@adobe.com"},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54634","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16340","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6899","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7902","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3799","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to \"generation of ActionScript exception handlers.\""},{"lang":"es","value":"Desbordamiento de entero en la funcion Verifier::parseExceptionHandlers en Adobe Flash Player anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 permite a atacantes remotos ejecutar código arbitrario a través de un fichero SWF con un valor de \"exception_count\" que inicia una corrupción de la memoria, relacionado con la \"generación de administradores de excepciones de ActionScript\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.32.18","matchCriteriaId":"6EBD1150-4225-46AC-AF3A-A981FF80EB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"33AC4365-576C-487A-89C5-197A26D416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*","matchCriteriaId":"FE848097-01E6-4C9B-9593-282D55CC77D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://osvdb.org/60889","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023306","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"psirt@adobe.com"},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508334/100/0/threaded","source":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-093/","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54635","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16315","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7191","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8208","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508334/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-093/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3800","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Adobe Flash Player anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 permite a atacantes producir una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.32.18","matchCriteriaId":"6EBD1150-4225-46AC-AF3A-A981FF80EB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"33AC4365-576C-487A-89C5-197A26D416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*","matchCriteriaId":"FE848097-01E6-4C9B-9593-282D55CC77D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023306","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"psirt@adobe.com"},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"psirt@adobe.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54636","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16054","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6972","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8613","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1658.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3801","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka Password) parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en OpenDocMan v1.2.5 permite a atacantes remotos ejecutar comandos SQL de su elección a a través del parámetro frmpass (como Password). NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opendocman:opendocman:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4E59FF8B-094D-4C8E-A8F5-D6177D4924CA"}]}]}],"references":[{"url":"http://secunia.com/advisories/30750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3802","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname (\"%%%\") to _admin/index.php, which reveals the installation path and other information in an error message."},{"lang":"es","value":"Amiro.CMS 5.4.0.0 y versiones anteriores permite a atacantes remotos obtener información sensible mediante un loginname (\"%%%\") no válido a _admin/index.php, el cual revela la ruta de la instalación y otra información adicional en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.0.0","matchCriteriaId":"8958D062-7F6B-497C-A273-12F537EE47B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"A538289B-F340-423F-B7D9-93E804B7F700"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0F45D39D-2C50-405D-8F0C-5F0BD1FA293E"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7047B7B0-C8F1-49D0-9C38-AFF4CA220BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EEC5CC9B-6DD1-4474-AD17-F210762ECAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EA4D3C52-71E2-4F66-855E-49455A84A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"6F270541-3537-42AB-BDEA-CE2C4EE3D906"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"80D6D34B-B6E8-4DD4-9FE7-815FD34E2017"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"35FBCDB4-F23D-4CFC-B39B-F76AED4E4EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D8378F96-4665-4F21-8434-18E0C77B704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A38E7DE1-D454-4AEE-BFFE-5F4B0D60791E"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7EFB18D0-1757-4CB0-9A94-FABF66C55F5A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/ONSEC-09-005.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.onsec.ru/vuln?id=12","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53894","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/ONSEC-09-005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.onsec.ru/vuln?id=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3803","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the status_message parameter to (1) /news, (2) /comment, (3) /forum, (4) /blog, and (5) /tags; the status_message parameter to (6) forum.php, (7) discussion.php, (8) guestbook.php, (9) blog.php, (10) news.php, (11) srv_updates.php, (12) srv_backups.php, (13) srv_twist_prevention.php, (14) srv_tags.php, (15) srv_tags_reindex.php, (16) google_sitemap.php, (17) sitemap_history.php, (18) srv_options.php, (19) locales.php and (20) plugins_wizard.php in _admin/; a crafted IMG BBcode tag in the message body of a (21) forum, (22) guestbook, or (23) comment; (24) the content of an avatar file, which is not properly handled by Internet Explorer; and (25) the loginname parameter (aka username) in _admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en Amiro.CMS v5.4.0.0 y anteriores permite a atacantes remotos inyectar código web o HMTL a su elección a través del parámetro status_message en (1) /news, (2) /comment, (3) /forum, (4) /blog, y(5) /tags; el parámetro status_message en (6) forum.php, (7) discussion.php, (8) guestbook.php, (9) blog.php, (10) news.php, (11) srv_updates.php, (12) srv_backups.php, (13) srv_twist_prevention.php, (14) srv_tags.php, (15) srv_tags_reindex.php, (16) google_sitemap.php, (17) sitemap_history.php, (18) srv_options.php, (19) locales.php y(20) plugins_wizard.php en _admin/; una etiqueta manipulada IMG BBcode en el cuerpo del mensaje de (21) forum, (22) guestbook, o (23) comment; (24) el contenido de un archivo avatar, que no es manejado adecuadamente por Internet Explorer; y (25) el parámetro loginname (como username) en _admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.0.0","matchCriteriaId":"8958D062-7F6B-497C-A273-12F537EE47B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"A538289B-F340-423F-B7D9-93E804B7F700"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0F45D39D-2C50-405D-8F0C-5F0BD1FA293E"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7047B7B0-C8F1-49D0-9C38-AFF4CA220BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EEC5CC9B-6DD1-4474-AD17-F210762ECAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"EA4D3C52-71E2-4F66-855E-49455A84A4AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"6F270541-3537-42AB-BDEA-CE2C4EE3D906"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"80D6D34B-B6E8-4DD4-9FE7-815FD34E2017"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"35FBCDB4-F23D-4CFC-B39B-F76AED4E4EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D8378F96-4665-4F21-8434-18E0C77B704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A38E7DE1-D454-4AEE-BFFE-5F4B0D60791E"},{"vulnerable":true,"criteria":"cpe:2.3:a:amirocms:amiro.cms:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7EFB18D0-1757-4CB0-9A94-FABF66C55F5A"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/ONSEC-09-004.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.onsec.ru/vuln?id=11","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53892","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53893","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/ONSEC-09-004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.onsec.ru/vuln?id=11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3804","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en modules/forum/post.php en RunCMS 2M1 permiten a atacantes remotos autenticados ejecutar comandos SQL de su elección mediante (1) el parámetro \"pid\", el cual no es manejado de manera adecuada por la función store en modules/forum/class/class.forumposts.php o (2) el parámetro \"topic_id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*","matchCriteriaId":"71F681F8-9CD1-41E1-BEED-40DA847C4126"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_runcms_store_sql.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37137","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://retrogod.altervista.org/9sg_runcms_store_sql.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3805","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature."},{"lang":"es","value":"gpg2.exe en Gpg4win v2.0.1, como el usado en KDE Kleopatra v2.0.11, permite a atacantes remotos causar una denegación de servicio (caída de programa) a través de una firma certificada larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:kde-apps:kleopatra:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"528A6E9B-F2DC-46CE-9B02-7EBE9BE4E6CA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gpg4win:gpg4win:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"320392D3-2B1B-4EA2-B779-AA0FCBE0D6ED"}]}]}],"references":[{"url":"http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36781","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53908","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3806","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en feedback_js.php en DedeCMS v5.1 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro arcurl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dedecms:dedecms:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5DF6F35C-B193-4FCA-9020-A6ADA6AD857C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507109/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507109/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3807","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service (crash) via a long string in a .vib file."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en MixVibes v7.043 Pro permite a atacantes causar una denegación de servicio (caída) a través de una cadena larga en un archivo .vib."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mixvibes:mixvibes:7.043:*:pro:*:*:*:*:*","matchCriteriaId":"2AAFCD77-51BD-49E9-A3FC-D3B9253D3D18"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9147","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51715","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3808","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an .mp3 playlist file."},{"lang":"es","value":"MixSense DJ Studio v1.0.0.1 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) y posiblemente ejecutar código de su elección mediante una cadena larga en un archivo de lista de reproducción .mp3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kramware:mixsense_dj_studio:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7FA10061-040A-48A3-9264-E689B8A468CB"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9178","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51814","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3809","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a long string in a .sgp playlist file."},{"lang":"es","value":"Acoustica MP3 Audio Mixer v1.0 y probablemente v2.471 permite a atacantes remotos causar una denegación de servicio (caída) a través de una cadena larga en un archivo de lista de reproducción .sgp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:mp3_audio_mixer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4D55A78-E943-47A2-9165-68AFF9A4413C"},{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:mp3_audio_mixer:2.471:*:*:*:*:*:*:*","matchCriteriaId":"819DAFF2-EB85-4267-A81F-45DBB7B3B697"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9212","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1958","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51868","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3810","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en Acoustica MP3 Audio Mixer v2.471 permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código a través de una cadena larga en un archivo de lista .M3U"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acoustica:mp3_audio_mixer:2.471:*:*:*:*:*:*:*","matchCriteriaId":"819DAFF2-EB85-4267-A81F-45DBB7B3B697"}]}]}],"references":[{"url":"http://osvdb.org/56033","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9213","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1958","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51868","source":"cve@mitre.org"},{"url":"http://osvdb.org/56033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3811","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Music Tag Editor v1.61 build 212 permite a atacantes remotos ejecutar código de su elección mediante un fichero MP3 con una etiqueta ID3 larga. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:assistanttools:music_tag_editor:1.61:*:*:*:*:*:*:*","matchCriteriaId":"4B58A1C4-906F-4C42-8DD6-1A1FD15C42B0"}]}]}],"references":[{"url":"http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/55861","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35828","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9167","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51724","source":"cve@mitre.org"},{"url":"http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/55861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3812","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en OtsAV DJ trial v1.85.64.0, Radio trial v1.85.64.0, TV trial v1.85.64.0, y Free version v1.77.001 permite a atacantes remotos ejecutar código de su elección a través de una lista de reproducción larga en un archivo Ots File List (.ofl)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otslabs:otsav_dj:1.85.64.0:trial:*:*:*:*:*:*","matchCriteriaId":"AE9E5886-CD61-4BC0-B0B5-7AAA45E672DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:otslabs:otsav_radio:1.85.64.0:trial:*:*:*:*:*:*","matchCriteriaId":"E667490D-3F79-4065-A170-5404E856114D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otslabs:otsav_tv:1.85.64.0:trial:*:*:*:*:*:*","matchCriteriaId":"82092AA4-4D7B-4A3C-9821-95BE314EEBCB"}]}]}],"references":[{"url":"http://osvdb.org/55747","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/otsav-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9113","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51628","source":"cve@mitre.org"},{"url":"http://osvdb.org/55747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/otsav-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3813","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum parameter to modules/forum/post.php and possibly (2) forum_id variable to modules/forum/class/class.permissions.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en RunCMS 2M1, permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro (1) \"forum\" en modules/forum/post.php y de la variable (2)\"forum_id\" a modules/forum/class/class.permissions.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*","matchCriteriaId":"71F681F8-9CD1-41E1-BEED-40DA847C4126"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_runcms_forum_sql.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37137","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://retrogod.altervista.org/9sg_runcms_forum_sql.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3814","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the \"Filter/Banning\" feature, as demonstrated by modifying modules/system/cache/bademails.php using the \"Prohibited: Emails\" action, and other unspecified filters."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en RunCMS 2M1 permite a usuarios autenticados remotamente ejecutar código PHP de su elección a través de la característica \"Filter/Banning\", como se ha demostrado modificando modules/system/cache/bademails.php empleando la acción the \"Prohibited: Emails\" y otros filtros no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*","matchCriteriaId":"71F681F8-9CD1-41E1-BEED-40DA847C4126"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_runcms_forum_sql.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://retrogod.altervista.org/9sg_runcms_forum_sql.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3815","sourceIdentifier":"cve@mitre.org","published":"2009-10-27T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or (2) uid[] parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a call to the preg_match function."},{"lang":"es","value":"RunCMS 2M1, cuando se ejecuta con determinados niveles de weeoe_reporting, permite a atacantes remotos obtener información sensible a través de los parámetros (1) op[] a modules/contact/index.php o de (2) uid[] a userinfo.php, que muestra  la ruta de instalación en un mensaje de error cuando éstos parámetros son usados en una llamada a la función preg_match."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:runcms:runcms:2m1:*:*:*:*:*:*:*","matchCriteriaId":"71F681F8-9CD1-41E1-BEED-40DA847C4126"}]}]}],"references":[{"url":"http://retrogod.altervista.org/9sg_runcms_forum_sql.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://retrogod.altervista.org/9sg_runcms_forum_sql.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3816","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en las páginas Activities en el subsistema Mobile  en IBM Lotus Connections v2.5.0.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_connections:2.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4AD737-9C81-471B-B144-46354AE51E0C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024303","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1LO43637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3817","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter, a different vector than CVE-2009-2637.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivos PHP en doc/releasenote.php en el componente BookLibrary (com_booklibrary) v1.0 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path, un vector diferente que CVE-2009-2637. NOTA: la procedencia de esta información es desconocida, los detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ordasoft:com_booklibrary:1.0:*:*:*:*:*:*:*","matchCriteriaId":"50B801CB-333F-44C6-8DD7-3600C9AF5C2B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36732/exploit","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2969","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36732/exploit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3818","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la característica session handling en freeCap CAPTCHA (sr_freecap) extension v1.2.0 y anteriores para TYPO3 tiene un impacto desconocido y vectores atacantes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"2B33C20A-46EF-4FB6-888F-0E92E31006E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"790A1625-537C-4FBB-BCAC-46F4A32F4888"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"613F12BA-4366-4993-8E5F-01C26B572D03"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9FB79D86-0400-4AE9-8B0E-805C33BDAA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"88CC3BA3-F385-4AAA-AF3C-095BEDE284BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"308D7BF4-B342-4900-B352-17666B3D6D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B33273E4-0DC6-41FF-906E-A9F7E578E400"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"01FD68AD-DADF-4407-86FA-80D19A604E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"01EA86C4-A70C-46BF-9A76-21D0DFF9AD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F02BB3A9-0F36-4EA0-BFF0-66F6F5248D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"DDEF1362-E8C7-4FB3-AA07-C0E6480D77E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"06E43279-701A-492D-B6A7-028114ECE8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B92C37-FC72-48CA-89C9-D9CA1C9C0E4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"16AC96CB-8EB6-422A-9432-371C978535F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9223DD6A-CD9F-4EC5-8B0F-9CCE888F3A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"DC48FC36-81A3-44B8-9265-92C0C4B85AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DC4A79C-CC5B-4A2A-8049-B4B28D89FE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C3837FB-06B2-4FA5-AFDA-AC31F904254F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"383B783E-10BF-493B-9405-19B4573161FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BF5BDFBD-9F3A-4EA0-AC09-6235D2E0C9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0BF69BC8-E68A-44C0-B12D-D3DC5AC85B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6ADBBC0F-B2F3-4218-9409-EC2A3C21925B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A7CDD5C-1EA1-4F0F-B1B6-4AD505BBAA71"},{"vulnerable":true,"criteria":"cpe:2.3:a:stanislas_rolland:sr_freecap:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0754949-41FA-41E0-8EE1-64E87A6142F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/37094","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3819","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en the Random Images (maag_randomimage) extension v1.6.4 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos de shell a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.4","matchCriteriaId":"18A420CC-4277-48B2-9A66-6DDAC9044EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"95424F48-8382-4CB2-8646-B4728DCE69FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"170E0D7E-9604-4A0C-829E-BCC4ACBC060F"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"283B2C4F-B621-439F-803E-65BA70628662"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0ED37F65-7DC9-4BDE-B263-A438D17D8DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EC9A56F4-8AA3-4D34-8AB1-57598BE75046"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D49B8DB2-64A4-41FE-B58C-B4306272C30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A02063A7-37EC-4EE4-B125-98D217B7E9D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EEE27643-45FF-4CF0-B371-E44555F19E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"48BAC3B6-293E-4069-8F1C-C6D0EEDAC050"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7071023B-6A06-4BF9-A09E-7780D0E7492E"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"63728811-B095-4D78-837F-48090556FA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EA50B1AE-62BD-47A9-B5E5-B23FF8BC66A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1A6C1383-D6BF-4974-BCB2-1508B676F1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C0264710-9DED-4CF7-9853-4216CEE4FF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A038C7D8-B875-4657-A178-3741240835B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1D1526A5-9A7D-4EC7-870E-5E14736E5401"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"652CE8EA-395C-4CF9-894F-D65FA8BD9C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"86D7BFCD-A90A-4FAA-84E6-82D4DA2F668F"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7CD1EF4C-A164-47FB-9CC3-1FA8C2053C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"7C23F763-5691-42F1-97E7-6EF90E5C627D"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0E85939C-2F7D-4651-8A14-D223A099EBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"78C38576-EC47-434D-8C1B-0E9188EA7A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"9B80DE17-8604-4F20-BA02-012A636D7D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"28B7DC02-697C-4130-ABBA-75BE2716D491"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D50E566B-D9C0-402B-B83D-69DE2247EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A16B2B61-2D71-46C9-B38E-32403E39A1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F8825D1E-2694-4BF4-A58F-C625C0D0B453"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A2B8DE-4516-4F91-A56E-E621F76C3F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"5D6F8600-1F08-460E-B021-77F8D3209FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"793D2B07-3B1D-4E47-9086-A5D5DEB9B1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D37AE0A4-21BA-47FD-BD83-3A5E9B93969B"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFDA7AC1-54D1-4F24-A131-221AD172AF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"BDDAE991-4697-4981-ACF0-1A6B512A5B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"6FB2AD0D-44BE-4F38-9290-CA4DD7FC373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E77F4DE7-F986-44F4-A9C8-AE72D6D9A353"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"13C5203A-0BA9-4091-BE77-0297A16502BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C4AF0510-4807-4554-A6CE-AB3D2018CED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:urs_maag:maag_randomimage:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"229CC6E7-4B2A-4C28-A820-68DDCC23D727"}]}]}],"references":[{"url":"http://secunia.com/advisories/37095","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3820","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en the Flagbit Filebase (fb_filebase) extension v0.1.0 para TYPO3 permite a atacantes remotos ejecutar comandos SQL a su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flagbit:fb_filebase:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9777DA57-CE8E-42D0-865C-46D0C32C2DE8"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3821","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Apache Solr Search (solr) extension v1.0.0 para TYPO3 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:solr:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FEF45D7B-17B0-46C2-8AE1-587F7E9DE22A"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3822","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en el componente Fiji Web Design Ajax Chat (com_ajaxchat) v1.0 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de URL en el parámetro GLOBALS[mosConfig_absolute_path] en tests/ajcuser.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fijiwebdesign:com_ajaxchat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A01DB091-BCBF-4C91-8D0C-7D7DED729AC5"}]}]}],"references":[{"url":"http://secunia.com/advisories/37087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36731","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3823","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the GLOBALS[page] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en myhtml.php en Mobilelib GOLD v3.0, cuando magic_quotes_gpc es activado, permite a atacantes remotos leer archivos de su elección a través de .. (punto punto) en el parámetro GLOBALS[page]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ac4p:mobilelib_gold:3.0:*:*:*:*:*:*:*","matchCriteriaId":"67BDB377-BF02-4DC4-A8ED-1F372398D117"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9144","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51713","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3824","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content_path parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en include/processor.php en Greenwood PHP Content Manager v0.3.2 permite a atacantes remotos incluir y ejecutar archivos locales a través de .. (punto punto) en el parámetro content_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_j_greenwood:php_content_manager:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"95725FF0-4D9D-4BA7-BF46-E3B3A92D402E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9156","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51737","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3825","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T10:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p parameter to show.php and the (2) Template parameter to admin/pages/SiteNew.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en GenCMS 2006 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el (1) parámetro p en show.php y el (2) parámetro Template en admin/pages/SiteNew.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_graber:gencms:2006:*:*:*:*:*:*:*","matchCriteriaId":"DBFD8E71-103B-4246-8D1F-9A85A3611E2E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51653","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3826","sourceIdentifier":"cve@mitre.org","published":"2009-10-28T14:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL."},{"lang":"es","value":"Múltiples desbordamiento de búfer en squidGuard v1.4 permite a atacantes remotos eludir el bloqueo de URL a través de una URL larga, referido a (1)relaciones entre el tamaño de cierto búfer en squidGuard y el tamaño de cierto búfer en Squid y (2) una redirección URL que contiene información sobre las petición URL original."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squidguard:squidguard:1.4:*:*:*:*:*:*:*","matchCriteriaId":"2A13B1EC-6F1F-4A9A-A9AC-65548B3E27B5"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39679","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023079","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2040","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507440/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36800","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3013","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53922","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507440/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20091019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3828","sourceIdentifier":"cve@mitre.org","published":"2009-10-30T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via certain vectors."},{"lang":"es","value":"La interfaz web para Everfocus EDR1600 DVR permite a atacantes remotos evitar la autenticación y acceder a imágenes en vivo de cámaras a través de ciertos vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:everfocus:edr1600:*:*:*:*:*:*:*:*","matchCriteriaId":"6A46F996-F30A-45BD-AD30-40E9574BA048"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2009/Oct/293","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59139","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507373/100/100/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53909","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Oct/293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507373/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3829","sourceIdentifier":"cve@mitre.org","published":"2009-10-30T20:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an \"unsigned integer wrap vulnerability.\""},{"lang":"es","value":"Desbordamiento de entero en wiretap/erf.c en Wireshark en versiones anteriores a v1.2.2 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (caída de aplicación) a través de un fichero erf manipulado, relacionado con la vulnerabilidad \" sobreescritura de entero sin asignar\"."}],"vendorComments":[{"organization":"Red Hat","comment":"The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2010-0360.html","lastModified":"2010-04-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"AFC3D4B5-FACD-45D1-9037-EDD6B3DCA875"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*","matchCriteriaId":"B8ED0A8C-174C-4889-9B00-51B1E720B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9053B950-143E-4941-9C58-A57D9F1FF78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"8FD279A0-5BA7-4D86-B975-2E76B4B2D85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"DA052598-2E72-4568-B783-8B01382736DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.8.20:*:*:*:*:*:*:*","matchCriteriaId":"C934EF8B-1B73-412E-9874-E1AC0223506B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"DD509BD0-3E90-47E5-97DA-F8814002EDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*","matchCriteriaId":"589FBD3D-FFE4-4BB3-B5F9-7FF949212AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3283D8D0-0714-48CC-94C4-B5FA6C913A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"FA01FEEE-E5D1-4C19-B25E-1039FA72555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"25F90C98-DF9D-49F0-A026-C20C7CA0A034"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"BD4F19A6-98D5-4B6A-8AF0-D88561D50296"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"BF4D8B98-A542-4269-90C1-14FFBE9F4A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A353A2B8-A801-44C6-AFEF-19982E33975C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"FC7FCA21-A695-46EA-A669-DF3FA3F7B1B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*","matchCriteriaId":"F87BA063-BF1D-4103-973A-6E490A1CA4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*","matchCriteriaId":"E1D8CE9A-4CE0-4DA8-9EBA-3B7CEBCDFEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*","matchCriteriaId":"090B987C-9880-4221-BC4C-8D53A8801649"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*","matchCriteriaId":"06828062-5F31-4532-9E24-34F29CE30218"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*","matchCriteriaId":"5738F4F0-41C6-48CF-8233-C94D79DCA807"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*","matchCriteriaId":"B6D5E65C-08BF-480D-A7BE-1876E9AC93E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*","matchCriteriaId":"E88C1647-8B05-421E-AA1F-25F9B248D761"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.9:*:*:*:*:*:*:*","matchCriteriaId":"DA611B86-AB5C-4CA1-9620-6F5532F4C819"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26CB9265-B7A4-4EB4-9C20-F747F3786C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"}]}]}],"references":[{"url":"http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37409","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37477","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/676492","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3849","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5979","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9945","source":"cve@mitre.org"},{"url":"http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/676492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3830","sourceIdentifier":"cve@mitre.org","published":"2009-10-30T20:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx."},{"lang":"es","value":"La funcionalidad \"descarga\" en Team Services en Microsoft Office SharePoint Server 2007 v12.0.0.4518 y v12.0.0.6219 permite a atacantes remotos leer fuentes de ASP.NET a través de nombres de rutas en los parámetros SourceUrl y Source a _layouts/download.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server:2007:*:*:*:*:*:*:*","matchCriteriaId":"864B622E-B522-4791-AC82-0711130544BA"}]}]}],"references":[{"url":"http://support.microsoft.com/kb/976829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507419/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36817","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53955","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/976829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507419/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3831","sourceIdentifier":"cve@mitre.org","published":"2009-10-30T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name."},{"lang":"es","value":"Opera v10.01 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio (corrupción de memoria y caída de aplicación) a través de un nombre de dominio manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"10.01","matchCriteriaId":"CA8D2696-1A5F-4437-A08E-4374F47894C2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/37182","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/mac/1001/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1001/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/1001/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/938/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/59357","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36850","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3073","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54020","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://secunia.com/advisories/37182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/mac/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/938/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/59357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-3832","sourceIdentifier":"cve@mitre.org","published":"2009-10-30T20:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site."},{"lang":"es","value":"Opera en versiones anteriores a v10.01 corriendo sobre Windows no previene el uso de fuentes web en el renderizado de la interfaz de usuario, lo que permite a atacantes remotos falsificar el campo \"dirección\" a través de una pagina web manipulada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"10.01","matchCriteriaId":"CA8D2696-1A5F-4437-A08E-4374F47894C2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://secunia.com/advisories/37182","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/windows/1001/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/940/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/59359","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36850","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3073","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54022","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://secunia.com/advisories/37182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/docs/changelogs/windows/1001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/support/kb/view/940/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/59359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/36850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-3833","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the album parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de TFTgallery 0.13 permite a usuarios remotos inyectar codigo de script web o código HTML a través del parámetro album."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftgallery:tftgallery:0.13:*:*:*:*:*:*:*","matchCriteriaId":"2D73A995-05FA-408D-8B8C-576F5D9F717C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/tftgallery-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0910-exploits/tftgallery-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3834","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in a blogs action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Photoblog (com_photoblog) alpha 3 y alpha 3a de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través del parámetro \"category\" (categoría) en una acción de blogs en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webguerilla:com_photoblog:alpha_3:*:*:*:*:*:*:*","matchCriteriaId":"F8C88072-FD07-4D06-9A52-003AD79C1F37"},{"vulnerable":true,"criteria":"cpe:2.3:a:webguerilla:com_photoblog:alpha_3a:*:*:*:*:*:*:*","matchCriteriaId":"B24B17AB-515A-4CEA-BD72-056EB5192B12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/joomlaphotoblog-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36809","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53943","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/joomlaphotoblog-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3835","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JShop (com_jshop) de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través de el parámetro pid en una acción \"product\" (producto) en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whorl_ltd:jshop:*:*:*:*:*:*:*:*","matchCriteriaId":"B61A9741-FA7C-454A-B28C-5F3F96E1EA66"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0910-exploits/joomlajshop-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36808","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53944","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0910-exploits/joomlajshop-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3836","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service (Access Point crash) via a malformed 802.11 Association Request management frame."},{"lang":"es","value":"ArubaOS v3.3.1.x, v3.3.2.x, RN v3.1.x, v3.4.x y v3.3.2.x-FIPS en \"Aruba Mobility Controller\" (controlador de movilidad de Aruba) permite a atacantes remotos provocar una denegación de servicio (caída del punto de acceso) a través de \"Association Request management frame\" (paquetes de gestión de peticiones de asociación) 802.11  malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:C","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.1},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.1.1:rn:*:*:*:*:*:*","matchCriteriaId":"A929FE47-A479-49B8-A7DC-C6B72C95B7FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C79BFC0F-08A2-49CE-BA64-249093C2BFC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.1.29:*:*:*:*:*:*:*","matchCriteriaId":"07DEE617-601D-45A0-A866-2A7CCD83D132"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.1.30:*:*:*:*:*:*:*","matchCriteriaId":"61B7E81A-1CFC-44BF-9C29-E802E19554B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CF90F10B-64EA-4BFB-991F-11BD3192E2AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.3.2.14:fips:*:*:*:*:*:*","matchCriteriaId":"DF6024D5-4D55-4716-B788-92E406C84F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:arubanetworks:arubaos:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F41F28B-202A-4853-BE79-922CBE65E117"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:arubanetworks:aruba_mobility_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"7CEC5D17-929C-4814-A021-3AC9251F6EA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/37085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-102609.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36832","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3051","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-102609.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3837","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Eureka Email v2.2q, permite a los servidores POP3 ejecutar código de su elección a través de un mensaje de error largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eureka-email:eureka_email:2.2q:*:*:*:*:*:*:*","matchCriteriaId":"A052449D-B80D-40B7-A623-5F1EEA7B6CF6"}]}]}],"references":[{"url":"http://osvdb.org/59262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507376/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508126/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3025","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53940","source":"cve@mitre.org"},{"url":"http://osvdb.org/59262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/eurekamc-dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507376/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508126/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3838","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Pegasus Mail(PMail) v4.41 y posiblemente v4.51, permite a los servidores POP3 remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código a través  de un mensaje de error largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pmail:pegasus_mail:4.41:*:*:*:*:*:*:*","matchCriteriaId":"125E04B4-22B4-483A-8FCA-CB87520BFE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:pmail:pegasus_mail:4.51:*:*:*:*:*:*:*","matchCriteriaId":"7B663E49-6FB0-4A5D-9D10-E50E898BC516"}]}]}],"references":[{"url":"http://osvdb.org/59261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/pegasusmc-dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507377/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36797","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023075","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Pegasus_Mail_POP3_Message_Handling_Remote_Buffer_Overflow_Exploit_3026233.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53933","source":"cve@mitre.org"},{"url":"http://osvdb.org/59261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/pegasusmc-dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507377/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Pegasus_Mail_POP3_Message_Handling_Remote_Buffer_Overflow_Exploit_3026233.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3839","sourceIdentifier":"cve@mitre.org","published":"2009-11-02T15:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute arbitrary code by leveraging access to the X server."},{"lang":"es","value":"Vulnerabilidad sin especificar en la configuración de Solaris Trusted Extensions Policy en  Sun Solaris 10 y Opensolaris snv_37 a la snv_125, podría permitir a atacantes remotos ejecutar código de su elección aprovechando el acceso al sevidor X."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:x86:*:*:*:*:*","matchCriteriaId":"2BE4A7FC-6112-4879-B083-19CC70DC6B91"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:x86:*:*:*:*:*","matchCriteriaId":"DE882906-FF9D-492A-BDB7-237575D5E278"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:x86:*:*:*:*:*","matchCriteriaId":"977AA6F7-F821-4229-B413-276231366899"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:x86:*:*:*:*:*","matchCriteriaId":"F7B6E01F-E4EA-497E-BFB3-975F0123B4E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:x86:*:*:*:*:*","matchCriteriaId":"9E644312-D55A-427F-BE4C-9AD280CC73F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:x86:*:*:*:*:*","matchCriteriaId":"E7B7C4DE-DD83-4F61-B214-F0F9BD76E188"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:x86:*:*:*:*:*","matchCriteriaId":"EF568362-9967-4ACB-A880-163A2E14D99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:x86:*:*:*:*:*","matchCriteriaId":"13B5EE88-E97B-47A1-8999-21C8C4D0C0E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:x86:*:*:*:*:*","matchCriteriaId":"BD456A40-4017-4509-A4B0-44FBB3443645"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:x86:*:*:*:*:*","matchCriteriaId":"F9456E55-1587-4BBF-A073-601D34E0CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:x86:*:*:*:*:*","matchCriteriaId":"CD289DC7-2779-47B6-B44C-6B3C6EC5F93D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:x86:*:*:*:*:*","matchCriteriaId":"8163CA38-BF92-4F02-85EA-E6EFD5A500F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:x86:*:*:*:*:*","matchCriteriaId":"6043F9A0-5FA1-4101-8452-E7A8652FE79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:x86:*:*:*:*:*","matchCriteriaId":"3CDC9FF7-5FC1-4473-920F-37105009BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*","matchCriteriaId":"6789ECB3-925F-4E16-9213-12FE3EB191CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*","matchCriteriaId":"9D309DD1-37A6-49BC-B8DB-6260D47DDD71"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*","matchCriteriaId":"28CBB9C9-54DB-4259-9D9F-C617E23C4221"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*","matchCriteriaId":"FC09D568-2B1E-46A2-9029-B3850E5A1167"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*","matchCriteriaId":"96E164AF-3346-4FF3-875A-5EA239F50BDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*","matchCriteriaId":"D3B05762-2B56-41A1-B424-54A5CFFEC47A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*","matchCriteriaId":"4B2E7E54-2268-4C54-9363-C2D363D3A447"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*","matchCriteriaId":"F6000B0F-0E72-4E68-A5EE-35BA6FB59C57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*","matchCriteriaId":"51AB0746-66E6-4FF5-9CB2-42E29A01C961"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*","matchCriteriaId":"D1A9DCF7-F469-4D77-966F-3721F377D80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*","matchCriteriaId":"A5991C3F-29F6-462F-A34E-2446E357A220"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*","matchCriteriaId":"9C93BA4F-D07C-494C-B320-F34B8DED05C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_125:*:x86:*:*:*:*:*","matchCriteriaId":"28AC2702-9612-427E-90FC-F513F2C4A8C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*","matchCriteriaId":"9D15E371-4317-4882-BA09-F8CABB632C2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:sparc:*:*:*:*:*","matchCriteriaId":"9500D5B2-DA1D-4082-83E4-92715D7F2D24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:sparc:*:*:*:*:*","matchCriteriaId":"DD44C2D3-A690-4A9B-B855-EC2FEE8F5169"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:sparc:*:*:*:*:*","matchCriteriaId":"C92D0B2A-BA10-4AEB-84B9-962DD1AA76EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:sparc:*:*:*:*:*","matchCriteriaId":"BF7D0B02-7E5C-4760-96B2-902C680B897C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:sparc:*:*:*:*:*","matchCriteriaId":"CF68EA11-632F-4710-8CC7-192AF1BD7BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:sparc:*:*:*:*:*","matchCriteriaId":"F9EC26BC-09D3-4F19-864F-7A1C4EC4756B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:sparc:*:*:*:*:*","matchCriteriaId":"5994A4EE-3808-4863-B771-36864E202679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:sparc:*:*:*:*:*","matchCriteriaId":"E977D01C-9C4B-411F-844E-7464147A12D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:sparc:*:*:*:*:*","matchCriteriaId":"A37177FE-FB56-4BCB-88BA-B91963DA19EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:sparc:*:*:*:*:*","matchCriteriaId":"BE640F29-CD64-44DD-9561-E205C5C241C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:sparc:*:*:*:*:*","matchCriteriaId":"078D7F9B-E2A8-4DC2-AD2E-FB0865091ECE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:sparc:*:*:*:*:*","matchCriteriaId":"0FE35481-4580-4208-A6FA-7A0429D73793"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:sparc:*:*:*:*:*","matchCriteriaId":"84652D52-B89B-4127-9670-5FCDBBDE8053"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:sparc:*:*:*:*:*","matchCriteriaId":"CE51773E-C93C-4549-907A-5AF380F24B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*","matchCriteriaId":"D98D67BD-6C94-4E77-B6AC-3199C281A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*","matchCriteriaId":"914CF995-B18B-43D2-AA9D-B486E768AFD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:sparc:*:*:*:*:*","matchCriteriaId":"922EE565-E3C2-44BA-9970-224FF874AE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*","matchCriteriaId":"F8E26C9E-F87E-4484-89B9-42471F8410B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*","matchCriteriaId":"79E3D7EB-5B19-4D35-BE23-AB477E08FFEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*","matchCriteriaId":"B06BC6D2-385C-4BC4-9AAB-EEFF600DF2EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*","matchCriteriaId":"7E32AD47-A96B-4A83-AEA2-98E6DD1FD5BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*","matchCriteriaId":"7A54DEC9-4F04-4E0A-B253-8822F114DCC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*","matchCriteriaId":"447E9E9E-5B19-4261-8B70-F63EAE61DB95"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*","matchCriteriaId":"2B4A015E-802F-4440-AF10-683B5E0586B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*","matchCriteriaId":"45B5E359-6FF2-4029-AB6A-3C906DE6AF1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_125:*:sparc:*:*:*:*:*","matchCriteriaId":"B9F20F1D-6414-42C4-83B6-2CC7DD91059C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/37184","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36840","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3070","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3840","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-11-19T00:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet."},{"lang":"es","value":"El servicio del motor de base de datos integrado (también conocido como avdburn.exe) en HP OpenView Network Node Manager OV NNM) v7.51 y v7.53, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de un campo \"Error Code\" en no válido sobre un paquete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60200","source":"hp-security-alert@hp.com"},{"url":"http://seclists.org/fulldisclosure/2009/Nov/199","source":"hp-security-alert@hp.com"},{"url":"http://www.coresecurity.com/content/openview_nnm_internaldb_dos","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37046","source":"hp-security-alert@hp.com","tags":["Exploit","Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2009/Nov/199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/openview_nnm_internaldb_dos","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2009-3841","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-11-17T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en HP Discovery & Dependency Mapping Inventory (DDMI) v2.5x, v7.5x, y v7.60 en Windows  permite a usuarios remotos autenticados ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.50:*:*:*:*:*:*:*","matchCriteriaId":"E1D68B93-258D-41AE-A151-9FA31F1186CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.51:*:*:*:*:*:*:*","matchCriteriaId":"50164877-9D15-427D-B0D8-F6142902FA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:2.52:*:*:*:*:*:*:*","matchCriteriaId":"6B34CE45-D8E0-4C97-80EB-3787E680852F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.50:*:*:*:*:*:*:*","matchCriteriaId":"044B28F0-C1C5-4BE6-ADA7-28341024A1C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.51:*:*:*:*:*:*:*","matchCriteriaId":"146FFF61-C7B7-404C-9697-97AAF1138FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:discovery\\&dependency_mapping_inventory:7.60:*:*:*:*:*:*:*","matchCriteriaId":"FD17A792-40FD-4032-8552-14464BAF93B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/60222","source":"hp-security-alert@hp.com"},{"url":"http://secunia.com/advisories/37388","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023187","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37037","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01861595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/60222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3842","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-11-20T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05.058.4 and the Color LaserJet CP3525 Printer with firmware 53.021.2 allows remote attackers to obtain \"access to data\" or cause a denial of service via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad no especificada en la impresora multifunción HP Color LaserJet M3530 con firmware v05.058.4 firmware y la Color LaserJet CP3525 con firmware v53.021.2 permite a atacantes remotos obtener \"acceso a los datos\" o provocar una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_cp3525_printer:53:021.2:*:*:*:*:*:*","matchCriteriaId":"8FD3A17D-1047-4AFD-87AF-077B46F38556"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_m3530_multifunction_printer:05.058.4:*:*:*:*:*:*:*","matchCriteriaId":"F3E54350-37C6-4052-B869-4C6EFEB5E0BE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125864723627975&w=2","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=125864723627975&w=2","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37433","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37070","source":"hp-security-alert@hp.com"},{"url":"http://www.vupen.com/english/advisories/2009/3293","source":"hp-security-alert@hp.com"},{"url":"http://marc.info/?l=bugtraq&m=125864723627975&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=125864723627975&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3843","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-11-24T00:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Operations Manager 8.10 on Windows contains a \"hidden account\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload."},{"lang":"es","value":"HP Operations Manager v8.10 de Windows contiene una cuenta oculta en el fichero XML donde se especifican los usuarios de Tomcat, lo que permite a atacantes remotos realizar ataques de subida de ficheros sin restricción, y por lo tanto ejecutar código de su elección, usando la clase org.apache.catalina.manager.HTMLManagerServlet para hacer peticiones a manager/html/upload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_manager:8.10:*:windows:*:*:*:*:*","matchCriteriaId":"94949E33-6ED5-4E91-ABBD-353285AC3EF9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=125873415424980&w=2","source":"hp-security-alert@hp.com"},{"url":"http://marc.info/?l=bugtraq&m=125873415424980&w=2","source":"hp-security-alert@hp.com"},{"url":"http://secunia.com/advisories/37444","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023222","source":"hp-security-alert@hp.com"},{"url":"http://www.osvdb.org/60317","source":"hp-security-alert@hp.com"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-085/","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54361","source":"hp-security-alert@hp.com"},{"url":"http://marc.info/?l=bugtraq&m=125873415424980&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=125873415424980&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-085/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3844","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-08T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el proceso OmniInet en OpenView Data Protector Application Recovery Manager de HP versiones 5.50 y 6.0, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio por medio de un paquete MSG_PROTOCOL especialmente diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_data_protector_application_recovery_manager:5.50:*:*:*:*:*:*:*","matchCriteriaId":"FAA62B5C-019E-479B-A4B0-16B2002D51F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_data_protector_application_recovery_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"03C55DF6-7669-41EC-BC9D-3F730A4CDFFF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126029001704529&w=2","source":"hp-security-alert@hp.com"},{"url":"http://marc.info/?l=bugtraq&m=126029001704529&w=2","source":"hp-security-alert@hp.com"},{"url":"http://secunia.com/advisories/37600","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023288","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508329/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37250","source":"hp-security-alert@hp.com"},{"url":"http://www.vupen.com/english/advisories/2009/3454","source":"hp-security-alert@hp.com","tags":["Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-091/","source":"hp-security-alert@hp.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54638","source":"hp-security-alert@hp.com"},{"url":"http://marc.info/?l=bugtraq&m=126029001704529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126029001704529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508329/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-091/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3845","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts."},{"lang":"es","value":"El servidor HTTP port-3443 en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar comandos arbitrarios a través de metacaracteres de shell en el parámetro \"hostname\" a secuencias de comandos Perl sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508345/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37300","source":"hp-security-alert@hp.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-094/","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54651","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508345/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-094/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3846","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter."},{"lang":"es","value":"Múltiples desbordamientos de búfer en ovlogin.exe in HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través de una parámetro largo (1) \"userid\" o (2) \"passwd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-08","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508350/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37295","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54658","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508350/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3847","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar codigo arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54840","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3848","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function."},{"lang":"es","value":"Desbordamiento de búfer en nnmRptConfig.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través del parámetro largo \"Template\", relacionado con la función vsprintf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508346/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37296","source":"hp-security-alert@hp.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-096/","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54653","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508346/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-096/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3849","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe."},{"lang":"es","value":"Múltiples desbordamientos del búfer de la pila en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través de (1)el parámetro largo \"Template\" a nnmRptConfig.exe, relacionado con la función strcat; o (2) un parámetro \"Oid\" a snmp.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508348/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508349/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37298","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37299","source":"hp-security-alert@hp.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-095/","source":"hp-security-alert@hp.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-097/","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54652","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54654","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508348/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508349/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-095/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-097/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3850","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA."},{"lang":"es","value":"Blender v2.34, v2.35a, v2.40, y v2.49b permite a atacantes remotos ejecutar código de su elección mediante un fichero .blend que contenga sentencias Python en la acción onLoad de un ScriptLink SDNA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:2.34:*:*:*:*:*:*:*","matchCriteriaId":"A214D9E1-F17A-40B7-808B-DE9B0D360BA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:2.35a:*:*:*:*:*:*:*","matchCriteriaId":"273D8F34-0D65-43FD-9016-70521608147A"},{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:2.40:*:*:*:*:*:*:*","matchCriteriaId":"15012DB5-DB78-49BC-9FA3-CC765690848E"},{"vulnerable":true,"criteria":"cpe:2.3:a:blender:blender:2.49b:*:*:*:*:*:*:*","matchCriteriaId":"35E21838-A0E0-4CEC-A96A-971D9DA70694"}]}]}],"references":[{"url":"http://www.coresecurity.com/content/blender-scripting-injection","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507706/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36838","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/blender-scripting-injection","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507706/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3851","sourceIdentifier":"cve@mitre.org","published":"2009-11-03T16:30:12.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the \"restart daemon.\""},{"lang":"es","value":"Trusted Extensions en Sun Solaris 10 interfiere con la operación del comando xscreensaver-demo para la aplicación XScreenSaver, lo que facilita a atacantes próximos físicamente acceder a una estación desatendida en la que el bloqueo de pantalla no ha sido efectivo. Relacionado con \"restart daemon (reinicio del demonio)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-28-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270809-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3852","sourceIdentifier":"cve@mitre.org","published":"2009-11-03T16:30:12.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the \"updated version of XML4J 4.4.17.\""},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente XML IBM Runtimes para Java Technology v5.0.0 anterior a SR10, tiene un impacto y vectores de ataque desconocidos, relacionados con la \"versión actualizada de XML4J v4.4.17.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0","matchCriteriaId":"9AC3E130-4F91-4F38-9ACC-E6F7789ED5FD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36894","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54069","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3853","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T15:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via crafted data in a TCP packet."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el planificador del demonio de aceptación de cliente (CAD) en el cliente en Tivoli Storage Manager (TSM) versiones 5.3 anteriores a 5.3.6.7, versiones 5.4 anteriores a 5.4.3, versiones 5.5 anteriores a 5.5.2.2, y versiones 6.1 anteriores a 6.1.0.2, y TSM Express versiones 5.3.3.0 hasta 5.3.6.6, de IBM, permite a los atacantes remotos ejecutar código arbitrario por medio de datos especialmente diseñados en un paquete TCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B2585495-DB97-429F-87AC-4C4E92DE305D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*","matchCriteriaId":"801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A263333E-DB86-41BE-A508-731079429E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93FCB242-C35B-4CDB-AE62-3CA5D312586B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"70016926-5776-4A04-8D55-5CA12D1DA9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:express:*:*:*:*:*","matchCriteriaId":"594F4C0E-BAF1-4B28-A21C-8608E1365592"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"930B5AE2-CA47-47D7-96DE-F2B9F70337C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:express:*:*:*:*:*","matchCriteriaId":"F1898001-E7E8-4B77-96DD-3B4FE70CF4CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5:*:express:*:*:*:*:*","matchCriteriaId":"2EA1B92E-A7C9-4AEA-A180-2DC766DC5A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3FAA5227-C1F5-48C1-A207-096F228E305E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6:*:express:*:*:*:*:*","matchCriteriaId":"91D9B30D-F3CF-4E43-BF8E-A16CA3138AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"74B38E6A-86AA-4C35-AF3F-7F77DF647235"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"271A29AC-0890-495D-8DF7-2530CEAF6C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"43BE5332-C982-440A-A7AA-03B83415B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"74E095D6-D6C9-4E21-9CBA-508D043C4286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"22F74B9A-D31E-43E3-8A29-BFD09A9442F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:express:*:*:*:*:*","matchCriteriaId":"E6252B18-7599-4401-AFDC-28C241D8DFC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"11E968D1-8198-4686-BFDD-8499CB435B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"40A8E0C4-8509-4372-99C7-CFBA2100AEBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B0ADAA69-B258-4666-9AB7-7965429EA497"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F4722BA-186A-4999-965E-ED5FA72D4BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D9FF105A-6B8E-4849-875F-FD87EC9291E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"}]}]}],"references":[{"url":"http://secunia.com/advisories/32534","source":"cve@mitre.org"},{"url":"http://secunia.com/secunia_research/2008-51/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023136","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC61036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507654/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2008-51/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC61036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507654/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3854","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T15:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en traditional client scheduler en the client en IBM Tivoli Storage Manager (TSM) v5.3 anteriores a v5.3.6.7 y v5.4 anteriores a v5.4.2"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B2585495-DB97-429F-87AC-4C4E92DE305D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*","matchCriteriaId":"801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A263333E-DB86-41BE-A508-731079429E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93FCB242-C35B-4CDB-AE62-3CA5D312586B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"70016926-5776-4A04-8D55-5CA12D1DA9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"930B5AE2-CA47-47D7-96DE-F2B9F70337C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3FAA5227-C1F5-48C1-A207-096F228E305E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"74B38E6A-86AA-4C35-AF3F-7F77DF647235"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"271A29AC-0890-495D-8DF7-2530CEAF6C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"43BE5332-C982-440A-A7AA-03B83415B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"74E095D6-D6C9-4E21-9CBA-508D043C4286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"22F74B9A-D31E-43E3-8A29-BFD09A9442F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"11E968D1-8198-4686-BFDD-8499CB435B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"40A8E0C4-8509-4372-99C7-CFBA2100AEBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B0ADAA69-B258-4666-9AB7-7965429EA497"}]}]}],"references":[{"url":"http://secunia.com/advisories/32534","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023136","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/32534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3855","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T15:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, allow attackers to read, modify, or delete arbitrary files via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en (1) UNIX y (2) clientes Linux backup-archive, y (3)el cliente API de OS/400, en IBM Tivoli Storage Manager (TSM) v5.3 anteriores a v5.3.6.6, v5.4 anteriores a v5.4.2, y v5.5 anteriores a v5.5.1,"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B2585495-DB97-429F-87AC-4C4E92DE305D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*","matchCriteriaId":"801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A263333E-DB86-41BE-A508-731079429E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"93FCB242-C35B-4CDB-AE62-3CA5D312586B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"70016926-5776-4A04-8D55-5CA12D1DA9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"930B5AE2-CA47-47D7-96DE-F2B9F70337C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3FAA5227-C1F5-48C1-A207-096F228E305E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"74B38E6A-86AA-4C35-AF3F-7F77DF647235"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"271A29AC-0890-495D-8DF7-2530CEAF6C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"43BE5332-C982-440A-A7AA-03B83415B444"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"74E095D6-D6C9-4E21-9CBA-508D043C4286"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"11E968D1-8198-4686-BFDD-8499CB435B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"40A8E0C4-8509-4372-99C7-CFBA2100AEBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B0ADAA69-B258-4666-9AB7-7965429EA497"}]}]}],"references":[{"url":"http://secunia.com/advisories/32534","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/32534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21405562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3856","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la URI por defecto en news/ en Twilight CMS anterior a v4.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"calendar\". NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twilightcms:twilight_cms:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1","matchCriteriaId":"FD2EDB3E-152E-430F-8F2B-E6257B198CC8"}]}]}],"references":[{"url":"http://onsec.ru/vuln?id=10","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/37204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://onsec.ru/vuln?id=10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/37204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3857","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) via a Ruby (.rb) file containing a long string, which triggers the crash when a scroll bar is used."},{"lang":"es","value":"Desbordamiento de búfer en Softonic International SciTE v1.72, permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación) a través de un archivo Ruby (.rb) que contiene una cadena larga, que lanza la caída cuando se usa la barra de desplazamiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softonic:scite:1.72:*:*:*:*:*:*:*","matchCriteriaId":"366B8246-47C8-40CB-BEEB-09C452C1DAF2"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51674","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3858","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T17:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI in photos/tags."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en GejoSoft , permite a atacantes remotos ejecutar secuencias de comandos web o HTML de su elección a través de PATH_INFO hacia la  URI por defecto en photos/tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gejosoft:gejosoft:*:*:*:*:*:*:*:*","matchCriteriaId":"CEC6E84E-8378-4504-98AD-BCFF7193E9DE"}]}]}],"references":[{"url":"http://osvdb.org/56061","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0907-exploits/gejosoft-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51879","source":"cve@mitre.org"},{"url":"http://osvdb.org/56061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0907-exploits/gejosoft-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3859","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .rws file with a long RWS010 entry."},{"lang":"es","value":"Desbordamiento de búfer en Retina WiFi Scanner v1.0.8.68, usado en Retina Network Security Scanner v5.10.14, permite a atacantes asistidos por el usuario provocar una denegación de servicio (caída de aplicación) o la ejecución de código de su elección a través de un archivo .rws con una entrada RWS010 larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeye:retina_wifi_scanner:1.0.8.68:*:*:*:*:*:*:*","matchCriteriaId":"C9676A2D-D668-4BDD-A3EE-D32402A69C63"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeye:retina_network_security_scanner:5.10.14:*:*:*:*:*:*:*","matchCriteriaId":"6DC06A8E-9FE4-4706-8A8C-9398B5986260"}]}]}],"references":[{"url":"http://osvdb.org/55744","source":"cve@mitre.org"},{"url":"http://research.eeye.com/html/advisories/published/AD20090710.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9114","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35624","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022534","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51625","source":"cve@mitre.org"},{"url":"http://osvdb.org/55744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.eeye.com/html/advisories/published/AD20090710.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1022534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3860","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the (1) CreateFolder and (2) Copy methods.  NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer."},{"lang":"es","value":"Múltiples vulnerabilidades de método inseguro en Idefense Labs COMRaider, permite a atacantes remotos crear y sobrescribir archivos de su elección a través de los métodos (1) CreateFolder y (2) Copy. NOTA: es podría ser una vulnerabilidad en determinadas configuraciones inseguras de Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idefense:comraider:*:*:*:*:*:*:*:*","matchCriteriaId":"7547411E-9F98-4F38-BED1-F72F5BEEAC83"}]}]}],"references":[{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln35725.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/505042/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.juniper.net/security/auto/vulnerabilities/vuln35725.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/505042/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3861","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd)."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en SafeNet SoftRemote v10.8.5 (Build 2) y v10.3.5 (Build 6), y posiblemente otras versiones anteriores a v10.8.9, permite a usuarios locales ejecutar código de su elección a través de una cadena larga en (1) TREENAME o (2) un archivo GROUPNAME Policy (spd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:*:*:*:*:*:*:*:*","versionEndIncluding":"10.8.8","matchCriteriaId":"2CCC5416-CA6C-4EF9-8C74-6B688FF300A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1E58D092-7AEE-4930-BA65-6ABDCEA81941"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"B27AA9E6-544A-485F-9E44-9F66937AFCA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"3F911EB9-18A7-4B47-B8F1-A6E1A076D47B"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2C67DB6B-7FCB-400B-B269-0C0F710DC3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"56B5B449-9A76-4D62-9B1F-1D108D0ABCA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"95C0C428-F15F-40BF-9353-F0890D2F8733"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.7.7:*:*:*:*:*:*:*","matchCriteriaId":"C1457398-B204-4997-8091-EC943C4E1D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.0:*:*:*:*:*:*:*","matchCriteriaId":"4525CF5B-5F19-4B0F-A068-B5D0557474F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FC36359D-D57D-4CA0-B858-944593461DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.2:*:*:*:*:*:*:*","matchCriteriaId":"79BA9352-5194-4F72-94DB-10696EA6E9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.3:*:*:*:*:*:*:*","matchCriteriaId":"B977AD44-76F4-4D43-9B06-D52046721AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.4:*:*:*:*:*:*:*","matchCriteriaId":"7E33DCCE-9DD2-4210-97AF-DB315F0731BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1AD55BE4-6F19-4151-9E67-2813271A8BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.6:*:*:*:*:*:*:*","matchCriteriaId":"09148530-C268-443C-B44B-C9A8E8E6BABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:safenet-inc:softremote:10.8.7:*:*:*:*:*:*:*","matchCriteriaId":"3545344C-30AB-4697-B969-3908C9A7435D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507593/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023117","source":"cve@mitre.org"},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-008","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/3108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507593/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.senseofsecurity.com.au/advisories/SOS-09-008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.vupen.com/english/advisories/2009/3108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3862","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://www.novell.com/support/viewContent.do?externalId=7004721\r\n\r\n\"Resolution\r\n\r\nThis vulnerability is resolved in eDirectory 8.8.5 ftf1 and eDirectory 8.7.3.10 ftf2.\r\n\r\nTo resolve this problem, apply eDirectory 8.8.5 ftf1 or newer for eDirectory 8.8.X and eDirectory 8.7.3.10 ftf2 for eDirectory 8.7.3.X.  Patches are available at http://download.novell.com\"","cveTags":[],"descriptions":[{"lang":"en","value":"The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value."},{"lang":"es","value":"El proceso NDSD en Novell eDirectory v8.7.3 anterior a v8.7.3.10 ftf2 y eDirectory v8.8 anterior a v8.8.5 ftf1 no maneja adecuadamente ciertas peticiones de búsqueda de LDAP, lo que permite a atacantes remoto provocar una denegación de servicio (cuelgue de aplicación) a través de una petición de búsqueda con valor BaseDN NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"029ADE6D-6761-4196-847C-A0EFB3A06341"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:*","matchCriteriaId":"15E2B599-2B96-4ED3-B2D9-E4D6909A1F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:*","matchCriteriaId":"9DAFE77C-4AB9-4865-B673-C32EAB3ABB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:*","matchCriteriaId":"5FC5947C-15F7-4BF0-9C0A-F2817F4BB7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp5:windows:*:*:*:*:*","matchCriteriaId":"2A57D5D2-F490-4A33-AFAF-A66CE7988F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:*","matchCriteriaId":"1694F7CA-0E7B-4DC6-9B74-FCCE8B81F048"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:*","matchCriteriaId":"042CF2E0-CE2C-4939-899A-F193127A28B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:*","matchCriteriaId":"2A7E430B-DD25-4BE7-8495-B4FD8EB60F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:*","matchCriteriaId":"142A95E7-009C-4A54-AA04-97C7120C228E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E8D4976-BAE9-4A83-9DF6-9436C54E8413"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A626A123-E33A-445F-93A2-8FA3B2E3E53A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D7548D05-AD2B-46C3-9036-366585FFCB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*","matchCriteriaId":"03D34570-657E-48D5-B778-9510C3D0FF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*","matchCriteriaId":"2EA7ED79-2E4E-4BE0-B167-31BB6311A506"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*","matchCriteriaId":"FC9CE828-3461-4A32-8DD6-ED8BDA0298FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*","matchCriteriaId":"A78EBF3A-4073-41D2-BD52-E598318D4996"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C13882AD-D700-4B95-9BB2-B3E0D104B227"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FDCB14-9380-42C3-A6EE-3E6AEA3F52F2"}]}]}],"references":[{"url":"http://www.novell.com/support/viewContent.do?externalId=7004721","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36902","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3120","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-075/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.novell.com/support/viewContent.do?externalId=7004721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-075/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3863","sourceIdentifier":"cve@mitre.org","published":"2009-11-04T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (application crash) via a long argument to the SetFontFace method."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX  gxmim1.dll en Novell Groupwise Client v7.0.3.1294 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un argumento largo al método SetFontFace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:7.0.3.1294:*:*:*:*:*:*:*","matchCriteriaId":"2345235C-F02E-42D7-8D90-013970BFC73E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9683","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3864","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used, does not retrieve available new JRE versions, which allows remote attackers to leverage vulnerabilities in older releases of this software, aka Bug Id 6869694."},{"lang":"es","value":"La funcionalidad Java Update en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores Update 22 y JDK y JRE v6 before Update 17, cuando una versión no inglesa de Windows es utilizada, no recupera nuevas versiones JRE disponibles, lo que permite a los atacantes remotos aprovechar vulnerabilidades de anteriores actualizaciones de este software, también conocido como Bud Id 6869694."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"0B955A34-DCD3-42E2-BC37-88F348EE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"B0E0373B-201D-408F-9234-A7EFE8B4970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"ABB1D4B3-54E6-455D-9238-B185DB012A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269868-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6753","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269868-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3865","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752."},{"lang":"es","value":"El método launch en el plugin Deployment Toolkit en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE 6 anteriores a Update 17 permite a los atacantes remotos ejecutar arbitrariamente comandos a través de una página web manipulada, también conocido como Bug Id 6869752."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*","matchCriteriaId":"21D6CE7E-A036-496C-8E08-A87F62B5290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"0B955A34-DCD3-42E2-BC37-88F348EE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"ABB1D4B3-54E6-455D-9238-B185DB012A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1023244","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7562","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269869-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1023244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3866","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application, aka Bug Id 6872824."},{"lang":"es","value":"Java Web Start Installer en Sun Java SE en JDK y JRE 6 anteriores a Update 17 no usa adecuadamente los permisos del modelo de seguridad cuando borra las extensiones del instalador, lo que permite a los atacantes remotos ejecutar arbitrariamente código modificando ciertos archivos JNLP que tienen un campo URL que apunta a una aplicación no confiable, también conocido como Bug Id 6872824."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-077/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269870-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-077/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3867","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función HsbParser.getSoundBank en Sun Java SE en JDK y JRE 5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de un un archivo largo: URL en un argumento, también conocido como Id 6854303."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-076/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11903","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6746","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7750","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-076/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3868","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970."},{"lang":"es","value":"Sun Java SE en JDK y JRE 5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 no analiza adecuadamente el perfil color, lo que permite a los atacantes remotos obtener privilegios a través de un archivo de imagen manipulado también conocido como Bud Id 6862970."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11834","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6786","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8622","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3869","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función setDiffICM en Abstract Window Toolkit (AWT) en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de argumentos manipulados, también conocido como Id 6872357."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-078/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10741","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11262","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7400","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8566","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-078/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3870","sourceIdentifier":"cve@mitre.org","published":"2009-06-01T20:30:00.280","lastModified":"2023-11-07T02:04:36.563","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3870.  Reason: This candidate is a duplicate of CVE-2008-3870.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2008-3870 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3871","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la función setBytePixels en Abstract Window Toolkit (AWT) en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x  anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de argumentos manipulados, también conocido como Id 6872358."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-079/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12134","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6698","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8275","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9360","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-079/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3872","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969."},{"lang":"es","value":"Vulnerabilidad no especificada en el JPEG JFIF Decoder en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos obtener privilegios a través de una archivo de imagen manipulado, también conocido como Id 6862969."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11715","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6963","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8475","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3873","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968."},{"lang":"es","value":"El JPEG Image Writer en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos obtener privilegios a través de un archivo de imagen manipulado, relativo a \"problemas de cuantificación\", también conocido como Bug 6862968."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11746","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6970","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8396","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9602","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3874","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1\r\n\r\nResolution\r\n\r\nCR 6854303, 6862970, 6872357, 6872358, and 6862969 are addressed in the following releases:\r\n\r\nJava SE for Windows, Solaris, and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n\r\nJava SE for Solaris:\r\n\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nJava SE for Windows:\r\n\r\n    * SDK and JRE 1.3.1_27 or later\r\n\r\nJava SE for Business for Windows, Solaris and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nThe issues described in CR 6874643 and 6862968 are addressed in the following releases:\r\n\r\nJava SE for Windows, Solaris, and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n\r\nJava SE for Solaris:\r\n\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nJava SE for Business for Windows, Solaris and Linux:\r\n\r\n    * JDK and JRE 6 Update 17 or later\r\n    * JDK and JRE 5.0 Update 22 or later\r\n    * SDK and JRE 1.4.2_24 or later\r\n\r\nJava SE releases are available at:\r\n\r\nJDK and JRE 6 Update 17:\r\n\r\n    * http://java.sun.com/javase/downloads/index.jsp\r\n\r\nJRE 6 Update 17:\r\n\r\n    * http://java.com/\r\n    * Through the Java Update tool for Microsoft Windows users\r\n\r\nJDK 6 Update 17 for Solaris is available in the following patches:\r\n\r\n    * Java SE 6: update 17 (as delivered in patch 125136-18)\r\n    * Java SE 6: update 17 (as delivered in patch 125137-18 (64bit))\r\n    * Java SE 6_x86: update 17 (as delivered in patch 125138-18)\r\n    * Java SE 6_x86: update 17 (as delivered in patch 125139-18 (64bit))\r\n\r\nJDK and JRE 5.0 Update 22:\r\n\r\n    * http://java.sun.com/javase/downloads/index_jdk5.jsp\r\n\r\nJDK 5.0 Update 22 for Solaris is available in the following patches:\r\n\r\n    * J2SE 5.0: update 22 (as delivered in patch 118666-24)\r\n    * J2SE 5.0: update 22 (as delivered in patch 118667-24 (64bit))\r\n    * J2SE 5.0_x86: update 22 (as delivered in patch 118668-24)\r\n    * J2SE 5.0_x86: update 22 (as delivered in patch 118669-24 (64bit))\r\n\r\nJava SE for Business releases are available at:\r\n\r\n    * http://www.sun.com/software/javaseforbusiness/getit_download.jsp\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643."},{"lang":"es","value":"Desbordamiento de entero en la implementacion JPEGImageReader en el componente ImageI/O en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos ejecutar arbitrariamente código a través de submuestra de dimensión larga en un archivo JPEG que lanza un desbordamiento de búfer basado en memoria dinámica, también conocido como Id 6874643."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:java_se:*:*:business:*:*:*:*:*","matchCriteriaId":"CB9A3291-3F2C-40E9-81D3-D148002E1782"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"8198F493-0447-4A87-9F16-5B6CB3572E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_10:*:*:*:*:*:*","matchCriteriaId":"645BBE6D-BA5E-4D93-9152-759A2355013E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"0EE694C9-940A-4899-844C-AC63412FA295"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"BC9476DD-9B56-4811-A248-711C25181F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"68D34082-2948-4D95-B43F-FBD59E2F3D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"F2E01C07-4921-47CC-9AFC-D3B461D0B78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"7532E7D4-2F62-4DA0-B905-F95A0A735CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"0AF93193-889E-4F44-ADEB-E89E56DE6C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"68C19440-4172-4539-8E38-09DBCB1752E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"3CC000EC-9717-47DA-B182-6C8CD3970F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"115083C5-811F-47BA-8549-3BDFF9CA0740"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"51337B8C-78F2-4207-998E-A3FC591F538B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"48193108-CD9F-476E-A7D2-E0796F659BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"A0A80299-783A-4FBA-9EBF-5913942949A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"76A4F852-0240-44D6-9BD5-FE79DEF16438"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"F57E5943-5CC3-4736-85E8-FE7CC4F38735"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"3C228E00-0F5C-41D2-8BD0-46AF682AE842"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"0329E813-B2C8-4C84-BCAF-2D54C4AE0472"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"7E3C40E1-7005-4F83-B347-177BEC9EE339"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"6855E3F5-6F8E-44FA-A913-0D0F6A803DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"C79BDB6E-442B-41F1-A025-C17648A81FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"EBB09CE1-F4AC-472C-8D5D-594AEB322CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"722A93D8-B5BC-42F3-92A2-E424F61269A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"775F2611-F11C-4B84-8F40-0D034B81BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"F20FDD9F-FF45-48BC-9207-54FB02E76071"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9FA326F5-894A-4B01-BCA3-B126DA81CA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"228AB7B4-4BA4-43D4-B562-D438884DB152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"AFD5C688-2103-4D60-979E-D9BE69A989C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"21421215-F722-4207-A2E5-E2DF4B29859B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"D98175BF-B084-4FA5-899D-9E80DC3923EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"820632CE-F8DF-47EE-B716-7530E60008B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"D54AB785-E9B7-47BD-B756-0C3A629D67DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"E9412098-0353-4F7B-9245-010557E6C651"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"FB0E9224-3D12-47E2-8E69-7B682284CDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"77BCD102-59A4-45A6-ADEF-CAB7F70E2377"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"27A472AF-049D-4D63-841C-1EF737E8D64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_21:*:*:*:*:*:*","matchCriteriaId":"C5759CBC-D910-407D-83DF-A77FBDC8555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*","matchCriteriaId":"AADBB4F9-E43E-428B-9979-F47A15696C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023132","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-080/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11566","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12057","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7442","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8603","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-080/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3875","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to \"timing attack vulnerabilities,\" aka Bug Id 6863503."},{"lang":"es","value":"La función MessageDigest.isEqual en Java Runtime Environment (JRE) en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE 6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos falsificar la firma digital basada en HMAC, y posiblemente evitar la autenticación, a través de vectores no especificados relativos a \"vulnerabilidades de ataque de temporización\" también conocido como Bud Id 6863503."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"0B955A34-DCD3-42E2-BC37-88F348EE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*","matchCriteriaId":"B760192E-7193-4FEF-8FFA-680AC89D45A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"B0E0373B-201D-408F-9234-A7EFE8B4970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"ABB1D4B3-54E6-455D-9238-B185DB012A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*","matchCriteriaId":"CD491CD3-5763-4698-8893-2D5F5609BD89"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270475-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11847","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12112","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7549","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7913","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270475-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3876","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE v6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_2 permite a los atacantes remotos causar una denegación de servicio (consumo de memoria) a través de datos codificados DER manipulado, que no decodifica apropiadamente por el analizador de entrada ASN.1 DER, también conocido como Id 6864911."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"0B955A34-DCD3-42E2-BC37-88F348EE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*","matchCriteriaId":"B760192E-7193-4FEF-8FFA-680AC89D45A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"B0E0373B-201D-408F-9234-A7EFE8B4970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"ABB1D4B3-54E6-455D-9238-B185DB012A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*","matchCriteriaId":"CD491CD3-5763-4698-8893-2D5F5609BD89"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11934","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6805","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3877","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911."},{"lang":"es","value":"Vulnerabilidad no especificada en Sun Java SE en JDK y JRE v5.0 anteriores a Update 22, JDK y JRE v6 anteriores a Update 17, SDK y JRE v1.3.x anteriores a v1.3.1_27, y SDK y JRE v1.4.x anteriores a v1.4.2_24 permite a los atacantes remotos causar una denegación de servicio (corrupción de memoria) a través de una cabecera manipulada HTTP, que no está propiamente analizado por el analizador de entrada ASN.1 DER también conocido como Id 6864911."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*","matchCriteriaId":"646DDCA6-AAC4-4FA8-B9B5-51F88D4C001D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"212F4A5F-87E3-4C62-BA21-46CBBCD8D26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*","matchCriteriaId":"59ED507D-AEF8-4631-A298-8BDA6D6E8CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"0B955A34-DCD3-42E2-BC37-88F348EE31F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"D9598A49-95F2-42DB-B92C-CD026F739B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"DB48B161-C239-4BB5-8667-7ACA5A5437F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"83629616-1814-4858-B09F-79BEA82D6F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"D011585C-0E62-4233-85FA-F29A07D68DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"03E8F351-F900-436E-A726-55AE31FBF832"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"F76B79C6-ADD0-4992-A4BD-423A0AD38714"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"F226D898-F0E8-41D8-BF40-54DE9FB5426D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"FBFD41B5-6E33-4B00-81E8-9D91B0A03BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"4CB9CCD1-A67D-4800-9EC5-6E1A0B0B76E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"CE28C283-447A-4F83-B96B-69F96E663C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"685D3F7F-30B9-4EB8-90FC-66A2A067A510"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"722B704B-A422-4163-AD48-F30CA4A07002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"C05784DC-626B-4D8D-A4DF-A42AC87131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"98C1942E-16C0-4EB2-AB57-43EC6EC9C3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"318719C9-7B01-4021-B2EF-8341254DFE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"DB8FA9BA-51CA-4473-9FE1-9A32FB8C8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"CC5E64B6-77DA-44BC-B646-AE01041B1830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"2DA35E80-9E0E-4A26-B631-A61542BE4739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"7EEB5367-1BB8-4ED3-8C04-ABA6BAA5AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"BED9E7C8-0418-4733-A496-61CCFD638859"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"6566CE32-E042-424A-893B-C8A9E26E2869"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*","matchCriteriaId":"B760192E-7193-4FEF-8FFA-680AC89D45A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*","matchCriteriaId":"B0E0373B-201D-408F-9234-A7EFE8B4970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"ABB1D4B3-54E6-455D-9238-B185DB012A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*","matchCriteriaId":"E6C4CA79-9D0A-4E47-A1A4-9CBEDDCFE05E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"6F6453C9-7EE0-4FFB-861D-C2D9416DCABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*","matchCriteriaId":"89BF16DE-EEAB-4DA5-BFF1-7A0A58DE141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*","matchCriteriaId":"AF4E34FD-D927-42BB-8A16-031D77CB4B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"6DDE253E-C8B6-4C1D-AECE-ABEA1A67306B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*","matchCriteriaId":"F45DB5D3-7F35-4531-9A82-24EB50034787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*","matchCriteriaId":"A56D9A60-F272-4D4C-A9DD-C93DAF783585"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*","matchCriteriaId":"EF109CAA-E8D2-4BD7-BE7C-AF8B2A78672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*","matchCriteriaId":"4695F707-12E8-4BA4-BBE1-C21CB7213A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*","matchCriteriaId":"976F4ACB-3725-45B7-B2EF-DEE4B88254E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*","matchCriteriaId":"C918FB49-DA13-4326-BE86-6F6BEA4CE4E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*","matchCriteriaId":"5573CAD1-39D1-4ADB-BB95-EBB554B43B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*","matchCriteriaId":"52BDD6A8-1611-4C3C-865D-6EDB5B9F8D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"6A1F28FF-652A-4C89-9AC6-5E212F890811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"96A8C351-E9CD-431B-8B9D-712CA54C7213"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*","matchCriteriaId":"B1C88DD7-0B46-4405-BD35-60D27E2DBA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*","matchCriteriaId":"08D23B7C-7B8C-41B8-8D94-BB0F27C7F0A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*","matchCriteriaId":"1C49B997-95D3-4DA4-A353-DB41AD461C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*","matchCriteriaId":"6F70EF76-ED5F-4835-8252-FE613604FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*","matchCriteriaId":"6BDBCAD8-CDF7-4550-8EA2-1409B02FFAD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*","matchCriteriaId":"7E691333-0434-4808-9ED4-E82C6EC2FD37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*","matchCriteriaId":"BBE7A538-FF2E-4622-8479-781AB73CBA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*","matchCriteriaId":"CD491CD3-5763-4698-8893-2D5F5609BD89"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_1:*:*:*:*:*:*:*","matchCriteriaId":"EA460D9A-662F-4861-9835-3D3116FB9488"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"7E49A68E-0886-4AED-8FF4-9455914BFE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"E94B0A27-60D3-42F5-9DF6-75F481C2460D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"89E95205-DB64-44AD-81A4-B77BD7595AAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"0875E34D-8544-49B9-BAD9-8191CC103A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"62E772B9-8E41-476F-81F5-87B41F1827A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"B9643B49-FC4B-4AD4-90AC-939DDAA96518"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"F76773E5-0A91-49B8-8C9C-DD64AB9F74BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"7CE78463-2CE8-43C6-BB06-AA40C72B1A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"31A04480-92DF-49AD-9B36-7F1FCB29DE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"ADF93A34-0535-4289-B12C-A1E1E22C13D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"E2FD0B72-683D-4FF6-BCF5-5DE85BF3064B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"EC85B851-FEC7-4299-9EC5-D8A69E16B89C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"F78CD4B5-4B1D-4128-8AEA-2F967C38C6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"1B4E5018-6A0B-4F26-96AA-AD8F6EA7FB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"2978CF34-D48B-4ED2-A0C1-3CFAA5867223"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"62CAA3E7-9D65-48F3-ACF7-9D705D94DE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"2C0E6EA5-0D9F-4B15-860A-5DA3FD1765B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"477C310B-50AD-4D40-8EDB-4A80F0BF321D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"60A1F526-6B28-47A3-8D2C-06CA067E9164"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"17F09D9E-B04B-477E-86E6-E1B1F9650973"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"6F929C59-9602-4962-95B4-4165D66E5935"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"E8B76949-9282-44D0-8075-74E482CE9A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"B9B072DD-FC4F-4E07-9837-0E16017CA4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"969BE4EC-4D13-4B74-8137-FA0F83F0FDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"86408019-1B53-4AA8-9F05-47EBD0466EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"81F47561-F59C-4904-8E05-D8A9629405A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"FB067445-8EA5-460F-B625-C21251E5A8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"B4C075BC-607E-47A1-A32D-B912D2FA03BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"007175B8-48DB-46BE-B971-FB57B6A33723"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"D5E6F92A-FC59-4CE7-B7F8-94CBF3DC8F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"496901D5-014D-4920-A343-91A56F6FEFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"B2D18FBC-4C9B-4722-90AB-028D281654F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"853BC114-592C-43FE-B227-EF41C494DC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"B1F4E031-CE92-48C4-BECC-7C1190DB477A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_2:*:*:*:*:*:*:*","matchCriteriaId":"16AD9E9E-D6BD-4FCD-B857-F5013033200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*","matchCriteriaId":"87BF46A9-8E4A-4583-B35F-052FD481DF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*","matchCriteriaId":"32B351BB-6CA6-4CEF-9F5D-ED47774FC676"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_3:*:*:*:*:*:*:*","matchCriteriaId":"21300F7C-6904-456C-949D-C0AFA630F4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_4:*:*:*:*:*:*:*","matchCriteriaId":"776FA44E-6277-4236-A872-103E7DDE5040"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*","matchCriteriaId":"CDA40FCD-1D34-4C47-908F-697433236153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_5:*:*:*:*:*:*:*","matchCriteriaId":"63267A02-DCE2-4B86-B370-B90F03C7E341"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*","matchCriteriaId":"00639A84-BD03-4BD9-A655-F806693DBC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_6:*:*:*:*:*:*:*","matchCriteriaId":"2E2AE42E-0E25-468F-A8CB-03991F356338"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*","matchCriteriaId":"14824B23-FF9F-4D6D-9D02-12B79BE346A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_7:*:*:*:*:*:*:*","matchCriteriaId":"5E015A65-708E-45B9-B66A-2D0F09638FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*","matchCriteriaId":"6493744C-A69D-4377-937E-85E7F5535EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_8:*:*:*:*:*:*:*","matchCriteriaId":"F86BA5FB-A611-458E-8E37-4D4927D04D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*","matchCriteriaId":"C09019B1-B873-41CE-951E-4777F324729C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_9:*:*:*:*:*:*:*","matchCriteriaId":"03949794-A1DD-420F-A468-8F00AEA7B69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*","matchCriteriaId":"EC4209A0-E73F-4B5A-9925-B5D20F879455"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*","matchCriteriaId":"297DF5AD-FC22-432B-AE6A-2B1E6CFE1BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*","matchCriteriaId":"BFB8516D-03C4-478D-AFE2-824867FDC739"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*","matchCriteriaId":"F82AED17-FEC3-47D0-A395-26ACD07FBE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*","matchCriteriaId":"9630BC7B-9039-4FA6-86F8-5274783F3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*","matchCriteriaId":"F1A6A15C-216A-42B1-84EF-B3D9A313D4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*","matchCriteriaId":"EC39C819-9439-4029-8377-F6D58B3DFDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*","matchCriteriaId":"F0DBFDD8-40AE-44F2-8F02-FB7A4FAE5235"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*","matchCriteriaId":"8EB8591E-3D6E-489B-B0D6-CEBB9D09EA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*","matchCriteriaId":"8A411676-6666-4B54-A008-443B9B42F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*","matchCriteriaId":"0AEDC9B2-8AA6-4DA2-A187-49A1DD106725"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*","matchCriteriaId":"8F69BEE4-CB4B-436A-9838-13239B368CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*","matchCriteriaId":"11AC1050-38AF-49F4-A40C-AAF9710204AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*","matchCriteriaId":"8FA939E8-8747-4532-B6B4-6E83824C7067"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37386","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37581","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37841","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36881","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10469","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12232","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7148","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8330","source":"cve@mitre.org"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=126566824131534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131593453929393&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1694.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3878","sourceIdentifier":"cve@mitre.org","published":"2009-11-05T16:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in VulnDisco Pack Professional 8.12.  NOTE: as of 20091105, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer en Sun Java System Web Server v7.0 Update 6 con impacto no especificado y vectores de ataque remoto, como se demuestra por el módulo vd_sjws en VulnDisco Pack Professional v8.12.  NOTA: a la fecha 05/11/2009, no hay ninguna información para utilizar esta vulnerabilidad. Sin embargo debido a que el autor de VulnDisco es un investigador reputado, se ha asignado un identificador CVE con el fin de hacerle un seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:intevydis:vulndisco_pack:8.12:*:pro:*:*:*:*:*","matchCriteriaId":"C3F52543-008F-4734-B729-932FC554A57B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:7.0:update_6:*:*:*:*:*:*","matchCriteriaId":"C4E1A63C-F6C0-475C-BC3A-AC223E766614"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=79","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59497","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54065","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.h-online.com/security/news/item/Alleged-critical-vulnerability-in-Sun-Java-System-Web-Server-839598.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.intevydis.com/blog/?p=79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3879","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057."},{"lang":"es","value":"Múltiples vulnerabilidades no específicas en los subsistemas (1) X11 y (2) Win32GraphicsDevice en Sun Java SE v5.0 anteriores a Update 22 y 6 anteriores a Update 17, y OpenJDK, tienen impacto y vectores de ataque desconocidos, relacionado como el fallo de copiado de tablas que son devueltos por la función getConfiguración, también conocido como Bug Id 6822057."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"349EC26C-D1B9-44E4-A58E-E05326B7EC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530297","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7545","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9568","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3880","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512."},{"lang":"es","value":"El Abstract Window Toolkit (AWT) en Java Runtime Environment (JRE) en Sun Java SE v5.0 anteriores a Update 22 y 6 anteriores a Update 17, y OpenJDK, no restringen de forma adecuada los objetos que se pueden enviar a los usuarios que se loguean, lo que permite a atacantes remotos obtener información sensible a través de vectores relativos a la implementación del componente KeyboardFocusManager, y DefaultKeyboardFocusManager, también conocido como Bug Id 6664512."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"349EC26C-D1B9-44E4-A58E-E05326B7EC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530296","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10761","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7316","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3881","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an \"information leak vulnerability,\" aka Bug Id 6636650."},{"lang":"es","value":"Sun Java SE v5.0 anterior a Update 22 y 6 anterior a Update 17, y OpenJDK, no previene la existencia de procesos hijo en un ClassLoader resucitada, lo que permite a atacantes remotos obtener privilegios a través de vectores no especificados, relacionado con una vulnerabilidad de debilidad de información., también conocido como Bug Id 6636650."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"349EC26C-D1B9-44E4-A58E-E05326B7EC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530173","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11484","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6906","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3882","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657026."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en la implementación Swing en Sun Java SE v5.0 anteriores a Update 22 y 6 anteriores a Update 17, y OpenJDK, tiene un impacto desconocido vectores de ataque remoto, relacionado con \"debilidad de información en variables mutables\" también conocidos como Bug ID 6657026.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"94610598-AA41-4E03-AE95-8F55C67DA127"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"064E7F92-A69C-47DB-92F7-8EAB02157BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"DE530E86-CB96-4720-9C0C-EBBF583AE87E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1382DB42-D947-4690-880B-A158C993A495"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530175","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7300","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8841","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3883","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to \"information leaks in mutable variables,\" aka Bug Id 6657138."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en la funcionalidad Windows Pluggable Look and Feel (PL&F) de la implementación de Swing en Sun Java SE 5.0 antes de Update 22, Sun Java SE 6.0 antes de la actualización 17, y OpenJDK, tienen un impacto desconocido y vectores de ataque remotos, relacionados con \"fugas de información en variables mutables\". Se trata del Bug ID 6657138."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"94610598-AA41-4E03-AE95-8F55C67DA127"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"452A3E51-9EAC-451D-BA04-A1E7B7D917EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"55231B6B-9298-4363-9B5A-14C2DA7B1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"E42CF0F7-418C-4BB6-9B73-FA3B9171D092"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"A5467E9D-07D8-4BEB-84D5-A3136C133519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"8A32F326-EA92-43CD-930E-E527B60CDD3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"04344167-530E-4A4D-90EF-74C684943DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"064E7F92-A69C-47DB-92F7-8EAB02157BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CBCD143C-057D-4F42-B487-46801E14ACF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"B6339EF9-97AC-4675-9971-7435A4B31432"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"6D1626F8-26F4-4EC5-A486-98808372425F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"FA1BFE3B-3773-426B-9E69-250249E059C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"46621D4B-CA2B-4EAC-884E-9CC9486F2F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"37FED4C9-7501-4DF3-B05E-0B460CBB2D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"6958538A-0C2E-460F-A130-70515AFBB6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"360EF765-0C3A-4A13-9DA3-48928BB978E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"FBE651B3-3320-48E7-BDD5-74D3C609162C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"2F435AA3-B716-4B3B-8873-3646E18CA600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"4773DE1C-50EF-4561-B480-74C6BD64D449"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"BB2B5C85-D6EE-4C0B-9228-A724D6C780C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"60D59062-997B-44F1-95C6-619823F138A7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"DE530E86-CB96-4720-9C0C-EBBF583AE87E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A02CF738-1B4F-44D0-A618-3D3E4EF1C9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*","matchCriteriaId":"CD61E49F-2A46-4107-BB3F-527079983306"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*","matchCriteriaId":"D900AAE0-6032-4096-AFC2-3D43C55C6C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*","matchCriteriaId":"88B0958C-744C-4946-908C-09D2A5FAB120"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*","matchCriteriaId":"C3E7F3CA-FFB3-42B3-A64F-0E38FAF252FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*","matchCriteriaId":"9A2D8D09-3F18-4E73-81CF-BB589BB8AEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*","matchCriteriaId":"3FD24779-988F-4EC1-AC19-77186B68229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*","matchCriteriaId":"4F1E860E-98F2-48FF-B8B3-54D4B58BF81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*","matchCriteriaId":"505A8F40-7758-412F-8895-FA1B00BE6B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"532CF9DD-0EBB-4B3B-BB9C-A8D78947A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"1382DB42-D947-4690-880B-A158C993A495"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"FE5F6E90-A942-4468-B763-9606CE073A9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"B0ADF941-5E90-498D-A2E2-7DBCF5358D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"0819F015-FF7B-4C8F-B195-4CB54070BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"B5CB2234-B196-4F41-9FE9-A1896A57E575"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"572A693C-1EEE-4A6C-BA42-B4FB4B28D0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"7A59AF0A-5335-4650-88DB-5B261FE5E308"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"A819CA7F-6AA9-4CB0-8577-7F8C751825DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"374CA7F2-A5CE-43A3-8317-EEC605127B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"0FF2748E-1A9A-4988-91B7-A3A8D2B06CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"E2868B56-7CFA-4E49-9EDC-8A5E4F9D4861"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"8CCADCB6-E972-429E-AAA6-44857094AF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update8:*:*:*:*:*:*","matchCriteriaId":"A86AD5C2-32D1-4C85-A643-A7FF7F46B4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update9:*:*:*:*:*:*","matchCriteriaId":"F79C6897-18C1-43CF-AA05-C73AD57F01FE"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530175","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10191","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6968","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3884","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265."},{"lang":"es","value":"El método TimeZone.getTimeZone en Sun Java SE 5.0 antes de Update22, Sun Java SE 6.0 antes de la actualización 17, y OpenJDK, permite a atacantes remotos determinar la existencia de archivos locales a través de vectores relacionados con el manejo de ficheros zoneinfo (aliasa TZ). Se trata del Bug ID 6824265."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"349EC26C-D1B9-44E4-A58E-E05326B7EC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*","matchCriteriaId":"0E78309B-E13F-4B65-9F59-39A993B900AF"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37581","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3969","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3970","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530300","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11686","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6960","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3885","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445."},{"lang":"es","value":"Sun Java SE v5.0 anteriores a Update 22 y 6 anteriores a Update 17 en Windows permite a atacantes remotos provocar una denegación de servicio a través de un fichero .BMP que contenga un enlace a un path compartido UNC para un fichero de perfil ICC del consorcio internacional del color, probablemente relacionado como CVE-2007-2789, también conocido como error Id 6632445."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*","versionEndIncluding":"1.5.0","matchCriteriaId":"349EC26C-D1B9-44E4-A58E-E05326B7EC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_1:*:*:*:*:*:*","matchCriteriaId":"14E6127E-A40D-437D-B57B-0D7F57D08559"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_11:*:*:*:*:*:*","matchCriteriaId":"28AE4411-45D1-4978-BA61-334AD04FF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_12:*:*:*:*:*:*","matchCriteriaId":"479EB097-495A-4730-AF51-F2C0064EBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_13:*:*:*:*:*:*","matchCriteriaId":"9B3E7C12-8D97-42CC-9B2B-A0AE3267DE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_14:*:*:*:*:*:*","matchCriteriaId":"5024BE9F-CE32-4099-A646-F3EC5DB6F63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_15:*:*:*:*:*:*","matchCriteriaId":"DA9FB72A-C55F-4878-89D5-375FDA08163B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_16:*:*:*:*:*:*","matchCriteriaId":"1CBC2A9C-9F21-4509-BA72-28B5DB16E55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_17:*:*:*:*:*:*","matchCriteriaId":"485F5ED3-062D-4A8E-AA34-9DC95D0D9646"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_18:*:*:*:*:*:*","matchCriteriaId":"124364C5-0616-4C7A-A78F-08FABAA785CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_19:*:*:*:*:*:*","matchCriteriaId":"A6BFFF1E-20D6-4508-9842-E7AB35F12B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_2:*:*:*:*:*:*","matchCriteriaId":"DB7307A5-6F20-44FD-9D09-8FB76E444500"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_20:*:*:*:*:*:*","matchCriteriaId":"2E7F3992-0C15-4371-BE14-0D2046B3976E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_3:*:*:*:*:*:*","matchCriteriaId":"0E45DE8A-477B-4BF7-893B-D11DDEE82E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_4:*:*:*:*:*:*","matchCriteriaId":"D107CE0B-2EF2-4CF0-869E-3E27CBCA4997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_5:*:*:*:*:*:*","matchCriteriaId":"81DABB45-F39C-4BF4-8F2B-0CEE60A44C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_6:*:*:*:*:*:*","matchCriteriaId":"CDDBD68A-771C-44FD-96A3-3AE189DE2591"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_7:*:*:*:*:*:*","matchCriteriaId":"8FBD21F3-AC92-4154-948E-509FB8E097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_8:*:*:*:*:*:*","matchCriteriaId":"D91F9E0C-0A76-4DBC-A4E5-74E6682A5765"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update_9:*:*:*:*:*:*","matchCriteriaId":"86F7EF21-5395-4F1F-A15D-A1C7EDBFAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0_0:*:*:*:*:*:*:*","matchCriteriaId":"7F9AEA13-26CF-489D-BE9C-3BF576153D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0_10:*:*:*:*:*:*:*","matchCriteriaId":"23F1ED03-A83E-4F0E-A82A-D1A02290F594"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530114","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7094","source":"secalert@redhat.com"},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3886","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T19:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a \"regression,\" aka Bug Id 6870531."},{"lang":"es","value":"La implementación de Java Web Start en Sun Java SE v6 antes de la Update17 no controla correctamente la interacción entre un archivo JAR firmado y (1) una aplicación JNLP  o (2) un applet JNLP, lo que tiene un impacto no especificado y vectores de ataque, en relación a una \"regresión. Se trata del Bug 6870531."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"64DE1804-F822-4D0D-82A3-3B9DE1F3B0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*","matchCriteriaId":"0A0FEC28-0707-4F42-9740-78F3D2D551EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*","matchCriteriaId":"C3C5879A-A608-4230-9DC1-C27F0F48A13B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*","matchCriteriaId":"0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*","matchCriteriaId":"2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*","matchCriteriaId":"12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*","matchCriteriaId":"1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*","matchCriteriaId":"7158D2C0-E9AC-4CD6-B777-EA7B7A181997"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*","matchCriteriaId":"90EC6C13-4B37-48E5-8199-A702A944D5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*","matchCriteriaId":"2528152C-E20A-4D97-931C-A5EC3CEAA06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*","matchCriteriaId":"A99DAB4C-272B-4C91-BC70-7729E1152590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*","matchCriteriaId":"30DFC10A-A4D9-4F89-B17C-AB9260087D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*","matchCriteriaId":"272A5C44-18EC-41A9-8233-E9D4D0734EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_8:*:*:*:*:*:*","matchCriteriaId":"3DA21490-E253-4BDC-9BA8-5D068BE35189"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*","matchCriteriaId":"81C2C04D-D4BA-4C87-9609-C53AA63BFF19"}]}]}],"references":[{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532914","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6794","source":"secalert@redhat.com"},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3888","sourceIdentifier":"secalert@redhat.com","published":"2009-11-16T19:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory."},{"lang":"es","value":"La función do_mmap_pgoff en mm/nommu.c en el kernel de Linux anteriores a v2.6.31.6, cuando la CPU carece de unidad de gestión de memori, permite a usuarios locales provocar una denegación de servicio (OOPS) mediante una aplicación que intente reservar una gran cantidad de memoria."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. The Linux kernels as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not have MMU disabled, and therefore are not affected by this issue.","lastModified":"2009-11-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.5","matchCriteriaId":"C7D666AB-5EE0-4863-8B09-213737C93781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/09/2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3889","sourceIdentifier":"secalert@redhat.com","published":"2009-11-16T19:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file."},{"lang":"es","value":"El fichero dbg_lvl para el controlador megaraid_sas en el kernel de Linux versiones anteriores a v2.6.27 tiene permisos de escritura para todos, permitiendo a usuarios locales cambiar (1) el comportamiento y (2) el nivel de acceso del controlador modificando este fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 3, as it does not implement the sysfs file system (&quot;/sys/&quot;), through which dbg_lvl file is exposed by the megaraid_sas driver.\n\nIssue was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0076.html , https://rhn.redhat.com/errata/RHSA-2010-0046.html and https://rhn.redhat.com/errata/RHSA-2009-1635.html respectively.","lastModified":"2010-02-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.26","matchCriteriaId":"47FAE90A-B941-4C5D-809E-FFA60476F65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*","matchCriteriaId":"034DFD7F-8919-4245-8480-7B272F591271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*","matchCriteriaId":"4CEBC606-6488-48CE-8AA8-5B8CC724D5D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*","matchCriteriaId":"A83C60AF-50A9-480E-860D-45E80AC0A6B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/60202","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/4","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37019","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526068","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11018","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7163","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3890","sourceIdentifier":"secalert@redhat.com","published":"2009-11-17T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the mod_mime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an attachment with a multiple-extension filename, and then accessing this attachment via a direct request to a wp-content/uploads/ pathname, as demonstrated by a .php.jpg filename."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en la función wp_check_filetype en wp-includes/functions.php en WordPress anteriores a v2.8.6, cuando cierta configuración del modulo mod_mime en el servidor HTTP Apache esta activado, permite a usuarios remotos autenticados ejecutar código arbitrario posteando un adjunto con un nombre de fichero con múltiples extensiones y luego accediendo a el a través de una petición directa al nombre de ruta wp-content/uploads/, como se demuestra con el nombre de fichero .php.jpg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.5","matchCriteriaId":"E33698FD-9A82-413F-BADD-8E0719BB70A9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0142.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0149.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0153.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://core.trac.wordpress.org/ticket/11122","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/16/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/59958","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0149.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://core.trac.wordpress.org/ticket/11122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/16/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/59958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3891","sourceIdentifier":"secalert@redhat.com","published":"2009-11-17T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter (aka the selection variable)."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en wp-admin/press-this.php en WordPress anteriores a v2.8.6 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través del parámetro \"s\" (también conocido como variable selección)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.5","matchCriteriaId":"E33698FD-9A82-413F-BADD-8E0719BB70A9"}]}]}],"references":[{"url":"http://core.trac.wordpress.org/attachment/ticket/11119/press-this-xss-bug-11-10-2009.patch","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/attachment/ticket/11119/press-this.002.diff","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/ticket/11119","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/16/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/59959","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://core.trac.wordpress.org/attachment/ticket/11119/press-this-xss-bug-11-10-2009.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/attachment/ticket/11119/press-this.002.diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://core.trac.wordpress.org/ticket/11119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/16/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/59959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-3892","sourceIdentifier":"secalert@redhat.com","published":"2009-11-17T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Best Practical Solutions RT v3.6.x anteriores a v3.6.9, v3.8.x anteriores a v3.8.5, y otros desde v3.4.6 hasta v3.8.4 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de ciertos campos personalizados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F98B7895-BDB3-477C-8B34-88BD3E02EAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1512169D-DCEF-4964-B05A-3DF19CDE8F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B427F5D4-ACD6-46E5-B94F-CA30330C6492"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E9B38C33-D680-4285-A849-E6CDA9F4802F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"646CFD82-15FE-48E4-83C9-E3E037E9F928"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57404A14-6E1C-4F3B-8120-75F1073A3E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3F40ED56-CDAC-40BB-A026-5D6A09DCB72C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"33C325D9-CB88-430F-B1AE-3544C7176398"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"F1E86D15-8435-46B9-88FF-8A51771C55E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"543C8E63-9A49-4D6A-899A-7D244D0CCC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C503726A-4AAB-4444-A204-7F53A6369919"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F2B93F59-E22F-47E0-A5EA-D5716E9EAB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0BF01543-2929-4ADA-BD74-ABE00BF066BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.3:*:*:*:*:*:*:*","matchCriteriaId":"562E9782-259B-42C6-BC3E-C452799A78FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"C4D2E2C8-15E8-45E4-9DBF-6CF2BEB30576"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778","source":"secalert@redhat.com"},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000172.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000173.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/16/4","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000172.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/16/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3894","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:52.063","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory."},{"lang":"es","value":"Múltiples vulnerabilidades de búsqueda en ruta no confiable en dstat anterior a v0.7.0 permite a usuarios locales obtener privilegios a través de un troyano en el módulo Python en (1) el directorio actual de trabajo o (2) cierto subdirectorio del directorio actual de trabajo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.9","matchCriteriaId":"D8839DD5-F985-4276-AE13-1B1C15A8A742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.1:*:*:*:*:*:*:*","matchCriteriaId":"FE378E62-581D-43AE-B4D9-CF08E9E8B5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.2:*:*:*:*:*:*:*","matchCriteriaId":"F189ACBF-4038-4E0E-B2D4-1FBD312B8D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.3:*:*:*:*:*:*:*","matchCriteriaId":"1F93B62A-7A4E-48EA-96BC-AE557D86FCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.4:*:*:*:*:*:*:*","matchCriteriaId":"56964973-73C4-4BF4-8BE4-6E12E82B4FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C38978EB-D9AC-4118-8B08-B578933F3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9357C30-514B-4860-85C4-3DB5F86F7758"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0A67F161-89CB-4FCD-833D-211A1BA37DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9AEDFEF7-08C0-405F-9761-88EF4BFDDC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C034CAF4-E495-4ABA-A2FA-358EA2790DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D567F7D2-B1DB-4B24-9A8F-E973C06F7CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"09A92E27-1122-45D2-93A8-D3AE4E59C3A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"FA4C2451-F640-41E9-B509-3A82508753F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"E24E19D4-5A74-49A9-AE71-0F83CC492D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C1B25B40-347B-475E-A8D3-9030B8FE7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EF057EE5-F82C-442E-8350-2EC37E39EF1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EEAE0611-BC0C-4E08-9E09-F4B76E24975E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B8EF9448-619E-4636-80EB-3C81307579B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"52723AD9-85C9-45D7-8617-23627CDE6FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5909F7DA-7A7E-4F2E-B6B5-B534C5B822D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"41D533D4-8102-4837-BA64-575848E18E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"0B145671-3BFA-480E-89EC-F04C53C15E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"392EEB7E-C501-4C04-BE99-1DA5D022AE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"F18ACBF7-68F3-473F-8D26-4D5B23D2D60F"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=293497","source":"secalert@redhat.com"},{"url":"http://osvdb.org/60511","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37445","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37457","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-04.xml","source":"secalert@redhat.com"},{"url":"http://svn.rpmforge.net/svn/trunk/tools/dstat/ChangeLog","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:341","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1619.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37131","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=538459","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8969","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=293497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.rpmforge.net/svn/trunk/tools/dstat/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1619.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=538459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3895","sourceIdentifier":"secalert@redhat.com","published":"2009-11-20T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en montículo en la función exif_entry_fix (también conocida como la rutina de corrección de tags) en libexif/EXIF-entry.c en libexif v0.6.18 permite a atacantes remotos causar una denegación de servicio o posiblemente ejecutar código arbitrario a través de una imagen EXIF inválida. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of libexif as shipped with Red Hat Enterprise Linux 4, or 5.\n","lastModified":"2009-11-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libexif_project:libexif:0.6.18:*:*:*:*:*:*:*","matchCriteriaId":"9D844FD6-6B88-456C-9BA5-B86CF92823AB"}]}]}],"references":[{"url":"http://bugs.debian.org/557137","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=293190","source":"secalert@redhat.com"},{"url":"http://libexif.cvs.sourceforge.net/viewvc/libexif/libexif/NEWS?view=markup&pathrev=libexif-0_6_19-release","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37378","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20091113072359.GA22681%40coneharvesters.com","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/2","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/59956","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37022","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3243","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54275","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/557137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=293190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://libexif.cvs.sourceforge.net/viewvc/libexif/libexif/NEWS?view=markup&pathrev=libexif-0_6_19-release","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=20091113072359.GA22681%40coneharvesters.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3896","sourceIdentifier":"secalert@redhat.com","published":"2009-11-24T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI."},{"lang":"es","value":"src/http/ngx_http_parse.c en nginx (como Engine X) v0.1.0 hasta v0.4.14, v0.5.x anterior v0.5.38, v0.6.x anterior v0.6.39, v0.7.x anterior v0.7.62, y v0.8.x anterior 0.8.14 permite a atacantes remotos causar una denegación de servicio (deferencia puntero nulo y caída de proceso) a través de una URI larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"34E64473-58DC-4158-BB07-071A670CDC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2CC9B36B-CC2F-442F-AEF6-F911AFEE966A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"44AE0F17-F320-40FA-AD43-E4C22FE3B455"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CF8D9C0-99DE-4EB9-8EE1-C4EBBDF8F060"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E53B582A-8EE0-4FE0-8B86-6068E8F28F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D6139614-6835-4295-9D1F-1686D28C2D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DF8FD201-BCEF-409C-8442-B15727893F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"3130F07A-9524-4DF0-83F8-32E13341E0AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"BC716174-E211-4497-8AD6-49AC6CB2776A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5F06259F-0848-428E-A9C3-9A96C4018EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"1DABF871-39BB-4DAC-B4FA-EF2C96CF3D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"012FF2E6-D51D-4233-B961-F4E0EDC5A83F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.12:*:*:*:*:*:*:*","matchCriteriaId":"AA0B3776-F86D-40CB-8372-722B49F44672"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"8C434DCD-B225-4BB5-B3A1-50C4338967BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.14:*:*:*:*:*:*:*","matchCriteriaId":"20DA7234-6824-49D4-85D5-90C10950A884"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"FE5D29F6-18F4-41DE-A4FC-1F4387622C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.16:*:*:*:*:*:*:*","matchCriteriaId":"9A21A021-2231-4639-973F-B626869127C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"581C97AC-A2A2-4C00-821A-223FE795E1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.18:*:*:*:*:*:*:*","matchCriteriaId":"EE3669C7-BDB1-4D3A-97A2-B32F8169E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.19:*:*:*:*:*:*:*","matchCriteriaId":"B95F8086-EBA4-447C-8D5B-57AB1BDB7C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.20:*:*:*:*:*:*:*","matchCriteriaId":"BD5AB833-DF18-4D5A-8C83-D8CDDE09DCF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D73F74AD-C174-46E0-8F15-63E1D24522A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.22:*:*:*:*:*:*:*","matchCriteriaId":"04E8B6C4-7D39-464D-ACF0-4C8B0E1BA4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.23:*:*:*:*:*:*:*","matchCriteriaId":"762CB3D2-FDBD-4C15-A6FB-9C571E54CB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.24:*:*:*:*:*:*:*","matchCriteriaId":"A8187A09-E624-494E-9D0B-4915227CD0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.25:*:*:*:*:*:*:*","matchCriteriaId":"CFFD2EC6-7600-4A14-901E-A09872FA34E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.26:*:*:*:*:*:*:*","matchCriteriaId":"71A4BEE0-0AE1-4F0B-BE6B-94DEAA4AC4ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.27:*:*:*:*:*:*:*","matchCriteriaId":"C1AA69A1-E4A0-4541-9683-C7926876EC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.28:*:*:*:*:*:*:*","matchCriteriaId":"A081CD0C-583C-4702-80A7-5EB83F1F2222"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.29:*:*:*:*:*:*:*","matchCriteriaId":"BB538A03-5C14-416C-ABC8-3CF6F40AC74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.30:*:*:*:*:*:*:*","matchCriteriaId":"CF7CE79D-2141-4786-8F5A-75475A997A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.31:*:*:*:*:*:*:*","matchCriteriaId":"BC95E17A-13E0-418D-BAB3-5DE38B64BCAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B511DE8A-03C1-45CC-BFAD-5CBAD08051D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.33:*:*:*:*:*:*:*","matchCriteriaId":"A36CF460-5D9E-4F92-A5FB-67B2CF6F9C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.34:*:*:*:*:*:*:*","matchCriteriaId":"369C67DE-3FC6-4789-96E4-A56DDF24674E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.35:*:*:*:*:*:*:*","matchCriteriaId":"24FF9759-62E5-4E80-A8E8-B01FAAB75BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.36:*:*:*:*:*:*:*","matchCriteriaId":"BB185CAF-795D-4945-B0D6-568936D0A102"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.37:*:*:*:*:*:*:*","matchCriteriaId":"6EDF43E1-7334-44B1-9BDD-EE543AFA239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.38:*:*:*:*:*:*:*","matchCriteriaId":"B03BF1D6-A0BF-42DA-8319-C4CF551F909D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.39:*:*:*:*:*:*:*","matchCriteriaId":"D5E34697-5F0B-4189-8E02-DF310DB2B11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.40:*:*:*:*:*:*:*","matchCriteriaId":"03071B0A-666F-46FC-B1EF-6498384D446C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.41:*:*:*:*:*:*:*","matchCriteriaId":"D88341D2-BF1E-40BD-B3EB-EB5D7C80CBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.42:*:*:*:*:*:*:*","matchCriteriaId":"11B039BA-92B2-48EC-A419-31C0C429C339"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.43:*:*:*:*:*:*:*","matchCriteriaId":"AC1AF8B0-9A94-4EBF-B164-9EE4298D0FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.44:*:*:*:*:*:*:*","matchCriteriaId":"58F7209C-A5A1-4F2D-91C4-A130F46ABC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.45:*:*:*:*:*:*:*","matchCriteriaId":"F2604E43-1C77-42DD-B396-5A25B0A39850"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26139CB0-8BAD-4BF2-8BAC-1B228B5F561F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A0CA4F8E-D458-4DC8-97BA-9F7ADC85429D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F062FD01-831F-46B4-9C7A-492B5F5A525B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"93021C52-5F88-450E-A0FA-1E7AD4BF4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F47DF42F-EBA9-4E75-933C-53A0CE9691C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"72C527B7-EEDA-4013-BCEA-AEA5F5A889C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8868A8E3-4299-4796-8A96-EC402E3998F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"93E7B28C-9D1A-49B5-8A54-9555B08471C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4F6D6360-9C6C-4CE5-82F2-8BE2AF41A4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BF59F965-59C2-4759-A4FF-D828CF515812"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"62E97F69-C178-4F7F-8472-6147DF22E69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F0FCD01A-6B3E-4B29-AAB2-A3EFB3965B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"372E2B59-085D-4E64-9F77-BEDE0FAFE3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"FDCC283B-FF74-47F3-AAEC-3A99110290C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"58286494-21A9-4AC7-B9A7-58D2B9860374"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"BF99C635-748F-49A8-940B-5AB48213D6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.9:*:*:*:*:*:*:*","matchCriteriaId":"C1AA5F7E-F36E-4FF4-B9BF-D307D7F8408D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.10:*:*:*:*:*:*:*","matchCriteriaId":"163AE467-E1C1-48D4-B2FA-9F28D99D8CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.11:*:*:*:*:*:*:*","matchCriteriaId":"2055FAFE-54CA-4E45-8818-E27D77BD25D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.12:*:*:*:*:*:*:*","matchCriteriaId":"F3DD8251-9808-48F0-8ED2-04189BAC83E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.13:*:*:*:*:*:*:*","matchCriteriaId":"2B394B65-D904-4D26-BEF7-55CD151D0830"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.14:*:*:*:*:*:*:*","matchCriteriaId":"F98696CC-3329-4A16-BEF0-ABB1171CA263"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.15:*:*:*:*:*:*:*","matchCriteriaId":"B37C15B1-7752-45AA-89AE-C770AFA032B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.16:*:*:*:*:*:*:*","matchCriteriaId":"62AECD27-1854-4E6C-8CFB-47B7C71AC70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.17:*:*:*:*:*:*:*","matchCriteriaId":"3DB0F596-17BF-4324-9E2E-9A3D5AC3E533"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.18:*:*:*:*:*:*:*","matchCriteriaId":"6DBE5715-7673-4620-81EA-972A5CA7DEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.19:*:*:*:*:*:*:*","matchCriteriaId":"1589B6E4-6647-40F6-B34F-4064A068E3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.20:*:*:*:*:*:*:*","matchCriteriaId":"DE8DF630-0EEF-4D69-BAE0-F433D2682D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.21:*:*:*:*:*:*:*","matchCriteriaId":"5E844090-43AA-4846-9850-15573DA320DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.22:*:*:*:*:*:*:*","matchCriteriaId":"75E1BB11-1D9F-43E3-A215-BC8FFE3B2912"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.23:*:*:*:*:*:*:*","matchCriteriaId":"0040B3E4-A2CC-45CF-B2E2-B03C56344CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.24:*:*:*:*:*:*:*","matchCriteriaId":"D46650F1-CCBC-42BD-9D6E-D07A6EC7A58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.25:*:*:*:*:*:*:*","matchCriteriaId":"F33D99A0-5AC9-445B-8C68-204B1E2A1B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.26:*:*:*:*:*:*:*","matchCriteriaId":"52D78B06-0826-44E4-AB0C-61C77BEB0598"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.27:*:*:*:*:*:*:*","matchCriteriaId":"8F98F843-0D15-4455-900B-20719D285B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.28:*:*:*:*:*:*:*","matchCriteriaId":"DBE32950-F476-446F-BFC4-EC5120D6CE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.29:*:*:*:*:*:*:*","matchCriteriaId":"3E3E1C4A-2CFC-43A0-B246-5199B41A7C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.30:*:*:*:*:*:*:*","matchCriteriaId":"B9C85B18-40E5-42F0-886C-19FABD5D397B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.31:*:*:*:*:*:*:*","matchCriteriaId":"46C8CD08-073E-4611-B2D1-66C0BB5B00F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.32:*:*:*:*:*:*:*","matchCriteriaId":"C4EF6E8E-4E8D-4BAD-ACB0-FB38CD048A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.33:*:*:*:*:*:*:*","matchCriteriaId":"B9BEE011-B625-4227-8A24-92A4BDAF6F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.34:*:*:*:*:*:*:*","matchCriteriaId":"1F952AF9-7917-4FE6-AA61-79410453FBF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.35:*:*:*:*:*:*:*","matchCriteriaId":"D54B2662-A8E6-4754-BDE4-640FB9A8F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.36:*:*:*:*:*:*:*","matchCriteriaId":"0964C0F0-BFB6-47F4-BC8B-ACC772FA82CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.37:*:*:*:*:*:*:*","matchCriteriaId":"DD44DA86-3AC7-490C-B690-44F1CAC94BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.38:*:*:*:*:*:*:*","matchCriteriaId":"A94073D1-E657-4E92-985A-00427E17A485"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.39:*:*:*:*:*:*:*","matchCriteriaId":"89988EAE-D4E8-49D6-98E8-246A7D98D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.40:*:*:*:*:*:*:*","matchCriteriaId":"6496AFD5-3232-4BA8-8404-D5E286B6BCE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.41:*:*:*:*:*:*:*","matchCriteriaId":"E68A4F70-1335-427F-8916-90B5F25E786F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.42:*:*:*:*:*:*:*","matchCriteriaId":"CBC479CA-500E-4A45-8435-D5E55DD4D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.43:*:*:*:*:*:*:*","matchCriteriaId":"F15289EE-16F1-4B71-89BD-36A03607326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.44:*:*:*:*:*:*:*","matchCriteriaId":"67BAF1E6-913A-4856-80BF-4A39863E8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.45:*:*:*:*:*:*:*","matchCriteriaId":"81294D2E-D087-40EF-96B8-2D6C5D33F09C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.46:*:*:*:*:*:*:*","matchCriteriaId":"1774A68D-33A8-4DBD-ADF1-143FBE7BBBB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.47:*:*:*:*:*:*:*","matchCriteriaId":"6B8BEBBC-44CD-4994-BCB4-AB90C1FE4315"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.48:*:*:*:*:*:*:*","matchCriteriaId":"EBE5CC5C-8E80-483F-876E-6D4A6FE0E9A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.49:*:*:*:*:*:*:*","matchCriteriaId":"AA4CB751-91CE-4FAD-A54B-FEA780AF094E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.50:*:*:*:*:*:*:*","matchCriteriaId":"BED74A8F-C022-469F-8F6C-25C8C9D2696E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.51:*:*:*:*:*:*:*","matchCriteriaId":"136D17BD-CC63-4427-A139-C9FA72D6D42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.52:*:*:*:*:*:*:*","matchCriteriaId":"94C19287-D201-40CA-B6E4-F89DE786F967"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.53:*:*:*:*:*:*:*","matchCriteriaId":"6938773B-2874-48E1-866B-2E9286BFCB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.54:*:*:*:*:*:*:*","matchCriteriaId":"704C5C74-2154-4DB8-AFE4-8A9FCA8B75C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.55:*:*:*:*:*:*:*","matchCriteriaId":"8DEEACA6-935B-432D-AE61-E7C6A0383EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.56:*:*:*:*:*:*:*","matchCriteriaId":"166361C6-183D-487E-A423-7A24CE0397F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.57:*:*:*:*:*:*:*","matchCriteriaId":"48678CF2-0C88-440B-AA49-C705A72C75D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.58:*:*:*:*:*:*:*","matchCriteriaId":"7BB80FD7-FC22-4911-89D4-95A502FABE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.59:*:*:*:*:*:*:*","matchCriteriaId":"DAFE1CA3-993C-4E9A-880A-AE2581390BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.60:*:*:*:*:*:*:*","matchCriteriaId":"B3359813-9345-4F3A-8F29-BDAB8A42A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.61:*:*:*:*:*:*:*","matchCriteriaId":"FCDE4A4D-FB19-4BAC-B2C9-E07C5F5705C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"565C6100-5502-49A6-8F17-53921FC243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BB82464D-E387-4844-9021-FF7195F905B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"69A6688A-DF98-4433-91CC-FE6FDEC3968A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"1DD81AF6-B55B-47A7-8F29-C135F33FA7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"0C0CA98A-C99A-4021-BF38-4FB5184D0E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"F962CE1E-218F-4FBE-A4ED-922988D3BA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"EEC5AB3B-32FA-4AD5-8E31-573D4DCABBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6B8388B1-8C01-49DD-BF3C-3C3B0FEA1F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C625397F-DF52-4ED9-90AE-7CBCE56AECE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"1582E4C7-83A0-45E5-B7E1-CDB22BDB17B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2EDF7DB8-C9C0-47E4-85AF-D195BFCE426E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.11:*:*:*:*:*:*:*","matchCriteriaId":"97532F9D-CED0-466A-9E65-276E68972897"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.12:*:*:*:*:*:*:*","matchCriteriaId":"373A5785-1113-425F-9E7F-DF58E0DFF3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.13:*:*:*:*:*:*:*","matchCriteriaId":"F713F0D0-0E1B-45A3-90C3-AB9ED5666A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AEC4C3A9-324E-4006-B0C9-966C144A02EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AFB7BA5F-AF0A-4282-AABA-F57C3BC425FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8B8800DB-A500-47FA-AD71-F3012D9E6C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E7D68735-877D-4A5A-BCE4-9204C06A877C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B994025A-5AA0-4ACB-B830-AD84578EE935"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E612C3BE-89AB-47FC-9B65-11EC3FA53A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B6137B44-F31E-49EF-8249-68C7B19DBF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"AADCADD7-2EEE-4397-B737-4FD071694C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"8C3EC4EA-722D-4767-B271-E5E94A61B2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"C7BD35FB-0406-45A4-983F-23FCB9AD8EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"845EAF67-F86C-47FF-AD63-424FC5FE3344"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.11:*:*:*:*:*:*:*","matchCriteriaId":"99ED4116-D874-463C-8A62-56297CFF02D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.12:*:*:*:*:*:*:*","matchCriteriaId":"72C6A905-8CF0-44F4-B67C-7D55D22BFD9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.13:*:*:*:*:*:*:*","matchCriteriaId":"FB9A5DE1-9728-4E9B-AA3A-FFFDB90A4D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.14:*:*:*:*:*:*:*","matchCriteriaId":"079D51E9-82F2-4ECF-8711-42A1E8BF3AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.15:*:*:*:*:*:*:*","matchCriteriaId":"473D1711-E4A2-4979-AA10-B3439036D8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.16:*:*:*:*:*:*:*","matchCriteriaId":"E056E5DB-C16C-461F-885E-B516A3C3C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.17:*:*:*:*:*:*:*","matchCriteriaId":"94ACFB0D-7EF1-4E83-8A75-EB843398F7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.18:*:*:*:*:*:*:*","matchCriteriaId":"1D3DCD04-DD8B-4B8E-A9B2-0999C8D6F088"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BBFFF0B8-F20D-4197-A3F9-8CAAC784E4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.20:*:*:*:*:*:*:*","matchCriteriaId":"365BC524-97F9-47AD-8ECD-0FF60B55BD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.21:*:*:*:*:*:*:*","matchCriteriaId":"745F4FAC-AD36-469C-B54D-F695146F9FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EB8B6F37-4CE1-4DEF-BDE9-EC9BA422F543"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.23:*:*:*:*:*:*:*","matchCriteriaId":"E82535AE-E45A-45EE-8303-4F8EC461F4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.24:*:*:*:*:*:*:*","matchCriteriaId":"9526A9D2-05DB-4DD2-BE87-0FEA6A9E52E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.25:*:*:*:*:*:*:*","matchCriteriaId":"C72B94DF-B4C1-40F7-A3FD-5EEE64119816"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.26:*:*:*:*:*:*:*","matchCriteriaId":"C642F33D-3A9E-4576-B831-556AA4902ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.27:*:*:*:*:*:*:*","matchCriteriaId":"0E69078D-579F-48AD-8BC7-2EEA06DCA02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.28:*:*:*:*:*:*:*","matchCriteriaId":"535E9578-88F5-430E-8DBA-0E324C1362BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.29:*:*:*:*:*:*:*","matchCriteriaId":"B5022F10-D091-4D53-8476-53DBDC304B8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.30:*:*:*:*:*:*:*","matchCriteriaId":"7E1CE05D-A611-4854-8BC4-C58C2F4723FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.31:*:*:*:*:*:*:*","matchCriteriaId":"0BD5BD39-95EF-4157-9CFC-A69FD782051F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.32:*:*:*:*:*:*:*","matchCriteriaId":"16CF4D49-A36D-40BF-B198-CBA04A4BC55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.33:*:*:*:*:*:*:*","matchCriteriaId":"6E621C1A-2A94-477C-A22C-2512028F46AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.34:*:*:*:*:*:*:*","matchCriteriaId":"4A5F41CC-69EA-4C49-8E59-9D352F760E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.35:*:*:*:*:*:*:*","matchCriteriaId":"D77FF714-F370-484C-BA9F-48C3897D95D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.36:*:*:*:*:*:*:*","matchCriteriaId":"0977CC72-8588-4148-BBB3-8B2811040467"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.37:*:*:*:*:*:*:*","matchCriteriaId":"2058F887-2DE6-4837-B758-16D4D31AE625"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0D4AEFBC-4141-4B17-8449-6796B27718A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4773F9A8-5E43-4DBB-8BC9-7A3FF07AA54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"873B5C88-11A9-4F77-BBD1-F468067B83BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0E6E2758-B282-4AB6-861C-5909AC811ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F21C4FD5-B9B4-4D88-A158-2BB1A92C5C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"8B0B12A7-8D8E-4D75-A3E6-CE92C0F124D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72914EBD-C4F4-4BCD-9613-583CB98562A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"93BD0D22-9EB6-40E0-AE14-EFC79C249454"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"782E7ED3-06BF-42C6-A2CF-29C4962C328C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"97D0B1F9-CE07-4A87-8512-BCAD25B7DA86"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3DAC5268-E39F-4D92-ADAC-05FBBF60E929"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"45490E90-DD0F-4DC6-95C9-79420726B6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"2A9F1EC1-1610-43B9-8A72-2CC0DE6D5B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"265CB602-4C78-497C-8E5C-758AC764D1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"97CD6E57-3B28-406E-97B7-00B516E209F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.15:*:*:*:*:*:*:*","matchCriteriaId":"71B7EE8C-2C13-4F5C-8E78-57B48B872193"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.17:*:*:*:*:*:*:*","matchCriteriaId":"A58D8933-5E4C-452F-95DF-B52DF9597A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.18:*:*:*:*:*:*:*","matchCriteriaId":"E309D12E-2635-4DC7-B63E-AC8120402031"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.19:*:*:*:*:*:*:*","matchCriteriaId":"CD498ABB-A75A-4C0A-A038-CE98C60A1E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.20:*:*:*:*:*:*:*","matchCriteriaId":"B7FD994B-C52A-43E9-BDCF-C4DA80A56ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.21:*:*:*:*:*:*:*","matchCriteriaId":"2D7132AC-0824-474B-A1EA-1E7A8FA5692A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.22:*:*:*:*:*:*:*","matchCriteriaId":"5FE4DE37-F9CD-41AD-80D8-EA8FE4FDC4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.23:*:*:*:*:*:*:*","matchCriteriaId":"6FD802A9-6934-40A2-9EE5-E30A86BAF58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.24:*:*:*:*:*:*:*","matchCriteriaId":"38DAA70B-2E2F-4A99-AF7A-690C8A819F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.25:*:*:*:*:*:*:*","matchCriteriaId":"1413E07A-A8AD-40E4-8E53-F031DF8D8C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.26:*:*:*:*:*:*:*","matchCriteriaId":"6FECFF93-AAA7-4F75-A7F8-957505A399C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.27:*:*:*:*:*:*:*","matchCriteriaId":"A2C141D8-018B-4894-9D2A-3DDF13A27144"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.28:*:*:*:*:*:*:*","matchCriteriaId":"EB96A11F-9BD6-4A5D-99B8-B9269D853AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.29:*:*:*:*:*:*:*","matchCriteriaId":"938A7EF3-E292-4CC2-B6CF-3CCCC4E5C892"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.30:*:*:*:*:*:*:*","matchCriteriaId":"1502DF53-1944-4352-87E6-1CDD333112BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.31:*:*:*:*:*:*:*","matchCriteriaId":"7A6D10FB-7099-41CE-8D81-F133D2968D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.32:*:*:*:*:*:*:*","matchCriteriaId":"55743854-1678-40C1-917D-FD4711DAFD97"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.33:*:*:*:*:*:*:*","matchCriteriaId":"B05BE618-3054-42F0-932E-35D711D9E959"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.34:*:*:*:*:*:*:*","matchCriteriaId":"4AD3717C-6049-4FF5-A3AC-53A262C93447"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.35:*:*:*:*:*:*:*","matchCriteriaId":"1E6BE57C-901A-4B7D-84F3-AFC79118949D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.36:*:*:*:*:*:*:*","matchCriteriaId":"4FD98F9B-9A77-44F2-8CBE-5EE53E2CB2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.37:*:*:*:*:*:*:*","matchCriteriaId":"D8FE0346-1D52-4AAF-8593-859FC85AC520"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.38:*:*:*:*:*:*:*","matchCriteriaId":"00E4C8C0-02C4-45A3-BFB4-3795318D7EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CF8BE564-9784-46A4-9712-6BE812B757E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"09EB5ECD-D851-4FD1-838E-01CD779C4707"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"872B3995-3D72-4BBE-B8C5-E2142390B394"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"AA55740C-C77E-4B75-B7A2-8950E0673DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D2B423AB-4283-47F6-BA44-FD76E4FA2558"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"F5C51C9E-C83C-4E86-B91B-A6001CDC3D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D80F4C49-8CD5-4EB9-9346-12EE143004F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"94DE340D-782B-42B2-8EDF-DD8584C52703"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"F137967D-9A3A-44B8-8E41-56D42AC9FBFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9E47C74C-697B-48C1-A20E-E30B1EB115AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"6D2B8B0F-C5E9-4DDE-A303-24E63B5C486A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"A9FE0645-873B-48E1-8D67-B6E9CE41EE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"A2136748-7ADD-48FE-85C7-C7FDF3DFC7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"F1E4738D-5A55-4142-BF7D-C5FBE6AD92C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"2F41A657-FB84-40A4-A812-4A940C19C563"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"6128BCAB-B6C1-45EA-90EB-D341A0BBBCDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.16:*:*:*:*:*:*:*","matchCriteriaId":"40921150-A75E-44DB-947D-948BB6FD95FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.17:*:*:*:*:*:*:*","matchCriteriaId":"3B5A48B6-3F34-4C36-AB4F-389F8C6F99A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.18:*:*:*:*:*:*:*","matchCriteriaId":"41C8D846-A1E8-4CF9-9D51-37A80BA1DDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.19:*:*:*:*:*:*:*","matchCriteriaId":"4A755328-5783-4F2C-A831-4AF52A263984"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.20:*:*:*:*:*:*:*","matchCriteriaId":"6027BA55-6D4E-44AD-B1E2-9BC7E219DD00"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.21:*:*:*:*:*:*:*","matchCriteriaId":"DE76724B-F1B6-4DF6-97A6-9A5C9A7539BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.22:*:*:*:*:*:*:*","matchCriteriaId":"7E2D3916-7C5A-4253-B7DB-CA4A17658439"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.23:*:*:*:*:*:*:*","matchCriteriaId":"00D9F246-2B22-453B-9078-5A9E44C000C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.24:*:*:*:*:*:*:*","matchCriteriaId":"1E558BFF-F580-4D06-92C3-C0799890A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.25:*:*:*:*:*:*:*","matchCriteriaId":"8771DE53-EEB6-4846-82C0-E97A23F9FC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.26:*:*:*:*:*:*:*","matchCriteriaId":"6496DB0E-3A64-4006-A07F-4031117900CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.27:*:*:*:*:*:*:*","matchCriteriaId":"7241B5EB-341D-4788-82D5-AE88BC19B0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.28:*:*:*:*:*:*:*","matchCriteriaId":"9432C71C-B324-4A8A-A2C7-6295DD06A979"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.29:*:*:*:*:*:*:*","matchCriteriaId":"6D80AEDB-523A-4C07-B34D-969B43995A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.30:*:*:*:*:*:*:*","matchCriteriaId":"96DB2832-B421-47CC-B5BF-3264722D1F58"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.31:*:*:*:*:*:*:*","matchCriteriaId":"CD8292E6-E9E9-4A5C-ABB5-21B30B793BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.32:*:*:*:*:*:*:*","matchCriteriaId":"D74E1F34-F3B9-49B4-886C-3EACB4A39181"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.33:*:*:*:*:*:*:*","matchCriteriaId":"0399B66B-4C3C-46A8-BB4A-228AE7825F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.34:*:*:*:*:*:*:*","matchCriteriaId":"0B64AC40-DFFD-4892-8ECC-809C62D57B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.35:*:*:*:*:*:*:*","matchCriteriaId":"409B886B-1C92-4A92-ABBE-258FD13D6EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.36:*:*:*:*:*:*:*","matchCriteriaId":"B97D7354-FEA3-489D-93DB-29F3BDAFCFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.37:*:*:*:*:*:*:*","matchCriteriaId":"AC1FE7B7-EE24-4C52-B6F7-7D8DC7436BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.38:*:*:*:*:*:*:*","matchCriteriaId":"784FC15D-C0A9-4921-9FE0-13D68113979B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.39:*:*:*:*:*:*:*","matchCriteriaId":"C2B49550-58F4-4E17-AA7F-C6E68381D6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.40:*:*:*:*:*:*:*","matchCriteriaId":"199C31D9-564B-4DCE-90F8-DCC5185B157D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.41:*:*:*:*:*:*:*","matchCriteriaId":"1A0D6DF2-7295-4048-9357-598DF38B1D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.42:*:*:*:*:*:*:*","matchCriteriaId":"70D35BED-F2B4-47C7-8A5B-CB2A7FFBFFAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.43:*:*:*:*:*:*:*","matchCriteriaId":"34446D8A-05E3-4CBC-88AE-94D1ED9B42CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.44:*:*:*:*:*:*:*","matchCriteriaId":"37BEDAAF-8818-47A2-B6F7-D8D69000A1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.45:*:*:*:*:*:*:*","matchCriteriaId":"5CC7F6E8-87FE-4502-BE4C-733BCFD6E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.46:*:*:*:*:*:*:*","matchCriteriaId":"48DDBA8F-1676-4D23-BF0C-8858A95FF43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.47:*:*:*:*:*:*:*","matchCriteriaId":"AA06F94F-B5E2-44B1-A313-256118FC0F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.48:*:*:*:*:*:*:*","matchCriteriaId":"E3991D34-1D58-421A-87A8-DBBC225E64DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.49:*:*:*:*:*:*:*","matchCriteriaId":"574572C4-5359-48A4-BC48-8A740929601E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.50:*:*:*:*:*:*:*","matchCriteriaId":"B250BCDB-01E9-47BE-BF2A-42253083DF84"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.51:*:*:*:*:*:*:*","matchCriteriaId":"69B7BD47-4AE6-4A8B-8773-97D4E47AA8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.52:*:*:*:*:*:*:*","matchCriteriaId":"14412552-C2D6-4E24-8A5A-258DCFA1FD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.53:*:*:*:*:*:*:*","matchCriteriaId":"54C84DD5-73DB-40E3-A930-8467CE5391C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.54:*:*:*:*:*:*:*","matchCriteriaId":"86840620-5641-49F2-8803-197C1E1D42A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.55:*:*:*:*:*:*:*","matchCriteriaId":"CDB2D731-F2CA-43FF-A170-BD3BA89C4F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.56:*:*:*:*:*:*:*","matchCriteriaId":"839AA5EB-FF21-44ED-A340-5B1BC444E649"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.57:*:*:*:*:*:*:*","matchCriteriaId":"F7B48748-5B9C-4D77-BE1F-9C7A436ECA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.58:*:*:*:*:*:*:*","matchCriteriaId":"D2D4C93E-8A58-4B8D-A2F9-79A1D3526FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.59:*:*:*:*:*:*:*","matchCriteriaId":"0750BECB-3AB8-4A80-8D4D-F0CBA11F3E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.60:*:*:*:*:*:*:*","matchCriteriaId":"E9231C67-A182-441C-9148-BB1CDE6AFF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.61:*:*:*:*:*:*:*","matchCriteriaId":"3091F4CB-D14A-4BCA-8155-119AE7716360"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"20A0F5C4-7FCE-4666-9B14-D0B1D4CDF23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2192AF4D-7BEF-4A16-B8BE-86256006759D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"BFC06391-07A4-4CC5-BE4E-9AB47956D1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9617C1F3-52F5-4830-9477-91E8853A1A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"3396AE2A-9FBB-4F3C-BFDD-FC4681CB5FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FBFBACD8-8A7C-4460-8630-08A770DCF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C84F735-8DF6-4C1E-9C85-C5D23C636CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"7D4D2475-1FDD-4B6B-95E2-2CF47C3DD53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"B3BCE063-8093-459B-9358-2DE44B49FF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"0ACB0DB5-98B1-4F0A-A668-6237A4EB2770"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.10:*:*:*:*:*:*:*","matchCriteriaId":"F25FDA11-9398-4595-814E-1A5470BD76AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"862B468F-EDA7-4CB8-81D7-BBCFC2E37E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.12:*:*:*:*:*:*:*","matchCriteriaId":"35EBD4F5-FB10-44D6-9E28-130ECDAF5673"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"4EA0D3EB-4F12-4BBC-BA04-C4A2169E243E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"01BA8DC0-35CF-43CD-95E5-1A245CC7724C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nginx:nginx:0.6.1516:*:*:*:*:*:*:*","matchCriteriaId":"0CAB85AB-3C58-4AF3-B5C8-4E48A01252B6"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=552035","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=nginx&m=125692080328141&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48577","source":"secalert@redhat.com"},{"url":"http://security.debian.org/pool/updates/main/n/nginx/nginx_0.4.13-2+etch3.diff.gz","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"secalert@redhat.com"},{"url":"http://sysoev.ru/nginx/patch.null.pointer.txt","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1920","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/6","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36839","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=539565","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=552035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=nginx&m=125692080328141&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/n/nginx/nginx_0.4.13-2+etch3.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sysoev.ru/nginx/patch.null.pointer.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=539565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3897","sourceIdentifier":"secalert@redhat.com","published":"2009-11-24T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself."},{"lang":"es","value":"Dovecot v1.2.x anterior v1.2.8 establece permisos 0777 durante la creación de ciertos directorios en el momento de la instalación, permitiendo a usuarios locales acceder a las cuentas de usuarios por reemplazamiento del socket auth, relacionados con los directorios padre del directorio base_dir, y probablemente con el propio directorio base_dir\r\n"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.8","matchCriteriaId":"A697E475-79C0-45FD-9529-022CBC15921D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/37443","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html","source":"secalert@redhat.com","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.osvdb.org/60316","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37084","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3306","source":"secalert@redhat.com","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/37443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.osvdb.org/60316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Permissions Required","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3898","sourceIdentifier":"secalert@redhat.com","published":"2009-11-24T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en src/http/modules/ngx_http_dav_module.c en nginx (como Engine X) anterior v0.7.63, y v0.8.x anterior v0.8.17, permite a usuarios autentificados remotamente crear y sobrescribir archivos de su elección a través de .. (punto punto) en la cabecera HTTP Destination para el WebDAV (1) COPY o (2) méetodo MOVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.62","matchCriteriaId":"FD62197E-3FD8-4DFE-87A5-26158E39F6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"34E64473-58DC-4158-BB07-071A670CDC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2CC9B36B-CC2F-442F-AEF6-F911AFEE966A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"44AE0F17-F320-40FA-AD43-E4C22FE3B455"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3CF8D9C0-99DE-4EB9-8EE1-C4EBBDF8F060"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E53B582A-8EE0-4FE0-8B86-6068E8F28F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"D6139614-6835-4295-9D1F-1686D28C2D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DF8FD201-BCEF-409C-8442-B15727893F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"3130F07A-9524-4DF0-83F8-32E13341E0AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"BC716174-E211-4497-8AD6-49AC6CB2776A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5F06259F-0848-428E-A9C3-9A96C4018EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"1DABF871-39BB-4DAC-B4FA-EF2C96CF3D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"012FF2E6-D51D-4233-B961-F4E0EDC5A83F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.12:*:*:*:*:*:*:*","matchCriteriaId":"AA0B3776-F86D-40CB-8372-722B49F44672"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"8C434DCD-B225-4BB5-B3A1-50C4338967BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.14:*:*:*:*:*:*:*","matchCriteriaId":"20DA7234-6824-49D4-85D5-90C10950A884"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"FE5D29F6-18F4-41DE-A4FC-1F4387622C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.16:*:*:*:*:*:*:*","matchCriteriaId":"9A21A021-2231-4639-973F-B626869127C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"581C97AC-A2A2-4C00-821A-223FE795E1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.18:*:*:*:*:*:*:*","matchCriteriaId":"EE3669C7-BDB1-4D3A-97A2-B32F8169E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.19:*:*:*:*:*:*:*","matchCriteriaId":"B95F8086-EBA4-447C-8D5B-57AB1BDB7C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.20:*:*:*:*:*:*:*","matchCriteriaId":"BD5AB833-DF18-4D5A-8C83-D8CDDE09DCF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.21:*:*:*:*:*:*:*","matchCriteriaId":"D73F74AD-C174-46E0-8F15-63E1D24522A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.22:*:*:*:*:*:*:*","matchCriteriaId":"04E8B6C4-7D39-464D-ACF0-4C8B0E1BA4F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.23:*:*:*:*:*:*:*","matchCriteriaId":"762CB3D2-FDBD-4C15-A6FB-9C571E54CB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.24:*:*:*:*:*:*:*","matchCriteriaId":"A8187A09-E624-494E-9D0B-4915227CD0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.25:*:*:*:*:*:*:*","matchCriteriaId":"CFFD2EC6-7600-4A14-901E-A09872FA34E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.26:*:*:*:*:*:*:*","matchCriteriaId":"71A4BEE0-0AE1-4F0B-BE6B-94DEAA4AC4ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.27:*:*:*:*:*:*:*","matchCriteriaId":"C1AA69A1-E4A0-4541-9683-C7926876EC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.28:*:*:*:*:*:*:*","matchCriteriaId":"A081CD0C-583C-4702-80A7-5EB83F1F2222"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.29:*:*:*:*:*:*:*","matchCriteriaId":"BB538A03-5C14-416C-ABC8-3CF6F40AC74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.30:*:*:*:*:*:*:*","matchCriteriaId":"CF7CE79D-2141-4786-8F5A-75475A997A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.31:*:*:*:*:*:*:*","matchCriteriaId":"BC95E17A-13E0-418D-BAB3-5DE38B64BCAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B511DE8A-03C1-45CC-BFAD-5CBAD08051D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.33:*:*:*:*:*:*:*","matchCriteriaId":"A36CF460-5D9E-4F92-A5FB-67B2CF6F9C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.34:*:*:*:*:*:*:*","matchCriteriaId":"369C67DE-3FC6-4789-96E4-A56DDF24674E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.35:*:*:*:*:*:*:*","matchCriteriaId":"24FF9759-62E5-4E80-A8E8-B01FAAB75BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.36:*:*:*:*:*:*:*","matchCriteriaId":"BB185CAF-795D-4945-B0D6-568936D0A102"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.37:*:*:*:*:*:*:*","matchCriteriaId":"6EDF43E1-7334-44B1-9BDD-EE543AFA239C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.38:*:*:*:*:*:*:*","matchCriteriaId":"B03BF1D6-A0BF-42DA-8319-C4CF551F909D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.39:*:*:*:*:*:*:*","matchCriteriaId":"D5E34697-5F0B-4189-8E02-DF310DB2B11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.40:*:*:*:*:*:*:*","matchCriteriaId":"03071B0A-666F-46FC-B1EF-6498384D446C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.41:*:*:*:*:*:*:*","matchCriteriaId":"D88341D2-BF1E-40BD-B3EB-EB5D7C80CBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.42:*:*:*:*:*:*:*","matchCriteriaId":"11B039BA-92B2-48EC-A419-31C0C429C339"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.43:*:*:*:*:*:*:*","matchCriteriaId":"AC1AF8B0-9A94-4EBF-B164-9EE4298D0FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.44:*:*:*:*:*:*:*","matchCriteriaId":"58F7209C-A5A1-4F2D-91C4-A130F46ABC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.1.45:*:*:*:*:*:*:*","matchCriteriaId":"F2604E43-1C77-42DD-B396-5A25B0A39850"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26139CB0-8BAD-4BF2-8BAC-1B228B5F561F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A0CA4F8E-D458-4DC8-97BA-9F7ADC85429D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F062FD01-831F-46B4-9C7A-492B5F5A525B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"93021C52-5F88-450E-A0FA-1E7AD4BF4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F47DF42F-EBA9-4E75-933C-53A0CE9691C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"72C527B7-EEDA-4013-BCEA-AEA5F5A889C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8868A8E3-4299-4796-8A96-EC402E3998F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"93E7B28C-9D1A-49B5-8A54-9555B08471C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"4F6D6360-9C6C-4CE5-82F2-8BE2AF41A4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BF59F965-59C2-4759-A4FF-D828CF515812"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"62E97F69-C178-4F7F-8472-6147DF22E69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F0FCD01A-6B3E-4B29-AAB2-A3EFB3965B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"372E2B59-085D-4E64-9F77-BEDE0FAFE3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"FDCC283B-FF74-47F3-AAEC-3A99110290C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"58286494-21A9-4AC7-B9A7-58D2B9860374"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"BF99C635-748F-49A8-940B-5AB48213D6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.9:*:*:*:*:*:*:*","matchCriteriaId":"C1AA5F7E-F36E-4FF4-B9BF-D307D7F8408D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.10:*:*:*:*:*:*:*","matchCriteriaId":"163AE467-E1C1-48D4-B2FA-9F28D99D8CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.11:*:*:*:*:*:*:*","matchCriteriaId":"2055FAFE-54CA-4E45-8818-E27D77BD25D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.12:*:*:*:*:*:*:*","matchCriteriaId":"F3DD8251-9808-48F0-8ED2-04189BAC83E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.13:*:*:*:*:*:*:*","matchCriteriaId":"2B394B65-D904-4D26-BEF7-55CD151D0830"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.14:*:*:*:*:*:*:*","matchCriteriaId":"F98696CC-3329-4A16-BEF0-ABB1171CA263"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.15:*:*:*:*:*:*:*","matchCriteriaId":"B37C15B1-7752-45AA-89AE-C770AFA032B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.16:*:*:*:*:*:*:*","matchCriteriaId":"62AECD27-1854-4E6C-8CFB-47B7C71AC70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.17:*:*:*:*:*:*:*","matchCriteriaId":"3DB0F596-17BF-4324-9E2E-9A3D5AC3E533"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.18:*:*:*:*:*:*:*","matchCriteriaId":"6DBE5715-7673-4620-81EA-972A5CA7DEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.19:*:*:*:*:*:*:*","matchCriteriaId":"1589B6E4-6647-40F6-B34F-4064A068E3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.20:*:*:*:*:*:*:*","matchCriteriaId":"DE8DF630-0EEF-4D69-BAE0-F433D2682D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.21:*:*:*:*:*:*:*","matchCriteriaId":"5E844090-43AA-4846-9850-15573DA320DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.22:*:*:*:*:*:*:*","matchCriteriaId":"75E1BB11-1D9F-43E3-A215-BC8FFE3B2912"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.23:*:*:*:*:*:*:*","matchCriteriaId":"0040B3E4-A2CC-45CF-B2E2-B03C56344CE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.24:*:*:*:*:*:*:*","matchCriteriaId":"D46650F1-CCBC-42BD-9D6E-D07A6EC7A58A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.25:*:*:*:*:*:*:*","matchCriteriaId":"F33D99A0-5AC9-445B-8C68-204B1E2A1B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.26:*:*:*:*:*:*:*","matchCriteriaId":"52D78B06-0826-44E4-AB0C-61C77BEB0598"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.27:*:*:*:*:*:*:*","matchCriteriaId":"8F98F843-0D15-4455-900B-20719D285B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.28:*:*:*:*:*:*:*","matchCriteriaId":"DBE32950-F476-446F-BFC4-EC5120D6CE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.29:*:*:*:*:*:*:*","matchCriteriaId":"3E3E1C4A-2CFC-43A0-B246-5199B41A7C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.30:*:*:*:*:*:*:*","matchCriteriaId":"B9C85B18-40E5-42F0-886C-19FABD5D397B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.31:*:*:*:*:*:*:*","matchCriteriaId":"46C8CD08-073E-4611-B2D1-66C0BB5B00F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.32:*:*:*:*:*:*:*","matchCriteriaId":"C4EF6E8E-4E8D-4BAD-ACB0-FB38CD048A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.33:*:*:*:*:*:*:*","matchCriteriaId":"B9BEE011-B625-4227-8A24-92A4BDAF6F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.34:*:*:*:*:*:*:*","matchCriteriaId":"1F952AF9-7917-4FE6-AA61-79410453FBF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.35:*:*:*:*:*:*:*","matchCriteriaId":"D54B2662-A8E6-4754-BDE4-640FB9A8F979"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.36:*:*:*:*:*:*:*","matchCriteriaId":"0964C0F0-BFB6-47F4-BC8B-ACC772FA82CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.37:*:*:*:*:*:*:*","matchCriteriaId":"DD44DA86-3AC7-490C-B690-44F1CAC94BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.38:*:*:*:*:*:*:*","matchCriteriaId":"A94073D1-E657-4E92-985A-00427E17A485"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.39:*:*:*:*:*:*:*","matchCriteriaId":"89988EAE-D4E8-49D6-98E8-246A7D98D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.40:*:*:*:*:*:*:*","matchCriteriaId":"6496AFD5-3232-4BA8-8404-D5E286B6BCE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.41:*:*:*:*:*:*:*","matchCriteriaId":"E68A4F70-1335-427F-8916-90B5F25E786F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.42:*:*:*:*:*:*:*","matchCriteriaId":"CBC479CA-500E-4A45-8435-D5E55DD4D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.43:*:*:*:*:*:*:*","matchCriteriaId":"F15289EE-16F1-4B71-89BD-36A03607326B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.44:*:*:*:*:*:*:*","matchCriteriaId":"67BAF1E6-913A-4856-80BF-4A39863E8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.45:*:*:*:*:*:*:*","matchCriteriaId":"81294D2E-D087-40EF-96B8-2D6C5D33F09C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.46:*:*:*:*:*:*:*","matchCriteriaId":"1774A68D-33A8-4DBD-ADF1-143FBE7BBBB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.47:*:*:*:*:*:*:*","matchCriteriaId":"6B8BEBBC-44CD-4994-BCB4-AB90C1FE4315"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.48:*:*:*:*:*:*:*","matchCriteriaId":"EBE5CC5C-8E80-483F-876E-6D4A6FE0E9A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.49:*:*:*:*:*:*:*","matchCriteriaId":"AA4CB751-91CE-4FAD-A54B-FEA780AF094E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.50:*:*:*:*:*:*:*","matchCriteriaId":"BED74A8F-C022-469F-8F6C-25C8C9D2696E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.51:*:*:*:*:*:*:*","matchCriteriaId":"136D17BD-CC63-4427-A139-C9FA72D6D42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.52:*:*:*:*:*:*:*","matchCriteriaId":"94C19287-D201-40CA-B6E4-F89DE786F967"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.53:*:*:*:*:*:*:*","matchCriteriaId":"6938773B-2874-48E1-866B-2E9286BFCB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.54:*:*:*:*:*:*:*","matchCriteriaId":"704C5C74-2154-4DB8-AFE4-8A9FCA8B75C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.55:*:*:*:*:*:*:*","matchCriteriaId":"8DEEACA6-935B-432D-AE61-E7C6A0383EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.56:*:*:*:*:*:*:*","matchCriteriaId":"166361C6-183D-487E-A423-7A24CE0397F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.57:*:*:*:*:*:*:*","matchCriteriaId":"48678CF2-0C88-440B-AA49-C705A72C75D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.58:*:*:*:*:*:*:*","matchCriteriaId":"7BB80FD7-FC22-4911-89D4-95A502FABE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.59:*:*:*:*:*:*:*","matchCriteriaId":"DAFE1CA3-993C-4E9A-880A-AE2581390BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.60:*:*:*:*:*:*:*","matchCriteriaId":"B3359813-9345-4F3A-8F29-BDAB8A42A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.3.61:*:*:*:*:*:*:*","matchCriteriaId":"FCDE4A4D-FB19-4BAC-B2C9-E07C5F5705C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"565C6100-5502-49A6-8F17-53921FC243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BB82464D-E387-4844-9021-FF7195F905B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"69A6688A-DF98-4433-91CC-FE6FDEC3968A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"1DD81AF6-B55B-47A7-8F29-C135F33FA7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"0C0CA98A-C99A-4021-BF38-4FB5184D0E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"F962CE1E-218F-4FBE-A4ED-922988D3BA91"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"EEC5AB3B-32FA-4AD5-8E31-573D4DCABBF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6B8388B1-8C01-49DD-BF3C-3C3B0FEA1F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C625397F-DF52-4ED9-90AE-7CBCE56AECE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"1582E4C7-83A0-45E5-B7E1-CDB22BDB17B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2EDF7DB8-C9C0-47E4-85AF-D195BFCE426E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.11:*:*:*:*:*:*:*","matchCriteriaId":"97532F9D-CED0-466A-9E65-276E68972897"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.12:*:*:*:*:*:*:*","matchCriteriaId":"373A5785-1113-425F-9E7F-DF58E0DFF3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.4.13:*:*:*:*:*:*:*","matchCriteriaId":"F713F0D0-0E1B-45A3-90C3-AB9ED5666A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AEC4C3A9-324E-4006-B0C9-966C144A02EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AFB7BA5F-AF0A-4282-AABA-F57C3BC425FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8B8800DB-A500-47FA-AD71-F3012D9E6C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E7D68735-877D-4A5A-BCE4-9204C06A877C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B994025A-5AA0-4ACB-B830-AD84578EE935"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"E612C3BE-89AB-47FC-9B65-11EC3FA53A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"B6137B44-F31E-49EF-8249-68C7B19DBF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"AADCADD7-2EEE-4397-B737-4FD071694C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"8C3EC4EA-722D-4767-B271-E5E94A61B2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"C7BD35FB-0406-45A4-983F-23FCB9AD8EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"845EAF67-F86C-47FF-AD63-424FC5FE3344"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.11:*:*:*:*:*:*:*","matchCriteriaId":"99ED4116-D874-463C-8A62-56297CFF02D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.12:*:*:*:*:*:*:*","matchCriteriaId":"72C6A905-8CF0-44F4-B67C-7D55D22BFD9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.13:*:*:*:*:*:*:*","matchCriteriaId":"FB9A5DE1-9728-4E9B-AA3A-FFFDB90A4D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.14:*:*:*:*:*:*:*","matchCriteriaId":"079D51E9-82F2-4ECF-8711-42A1E8BF3AFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.15:*:*:*:*:*:*:*","matchCriteriaId":"473D1711-E4A2-4979-AA10-B3439036D8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.16:*:*:*:*:*:*:*","matchCriteriaId":"E056E5DB-C16C-461F-885E-B516A3C3C880"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.17:*:*:*:*:*:*:*","matchCriteriaId":"94ACFB0D-7EF1-4E83-8A75-EB843398F7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.18:*:*:*:*:*:*:*","matchCriteriaId":"1D3DCD04-DD8B-4B8E-A9B2-0999C8D6F088"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BBFFF0B8-F20D-4197-A3F9-8CAAC784E4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.20:*:*:*:*:*:*:*","matchCriteriaId":"365BC524-97F9-47AD-8ECD-0FF60B55BD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.21:*:*:*:*:*:*:*","matchCriteriaId":"745F4FAC-AD36-469C-B54D-F695146F9FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EB8B6F37-4CE1-4DEF-BDE9-EC9BA422F543"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.23:*:*:*:*:*:*:*","matchCriteriaId":"E82535AE-E45A-45EE-8303-4F8EC461F4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.24:*:*:*:*:*:*:*","matchCriteriaId":"9526A9D2-05DB-4DD2-BE87-0FEA6A9E52E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.25:*:*:*:*:*:*:*","matchCriteriaId":"C72B94DF-B4C1-40F7-A3FD-5EEE64119816"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.26:*:*:*:*:*:*:*","matchCriteriaId":"C642F33D-3A9E-4576-B831-556AA4902ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.27:*:*:*:*:*:*:*","matchCriteriaId":"0E69078D-579F-48AD-8BC7-2EEA06DCA02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.28:*:*:*:*:*:*:*","matchCriteriaId":"535E9578-88F5-430E-8DBA-0E324C1362BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.29:*:*:*:*:*:*:*","matchCriteriaId":"B5022F10-D091-4D53-8476-53DBDC304B8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.30:*:*:*:*:*:*:*","matchCriteriaId":"7E1CE05D-A611-4854-8BC4-C58C2F4723FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.31:*:*:*:*:*:*:*","matchCriteriaId":"0BD5BD39-95EF-4157-9CFC-A69FD782051F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.32:*:*:*:*:*:*:*","matchCriteriaId":"16CF4D49-A36D-40BF-B198-CBA04A4BC55A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.33:*:*:*:*:*:*:*","matchCriteriaId":"6E621C1A-2A94-477C-A22C-2512028F46AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.34:*:*:*:*:*:*:*","matchCriteriaId":"4A5F41CC-69EA-4C49-8E59-9D352F760E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.35:*:*:*:*:*:*:*","matchCriteriaId":"D77FF714-F370-484C-BA9F-48C3897D95D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.36:*:*:*:*:*:*:*","matchCriteriaId":"0977CC72-8588-4148-BBB3-8B2811040467"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.5.37:*:*:*:*:*:*:*","matchCriteriaId":"2058F887-2DE6-4837-B758-16D4D31AE625"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0D4AEFBC-4141-4B17-8449-6796B27718A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4773F9A8-5E43-4DBB-8BC9-7A3FF07AA54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"873B5C88-11A9-4F77-BBD1-F468067B83BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0E6E2758-B282-4AB6-861C-5909AC811ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F21C4FD5-B9B4-4D88-A158-2BB1A92C5C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"8B0B12A7-8D8E-4D75-A3E6-CE92C0F124D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72914EBD-C4F4-4BCD-9613-583CB98562A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"93BD0D22-9EB6-40E0-AE14-EFC79C249454"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"782E7ED3-06BF-42C6-A2CF-29C4962C328C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"97D0B1F9-CE07-4A87-8512-BCAD25B7DA86"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"3DAC5268-E39F-4D92-ADAC-05FBBF60E929"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"45490E90-DD0F-4DC6-95C9-79420726B6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"2A9F1EC1-1610-43B9-8A72-2CC0DE6D5B82"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"265CB602-4C78-497C-8E5C-758AC764D1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"97CD6E57-3B28-406E-97B7-00B516E209F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.15:*:*:*:*:*:*:*","matchCriteriaId":"71B7EE8C-2C13-4F5C-8E78-57B48B872193"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.17:*:*:*:*:*:*:*","matchCriteriaId":"A58D8933-5E4C-452F-95DF-B52DF9597A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.18:*:*:*:*:*:*:*","matchCriteriaId":"E309D12E-2635-4DC7-B63E-AC8120402031"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.19:*:*:*:*:*:*:*","matchCriteriaId":"CD498ABB-A75A-4C0A-A038-CE98C60A1E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.20:*:*:*:*:*:*:*","matchCriteriaId":"B7FD994B-C52A-43E9-BDCF-C4DA80A56ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.21:*:*:*:*:*:*:*","matchCriteriaId":"2D7132AC-0824-474B-A1EA-1E7A8FA5692A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.22:*:*:*:*:*:*:*","matchCriteriaId":"5FE4DE37-F9CD-41AD-80D8-EA8FE4FDC4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.23:*:*:*:*:*:*:*","matchCriteriaId":"6FD802A9-6934-40A2-9EE5-E30A86BAF58B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.24:*:*:*:*:*:*:*","matchCriteriaId":"38DAA70B-2E2F-4A99-AF7A-690C8A819F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.25:*:*:*:*:*:*:*","matchCriteriaId":"1413E07A-A8AD-40E4-8E53-F031DF8D8C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.26:*:*:*:*:*:*:*","matchCriteriaId":"6FECFF93-AAA7-4F75-A7F8-957505A399C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.27:*:*:*:*:*:*:*","matchCriteriaId":"A2C141D8-018B-4894-9D2A-3DDF13A27144"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.28:*:*:*:*:*:*:*","matchCriteriaId":"EB96A11F-9BD6-4A5D-99B8-B9269D853AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.29:*:*:*:*:*:*:*","matchCriteriaId":"938A7EF3-E292-4CC2-B6CF-3CCCC4E5C892"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.30:*:*:*:*:*:*:*","matchCriteriaId":"1502DF53-1944-4352-87E6-1CDD333112BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.31:*:*:*:*:*:*:*","matchCriteriaId":"7A6D10FB-7099-41CE-8D81-F133D2968D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.32:*:*:*:*:*:*:*","matchCriteriaId":"55743854-1678-40C1-917D-FD4711DAFD97"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.33:*:*:*:*:*:*:*","matchCriteriaId":"B05BE618-3054-42F0-932E-35D711D9E959"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.34:*:*:*:*:*:*:*","matchCriteriaId":"4AD3717C-6049-4FF5-A3AC-53A262C93447"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.35:*:*:*:*:*:*:*","matchCriteriaId":"1E6BE57C-901A-4B7D-84F3-AFC79118949D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.36:*:*:*:*:*:*:*","matchCriteriaId":"4FD98F9B-9A77-44F2-8CBE-5EE53E2CB2D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.37:*:*:*:*:*:*:*","matchCriteriaId":"D8FE0346-1D52-4AAF-8593-859FC85AC520"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.6.38:*:*:*:*:*:*:*","matchCriteriaId":"00E4C8C0-02C4-45A3-BFB4-3795318D7EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CF8BE564-9784-46A4-9712-6BE812B757E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"09EB5ECD-D851-4FD1-838E-01CD779C4707"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"872B3995-3D72-4BBE-B8C5-E2142390B394"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"AA55740C-C77E-4B75-B7A2-8950E0673DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D2B423AB-4283-47F6-BA44-FD76E4FA2558"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"F5C51C9E-C83C-4E86-B91B-A6001CDC3D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"D80F4C49-8CD5-4EB9-9346-12EE143004F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"94DE340D-782B-42B2-8EDF-DD8584C52703"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"F137967D-9A3A-44B8-8E41-56D42AC9FBFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"9E47C74C-697B-48C1-A20E-E30B1EB115AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"6D2B8B0F-C5E9-4DDE-A303-24E63B5C486A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"A9FE0645-873B-48E1-8D67-B6E9CE41EE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"A2136748-7ADD-48FE-85C7-C7FDF3DFC7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"F1E4738D-5A55-4142-BF7D-C5FBE6AD92C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"2F41A657-FB84-40A4-A812-4A940C19C563"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"6128BCAB-B6C1-45EA-90EB-D341A0BBBCDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.16:*:*:*:*:*:*:*","matchCriteriaId":"40921150-A75E-44DB-947D-948BB6FD95FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.17:*:*:*:*:*:*:*","matchCriteriaId":"3B5A48B6-3F34-4C36-AB4F-389F8C6F99A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.18:*:*:*:*:*:*:*","matchCriteriaId":"41C8D846-A1E8-4CF9-9D51-37A80BA1DDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.19:*:*:*:*:*:*:*","matchCriteriaId":"4A755328-5783-4F2C-A831-4AF52A263984"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.20:*:*:*:*:*:*:*","matchCriteriaId":"6027BA55-6D4E-44AD-B1E2-9BC7E219DD00"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.21:*:*:*:*:*:*:*","matchCriteriaId":"DE76724B-F1B6-4DF6-97A6-9A5C9A7539BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.22:*:*:*:*:*:*:*","matchCriteriaId":"7E2D3916-7C5A-4253-B7DB-CA4A17658439"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.23:*:*:*:*:*:*:*","matchCriteriaId":"00D9F246-2B22-453B-9078-5A9E44C000C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.24:*:*:*:*:*:*:*","matchCriteriaId":"1E558BFF-F580-4D06-92C3-C0799890A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.25:*:*:*:*:*:*:*","matchCriteriaId":"8771DE53-EEB6-4846-82C0-E97A23F9FC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.26:*:*:*:*:*:*:*","matchCriteriaId":"6496DB0E-3A64-4006-A07F-4031117900CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.27:*:*:*:*:*:*:*","matchCriteriaId":"7241B5EB-341D-4788-82D5-AE88BC19B0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.28:*:*:*:*:*:*:*","matchCriteriaId":"9432C71C-B324-4A8A-A2C7-6295DD06A979"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.29:*:*:*:*:*:*:*","matchCriteriaId":"6D80AEDB-523A-4C07-B34D-969B43995A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.30:*:*:*:*:*:*:*","matchCriteriaId":"96DB2832-B421-47CC-B5BF-3264722D1F58"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.31:*:*:*:*:*:*:*","matchCriteriaId":"CD8292E6-E9E9-4A5C-ABB5-21B30B793BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.32:*:*:*:*:*:*:*","matchCriteriaId":"D74E1F34-F3B9-49B4-886C-3EACB4A39181"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.33:*:*:*:*:*:*:*","matchCriteriaId":"0399B66B-4C3C-46A8-BB4A-228AE7825F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.34:*:*:*:*:*:*:*","matchCriteriaId":"0B64AC40-DFFD-4892-8ECC-809C62D57B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.35:*:*:*:*:*:*:*","matchCriteriaId":"409B886B-1C92-4A92-ABBE-258FD13D6EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.36:*:*:*:*:*:*:*","matchCriteriaId":"B97D7354-FEA3-489D-93DB-29F3BDAFCFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.37:*:*:*:*:*:*:*","matchCriteriaId":"AC1FE7B7-EE24-4C52-B6F7-7D8DC7436BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.38:*:*:*:*:*:*:*","matchCriteriaId":"784FC15D-C0A9-4921-9FE0-13D68113979B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.39:*:*:*:*:*:*:*","matchCriteriaId":"C2B49550-58F4-4E17-AA7F-C6E68381D6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.40:*:*:*:*:*:*:*","matchCriteriaId":"199C31D9-564B-4DCE-90F8-DCC5185B157D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.41:*:*:*:*:*:*:*","matchCriteriaId":"1A0D6DF2-7295-4048-9357-598DF38B1D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.42:*:*:*:*:*:*:*","matchCriteriaId":"70D35BED-F2B4-47C7-8A5B-CB2A7FFBFFAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.43:*:*:*:*:*:*:*","matchCriteriaId":"34446D8A-05E3-4CBC-88AE-94D1ED9B42CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.44:*:*:*:*:*:*:*","matchCriteriaId":"37BEDAAF-8818-47A2-B6F7-D8D69000A1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.45:*:*:*:*:*:*:*","matchCriteriaId":"5CC7F6E8-87FE-4502-BE4C-733BCFD6E7BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.46:*:*:*:*:*:*:*","matchCriteriaId":"48DDBA8F-1676-4D23-BF0C-8858A95FF43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.47:*:*:*:*:*:*:*","matchCriteriaId":"AA06F94F-B5E2-44B1-A313-256118FC0F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.48:*:*:*:*:*:*:*","matchCriteriaId":"E3991D34-1D58-421A-87A8-DBBC225E64DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.49:*:*:*:*:*:*:*","matchCriteriaId":"574572C4-5359-48A4-BC48-8A740929601E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.50:*:*:*:*:*:*:*","matchCriteriaId":"B250BCDB-01E9-47BE-BF2A-42253083DF84"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.51:*:*:*:*:*:*:*","matchCriteriaId":"69B7BD47-4AE6-4A8B-8773-97D4E47AA8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.52:*:*:*:*:*:*:*","matchCriteriaId":"14412552-C2D6-4E24-8A5A-258DCFA1FD19"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.53:*:*:*:*:*:*:*","matchCriteriaId":"54C84DD5-73DB-40E3-A930-8467CE5391C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.54:*:*:*:*:*:*:*","matchCriteriaId":"86840620-5641-49F2-8803-197C1E1D42A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.55:*:*:*:*:*:*:*","matchCriteriaId":"CDB2D731-F2CA-43FF-A170-BD3BA89C4F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.56:*:*:*:*:*:*:*","matchCriteriaId":"839AA5EB-FF21-44ED-A340-5B1BC444E649"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.57:*:*:*:*:*:*:*","matchCriteriaId":"F7B48748-5B9C-4D77-BE1F-9C7A436ECA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.58:*:*:*:*:*:*:*","matchCriteriaId":"D2D4C93E-8A58-4B8D-A2F9-79A1D3526FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.59:*:*:*:*:*:*:*","matchCriteriaId":"0750BECB-3AB8-4A80-8D4D-F0CBA11F3E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.60:*:*:*:*:*:*:*","matchCriteriaId":"E9231C67-A182-441C-9148-BB1CDE6AFF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.7.61:*:*:*:*:*:*:*","matchCriteriaId":"3091F4CB-D14A-4BCA-8155-119AE7716360"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"20A0F5C4-7FCE-4666-9B14-D0B1D4CDF23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"2192AF4D-7BEF-4A16-B8BE-86256006759D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"BFC06391-07A4-4CC5-BE4E-9AB47956D1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9617C1F3-52F5-4830-9477-91E8853A1A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"3396AE2A-9FBB-4F3C-BFDD-FC4681CB5FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FBFBACD8-8A7C-4460-8630-08A770DCF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6C84F735-8DF6-4C1E-9C85-C5D23C636CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"7D4D2475-1FDD-4B6B-95E2-2CF47C3DD53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"B3BCE063-8093-459B-9358-2DE44B49FF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"0ACB0DB5-98B1-4F0A-A668-6237A4EB2770"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.10:*:*:*:*:*:*:*","matchCriteriaId":"F25FDA11-9398-4595-814E-1A5470BD76AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"862B468F-EDA7-4CB8-81D7-BBCFC2E37E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.12:*:*:*:*:*:*:*","matchCriteriaId":"35EBD4F5-FB10-44D6-9E28-130ECDAF5673"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"4EA0D3EB-4F12-4BBC-BA04-C4A2169E243E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"01BA8DC0-35CF-43CD-95E5-1A245CC7724C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:0.8.15:*:*:*:*:*:*:*","matchCriteriaId":"904F3781-AF6C-4BA3-8794-512CECAB8208"},{"vulnerable":true,"criteria":"cpe:2.3:a:nginx:nginx:0.6.1516:*:*:*:*:*:*:*","matchCriteriaId":"0CAB85AB-3C58-4AF3-B5C8-4E48A01252B6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0379.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=125897327321676&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125897425223039&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125900327409842&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/36818","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/48577","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0379.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=oss-security&m=125897327321676&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125897425223039&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125900327409842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/48577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3899","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors."},{"lang":"es","value":"Fallo de memoria en el controlador de Sockets Direct Protocol (SDP) en Sun Solaris v10, y OpenSolaris snv_57 hasta snv_94, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*","matchCriteriaId":"15B2F895-CBFB-4E19-AF7E-7011EB0A372E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*","matchCriteriaId":"311F14F7-EE01-4525-8C58-8BF650246026"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*","matchCriteriaId":"BC339789-4DC4-4A82-A1BE-CE59AC0D657F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*","matchCriteriaId":"CF7C1C94-48A4-4F46-A337-92EB7B8C6837"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*","matchCriteriaId":"14C63D62-F6D4-4616-AF05-5E3387D63BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*","matchCriteriaId":"6624E8DE-696A-402C-9088-CFE8ECC086BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*","matchCriteriaId":"04B5A32E-3D42-4500-A2BE-7ADFF3903386"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*","matchCriteriaId":"244EBFE7-05DD-4BBB-9793-310D71AC1721"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*","matchCriteriaId":"325EF996-AB8D-48CE-9A59-D338C823D927"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*","matchCriteriaId":"0EC8063A-1266-4443-B404-BB9C4D265B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*","matchCriteriaId":"424C989F-99C8-4337-AF15-4A51329938DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*","matchCriteriaId":"DA7ED4ED-938F-44B7-85ED-AFA6728DFE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*","matchCriteriaId":"43F1BFC7-BA9F-44EE-BD08-F70DFB2CFB33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*","matchCriteriaId":"059880C5-B7FF-492D-97CA-FBC174FF8BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*","matchCriteriaId":"5AC08000-2E71-465A-85F0-1AB8D1A51762"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*","matchCriteriaId":"D5CCA31F-9BF3-4E6F-B72C-1A54AFB1D07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*","matchCriteriaId":"C5D58609-62CB-446F-995E-FD334B89F6BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*","matchCriteriaId":"D45394E8-BE87-4BAC-89CE-B1F0E4BBBE94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*","matchCriteriaId":"1B0F8F99-99B0-4A01-884B-442CEF8D061A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*","matchCriteriaId":"0CCE3456-0BA0-4303-B7CE-22B63EE86F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*","matchCriteriaId":"A4027F7E-F867-4DC7-BA53-08D7B36E13F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*","matchCriteriaId":"906228D3-2561-45C0-A79D-BAAC9F1AD7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*","matchCriteriaId":"7BE4DE93-D189-4528-89DA-17E9325457E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*","matchCriteriaId":"C4D46760-1924-4713-963E-E4A9AD085394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*","matchCriteriaId":"B579204A-62EB-4D86-A22B-0726B9CB88DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*","matchCriteriaId":"636FD13F-0A30-4B03-8AEC-ED225FC71251"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*","matchCriteriaId":"B0593352-A568-4DDA-B1B8-77FA6DC93B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*","matchCriteriaId":"5299CAB1-9819-4AE4-9429-8CA32F692C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*","matchCriteriaId":"ECD23A89-A86B-44D3-A3D1-EFF3D8551DCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*","matchCriteriaId":"75B778E3-EFCF-4AB0-B2C7-E585C190CD3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*","matchCriteriaId":"80CFB4CD-CE38-4F24-87EE-0CA622E4E9A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*","matchCriteriaId":"460EE9E9-27BA-4C8B-9F06-BBA648105720"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*","matchCriteriaId":"57CA01EF-2AFC-44FB-96EE-AF85B3019BEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*","matchCriteriaId":"CD673F9F-442E-4997-A0E3-D4B595D16B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*","matchCriteriaId":"0BEADEEA-4D63-4E69-BFEE-02205150F909"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*","matchCriteriaId":"54DA5312-D935-444E-8154-514C5BD6E3F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*","matchCriteriaId":"EA41BAD9-BC09-4E5C-8759-AD4E4D2B3ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*","matchCriteriaId":"FF6EFE12-51AD-4879-9529-B7EA425059C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*","matchCriteriaId":"A6442F9F-E16E-4146-BA6D-92BBCB71EC63"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*","matchCriteriaId":"4D10B1B2-698B-4F02-9392-682AF78EC633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*","matchCriteriaId":"B69EECEC-86DB-4F35-9204-B0931ABC28DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*","matchCriteriaId":"8130EE2C-DC76-4BE3-B2DC-6FC540CD5277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*","matchCriteriaId":"CFC0C58B-980F-4C65-97BF-67C9E731BA11"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*","matchCriteriaId":"B0F7D5DE-0491-47F6-834A-0FA208213010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*","matchCriteriaId":"8071BF6A-789C-4DB7-8247-B86EA34DB9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*","matchCriteriaId":"EECE627D-3AE8-4207-87A8-F95746F693F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*","matchCriteriaId":"E6950900-2293-4DA0-89E8-DAFABBF423DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*","matchCriteriaId":"AB4764E7-E772-45BC-896B-C7BE287A8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*","matchCriteriaId":"4122F0EE-3A2F-456F-B8CF-82565F8DCD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*","matchCriteriaId":"5686A925-4978-4883-8DC1-978B09DC9489"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*","matchCriteriaId":"13B81B14-84C8-468A-AE11-30C4CB85E6F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*","matchCriteriaId":"6395A3A9-97F2-4C88-B6D6-70DB2ACDC70D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*","matchCriteriaId":"8CC54F69-E96A-482F-B43D-2E3A7EC90E47"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*","matchCriteriaId":"CDC656B7-529A-4963-955D-301A11CF5D09"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*","matchCriteriaId":"506769C9-D306-4EEC-BE2E-6E501CBE90BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*","matchCriteriaId":"37540C8F-FCC1-42DA-8EE3-D3E4FA5B315C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*","matchCriteriaId":"7AD5054B-18D8-44AE-AA4F-A07D12A63E55"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*","matchCriteriaId":"4BAD68C2-4AA2-4346-B279-51206E0651FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*","matchCriteriaId":"96F3D4B3-7828-40EB-BD67-A3CD5B210787"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*","matchCriteriaId":"C166F9F7-E8AB-4BA1-AEB6-1E7964976801"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*","matchCriteriaId":"12B6730F-6CF1-4990-953F-1CC76D78B618"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*","matchCriteriaId":"03B96DE7-70BD-4CD8-9574-8C024E51E91C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*","matchCriteriaId":"52D5BB76-FF5E-4BBA-A2D0-00EB574B9104"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*","matchCriteriaId":"C29B1192-D709-48FB-816C-B4F30460E957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*","matchCriteriaId":"6DB1AC08-2564-4AAB-82AE-EB504FAA34FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*","matchCriteriaId":"46D8D5D1-8855-4116-99B3-EA1F78FDEF02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*","matchCriteriaId":"999FFE1D-D7D4-476B-8A46-9D0179DB570B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*","matchCriteriaId":"2B14945C-350A-4895-92C1-932208533F9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*","matchCriteriaId":"513D435B-D28B-4833-88E6-A1A8743177F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*","matchCriteriaId":"4126C6C9-90AB-470E-AF83-4ED1FDD90511"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*","matchCriteriaId":"3275E47F-5A4B-4843-A07C-82DEE852672C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*","matchCriteriaId":"58017DDC-63B3-458C-9803-4683211A4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*","matchCriteriaId":"6692EE63-A76B-47C3-BC0D-7C15CA6FE013"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*","matchCriteriaId":"BA1E27E5-FE20-42FA-9A61-A7174E705EB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*","matchCriteriaId":"65A32803-580D-4D07-B39B-2159258CBA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*","matchCriteriaId":"13B51612-3BD6-449F-AD63-D01F8D05B269"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023124","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36904","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3900","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp)."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Cluster Management en IBM PowerHA v5.4, v5.4.1, v5.5, y v6.1 para AIX permite a atacantes remotos modificar la configuración del sistema operativo mediante paquetes al puerto godm (6177/tcp)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerha:5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1904B9C-9B5D-4DC0-BB28-B1F2A26F57D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerha:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7E0D2EE2-F958-4A9C-A456-A1530778806A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerha:5.5:*:*:*:*:*:*:*","matchCriteriaId":"C182BCB6-4981-4B1F-8B8C-3C889E16E440"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:powerha:6.1:*:*:*:*:*:*:*","matchCriteriaId":"7BCEED45-2F67-4633-ACA0-DA801D586FFE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/haport_advisory.asc","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37267","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61323","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ62630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36931","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54154","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/haport_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ62630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3901","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en e-Courier CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"UserGUID\" en home/index.asp y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecouriersoftware:e-courirer_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"F041FA1F-936C-4FCB-9016-C59B7E7136AB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/ecourier-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0911-exploits/ecourier-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3902","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\\.. (slash backslash dot dot) in the URL."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Cherokee Web Server v0.5.4 y anteriores para Windows permite a atacantes remotos leer ficheros de su elección mediante una secuencia de caracteres /\\.. (barra barra invertida punto punto) en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F2E22471-59B6-428F-92A2-8078DBF94803"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://freetexthost.com/ncyss3plli","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/59588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://pocoftheday.blogspot.com/2009/10/cherokee-web-server-054-directory.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37183","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36874","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54024","source":"cve@mitre.org"},{"url":"http://freetexthost.com/ncyss3plli","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://osvdb.org/59588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://pocoftheday.blogspot.com/2009/10/cherokee-web-server-054-directory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3903","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) section parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en jspui/index.jsp en ManageEngine Netflow Analyzer v7.5 build 7500 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"view\" y (2) \"section\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:netflow_analyzer:7.5:*:*:*:*:*:*:*","matchCriteriaId":"47E188E0-5508-4D42-B277-34D7482045FC"}]}]}],"references":[{"url":"http://osvdb.org/55772","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35630","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51630","source":"cve@mitre.org"},{"url":"http://osvdb.org/55772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3904","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header."},{"lang":"es","value":"classes/session/cc_admin_session.php en CubeCart v4.3.4 no maneja adecuadamente las restricciones de permiso de acceso administrativo, permitiendo a atacantes remotos saltar las restricciones y obtener acceso administrativo mediante una petición HTTP que contenga un (1) sessID (ccAdmin cookie), (2) una cabecera X_CLUSTER_CLIENT_IP , o (3) una cabecera User-Agent vacios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BB338F50-5ECB-46B6-A8A5-30F2E8DA7390"}]}]}],"references":[{"url":"http://forums.cubecart.com/index.php?showtopic=39691?read=1","source":"cve@mitre.org"},{"url":"http://forums.cubecart.com/index.php?showtopic=39748","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507594/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36882","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023120","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3113","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54062","source":"cve@mitre.org"},{"url":"http://forums.cubecart.com/index.php?showtopic=39691?read=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://forums.cubecart.com/index.php?showtopic=39748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507594/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3905","sourceIdentifier":"cve@mitre.org","published":"2009-11-06T15:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to (1) Wizard_tracking.asp, (2) wizard_oe2.asp, (3) your-register.asp, (4) main-whyregister.asp, and (5) your.asp in home/, and other unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en e-Courier CMS permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"UserGUID\" de (1) Wizard_tracking.asp, (2) wizard_oe2.asp, (3) your-register.asp, (4) main-whyregister.asp, y (5) your.asp en home/, y otros vectores no especificados. NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecouriersoftware:e-courirer_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"F041FA1F-936C-4FCB-9016-C59B7E7136AB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3906","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-12T02:30:00.327","lastModified":"2023-11-07T02:04:37.247","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3606.  Reason: This candidate is a duplicate of CVE-2009-3606.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2009-3606 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3907","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-12T02:30:00.610","lastModified":"2023-11-07T02:04:37.467","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3607.  Reason: This candidate is a duplicate of CVE-2009-3607.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2009-3607 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3908","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-12T02:30:00.877","lastModified":"2023-11-07T02:04:37.687","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3608.  Reason: This candidate is a duplicate of CVE-2009-3608.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2009-3608 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-3909","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-11-19T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en la función read_channel_data en plug-ins/file-psd/psd-load.c en GIMP v2.6.7, podría permitir a atacantes remotos ejecutar código de su elección a través de un archivo PSD manipulado que provoca un desbordamiento de búfer basado en memoria dinámica (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gimp:gimp:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"210FA4BB-1E63-4CE4-88FB-53ACEC934C3F"}]}]}],"references":[{"url":"http://git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33c","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/60178","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1181.html","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37348","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50737","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://secunia.com/secunia_research/2009-43/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-23.xml","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"PSIRT-CNA@flexerasoftware.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:332","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507928/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37040","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3270","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1021","source":"PSIRT-CNA@flexerasoftware.com","tags":["Broken Link"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=600741","source":"PSIRT-CNA@flexerasoftware.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/60178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/50737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/secunia_research/2009-43/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201209-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/507928/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=600741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3911","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en settings.php en TFTgallery v0.13 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro \"sample\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftgallery:tftgallery:0.13:*:*:*:*:*:*:*","matchCriteriaId":"2D73A995-05FA-408D-8B8C-576F5D9F717C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36898","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54087","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3912","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the album parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en TFTgallery v0.13 permite a atacantes remotos leer ficheros arbitrarios a través de un ..%2F (codificado punto punto barra) en el parámetro \"album\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftgallery:tftgallery:0.13:*:*:*:*:*:*:*","matchCriteriaId":"2D73A995-05FA-408D-8B8C-576F5D9F717C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36899","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3913","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to execute arbitrary SQL commands via the select parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en summary.php en Xerox Fiery WebTools permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"select\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerox:fiery_webtools:*:*:*:*:*:*:*:*","matchCriteriaId":"231ECE1C-E32C-4B43-9FE7-E68243000BD9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507650/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36906","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507650/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3914","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Name field in an invitation."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo de Drupal \"Temporary Invitation\" v5.X antes de v5.x-2.3 permite a atacantes remotos inyectar HTML o scripts web a través del campo Name en una invitación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"3432E672-ED5A-4D48-98CE-B1ADE1181C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"74CE2256-31D8-438B-922B-6C7349123285"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFF53DBF-4685-46B8-B3FE-3EF79AC3FA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"5BBC30EF-B0CF-4EB2-9A23-AE6C946C8AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"4E6AC0DB-AB0E-47EE-A7A9-2D99F5AD3A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"206A8901-CE14-406F-A4CA-DF6D3FF68EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"5010EC2F-53B0-45EF-A78C-190A86679AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"173726BF-B29A-4722-AF5F-21431794EDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"D1574275-E4BA-43FE-9F7E-733F915DAA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"220868CE-750B-4335-BE9B-8B77A22EFDD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"36FAAB42-8CEA-4F9E-A76C-B8DB5B30FB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"14D3DFA9-4987-4164-AD3E-8A800E0D0D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"27C44E14-697B-4CEA-B157-758F81C4FE9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"977BF300-7813-4247-9533-5B87482DA918"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"1F64313F-5F0F-4A80-B899-EA3B3EBD7A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"248BD01C-E0C9-4C24-97BF-E1260351CC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"0CD658B7-98B3-4E8C-8C40-DC79FFEF6BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"A6999142-EE04-4D94-8A43-93B12BC2C2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"53025B5C-F42C-4C7E-9779-B55D0AD05D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.0:rc7:*:*:*:*:*:*","matchCriteriaId":"3CB87FEE-6176-4DA5-B10D-541A192FB7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F2F3457-DF74-40D2-B3E7-92F055BE6D86"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfgang_ziegler:temporary_invitation:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"04809EFE-ED43-46CC-A30A-DA09E7EBAE64"}]}]}],"references":[{"url":"http://drupal.org/node/623018","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623526","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59679","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54148","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3915","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the \"Separate title and URL\" formatter in the Link module 5.x before 5.x-2.6 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the link title field."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en el formateador de separación de título y URL del módulo de Drupal \"Link\" v5.x antes de v5.x-2.6 y v6.x antes de v6.x-2.7, permite a atacantes remotos inyectar HTML o scripts web a través del campo de título del enlace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5E701054-2FA8-45E3-B915-E0813B981A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"AFD5126E-E2FD-4913-AE27-539A6D75A2C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"768B7161-6F7D-4D5A-9E0E-EE16B1774325"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"EC127D2F-F710-472D-A184-B321395EF5D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"2829A419-F652-4517-9B40-F03531114F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"5F6D9E47-BFE3-4311-B3AB-E56209F581E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"B4AB5183-E598-4B57-BD6D-45FE18FA79AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"159B5A52-5047-4CC7-A7EC-CAB8E938EC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"CC981461-9F68-452F-9CC7-4D12D16C56D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"DD5BF1EE-C5F7-4B2D-BB57-207AF44FA88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"90185CD5-84D6-4A9C-AD79-9B1170587D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"3213B0A6-7738-4100-9C8E-68F66B3C1D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"2082B86D-7D03-4E17-8C3A-77AAD2C30DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"B5FC90E8-CDCE-4FE3-A191-DD734C8F1771"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta1:*:*:*:*:*:*","matchCriteriaId":"4DEE1078-867F-4AFC-85B8-E58469CAF653"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta2:*:*:*:*:*:*","matchCriteriaId":"403F4813-3B26-4B88-838E-28C278B559B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta3:*:*:*:*:*:*","matchCriteriaId":"7E5E2826-456E-4D9C-AD97-8E56951498A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.1:beta4:*:*:*:*:*:*","matchCriteriaId":"FD7DFE78-14D9-4AFE-B760-A2BB9F37C554"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"D303C779-DCA3-4596-B107-EF3FCE378475"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"27AC58F5-0FE0-4204-AADC-2EC50B1E6D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"46B21BCD-8B10-49C5-8BA8-34A2044FD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"7EE45B03-7FCF-40D5-8320-897E4718090E"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"AA23A95C-F63A-4BC7-8D4F-32C177F85E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.6:beta1:*:*:*:*:*:*","matchCriteriaId":"1620A01A-5980-42BE-9D1C-5F047CAEC48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.6:beta2:*:*:*:*:*:*","matchCriteriaId":"A3D5E691-1E56-40A1-8007-5D04AF6D6079"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_c_fiala:link:6.x-2.6:beta3:*:*:*:*:*:*","matchCriteriaId":"C7CBEAED-08A4-4217-8A79-3958B449C575"}]}]}],"references":[{"url":"http://drupal.org/node/620662","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/620668","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36928","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54142","source":"cve@mitre.org"},{"url":"http://drupal.org/node/620662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/620668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3916","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Node Hierarchy module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a child node title."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el modulo de Drupal \"Node Hierarchy\" v5.x antes de v5.x-1.3 y v6.x antes de v6.x-1.3, permite a atacantes remotos inyectar HTML o scripts  web a través de un título de nodo hijo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"09F2B54C-F522-43A6-9CEA-452B96E6A70A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"BAB62046-C6D5-40B7-8381-02428B42F7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"B7489CF5-1EAE-4D24-AC08-F0248D239281"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"F3AB1E36-2960-4A49-8114-B431F3C9C1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"8AECC64D-0955-426C-9112-2AAD0C6E9405"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"EC91348C-888F-4BD8-990F-5EEBFF3C81D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"204E662F-2181-46BA-8A6A-1850CEF4A51D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"4ACBF87C-2C94-41AA-9849-EC1B9BFBAF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:ronan_dowling:nodehierarchy:6.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"C895600F-CDCB-4A8D-8F55-F2468B046B26"}]}]}],"references":[{"url":"http://drupal.org/node/622092","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/622100","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623490","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54146","source":"cve@mitre.org"},{"url":"http://drupal.org/node/622092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/622100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3917","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the S5 Presentation Player module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an unspecified field that is copied to the HTML HEAD element."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo de Drupal \"S5 Presentation Player\" v6.x-1.x antes de v6.x-1.1, permite a atacantes remotos inyectar HTML o scripts web a través de un campo sin especificar que se copia el elemento HTML HEAD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_knaddison:s5:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"489842E2-B5E5-469F-98A5-C92EB1AE0A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_knaddison:s5:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"EA1B7D32-3C81-48D4-81DE-3E48B4BE74EE"}]}]}],"references":[{"url":"http://drupal.org/node/623508","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59678","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36923","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54147","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3918","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Zoomify\" v5.x antes de v5.x-2.2 y v6.x antes de v6.x-1.4 permite a atacantes remotos inyectar HTML o scripts weba través del título del nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"4A078946-DC93-4BC6-9AB2-2F6D83EDEEA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"63E09BB4-B914-4F56-AD01-62EA7819D041"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"F05FA7B8-D9EF-4ECF-85C9-581141750036"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F8C8E8B-89A3-4F48-B1C3-EE7AE380CA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"F3F7DD3B-DEA9-4FB8-ADEF-B299FDF31DC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"F41E1FC5-E99D-4A3D-B20E-2D60C5073C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"67D473AD-F973-4653-8789-19C67C73F221"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"3AF88488-48E3-44C5-A74F-A841B916F886"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"CF8E1486-0347-465E-B373-DC55604CE2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:karim_ratib:zoomify:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"3F4B4257-521D-41F4-B585-A7CC1AB20F5A"}]}]}],"references":[{"url":"http://drupal.org/node/623434","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623436","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623678","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59671","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37263","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36930","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54155","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3919","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.907","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified \"user-supplied information.\""},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo para Drupal NGP COO/CWP Integration (crmngp) v6.x anterior a v6.x-1.12, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de informaión dada por el usuario no especificada.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"FD7759E0-3523-4D10-B18A-88834326A66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"AB4B84EE-4CDB-457A-843B-52B3D0E1C16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"4107DCF0-DC1E-4F55-8062-27A1405F79ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E4DEA11-3122-48F7-AC9D-4A613C50F38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"78D589E6-F035-45EA-A364-A2B6E18BCF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"79149160-FA72-4465-AE4A-3EF301AD1009"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"AF2974DA-7423-4143-BF40-3B8FC13CFBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"ABC5BC50-CF8D-44AD-97E5-A71C32E526E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"B0248D85-E83D-41EC-8018-0FF130E55621"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"01A93C92-4E96-4D7B-A3DB-6E0055E556AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"D9F875EE-707D-499E-BAB0-578C4D810CC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/623506","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623546","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59676","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36927","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54151","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3920","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vectors."},{"lang":"es","value":"Una página de administración del módulo de integración de Drupal NGP COO/CWP v6.x (crmngp) antes de v6.x-1.12 no realiza el control de acceso esperado, lo que permite leer a atacantes remotos la información de registro a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"FD7759E0-3523-4D10-B18A-88834326A66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"AB4B84EE-4CDB-457A-843B-52B3D0E1C16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"4107DCF0-DC1E-4F55-8062-27A1405F79ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E4DEA11-3122-48F7-AC9D-4A613C50F38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"78D589E6-F035-45EA-A364-A2B6E18BCF5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"79149160-FA72-4465-AE4A-3EF301AD1009"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"AF2974DA-7423-4143-BF40-3B8FC13CFBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"ABC5BC50-CF8D-44AD-97E5-A71C32E526E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"B0248D85-E83D-41EC-8018-0FF130E55621"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"01A93C92-4E96-4D7B-A3DB-6E0055E556AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_robertson:crmngp:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"D9F875EE-707D-499E-BAB0-578C4D810CC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/623506","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623546","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36927","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54153","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3921","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation messages."},{"lang":"es","value":"El módulo Smartqueue_og v5.x anteriores a v5.x-1.3 y v6.x anteriores a6.x-1.0-rc3, módulo para  Drupal, en ciertas circunstancias no verifica los privilegios del nodo de grupo, implicando la creación de una sub-cola que permite a usuarios remotos autenticados, descubrir nombres de grupo orgánicos de su elección leyendo los mensajes de confirmación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC40212-935B-4742-B5F4-0128D4D5691D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"0FBC957C-6687-4D78-A3FB-98F3D3DC4CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3C40725-FEF7-4E96-A6B7-FB496070AD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"BF93D1D4-2E97-4773-849F-1F0D89BA83E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"EF19A274-1AE2-44B9-839B-3EF84DB235F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"1F30C62A-DC66-4498-8572-9608D5C137B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:smartqueue_og:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"5FD0B6B4-7B13-4E7B-B371-13004653FFF1"}]}]}],"references":[{"url":"http://drupal.org/node/617496","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/617500","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623554","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37288","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36925","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/617496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/617500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3922","sourceIdentifier":"cve@mitre.org","published":"2009-11-09T17:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that (1) delete the editing protection of a user or (2) delete a certain type of administrative-bypass rule."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en el módulo User Protect v5.x anteriores a v5.x-1.4 y v6.x anteriores a v6.x-1.3, módulo para Drupal, permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones que (1) elimine la protección de edición de un usuario y (2) elimine ciertos tipos de reglas de prevención de administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"2EA9A11F-AECA-462C-92BB-0D26B3C4E790"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"5E088B7B-C2A8-4352-A775-C376AC978FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"6D305ABE-9931-421D-8F7C-32F65DF11A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"D9D82426-0F6B-4D55-89EB-7D75D2CFA7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"ED0916EA-C9F9-40F0-971D-B759D289EC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"0F858AAB-644B-4B84-9479-9940423EBEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"E8A8137D-630E-4257-B437-A4961E134FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"4562E39D-A5A5-40EB-A913-7D1E8C81556D"},{"vulnerable":true,"criteria":"cpe:2.3:a:chad_phillips:userprotect:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"46AEA85D-DA51-49A8-A69C-D99F5474F2D3"}]}]}],"references":[{"url":"http://drupal.org/node/623162","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59692","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36922","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54145","source":"cve@mitre.org"},{"url":"http://drupal.org/node/623162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/623186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3923","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T00:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server."},{"lang":"es","value":"El servicio Web de VirtualBox v2.0.8 y v2.0.10 en Sun Virtual Desktop Infrastructure (VDI) v3.0 no requiere autenticación, lo que permite a atacantes remotos conseguir acceso no especificado a través de vectores que implican peticiones al servidor Apache HTTP Server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtual_desktop_infrastructure:3.0:*:*:*:*:*:*:*","matchCriteriaId":"13508CBB-9253-40A6-9CC9-5CD5535A35DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6456F012-E72B-4622-BFD1-F95FEDA6E446"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"0003E19C-EBAA-488F-B3F0-E2CFB283FBDD"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268328-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36917","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54136","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268328-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3924","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T02:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet."},{"lang":"es","value":"Desbordamiento de búfer en pbsv.dll usado en Soldier of Fortune II y posiblemente en otras aplicaciones cuando Even Balance PunkBuster v1.728 o versiones previas está activado, permite a atacantes remotos provocar una dengación de servicio (caída del servidor de la aplicación) y posiblemente la ejecución de código de su elección a través de un paquete largo \"restart\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raven_software:soldier_of_fortune_2:*:*:*:*:*:*:*:*","matchCriteriaId":"1B80C05C-6B35-4B6C-990F-90032343BBD4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:*:*:*:*:*:*:*:*","versionEndIncluding":"1.728","matchCriteriaId":"764E954C-374A-4947-B161-FD70101CF60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.272:*:*:*:*:*:*:*","matchCriteriaId":"2D3F9AE0-21BA-46EF-9478-69FB9CCABF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.457:*:*:*:*:*:*:*","matchCriteriaId":"B1056D82-5F58-4995-A3ED-8C2DF9E28BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.458:*:*:*:*:*:*:*","matchCriteriaId":"98AF72B7-746E-4D41-9F80-5F54A9ACBCDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.641:*:*:*:*:*:*:*","matchCriteriaId":"59F0238D-A80E-4B2F-99BB-76053AFE313E"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.642:*:*:*:*:*:*:*","matchCriteriaId":"C3E1E82C-6001-49A2-AF1D-9436F00109DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.718:*:*:*:*:*:*:*","matchCriteriaId":"BBFCE4B0-699E-401C-B40D-38E240DCA9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:punkbuster:punkbuster:1.723:*:*:*:*:*:*:*","matchCriteriaId":"0BE4C80D-994E-48EF-A8BA-8D62B808628B"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/sof2pbbof-adv.txt","source":"cve@mitre.org"},{"url":"http://aluigi.org/poc/sof2pbbof.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36221","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52400","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/sof2pbbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aluigi.org/poc/sof2pbbof.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/36221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3930","sourceIdentifier":"cve@mitre.org","published":"2009-11-10T19:30:01.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow."},{"lang":"es","value":"Múltiples desbordamiento de búfer en Christos Zoulas file before v5.02 permite a atacantes asistidos remotamente por usuarios tienen un impacto no especificado a través de un componente de documento manipulado (como cdf) archivo que provoca un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:*:*:*:*:*:*:*:*","versionEndIncluding":"5.01","matchCriteriaId":"03FC99B1-2B8B-4D1A-9862-88C7A11F5012"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.30:*:*:*:*:*:*:*","matchCriteriaId":"54717F95-DCD4-4AA0-989B-A72545496314"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.31:*:*:*:*:*:*:*","matchCriteriaId":"83AA36FC-A47F-45AA-8754-E975BF5C75C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.32:*:*:*:*:*:*:*","matchCriteriaId":"A7DE688C-1F8F-4769-B041-3692CB8447F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.33:*:*:*:*:*:*:*","matchCriteriaId":"6BA3C5EE-F2F4-4906-A9CA-4D7D7CA5E2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.34:*:*:*:*:*:*:*","matchCriteriaId":"5EA857D0-9938-4109-8057-06E9EDFDC0A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.36:*:*:*:*:*:*:*","matchCriteriaId":"172DF2EE-C32A-42FE-BEDD-0DE98A00218D"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.37:*:*:*:*:*:*:*","matchCriteriaId":"483B2F0D-0246-42EE-9E59-AA301C6761A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.38:*:*:*:*:*:*:*","matchCriteriaId":"1C168BDF-B1DB-4948-BD33-0CD584F8DD47"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.39:*:*:*:*:*:*:*","matchCriteriaId":"140B2E4F-ACD7-473F-A6D6-207F23128C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.40:*:*:*:*:*:*:*","matchCriteriaId":"354A89D8-6C36-4EF7-B5BE-8D2179E96788"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:3.41:*:*:*:*:*:*:*","matchCriteriaId":"045C73F3-864C-4FFB-9E51-DE9CCA3C8D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.01:*:*:*:*:*:*:*","matchCriteriaId":"92CA097D-A58D-4EA9-BC52-7014D464F087"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.02:*:*:*:*:*:*:*","matchCriteriaId":"D01BCBD5-EDD3-4FB6-AEF5-55DD4B0397A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.03:*:*:*:*:*:*:*","matchCriteriaId":"DCE8DA90-3E99-4F94-890F-EA09CA39826A"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.04:*:*:*:*:*:*:*","matchCriteriaId":"02BD52B1-FDB6-4640-AB27-A3A75C74BB4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.06:*:*:*:*:*:*:*","matchCriteriaId":"8D839F4E-4DE8-4101-9EAA-B8930AABF48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.07:*:*:*:*:*:*:*","matchCriteriaId":"24E893D9-89C6-4230-BF26-5430A8E83A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.08:*:*:*:*:*:*:*","matchCriteriaId":"CE7CB9E5-4E6C-4D79-B9ED-E60B7D45FC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.09:*:*:*:*:*:*:*","matchCriteriaId":"3E788A36-73FF-4DE7-BA18-66C6ECA9911F"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.11:*:*:*:*:*:*:*","matchCriteriaId":"188DA67D-E441-4BCF-9BCF-BF02F501AE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.12:*:*:*:*:*:*:*","matchCriteriaId":"56463FD8-B9D5-467D-BFEA-81B92C086B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.13:*:*:*:*:*:*:*","matchCriteriaId":"DC7752D6-36CD-4121-9F89-CFABB0C55D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.14:*:*:*:*:*:*:*","matchCriteriaId":"A1CAF79C-8839-489D-A2B3-ECB97A48B6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.15:*:*:*:*:*:*:*","matchCriteriaId":"602676CC-21E6-4826-9A00-C56A6A655587"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.16:*:*:*:*:*:*:*","matchCriteriaId":"D4D3F0C9-6573-4871-83BB-19E5AE8EEFA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.17:*:*:*:*:*:*:*","matchCriteriaId":"2F4D59F2-FD8B-472E-9A01-F1950619DA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.19:*:*:*:*:*:*:*","matchCriteriaId":"289D758F-8662-49F3-B532-A00AD29D9867"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.20:*:*:*:*:*:*:*","matchCriteriaId":"D2BB0AD8-68BA-4DFB-A911-6DDE25823640"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.21:*:*:*:*:*:*:*","matchCriteriaId":"B534C755-B24A-4A7A-B60E-255F2B0E4880"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.23:*:*:*:*:*:*:*","matchCriteriaId":"4BCE9B1F-7793-4B3B-9CED-DC5296A33EA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.24:*:*:*:*:*:*:*","matchCriteriaId":"45027274-FB37-4F06-A9A0-C2D288E1E6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.25:*:*:*:*:*:*:*","matchCriteriaId":"DC84FE48-475F-4573-9BF2-8C62C2743C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:4.26:*:*:*:*:*:*:*","matchCriteriaId":"EF4822A6-7715-4A10-9463-79F5537CE5EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:christos_zoulas:file:5.00:*:*:*:*:*:*:*","matchCriteriaId":"F6FF256D-3DD4-41A8-B119-D20A493A6EA5"}]}]}],"references":[{"url":"http://mx.gw.com/pipermail/file/2009/000382.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37074","source":"cve@mitre.org"},{"url":"http://mx.gw.com/pipermail/file/2009/000382.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3931","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T17:54:58.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a \"Content-Disposition: attachment\" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy."},{"lang":"es","value":"Vulnerabilidad de lista negra incompleta en browser/download/download_exe.cc en Google Chrome en versiones anteriores a la 3.0.195.32 permite a atacantes remotos forzar la descarga de ciertos ficheros peligrosos mediante la designación de \"Content-Disposition: adjunto\", como es demostrado por ficheros (1) .mht y (2) .mhtml, que son automáticamente ejecutados por Internet Explorer 6; ficheros (3) .svg, que son automáticamente ejecutados por Safari; (4) ficheros .xml; (5) ficheros .htt; (6) ficheros .xsl; (7) ficheros .xslt; y (8) ficheros de imagen que son prohibidos por la política del sitio de la victima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.195.21","matchCriteriaId":"8B37560A-C9A9-4D6D-AD2A-C050DBD22628"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=23979","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/243115","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/261022","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/download/issue243115_2002.diff","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/download/issue261022_1.diff","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securethoughts.com/2009/11/using-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36947","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3159","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54171","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=23979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/243115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/261022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/download/issue243115_2002.diff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/download/issue261022_1.diff","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securethoughts.com/2009/11/using-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3932","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T17:54:58.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting \"SQL metadata into a bad state.\""},{"lang":"es","value":"El plugin Gears en Google Chrome, en versiones anteriores a la 3.0.195.32 permite a usuarios remotos asistidos por el usuario provocar una denegación de servicio (corrupción de memoria y caída del plugin) o posiblemente ejecutar código de su elección mediante un uso no especificado de la API Gears SQL, relacionado con la puesta de \"metadatos de SQL en un mal estado.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.195.21","matchCriteriaId":"8B37560A-C9A9-4D6D-AD2A-C050DBD22628"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=26179","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36947","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3159","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://code.google.com/p/chromium/issues/detail?id=26179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3933","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T17:54:58.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions."},{"lang":"es","value":"WebKit en versiones anteriores a la r50173, tal como se usa en Google Chrome en versiones anteriores a la 3.0.195.32, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) mediante una página web que llama al método JavaScript setInterval, el cual dispara una incompatibilidad entre las funciones WTF::currentTime y base::Time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webkit:webkit:*:*:*:*:*:*:*:*","versionEndIncluding":"r50173","matchCriteriaId":"3F03C9DF-4438-4521-A0FA-D23A414F19CA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.195.24","matchCriteriaId":"7008C925-403A-4900-AEEF-7530792E770C"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"},{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*","matchCriteriaId":"6FEBB1A8-295B-4AF7-996D-F7E415B91ECB"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=25892","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/339039","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/webkit.gyp?r1=30311&r2=30310","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=30311","source":"cve@mitre.org"},{"url":"http://trac.webkit.org/changeset/50173","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59745","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://bugs.webkit.org/show_bug.cgi?id=30833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54297","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=25892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/339039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/webkit.gyp?r1=30311&r2=30310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=30311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://trac.webkit.org/changeset/50173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.webkit.org/show_bug.cgi?id=30833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3934","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T17:54:58.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service via a page-local link, related to an \"empty redirect chain,\" as demonstrated by a message in Yahoo! Mail."},{"lang":"es","value":"La función WebFrameLoaderClient::dispatchDidChangeLocationWithinPage en src/webkit/glue/webframeloaderclient_impl.cc en Google Chrome antes de 3.0.195.32 permite a atacantes asistidos por el usuario provocar una denegación de servicio mediante un enlace a una página local, que tiene relación con una \"cadena de redirección vacía\", tal como se demuestra en un mensaje de Yahoo! Mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.195.21","matchCriteriaId":"8B37560A-C9A9-4D6D-AD2A-C050DBD22628"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*","matchCriteriaId":"D55D5075-D233-42D6-B1D6-77B7599650EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*","matchCriteriaId":"5B8FF77A-7802-4963-B532-3F16C7BB012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*","matchCriteriaId":"D73576CF-76EE-42A3-9955-D7991384B8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*","matchCriteriaId":"DD4A2AB1-6F90-4D0B-A673-C6310514CE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*","matchCriteriaId":"66A4FEB5-11D8-4FFC-972D-A3B991176040"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*","matchCriteriaId":"A6313614-FC3C-488C-B80B-191797319A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF3DAB-73C4-48E8-9B0B-DADABF217555"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*","matchCriteriaId":"7B2FAE50-4CA3-46F6-B533-C599011A9ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*","matchCriteriaId":"B0D94F22-37B6-4938-966A-E1830D83FBC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*","matchCriteriaId":"D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*","matchCriteriaId":"0C0F9D75-B10D-468F-84D8-61B6A1230556"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*","matchCriteriaId":"5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*","matchCriteriaId":"173D539E-045E-4429-80C9-5749BECC6CD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*","matchCriteriaId":"D2052352-FECC-4990-B0F4-A715694AD816"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*","matchCriteriaId":"BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*","matchCriteriaId":"E37938BB-8368-46D6-A8E4-F99F5CB9B82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*","matchCriteriaId":"6659833E-E309-4797-84D4-A782237714A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*","matchCriteriaId":"FE4C0D93-0308-48D4-A953-9398B88E2868"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*","matchCriteriaId":"FE5094C4-1338-4189-B5FD-C9AFFF091D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*","matchCriteriaId":"51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*","matchCriteriaId":"67C0798F-CC7F-4069-810E-B81F8BB77CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*","matchCriteriaId":"A2F95770-F36F-43C0-986F-5C819648271E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*","matchCriteriaId":"ECCE1FD3-8D27-4304-97F9-6F9689F2498D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*","matchCriteriaId":"0F6CA696-49AA-4445-B978-96C1D8CE58DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*","matchCriteriaId":"D9CFA3BF-6C07-448B-8C83-AD4C524A6577"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"E8497F93-D88A-4FFA-B988-7210608530A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*","matchCriteriaId":"49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*","matchCriteriaId":"59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*","matchCriteriaId":"02D459C7-2555-42FA-9C68-619E410D7CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*","matchCriteriaId":"E5CDF938-2998-403F-B343-29B620E05D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*","matchCriteriaId":"64F89EA6-B411-4887-90A1-FF3A054424F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*","matchCriteriaId":"10D2BA3B-1C69-470C-9C40-001FAE82DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*","matchCriteriaId":"3583995C-CD74-401F-905D-65B73CFC4595"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*","matchCriteriaId":"A0A621B1-3186-4CE2-8BCC-916027CC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*","matchCriteriaId":"B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*","matchCriteriaId":"4F5223F1-85CD-4DF9-9665-BDF7B554A784"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*","matchCriteriaId":"8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*","matchCriteriaId":"6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*","matchCriteriaId":"0E7F7897-ECD1-499E-81CD-E224241B6607"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*","matchCriteriaId":"C7422307-271F-4953-9CA4-C50238D27BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*","matchCriteriaId":"9DCC3490-5B06-4992-8E31-CA46E18607B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*","matchCriteriaId":"C2F85551-EDB5-4790-8095-EFFA7DEC7F98"}]}]}],"references":[{"url":"http://code.google.com/p/chromium/issues/detail?id=22205","source":"cve@mitre.org"},{"url":"http://codereview.chromium.org/326015","source":"cve@mitre.org"},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43068","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/glue/webframeloaderclient_impl.cc?r1=30772&r2=30771","source":"cve@mitre.org"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=30772","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59744","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54296","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=22205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://codereview.chromium.org/326015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/glue/webframeloaderclient_impl.cc?r1=30772&r2=30771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://src.chromium.org/viewvc/chrome?view=rev&revision=30772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3935","sourceIdentifier":"cve@mitre.org","published":"2009-11-12T17:54:58.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el firmware de Advanced Management Module, en versiones anteriores a la 2.50G, para el IBM BladeCenter T 8720-2xx y 8730-2xx tienen un impacto y unos vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.50c","matchCriteriaId":"DDB95BF0-DE99-426C-BAAC-F11D26F1E604"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.00:*:*:*:*:*:*:*","matchCriteriaId":"C4CAC775-3003-46B5-8F71-E6714B407B76"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.01:*:*:*:*:*:*:*","matchCriteriaId":"3A8C118D-55F0-4B9F-BE7D-BCF5785B91B7"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.20:*:*:*:*:*:*:*","matchCriteriaId":"39692441-13DC-4FA9-BC0E-956B2CFABA80"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.20f:*:*:*:*:*:*:*","matchCriteriaId":"92560A6E-7DB6-4386-82E4-3065F7CCA3C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.25:*:*:*:*:*:*:*","matchCriteriaId":"FA9E89E2-6A0E-45CF-82DC-E142545B7706"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.25e:*:*:*:*:*:*:*","matchCriteriaId":"53A33EAB-75DF-4724-B63D-8F7206CA0474"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.25i:*:*:*:*:*:*:*","matchCriteriaId":"B912239E-ABA7-4D96-80D2-D93C718404D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.26b:*:*:*:*:*:*:*","matchCriteriaId":"5A16A762-F911-4D58-8D93-921FEF1674DB"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.26e:*:*:*:*:*:*:*","matchCriteriaId":"D03C0AAF-9D47-4524-87B7-186CCAC33707"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.26h:*:*:*:*:*:*:*","matchCriteriaId":"BA61D831-ABCC-4622-80D9-53637AAA458F"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.26i:*:*:*:*:*:*:*","matchCriteriaId":"D6F0B05F-EE07-4261-8E09-A11081E1D9F9"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.26k:*:*:*:*:*:*:*","matchCriteriaId":"C2B83853-5EDB-4AD7-BAAF-252C71B7BD4A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.28g:*:*:*:*:*:*:*","matchCriteriaId":"1B3F5569-B25E-43DA-970D-AA9D9CC2979F"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.32d:*:*:*:*:*:*:*","matchCriteriaId":"16D3776F-5B97-477F-B397-9161A64771B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.34b:*:*:*:*:*:*:*","matchCriteriaId":"1356422D-E695-49F2-BFA4-275A9EC857CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.34e:*:*:*:*:*:*:*","matchCriteriaId":"0F956A08-A3D4-42C6-BDDC-F6A417FD5FA6"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.36d:*:*:*:*:*:*:*","matchCriteriaId":"E33E5CBA-B044-41D0-AAA8-0E3402D35D3A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.36g:*:*:*:*:*:*:*","matchCriteriaId":"ACB8B620-EF87-4818-9D43-5311AF55D2BD"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.36h:*:*:*:*:*:*:*","matchCriteriaId":"294822FC-3118-4D17-B178-F8A023D31F90"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.36k:*:*:*:*:*:*:*","matchCriteriaId":"3326A7E5-2852-40D0-B9EA-34C63EE113FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.42d:*:*:*:*:*:*:*","matchCriteriaId":"22928A60-F0B6-4FCC-A0C2-C60E81FAADD8"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.42f:*:*:*:*:*:*:*","matchCriteriaId":"8245059E-DEFD-4421-B166-851A97A5E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.42i:*:*:*:*:*:*:*","matchCriteriaId":"AEC04209-8AA5-4353-AC42-7ACBFBCDAC00"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.42n:*:*:*:*:*:*:*","matchCriteriaId":"280DA292-AA2E-41B6-8B48-3436DE3B47D4"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.42o:*:*:*:*:*:*:*","matchCriteriaId":"49235342-7700-4AEA-B41A-4E2F35456245"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:1.42t:*:*:*:*:*:*:*","matchCriteriaId":"1C6FF2D0-8014-4E3F-840C-721B38357F28"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.46c:*:*:*:*:*:*:*","matchCriteriaId":"A5BAAFFB-8223-448E-BA4F-A27B9E867936"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.46j:*:*:*:*:*:*:*","matchCriteriaId":"3B8695FC-2C14-41DB-954F-C0CD99C69F31"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.48c:*:*:*:*:*:*:*","matchCriteriaId":"A10F5132-9F28-4ACA-A712-AFE6EF37BA15"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.48d:*:*:*:*:*:*:*","matchCriteriaId":"E5A70C2C-3691-457D-9663-29DC41E15059"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.48g:*:*:*:*:*:*:*","matchCriteriaId":"1E934753-B5DB-4FD2-8145-F3C48B4D8E3F"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.48l:*:*:*:*:*:*:*","matchCriteriaId":"D14E87B9-E5CE-4D32-85B3-F525D78AC9EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:advanced_management_module_firmware:2.48n:*:*:*:*:*:*:*","matchCriteriaId":"F8E2B205-B61A-473C-9E41-5E65B9B99E66"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8720:*:*:*:*:*","matchCriteriaId":"A7C6F823-C727-45DA-A623-3F95C92CFE76"},{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:bladecenter:t:*:8730:*:*:*:*:*","matchCriteriaId":"9B853206-C826-4215-9A56-8CAF9D018603"}]}]}],"references":[{"url":"ftp://download2.boulder.ibm.com/ecc/sar/CMA/XSA/00pj6/0/ibm_fw_amm_bbet50g_anyos_noarch.chg","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36970","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3188","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://download2.boulder.ibm.com/ecc/sar/CMA/XSA/00pj6/0/ibm_fw_amm_bbet50g_anyos_noarch.chg","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/36970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3936","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T16:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555."},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix Online Plug-in para Windows 11.0.x en versiones anteriores a la 11.0.150 y 11.x en versiones anteriores a la 11.2, Online Plug-in para Mac en versiones anteriores a la 11.0, Receiver para iPhone en versiones anteriores a la 1.0.3, y cliente ICA Java, Mac, UNIX, y Windows para XenApp y XenDesktop permite a atacantes remotos hacerse pasar por el servidor SSL/TLS y eludir la autenticación mediante un certificado manipulado, una vulnerabilidad diferente a CVE-2009-3555."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_mac:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0","matchCriteriaId":"37D7F410-F5F1-45C7-B94A-C686DAD3A772"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_windows:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2","matchCriteriaId":"23248B20-806F-4E90-B100-3F1DA30A00F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_windows:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D89732A8-CD0E-4F6D-9CAE-293263DF64D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_windows:11.1:*:*:*:*:*:*:*","matchCriteriaId":"B27EE2C0-698D-49C6-88C5-EB9F9536E3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:receiver_for_iphone:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"93B95DE7-F3AE-4B41-966E-0F56834228A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX123248","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37073","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023168","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54213","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX123248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3937","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing \"ancillary data.\""},{"lang":"es","value":"Fallo de memoria en Solaris TCP sockets en Sun OpenSolaris snv_106 a snv_126 permite a usuarios locales provocar una denegación de servicio (consumo de memoria del kernel) mediante vectores no especificados que involucran el procesamiento tcp_sendmsg de \"datos auxiliares\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:*:*:*:*:*:*","matchCriteriaId":"A843E5E4-E53E-484B-8A86-14DD2DA10943"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:*:*:*:*:*:*","matchCriteriaId":"81199A81-CAD2-4375-8C3B-2638D007E4FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:*:*:*:*:*:*","matchCriteriaId":"B2BFC95D-3E59-4EF4-915A-14696072C8A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:*:*:*:*:*:*","matchCriteriaId":"FDE86EE0-418E-4133-8F4B-03761F9EE0DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:*:*:*:*:*:*","matchCriteriaId":"866FF3B9-465E-4120-A2B8-089023BA3539"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:*:*:*:*:*:*","matchCriteriaId":"49D264BD-B5F4-4B50-8A93-F2D71CF8CE27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:*:*:*:*:*:*","matchCriteriaId":"7CF2D6FB-87CF-436D-9B45-FA83F084220D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:*:*:*:*:*:*","matchCriteriaId":"542FFD48-9906-4409-8A5B-A749FED207AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:*:*:*:*:*:*","matchCriteriaId":"270BD07B-FA0D-486E-A7C7-9BACF13F0BC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:*:*:*:*:*:*","matchCriteriaId":"7AC90882-18E3-4634-B76C-4B438BF703A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:*:*:*:*:*:*","matchCriteriaId":"07D0C227-0AB1-4368-B1B5-E5711CD76BAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:*:*:*:*:*:*","matchCriteriaId":"9E254E8E-8174-4DB2-AE6F-99733777E684"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:*:*:*:*:*:*","matchCriteriaId":"B1FDE7F1-5EE4-4059-962C-19578EACE613"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:*:*:*:*:*:*","matchCriteriaId":"B37FAC5F-7C26-4326-B294-FC4EF89DFF24"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:*:*:*:*:*:*","matchCriteriaId":"D4CC63C2-6030-4CE0-B119-9BA7F8F99112"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:*:*:*:*:*:*","matchCriteriaId":"ED73BE2C-8657-4377-9C4F-9177F4DE3DE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:*:*:*:*:*:*","matchCriteriaId":"3B0BA77C-64A0-4102-A510-8DE6C7ED119E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:*:*:*:*:*:*","matchCriteriaId":"57C0E0C9-7E78-414F-B59A-979C2A1F020F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:*:*:*:*:*:*","matchCriteriaId":"7A840894-FD5C-457F-AB03-243C4BEC0463"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_125:*:*:*:*:*:*:*","matchCriteriaId":"1B9D018D-64DB-44F6-A60B-5B7D07718324"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_126:*:*:*:*:*:*:*","matchCriteriaId":"164765D9-8D3E-4392-911C-4A176A6E648B"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36992","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023162","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3938","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T16:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file."},{"lang":"es","value":"Desbordamiento de búfer en la función ABWOutputDev::endWord en poppler/ABWOutputDev.cc en Poppler (alias libpoppler) 0.10.6, 0.12.0 y posiblemente otras versiones, tal como se usa en la utilidad Abiword pdftoabw, permite a atacantes remotos asistidos por el usuario provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante un fichero PDF manipulado."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of poppler as shipped with Red Hat Enterprise Linux 5.\n","lastModified":"2009-11-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"7E4427C5-DBF0-4EF9-8B7A-61D56C14E3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:poppler:poppler:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"14D812D5-BC8B-4907-AA70-F8D7F982A8DD"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534680","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.freedesktop.org/attachment.cgi?id=30599&action=edit","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=23074","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37333","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36976","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3227","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54215","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.freedesktop.org/attachment.cgi?id=30599&action=edit","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugs.freedesktop.org/show_bug.cgi?id=23074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3939","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.000","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file."},{"lang":"es","value":"El fichero poll_mode_io para el controlador megaraid_sas en el kernel de Linux v2.6.31.6 y anteriores tiene permisos de escritura para todos, permitiendo a usuarios locales cambiar el modo de E/S del dispositivo modificando este fichero."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 3, as it does not implement the sysfs file system (&quot;/sys/&quot;), through which poll_mode_io file is exposed by the megaraid_sas driver.\n\nIssue was addressed in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0076.html , https://rhn.redhat.com/errata/RHSA-2010-0046.html and https://rhn.redhat.com/errata/RHSA-2009-1635.html respectively.","lastModified":"2010-02-04T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.6","matchCriteriaId":"8373D74A-0480-4E80-9758-1F35F4904C7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:5:*:*:*:*:*:*:*","matchCriteriaId":"C029C71B-EB6F-4A45-B138-FE140E100B2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:5.4:*:*:*:*:*:*:*","matchCriteriaId":"4DD6917D-FE03-487F-9F2C-A79B5FCFBC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_application_enablement_services:5.2:*:*:*:*:*:*:*","matchCriteriaId":"6FE95C9A-4304-48C7-86B9-2E8217DF8872"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_application_enablement_services:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9FD6CD5-6401-48F2-9A12-0C999D9EBF23"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_communication_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"B6567360-D041-4C5A-A9DF-39223E5FF895"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_session_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C5F5625-1601-4EFC-B710-58B145F10708"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_session_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CB6AB5D8-6E22-483E-A91E-0880FF9A2C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_sip_enablement_services:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CA109EBE-560A-498E-A369-D68B09AFD24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"44D546F5-2751-41F0-9442-8F1EB904E294"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E7C82ABC-54B9-454C-A9F9-2DBFF1D62364"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:aura_system_platform:1.1:*:*:*:*:*:*:*","matchCriteriaId":"76E0FA7D-9F1B-4B1D-8B2D-85D2ED6DC00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:voice_portal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D5795B04-82E1-4289-BC45-02AEFA0C28F8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*","matchCriteriaId":"CC6C1408-671A-4436-A825-12170CFB5C9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*","matchCriteriaId":"25CBACD3-AFB7-410D-927F-0C1FF477D396"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://osvdb.org/60201","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38276","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38492","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38779","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-1996","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/1","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/37019","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526068","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/60201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/38779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-1996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/37019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3940","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en Guest Additions en Sun xVM VirtualBox v1.6.x y v2.0.x anteriores a v2.0.12, v2.1.x, y v2.2.x, y en Sun VirtualBox versiones anteriores a v3.0.10, permite a usuarios del sistema operativo huésped provocar una denegación de servicio (consumo de memoria) en el sistema operativo huésped mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"6C5E9DDF-5769-40FE-8E4E-9CBA1661EE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6456F012-E72B-4622-BFD1-F95FEDA6E446"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"0003E19C-EBAA-488F-B3F0-E2CFB283FBDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6BE04EDC-3616-447B-9BED-4A5EE6A470D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E59E2578-5FCB-4829-A179-7865BB2D8D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DEB28343-0302-4490-AD8C-C0C5F9B0527B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44193C48-D911-457D-B152-DE36E37AC6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D151779F-5C0C-449E-BBEE-32830C03B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:virtualbox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6C043BB9-6FC5-427E-A7E3-B1D883E918A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:*:2.1:*:*:*:*:*:*","matchCriteriaId":"2C14FA60-BC7D-4D12-9DC5-0612BD927262"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:1.6:*:*:*:*:*:*:*","matchCriteriaId":"76EE095C-735F-4E7D-8912-31AAFD547979"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1D7A5D6B-F6F7-470F-8356-D2E1674CA46C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F8A055A1-5783-4AE1-88CD-1FA2C395B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"2F0E82DA-18A2-4A46-A04D-F0CBDD4E8CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"004F2896-4A98-4385-982D-D75351ABEEE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F96D440E-4639-4DF2-BEB1-BAD33A7E80CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6C930392-136A-4C50-966E-D114C3DFB22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"14D22D83-221C-4E88-BBB2-5FF7FD1DEDA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"594F0AA8-5455-4E1C-9483-4FECFDB378B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"49E8FB90-1164-490A-A9DB-16415453C985"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5900799-F465-4071-8E84-6126357971D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"87877B75-41B5-4CF4-B3D1-D52EAF957675"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:xvm_virtualbox:2.2:*:*:*:*:*:*:*","matchCriteriaId":"95639D96-67DE-4225-A0FC-3AAB6800C842"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38420","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3941","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"Martin Lambers mpop versiones anteriores a v1.4.19, cuando usa OpenSSL, no maneja adecuadamente un carácter '\\0' en un nombre de dominio (1) en el campo nombre común del sujeto o (2) en el campo nombre alternativo del sujeto de un certificado X.509, permitiendo que atacantes de hombre en medio (man-in-the-middle) suplantar a servidores SSL de su elección mediante un certificado modificado emitido por una Autoridad de Certificación legítima, estando relacionado con el CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.18","matchCriteriaId":"2A334487-BFC7-4BD3-A41C-B4A7A03FD688"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F3D33CFC-B3AD-447D-9ED7-B9EB56F37963"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C1101564-6C93-4116-8286-423ECF1CE1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"52F89E31-4C4F-4596-8BDB-DD6AA202A66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"13B423FE-A656-4E05-8E56-ADA3BB25055C"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A4533F4B-B737-4AE8-8BE4-52F18AC81CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"73161FA8-6BDB-480A-959A-FE75A0A094A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D831D74-1D1A-43BF-989C-CA2541B34F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EA886F91-162A-4272-A854-E4C2ABA1880F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C73DAC9F-AF34-412B-8483-BD642E9AD7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2E5F1142-E4BC-4AC4-AB85-33A5AC35D7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"03C05F7D-BA83-44D4-8E47-45CF339EFB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9A312B4E-F43D-4649-A8F8-811657D5D6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E9BD996-6003-4ACA-A661-810018EF750D"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"15117F01-79FF-47A7-8D1E-BA1F8E96A1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FB4C433A-9796-4C11-8B3F-DD93191B200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C63DB55C-3454-4E28-9BE3-6E2AF7F0C2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DBAF238F-6E35-4C79-BA57-9DFBCE1F32DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"09FB5DCD-94E2-469E-83E8-E7489DFECF28"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"813E3390-A91A-440E-947F-98777CF0C008"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"83BAB091-5DF5-48D1-B12F-FAA7AE304BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"832106E3-7743-412D-B92E-CF8F4AFD630E"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"29EA91C5-EAD8-476C-A198-3BB9D11DF47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"00E17910-D6CC-4AE3-B119-90798F441338"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"7DE2045F-C0EB-433F-8D44-7B257AF1A976"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BD03AAD4-18CE-4109-B63E-F0447AD5D57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F60C96B3-834A-467E-B823-56F95AC53394"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2BC5660E-D2FB-4D73-8D45-BC92388CFA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EF5CED20-DF1C-4172-ABC4-BB8C88A59D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2B75E57F-D5A5-4925-95A1-7680D9A186C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E71A841C-1ED3-4634-8BA4-5F0A50CB6636"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CE437EFD-6F1F-4946-91A7-E198DDC70693"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"94F9FEC8-15D0-4327-975F-359A595A10B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6AD2F2D6-BD1A-4413-9499-B45352AE5D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2011EBF2-DAF7-4F9A-861E-8C7CB01E9620"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"894E6D56-3A5F-49DC-B99D-2148B548335B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6DF077CF-E698-4506-8AD8-B339166298BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"6D879455-E7E1-448C-A425-E9C576540E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"68D38E74-A95C-4009-AEBD-3575A98824AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3B8B0B5D-9932-4924-B0C9-C10B8EA46F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"A0432B82-D516-4771-9D2E-684CA81A5680"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F6A767CC-D28E-497E-9CB5-DE930304C7C7"}]}]}],"references":[{"url":"http://mpop.sourceforge.net/news.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3225","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://mpop.sourceforge.net/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3942","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.077","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"Martin Lambers msmtp versiones anteriores a v1.4.19, cuando usa OpenSSL, no maneja adecuadamente un carácter '\\0' en un nombre de dominio (1) en el campo nombre común del sujeto o (2) en el campo nombre alternativo del sujeto de un certificado X.509, permitiendo que atacantes de hombre en medio (man-in-the-middle) suplantar a servidores SSL de su elección mediante un certificado modificado emitido por una Autoridad de Certificación legítima, estando relacionado con el CVE-2009-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.18","matchCriteriaId":"5D01B530-981C-4EF5-89E6-538ADA25D2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"99E4CB87-6453-43EA-B969-1D26F047B868"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C28522F5-40C1-4CB2-8A21-FFF9C75B6C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D297F70-E8FF-45BA-A299-1B24D0616855"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ABEE80E9-C4FF-4AB3-8DFA-2468B01861E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1AAB4EC4-2035-4421-90ED-772E01BC6725"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"448B136B-7FCB-444F-A8AE-89DBA1308EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E3F98F29-131F-49E6-A819-89AB1CDFB8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A9C11A-A8FC-4132-BE35-1A55A869D962"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B6304EC0-8977-4164-9355-E419B2BDFE12"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F3D69119-DB27-4439-A4A1-20B22226D3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"86A0B3AA-EDED-4BC9-9516-23A1870C68FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FD544309-CACE-4D0E-8921-B972988939DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4EDDDAAA-FE6D-4E3D-B4BA-2FDEADAE8CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9A71A198-495A-4BA1-A66F-734E49126710"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6806D84A-C775-46CC-BD67-1FB70ACD7B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"9267E3FC-3B89-4E9D-924E-401FA7B1872C"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"7F49177D-4F29-40DA-AAB4-39B71BDA8210"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"C241047D-1A6C-4E49-968D-AF08881B57D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"71F0F562-4906-415B-87CE-FA17126AC186"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"030746E6-A9E2-4A3C-B51F-6920B558A123"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2D4E425C-24CC-4D64-9500-AA37120BDB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81797111-EE62-49EB-8804-BE493A5CCB2B"},{"vulnerable":false,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E3EA2E59-C745-4926-B6A4-FA7512EE9B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DB35C639-4D53-4A36-A567-F0742DE8F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C269D45F-7E20-4E85-8EC2-D05155750CE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"48125BDD-B875-4650-8B1D-D28C5F04208F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1C2AAA19-7026-4EF1-85A4-87D9B08D708B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B4A3BE86-51CA-4DFC-809B-D38075DC052E"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"390C2B54-479E-4DE3-9816-E60251455E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"77FB50D8-DBE6-4547-A643-3F3749F98716"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96C296F7-053B-4C68-AD20-9F2A716F9E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B674C7D5-9F59-4604-8469-FAA003AE7F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"91F59DE1-329E-42E1-84CC-8CE5B032781D"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"42FEED21-B6B0-4CE5-BE04-B284DEED46D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2ABFEA78-CE3C-4795-93C8-87F1EDECED1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"BAA30198-E58E-408B-96CB-52417FC51CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"E9C27411-6B62-4B1B-8E87-2653F5712E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"237AF741-3C2A-4F55-9286-CF6FF4977557"},{"vulnerable":false,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D92E239B-8BD7-4DA7-BC86-4F64638C5203"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"2AF8F0CF-A59D-4D0C-9414-BEE4B9714EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"11215AD3-0AB1-47B1-B55F-DC6F40DB4F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"B5B2D527-F99B-45A6-BF7B-D04CC28672BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"3580054B-7A34-4CE3-8B43-D398858E83D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"1EF98D9C-A072-453D-B0C6-600DF595E3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"21BAABE8-97D9-49AE-A9F6-A1F49E8928BB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"cve@mitre.org"},{"url":"http://msmtp.sourceforge.net/news.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://msmtp.sourceforge.net/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3943","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property."},{"lang":"es","value":"Microsoft Internet Explorer v6 hasta v6.0.2900.2180 y v7 hasta v7.0.6000.16711 permite a atacantes remotos provocar una denegación de servicio (bloqueo de la aplicación) mediante un bucle JavaScript que configura la página de inicio usando el método \"setHomePage\" y una propiedad DHTML de comportamiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionStartIncluding":"6","versionEndIncluding":"6.0.2900.2180","matchCriteriaId":"1232BF99-E7F5-4852-B8B7-6DA3C158BD56"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.0.6000.16711","matchCriteriaId":"B9ADEE72-541B-42CB-BAF8-3071F653DA3E"}]}]}],"references":[{"url":"http://websecurity.com.ua/3658/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507731/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507760/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://websecurity.com.ua/3658/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507731/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/507760/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-3944","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property."},{"lang":"es","value":"Research In Motion (RIM) BlackBerry Browser en BlackBerry 8800 permite a atacantes remotos provocar una denegación de servicio (bloqueo de la aplicación) mediante un bucle JavaScript que configura la página de inicio usando el método \"setHomePage\" y una propiedad DHTML de comportamiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_browser:*:*:*:*:*:*:*:*","matchCriteriaId":"5E93E69D-8578-43FF-A56D-6DADE0291905"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rim:blackberry_8800:*:*:*:*:*:*:*:*","matchCriteriaId":"33AAAF6B-B7AB-4BBB-B23C-95F54555706C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507759/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507759/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3945","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T20:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el Front-End Editor del componente com_content en Joomla! versiones anteriores a v1.5.15 permite a usuarios autenticados remotamente, con privilegios \"Author\", reemplazar los artículos de un usuario de su elección mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.14","matchCriteriaId":"CF58B3CE-F953-487D-A1E9-E484A4F37E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"65184BFE-A070-4099-B672-3A238E9F83EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"920129E4-F979-49B5-9B96-62BCBC3954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A90A8900-E441-46C4-A725-BA312358760E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E74E276C-C62D-4828-89CB-80F526FEAEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E4E48636-9EDB-49BB-ABC8-D79864BFCB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"466E5E84-4C69-49F2-83DA-FC86202DB7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"CB968DF7-4A0B-474C-8639-06976837E03D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"1B6BE010-649F-4E48-97DC-DDF7511406D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*","matchCriteriaId":"2B8C4094-D028-4A55-B523-C90F5A4C9D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"69FA6550-2135-4D41-B592-433FFFDEE180"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*","matchCriteriaId":"C73D78E0-BF24-433B-9F1B-03FD956C5779"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/305-20091103-core-front-end-editor-issue-.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/59801","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54161","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/305-20091103-core-front-end-editor-issue-.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/59801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3946","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T20:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request."},{"lang":"es","value":"Joomla! versiones anteriores a v1.5.15 permite a atacantes remotos leer el fichero XML de una extensión, y de ese modo obtener el número de versión de la extensión, mediante una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.14","matchCriteriaId":"CF58B3CE-F953-487D-A1E9-E484A4F37E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"65184BFE-A070-4099-B672-3A238E9F83EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"920129E4-F979-49B5-9B96-62BCBC3954D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1313BEAD-C0C0-4D8C-A3AA-F514BA6A1C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A90A8900-E441-46C4-A725-BA312358760E"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"E74E276C-C62D-4828-89CB-80F526FEAEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F370EA7F-3719-4D35-A7FD-C7AD1BD709D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"E4E48636-9EDB-49BB-ABC8-D79864BFCB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"580712F4-E97C-4E3F-BF9D-3445BEB4C3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"466E5E84-4C69-49F2-83DA-FC86202DB7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"CB968DF7-4A0B-474C-8639-06976837E03D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"1B6BE010-649F-4E48-97DC-DDF7511406D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.11:*:*:*:*:*:*:*","matchCriteriaId":"2B8C4094-D028-4A55-B523-C90F5A4C9D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.12:*:*:*:*:*:*:*","matchCriteriaId":"69FA6550-2135-4D41-B592-433FFFDEE180"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomla:joomla\\!:1.5.13:*:*:*:*:*:*:*","matchCriteriaId":"C73D78E0-BF24-433B-9F1B-03FD956C5779"}]}]}],"references":[{"url":"http://developer.joomla.org/security/news/306-20091103-core-xml-file-read-issue.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59800","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54160","source":"cve@mitre.org"},{"url":"http://developer.joomla.org/security/news/306-20091103-core-xml-file-read-issue.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/59800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3947","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T20:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device reboot) or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters."},{"lang":"es","value":"Desbordamiento de búfer en el servicio FTP en Tandberg MXP vF7.0 permite a atacantes remotos provocar una denegación de servicio (parada del proceso o reinicio del dispositivo) o posiblemente ejecutar código de su elección mediante un comando USER largo, como se ha demostrado por un commando finalizado con múltiples caracteres de espacio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tandberg:tandberg_mxp_endpoints:f7.0:*:*:*:*:*:*:*","matchCriteriaId":"C1AC42C5-F12F-424D-9D75-E9D340BBBA55"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9131","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51673","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3948","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T20:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and application crash) via a long string at the end of a .wav file."},{"lang":"es","value":"JetAudio v7.5.3 COWON Media Center, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de una cadena larga al final de un archivo .wav."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cowonamerica:cowon_media_center-jetaudio:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"337135E6-FBF3-4DE6-B34E-6913FEBD11D1"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51697","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3949","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T20:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters."},{"lang":"es","value":"cp/profile.php en VivaPrograms Infinity v2.0.5 y anteriores no requieren la autenticación como administrador para la acción \"donewauthor\", lo que permite a atacantes remotos crear cuentas de administrador a través de los parámetro \"name\", \"password\" y \"conf_password\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vivaprograms:infinity_script:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"21AD8E79-544D-46A6-AE53-803B4BD1C037"},{"vulnerable":true,"criteria":"cpe:2.3:a:vivaprograms:infinity_script:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73DD7092-FAC8-442F-98CF-AAD42CC32E68"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9159","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51779","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3950","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T20:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to newprofile.html; the (2) firstname, (3) lastname, and (4) company parameters to signup/signup.html; and the (5) firstname, (6) lastname, and (7) address[0].street1 parameters to contact.html."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Bractus SunTrack, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros: (1) \"title\" a newprofile.html; (2) \"firstname\", (3) \"lastname\" y (4) \"company\" a signup/signup.html; y (5) \"firstname\", (6) \"lastname\" y (7) address[0].street1 a contact.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bract:suntrack:*:*:*:*:*:*:*:*","matchCriteriaId":"E69619C7-D2B2-4B52-9BE2-7E7CF529DA6F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507655/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507655/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3951","sourceIdentifier":"psirt@adobe.com","published":"2009-12-10T19:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820."},{"lang":"es","value":"Vulnerabilidad sin especificar en el control ActiveX de Flash Player en Adobe Flash Player en versiones anteriores a v10.0.42.34 y Adobe AIR anteriores a v1.5.3 en Windows permite a atacantes remotos obtener los nombres de ficheros locales a través de vectores desconocidos. NOTA: Esta vulnerabilidad se produce debido a un arreglo incompleto de CVE-2009-4820."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.2","matchCriteriaId":"0A0CABFD-DFD2-4FF1-AC2A-712D9831AE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*","matchCriteriaId":"97F0F4B8-A8AE-4AF2-8991-36DF5478AC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F180F403-7032-497F-955B-0CB1D5CA3A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*","matchCriteriaId":"51905ABB-C598-415F-9B6C-26963129352A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16E50A13-564F-4CE7-8335-B99B83AA0B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.32.18","matchCriteriaId":"6EBD1150-4225-46AC-AF3A-A981FF80EB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DDFF4A51-C936-4C5B-8276-FD454C9E4F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5ECC9D7-3386-4FEA-9218-91E31FF90F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*","matchCriteriaId":"F0E93289-6EE0-401A-958D-F59D2CDAE2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FA3E556-BF8F-4D30-8DE5-09DA3FD8D5C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*","matchCriteriaId":"8E895107-ED8A-4F88-87C3-935EAE299C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4007D621-A0BC-4927-82A7-10D73802BCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"641776AE-5408-439E-8290-DD9324771874"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*","matchCriteriaId":"138A932A-D775-46A2-86EC-3C03C96884C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:pro:*:*:*:*:*","matchCriteriaId":"9D344A18-4D7B-4B9C-8A8D-AE765FCA32C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8:*:professional:*:*:*:*:*","matchCriteriaId":"1DAAAEA6-ED8F-496B-81B5-E8D3E3176287"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D12E3957-D7B2-4F3B-BB64-8B50B8958DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*","matchCriteriaId":"F648661E-BA18-41F9-A0A7-F9D5D7E2056B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*","matchCriteriaId":"A88BDD68-3EDD-49F4-B656-EB03BF849664"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*","matchCriteriaId":"32912721-F750-4C20-B999-E728F7D3A85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*","matchCriteriaId":"A95FA639-346C-491C-81A8-6C2A7B01AA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*","matchCriteriaId":"C9F1E5AB-DEFA-42FC-A299-C8EEB778F9C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*","matchCriteriaId":"D50BF190-2629-49A8-A377-4723C93FFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*","matchCriteriaId":"BDD0A103-6D00-4D3D-9570-2DF74B6FE294"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*","matchCriteriaId":"33AC4365-576C-487A-89C5-197A26D416C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*","matchCriteriaId":"FE848097-01E6-4C9B-9593-282D55CC77D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*","matchCriteriaId":"08E4028B-72E7-4E4A-AD0F-645F5AACAA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*","matchCriteriaId":"63313ADA-3C52-47C8-9745-6BF6AEF0F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*","matchCriteriaId":"BA646396-7C10-45A0-89A9-C75C5D8AFB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*","matchCriteriaId":"3555324F-40F8-4BF4-BE5F-52A1E22B3AFA"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"psirt@adobe.com"},{"url":"http://osvdb.org/60891","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/37584","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/38241","source":"psirt@adobe.com"},{"url":"http://securitytracker.com/id?1023307","source":"psirt@adobe.com","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4004","source":"psirt@adobe.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37199","source":"psirt@adobe.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"psirt@adobe.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"psirt@adobe.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"psirt@adobe.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54637","source":"psirt@adobe.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6663","source":"psirt@adobe.com"},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb09-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-343A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3961","sourceIdentifier":"cve@mitre.org","published":"2009-11-17T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an \"incorrect regexp.\" NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en user.php en Super Serious Stats (también conocido como superseriousstats) anteriores a v1.1.2p1  permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través del parámetro \"uid\", relacionado con \"incorrect regexp.\". NOTA: Algunos de los detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.2","matchCriteriaId":"E67DC620-75B6-4432-871D-312885277899"},{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"32A6FFBE-936F-497E-A057-964937F0A8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D1FB0BA3-7D35-430B-AC9C-82A6770C7AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"0BADEA01-DA2C-4E6F-81BF-0C5D861AE6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"8718D0DA-9803-4265-8848-54A00055E671"},{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1D07DAB5-39E0-4758-BD42-7DB4C71D8DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jos_de_ruijter:superseriousstats:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E23D3D44-6423-4C3E-8E96-932786D4A610"}]}]}],"references":[{"url":"http://code.google.com/p/superseriousstats/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37316","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://code.google.com/p/superseriousstats/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3962","sourceIdentifier":"cve@mitre.org","published":"2009-11-17T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote attackers to cause a denial of service (reboot) via a %0d%0a sequence in the page parameter to the xslt program on TCP port 50001, a related issue to CVE-2006-4523."},{"lang":"es","value":"La interfaz de administración en 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, y 2701HG-T con software anterior a la v5.29.5 permite a atacantes remotos producir una denegación de servicio (reinicio) a través de la secuencia \"%0d%0a\" en el parámetro \"page\", al programa xlst en el puerto TCP 50001, vulnerabilidad relacionada con CVE-2009-4523."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1700hg:*:*:*:*:*:*:*:*","matchCriteriaId":"9455FA0E-50CB-4A96-8BEF-41488A5627D0"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1701hg:*:*:*:*:*:*:*:*","matchCriteriaId":"49B9594A-5C1A-416F-9C52-DD82A224A016"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1800hw:*:*:*:*:*:*:*:*","matchCriteriaId":"778314C3-A6E7-43BB-8302-5219C083F3E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2071:*:*:*:*:*:*:*:*","matchCriteriaId":"53C0CFBE-A6C8-4A93-93BD-3851F92321E9"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2700hg:*:*:*:*:*:*:*:*","matchCriteriaId":"CF0B7120-0BDA-4790-A176-2E4AD2C4C9D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2701hg-t:*:*:*:*:*:*:*:*","matchCriteriaId":"5A0FF925-91B0-45C2-B9C8-BE5D15A36BCC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1700hg:*:*:*:*:*:*:*:*","versionEndIncluding":"5.29.51","matchCriteriaId":"C38D4061-58AB-4399-A6C6-75F4B4669D14"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1701hg:*:*:*:*:*:*:*:*","versionEndIncluding":"5.29.51","matchCriteriaId":"07B3B7B0-F2B2-4BEA-AB0A-6F79CB1562FE"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:1800hw:*:*:*:*:*:*:*:*","versionEndIncluding":"5.29.51","matchCriteriaId":"EECEF960-F6E0-42BD-AC72-3A5AC767F3C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2071:*:*:*:*:*:*:*:*","versionEndIncluding":"5.29.51","matchCriteriaId":"2D8F0AEE-2EBB-46C2-B89E-2C2E4B799D88"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2700hg:*:*:*:*:*:*:*:*","versionEndIncluding":"5.29.51","matchCriteriaId":"8959726C-017F-4C7E-A43A-F8443C934554"},{"vulnerable":true,"criteria":"cpe:2.3:h:2wire:2701hg-t:*:*:*:*:*:*:*:*","versionEndIncluding":"5.29.51","matchCriteriaId":"7F35F1A6-3BE8-418A-B687-EA7472FBDB4A"}]}]}],"references":[{"url":"http://webvuln.com/advisories/2wire.remote.denial.of.service.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507587/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023116","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://webvuln.com/advisories/2wire.remote.denial.of.service.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507587/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3963","sourceIdentifier":"cve@mitre.org","published":"2009-11-17T18:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en XOOPS anterior a v2.4.0 Final, tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.3","matchCriteriaId":"FECD62AA-E767-4B7C-9CED-92251DCB8D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D649637-9772-4B71-B219-DD505CDB3549"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33E91D0D-42F6-4FAC-BD04-AA4D77C6DAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"881DDA3C-4D95-471F-95BA-6C4629B3CB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E235D928-E2D9-46D3-B95F-C4AF556D3C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5F0B5583-8489-4AF9-AD04-4A56AC244A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0C32DECD-1E28-4CC1-812B-E8D54B5703EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9AD25BC1-E435-4691-B42A-0D98D80F0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1F58A3E7-4C21-48FD-AA26-7CCE85BAE887"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"26950415-06AF-4910-A881-121EA0B43058"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"89CFFAD2-F511-431C-BF24-08CA810B4645"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"675A7068-CE9E-412A-8159-2A3820D6272E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"FC857372-A76D-4F3D-9FEE-6086A0AB002C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AA2D117B-2800-462A-BA58-E71AED33EEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"08729570-512B-4B7E-A055-B8E312F41E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"476872A3-838B-40B7-B180-2FE018EA9BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.12_jp:*:*:*:*:*:*:*","matchCriteriaId":"98E9D3E8-7DBC-4C38-A874-EFE49B1FA4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"05BD8530-64CA-4528-BD17-DCF685DC6E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7292A887-F03B-4B9A-8C5D-3FC302F329D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"6818F85B-6CFD-4B0D-9CA4-4721AEC799B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0C60358F-0A06-4148-B988-667ABB8C9D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.17.1:rc1:*:*:*:*:*:*","matchCriteriaId":"832CD393-4FE8-4745-8652-4BFB7B2C0C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.17_1:*:*:*:*:*:*:*","matchCriteriaId":"BC97F019-EAC4-4490-933F-3F9537CBA142"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"541822E2-B233-4128-902A-3A3ACFCC1EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"E8CACFC0-2538-4D62-9061-2FBCF4C7AD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"713C2C5D-E858-45CD-9FE5-2940528749F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"7766C5D4-0A62-4E5B-91D5-CA4FB147846B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5D1E3E73-430E-45D9-A4B9-60EE24C62EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"2507D4B9-B505-4DF0-B63B-47085F95376F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36955","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=5064","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xoops.org/modules/news/article.php?storyid=5064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3964","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the testimID parameter in a display action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente NinjaMonials (com_ninjacentral) v1.1.0 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"testimID\" en una acción display a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ninjaforge:com_ninjamonials:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"20B77137-BE95-4298-A836-C51D1388FC07"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36122","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-3965","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en rating.php en New 5 star Rating v1.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"det\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maniacomputer:new5starrating:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EDC7D958-6F57-408B-8B3B-BB5D8B069A86"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9499","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3966","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true."},{"lang":"es","value":"Arcade Trade Script v1.0, permite a atacantes remotos evitar la autenticación y obtener acceso como administradores estableciendo la cookie adminLoggedIn a \"true\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadetradescript:arcade_trade_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54D2BA71-8198-40C5-91D6-08D73874E3FB"}]}]}],"references":[{"url":"http://secunia.com/advisories/36448","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3967","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en browse.php en Ed Charkow SuperCharged Linking, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ed_charkow:supercharged_linking:*:*:*:*:*:*:*:*","matchCriteriaId":"A1CA45AE-5C8F-4EC0-84D8-00E07566D006"}]}]}],"references":[{"url":"http://secunia.com/advisories/36450","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9480","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52693","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3968","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php, (2) cate_id parameter to category.php, (3) id parameter to news.php, and (4) productid parameter to itechd.php. NOTE: the sellers_othersitem.php, classifieds.php, and shop.php vectors are already covered by CVE-2008-3238."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en ITechBids v8.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"user_id\" a feedback.php, (2) \"cate_id\" a category.php, (3) \"id\" a news.php, y (4) \"productid\" a itechd.php. NOTA: los vectores que involucran a sellers_othersitem.php, classifieds.php y shop.php, actualmente están corregidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itechscripts:itechbids:8.0:*:*:*:*:*:*:*","matchCriteriaId":"5FD20260-2D6E-4995-B183-38D04179CAB7"}]}]}],"references":[{"url":"http://secunia.com/advisories/36437","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3969","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Faslo Player  v7.0, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente la ejecución de código de su elección a través de una cadena larga en una archivo de lista de reproducción .m3u."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:faslo:faslo_player:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F1A30378-A699-401B-AE1E-C53E34433861"}]}]}],"references":[{"url":"http://secunia.com/advisories/36444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9487","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3970","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter Script) allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en PHP Dir Submit(también conocido como WebsiteSubmitter o Submitter Script), permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través del parámetro \"aid\" en una acción showarticle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpdirsubmit:php_dir_submit:*:*:*:*:*:*:*:*","matchCriteriaId":"F4D4E8BA-785F-4B02-AA66-8010C002EFC1"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9484","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2401","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52709","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3971","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the season parameter in a ladder action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente jTips (com_jtips) v1.0.7 y 1.0.9 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"season\" en una acción lander al index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jtips:com_jtips:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FED1E26E-AACE-432F-9055-F23E2C7AD95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jtips:com_jtips:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D8BD7BCF-6924-44A2-A2D5-7D43F59D03C8"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9504","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36123","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3972","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Q-Proje Siirler Bileseni v1.2(com_siirler) para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"sid\" n una acción sdetay al index.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qproje:com_siirler:1.2:rc:*:*:*:*:*:*","matchCriteriaId":"A6C0863D-901D-426F-AF8D-23091D48E798"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9510","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3973","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Turnkey Arcade Script, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"id\" en una acción browse. Vulnerabilidad distinta de CVE-2008-5629."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkeyarcade:turnkey_arcade_script:*:*:*:*:*:*:*:*","matchCriteriaId":"AC0D7ADA-7FE4-498D-A913-97A3633DD628"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3974","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Invision Power Board (IPB or IP.Board) 3.0.0, 3.0.1, and 3.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) search_term parameter to admin/applications/core/modules_public/search/search.php and (2) aid parameter to admin/applications/core/modules_public/global/lostpass.php.  NOTE: on 20090818, the vendor patched 3.0.2 without changing the version number."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Invision Power Board (IPB or IP.Board) v3.0.0, v3.0.1 y v3.0.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) \"search_term\" a admin/applications/core/modules_public/search/search.php y(2) \"aid\" to admin/applications/core/modules_public/global/lostpass.php. NOTA: en el 18/08/2009, el fabricante parcheó la v3.0.2 sin modificar la versión del producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invisioncommunity:invision_power_board:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FBBD7C1D-B47C-4B37-AE5D-1366B8B4C178"},{"vulnerable":true,"criteria":"cpe:2.3:a:invisioncommunity:invision_power_board:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"35249591-FDF5-48F3-904C-4DB85C9D9457"},{"vulnerable":true,"criteria":"cpe:2.3:a:invisioncommunity:invision_power_board:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7853C134-A1E1-4366-8BCB-12538BBA6E3F"}]}]}],"references":[{"url":"http://forums.invisionpower.com/topic/291103-invision-power-board-3-0-2-security-update/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2413","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://forums.invisionpower.com/topic/291103-invision-power-board-3-0-2-security-update/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3975","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the gallery_id parameter in a gallery_view action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en Moa Gallery v 1.1.0 y v1.2.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro gallery_id  en una acción a gallery_view."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moagallery:moa:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"55E5FF2C-F1D2-4C0D-BCCE-B25C2EC64405"},{"vulnerable":true,"criteria":"cpe:2.3:a:moagallery:moa:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"26B7D6E8-2485-4348-88C2-59D196533EAE"}]}]}],"references":[{"url":"http://secunia.com/advisories/36449","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9481","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3976","sourceIdentifier":"cve@mitre.org","published":"2009-11-18T23:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message)."},{"lang":"es","value":"Desbordamiento de búfer en Labtam ProFTP v2.9 permite  a los servidores FTP remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección a través de una respuesta larga 220 (también conocido como saludo en la conexión -connection greeting- o Mensaje de bienvenida)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:labtam-inc:proftp:2.9:*:*:*:*:*:*:*","matchCriteriaId":"691831C5-DE7E-4DD9-9742-4F0F8238CA6D"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36128","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2414","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52730","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3977","sourceIdentifier":"cve@mitre.org","published":"2009-11-19T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53 might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via a long string argument to the (1) DisplayName, (2) AddGroup, (3) InstallComponent, or (4) Subscribe method.  NOTE: this issue is not a vulnerability in many environments, because the control is not marked as safe for scripting and would not execute with default Internet Explorer settings."},{"lang":"es","value":"Múltiples desbordamientos de búfer en distintos controles ActiveX en ActiveDom.ocx en HP OpenView Network Node Manager (OV NNM) v7.53, podrían permitir a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o tener otro impacto a través de una cadena con un argumento largo en los métodos 1) DisplayName, (2) AddGroup, (3) InstallComponent, o(4) Subscribe. NOTA: esta cuestión no es una vulnerabilidad en determinados entornos ya que el control no está marcado como \"seguro\" para la ejecución de secuencias de comandos y podría no ejecutarse con las opciones por defecto en Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2009/Nov/199","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/openview_nnm_internaldb_dos","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54377","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2009/Nov/199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/openview_nnm_internaldb_dos","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3978","sourceIdentifier":"cve@mitre.org","published":"2009-11-19T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373."},{"lang":"es","value":"la función nsGIFDecoder2::GifWrite en decoders/gif/nsGIFDecoder2.cpp en libpr0n en Mozilla Firefox anterior a v3.5.5, permite a atacantes remotos provocar una denegación de servicio (deferencia puntero nulo y caída de la aplicación) a través de un archivo GIF animado con un tamaño de imagen grande. Vulnerabilidad distinta de CVE-2009-3373."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"53713AA5-6543-4AD2-8085-9A3CACE8258B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"}]}]}],"references":[{"url":"http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc","source":"cve@mitre.org"},{"url":"http://www.h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=525326","source":"cve@mitre.org"},{"url":"https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=525326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://wiki.mozilla.org/Releases/Firefox_3.5.5/Test_Plan","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-3979","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el motor del navegador de Mozilla Firefox antes de v3.0.16 y 3.5.x antes de 3.5.6, SeaMonkey antes de v2.0.1 y Thunderbird permiten a atacantes remotos provocar una denegación de servicio (por corrupción de la memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023333","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023334","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37361","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=293347","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=457514","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479931","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=494617","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=506267","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515811","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516237","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522374","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546694","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54799","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1673.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=293347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=457514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=479931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=494617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=506267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=515811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=516237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1673.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3980","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el motor del navegador de Mozilla Firefox v3.5.x antes de v3.5.6, SeaMonkey antes de v2.0.1 y Thunderbird permiten a atacantes remotos provocar una denegación de servicio (por corrupción de la memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023333","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023334","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37362","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=470487","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=495875","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54800","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8503","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=470487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=495875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3981","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en el motor del navegador de Mozilla Firefox antes de v3.0.16, SeaMonkey antes de v2.0.1 y Thunderbird permite a atacantes remotos provocar una denegación de servicio (mediante corrupción de la memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023333","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023334","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37363","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=468771","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546713","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54801","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8523","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8584","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=468771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3982","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el motor JavaScript en Mozilla Firefox v3.5.x antes de v3.5.6, SeaMonkey antes de v2.0.1 y Thunderbird permite a atacantes remotos provocar una denegación de servicio (mediante corrupción de memoria y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023333","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023334","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37364","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3558","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=510518","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=513981","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514999","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=524121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54802","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8434","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-65.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=510518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=513981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=524121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3983","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a v3.0.16 y v3.5.x antes de v3.5.6, y SeaMonkey antes de v2.0.1, permite enviar solicitudes autenticadas a aplicaciones arbitrarias a atacantes remotos respondiendo a las credenciales NTLM de un usuario del navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38977","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39001","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023340","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023341","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-68.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37366","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=487872","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546720","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54807","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10047","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8240","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1673.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-68.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-915-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=487872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1673.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3984","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a v3.0.16 y v3.5.x antes de v3.5.6, y SeaMonkey antes de v2.0.1, permite a atacantes remotos suplantar un indicador de SSL para una URL o fichero HTTP URL estableciendo el valor de document.location a una URL https correspondiente a un sitio que responde con un código de estado \"No Content\" (Código 204)  y un cuerpo vacío."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023342","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023343","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-69.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37367","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=521461","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546722","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54806","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8379","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9791","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1673.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-69.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=521461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1673.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3985","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a v3.0.16 y v3.5.x antes de v3.5.6, y SeaMonkey antes de v2.0.1, permite a atacantes remotos asociar contenido falsificado con una URL inválida estableciendo el valor de document.location a esta URL, y a continuación escribiendo secuencias de HTML o scripts web arbitrarios al documento en blanco asociado. Se trata de un asunto relacionado con CVE-2009-2654."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023342","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023343","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-69.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37370","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514232","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546726","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54808","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8480","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9911","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-69.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=514232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3986","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property."},{"lang":"es","value":"Mozilla Firefox en versiones anteriores a v3.0.16 y v3.5.x antes de v3.5.6, y SeaMonkey antes de v2.0.1, permite a atacantes remotos ejecutar código JavaScript arbitrario con privilegios al aprovechar una referencia a una ventana de chrome desde una ventana de contenido, relacionado con la propiedad window.opener."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37881","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023344","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023345","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-70.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37365","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522430","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546724","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54803","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11568","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8489","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-70.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_63_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-873-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-874-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=522430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1674.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3987","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, generates different exception messages depending on whether the referenced COM object is listed in the registry, which allows remote attackers to obtain potentially sensitive information about installed software by making multiple calls that specify the ProgID values of different COM objects."},{"lang":"es","value":"La función GeckoActiveXObject en Mozilla Firefox antes de v3.0.16 y v3.5.x antes de v3.5.6, y SeaMonkey antes de v2.0.1, genera mensajes de excepción diferentes dependiendo de si el objeto COM al que se hace referencia aparece en el registro, lo que permite obtener a atacantes remotos, información potencialmente confidencial sobre el software instalado. Esto se consigue haciendo multiples llamadas que especifican los valores de ProgID de diferentes objetos COM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.15","matchCriteriaId":"D6FE3EA3-5DE1-45B4-A905-BF6769F6B608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.1:*:*:*:*:*:*:*","matchCriteriaId":"23D609B2-F66C-40F1-B7D9-965189F875A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*","matchCriteriaId":"327D8879-0B61-4681-886D-C53BE251E0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"59017F18-6C4E-4803-8A65-DB2A849C3197"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"BF006282-943B-4885-B523-6E575D664059"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.7:*:*:*:*:*:*:*","matchCriteriaId":"26356AB4-1C06-4E16-BAC1-B6A41626A222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.9:*:*:*:*:*:*:*","matchCriteriaId":"5CC11707-DF87-4046-964D-40CF22385A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_.10:*:*:*:*:*:*:*","matchCriteriaId":"F73F1171-E34D-4AC0-BF8B-3DB38AA13EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0_8:*:*:*:*:*:*:*","matchCriteriaId":"0422C796-ECC4-42C1-9580-1CE22A096244"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"D468F2BD-C234-4798-B44B-F791B02346E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.99:*:*:*:*:*:*:*","matchCriteriaId":"E1E99882-786F-455F-BAC4-30716120964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"69DD17EC-99EB-46C1-98E9-16A2EDB8E224"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F35F7EA1-8C98-4A3E-8767-89DBC26A32B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EF89719E-C415-45A3-A1CC-FAFDFCAE3055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1:*:pre:*:*:*:*:*","matchCriteriaId":"8D2EF8EE-86BB-4C61-9406-BCE7CBC4D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0a1pre:*:*:*:*:*:*:*","matchCriteriaId":"7D090A28-8D89-49F1-B020-3915D150FD57"}]}]}],"references":[{"url":"http://secunia.com/advisories/37699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023346","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023347","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-71.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37360","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503451","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546729","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54798","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-71.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=503451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3994","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-08T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the GetUID function in src-IL/src/il_dicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted DICOM file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función GetUID en src-IL/src/il_dicom.c en DevIL v1.7.8 permite a atacantes remotos causar una denegación de servicio (caída aplicación) o ejecutar código a su elección a través de un archivo DICOM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denton_woods:devil:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"3BC86041-E039-49E4-8BC1-F9DCB44325CC"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033806.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033809.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/37507","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37955","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/secunia_research/2009-51/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2908728&group_id=4470&atid=304470","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://sourceforge.net/tracker/download.php?group_id=4470&atid=304470&file_id=353841&aid=2908728","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508217/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37207","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54547","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033806.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033809.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2009-51/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/?func=detail&aid=2908728&group_id=4470&atid=304470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/download.php?group_id=4470&atid=304470&file_id=353841&aid=2908728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508217/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3995","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-18T18:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región heap de la memoria en la biblioteca IN_MOD. DLL (también se conoce como el Plug-in Module Decoder) en Winamp anterior a versión 5.57, y libmikmod versión 3.1.12, podría permitir a los atacantes remotos ejecutar código arbitrario por medio de (1) muestras especialmente diseñadas o (2) definiciones de instrumento diseñadas en un archivo Impulse Tracker. NOTA: algunos de estos datos fueron obtenidos de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.56","matchCriteriaId":"37B0A6CA-7418-459E-A1F8-E107651D46A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.20a:*:*:*:*:*:*:*","matchCriteriaId":"B8C15A30-0EEF-4E58-BF7B-8F9E0814BF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.92:*:*:*:*:*:*:*","matchCriteriaId":"32036D60-6151-4607-B181-9E1C30ABAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.006:*:*:*:*:*:*:*","matchCriteriaId":"D38C91F9-8371-4BE5-8ADD-CC38BC7584E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.90:*:*:*:*:*:*:*","matchCriteriaId":"D0873D86-C669-4FEE-83F1-70B61E1DEE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6:*:*:*:*:*:*:*","matchCriteriaId":"32A6660A-1306-44C0-BA92-D57D0F3ADD03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.9:*:*:*:*:*:*:*","matchCriteriaId":"CE9C4D33-C782-4B10-95C2-050BCD745DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.92:*:*:*:*:*:*:*","matchCriteriaId":"E08D39F3-4FE4-4256-AA33-33C29826B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:-:surround:*:*:*:*:*","matchCriteriaId":"5256EEBD-E142-4DCA-AC2E-97F20E32E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*","matchCriteriaId":"5785692F-D8FA-4D49-8872-CB8B2F173557"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*","matchCriteriaId":"A6E85C52-1974-4F83-89AE-BB29FC897E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*","matchCriteriaId":"CB082F8B-A052-4D82-9D73-2BB35FBA19F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.531:*:*:*:*:*:*:*","matchCriteriaId":"35698C89-EACF-4ABF-BA67-AF59B8BD2928"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.551:*:*:*:*:*:*:*","matchCriteriaId":"AEB33D5A-C2A0-4526-8774-89BA4C079533"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*","matchCriteriaId":"5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_assenat:libmikmod:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"6EB33FA6-1F1A-4255-B468-19036B180C29"}]}]}],"references":[{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/37495","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40799","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-52/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-53/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-55/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:151","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/508526/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/508527/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37374","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/3575","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1957","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-52/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-53/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-55/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508526/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508527/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3996","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-18T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file."},{"lang":"es","value":"Desbordamiento de búfer en la región heap de la memoria en la biblioteca IN_MOD. DLL (también se conoce como el Plug-in Module Decoder) en Winamp anterior a versión 5.57, y libmikmod versión 3.1.12, podría permitir a los atacantes remotos ejecutar código arbitrario por medio de un archivo Ultratracker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.56","matchCriteriaId":"37B0A6CA-7418-459E-A1F8-E107651D46A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.20a:*:*:*:*:*:*:*","matchCriteriaId":"B8C15A30-0EEF-4E58-BF7B-8F9E0814BF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.92:*:*:*:*:*:*:*","matchCriteriaId":"32036D60-6151-4607-B181-9E1C30ABAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.006:*:*:*:*:*:*:*","matchCriteriaId":"D38C91F9-8371-4BE5-8ADD-CC38BC7584E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.90:*:*:*:*:*:*:*","matchCriteriaId":"D0873D86-C669-4FEE-83F1-70B61E1DEE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6:*:*:*:*:*:*:*","matchCriteriaId":"32A6660A-1306-44C0-BA92-D57D0F3ADD03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.9:*:*:*:*:*:*:*","matchCriteriaId":"CE9C4D33-C782-4B10-95C2-050BCD745DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.92:*:*:*:*:*:*:*","matchCriteriaId":"E08D39F3-4FE4-4256-AA33-33C29826B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:-:surround:*:*:*:*:*","matchCriteriaId":"5256EEBD-E142-4DCA-AC2E-97F20E32E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*","matchCriteriaId":"5785692F-D8FA-4D49-8872-CB8B2F173557"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*","matchCriteriaId":"A6E85C52-1974-4F83-89AE-BB29FC897E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*","matchCriteriaId":"CB082F8B-A052-4D82-9D73-2BB35FBA19F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.531:*:*:*:*:*:*:*","matchCriteriaId":"35698C89-EACF-4ABF-BA67-AF59B8BD2928"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.551:*:*:*:*:*:*:*","matchCriteriaId":"AEB33D5A-C2A0-4526-8774-89BA4C079533"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*","matchCriteriaId":"5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_assenat:libmikmod:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"6EB33FA6-1F1A-4255-B468-19036B180C29"}]}]}],"references":[{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/37495","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-55/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-56/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:151","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/archive/1/508528/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37374","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/3575","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-55/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-56/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508528/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3997","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2009-12-18T18:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow."},{"lang":"es","value":"Un desbordamiento de entero en in_mod.dll (complemento 'Module Decoder') de Winamp antes de v5.57, podría permitir a atacantes remotos ejecutar código arbitrario a través de un archivo Oktalyzer que provoca un desbordamiento de búfer basado en montículo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.56","matchCriteriaId":"37B0A6CA-7418-459E-A1F8-E107651D46A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.20a:*:*:*:*:*:*:*","matchCriteriaId":"B8C15A30-0EEF-4E58-BF7B-8F9E0814BF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.92:*:*:*:*:*:*:*","matchCriteriaId":"32036D60-6151-4607-B181-9E1C30ABAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.006:*:*:*:*:*:*:*","matchCriteriaId":"D38C91F9-8371-4BE5-8ADD-CC38BC7584E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.90:*:*:*:*:*:*:*","matchCriteriaId":"D0873D86-C669-4FEE-83F1-70B61E1DEE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6:*:*:*:*:*:*:*","matchCriteriaId":"32A6660A-1306-44C0-BA92-D57D0F3ADD03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.9:*:*:*:*:*:*:*","matchCriteriaId":"CE9C4D33-C782-4B10-95C2-050BCD745DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.92:*:*:*:*:*:*:*","matchCriteriaId":"E08D39F3-4FE4-4256-AA33-33C29826B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:-:surround:*:*:*:*:*","matchCriteriaId":"5256EEBD-E142-4DCA-AC2E-97F20E32E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*","matchCriteriaId":"5785692F-D8FA-4D49-8872-CB8B2F173557"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*","matchCriteriaId":"A6E85C52-1974-4F83-89AE-BB29FC897E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*","matchCriteriaId":"CB082F8B-A052-4D82-9D73-2BB35FBA19F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.531:*:*:*:*:*:*:*","matchCriteriaId":"35698C89-EACF-4ABF-BA67-AF59B8BD2928"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.551:*:*:*:*:*:*:*","matchCriteriaId":"AEB33D5A-C2A0-4526-8774-89BA4C079533"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*","matchCriteriaId":"5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"}]}]}],"references":[{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37495","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-57/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508524/100/0/threaded","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/37374","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2009/3575","source":"PSIRT-CNA@flexerasoftware.com","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15715","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-57/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508524/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4004","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T02:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X86_SETUP_MCE IOCTL request that specifies a large number of Machine Check Exception (MCE) banks."},{"lang":"es","value":"Desbordamiento de búfer en la función kvm_vcpu_ioctl_x86_setup_mce en arch/x86/kvm/x86.c en el subsistema KVM en el kernel de Linux anteriores a v2.6.32-rc7 permite a los usuarios locales causar una denegación de servicio (corrupción de memoria) o posiblemente obtener privilegios a través de una petición KVM_X86_SETUP_MCE IOCTL que especifica un elevado número de bancos de Machine Check Exception (MCE)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as KVM (Kernel-based Virtual Machine) is only supported in Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue because it does not include the change that introduced this buffer overflow vulnerability.","lastModified":"2009-11-20T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.31.14","matchCriteriaId":"BEC4349F-7F67-435F-8909-94648A0E8F90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*","matchCriteriaId":"37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc2:*:*:*:*:*:*","matchCriteriaId":"1C8471AA-44D7-4D19-82B6-C4B999C65F97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc6:*:*:*:*:*:*","matchCriteriaId":"1B6C0A59-556F-4579-9AD2-4ABAE01FE2CF"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9e38c3e01ad242fe2a625354cf065c34b01e3aa","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37357","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37035","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3267","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54302","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9e38c3e01ad242fe2a625354cf065c34b01e3aa","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-4005","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T02:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read."},{"lang":"es","value":"La función collect_rx_frame en drivers/isdn/hisax/hfc_usb.c en el kernel Linux anteriores a v2.6.32-rc7 permite a los atacantes tener un impacto no especificado a través de paquetes manipulados HDLC que llegan sobre ISD y lanzan una lectura de búfer por debajo del límite inferior."}],"vendorComments":[{"organization":"Red Hat","comment":"The Linux kernel as shipped with Red Hat Enterprise Linux 3, 5, and Red Hat Enterprise MRG did not include support for the HiSax ISDN driver for Colognechip HFC-S USB chip, and therefore were not affected by this issue.\n\nIssue was addressed in Red Hat Enterprise Linux 4 via https://rhn.redhat.com/errata/RHSA-2010-0076.html","lastModified":"2010-02-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"34675E8B-0F4F-4404-B86D-A618378BC32C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=286e633ef0ff5bb63c07b4516665da8004966fec","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37720","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38276","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37036","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3267","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54310","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11155","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=286e633ef0ff5bb63c07b4516665da8004966fec","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4006","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T11:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el algoritmo de decodificación TEA en servidor FTP Serv-U  de RhinoSoft versiones 7.0.0.1, 9.0.0.5 y otras versiones anteriores a 9.1.0.0, permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena hexadecimal larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92DB160E-82FF-4360-970B-9DA8F8C80C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"97835C15-FDFA-4483-B8F5-062731E912B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"64D43FB7-6D9C-46AE-9831-6C1A8CF8146E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CE52F36F-FA2F-476C-9F30-5F74DC0F3D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D000B5-04D7-431C-AA2B-BC8D0475A518"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C74BAC99-DF37-4AE4-AF48-69C6E855CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"50FCBA2E-F6EE-4C52-B2DA-5174EF110DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E40D1816-BD4A-4405-8461-07DA732C5CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0CD3CE83-3E37-464C-A511-CDF7E735E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"243CCCC8-9860-4440-9E80-12668270F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BFE008FE-8C8A-4E82-B6EE-93ECBB6A9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E6D6DD1-D98B-46C1-921C-9B045C234377"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"48FC2D20-D01F-43A7-B49D-6FAFB7889C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:7.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6CEF9A0E-7D4E-42CA-AD6F-B6F18CA3CFB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"480EE765-C9AF-495E-810E-4153DC250F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"955439D8-7449-4E82-9EB5-6379002E6D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D6B101C-1058-45D7-A0B9-26C616691F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F7EC7360-6AD8-4689-A927-57881C4BF974"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CF3956BE-95DE-4656-B987-796053032621"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"391013B0-D304-49AF-9FAB-89E9A4E16686"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1A4BCC0E-1F1B-4956-BE5D-67FF788652EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B9637A62-B1A9-41D1-905C-DA200DB5A4DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E7FE5332-0928-4743-832D-D7E9AB86B5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:8.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EF325569-354C-4C70-A6EC-A8BFF1FF2AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"31756C9F-307A-4D1C-8534-5F919EA96C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:9.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"104F5B91-6267-4B19-A791-FBC49E88B7AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:9.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"809D6AB1-13D5-4589-B564-570114A64AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:9.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7E986938-BE98-4D7A-9C92-4ED87968E0A9"}]}]}],"references":[{"url":"http://secunia.com/advisories/37228","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-46/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60427","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507955/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37051","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023199","source":"cve@mitre.org"},{"url":"http://www.serv-u.com/releasenotes/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3277","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54322","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6142","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2009-46/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507955/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4007","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service (daemon crash) via certain game actions involving a wagon and a dual-headed engine."},{"lang":"es","value":"Vulnerabilidad no especificada en la función NormaliseTrainConsist en src/train_cmd.cpp en OpenTTD versiones anteriores a v0.7.5-RC1 permite a atacantes remotos provocar una denegación de servicio (parada del demonio) mediante ciertas acciones del juego relacionadas con un vagón y una máquina con doble motor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.4","matchCriteriaId":"83637063-4C40-411C-B890-F76945A21EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"499EFCAE-9309-4C26-A846-10396CBC628D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6908E44D-3553-430D-B870-266971DC0D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DEBDEF33-48E4-42F4-A725-838DA9191334"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"422B0D3E-503C-4CA6-83B9-4FC58BA898C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"46557BD6-66A0-4892-9468-687A4B63F5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6A186C5E-ACAA-47C8-9FA0-133E9D7F2900"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"24094775-BAF9-4C2E-8C38-86916E22B5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B7CF73FA-09F6-4CE5-932E-BA6B43D66F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"77E87583-5769-4114-94F7-043897DA0FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"718E8C39-A59C-4576-B00D-31A8F0C1762C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"83B1A7D7-D920-41F3-8DE9-D39007DDDEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"327B826F-0F4E-420D-8C93-4551A4B9F190"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FE12C455-5CA0-4581-A3F3-CC8867CCEEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"5DC5E23E-3A14-49B4-A676-AAA96F25D01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"8520357A-27AF-4F48-9095-773F75AAC408"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F65EA852-3C46-47D6-8D6B-DC3546165CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4441B6D-1A48-4DD4-AAAB-FC3B5F00DE4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"985D96E7-0BAE-46DF-A1E2-BD4585C6CABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"73062670-5CB9-4AB8-B45D-21E0D557FD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"876A0BCB-F792-4A21-85AB-5D7D63C3E987"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"97BFB677-F29E-451E-855A-452F8AE0A9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*","matchCriteriaId":"99308463-E1A6-4018-819E-29043BFE8886"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.4.8:rc2:*:*:*:*:*:*","matchCriteriaId":"C9E8C9AB-C303-4FB0-AD1D-C7EE4E93E347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DF5AEFDA-322E-49CD-AE94-82020B9B7AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"6AF50B50-ED50-4BCD-8BAE-9161911A0FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3485EF5-F3DF-4622-92D9-B092F46D5AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"12EB77E6-94D0-4980-B392-59ACABEDB8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*","matchCriteriaId":"3051AB9F-5C64-4D95-805F-8575B5BD39D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*","matchCriteriaId":"494DD878-5854-49DC-A0E1-2904D70582EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BFD07BE5-47E4-47E6-B6A2-CEC2BCC3E383"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"1A5AA729-0198-4644-9810-E501C3C47EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1D5EC680-4686-4C04-957E-B597A1563F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*","matchCriteriaId":"F2C02877-6FE8-4C98-9AB6-5E4D1AC49FFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"89325227-4E0A-49FA-83C1-D0D5E2CEF45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*","matchCriteriaId":"21763CB0-1FFA-4FF4-AA6F-47614E8BEEB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A151DBA9-3A94-431F-BC22-C86E4268263B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*","matchCriteriaId":"7246859E-A6CF-4617-A37A-BF17849D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*","matchCriteriaId":"85FA63BC-2292-49F8-A0E1-34C8497236C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*","matchCriteriaId":"78365F07-CF44-48FD-B048-2F510D147D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2CBAD231-4365-4A5F-9FD8-1EE13F7FC8A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B052159B-4CFF-47DE-A1B7-35C467AD73BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"BDF5228B-B99A-4E4E-A66F-59275A36B28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5E5F1FE7-ADCB-42AD-AB99-0F17AD8E2FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"CD6E4B8D-6C12-4053-A8D2-F64F92AF733A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"9B9BDCD3-85B9-4C17-B625-FC7F62450FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8648A48E-BCF9-4B34-B1FF-16B780C2797D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3B0C66D6-F933-43B1-8BC0-72625E70442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"72070978-F3B9-46D6-A3FD-0932D751AD86"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"5D6483EA-FC98-4367-A34B-795F858815E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"DAE2A501-3F40-4BFD-B600-AD122BB8EFD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openttd:openttd:0.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"D49CDF39-F0F2-4B48-87FC-4F984D439497"}]}]}],"references":[{"url":"http://binaries.openttd.org/releases/0.7.5/changelog.txt","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033754.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033896.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61356","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37984","source":"cve@mitre.org"},{"url":"http://vcs.openttd.org/svn/changeset/18462/trunk/src/train_cmd.cpp","source":"cve@mitre.org"},{"url":"http://www.openttd.org/en/news/112","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/24/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37487","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3645","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://binaries.openttd.org/releases/0.7.5/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033754.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033896.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vcs.openttd.org/svn/changeset/18462/trunk/src/train_cmd.cpp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openttd.org/en/news/112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4017","sourceIdentifier":"secalert@redhat.com","published":"2009-11-24T00:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive."},{"lang":"es","value":"PHP v5.2.11, y v5.3.x antes de v5.3.1, no restringen el número de archivos temporales creados al manipular una solicitud POST multipart/form-data, lo que permite a atacantes remotos causar una denegación de servicio (por agotamiento de recursos), y facilita a los atacantes remotos aprovecharse de las vulnerabilidades de inclusión de archivos locales, a través de múltiples peticiones, en relación a la falta de apoyo a la directiva max_file_uploads."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.12","matchCriteriaId":"F2304370-EDAF-4417-B624-498C427EBF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:-:*:*:*:*:*:*","matchCriteriaId":"A315BCF0-71F5-4664-B25B-019B8A1075BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"1DF14239-64E0-46F0-A8DE-8BB11EEC2F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"BDC814D7-52A0-4610-B812-1F47C08BEF8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"9E66A080-A759-41BA-99A6-70074DF2A1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F9D343FF-1DC6-477C-8DBA-D3C309D1B9BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1F397590-70B4-43B9-9F5B-BC1020393A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"17586008-7FBC-4238-B208-4563040D1982"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F5D02F98-10F7-4F7B-A31E-7C28EC034BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"8F021309-38E4-4D19-B1EB-975D9F42F4F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*","matchCriteriaId":"546EBFC8-79F0-42C2-9B9A-A76CA3F19470"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://news.php.net/php.announce/79","source":"secalert@redhat.com","tags":["Mailing List","Release Notes"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/228","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37482","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37821","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40262","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41480","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41490","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.acunetix.com/blog/websecuritynews/php-multipartform-data-denial-of-service/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:305","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"secalert@redhat.com","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/7","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_12.php","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.php.net/releases/5_3_1.php","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507982/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54455","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10483","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6667","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://news.php.net/php.announce/79","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/41490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.acunetix.com/blog/websecuritynews/php-multipartform-data-denial-of-service/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.php.net/releases/5_2_12.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.php.net/releases/5_3_1.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507982/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2009-4018","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:32.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_env_vars and (2) safe_mode_protected_env_vars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, as demonstrated by a crafted value of the LD_LIBRARY_PATH environment variable."},{"lang":"es","value":"La función proc_open en ext/standard/proc_open.c en PHP anterior a v5.2.11 y v5.3.x anterior a v5.3.1 no aplica adecuadamente las directivas (1) safe_mode_allowed_env_vars y (2) safe_mode_protected_env_vars, lo que permite dependientes del contexto a atacantes ejecutar programas con un entorno de su elección a través del parámetro env, como se ha demostrado por un valor manipulado de la variable del entorno LD_LIBRARY_PATH."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider safe_mode / open_basedir restriction bypass issues being security sensitive. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php","lastModified":"2009-11-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.10","matchCriteriaId":"AFD586D6-585F-4259-B845-24D7057678F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=49026","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125886770008678&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125897935330618&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/40262","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/41480","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/41490","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/?view=revision&revision=286360","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/standard/proc_open.c?r1=286360&r2=286359&pathrev=286360","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/proc_open.c?r1=286360&r2=286359&pathrev=286360","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/15","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37138","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7256","source":"secalert@redhat.com"},{"url":"http://bugs.php.net/bug.php?id=49026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125886770008678&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=oss-security&m=125897935330618&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/?view=revision&revision=286360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/standard/proc_open.c?r1=286360&r2=286359&pathrev=286360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/standard/proc_open.c?r1=286360&r2=286359&pathrev=286360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4019","sourceIdentifier":"secalert@redhat.com","published":"2009-11-30T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement."},{"lang":"es","value":"mysqld en MySQL v5.0.x anteriores a v5.0.88 y v5.1.x anteriores a v5.1.41 no (1) maneja apropiadamente los errores durante la ejecución de determinadas peticiones SELECT con subpeticiones, y no (2) preserva determinadas \"flags\" (opciones) null_value durante la ejecución de peticiones que usan la función GeomFromWKB; lo que permite a usuarios autenticados remotos provocar una denegación de servicio (caída del demonio) a través de una petición modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"214E3CF9-6362-4F5A-91B7-5E69564F7144"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*","matchCriteriaId":"9369CF20-D05C-41A2-8F9E-DE259FCF9E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B2BFBC7B-5C23-4CDB-AE4F-721378C36B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"19001041-22C4-4D2C-A918-378DACBB1DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*","matchCriteriaId":"6F610D56-6BB6-48FB-B43A-670CE9168500"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1668BB5B-E7FB-4430-B8D5-89E308F5DD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BF54CC8D-B736-461D-B693-686E862EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"053ACE9B-A146-42C0-ADB2-47F6119965D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"30B4F891-2A03-45A8-A49C-7F8B8F7D8407"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"69E62AC4-954E-476C-98BE-C138E328AE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"6B88385C-F5FB-401F-80D5-5BF11CE3C19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"35F21A5A-F9C0-4860-80AD-1D3937483F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*","matchCriteriaId":"BD39950F-FBBF-4505-8FB5-EEF2886095F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*","matchCriteriaId":"2FA3E354-4366-46B5-ACD2-E72D0C8320A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*","matchCriteriaId":"0C002047-0FB1-4DC6-9108-B4B5AAFAC16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*","matchCriteriaId":"584C0690-2826-4389-95AD-42048AEE1916"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*","matchCriteriaId":"0CB85180-0F28-4281-BB59-E3F29BE25C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*","matchCriteriaId":"31B9607A-1E58-4471-BEDE-03484A1E9739"}]}]}],"references":[{"url":"http://bugs.mysql.com/47780","source":"secalert@redhat.com"},{"url":"http://bugs.mysql.com/48291","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125881733826437&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125883754215621&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125901161824278&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37717","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38517","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38573","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-1997","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=540906","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11349","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8500","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00764.html","source":"secalert@redhat.com"},{"url":"http://bugs.mysql.com/47780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.mysql.com/48291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125881733826437&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125883754215621&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125901161824278&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-1997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=540906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00764.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4020","sourceIdentifier":"secalert@redhat.com","published":"2009-12-04T21:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el subsistema hfs de el kernel Linux v2.6.32 permite a atacantes remotos tener un impacto no especificado mediante un sistema de ficheros Hierarchical File System (HFS) modificado, relacionado con la función hfs_readdir en fs/hfs/dir.c."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the version of the Linux kernel as shipped with Red Hat Enterprise MRG as the affected driver is not enabled in this kernel.\n\nIt was addressed in Red Hat Enterprise Linux 4 and 5 via https://rhn.redhat.com/errata/RHSA-2010-0076.html and https://rhn.redhat.com/errata/RHSA-2010-0046.html respectively.\n\nRed Hat Enterprise Linux 3 is now in Production 3 of the maintenance life-cycle, http://www.redhat.com/security/updates/errata, and this issue is rated as having low impact, therefore the fix for this issue is not currently planned to be included in the future updates.","lastModified":"2010-02-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"46568A0D-F374-4DAB-9B64-FCC74A9AA07B"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=linux-mm-commits&m=125987755823047&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38276","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39742","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"secalert@redhat.com"},{"url":"http://userweb.kernel.org/~akpm/mmotm/broken-out/hfs-fix-a-potential-buffer-overflow.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2010_23_kernel.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/04/1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=540736","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10091","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6750","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-mm-commits&m=125987755823047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://userweb.kernel.org/~akpm/mmotm/broken-out/hfs-fix-a-potential-buffer-overflow.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2010_23_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/04/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=540736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4021","sourceIdentifier":"secalert@redhat.com","published":"2009-11-25T16:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack."},{"lang":"es","value":"La funcion fuse_direct_io en fs/fuse/file.c en el subsistema fuse en el kernel de Linux en versiones anteriores a v2.6.32-rc7 podría permitir a atacantes producir una denegación de servicio (desreferencia a puntero no valido y OOPS) a través de vectores que posiblemente estén relacionados con un ataque de agotamiento de memoria."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-4021\n\nThe Linux kernel packages as shipped with Red Hat Enterprise Linux 3 and 4 do not include support for FUSE, and therefore are not affected by this issue.\n\nIt was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0046.html\n\nA future kernel update for Red Hat Enterprise MRG will address this flaw.","lastModified":"2010-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"34675E8B-0F4F-4404-B86D-A618378BC32C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f60311d5f7670d9539b424e4ed8b5c0872fc9e83","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37909","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/5","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0041.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37069","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=538734","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54358","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10516","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6955","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f60311d5f7670d9539b424e4ed8b5c0872fc9e83","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=538734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4022","sourceIdentifier":"secalert@redhat.com","published":"2009-11-25T16:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed \"at the same time as requesting DNSSEC records (DO),\" aka Bug 20438."},{"lang":"es","value":"Vulnerabilidad no especificada en ISC BIND 9.0.x hasta la versión 9.3.x, 9.4 en versiones anteriores a 9.4.3-P4, 9.5 en versiones anteriores a 9.5.2-P1, 9.6 en versiones anteriores a 9.6.1-P2 y 9.7 beta en versiones anteriores a 9.7.0b3, con validación DNSSEC habilitada y comprobación deshabilitada (CD), permite a atacantes remotos llevar a cabo ataques de envenenamiento de la caché DNS recibiendo una consulta de cliente recursiva y enviando una respuesta que contiene una sección Additional con datos manipulados, lo cual no es manejado adecuadamente cuando la respuesta es procesada \"al mismo tiempo que se solicitan registros DNSSEC (DO)\", también conocida como Bug 20438."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C52373DC-3E05-424B-9C78-4092A75C75A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AFE06E29-0A16-4034-A2BB-696A49798F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"75CECA87-F721-429B-8062-D3297233C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2F1447B1-A25F-45CC-B721-3204D7107999"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C61FB240-C932-4A3A-874D-5872F01EB352"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"999AF289-8D73-4648-ABCB-4853B9B1F230"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"6743968D-DDB2-4478-867A-642CCC492B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"098633E6-88F0-4DBC-986F-D11EDA29877F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"78725CCE-C153-4B00-8E76-ED6DFC1C86A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1950F046-FBD4-4A92-BA70-5E80374A12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1861756C-CC81-4EAB-8427-57A3C62BFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"5E53EFD9-16B8-457D-8C27-7771018EA524"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CDD642FC-1764-4090-A32D-830CEAE69E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"79503328-9EE2-414E-A6E8-B3BABA0D6CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2ABA5AA3-8951-4158-A4C6-64BE2010D39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"77A2D767-8E2D-4D65-ACF3-634B055023CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"D28C3D4C-5C3B-4686-9F67-6379C2AC338A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*","matchCriteriaId":"543DE620-09A2-4055-B30C-803C714237B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*","matchCriteriaId":"2C16513C-48A1-4FB6-AB11-F844ABC4BB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*","matchCriteriaId":"607BF60B-27F1-4C85-BB5F-D66FEA05CD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE954FD0-56AF-4757-BAA8-B0C64703F6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0EC243E5-D80C-43A8-AD12-5DA0FA442086"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BF891263-4ACE-47C3-83F3-C06E49F32451"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"01C3704B-8328-46C3-ACB1-D27FD7DED508"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"FF9000CE-EB3A-4194-84D1-4BB4C5010D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"19A4E6C3-CF69-4A81-B179-EB8F656E72AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*","matchCriteriaId":"1F947835-8E96-4793-B81E-EEC103BF0CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6520F4-B203-400A-8629-8A40B739DB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*","matchCriteriaId":"55D7907A-46D1-4F7D-8B2F-321214204704"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*","matchCriteriaId":"B06686CF-0FFD-45D8-A9F6-D13DCF3E6EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*","matchCriteriaId":"EBF04613-7F33-4A63-A776-47C9A0BDBF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*","matchCriteriaId":"FA3C3939-2065-4A8C-99F8-BE44D1D2ABA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*","matchCriteriaId":"DEE416F3-CDAE-4285-9EC7-F3E161EDCA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"365BFA38-A0F6-4D48-A6B5-E534F88516DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*","matchCriteriaId":"CF2F3360-F5C2-47C1-B2E7-935CDB47407A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"52FBAE24-C9F7-4756-A7A0-A877ABFC3444"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A7230CE4-CD95-484C-A004-457FD4484403"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"A0BB3172-BFBC-4F56-8116-6EEC30FD566F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"D40FB919-A955-419D-9BEC-835F93E4FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"FF8A8F48-A890-4837-8C76-1A690523B39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*","matchCriteriaId":"399D70C9-8E61-4624-A7AD-9410AA7641B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*","matchCriteriaId":"2BB2F03D-96C6-49CD-80FA-570FF72B493F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*","matchCriteriaId":"60DC3DF4-4B36-4AA8-8561-C4255A8C4E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF07E87-B109-4B15-A358-7A454502E077"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"2E5D0852-413F-4875-93F5-64DDBCA6E85E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"301BF336-6AF6-4705-9BF1-00ED6608F572"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614C9459-D526-4880-AE03-4A1558CB941F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"A8B15E71-656A-4EB7-96B2-2CC9A2C19DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"A969C3E7-9E4F-4767-86D1-7E6B3970A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"34B56EBF-6218-46B7-A9F2-288E40635FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"A10ACCBC-6697-4BCB-9748-B966D83E0C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"719382EA-7D4E-46F2-92ED-DCA83AE685BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"9EDF0B51-76D3-4BD8-A2C7-6F21153CB886"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*","matchCriteriaId":"2D800F08-9B7A-4284-B2EF-DCDF60DEEC04"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D43375C5-0736-43DE-99B5-B75719D0AD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"4E492452-CBDB-43BC-A9AD-21AA84EA0653"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*","matchCriteriaId":"D5BD68D9-6CD9-48A7-A242-38B9ADD420BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*","matchCriteriaId":"65C15AB2-DCA7-4983-A741-3CA1D4A391A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*","matchCriteriaId":"6C6DB780-C075-462C-B426-1917A020C4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*","matchCriteriaId":"3B4FD922-49B2-4953-8EF2-9018B104BC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*","matchCriteriaId":"367DC15C-7174-4463-8D4B-B3E43AC0A57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*","matchCriteriaId":"CAEC7B62-DBBF-4ADD-81F7-8AD1F3642E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E4360536-0BA6-41DB-AA87-45AFB51562CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*","matchCriteriaId":"E3CBD1CC-14DF-4F00-9A5E-6D7A6604A8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"93C5ED24-5A13-4F06-BC9F-B8B8F46C1888"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*","matchCriteriaId":"438AEC8C-DD71-4A25-9E9D-A89415F7EC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"36A47938-C5AC-4471-A791-6F21AE20B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2CDF6B08-6BA8-400C-BF01-ABD2306FE0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"AFEDAAA4-AB94-43C6-97AE-B6E87D8E81B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*","matchCriteriaId":"FAF29410-5230-42F9-BC07-B940FC66DA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*","matchCriteriaId":"82068202-DF42-4808-A5C7-1A68B05EA1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.8:*:*:*:*:*:*:*","matchCriteriaId":"3014690C-784C-487D-A378-4B977C8460E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.9:*:*:*:*:*:*:*","matchCriteriaId":"90E4653A-C63A-4568-BFF2-ECAB7AB5A55C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FCF6B377-2B03-429D-B452-3269E6FA8031"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*","matchCriteriaId":"8FA93166-513D-40AA-9855-FC89060BA03C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"847C1017-F964-4A33-BEA8-DDB202DD0FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:b2:*:*:*:*:*:*","matchCriteriaId":"87B48470-26BF-4AE5-BEF3-7A2C82D59513"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:b3:*:*:*:*:*:*","matchCriteriaId":"D795C310-AC2A-4680-B516-508F7AF584AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:b4:*:*:*:*:*:*","matchCriteriaId":"EAA7F932-4DA1-4B03-8761-AB2353B4935E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F5DC0048-3DC4-40A7-99A2-7686B3DA4FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F43C77D0-2052-417D-9EA8-1A89A06BF010"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F574AA97-6037-4957-9BDD-6C720B3A292B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.0:rc4:*:*:*:*:*:*","matchCriteriaId":"6B67499F-7A9D-467B-834B-F4D61DBBE313"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8B0D8854-64B6-42C9-B4D2-B2AF16AC0F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.1:b2:*:*:*:*:*:*","matchCriteriaId":"6CB6CACC-3E1E-4115-AC9B-C9F99522D4C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"062A3D39-9B49-49D3-8FB4-FB4FC4A71D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"92F95086-3107-4C38-BB3B-7BABA9BD15C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.2:rc1:*:*:*:*:*:*","matchCriteriaId":"8669EA1C-DAA7-44FC-B675-01641BB8787E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1AE49740-2220-4305-BB8A-80E56CF4D9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.3:rc1:*:*:*:*:*:*","matchCriteriaId":"0AD5E3F3-CAF7-4A41-A26E-087D74799EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.3:rc2:*:*:*:*:*:*","matchCriteriaId":"9730D243-BBDF-483B-B709-7EDF708CE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.3:rc3:*:*:*:*:*:*","matchCriteriaId":"EAD0B6DB-91E5-4891-BA45-A68BEA6FBB51"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A5B579EF-A538-4AA4-BDE8-CDB39E155A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.5:*:*:*:*:*:*:*","matchCriteriaId":"23BFA179-11A1-436D-805A-9814B85AEEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.5:rc1:*:*:*:*:*:*","matchCriteriaId":"3D881EBA-B012-4014-A08F-F6B3795653C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.5:rc2:*:*:*:*:*:*","matchCriteriaId":"9431455C-07E8-40E7-87D9-E6FE6F53D76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.6:*:*:*:*:*:*:*","matchCriteriaId":"01CA8370-ACF5-4DEC-8D3C-C502A97A101C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.3.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A92E77F8-43FE-49C7-BCDA-1F6E8EB0DD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*","matchCriteriaId":"C4B45FE3-307E-4599-B2CF-5203FA606469"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*","matchCriteriaId":"F12E3841-1CF0-4969-A286-50769BAE31EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*","matchCriteriaId":"D8B11586-1274-422D-873A-25DF193FB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*","matchCriteriaId":"87D61CDA-BB78-4957-A502-6D77B567B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*","matchCriteriaId":"5A31533C-BD6E-4EB4-8047-3257BF51F592"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*","matchCriteriaId":"D8537C88-4F73-43DD-9BDC-AF470882EED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"6D7D1A96-0A8E-4E3A-9442-701E3D1A1F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"93C23313-817F-4AB5-9058-31B0C7F954A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*","matchCriteriaId":"FA9F93EC-1AA2-43A6-9869-8974C819370A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*","matchCriteriaId":"726720E2-4B59-4665-A72E-E2E996957EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"32E4FEA8-A654-4E9F-8948-5878E7C427C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"916D4013-27A5-4688-A985-A9B77F90AC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F8583B8D-54A4-4064-810B-34F4F5A33A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*","matchCriteriaId":"932E3F02-DD98-43FC-8077-50506E512989"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*","matchCriteriaId":"63C2A2FD-7AE7-462A-99B2-809BE1F35C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E01A12DF-E94B-426E-8751-96FC56105D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*","matchCriteriaId":"7717B1A2-CAF5-49F3-AC73-273074BBEE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*","matchCriteriaId":"F037EE61-50D6-4C1E-B24B-25A6D212E7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*","matchCriteriaId":"5140F118-BC25-43CB-B19C-0885A44D6646"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:p1:*:*:*:*:*:*","matchCriteriaId":"099A0900-9A16-4431-BECA-B02D7C810153"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:p2:*:*:*:*:*:*","matchCriteriaId":"82B9397F-463E-4F73-86F6-4EF3368E14BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:p3:*:*:*:*:*:*","matchCriteriaId":"CAC96840-758A-4A47-8D12-AA42640778C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"19ADAB10-BDD0-409E-93C2-9E7223464131"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"32CEF8AD-9EE7-4ADA-888E-883751962529"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a1:*:*:*:*:*:*","matchCriteriaId":"76B4ED8A-9182-4403-8F66-3EB360E73477"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a2:*:*:*:*:*:*","matchCriteriaId":"84046EF9-AF5F-43FA-8E2C-11C7A01D17F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a3:*:*:*:*:*:*","matchCriteriaId":"7545BB70-5C74-47A7-BB07-765BC8C2A5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a4:*:*:*:*:*:*","matchCriteriaId":"AE6BFDBD-DE4D-407F-86A4-FA78F99AA531"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a5:*:*:*:*:*:*","matchCriteriaId":"4337C3FF-C15B-4EFD-AA13-F9CA0542C2FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a6:*:*:*:*:*:*","matchCriteriaId":"AB6534DE-1ACB-4BCE-87A4-901F02F6CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:a7:*:*:*:*:*:*","matchCriteriaId":"BE5F1A64-2428-4F85-8B93-3E324E983D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:b1:*:*:*:*:*:*","matchCriteriaId":"5F5D6222-3C1D-42FA-8882-1EE28B94D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:b2:*:*:*:*:*:*","matchCriteriaId":"08899782-3182-46EB-947D-3BA9C371ACA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:b3:*:*:*:*:*:*","matchCriteriaId":"575443B1-1638-497E-BCCF-E725B386ED88"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p1:*:*:*:*:*:*","matchCriteriaId":"30616740-FC69-4B92-B997-B7AF7643656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2:*:*:*:*:*:*","matchCriteriaId":"3E306D3A-11AE-4F35-971E-B47D47628052"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2_w1:*:*:*:*:*:*","matchCriteriaId":"4FF37B1D-04AD-4E37-A238-34BE7C5311E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:p2_w2:*:*:*:*:*:*","matchCriteriaId":"6AAEE115-8EA0-4E2B-9960-647967B39606"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"90EE9C4A-F014-4ABA-9C4C-5D9561DD0A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F592D0F-095C-4F3B-97E7-E92C259D0CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:b1:*:*:*:*:*:*","matchCriteriaId":"B6215F13-D97D-47DE-8057-906159D368A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:b2:*:*:*:*:*:*","matchCriteriaId":"896C4F70-B1F7-49D5-9E4A-98D33B3B2E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:b3:*:*:*:*:*:*","matchCriteriaId":"3A6DFF99-0890-4DE1-8AF4-6809EA485ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:rc1:*:*:*:*:*:*","matchCriteriaId":"C55EC1E1-4D79-4357-94CB-7E152DFDE8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:rc2:*:*:*:*:*:*","matchCriteriaId":"83205FA5-56A2-4BBD-9278-2844704BAB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F4449E90-2112-4860-A981-66639B9318ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.2:b1:*:*:*:*:*:*","matchCriteriaId":"110C71B3-D6E0-485E-9C4B-3D155CE16047"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.2:rc1:*:*:*:*:*:*","matchCriteriaId":"A49A7D91-73BC-4894-A548-C46691AA66AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F42F7AF7-D37C-4213-B2BC-D2B9FE725BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:a1:*:*:*:*:*:*","matchCriteriaId":"A964450E-7DA8-478B-923E-E8CD1BA0F09C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:b1:*:*:*:*:*:*","matchCriteriaId":"32FAE1EF-3BF0-4B12-8F08-AA061A6D63FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*","matchCriteriaId":"5ABB3FC8-0A0D-4881-9137-5F6A8CCB9345"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C02A3BC0-78A4-4F4D-AA5B-3C05122137EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"178C7D9F-8699-42A3-8729-0BC6323EBDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*","matchCriteriaId":"1BEF53C6-E555-49D4-B4B2-63BA71CC77E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.1:b1:*:*:*:*:*:*","matchCriteriaId":"2B4565A6-122B-406C-A7BE-A029F92799B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.1:p1:*:*:*:*:*:*","matchCriteriaId":"3C09FA4C-B094-4BAC-A194-ACC28F80AF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"EEC21220-4207-4FE4-A7A9-9B223301B98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:*","matchCriteriaId":"5B178BB5-A0DC-4014-A8CC-D89B0E2F9789"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:a1:*:*:*:*:*:*","matchCriteriaId":"1922EC10-F75A-41A5-B8AF-CDDCAA07A8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:a2:*:*:*:*:*:*","matchCriteriaId":"D243C684-DD10-4F84-8806-A5E9BEBC3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:a3:*:*:*:*:*:*","matchCriteriaId":"B0FC1DDA-B027-47C2-93CD-67013CB56388"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:*","matchCriteriaId":"1BE753CB-A16D-4605-8640-137CD4A2BB16"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:b2:*:*:*:*:*:*","matchCriteriaId":"037075F9-53E3-4DF6-B5C0-A6D1F5B60E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:b3:*:*:*:*:*:*","matchCriteriaId":"886DF882-E3F9-46E9-BC62-0A48292654D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:p1:*:*:*:*:*:*","matchCriteriaId":"5B5F1155-78D6-480B-BC0A-1D36B08D2594"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E9478F4E-451D-4B4E-8054-E09522F97C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.7.0:rc2:*:*:*:*:*:*","matchCriteriaId":"87393BF8-9FE3-4501-94CA-A1AA9E38E771"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37426","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37491","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38219","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38240","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39334","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40730","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5002","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018","source":"secalert@redhat.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ68597","source":"secalert@redhat.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ71667","source":"secalert@redhat.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ71774","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/418861","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:304","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/8","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1620.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37118","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-888-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3335","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0176","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0622","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=538744","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54416","source":"secalert@redhat.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-3152","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10821","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11745","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7261","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7459","source":"secalert@redhat.com"},{"url":"https://www.isc.org/advisories/CVE-2009-4022v6","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.isc.org/advisories/CVE2009-4022","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html","source":"secalert@redhat.com"},{"url":"ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ68597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ71667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ71774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/418861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1620.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-888-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=538744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-3152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.isc.org/advisories/CVE-2009-4022v6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.isc.org/advisories/CVE2009-4022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4023","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:35.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en la implementación sendmail del método Mail::Send (Mail/sendmail.php) en el paquete  Mail v1.1.14 para for PEAR, permite a atacantes remotos leer y escribir ficheros de su elección a través de un parámetro $from, es un vector distinto a CVE_2009-4111."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"336BFB64-0E98-4A7C-94C4-B5DCBE6416E6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://pear.php.net/bugs/bug.php?id=16200","source":"secalert@redhat.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://pear.php.net/bugs/bug.php?id=16200&edit=12&patch=quick-fix&revision=1241757412","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37410","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37458","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/pear/packages/Mail/trunk/Mail/sendmail.php?r1=243717&r2=280134","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1938","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/8","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37081","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3300","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=294256","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54362","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pear.php.net/bugs/bug.php?id=16200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://pear.php.net/bugs/bug.php?id=16200&edit=12&patch=quick-fix&revision=1241757412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/pear/packages/Mail/trunk/Mail/sendmail.php?r1=243717&r2=280134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=294256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4024","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:35.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter.  NOTE: this has also been reported as a shell metacharacter problem."},{"lang":"es","value":"La vulnerabilidad de inyección de argumentos en la función ping en el archivo Ping.php en el paquete Net_Ping anterior a versión 2.4.5 para PEAR, permite a los atacantes remotos ejecutar comandos de shell arbitrarios por medio del parámetro host. NOTA: esto también se ha notificado como un problema del metacarácter de shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.4","matchCriteriaId":"473A9117-A567-42DF-AEF4-C553CC1F7868"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:0.1:*:*:*:*:*:*:*","matchCriteriaId":"A3DE79B9-896E-4D85-8611-5E017914A5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:1.0:*:*:*:*:*:*:*","matchCriteriaId":"58408E82-0947-42D3-9C2E-1DE5DE06A4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4498F9DF-236A-4C43-BBCB-9E08475F55E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AE0EF34-D55E-4D9E-9952-41DFA16E4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DE92286A-AECC-4C48-8277-AB3AC64EEEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.3:*:*:*:*:*:*:*","matchCriteriaId":"BC746851-4704-45F8-96C4-209AEEF7EF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.4:*:*:*:*:*:*:*","matchCriteriaId":"81F940B1-363F-4572-95D5-F40BDDDB106F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EE46B296-5EA3-48A9-ACC6-DE9C5A7BB767"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"15A72DB1-019F-4F29-B201-17894F3545EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A05689D4-9595-4A20-BEAA-23F97DBB1634"}]}]}],"references":[{"url":"http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://pear.php.net/advisory20091114-01.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://pear.php.net/package/Net_Ping/download/2.4.5","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37451","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37502","source":"secalert@redhat.com"},{"url":"http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php?r1=274728&r2=290669&pathrev=290669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1949","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37093","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3320","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54390","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01044.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01130.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01152.html","source":"secalert@redhat.com"},{"url":"http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://pear.php.net/advisory20091114-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://pear.php.net/package/Net_Ping/download/2.4.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php?r1=274728&r2=290669&pathrev=290669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01130.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01152.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4025","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:35.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en la función traceroute en el paquete Net_Traceroute anterior a v0.21.2 para PEAR, permite a atacantes remotos ejecutar comandos de su elección a través del parámetro host. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:*:*:*:*:*:*:*:*","versionEndIncluding":"0.21.1","matchCriteriaId":"DB1F09B2-BCAA-4C84-8C2F-7FED79DD50CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:0.11:*:*:*:*:*:*:*","matchCriteriaId":"AFED678E-486A-4A94-956D-6850B86B8B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:0.20:*:*:*:*:*:*:*","matchCriteriaId":"475FB7AD-0920-4525-BAF3-6FC6E416E0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:pear:0.21:*:*:*:*:*:*:*","matchCriteriaId":"2FC18D12-4C63-4D7E-ADE4-E23753C8CF24"}]}]}],"references":[{"url":"http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60515","source":"secalert@redhat.com"},{"url":"http://pear.php.net/advisory20091114-01.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://pear.php.net/package/Net_Traceroute/download/0.21.2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37497","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37503","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200911-06.xml","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/8","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37094","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3321","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54391","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00998.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01007.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01110.html","source":"secalert@redhat.com"},{"url":"http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pear.php.net/advisory20091114-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://pear.php.net/package/Net_Traceroute/download/0.21.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200911-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00998.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01110.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4026","sourceIdentifier":"secalert@redhat.com","published":"2009-12-02T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous \"code shuffling patch.\""},{"lang":"es","value":"El subsistema mac80211 en el kernel de linux anterior a 2.6.32-rc8-next-20091201, permite a atacantes remotos provocar una denegación de servicio (panic) a través de un un Delete Block ACK (también conocido como DELBA) manipulado. Relacionado con un \"code shuffling patch\" erróneo."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 and Red Hat Enterprise MRG. Shipped kernels do not include upstream commits d75636ef and d92684e6 that introduced the problem.","lastModified":"2009-12-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"34675E8B-0F4F-4404-B86D-A618378BC32C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091201.gz","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37170","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541149","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091201.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/01/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4027","sourceIdentifier":"secalert@redhat.com","published":"2009-12-02T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session."},{"lang":"es","value":"Condición de carrera en el subsistema mac80211 en el kernel de Linux anteriores a 2.6.32-rc8-next-20091201 permite a atacantes remotos producir una denegación de servicio (caída de sistema) a través de un paquete de bloque de borrado ACK (también conocido como DELBA) que inicia un cambio de estado en la ausencia de una sesión de agregación."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/CVE-2009-4027.\n\nThis issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3 and 4 as they do not have support for the mac80211 framework.\n\nIt did not affect the version of the Linux kernel as shipped with Red Hat Enterprise MRG as they do not include the upstream patch that introduced this vulnerability.\n\nA future update will address this flaw in Red Hat Enterprise Linux 5.","lastModified":"2009-12-03T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"34675E8B-0F4F-4404-B86D-A618378BC32C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38492","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-1996","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091201.gz","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0380.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37170","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541149","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11583","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-1996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091201.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0380.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4028","sourceIdentifier":"secalert@redhat.com","published":"2009-11-30T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library."},{"lang":"es","value":"La función vio_verify_callback en vio_verify_callback de MySQL v5.0.x anteriores a v5.0.88 y v5.1.x anteriores a v5.1.41, cuando utiliza OpenSSL, acepta un valor cero para la profundidad de los certificados X.509, permitiendo a atacantes de hombre en medio (man-in-the-middle) suplantar servidores MySQL de su elección basados en SSL mediante un certificado creado específicamente, como se ha demostrado por un certificado presentado por un servidor vinculado con la biblioteca yaSSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.87","matchCriteriaId":"749E313A-CD07-40DA-97D6-58F53D62231B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"214E3CF9-6362-4F5A-91B7-5E69564F7144"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*","matchCriteriaId":"9369CF20-D05C-41A2-8F9E-DE259FCF9E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.84:*:*:*:*:*:*:*","matchCriteriaId":"34DDFA0E-91D5-4B4C-8BB7-58B663D7F94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*","matchCriteriaId":"2C56D394-4CE1-4237-A681-1474B5436CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B2BFBC7B-5C23-4CDB-AE4F-721378C36B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*","matchCriteriaId":"F68CA8CA-2755-450A-80E2-286A571987F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*","matchCriteriaId":"6287E2C9-DF38-4E4E-A8E4-6AC6ADDC920D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"19001041-22C4-4D2C-A918-378DACBB1DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*","matchCriteriaId":"6F610D56-6BB6-48FB-B43A-670CE9168500"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1668BB5B-E7FB-4430-B8D5-89E308F5DD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BF54CC8D-B736-461D-B693-686E862EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"053ACE9B-A146-42C0-ADB2-47F6119965D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"30B4F891-2A03-45A8-A49C-7F8B8F7D8407"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"69E62AC4-954E-476C-98BE-C138E328AE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"6B88385C-F5FB-401F-80D5-5BF11CE3C19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"35F21A5A-F9C0-4860-80AD-1D3937483F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*","matchCriteriaId":"2FA3E354-4366-46B5-ACD2-E72D0C8320A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*","matchCriteriaId":"0C002047-0FB1-4DC6-9108-B4B5AAFAC16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*","matchCriteriaId":"584C0690-2826-4389-95AD-42048AEE1916"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*","matchCriteriaId":"0CB85180-0F28-4281-BB59-E3F29BE25C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:*","matchCriteriaId":"2E96AD6D-3AC1-4232-B0A9-C31E1BF6B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:*","matchCriteriaId":"565E57C0-B6B9-4868-8907-B436E5D5C56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*","matchCriteriaId":"9D7B68A6-13FA-4EAE-8ED0-5940A72A3D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"64F37486-E91C-47C4-9F53-4CFDBF8C1EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"53A7D87C-E34C-4595-88D5-CD483B3E8CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*","matchCriteriaId":"28103843-D04F-4180-A71D-8DAC4E28C2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*","matchCriteriaId":"5FEAE55E-7330-4A5A-A862-8D7E7621EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*","matchCriteriaId":"848D4621-AFB8-4A12-A20E-4FC9F1774DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*","matchCriteriaId":"5138E55E-58C1-44B5-A296-A46DF2920DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*","matchCriteriaId":"31B9607A-1E58-4471-BEDE-03484A1E9739"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*","matchCriteriaId":"FD25674A-B158-4770-B269-A9A039C79A8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*","matchCriteriaId":"DDCB266F-E642-4447-8B9C-A58ED4D29227"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*","matchCriteriaId":"8FF8582D-3AB5-4F16-AD52-ED5D0CE10120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*","matchCriteriaId":"AB79189C-344C-4D5D-A8D8-C3852F7BCFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*","matchCriteriaId":"63A48A7A-8DE5-4278-AD0B-4736B45DF337"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*","matchCriteriaId":"F828A5AD-5EA5-4B02-8BD4-0B2A109342F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*","matchCriteriaId":"34E9C1C2-3F7E-4447-92B8-8D4F2A623812"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*","matchCriteriaId":"25A6FDB0-A86C-4312-AB75-C2A942315DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*","matchCriteriaId":"F47B75E9-46C7-45D9-86FA-CBD2B2F853BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*","matchCriteriaId":"042A36D5-A5CE-4DAF-B0CA-2F7F6FEB2D37"}]}]}],"references":[{"url":"http://bugs.mysql.com/47320","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"secalert@redhat.com"},{"url":"http://lists.mysql.com/commits/87446","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125881733826437&w=2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/3","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/16","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510","source":"secalert@redhat.com"},{"url":"http://bugs.mysql.com/47320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.mysql.com/commits/87446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125881733826437&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4029","sourceIdentifier":"secalert@redhat.com","published":"2009-12-20T02:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete."},{"lang":"es","value":"Las reglas (1) dist o (2) distcheck en GNU Automake v1.11.1, v1.10.3, branch-1-4 a branch-1-9, cuando se genera una distribución mediante fichero .tar de un paquete que usa Automake, asignan permisos inseguros (777) a los directorios en el árbol de construcción, lo que introduce una condición de carrera que permite modificar, a los usuarios locales, el contenido de los archivos del paquete, la introducción de troyanos, o llevar a cabo otros ataques antes de que la construcción se haya completado."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following\nbug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4029\n\nThis issue was addressed in the automake, automake14, automake15, automake16 and automake17 packages as shipped with Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2010-0321.html\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, theres no plan to address this flaw in automake packages in Red Hat Enterprise Linux 3 and 4.","lastModified":"2010-03-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:automake:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"B2A91930-6A6C-4B56-99DF-8A06F270AEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:automake:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6F35A4AC-1FA1-49CA-A465-5E0E6E05AC0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:automake:branch:1-9:*:*:*:*:*:*","matchCriteriaId":"4D37A8B9-BA44-4543-94C1-E10A4C7F39A3"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/automake-patches/2009-11/msg00017.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00012.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00013.html","source":"secalert@redhat.com"},{"url":"http://savannah.gnu.org/forum/forum.php?forum_id=6077","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021784.1-1","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0071","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:203","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/514526/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3579","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11717","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/automake-patches/2009-11/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.gnu.org/archive/html/automake/2009-12/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://savannah.gnu.org/forum/forum.php?forum_id=6077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021784.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/514526/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4030","sourceIdentifier":"secalert@redhat.com","published":"2009-11-30T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079."},{"lang":"es","value":"MySQL v5.1.x anteriores a v5.1.41 permite a usuarios locales evitar ciertas comprobaciones de privilegios invocando CREATE TABLE en una tabla MyISAM con los argumentos (1) DATA DIRECTORY o (2) INDEX DIRECTORY modificados que estan originariamente asociados con pathnames (rutas) sin symlinks, y que pueden apuntar a tables creadas en un futuro en el cual un pathname (ruta) es modificado para contener un symlink a un subdirectorio del directorio home de datos de MySQL. Vulnerabilidad relacionada con una cálculo incorrecto del valor mysql_unpacked_real_data_home value.  NOTA: esta vulnerabilidad existe debido a una solución incompleta al CVE-2008-4098 y CVE-2008-2079."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B2BFBC7B-5C23-4CDB-AE4F-721378C36B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*","matchCriteriaId":"31B9607A-1E58-4471-BEDE-03484A1E9739"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=32167","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.mysql.com/commits/89940","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125908040022018&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125908080222685&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38517","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38573","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-1997","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/3","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/6","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11116","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8156","source":"secalert@redhat.com"},{"url":"http://bugs.mysql.com/bug.php?id=32167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.mysql.com/commits/89940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125908040022018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125908080222685&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-1997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/24/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4031","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:32.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support."},{"lang":"es","value":"La función do_insn_fetch en arch/x86/kvm/emulate.c en el emulador x86 KVM en el subsystem del kernel de Linux anterior a 2.6.32-rc8-next-20091125 intenta interpretar instrucciones que contienen demasiados bytes para ser válidas, lo que permite a un usuario invitado del sistema operativo provocar una denegación de servicio (incremento de la latencia de la planificación) en el sistema operativo anfitrión a través de manipulaciones no especificadas relacionadas con el soporte SMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.32","matchCriteriaId":"76B13D5A-329B-4D9B-BFA3-C0DB166F4E18"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:-:*:*:*:*:*:*","matchCriteriaId":"37B2E2B1-3E39-4DBA-817D-08F34D9F6E53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc2:*:*:*:*:*:*","matchCriteriaId":"1C8471AA-44D7-4D19-82B6-C4B999C65F97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc6:*:*:*:*:*:*","matchCriteriaId":"1B6C0A59-556F-4579-9AD2-4ABAE01FE2CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc7:*:*:*:*:*:*","matchCriteriaId":"DBE3083A-0FA6-4854-8F65-05E8364B3A9B"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37720","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/37130","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541160","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11089","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/37130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-4032","sourceIdentifier":"secalert@redhat.com","published":"2009-11-29T13:07:34.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en Cacti 0.8.7e permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través de vectores relacionados con (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php y (4) lib/timespan_settings.php, como es demostrado por los parámetros (a) graph_end o (b) graph_start a graph.php; (c) el parámetro date1 en una acción tree a graph_view.php; y los parámetros (d) page_refresh y (e) default_dual_pane_width a graph_settings.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7e:*:*:*:*:*:*:*","matchCriteriaId":"CB3DC32A-09AF-4DC9-A78E-E951847B76A8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=294573","source":"secalert@redhat.com"},{"url":"http://docs.cacti.net/#cross-site_scripting_fixes","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN09758120/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37481","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37934","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38087","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41041","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.cacti.net/download_patches.php","source":"secalert@redhat.com"},{"url":"http://www.cacti.net/downloads/patches/0.8.7e/cross_site_fix.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/4","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/26/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/30/2","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/60483","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/508129/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37109","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3325","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2132","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54388","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0635.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01390.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00166.html","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=294573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.cacti.net/#cross-site_scripting_fixes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN09758120/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cacti.net/download_patches.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cacti.net/downloads/patches/0.8.7e/cross_site_fix.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/25/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0635.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01390.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00166.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4033","sourceIdentifier":"secalert@redhat.com","published":"2009-12-08T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file."},{"lang":"es","value":"Cierto parche Red Hat para acpid v1.0.4 efectivamente lanza una llamada a una función abierta con argumentos insuficientes, lo que puede permitir a usuarios locales afianzar permisos débiles en /var/log/acpid, y obtener información sensible por lectura de ese archivo, causando una denegación de servicio por sobreescritura de ese archivo, u obtener privilegios al ejecutarlo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A178536-8705-40C9-85BE-C69172EF8493"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023284","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:342","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1642.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37249","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515062","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=542926","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54677","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10555","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1642.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=542926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4034","sourceIdentifier":"secalert@redhat.com","published":"2009-12-15T18:30:01.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"PostgreSQL v7.4.x anteriores a v7.4.27, v8.0.x anteriores a v8.0.23, v8.1.x anteriores a v8.1.19, v8.2.x anteriores a v8.2.15, v8.3.x anteriores a v8.3.9, y v8.4.x anteriores a v8.4.2 no maneja adecuadamente un caracter '/0' en el nombre de dominio en el campo \"subject\" del Nombre Común (CN) de un certificado X.509, lo que permite (1) a atacantes man-in-the-middle falsificar a conveniencia los servidores PostgreSQL basados en SSL a través de un certificado de servidor manipulado obtenido a través de una autoridad certificadora legitima, y (2)permite a atacantes remotos evitar las restricciones cliente-hostname a través de un certificado manipulado obtenido a través de una autoridad certificadora legitima, un asunto relacionado con CVE-2009-2408."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue is only security-relevant in PostgreSQL versions 8.4 and later as previous versions did not compare the connection host name with the certificate CommonName at all. Client certificate authentication was introduced in version 8.4. Red Hat Enterprise Linux 5 and earlier provided PostgreSQL versions 8.1.x and earlier, and are thus not affected by this issue.\n","lastModified":"2010-01-07T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20C8302B-631A-4DF7-839B-C6F3CC39E000"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FB318EB9-1B49-452A-92CF-89D9BA990AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5913A53B-7B72-4CBD-ADAE-318333EB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"815E58C0-327D-4F14-B496-05FC8179627E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3EF2D056-5120-4F98-8343-4EC31F962CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"516E0E86-3D8A-43F9-9DD5-865F5C889FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A7FC7F18-B227-4C46-9A33-FB34DDE456CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BCDB903F-0C89-4E65-857E-553CF9C192E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"CD0DEB63-CA70-44C1-9491-E0790D1A8E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"DA8E73E5-BA41-4FA2-8457-803A97FB00C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9B64CA-778F-405D-A441-34599246A3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"8AC4A04B-738C-4018-BB2F-FBEC8746200C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*","matchCriteriaId":"36A2824A-A43F-436B-B9DA-B7E283A00426"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*","matchCriteriaId":"DBBAF0F1-7A70-41DC-89A7-2EF9851E4FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*","matchCriteriaId":"4A12EC07-1938-41BF-BCFC-C269668F1EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*","matchCriteriaId":"14D7CE0D-510C-46BB-8896-42DD84F57017"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*","matchCriteriaId":"1AA5858F-7DFF-460D-B862-83DD636D0A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*","matchCriteriaId":"4394564D-131D-41C8-AE3A-BFF44779F27B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*","matchCriteriaId":"2CCC06DB-1C93-4DE5-AEDC-03E532DA89F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.26:*:*:*:*:*:*:*","matchCriteriaId":"62133846-C0C8-473A-A842-2A8AF50C2FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B45F3BF0-9EB6-4A06-B6F7-DE95DD13EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"105E9F52-D17E-4A0B-9C46-FD32A930B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE2055D-AAA4-4A6A-918F-349A9749AF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C12409B2-161B-4F78-B7AD-3CF69DDCC574"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD2F1DA4-6625-469D-988B-5457B68851A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"870F4348-6001-4C2F-A547-61964074E7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2E26D52-D95A-4547-BE6E-4F142F54A624"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4AAB2D1D-BE61-4D7C-B305-58B4F4126620"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E260F1F9-0068-4289-A8E8-C30220C2E1F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EEE16023-9A5E-46D5-B597-E6885C224786"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"84D64D74-9645-4CB7-B710-4FC26FB65B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8EB12063-F487-4067-A7A5-4482E19D8D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"51AE5B72-DDC5-4207-B467-A9583F3AC781"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*","matchCriteriaId":"99398182-C98C-4B16-9DBA-B1980BDFFA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"E6FEC1DE-A2A5-4945-95B8-75FDC9ED3B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"264AB44D-D014-4734-B538-09E5834EC30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*","matchCriteriaId":"8D5DD1E6-E190-4D75-9D27-5EFB2544B158"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"3CD7F8CA-09B3-4038-B8B0-2D62A77F2478"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"64815C3D-1A1A-4525-9BCD-D89BAEACC950"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"7B61AFB3-818D-4A82-8C80-9CA9A1DCC090"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C0B9704E-4BA9-4389-83AB-62BC65F81D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FEEC35A2-B17C-46EC-8697-9E03568339BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"00562C18-DD81-4B09-AF93-739AF8757A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B52D093-7867-4FE8-B055-D8190103A1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF855730-C61C-4FDC-96CB-57775A903421"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D93296E1-AEA2-443E-B9AA-D70535DDD093"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"02DC4E8A-A728-4734-B67A-C58C37DA90C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D59B0E32-9E71-4E41-BBAF-7A20008E43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*","matchCriteriaId":"CA6511DE-AF52-4953-8394-37D24A732538"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.12:*:*:*:*:*:*:*","matchCriteriaId":"51B93DC5-F632-47A5-9C58-52429B034D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D011C676-47D3-4D78-9C58-749AF6C7DBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.14:*:*:*:*:*:*:*","matchCriteriaId":"DFD5BE40-CF55-4C0E-BD89-5CC7DF41F6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.15:*:*:*:*:*:*:*","matchCriteriaId":"7C1EE1C3-4472-4CE2-AB60-9535C1C4AF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*","matchCriteriaId":"3B903334-2F67-4725-8277-6913E03BEFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.17:*:*:*:*:*:*:*","matchCriteriaId":"2F6E9049-B347-4940-B523-DBB96DBFE731"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.18:*:*:*:*:*:*:*","matchCriteriaId":"6F1AD77C-BD28-43C9-B2CA-F60C1AD9D200"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"06253BA8-7F1E-4C79-9B2E-197307A627F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2A213AB8-A5FE-4062-B895-2FC4B19F60A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9A3F083E-59A8-41B1-826F-2CA39BD425C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DE49E2D5-8EAC-49C7-B704-E626FBE7EC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5059B2F-B588-463E-8E96-BC9DA129C12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C919AF97-9713-44F8-B742-89C438DB0B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*","matchCriteriaId":"400BBC62-5D03-465B-A864-9CD479B963F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*","matchCriteriaId":"BC8C96F7-7F85-4E47-A05F-15E3C70AF583"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6C236CF1-72C0-4C3D-AE04-B67E3F18EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.14:*:*:*:*:*:*:*","matchCriteriaId":"ECC98D47-8B3C-4DE6-8C45-F5B92266027F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D33-86F4-4BFF-BA84-02AA1347BEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"02FDCF30-D0F7-48AA-9633-9CC060495F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"788975F6-B3F1-4C21-B963-6BA59F14B71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6713D96-338B-4467-9F05-3153997F62E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"01EB1A77-92AD-47FB-8290-D05C9B6C19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*","matchCriteriaId":"74857259-30C7-422D-A24D-BE1E33F09466"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CD80066B-787E-496B-88FD-F0AE291468C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"88C9F0AB-A125-4DCD-A02B-E04D4D95FB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5C991F71-1E27-47A6-97DC-424FC3EF6011"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/61038","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37663","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:333","source":"secalert@redhat.com"},{"url":"http://www.postgresql.org/docs/current/static/release-7-4-27.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-0-23.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-1-19.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-2-15.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-3-9.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-2.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/support/security.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37334","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1023325","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3519","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/current/static/release-7-4-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-0-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-1-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-2-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-3-9.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/support/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4035","sourceIdentifier":"secalert@redhat.com","published":"2009-12-21T21:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow."},{"lang":"es","value":"La función FoFiType1::parse en fofi/FoFiType1.cc en Xpdf v3.0.0, en gpdf v2.8.2, en kpdf en kdegraphics v3.3.1, y posiblemente otras liberías y versiones, no verifica el valor de retorno de la función getNextLine, permite a los atacantes dependientes del contexto ejecutar código de su elección mediante un fichero PDF con una fuente Type 1 modificada que puede producir un valor negativo, conduciendo a un error de conversión de entero signed-to-unsigned y un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gpdf:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"06B06279-EFB2-4EC1-95F2-166DC5B1BB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kdegraphics:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"40D90D14-63D3-446D-A24D-A2466AB91FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kpdf:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"24BA4DB2-7822-49A1-AC10-F6502E93E6D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xpdf:xpdf:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73F1D25C-854F-4CDC-A50D-601B39672390"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/poppler/poppler/diff/fofi/FoFiType1.cc?id=4b4fc5c0","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/tree/fofi/FoFiType1.cc?id=4b4fc5c017bf147c9069bbce32fc14467bd2a81a","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37641","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37781","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37787","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37793","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1680.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1681.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1682.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37350","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1023356","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3555","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541614","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54831","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10996","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/poppler/poppler/diff/fofi/FoFiType1.cc?id=4b4fc5c0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cgit.freedesktop.org/poppler/poppler/tree/fofi/FoFiType1.cc?id=4b4fc5c017bf147c9069bbce32fc14467bd2a81a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1680.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1681.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1682.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=541614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4037","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en FrontAccounting (FA) antes de v2.1.7 y v2.2.x antes de 2.2 RC permiten a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados a 1) admin/db/users_db.inc, y varios otros ficheros .inc y .php bajo (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/ y (7) purchasing/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.6","matchCriteriaId":"4D960EE9-9570-4AD6-9E59-D3A86DCA53D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C37539D1-729E-498A-825E-B1B0D0AF6D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1660E02B-2461-4E9F-A4AF-03314FBA102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01BF1047-33D4-4CC8-BF62-9F68DA2315EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EEBE05A1-22D7-43F0-B19E-BDE611B9A4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"86191646-E5C1-40A6-A41E-95057E182AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FD6DFBA1-53A4-4E58-A7BB-659F883BB3F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"03848CEE-215A-46A4-8083-F1D749D7BDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B9542D25-071D-4706-8846-AB7F0D0868B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC0D9A7-3FC4-4E00-8E02-5B0D0947A4BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta:*:*:*:*:*:*","matchCriteriaId":"EB733D44-24AB-4FE0-8B0E-73AC2BDC6CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"5A1C2818-5B30-49D5-82B2-91849BE760B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:rc:*:*:*:*:*:*","matchCriteriaId":"B75313EA-C5D6-453C-9A12-7BC1F1A217AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6730538F-C3B7-4225-AB85-8308B16B0818"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"74AA0164-181D-4B1F-9AC8-E46330F877BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"35155DDF-48A3-4986-BB9C-6A7C5E1C5747"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65899469-E873-448E-AB9F-20711F9F3286"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E868030C-BA4B-47F7-AE30-F1E844F769DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.2:beta:*:*:*:*:*:*","matchCriteriaId":"26EB65FE-C827-4F86-B237-86F49924CA5F"}]}]}],"references":[{"url":"http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3223","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4038","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados(XSS) en NCH Software Axon Virtual PBX v2.10 y v2.11 permite a atacantes remotos inyectar HTML o scripts a través de los parámetros (1) onok o oncancel (2) al programa de inicio de sesión. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nch:axon_virtual_pbx:2.10:*:*:*:*:*:*:*","matchCriteriaId":"C1B13582-86B0-4180-86C0-EE2A16BC941E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nch:axon_virtual_pbx:2.11:*:*:*:*:*:*:*","matchCriteriaId":"2B179B37-E777-4731-A423-3E1EF46D297C"}]}]}],"references":[{"url":"http://osvdb.org/59871","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37157","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/59871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4039","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados(XSS) en Piwigo antes de v2.0.6 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"CCD22CE7-3A0A-48C3-95EB-C9DB3745EAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"37DF27D2-E4CB-4A49-8D42-F41ED29136C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ABB57804-F8DA-4366-9B75-E5241D137352"},{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C51558C-4DF9-4D62-A679-64361E584802"},{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E7C6E6DE-B5AC-48FA-A6EE-CF1C596D34BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:piwigo:piwigo:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"452E5E75-FD84-436E-A51B-793346A1456C"}]}]}],"references":[{"url":"http://piwigo.org/releases/2.0.6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://piwigo.org/releases/2.0.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4040","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzado (XSS) en phpMyFAQ antes de v2.0.17 y v2.5.x antes de v2.5.2, cuando se utiliza con Internet Explorer v6 o v7, permite a atacantes remotos inyectar HTML o scripts web a través de parámetros no especificados a la página de búsqueda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.16","matchCriteriaId":"8A1A9BDB-6778-4F3E-9ABD-3789BC2C0D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.60:*:*:*:*:*:*:*","matchCriteriaId":"5B26F173-5AB9-482C-8B3F-6424359E7062"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.65:*:*:*:*:*:*:*","matchCriteriaId":"A4D99DCE-969E-4E2C-8557-DF19F43F7388"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.70:*:*:*:*:*:*:*","matchCriteriaId":"C1833515-70CA-4B10-A947-5F8E544DA110"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.80:*:*:*:*:*:*:*","matchCriteriaId":"39A1B3D0-67F3-4F88-9952-D70CD86387B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.80a:*:*:*:*:*:*:*","matchCriteriaId":"5E802239-AE7E-4C17-A98C-8E685E77B5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.85:*:*:*:*:*:*:*","matchCriteriaId":"9E54ADFE-3386-41BC-B08B-DAE967327B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.86:*:*:*:*:*:*:*","matchCriteriaId":"70079FB1-278D-49A2-8211-E68B7F5F626D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.87:*:*:*:*:*:*:*","matchCriteriaId":"20020044-2E57-4789-AB98-1B113D523BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.90:*:*:*:*:*:*:*","matchCriteriaId":"5D5BB764-1B6F-433F-90A4-8103610E8F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.95:*:*:*:*:*:*:*","matchCriteriaId":"DA60DB45-5CFB-4EB2-ACD7-784B1905F259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:0.666:*:*:*:*:*:*:*","matchCriteriaId":"DBA9BBDE-97D0-4B30-AEBB-69A302630542"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"99738346-9DC0-4B8B-8FFC-6A966E45148E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BC6F3CC-2440-4701-9CCC-47FD1B84F9B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"1C67BA38-E7BE-471F-9785-89C625C77792"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"153DCD21-CF93-47F7-ABBA-D6911DC2CAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E41AAC1B-6768-48E3-87F8-07EC5569B010"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"344819F5-FBFB-4A1F-BDD8-5810E971B096"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA0455C3-04D5-4C0E-A208-A118D156887F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E3BB1EC6-C14A-4ECC-B9A6-C7669A5491AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.4a:*:*:*:*:*:*:*","matchCriteriaId":"BC6AE5E8-199F-4412-A119-FA5C1E7A9AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"72072594-4865-4887-86DA-CFA0016C9377"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BF373EBB-79A9-408D-A165-F77621432FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BC28624F-5720-4CA3-9A46-4FD068C3EF3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"39D5BD6D-2BE5-4D41-89CB-C75BAF31CEB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D1A6F367-786B-4724-8640-FEAF614CDC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C85053E4-DE47-4A1F-B575-DD7911832C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"223AA20B-677D-4B73-B154-1E4AA3174A87"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.5a:*:*:*:*:*:*:*","matchCriteriaId":"EF0C9783-6ED4-4B79-AE6C-F76482E47325"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.2.5b:*:*:*:*:*:*:*","matchCriteriaId":"8EB38F0F-C826-4B76-B736-E35BB9FD6662"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"06A50C4E-05E0-42A3-BD6D-0A94A63A4C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8C8D49BE-0858-4668-A6EA-537CDE4717FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"64F62405-EA47-4061-BD0B-063EA4E3CED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"456DC767-E09C-4E7F-9B48-EDD869EF7EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"0C0187F0-200A-4E51-BCED-9A30C339022B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"89E2D6B3-B087-4413-8C40-CEEEA6001194"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"EBC40AA1-5EC8-4184-973B-C91E706B84A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A3906A68-5C05-4D8F-84B8-C1E4C4E69D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"A77FFE78-0BA2-44F8-A84D-634060A7B471"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"0DD06BF1-A3ED-4E87-9E07-71746B98D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.9pl1:*:*:*:*:*:*:*","matchCriteriaId":"EBC2D031-6C8C-49A2-AF52-7C5FE83989B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"653DA520-718F-4327-B822-1A6E54427BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7F8C52FB-D19D-4BA1-990A-AB4ED2E59EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"4A956F61-5116-4F9B-BD3E-F933F104F0A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"C6B24AFF-1FAE-45C1-8983-D1B6ECC699A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"8E7E151B-F894-4141-AE91-DEF3C3DBF226"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4:*:*:*:*:*:*:*","matchCriteriaId":"89D2E1DC-EA41-4819-B700-78546932755C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"60CA0AB0-D9AE-463E-9D1B-E13B2F7B66DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.0a:*:*:*:*:*:*:*","matchCriteriaId":"89C9118F-6DD1-4606-BAB4-24DB619579EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7FEEA6B3-2F0A-4A5E-91C6-054B40C0CE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4334A3-FB00-4493-98BE-406374E2CAB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"A7C7BADC-3CCC-453E-A86F-487EC9B507AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"91A4FBAF-66FD-40C9-8C23-94813B43CE7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"7F1E2225-7B74-4142-85CF-BA0053C8717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"711ED6E4-67FB-484C-BEC7-0BB4E0EAD481"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"F01B0D69-34D9-4CE5-B42A-38312075D370"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"FA8FD2B5-400B-4A73-984C-D85B507D1B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"765D11EC-EFD1-4F70-A2A3-215A52B0A81D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"3A55E240-570A-45EE-A61C-05DF93EC28E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"38E0385C-4DE7-4543-A619-34E04F1CFAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*","matchCriteriaId":"B0B69808-C3F4-401E-996D-88091203698E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha2:*:*:*:*:*:*:*","matchCriteriaId":"39CA9672-6651-4654-89AB-AF45A3EB2492"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4a:*:*:*:*:*:*:*","matchCriteriaId":"E47EB76A-2314-4978-A146-C6C73CF018C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:*:*:*:*:*:*:*","matchCriteriaId":"5BCB304A-9B0D-4C9F-80FA-5BEDB9753A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"2BE9566E-D26D-4619-94FF-AD7C473BB153"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"581A3AC3-B3ED-4A0B-8B74-CCF34EAD14D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1DA504A1-D334-4FB7-8B98-38B868146267"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:rc4:*:*:*:*:*:*","matchCriteriaId":"06349C8E-757D-4E37-9F4A-9147ED2211E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5:rc5:*:*:*:*:*:*","matchCriteriaId":"AA1E819D-101A-44FC-A84D-868460732108"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A77EE89A-A920-45EF-845F-FE28C620AD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1E50CE3C-06D9-4543-9966-E277113BAA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DDABF09A-D991-4D64-806C-309FBE921B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7A47DF5D-6D36-4C47-9CBB-3FDF383D39E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"1981C9F6-1E0B-4E60-8F73-F655DF400975"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"55069115-5799-4566-842C-2ABE0E80E485"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"87B99D2B-D08E-4941-A319-C77FAA624DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A950FD89-A758-4260-B3C4-E4BF6144F1D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"FD3BE7E6-AE04-45E8-91CF-7315FE412431"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"49FFDD87-84FD-4659-A637-2BBC36B9E696"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_alpha1:*:*:*:*:*:*:*","matchCriteriaId":"34D1FA39-9778-488F-9582-E37060F3F92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_alpha2:*:*:*:*:*:*:*","matchCriteriaId":"A62052CA-95C7-43C9-B65B-C2E01EB0EBD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"89938096-681A-4D77-8BA2-3F4D0A2424E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta2:*:*:*:*:*:*:*","matchCriteriaId":"8215A5E3-4780-4E45-8B52-F8D00A71D7D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta3:*:*:*:*:*:*:*","matchCriteriaId":"6B7087AF-0DBF-4287-9B58-EA0C3F9F9134"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"89138047-5087-4CAD-BC37-5D9C4B52DBC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"57F45FD8-CEE0-472E-96D0-EA4890ABA85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B1E359E0-79B0-4B9F-A340-638E8DC5A0FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"7ACA7EB9-2466-41AB-BEDD-EBE303642A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"215166AC-1B68-44E9-9BB6-944097850B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"7136ACF5-6629-45F2-916E-EFE0A8EF45AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"D162F6CF-9517-4882-9181-9275D0CAFC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"39E68238-AF1F-4025-9A2A-1B180AF57B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"E224C228-2547-4A26-A24C-11D8A1770D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"49BCA838-0145-4F09-95B9-FAB417474033"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"8C4DFEF3-E1CE-474E-A269-672F9105F74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"C9760EB4-CC9D-4840-B9D0-2F53970E694E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"1451B4CF-6CF0-434A-9DC6-D85D7A4D58E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3E946E1A-A0C0-48C1-B0D5-1B669E01CCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79EB0C37-40ED-448D-8D93-68ACC98830A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"09CE187C-718B-46DC-95D2-88A1858C5528"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0243BBA2-4171-4427-9687-FBDF4F00231E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"305407F0-879A-4955-B2F6-E68AC1149A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AE5C0AE9-BBE2-4BE4-970B-D8F14571A3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4FFA40A9-0E2E-48D5-8389-CC14F8065A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"734AE267-7759-4F42-8296-B90F46A18498"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98A1E79E-5AC4-4920-89EA-4A2EC20C2138"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0E6CC647-5DBF-429D-BEDE-F15C3EBF092B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C6A1AC18-6E1D-4B1F-A74C-7B7F536ADBE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"C08EEDB8-AA94-4EE3-AFB4-D914B5E2C6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"52A746E1-281D-4ECD-AEF0-E1564FF48260"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"FD6E8AA8-6468-47C1-9B15-31A95C69E941"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FF5AE2E-3670-48FA-94F9-58FF8593CE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"2E0E6118-7C8C-49AA-B63A-33FCC9C228B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"3A54F0D1-7FB3-48DC-B24E-4B86C7C4DE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36EBB9DC-7531-4959-BB29-8B5199696DE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpmyfaq.de/advisory_2009-09-01.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3241","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phpmyfaq.de/advisory_2009-09-01.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4041","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags."},{"lang":"es","value":"UseBB v1.0.9 antes de v1.0.10 permite a atacantes remotos causar una denegación de servicio (bucle infinito) a través de etiquetas BBCode modificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usebb:usebb:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DA74E673-CFD4-4F98-B660-A873140EDC7E"}]}]}],"references":[{"url":"http://secunia.com/advisories/37328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37010","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.usebb.net/community/topic-2388.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.usebb.net/community/topic-post9775.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3222","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.usebb.net/community/topic-2388.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.usebb.net/community/topic-post9775.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4042","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el tema de Drupal \"RootCandy\" v6.x antes de v6.x-1.5 permite a atacantes remotos inyectar HTML o scripts web a través de la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB81E6D3-CB1E-4DCB-935E-C966EE3AEBC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"BBD84388-C503-4AEA-87FD-1E2FEBC29110"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"F8BA0887-6EA3-490A-8F88-14B0343B66EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"E8D018DA-69F0-4B0E-96A1-2A77DDB45FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"209B97DD-6013-4F03-8E84-95A8159DCF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:rc_1:*:*:*:*:*:*","matchCriteriaId":"F9BED77F-51A3-40C9-83DE-744E734190B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:rc_2:*:*:*:*:*:*","matchCriteriaId":"8C603A91-AEB6-435D-B54F-0EF0FFE0CB0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:rc_3:*:*:*:*:*:*","matchCriteriaId":"A9426C5E-77C4-42F6-AB21-C33014B4D0E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:rc_4:*:*:*:*:*:*","matchCriteriaId":"2971E171-312A-47E0-A862-A1D4522C5A8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.0:rc_5:*:*:*:*:*:*","matchCriteriaId":"72BC1438-EC5F-4539-AEFE-F1D9514929D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"787DA539-DBE6-4010-8266-11D8646742D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D82E704-290B-4629-AF9E-7674A2203F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"E256B411-730D-4356-98DA-D1706DF2AB3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"67543F6C-6349-43F4-996B-27CB19119426"},{"vulnerable":true,"criteria":"cpe:2.3:a:marek_sotak:rootcandy:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"1A79488D-E370-4229-8F62-94B02A57B496"}]}]}],"references":[{"url":"http://drupal.org/node/629894","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/630168","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/59914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36998","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54245","source":"cve@mitre.org"},{"url":"http://drupal.org/node/629894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/630168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/59914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4043","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:01.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via a node title."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzado (XSS) en el módulo de Drupal \"AddToAny\" v5.x antes de v5.x-2.4 y v6.x antes de v6.x-2.4 permite a atacantes remotos inyectar HTML o scripts web a través del título de un nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-0.x:dev:*:*:*:*:*:*","matchCriteriaId":"0065C7CF-4C8D-451E-8E6F-7DEA80210400"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"EA713F53-4DB2-4EAB-BAF1-9CAFE5DD11B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"711684DD-EAD7-40C3-AEB2-E06B4C8C7A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"D447625C-DAA9-45D4-88CA-B163A9F25F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"B958AAB6-4BBF-46FE-92DA-0D35E3CAFA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.35:*:*:*:*:*:*:*","matchCriteriaId":"878D4494-93C6-4B18-9019-BF723031FE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.36:*:*:*:*:*:*:*","matchCriteriaId":"3605C7FA-D63B-44BA-9C07-C4F014F8808E"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"E57507B9-5971-455D-8091-8AC3FD463E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF474FD-F7E4-4793-80ED-3BD0F8D19115"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"39E0411F-BAC5-4124-AAAC-A1273D00B3F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"80A67FE0-FFA4-4905-BC50-826191042DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"F9A3AAAF-02B3-4A10-9ED7-76C01D1F0794"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"035FB4EF-5956-4E03-A485-65FB994371FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"51D02625-32AE-4D70-8E83-F18C6CE8F830"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A0E1E8E-79EC-425E-ADB6-9BE118D72B8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-1.35:*:*:*:*:*:*:*","matchCriteriaId":"A66BAA22-F22A-4748-9467-5CCCACE1CA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-1.36:*:*:*:*:*:*:*","matchCriteriaId":"D3FFB133-81FE-4D53-B608-6027B03AD4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"F8386465-FB09-450D-B830-16488C0A4596"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E752A-B3A5-4B81-9D80-A0C1CED2B7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"9408CAF9-50D2-4AE5-814E-73360212BA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"F1B823AB-519B-4991-BE49-8BD832BFD272"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_przybilla:addtoany:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"3E32D6E8-31C3-4524-8018-BEDAD1CE5B4E"}]}]}],"references":[{"url":"http://drupal.org/node/601110","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/630198","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/630208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59913","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36999","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3211","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54247","source":"cve@mitre.org"},{"url":"http://drupal.org/node/601110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/630198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/630208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/59913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4044","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:01.047","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors."},{"lang":"es","value":"El módulo \"Web Services\" v6.x de Drupal no realiza correctamente el control de acceso, lo que permite a atacantes remotos para hacer un uso no especificado de una API a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bruno_massa:web_services:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"1E33CA31-4EDD-45A9-B3A8-C83DB6E92201"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/630244","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37000","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54249","source":"cve@mitre.org"},{"url":"http://drupal.org/node/630244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4045","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/, and (9) taxes/db/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en FrontAccounting (FA) antes de v2.1.7 permiten a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados a varios ficheros .inc y .php en los directorios (1) reporting/ (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/ y (9) taxes/db/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.6","matchCriteriaId":"4D960EE9-9570-4AD6-9E59-D3A86DCA53D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C37539D1-729E-498A-825E-B1B0D0AF6D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1660E02B-2461-4E9F-A4AF-03314FBA102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01BF1047-33D4-4CC8-BF62-9F68DA2315EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EEBE05A1-22D7-43F0-B19E-BDE611B9A4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"86191646-E5C1-40A6-A41E-95057E182AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FD6DFBA1-53A4-4E58-A7BB-659F883BB3F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"03848CEE-215A-46A4-8083-F1D749D7BDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B9542D25-071D-4706-8846-AB7F0D0868B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC0D9A7-3FC4-4E00-8E02-5B0D0947A4BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta:*:*:*:*:*:*","matchCriteriaId":"EB733D44-24AB-4FE0-8B0E-73AC2BDC6CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"5A1C2818-5B30-49D5-82B2-91849BE760B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.0:rc:*:*:*:*:*:*","matchCriteriaId":"B75313EA-C5D6-453C-9A12-7BC1F1A217AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6730538F-C3B7-4225-AB85-8308B16B0818"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"74AA0164-181D-4B1F-9AC8-E46330F877BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"35155DDF-48A3-4986-BB9C-6A7C5E1C5747"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"65899469-E873-448E-AB9F-20711F9F3286"},{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E868030C-BA4B-47F7-AE30-F1E844F769DF"}]}]}],"references":[{"url":"http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37327","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4046","sourceIdentifier":"cve@mitre.org","published":"2009-11-20T19:30:01.187","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_account_types.php, and (5) gl_accounts.php in gl/manage/; and (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, and (10) references_db.inc in includes/db/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en FrontAccounting (FA) v2.2.x antes de v2,2 RC permiten a atacantes remotos ejecutar comandos SQL a través de parámetros no especificados en (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4 ) gl_account_types.php, y (5) gl_accounts.php en gl/manage/, y (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, y (10) references_db.inc en includes/db/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontaccounting:frontaccounting:2.2:beta:*:*:*:*:*:*","matchCriteriaId":"26EB65FE-C827-4F86-B237-86F49924CA5F"}]}]}],"references":[{"url":"http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4047","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to area.php; the (2) pagina, (3) sentido, (4) q_registros, and (5) orden parameters to area.php; (6) the q_registros parameter to solic_display.php; (7) the PATH_INFO to area_list.php; (8) the q_registros parameter to area_list.php; (9) the PATH_INFO to atributo.php; the (10) pagina, (11) q_registros, and (12) orden parameters to atributo_list.php; (13) an arbitrary parameter name beginning with \"sentido\" to atributo_list.php; and (14) the PATH_INFO to caso_insert.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en PHD Help Desk v1.43 permiten a atacantes remotos inyectar codigo de script web o código HTML a través de (1) el PATH_INFO de area.php; los parámetros (2) pagina, (3) sentido, (4) q_registros, y (5) orden de area.php; (6) el parámetro q_registros de solic_display.php; (7) el PATH_INFO de area_list.php; (8) el parámetro q_registros de area_list.php; (9) el PATH_INFO de atributo.php; los parámetros (10) pagina, (11) q_registros, y (12) orden de atributo_list.php; (13) un parámetro de su elección cuyo nombre empieza con \"sentido\" a atributo_list.php; y (14) el PATH_INFO a caso_insert.php. NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos de información procedente exclusivamente de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:p-hd:phd_help_desk:1.43:*:*:*:*:*:*:*","matchCriteriaId":"287123BB-3A1C-4E38-A5BD-68152F3C2395"}]}]}],"references":[{"url":"http://osvdb.org/60085","source":"cve@mitre.org"},{"url":"http://osvdb.org/60086","source":"cve@mitre.org"},{"url":"http://osvdb.org/60087","source":"cve@mitre.org"},{"url":"http://osvdb.org/60088","source":"cve@mitre.org"},{"url":"http://osvdb.org/60089","source":"cve@mitre.org"},{"url":"http://osvdb.org/60090","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37375","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37029","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/60085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4048","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage) via an APPE command to one socket in conjunction with a DELE command to a second socket."},{"lang":"es","value":"Dxmsoft XM Easy Personal FTP Server 5v.8.0 permite a usuarios remotos autenticados realizar una denegación de servicio (caída del demonio) a través de un comando APPE a un socket junto con un comando DELE a un segundo socket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxmsoft:xm_easy_personal_ftp_server:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C970FC7F-E24F-4E06-8120-9ACE057739EA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507853/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37016","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54277","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507853/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4049","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en aswRdr.sys (también conocido como el controlador TDI RDR) en avast! Home y Professional v4.8.1356.0, permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) o posiblemente elevar sus privilegios a través de argumentos manipulados a IOCTL 0x80002024."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_home:4.8.1356.0:*:*:*:*:*:*:*","matchCriteriaId":"03785A63-99D8-4289-AE31-73FA1934B5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avast:avast_antivirus_professional:4.8.1356.0:*:*:*:*:*:*:*","matchCriteriaId":"A119A362-47B2-4798-9BDF-75AB46242877"}]}]}],"references":[{"url":"http://secunia.com/advisories/37368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507891/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3266","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507891/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4050","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en get_file.php en phpMyBackupPro v2.1, permite a atacantes remotos leer archivos de su elección a través de secuencias de salto de directorio en el parámetro \"view\". NOTA: el origen de esta información es desconocido. Los detalles únicamente han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmybackuppro:phpmybackuppro:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4A51CAEF-9F1A-4A8D-926E-5AF5BB1A03CB"}]}]}],"references":[{"url":"http://osvdb.org/60073","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/60073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4051","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage) via multiple invalid SITE INDEX commands."},{"lang":"es","value":"Home FTP Server v1.10.1.139, permite a atacantes remotos provocar una denegación de servicio (agotamiento de demonio) a través de multitud de comandos SITE INDEX inválidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:downstairs.dnsalias:home_ftp_server:1.10.1.139:*:*:*:*:*:*:*","matchCriteriaId":"78EE6007-26A0-454C-9E50-B03D51BAD5CC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37381","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507893/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37033","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507893/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4052","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en JSF Widget Library Runtime de IBM Rational Application Developer de WebSphere Software   en versiones anteriores a la v7.0.0.10 y Rational Software Architect en versiones anteriores a la v7.0.0.10 permiten a los usuarios remotos inyectar codigo de script web o código HTML a través de vectores de ataque que involucran (1) JSF Tree Control y (2) JavaScript Resource Servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0:*:*:*:*:*:*:*","matchCriteriaId":"473829D7-3027-4F7C-9E44-D6EBBB5D0871"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8E18456C-7779-4408-932C-0E63DB619CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"424A182E-561F-42A8-98FC-09E5E44F994E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"90194CF7-58CE-43AB-A4C1-0143517A8AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B308DA0C-6E09-4A89-8FCD-59100F47587B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3AE51730-0929-4AFA-BF18-298F0389546B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"03D5C500-E712-461F-B1A6-7582A17436DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"8EE5CF1E-9563-407D-A3CD-B63B5766C5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0CD19C41-E08F-4022-9300-DBD56204794D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_application_developer_for_websphere:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"AE851829-20D2-4B2D-B3CF-3D068B483E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73FACCC2-2CE2-43D5-B06C-85FD67D90297"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D52DF841-C80B-4C53-A014-8EFE151FD9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9C5F515-19B6-4BC2-A28F-C08042A45FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BF857688-54B1-42B8-B9B2-6CD325B2E922"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BED1E176-0914-4201-BF55-3F0E4BCCBB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3C25E22B-B7D1-4632-BAD7-FDD0BF070A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"14166F79-8DEA-4A2E-8102-8C716609E36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9AA30626-D56F-4107-A54E-E0B9E879E3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3F7FCAE6-610D-43FD-9C05-FB3D085E4854"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_software_architect:7.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A1F66A-DF89-402D-A54B-2E973D79F9F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK90616","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK94324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012378","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012558","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/60319","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37083","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54360","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK90616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK94324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27012558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/60319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4053","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to (1) create arbitrary directories via directory traversal sequences in an MKD command or (2) create files with any contents in arbitrary directories via directory traversal sequences in a file upload request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Home FTP Server v1.10.1.139 permiten a usuarios autenticados remtos (1) crear directorios de su elección a través de secuencias de salto de directorio en un comando MKD o (2) crear ficheros con cualquier contenido en directorios de su elección a través de secuencias de salto de directorio en una petición de subida de fichero.  NOTA: el origen de esta información es desconocido; los detalles han sido obtenidos únicamente de información de terceras partes."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:home_ftp_server_project:home_ftp_server:1.10.1.139:*:*:*:*:*:*:*","matchCriteriaId":"2377037F-B08A-4896-9466-666F2D65E337"}]}]}],"references":[{"url":"http://secunia.com/advisories/37381","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54303","source":"nvd@nist.gov","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/37381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4054","sourceIdentifier":"cve@mitre.org","published":"2009-11-23T17:30:00.797","lastModified":"2023-11-07T02:04:42.053","vulnStatus":"Rejected","evaluatorComment":"\r\n\r\nPlease refer to CVE-2009-3672 for more updated information from vendor.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3672.  Reason: This candidate is a duplicate of CVE-2009-3672.  The duplicate was assigned by the CNA without proper coordination with MITRE.  Notes: All CVE users should reference CVE-2009-3672 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-4055","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T11:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of service (daemon crash) via an RTP comfort noise payload with a long data length."},{"lang":"es","value":"rtp.c en Asterisk Open Source v1.2.x anterior a v1.2.37, v1.4.x anterior a v1.4.27.1, v1.6.0.x anterior a v1.6.0.19, y v1.6.1.x anterior a v1.6.1.11; Business Edition B.x.x anterior a B.2.5.13, C.2.x.x anterior a C.2.4.6, y C.3.x.x anterior a C.3.2.3; y s800i v1.3.x anterior a v1.3.0.6 permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través una carga útil del RTP ruido de confort con una larga longitud de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"39358795-09A6-44C6-B969-1560CEF40057"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"8C2DAB51-91ED-43D4-AEA9-7C4661089BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A596A018-2FBC-4CEB-9910-756CC6598679"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"14BDCF8E-0B68-430A-A463-EE40C1A9AD65"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"CA2CD93E-71A5-49EC-B986-5868C05553EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2B66B213-4397-4435-8E48-8ED69AAE13D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"55131A3D-C892-44EC-83D6-5888C57B11A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.2:netsec:*:*:*:*:*:*","matchCriteriaId":"E017DD53-B8EC-4EA2-BF59-18C075C5771D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B940EEC6-4451-42B9-A56D-BDB8801B3685"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"CE4AB19F-1338-466D-AAD8-584C79FED1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"175954A5-E712-41B8-BC11-4F999343063D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"FF5A2AA3-BB1F-4DEA-A369-183877BBDAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"1DF9E41E-8FE6-4396-A5D4-D4568600FE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"7B43C508-91E3-49C9-86F0-3643D8F2B7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"4457486F-E9B4-46B8-A05D-3B32F8B639A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"0831E658-36AB-4A4B-9929-3DB6BE855A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"69417F54-D92F-46FB-9BFA-995211279C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.12.1:netsec:*:*:*:*:*:*","matchCriteriaId":"46A770C7-A7D4-44E3-A8B4-AC2189EAC3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"4611BEA0-25EC-4705-A390-6DF678373FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"4BCD1F97-4B56-4DA8-A6EC-FA42A3CB9B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"53022458-F443-4402-AC52-FC3AE810E89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"120B85AA-E9B8-4A4D-81CE-FD36CDB63074"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"64D94742-7CA1-487B-90E8-5063FBF88925"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"12302460-5D3F-4045-9DBF-606562E03BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"78546FDF-C843-4E48-ABEE-CC3514AA7C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"8D6EBC0B-9842-44D1-B9D6-EFB88BE22879"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"052969F1-6758-46E8-9273-E0F872BD65BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"624A0F00-4629-4550-847F-F24CC93DFF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"E473F645-F8B0-43FE-957B-F053427465DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"10FC9AAB-1FAD-4953-A2FC-D42E9687D27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"460C9907-AA19-402A-85DE-D3CEA98B107B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"CD80F0D6-6B5B-41D3-AC41-F1643865088A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"734D5198-53C1-40D3-B5BF-D74FC71FD3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"788DEF5E-8A99-463D-89DC-0CC032271554"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"C0996D7A-9419-4897-A0AF-498AC3A2A81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"62D670E6-47E5-4B40-9217-F97D5F39C3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"94C23DB8-3C92-40FE-B8A6-ADF84D28510E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"A6CE7E4E-DA2D-4F03-A226-92965B40AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"0C59A947-457E-47EB-832E-3DA70CB52695"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"55F74B56-B412-4AF1-AED0-C948AB6DC829"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"3B50ADDB-D3C2-407D-8844-F93866E5F20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"2775A7CC-2D88-4F2D-8C26-1E0DDDD681E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"F4149B59-E773-4ED8-A71D-EB7D00808819"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"5A0408C3-0FA7-4A17-9451-C4D46CDA8F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"1726090D-0C37-44A4-AD9B-7ED733B8702D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"B92B045B-8CD6-4C04-9CCB-DCE9A44F6C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"54354E16-3238-43E8-BAA9-93CA7EB44D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"6867EED4-FC3B-4B72-88A5-DED96C729FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"1A0867FC-7161-433F-A416-D7207C8D4D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"97BE6B60-3276-4580-843B-743D0D71E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"36491B32-A405-4C5B-938F-9BEA50A8AF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"6141909B-EBC4-4726-AE9F-669C31257A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"754A51AC-EF20-4736-ADDB-D2A70BCB79EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.28.1:*:*:*:*:*:*:*","matchCriteriaId":"4600BB66-6DEB-444B-AF9E-BDD06CFD2876"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"EE089E31-3521-4D12-B81C-B6E386AE1409"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"FFE86E95-1110-46DF-9A7A-0E1AA56ACE4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.1:*:*:*:*:*:*:*","matchCriteriaId":"5B6DF5C5-85B4-4595-A69B-1DE70B5E0E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.2:*:*:*:*:*:*:*","matchCriteriaId":"1F5E9888-16CD-4DB2-8889-CE4477559C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.3:*:*:*:*:*:*:*","matchCriteriaId":"C29C9A2C-6435-444E-A20B-5881F3798B85"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.30.4:*:*:*:*:*:*:*","matchCriteriaId":"E77A2569-CFAE-498D-A633-803849CFECE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"D16E88E6-42D0-400E-AF43-111B35CE11E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AE15A42E-030B-48F0-9498-1755DAAEDFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.32:*:*:*:*:*:*:*","matchCriteriaId":"39511726-1202-4179-9708-4D3B28496768"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.33:*:*:*:*:*:*:*","matchCriteriaId":"2A9A4328-F274-4591-A386-943FD6608374"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.34:*:*:*:*:*:*:*","matchCriteriaId":"1B4A8C9A-A475-4F02-A6BC-F17CEECBF0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.35:*:*:*:*:*:*:*","matchCriteriaId":"CF11B38A-12D7-453A-870D-CDC2DE9313CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.2.36:*:*:*:*:*:*:*","matchCriteriaId":"9D69ACB7-CF9A-40B5-819E-58DA884D4E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E56DB29-571D-4615-B347-38CF4590E463"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"FC1188DA-6C27-48D2-9CE7-74D77B24EE9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A93B8F91-5C56-44DE-AE29-8468E853759F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BF7F4D02-7C8E-403C-A53E-A5F8C07F33A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"D85031A3-3444-4650-905D-721F1EBAA24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6F0AC2B3-6E8A-4B26-8A6C-792D9E5072C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2BC8D6D4-A389-4A78-8DA8-351A9CB896E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5E979AC4-58EA-4297-9F90-350924BBE440"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"3A58CCD3-4A0C-468B-85F2-59A52B7293A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"3542DB91-8487-49D6-AA15-E8FD9D6B99D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"6BA4F3F1-C3F1-4E15-A854-9BB84E33E4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"661D710E-79F0-4E98-B35B-ED0549D35C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"68291ADE-F9D1-427B-B150-FDA7F2F4788B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"7F80CBCB-F58D-4BE7-8E78-67E04C900D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"EB61D32E-3400-480E-BD27-BA3F98F94427"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"D9154EDB-CAE6-4BB0-8D02-9EC2B81D93C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A432B0A7-F158-4B9C-97F6-6A29DB13EAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"687C67CB-46AF-40C2-8A02-081C7F78568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"6E8D6EC0-A61E-4DBC-A0C7-864E9C4BDA1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF7F65A-45FD-4586-901E-49B057100BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"300F158E-ED27-46C8-85E4-AA0AA6B201DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"FB6F04C0-3226-4D2C-97A3-39999483C62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"30685A20-963A-48D4-B7D7-2C11C2C812AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"C54C3AAC-4D5D-4661-86AB-6849982E8C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"6F847916-89F1-4AA6-973D-6002C8B54EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"5359815E-671A-4DFD-9E99-8CF903A03C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"E2EFBC9E-4DCA-43CB-93EB-6807E2383A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"98755B1B-CAD5-4AC5-8571-52E67C3A8274"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:*:*:*:*:*:*:*","matchCriteriaId":"C9D8C8FE-3D09-4F60-AD03-9D4439942141"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc1:*:*:*:*:*:*","matchCriteriaId":"902FBE4B-5237-43CD-8EB6-D2CAC0F30879"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc2:*:*:*:*:*:*","matchCriteriaId":"708DCACA-49EC-468D-81EC-CE5367F8A164"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc3:*:*:*:*:*:*","matchCriteriaId":"BA9E3314-7D23-414C-8187-16D807410B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19:rc4:*:*:*:*:*:*","matchCriteriaId":"D824ED7B-BAB6-4C0F-A6B0-A75AB072EC0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19.1:*:*:*:*:*:*:*","matchCriteriaId":"7A01CE63-F834-48B2-826D-2DAD1B4AE8C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.19.2:*:*:*:*:*:*:*","matchCriteriaId":"88B9CC9D-3DC2-4674-BA52-4C6D4E2056C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:*:*:*:*:*:*:*","matchCriteriaId":"43F1849F-1230-45E7-B6A3-D6FC72EB0F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:rc1:*:*:*:*:*:*","matchCriteriaId":"873C9C7E-93A3-4269-B19C-AB33A21C1AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:rc2:*:*:*:*:*:*","matchCriteriaId":"457F2112-7C5E-4953-8F4C-117925D486DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20:rc3:*:*:*:*:*:*","matchCriteriaId":"BD15ADD6-D7FA-441A-A9BC-487BCC15F2A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.20.1:*:*:*:*:*:*:*","matchCriteriaId":"792A8901-B7B8-40E8-9258-6338B72770FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21:*:*:*:*:*:*:*","matchCriteriaId":"0E6C8F78-0C00-45A5-8FEB-2A4BD5AC1A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21:rc1:*:*:*:*:*:*","matchCriteriaId":"F3E04247-C4EF-4C1B-B879-5C02986950D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21:rc2:*:*:*:*:*:*","matchCriteriaId":"5E382FC8-4001-4058-9151-05AE98B4A35E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21.1:*:*:*:*:*:*:*","matchCriteriaId":"11FECE6B-B6A6-4DDA-9019-9A10B05EC1F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.21.2:*:*:*:*:*:*:*","matchCriteriaId":"D9813D27-0688-4989-99EB-1DC0F82D59F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"D4333904-9D21-4149-965F-F49F0A34BD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc1:*:*:*:*:*:*","matchCriteriaId":"F7180626-F0FD-46F3-AD52-5C67525C4B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc2:*:*:*:*:*:*","matchCriteriaId":"85A1E3A3-C157-4F3D-9477-F63771E7F627"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc3:*:*:*:*:*:*","matchCriteriaId":"FEE739CC-7A9C-489E-BFC0-6257129C043D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc4:*:*:*:*:*:*","matchCriteriaId":"ADC0E947-A95A-44ED-8DED-CC769FF00569"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22:rc5:*:*:*:*:*:*","matchCriteriaId":"DE52BD9F-3728-455C-BC45-1A4DB926FFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF82D41-9222-42D3-ADAD-94B4F950C63F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.22.2:*:*:*:*:*:*:*","matchCriteriaId":"2AE9F181-A8E4-4700-A30F-211CDE251606"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*","matchCriteriaId":"5B10AE4B-EC2D-4D5B-B842-50F5097A0650"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc1:*:*:*:*:*:*","matchCriteriaId":"83E854D0-17A2-473B-B7E8-41E6447C81DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc2:*:*:*:*:*:*","matchCriteriaId":"47169133-3854-4D8F-B79E-3CC77A166EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc3:*:*:*:*:*:*","matchCriteriaId":"6071601F-CF37-4E66-9D6D-AFC3434C18AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23:rc4:*:*:*:*:*:*","matchCriteriaId":"2A575824-E005-4820-824A-4875594619E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*","matchCriteriaId":"080C7089-5662-4A94-9842-C4A26095DA4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.23.2:*:*:*:*:*:*:*","matchCriteriaId":"7AE38697-0B16-4032-9234-CA263E4A9885"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.24:*:*:*:*:*:*:*","matchCriteriaId":"DCB18BE2-B073-429C-ABE7-B8305793DAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.24:rc1:*:*:*:*:*:*","matchCriteriaId":"FA7216BA-A42F-4ED8-8086-B4FA483FDAB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.24.1:*:*:*:*:*:*:*","matchCriteriaId":"CB7D2048-CD61-46C0-830B-11976B275783"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.25:*:*:*:*:*:*:*","matchCriteriaId":"8DBA63FE-62AF-4F3D-B30C-550D17C4E35F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.25:rc1:*:*:*:*:*:*","matchCriteriaId":"AD0A0F19-020D-4578-9023-12B0CB646D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.25.1:*:*:*:*:*:*:*","matchCriteriaId":"96D5A1E3-FF0B-4C71-AA51-655D7106880D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:*:*:*:*:*:*:*","matchCriteriaId":"E5D425E6-E2E5-4452-9EAA-2697C1155784"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc1:*:*:*:*:*:*","matchCriteriaId":"9855FA26-0930-4AC9-A920-B394F6916349"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc2:*:*:*:*:*:*","matchCriteriaId":"BBA21246-7DF4-41BC-998A-05D38FC97C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc3:*:*:*:*:*:*","matchCriteriaId":"EE9A7984-22C9-4296-8E44-C010E67F193D"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc4:*:*:*:*:*:*","matchCriteriaId":"51B2C42A-C252-4BD8-A908-8F30C2BF15E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc5:*:*:*:*:*:*","matchCriteriaId":"2137CEAD-0F19-43C5-A26D-1972564FCD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26:rc6:*:*:*:*:*:*","matchCriteriaId":"B7552466-B782-4F16-8561-A2A51E94FED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F8C82D-3031-4C62-89FA-3BF56EA29727"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.26.2:*:*:*:*:*:*:*","matchCriteriaId":"B3074CEA-46BD-4CAD-BF5C-10008A80E434"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.27:*:*:*:*:*:*:*","matchCriteriaId":"E06848DE-6EE1-4FD0-A14F-39D41B2F3E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.4.27:rc5:*:*:*:*:*:*","matchCriteriaId":"88FBC328-538A-4484-A342-1688D9669B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B8374B5D-DE7A-4C3C-A5FE-579B17006A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C7494CE2-D3CC-404D-BE61-09A2E1FB3E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"06E48482-D9AF-4038-80DA-27D9B4907C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"9BC3C441-290F-471A-BA19-6B1C4D72A670"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"632ED295-B67D-43CF-BF38-CCE04088BA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta5:*:*:*:*:*:*","matchCriteriaId":"50F3835F-6F2B-4EA7-B111-3B3C26548BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta6:*:*:*:*:*:*","matchCriteriaId":"0DCF7BD2-7903-4DC5-ADDC-EFCDC58736C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta7:*:*:*:*:*:*","matchCriteriaId":"E5BECFE0-286F-4DA1-8CA9-6CEE861C3012"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta7.1:*:*:*:*:*:*","matchCriteriaId":"AFFF3245-2D0F-46E3-A1D6-319086489DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta8:*:*:*:*:*:*","matchCriteriaId":"C91F2524-99D1-4C4B-9A31-21C0FB8B4D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:beta9:*:*:*:*:*:*","matchCriteriaId":"7B1BC0FF-9DB6-4FCC-A845-053943CF0D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc4:*:*:*:*:*:*","matchCriteriaId":"419D4D16-E790-4872-B9AF-1320978768C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc5:*:*:*:*:*:*","matchCriteriaId":"73D30BA6-1EE0-4C3F-8F69-65C698A1B9A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0:rc6:*:*:*:*:*:*","matchCriteriaId":"D39FA25D-AB56-470D-94AB-14446DB7D475"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4225252F-5960-4A42-A575-00C125860E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A65D76A8-BBDD-4BDE-B789-D745C400DCBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A8B0F5A5-4252-4A9C-B830-2419E87AE5A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F9085056-3BE9-4309-9601-9CA0569BC215"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D8432455-9064-479F-B060-BF2A74ECC3EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8EF2D7-371B-4268-989E-25225CC1F7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"ABAC4CE9-1CFA-4279-B0CE-18F3C6FB9AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E16E37A0-F739-4EEE-A1BB-EBC558C62767"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DF0E2562-D0FC-404C-B725-617AEEF20AB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C831EC2A-C99D-4FB1-8E5C-2FF685792F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F37C4158-6C4E-448D-929B-288480748289"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"6BBA9D27-E3DC-45CE-B56B-2C6781AA6A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.11:rc1:*:*:*:*:*:*","matchCriteriaId":"14CD1CCD-DFF2-4813-B56F-EA1C78AA818E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.11:rc2:*:*:*:*:*:*","matchCriteriaId":"4499411B-C92E-47F3-A6F2-8C9011B1CBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"57325096-F4D8-4146-A6FD-93219F2C72D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.14:rc1:*:*:*:*:*:*","matchCriteriaId":"9684FD88-7422-4272-B9BC-D8638B1AA0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.15:*:*:*:*:*:*:*","matchCriteriaId":"648639A2-26C4-4EDA-A982-25D400836696"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.16:*:*:*:*:*:*:*","matchCriteriaId":"4F9F6FF8-8B88-4A02-B23A-0CADA8CE316E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.16:rc1:*:*:*:*:*:*","matchCriteriaId":"37DE011D-1C1B-46AC-9265-F82693CE3C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.16:rc2:*:*:*:*:*:*","matchCriteriaId":"790BF14A-0193-4A5C-802B-D82200B22342"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.0.18:*:*:*:*:*:*:*","matchCriteriaId":"15C4C10F-BD36-491A-87E7-2F072796DA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B8FE4BCF-9AE7-4F41-BA84-E9537CC1EBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F25B0D15-7C09-4BBB-AC84-A1898F448DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"F259057F-3720-45D8-91B4-70A11B759794"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"A106C460-4CE2-4AC3-B2FD-310F05507511"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"3E119FF9-2AD3-450D-8BBF-C6DD063246EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"759221D5-FC37-446D-9628-233B8D0B9120"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F82D4812-0429-42D4-BD27-C76CB9E7C368"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F8FE11D6-8C0A-450E-B6DA-3AFE04D82232"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D1FBCC8-4637-4A67-BFFD-C052C3C03C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F7307E10-9FA5-4940-B837-7936384F61DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"3D0DC9D6-D4D6-46CB-98DA-F4FC1835B6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DBBD0747-F3FF-46D8-A3C4-8268E37BC5AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"3F759F27-008E-47FB-AC0A-EF11DA19918E"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"D15C82BA-BD1F-4A19-A907-E6C30042F537"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2E802481-C8BD-4218-8CDC-5DB112DA946C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"93C020CD-D0EA-4B3E-B33C-F900B08B28FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.10:rc1:*:*:*:*:*:*","matchCriteriaId":"0004AADE-1652-4242-A97D-E9818FE03CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.10:rc2:*:*:*:*:*:*","matchCriteriaId":"543E9C91-60FE-43AE-9B94-08DD730BA814"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:1.6.1.10:rc3:*:*:*:*:*:*","matchCriteriaId":"252849FA-F46E-4F5A-A488-AA53574CA884"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"565444DE-F67C-4B6E-AC1E-92FC0D8A87CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80E356B2-4AEA-4532-A6F8-13B814BEB2C8"},{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"60F261AB-3172-4245-8090-744294A0D08A"},{"vulnerable":true,"criteria":"cpe:2.3:h:digium:s800i:1.3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3DD6B08-D77D-4275-8F91-2CA47FF6E363"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b:-:business:*:*:*:*:*","matchCriteriaId":"564A4529-997D-4615-BED8-AE3FB159689A"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.1.3.2:-:business:*:*:*:*:*","matchCriteriaId":"FE9D66C4-F49D-4EC4-B5A9-24F28726A9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.1.3.3:-:business:*:*:*:*:*","matchCriteriaId":"BEFA5054-D5F9-4D07-9A66-D7AAD6953F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.2.0:-:business:*:*:*:*:*","matchCriteriaId":"D110DCEB-F2F9-4600-B49F-22952C71B785"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.2.1:-:business:*:*:*:*:*","matchCriteriaId":"3333A119-D92F-433C-BF5D-0037199256C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.1:-:business:*:*:*:*:*","matchCriteriaId":"19C44C33-EADA-48FD-A634-8066A003AFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.2:-:business:*:*:*:*:*","matchCriteriaId":"294A2BA2-26EB-40AD-B861-7FA9043CD097"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.3:-:business:*:*:*:*:*","matchCriteriaId":"4FAC61AF-BDF2-4397-A8F8-9D9155836E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.4:-:business:*:*:*:*:*","matchCriteriaId":"33DE61C2-8C6A-4CD3-8D56-E70C4356CD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.5:-:business:*:*:*:*:*","matchCriteriaId":"EECB5F75-BCE2-4777-933E-25EB5657750C"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.3.6:-:business:*:*:*:*:*","matchCriteriaId":"B5D51557-3E67-4C9A-9753-472D13FCA5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.0:-:business:*:*:*:*:*","matchCriteriaId":"C063FCFA-B1C3-4ACB-B9E7-B3FC973FD898"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.1:-:business:*:*:*:*:*","matchCriteriaId":"761DB3A3-1540-4976-AEB2-F8E45CCCC5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.2:-:business:*:*:*:*:*","matchCriteriaId":"B53CD2C1-9BF0-42F9-B3E3-2C9915E531C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:b.2.5.3:-:business:*:*:*:*:*","matchCriteriaId":"947F58B8-21AF-460B-8203-D2605A1F91D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c:-:business:*:*:*:*:*","matchCriteriaId":"7CD989BE-8FA0-4EDB-8442-C2E12BD01D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c.2.3:-:business:*:*:*:*:*","matchCriteriaId":"3FA908BA-BEF8-44A5-AC95-E7CF020D0C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:digium:asterisk:c.3.0:-:business:*:*:*:*:*","matchCriteriaId":"78E8936C-033B-49E6-BB39-D5BBBC80EB55"}]}]}],"references":[{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.diff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://downloads.digium.com/pub/security/AST-2009-010.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37530","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37708","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023249","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60569","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-December/msg00759.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508147/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37153","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54471","source":"cve@mitre.org"},{"url":"https://issues.asterisk.org/view.php?id=16242","source":"cve@mitre.org"},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.diff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://downloads.digium.com/pub/security/AST-2009-010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2009-December/msg00759.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508147/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.asterisk.org/view.php?id=16242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4056","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the popup parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/popup.php de Betsy CMS v3.5 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a traves de los caracteres .. (punto punto) en el parámetro popup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:betsy:betsy_cms:3.5:*:*:*:*:*:*:*","matchCriteriaId":"AC5E3D0C-2342-4745-8DCE-FAAA24ABC351"}]}]}],"references":[{"url":"http://secunia.com/advisories/37422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0911-exploits/betsycms-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3314","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0911-exploits/betsycms-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4057","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en el componente de Joomla! inertialFATE iF Portfolio Nexus (com_if_nexus) 1.1 permite a atacantes remotos ejecutar comandos SQL a través del parámetro id en una acción de elemento a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inertialfate:com_if_nexus:1.1:*:*:*:*:*:*:*","matchCriteriaId":"56D3C212-9BB3-405C-AC9F-1B2E2EC16E5B"}]}]}],"references":[{"url":"http://osvdb.org/60308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37050","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54325","source":"cve@mitre.org"},{"url":"http://osvdb.org/60308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4058","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary SQL commands via the aid parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en allauctions.php en TeleBid Auction Script permite a atacantes remotos ejecutar comandos SQL a través del parámetro 'aid'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telebidauctionscript:telebid_auction_script:*:*:*:*:*:*:*:*","matchCriteriaId":"F9E662A5-5CE0-48D0-869B-55FBF31B592C"}]}]}],"references":[{"url":"http://osvdb.org/60307","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37417","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploit.php?id=10165","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54349","source":"cve@mitre.org"},{"url":"http://osvdb.org/60307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploit.php?id=10165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4059","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a thumbs action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JoomClip (com_joomclip) de Joomla! permite a usuarios remotos ejecutar comandos SQL de su elección a través de el parámetro cat en una acción de \"thumbs\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:.joomclan:com_joomclip:*:*:*:*:*:*:*:*","matchCriteriaId":"CC4231FB-5BF8-4391-AAAE-7753AAB69894"}]}]}],"references":[{"url":"http://osvdb.org/60195","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/joomlajoomclip-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37049","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54323","source":"cve@mitre.org"},{"url":"http://osvdb.org/60195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/joomlajoomclip-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4060","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en includes/content/viewProd.inc.php en CubeCart antes de v4.3.7 permite ejecutar comandos SQL a atacantes remotos a través del parámetro ProductID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.6","matchCriteriaId":"42B3D304-95A9-4A1A-ABF8-DA44B1D29A19"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"21EE5409-82A4-403C-873C-9D526302D3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"88994AE4-5FCF-44D2-B490-5E1659E772CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D66AC3A-800E-44C1-AA65-080647982674"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D20B906-A4F2-4645-8FBB-9ACFE4DC7146"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9BBC2E6C-ED74-4AE9-A034-4CE6A7E949F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B3F74BC2-A71F-4F47-AAD0-748C36FAA0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"559DC274-2CD1-4E1A-8795-03B4F811477D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"AE67A15A-A80B-4CDC-8008-2C62C8421E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4213D073-0B59-400F-8C8D-E45DEDCEC17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"80E8126B-4B37-4AA9-B024-0E9C7E279888"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A978D9D2-ECB8-46C6-AB51-4DAA69FCA3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"65F309AD-3A10-40A6-B780-8716209B1D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"DAD096E3-22DF-462A-811D-E8C819F2F34C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"1535E104-8ED7-44FC-AFE4-A843C4A01F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"F8DB8FDF-DFD7-4E61-A2EB-4AE0B2F4671E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"7AC82B0A-78A6-4418-8B53-2A54A7EB606C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FD325EE4-DCF9-4728-859B-3FB8272017B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"B45F1872-3EBF-4EEE-8E3F-3AB8F8ACB90E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"F932DDB7-5551-418C-BA64-ADEC2B62371D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"67E84998-7E48-46A8-A295-3949C15F989F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F2F19D76-F48A-4A12-B8D4-1A99808ACF57"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A2A3CA60-EBA0-4B3A-AF16-AA773BD56942"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"073A6D9F-B464-498C-89F4-4C99E6973A15"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"9B31C165-3973-4D65-B1B9-7A483AE0A67E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.0:rc_1:*:*:*:*:*:*","matchCriteriaId":"B7C7C69E-B783-4706-A6C6-95C22D19BB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E756B470-72A0-470A-AD7F-E24689E98A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3204AAED-71F3-4236-BE29-7266D6B37DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"502A928E-E84F-4ED0-BE00-5EAE5F35DD28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8518051-5DD5-43A1-8F72-564E80A79EDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.1.0:rc_1:*:*:*:*:*:*","matchCriteriaId":"818A0EB8-40FF-44E0-A9A5-57A24B482CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.1.0:rc_2:*:*:*:*:*:*","matchCriteriaId":"814BB3ED-CCA6-4015-A681-56836E5F0E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B0292105-5614-4B5A-8033-CA6C92597679"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"09BA899B-3F63-4D36-B040-9CB462FB8C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F0B79010-22A4-4D3D-8589-4D14F292D65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6BFA9C2A-1E8D-4178-BD41-439A7FAAB5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D9E2D461-3984-4E7A-9F44-FE13EBA58BA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"52CA465B-D116-448E-BDC4-3082B6629880"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"86A93B54-5099-4451-899A-69670C59584C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"972A0617-51AB-48B8-8874-48D025154F05"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A25D2804-DE46-4DFE-93A8-30A8320F62AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BB338F50-5ECB-46B6-A8A5-30F2E8DA7390"},{"vulnerable":true,"criteria":"cpe:2.3:a:cubecart:cubecart:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D0A873C5-B6A1-4222-910B-FE74C70EE071"}]}]}],"references":[{"url":"http://forums.cubecart.com/index.php?showtopic=39900","source":"cve@mitre.org"},{"url":"http://osvdb.org/60306","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37065","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54331","source":"cve@mitre.org"},{"url":"http://forums.cubecart.com/index.php?showtopic=39900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4061","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Multiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en el módulo de Drupal \"Agreement\" v6.x antes de v6.x-1.2 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yuriy_babenko:agreement_module:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"125D6DC1-E031-4AEC-A1B3-84EB457C75B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:yuriy_babenko:agreement_module:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"106D1F0C-C361-49A1-AEA2-748450AFAFE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yuriy_babenko:agreement_module:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"596A2D02-BD4D-48F5-8F3F-F5239DDFDBFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/631538","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636568","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37437","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37057","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54342","source":"cve@mitre.org"},{"url":"http://drupal.org/node/631538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4062","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Printfriendly module 6.x before 6.x-1.6 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Multiples vulnerabilidades de ejecución de comandos en sitios cruzados(XSS) en el módulo de Drupal \"Printfriendly\" v6.x antes de v6.x-1.6 permiten a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"246BFD4B-1551-434A-B721-FC6090A72BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"B336A131-4ECC-4D9A-ADDB-CB5ABFA5B398"},{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"B29ABCB8-F50A-4E0A-90E2-6F57F612BA70"},{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"D6FD89C0-460C-414F-9785-98B149405827"},{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"12908C3B-4F2C-44A6-826F-86AA51A1D800"},{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"018D525D-0315-4411-82F4-97B1B114C97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:anon-design:printfriendly:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"ECD47169-0E99-4DE6-99C8-E1457A84B178"}]}]}],"references":[{"url":"http://drupal.org/node/636670","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636678","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60281","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37441","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37059","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54348","source":"cve@mitre.org"},{"url":"http://drupal.org/node/636670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4063","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Subgroups for Organic Groups (OG) v5.x anteriores a la v5.x-4.0 y v5.x anteriores a la v5.x-3.4 de Drupal. Permite a atacantes remotos inyectar codigo de script web o código HTML a través de los títulos de nodo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"C5EB14B4-6EF7-4836-ADE6-8A03E2637871"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"7EFCDF07-35A7-4C95-9B26-B514BCD0211A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"FC63A1F1-6902-4B36-83EE-8F3007C0A20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.0:dev:*:*:*:*:*:*","matchCriteriaId":"9379B62C-4175-4899-AE44-952CE046AE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"4CC75C07-83C5-4E0A-BB1B-CB3B6E7C72AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.2:*:*:*:*:*:*:*","matchCriteriaId":"367270C1-1923-41ED-8A94-2F332177F173"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"3D130182-416A-4016-934E-88FFF319B9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.x:dev:*:*:*:*:*:*","matchCriteriaId":"0F7B8CBD-B789-48F1-AAB0-813311564720"},{"vulnerable":true,"criteria":"cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-4.x:dev:*:*:*:*:*:*","matchCriteriaId":"35671AC0-9E39-4891-AAD6-99252D488F55"}]}]}],"references":[{"url":"http://drupal.org/node/630004","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60287","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37056","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54341","source":"cve@mitre.org"},{"url":"http://drupal.org/node/630004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4064","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Gallery Assist v6.x anteriores a la v6.x-1.7 de Drupal permite a usuarios remotos inyectar codigo de script web o código HTML a través de \"node titles\" (títulos de nodo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puntolatinoclub:gallery_assist_module:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.6","matchCriteriaId":"C43B5244-992E-43A6-ABD3-9717AB71FE08"},{"vulnerable":true,"criteria":"cpe:2.3:a:puntolatinoclub:gallery_assist_module:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9E71C8B-EFD3-4AC0-8E28-39ED23BB288A"},{"vulnerable":true,"criteria":"cpe:2.3:a:puntolatinoclub:gallery_assist_module:6.x-1.6-beta1:*:*:*:*:*:*:*","matchCriteriaId":"BE77E273-87B6-4111-98D2-BC8A29C9F2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:puntolatinoclub:gallery_assist_module:6.x-1.6-dev:*:*:*:*:*:*:*","matchCriteriaId":"3E715BBA-2AFA-41F0-A7B1-0907E458DD86"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/636488","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636660","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60270","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37061","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54347","source":"cve@mitre.org"},{"url":"http://drupal.org/node/636488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4065","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the settings page in the Strongarm module 6.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the value field when viewing overridden variables."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la página de configuración del módulo Strongarm module v6.x anteriores a v6.x-1.1 de Drupal. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de el campo \"value\" (valor) cuando se visualizan variables sobreescritas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jeff_miccolis:strongarm_module:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.0","matchCriteriaId":"43694583-1AA0-4533-964E-B5C5D2F228C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jeff_miccolis:strongarm_module:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"A6E93B3C-2B29-4124-8E8F-AE81093C6B8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jeff_miccolis:strongarm_module:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"C4CD3408-DDBC-45C2-8C16-45E86DD224FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jeff_miccolis:strongarm_module:6.x-1.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"4629E906-719C-4A93-9A67-65097D478063"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/636462","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/636474","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://osvdb.org/60284","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37436","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37055","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54337","source":"cve@mitre.org"},{"url":"http://drupal.org/node/636462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/636474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://osvdb.org/60284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4066","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T02:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the \"My Account\" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) subscribing or (2) unsubscribing to mailing lists."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados(CSRF) en el apartado \"My Account\" (mi cuenta) del módulo PHPList Integration v5 anteriores a v5.x-1.2 y v6 anteriores a v6.x-1.1 de Drupal. Permiten a atacantes remotos secuestrar las credenciales de autenticación de usuarios de su elección a través de vectores de ataque relacionados con (1) la suscripción (2) o desinscripción de las listas de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_beaney:phplist:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"3A6A0A63-DBA3-4FC4-9DFB-86EC4F5907AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_beaney:phplist:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"C851B8FB-9BB5-4BF8-ACEF-6AE93AF3DA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_beaney:phplist:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"8B53C9C0-6A3C-475D-998A-DEEA807E88FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_beaney:phplist:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"988D1792-1619-4E5A-A254-41E6A27DF17E"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_beaney:phplist:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"5CF8834C-99DC-492D-BC09-5FE5B5711084"}]}]}],"references":[{"url":"http://drupal.org/node/636398","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636400","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636412","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60283","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37434","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37054","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54336","source":"cve@mitre.org"},{"url":"http://drupal.org/node/636398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4069","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados(XSS) en GForge v4.5.14, v4.7.3, y probablemente otras versiones permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"48A680F4-249C-48A0-94C3-8408FF548D7E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1818","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4070","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en GForge v4.5.14, v4.7.3, y probablemente otras versiones permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.5.14:*:*:*:*:*:*:*","matchCriteriaId":"71D47383-4F0C-4B8F-AB82-0B5D3F0A8602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gforge:gforge:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"48A680F4-249C-48A0-94C3-8408FF548D7E"}]}]}],"references":[{"url":"http://secunia.com/advisories/35458","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1818","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35424","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4071","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors."},{"lang":"es","value":"Opera anterior v.10.10, cuando las stacktraces excepcionales son activadas, sitúa mensajes de error de código desde un sitio web en variables que pueden ser leídos por diferentes sitios web, permitiendo a atacantes remotos obtener información sensible o conducir un ataque de secuencias de comandos en sitios cruzados (XSS) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta_1:*:*:*:*:*:*","versionEndIncluding":"10.10","matchCriteriaId":"554D2AD8-94F0-4C8D-8E04-C8E6346894C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10:*:*:*:*:*:*:*","matchCriteriaId":"D5B6F043-20A4-42A9-AD8E-BC0BDB0B73E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*","matchCriteriaId":"2D03F8C2-1193-45ED-B38E-C76C41A0FD9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta_3:*:*:*:*:*:*","matchCriteriaId":"ABB6D630-28EC-4506-AD0D-8C9A5E7D45CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*","matchCriteriaId":"320B5684-5006-4BA8-87ED-25C40E90F2DA"}]}]}],"references":[{"url":"http://osvdb.org/60527","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37469","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1010/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/unix/1010/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/1010/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opera.com/support/kb/view/941/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37089","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3297","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6385","source":"cve@mitre.org"},{"url":"http://osvdb.org/60527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/unix/1010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/docs/changelogs/windows/1010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opera.com/support/kb/view/941/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4072","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a \"moderately severe issue.\""},{"lang":"es","value":"Vulnerabilidad no esperada en Opera anterior v.10.10 tiene un impacto y vectores de ataque desconocidos, relacionados con un \"asunto moderadamente severo.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:beta_1:*:*:*:*:*:*","versionEndIncluding":"10.10","matchCriteriaId":"554D2AD8-94F0-4C8D-8E04-C8E6346894C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*","matchCriteriaId":"D7965089-8592-47F2-958B-7DBE669BCAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*","matchCriteriaId":"E1750B2D-7AC8-45CF-9879-1D0476EEE86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*","matchCriteriaId":"ECEE4473-88C0-4E28-A5B5-F7383B0E5558"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*","matchCriteriaId":"76410AD4-78CA-48EA-83F0-099D0A49626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9DF2B21F-7E97-416B-AF5C-35338A254552"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:*","matchCriteriaId":"DBAC41D6-73D4-44E9-87E4-E1E955B9580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*","matchCriteriaId":"52FCCB1C-165C-49FF-B70B-475B37BDF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*","matchCriteriaId":"4FA5A5E5-3703-44AC-9963-A20A55002B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*","matchCriteriaId":"DC3E5BEF-3F29-4929-A37C-C49322B19047"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7B0E7B5D-2568-4128-8F99-E74D24A7E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*","matchCriteriaId":"E6A04906-7267-4A09-87BF-D639C7CF315B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA17D3F-A17B-47A6-8066-583F63D11468"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*","matchCriteriaId":"ED63C1B5-F52D-4C70-82D3-B427EAF5CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*","matchCriteriaId":"98E48C83-01AE-4A33-A004-14B99792674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"B56A2B78-70BD-439B-B1ED-A17FA5EF0990"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*","matchCriteriaId":"623E4466-82CC-4BDD-BE25-3BB33B585547"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*","matchCriteriaId":"8F90E537-5A0F-4302-9CC3-8EE7EB21DD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*","matchCriteriaId":"F5ECA190-D7D3-4248-A61E-0D87E67E3D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*","matchCriteriaId":"8FD514B3-AFCD-4CB1-9D1B-18625B771E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*","matchCriteriaId":"CAC4250E-E638-4015-B5EF-7B5405F7FBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*","matchCriteriaId":"F1B7AA6F-9918-4356-894C-72833B791201"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*","matchCriteriaId":"14200693-2B22-42BF-9917-FF4B541D9188"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10:*:*:*:*:*:*:*","matchCriteriaId":"D5B6F043-20A4-42A9-AD8E-BC0BDB0B73E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*","matchCriteriaId":"2D03F8C2-1193-45ED-B38E-C76C41A0FD9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:10.00:beta_3:*:*:*:*:*:*","matchCriteriaId":"ABB6D630-28EC-4506-AD0D-8C9A5E7D45CB"}]}]}],"references":[{"url":"http://osvdb.org/60528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37469","source":"cve@mitre.org"},{"url":"http://www.opera.com/docs/changelogs/mac/1010/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1010/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/1010/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37089","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3297","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6543","source":"cve@mitre.org"},{"url":"http://osvdb.org/60528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/docs/changelogs/mac/1010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/1010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4073","sourceIdentifier":"cve@mitre.org","published":"2009-11-24T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local username, by reading the dc:title element of a PDF document that was generated from a local web page."},{"lang":"es","value":"La funcionalidad de impresión en Microsoft Internet Explorer 8 permite a atacantes remotos descubrir un nombre de archivo y probablemente descubrir un usuario local, por la lectura del dc: pequeño elemento de un documento PDF que fue generado desde una página web local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*","matchCriteriaId":"1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]}]}],"references":[{"url":"http://osvdb.org/60504","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37362","source":"cve@mitre.org"},{"url":"http://securethoughts.com/2009/11/millions-of-pdf-invisibly-embedded-with-your-internal-disk-paths/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508010/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2009/11/23/internet_explorer_file_disclosure_bug/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12355","source":"cve@mitre.org"},{"url":"http://osvdb.org/60504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securethoughts.com/2009/11/millions-of-pdf-invisibly-embedded-with-your-internal-disk-paths/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508010/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2009/11/23/internet_explorer_file_disclosure_bug/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4074","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the \"response-changing mechanism\" to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka \"XSS Filter Script Handling Vulnerability.\""},{"lang":"es","value":"El filtro XSS en Microsoft Internet Explorer v8 permite a atacantes remotos afianzar \"el mecanismo de cambio de respuesta\" para conducir un ataque de secuencias de comandos en sitios cruzados (XSS) contra paginas web que no tienen vulnerabilidades XSS, relacionado con la codificación de salida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*","matchCriteriaId":"A52E757F-9B41-43B4-9D67-3FEDACA71283"}]}]}],"references":[{"url":"http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37135","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715","source":"cve@mitre.org"},{"url":"http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4075","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv_99 through snv_123, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors that trigger a \"dangling sshd authentication thread.\""},{"lang":"es","value":"Vulnerabilidad inespecífica en el mecanismo de tiempo limite en sshd en Sun Solaris v10, y OpenSolaris desde snv_99 hasta snv_123, permite a atacantes remotos producir una denegación de servicio (agotamiento de demonio) a través de vectores desconocidos que inician un \"hilo de proceso de autenticación oscilante\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*","matchCriteriaId":"04D12F3A-4C47-4B49-B3DE-484C1EE466E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*","matchCriteriaId":"3D028821-CA38-48C4-9324-222526AC8413"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*","matchCriteriaId":"5BE8232A-2464-449A-A7B6-D44447AA9080"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*","matchCriteriaId":"1F2CB558-9390-4AAE-A66D-E3DA537E3115"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*","matchCriteriaId":"37D9D7A5-63F5-49F6-90EE-EBE5B3FA6DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*","matchCriteriaId":"5ED4FAD0-E91F-438D-A3CB-BACFB7F7E975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*","matchCriteriaId":"6061C499-21A8-4EC4-B5AD-F6E876B15C48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*","matchCriteriaId":"411B33D1-F55D-42C0-9046-040ABC42E31B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*","matchCriteriaId":"677C89EB-1575-46B6-A07C-C8BAA829F620"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*","matchCriteriaId":"0491828F-8BB7-4463-AEE7-BFA0C574B6A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*","matchCriteriaId":"59679597-3883-4D20-A6E6-0C1CB0BAB3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*","matchCriteriaId":"CE4D5683-259F-449E-B1C7-2BD81CC4805F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*","matchCriteriaId":"98368E28-F8A9-40E3-ADB4-BF9F9F20F76D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*","matchCriteriaId":"42B7F288-2D35-4988-97B0-C529485033C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*","matchCriteriaId":"45B5E359-6FF2-4029-AB6A-3C906DE6AF1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*","matchCriteriaId":"A5991C3F-29F6-462F-A34E-2446E357A220"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://osvdb.org/60498","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37116","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54401","source":"cve@mitre.org"},{"url":"http://osvdb.org/60498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4076","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T22:00:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Roundcube Webmail v0.2.2 y anteriores permite a atacantes remotos secuestrar la autenticación de usuarios sin especificar para peticiones que modifican la información del usuario a través de vectores inespecíficos, una vulnerabilidad diferente a CVE-2009-4077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2","matchCriteriaId":"340AB195-AEBC-4988-95E7-42624141CA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4C785B00-7F4D-4EBD-A9FA-726D4D35E5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20050811:*:*:*:*:*:*","matchCriteriaId":"6E525B8F-ED49-494A-A9C1-CCFFDCFAAA11"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20050820:*:*:*:*:*:*","matchCriteriaId":"A9C38F5E-A79B-45F4-AD0C-894DE7ADD8EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20051007:*:*:*:*:*:*","matchCriteriaId":"8BDB7224-1922-41BC-82F1-187DEEEE60DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20051021:*:*:*:*:*:*","matchCriteriaId":"9019C121-5D96-4967-92FA-AA63FAD40435"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8F433741-5F73-43B5-A522-C484C64C66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:beta:*:*:*:*:*:*","matchCriteriaId":"09DF755B-041E-4A61-BEF6-A613F6F0CE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"34D20437-7DE7-4DB8-8C11-37B09A87E3A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"55FB4AA3-3528-46B7-BBB9-9185DAA5425C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"066AA2BC-95A8-43E8-A1FE-9F15860691E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:stable:*:*:*:*:*:*","matchCriteriaId":"BADA5A07-C90D-4000-A973-0A918E390D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"82FB886B-35A4-4A8C-AE18-62C845886018"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"83FF6973-9BAC-4DF2-BACE-42F0D9340A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"EB6449FD-C6EE-497C-BE34-88900883AD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:beta:*:*:*:*:*:*","matchCriteriaId":"0CEF8BF6-E09F-4376-B089-9B722A84F591"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:stable:*:*:*:*:*:*","matchCriteriaId":"84126D1E-F709-4F23-A541-B92B6ED01D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"946B0B6A-46D3-46B9-BD1E-B03D3339EEB3"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN72974205/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000071.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.roundcube.net/wiki/Changelog","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59661","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN72974205/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000071.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.roundcube.net/wiki/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4077","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T22:00:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Roundcube Webmail v0.2.2 y anteriores permite a atacantes remotos secuestrar la autenticación de usuarios sin especificar para peticiones que envían correos electrónicos arbitrarios a través de vectores sin especificar, una vulnerabilidad diferente a CVE-2009-4076."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.2","matchCriteriaId":"340AB195-AEBC-4988-95E7-42624141CA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4C785B00-7F4D-4EBD-A9FA-726D4D35E5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20050811:*:*:*:*:*:*","matchCriteriaId":"6E525B8F-ED49-494A-A9C1-CCFFDCFAAA11"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20050820:*:*:*:*:*:*","matchCriteriaId":"A9C38F5E-A79B-45F4-AD0C-894DE7ADD8EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20051007:*:*:*:*:*:*","matchCriteriaId":"8BDB7224-1922-41BC-82F1-187DEEEE60DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:20051021:*:*:*:*:*:*","matchCriteriaId":"9019C121-5D96-4967-92FA-AA63FAD40435"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8F433741-5F73-43B5-A522-C484C64C66A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:beta:*:*:*:*:*:*","matchCriteriaId":"09DF755B-041E-4A61-BEF6-A613F6F0CE13"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"34D20437-7DE7-4DB8-8C11-37B09A87E3A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"55FB4AA3-3528-46B7-BBB9-9185DAA5425C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"066AA2BC-95A8-43E8-A1FE-9F15860691E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1:stable:*:*:*:*:*:*","matchCriteriaId":"BADA5A07-C90D-4000-A973-0A918E390D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"82FB886B-35A4-4A8C-AE18-62C845886018"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*","matchCriteriaId":"83FF6973-9BAC-4DF2-BACE-42F0D9340A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:alpha:*:*:*:*:*:*","matchCriteriaId":"EB6449FD-C6EE-497C-BE34-88900883AD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:beta:*:*:*:*:*:*","matchCriteriaId":"0CEF8BF6-E09F-4376-B089-9B722A84F591"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2:stable:*:*:*:*:*:*","matchCriteriaId":"84126D1E-F709-4F23-A541-B92B6ED01D3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundcube:webmail:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"946B0B6A-46D3-46B9-BD1E-B03D3339EEB3"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN75694913/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000072.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37235","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.roundcube.net/wiki/Changelog","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/59661","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN75694913/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.roundcube.net/wiki/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4078","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T22:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados(XSS) en Redmine v0.8.5 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.5","matchCriteriaId":"F7E66CDC-BDA5-4F19-81FA-621C3F42B7A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCB74CF-B69C-4ACF-B676-17082D54A769"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D0254A2D-10A5-4843-BE58-72A3B5284DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E19773B3-33A6-439A-93BB-1FB4FA86D4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1314065B-1B7A-41BC-89F2-EAEE8EA8A6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F0BE09F2-954D-4A3E-B2D1-981EEF6AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBEA2E09-2CA8-4999-A841-02A8488F851A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F99DB71A-FBBE-4FFF-8EC6-D0EDAE8EDEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CF1E2430-4FFB-4AB4-A2BD-55711486D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0026FFCE-D748-41F4-B4E8-9852B3ED9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"554098E4-A9E5-4153-B8CD-8C987B7A8527"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"117F62E1-BEC6-416F-AD68-BC1AA260CC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"086659CB-5DD4-4B19-8223-76A85DF82D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1850A5B4-747D-4D6F-B625-7DE4857790E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5FDE853B-C003-4C9F-9A00-AF84CCD0A05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E235F356-CE27-4CFC-A064-D93E3FE0C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F66B7C8-0D70-4E53-90BC-938101BEB3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D4EDE791-F1E6-4E9C-9924-9AA8A34A2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A25E4182-E8BE-45BC-A591-463963D51341"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"450BD64C-120C-4803-84D8-7A2186B148B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"650A5A39-D2F1-41D1-B985-7051D0035B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0012C0B4-0B5A-4588-A81F-32652DECDA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"052CA2E7-73E8-4BA2-A98E-A527D635505D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D961E2C0-4061-4CCA-AA6A-6CB3AA096933"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B91BB4D5-4700-4874-8473-5CF8C9A39B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"69C39736-8851-4072-89C7-9635CC28BD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F8C1857C-A87F-4BE1-A4D9-458310DF0F3B"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN01245481/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN87341298/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000073.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rubyforge.org/frs/shownotes.php?release_id=41108","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redmine.org/wiki/redmine/Changelog#v086-2009-11-04","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37066","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3291","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54333","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN01245481/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvn.jp/en/jp/JVN87341298/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rubyforge.org/frs/shownotes.php?release_id=41108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redmine.org/wiki/redmine/Changelog#v086-2009-11-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4079","sourceIdentifier":"cve@mitre.org","published":"2009-11-25T22:00:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados en Redmine v0.8.5 y anteriores permite a atacantes remotos secuestras las autenticación de los usuarios para peticiones que borren un ticket a través de vectores inespecificos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.5","matchCriteriaId":"F7E66CDC-BDA5-4F19-81FA-621C3F42B7A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCB74CF-B69C-4ACF-B676-17082D54A769"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D0254A2D-10A5-4843-BE58-72A3B5284DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E19773B3-33A6-439A-93BB-1FB4FA86D4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1314065B-1B7A-41BC-89F2-EAEE8EA8A6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F0BE09F2-954D-4A3E-B2D1-981EEF6AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBEA2E09-2CA8-4999-A841-02A8488F851A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F99DB71A-FBBE-4FFF-8EC6-D0EDAE8EDEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CF1E2430-4FFB-4AB4-A2BD-55711486D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0026FFCE-D748-41F4-B4E8-9852B3ED9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"554098E4-A9E5-4153-B8CD-8C987B7A8527"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"117F62E1-BEC6-416F-AD68-BC1AA260CC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"086659CB-5DD4-4B19-8223-76A85DF82D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1850A5B4-747D-4D6F-B625-7DE4857790E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5FDE853B-C003-4C9F-9A00-AF84CCD0A05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E235F356-CE27-4CFC-A064-D93E3FE0C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F66B7C8-0D70-4E53-90BC-938101BEB3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D4EDE791-F1E6-4E9C-9924-9AA8A34A2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A25E4182-E8BE-45BC-A591-463963D51341"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"450BD64C-120C-4803-84D8-7A2186B148B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"650A5A39-D2F1-41D1-B985-7051D0035B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0012C0B4-0B5A-4588-A81F-32652DECDA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"052CA2E7-73E8-4BA2-A98E-A527D635505D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D961E2C0-4061-4CCA-AA6A-6CB3AA096933"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B91BB4D5-4700-4874-8473-5CF8C9A39B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"69C39736-8851-4072-89C7-9635CC28BD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F8C1857C-A87F-4BE1-A4D9-458310DF0F3B"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN87341298/index.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000074.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rubyforge.org/frs/shownotes.php?release_id=41440","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redmine.org/wiki/redmine/Changelog#v087-2009-11-15","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37066","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54334","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN87341298/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rubyforge.org/frs/shownotes.php?release_id=41440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redmine.org/wiki/redmine/Changelog#v087-2009-11-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4080","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:52.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in ldap_cachemgr (aka the LDAP client configuration cache daemon) in Sun Solaris 9 and 10, and OpenSolaris before snv_78, allow local users to cause a denial of service (daemon crash) via vectors involving multiple serviceSearchDescriptor attributes and a call to the getldap_lookup function, and unspecified other vectors."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en ldap_cachemgr (también conocido como demonio de la caché del configuración del cliente LDAP= en Sun Solaris V9 y V10 y OpenSolaris anteriores a snv_79, permite a a usuarios locales provocar una denegación de servicio (caída del demonio) a través de vectores que implican múltiples atributos serviceSearchDescriptor y una llamada a la función getldap_lookup y otros vectores no específicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:*:*:*:*:*:*:*:*","versionEndIncluding":"snv_77","matchCriteriaId":"6B44E0B2-FE55-4359-AC4A-5C281865E65A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_01:*:*:*:*:*:*:*","matchCriteriaId":"9E8A5A38-4864-4AD0-A8BA-A472AE4D7557"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_02:*:*:*:*:*:*:*","matchCriteriaId":"184AB738-8A6A-4619-A630-890925530818"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_03:*:*:*:*:*:*:*","matchCriteriaId":"A89BE592-11FD-46ED-B7F4-1930AAA5CCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_04:*:*:*:*:*:*:*","matchCriteriaId":"A45820A6-277B-492C-9E05-210B16E6BD5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_05:*:*:*:*:*:*:*","matchCriteriaId":"A5E40865-9B44-4CB4-B2F0-13A8CA0AD38C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_06:*:*:*:*:*:*:*","matchCriteriaId":"19094B1E-8496-4997-9AB1-A7F267DB1396"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_07:*:*:*:*:*:*:*","matchCriteriaId":"899768FF-7BBD-4128-8AC4-EB62686618CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_08:*:*:*:*:*:*:*","matchCriteriaId":"C0812CF1-08B3-4047-8B87-3B2D99D53AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_09:*:*:*:*:*:*:*","matchCriteriaId":"E1C7D0C8-898F-49DD-AB80-BF1EE3A7D1A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_11:*:*:*:*:*:*:*","matchCriteriaId":"2483121B-6DAF-4367-8608-9E4BE25C263F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_12:*:*:*:*:*:*:*","matchCriteriaId":"9228C3DC-CF09-45D9-8D60-7861D29AB298"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_14:*:*:*:*:*:*:*","matchCriteriaId":"D802C1F5-2ACC-46E1-B350-378CEEBDA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_15:*:*:*:*:*:*:*","matchCriteriaId":"40B6C721-3CED-46C3-9874-A6E985081C4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_16:*:*:*:*:*:*:*","matchCriteriaId":"2065BBE3-F0F9-4F7B-8828-0AD0491B67B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_17:*:*:*:*:*:*:*","matchCriteriaId":"FB17597F-DF89-431A-B7FB-C33E689A6901"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_18:*:*:*:*:*:*:*","matchCriteriaId":"47D688FA-7F88-4645-B3E5-830EF4C4FDAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_19:*:*:*:*:*:*:*","matchCriteriaId":"7FD6B880-B683-449E-9EA5-6FB1483EE309"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_20:*:*:*:*:*:*:*","matchCriteriaId":"F1D04C99-E0FD-4BB4-B651-9A9250633BB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_21:*:*:*:*:*:*:*","matchCriteriaId":"FC27EEDE-AE2F-427A-A035-AF790A65AAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_22:*:*:*:*:*:*:*","matchCriteriaId":"BD65532A-C083-462B-9FED-64051535E53E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_23:*:*:*:*:*:*:*","matchCriteriaId":"E71C245C-2E0A-423C-A0CE-AC15FDDE784F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_24:*:*:*:*:*:*:*","matchCriteriaId":"94B1C8EB-E9EB-4465-9BF9-545D1EF0C536"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_25:*:*:*:*:*:*:*","matchCriteriaId":"A2288FB2-5F26-41FB-A08D-90B168AD0F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_26:*:*:*:*:*:*:*","matchCriteriaId":"49AA677A-750B-4D05-869A-51981B2E2EC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_27:*:*:*:*:*:*:*","matchCriteriaId":"07F2BE5D-3D07-440F-8006-B74A8B718DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_28:*:*:*:*:*:*:*","matchCriteriaId":"894B4387-22CF-4DFA-ABDC-A89598D9DB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_29:*:*:*:*:*:*:*","matchCriteriaId":"9FB6A3F2-7152-4FEE-A3DC-D9926A3F8388"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_30:*:*:*:*:*:*:*","matchCriteriaId":"4314A1C4-8644-4096-9559-9CF4D5EAC39C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_31:*:*:*:*:*:*:*","matchCriteriaId":"90D6B309-746D-4306-8AD7-0D0968B02AEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_32:*:*:*:*:*:*:*","matchCriteriaId":"CB16CDAF-3C3B-4451-9458-D0E16271F37F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_33:*:*:*:*:*:*:*","matchCriteriaId":"C5B7225D-DC75-4E06-BE15-079556708B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_34:*:*:*:*:*:*:*","matchCriteriaId":"C6C2F6FC-F5D8-48DC-9CC9-5F82FD46603D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_35:*:*:*:*:*:*:*","matchCriteriaId":"CA5BFD2E-9D6F-4D5E-B86A-C25E142B5668"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_36:*:*:*:*:*:*:*","matchCriteriaId":"F597A149-9187-48B1-AC77-357C87FEEF15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_37:*:*:*:*:*:*:*","matchCriteriaId":"BFAAC94D-6CEA-4B80-A9E8-959D8EB99E3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_38:*:*:*:*:*:*:*","matchCriteriaId":"FD73A336-77A2-4FB8-8A2E-EE2692886378"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_39:*:*:*:*:*:*:*","matchCriteriaId":"1109018C-B0A9-4752-8BB3-C94EC9B28F18"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_40:*:*:*:*:*:*:*","matchCriteriaId":"1235FD40-1FB9-4FD5-898B-CD6A3BA855F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_41:*:*:*:*:*:*:*","matchCriteriaId":"8D4C7956-A065-4114-8642-C8C9C1246957"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_42:*:*:*:*:*:*:*","matchCriteriaId":"19CC57C8-DE9B-405E-83D2-FC63A4350772"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_43:*:*:*:*:*:*:*","matchCriteriaId":"4B2D3327-7239-4D4D-BF5F-A4B46900A331"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_44:*:*:*:*:*:*:*","matchCriteriaId":"E3D289A4-3043-4D14-8C64-EEE0D529B58F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_45:*:*:*:*:*:*:*","matchCriteriaId":"B9D3DD72-E560-449F-ABC9-D4DF91DD4F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_46:*:*:*:*:*:*:*","matchCriteriaId":"A50E9F3A-3B5B-4069-AF5F-E524C1253E7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_47:*:*:*:*:*:*:*","matchCriteriaId":"6558890D-704E-4C29-8AC5-E4B07034B713"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_48:*:*:*:*:*:*:*","matchCriteriaId":"3D4659A1-0FA9-4D08-9CBD-59C4F7A8004B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_49:*:*:*:*:*:*:*","matchCriteriaId":"216204D9-D216-442C-A6BE-C3D86E0A70A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_50:*:*:*:*:*:*:*","matchCriteriaId":"6DC9FB09-0F12-458A-9B99-414FAA9E2A1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_51:*:*:*:*:*:*:*","matchCriteriaId":"22E3FD68-C5F1-48F2-94C8-694395893A2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_52:*:*:*:*:*:*:*","matchCriteriaId":"27E32B20-3C72-4A0C-9971-8BB719851C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_53:*:*:*:*:*:*:*","matchCriteriaId":"91ED6A1F-54EB-4A2E-A157-ADFE6681521A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_54:*:*:*:*:*:*:*","matchCriteriaId":"E1834E45-86DA-47ED-8D00-001714D66B2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_55:*:*:*:*:*:*:*","matchCriteriaId":"C06E3C22-3FE5-4995-BE51-BEFB567536E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_56:*:*:*:*:*:*:*","matchCriteriaId":"B313A3DA-24DF-414F-BEEC-D5AF2B7ED31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_57:*:*:*:*:*:*:*","matchCriteriaId":"45015A0D-3CC7-47D2-8F56-9945315D68CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_58:*:*:*:*:*:*:*","matchCriteriaId":"10277E95-F2E4-4398-9DC7-9B854EE8D25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_59:*:*:*:*:*:*:*","matchCriteriaId":"86AC01EC-1EC1-428F-B7A4-3D5582AD2C52"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_60:*:*:*:*:*:*:*","matchCriteriaId":"953C1410-DB77-4250-B1DF-364FCAFDA2B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_61:*:*:*:*:*:*:*","matchCriteriaId":"9FD5C5C6-0047-4261-AC29-A3BDF5287C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_62:*:*:*:*:*:*:*","matchCriteriaId":"F428B518-6D1A-4F1A-A62C-44CC8CFDF3E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_63:*:*:*:*:*:*:*","matchCriteriaId":"65A0F545-87B5-4733-8222-A99D2C968C7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_64:*:*:*:*:*:*:*","matchCriteriaId":"E9206F3B-8360-42D4-A567-EE2C57F3C2F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_65:*:*:*:*:*:*:*","matchCriteriaId":"D255FFED-0229-4336-AED4-B7D6E5746F54"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_66:*:*:*:*:*:*:*","matchCriteriaId":"D7721527-B8D5-4346-B4DC-08D09AAC9E64"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_67:*:*:*:*:*:*:*","matchCriteriaId":"CAEA2E4D-49CB-4696-B878-882468340DAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_68:*:*:*:*:*:*:*","matchCriteriaId":"0D86A5C5-5584-428A-88B1-CD3EE634FF8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_69:*:*:*:*:*:*:*","matchCriteriaId":"86330112-84C7-457C-A7B3-619AC189D593"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_70:*:*:*:*:*:*:*","matchCriteriaId":"0F3B0C6E-23A5-4226-BB22-7A8470DC3724"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_71:*:*:*:*:*:*:*","matchCriteriaId":"FB311723-F2F3-4C85-831C-E3E2CC19703C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_72:*:*:*:*:*:*:*","matchCriteriaId":"416918A4-F37E-445E-B58F-7D4B1B90D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_73:*:*:*:*:*:*:*","matchCriteriaId":"5B10A4DE-2FAD-4ACA-8253-4370A274181D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_74:*:*:*:*:*:*:*","matchCriteriaId":"4DABACD4-EDD5-4BAA-AB12-3AC1A840E7D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_75:*:*:*:*:*:*:*","matchCriteriaId":"77CF9CE4-3FF6-427D-87B7-61581FBCAFE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_76:*:*:*:*:*:*:*","matchCriteriaId":"5F614E40-6C58-48E2-803D-AEDB03C70810"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://osvdb.org/60514","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37505","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37506","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-69-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231402-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37129","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023239","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3336","source":"cve@mitre.org"},{"url":"http://osvdb.org/60514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-69-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-231402-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4081","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:52.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in dstat before r3199 allows local users to gain privileges via a Trojan horse Python module in the current working directory, a different vulnerability than CVE-2009-3894."},{"lang":"es","value":"Vulnerabilidad de ruta de búsqueda no confiable en dstat anterior a r3199 permite a usuarios locales obtener privilegios a través de un troyano en el módulo Python en el directorio de trabajo actual, una vulnerabilidad diferente a CVE-2009-3894."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.9","matchCriteriaId":"D8839DD5-F985-4276-AE13-1B1C15A8A742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.1:*:*:*:*:*:*:*","matchCriteriaId":"FE378E62-581D-43AE-B4D9-CF08E9E8B5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.2:*:*:*:*:*:*:*","matchCriteriaId":"F189ACBF-4038-4E0E-B2D4-1FBD312B8D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.3:*:*:*:*:*:*:*","matchCriteriaId":"1F93B62A-7A4E-48EA-96BC-AE557D86FCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.4:*:*:*:*:*:*:*","matchCriteriaId":"56964973-73C4-4BF4-8BE4-6E12E82B4FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5:*:*:*:*:*:*:*","matchCriteriaId":"C38978EB-D9AC-4118-8B08-B578933F3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9357C30-514B-4860-85C4-3DB5F86F7758"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0A67F161-89CB-4FCD-833D-211A1BA37DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9AEDFEF7-08C0-405F-9761-88EF4BFDDC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C034CAF4-E495-4ABA-A2FA-358EA2790DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D567F7D2-B1DB-4B24-9A8F-E973C06F7CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"09A92E27-1122-45D2-93A8-D3AE4E59C3A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"FA4C2451-F640-41E9-B509-3A82508753F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"E24E19D4-5A74-49A9-AE71-0F83CC492D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"C1B25B40-347B-475E-A8D3-9030B8FE7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"EF057EE5-F82C-442E-8350-2EC37E39EF1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EEAE0611-BC0C-4E08-9E09-F4B76E24975E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"B8EF9448-619E-4636-80EB-3C81307579B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"52723AD9-85C9-45D7-8617-23627CDE6FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5909F7DA-7A7E-4F2E-B6B5-B534C5B822D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"41D533D4-8102-4837-BA64-575848E18E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"0B145671-3BFA-480E-89EC-F04C53C15E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"392EEB7E-C501-4C04-BE99-1DA5D022AE7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dag.wieers:dstat:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"F18ACBF7-68F3-473F-8D26-4D5B23D2D60F"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=293497","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:341","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=293497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4082","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en forums/Forum_Include/index.php en Outreach Project Tool (OPT) v1.2.7 y anteriores permite a atacantes remotos ejecutar código PHP de su elección a través de un URL en el parámetro CRM_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.7","matchCriteriaId":"510EA790-2E05-49AC-9EE9-2354795D5753"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.94:beta:*:*:*:*:*:*","matchCriteriaId":"7A2FAA75-2812-4ADC-93FB-6123D6B8412A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.933:beta:*:*:*:*:*:*","matchCriteriaId":"6DE10B26-7413-4830-BCE8-AEC363CCDA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.934:beta:*:*:*:*:*:*","matchCriteriaId":"0680852F-5B9E-46C7-B680-ED0851E53822"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.935:beta:*:*:*:*:*:*","matchCriteriaId":"129BA129-4F34-4DCE-9114-3185AAFC7E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.936:beta:*:*:*:*:*:*","matchCriteriaId":"C69B5503-C30C-44A6-A2EC-08087A6C4AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.937:beta:*:*:*:*:*:*","matchCriteriaId":"6A83CE36-8EEC-4D14-87E1-C1C6E2EAFC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.938:beta:*:*:*:*:*:*","matchCriteriaId":"8B84EC56-C352-4DFC-885C-D9608303159B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.939:beta:*:*:*:*:*:*","matchCriteriaId":"5D5022AE-8DD4-4165-9C38-98A38526D146"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.941:beta:*:*:*:*:*:*","matchCriteriaId":"41484CC9-075D-4AC3-8340-2DF6970244E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.942:beta:*:*:*:*:*:*","matchCriteriaId":"5E848D5D-1B4C-4355-B0D2-77C442601B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.943:beta:*:*:*:*:*:*","matchCriteriaId":"A93F2528-40A2-4D4D-8769-576B198F31B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.944:beta:*:*:*:*:*:*","matchCriteriaId":"ADF29E7B-92C3-420B-A9CC-DEFBFF1B4C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.945:beta:*:*:*:*:*:*","matchCriteriaId":"DB239B40-89CB-449E-AC53-DBFB34A5E922"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.946:beta:*:*:*:*:*:*","matchCriteriaId":"DD859A4D-CC8D-4BD0-9AD1-FD0F2A4D9CDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.947:beta:*:*:*:*:*:*","matchCriteriaId":"DCE6ED16-1FCD-4CE3-BE76-3C76C33DE806"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:0.948:beta:*:*:*:*:*:*","matchCriteriaId":"0B56664A-D08B-4C6F-A302-95CC33FEC510"},{"vulnerable":true,"criteria":"cpe:2.3:a:lanifex:outreach_project_tool:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8AE842EA-6844-4CCD-A2A8-7AB7E14C6365"}]}]}],"references":[{"url":"http://osvdb.org/60464","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/opt-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37447","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37090","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54379","source":"cve@mitre.org"},{"url":"http://osvdb.org/60464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/opt-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4083","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) submitnews.php, (2) usersettings.php; and (3) newpost.php, (4) banlist.php, (5) banner.php, (6) cpage.php, (7) download.php, (8) users_extended.php, (9) frontpage.php, (10) links.php, and (11) mailout.php in e107_admin/.  NOTE: this may overlap CVE-2004-2040 and CVE-2006-4794, but there are insufficient details to be certain."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados(XSS) en e107 v0.7.16 y anteriores permite a atacantes remotos permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados en (1) submitnews.php, (2) usersettings.php; y (3) newpost.php, (4) banlist.php, (5) banner.php, (6) cpage.php, (7) download.php, (8) users_extended.php, (9) frontpage.php, (10) links.php, y(11) mailout.php en e107_admin/. NOTA: esta vulnerabilidad puede solaparse con CVE-2004-2040 y CVE-2006-4794, pero no hay suficientes detalles para tener certeza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.16","matchCriteriaId":"358194A8-3BAB-4CA7-9546-C5A598FA911C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*","matchCriteriaId":"18C34EB0-7685-4346-81A2-371C1F19F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*","matchCriteriaId":"AB26A2A4-B0DE-4130-AA5F-76D5394A0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*","matchCriteriaId":"90909932-AD39-4648-8621-5866F0C4AB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*","matchCriteriaId":"37F208E9-3C39-4D00-B1E0-5CD0B315E740"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*","matchCriteriaId":"27C7402F-54C9-4FDA-B181-85941DDC7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*","matchCriteriaId":"70AB914E-D616-45D2-A451-1C247B8B6E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA03C1AC-97EA-47ED-9558-A7CA48420AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"32695A82-B042-46B7-9CB4-20F3446E0C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6716A040-0CBE-4402-AB2A-1621B1240B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"81627355-AB45-4D47-8DD2-4087E6971EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DAAA4F-B893-4914-8538-E68DDA211225"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"2FEEC90E-8640-4786-B014-CAD83EC4F2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"E29B9B12-4C94-4A8D-B407-2D288502EFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"F96C30A8-7E56-4806-B8D7-851D75B08738"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"F1C22711-AEC4-438F-9B37-64D36B0BDFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"5E2AA435-E5FC-4555-B582-5C6FFC99327B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"7A81364B-FB65-4591-ACA3-9D5991F0C30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*","matchCriteriaId":"437C4251-886C-4E94-B7F6-AE34A0142A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*","matchCriteriaId":"761D4EE9-0D54-4370-BCBC-3C23481C127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*","matchCriteriaId":"E11E3F9E-708E-44CB-8FD2-E4961028B732"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*","matchCriteriaId":"8F38EB42-437C-4381-B36A-FD3DB78E724E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*","matchCriteriaId":"ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*","matchCriteriaId":"1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*","matchCriteriaId":"0FC4B3A4-2563-4C06-A484-5C02CD8F7408"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*","matchCriteriaId":"7E80F85C-61AD-49C0-9EBF-B79F728F6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*","matchCriteriaId":"3FE097FC-A525-4599-9FDA-1A011EECE767"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*","matchCriteriaId":"9FF51B0D-E020-491D-92A9-D2A01A7417AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*","matchCriteriaId":"75197306-53DB-4C94-959B-C46D3FB1F42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*","matchCriteriaId":"D0C5C91C-C1C5-457D-9E09-24C7CACCC280"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*","matchCriteriaId":"6EB88C92-4F62-471A-8C10-C13C890E764F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*","matchCriteriaId":"5585DC36-C65F-4FCA-B26F-E4A7901863E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*","matchCriteriaId":"2C7DD56C-66F7-421C-B211-07C7856112C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*","matchCriteriaId":"8E14B108-228D-454F-AF16-9D9086E4C10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*","matchCriteriaId":"B5CB33E9-9AB8-482A-A196-768A2085A49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*","matchCriteriaId":"12BD5CAD-0EB8-48F2-AF80-510584A83446"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*","matchCriteriaId":"AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*","matchCriteriaId":"92E294FE-F0A2-45FC-BB67-D988DD89D2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*","matchCriteriaId":"9640315B-7F04-4F5A-B213-8FAF509DFF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*","matchCriteriaId":"CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*","matchCriteriaId":"DF75A192-81C1-4F58-A660-7EFE4F33E58B"}]}]}],"references":[{"url":"http://blog.bkis.com/e107-multiple-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508007/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37087","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54372","source":"cve@mitre.org"},{"url":"http://blog.bkis.com/e107-multiple-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508007/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4084","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la característica de búsqueda en e107 v0.7.16 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.16","matchCriteriaId":"358194A8-3BAB-4CA7-9546-C5A598FA911C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*","matchCriteriaId":"18C34EB0-7685-4346-81A2-371C1F19F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*","matchCriteriaId":"AB26A2A4-B0DE-4130-AA5F-76D5394A0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*","matchCriteriaId":"90909932-AD39-4648-8621-5866F0C4AB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*","matchCriteriaId":"37F208E9-3C39-4D00-B1E0-5CD0B315E740"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*","matchCriteriaId":"27C7402F-54C9-4FDA-B181-85941DDC7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:*","matchCriteriaId":"70AB914E-D616-45D2-A451-1C247B8B6E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA03C1AC-97EA-47ED-9558-A7CA48420AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"32695A82-B042-46B7-9CB4-20F3446E0C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6716A040-0CBE-4402-AB2A-1621B1240B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"81627355-AB45-4D47-8DD2-4087E6971EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DAAA4F-B893-4914-8538-E68DDA211225"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"B649DDC6-EEE6-47E1-A69A-831E5C2DD58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"2FEEC90E-8640-4786-B014-CAD83EC4F2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"E29B9B12-4C94-4A8D-B407-2D288502EFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"C5CAADA1-1FBB-4983-A942-FC4490CE8D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.10:*:*:*:*:*:*:*","matchCriteriaId":"B4D7C699-0E92-4D9C-9D8F-87C39A28ACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"5C62F8AD-EA30-441E-B97F-EF8DE640DC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.12:*:*:*:*:*:*:*","matchCriteriaId":"F96C30A8-7E56-4806-B8D7-851D75B08738"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.13:*:*:*:*:*:*:*","matchCriteriaId":"F1C22711-AEC4-438F-9B37-64D36B0BDFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.14:*:*:*:*:*:*:*","matchCriteriaId":"5E2AA435-E5FC-4555-B582-5C6FFC99327B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.7.15:*:*:*:*:*:*:*","matchCriteriaId":"7A81364B-FB65-4591-ACA3-9D5991F0C30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.547_beta:*:*:*:*:*:*:*","matchCriteriaId":"437C4251-886C-4E94-B7F6-AE34A0142A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.548_beta:*:*:*:*:*:*:*","matchCriteriaId":"761D4EE9-0D54-4370-BCBC-3C23481C127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.549_beta:*:*:*:*:*:*:*","matchCriteriaId":"E11E3F9E-708E-44CB-8FD2-E4961028B732"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.551_beta:*:*:*:*:*:*:*","matchCriteriaId":"8F38EB42-437C-4381-B36A-FD3DB78E724E"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.552_beta:*:*:*:*:*:*:*","matchCriteriaId":"ECC957BA-D96C-41B7-9BD4-2ECD37C9C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.553_beta:*:*:*:*:*:*:*","matchCriteriaId":"1E9E9AC1-5ECD-448F-B72A-1CE8228C2C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554_beta:*:*:*:*:*:*:*","matchCriteriaId":"0FC4B3A4-2563-4C06-A484-5C02CD8F7408"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.600:*:*:*:*:*:*:*","matchCriteriaId":"7E80F85C-61AD-49C0-9EBF-B79F728F6A97"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.601:*:*:*:*:*:*:*","matchCriteriaId":"3FE097FC-A525-4599-9FDA-1A011EECE767"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.602:*:*:*:*:*:*:*","matchCriteriaId":"9FF51B0D-E020-491D-92A9-D2A01A7417AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.604:*:*:*:*:*:*:*","matchCriteriaId":"75197306-53DB-4C94-959B-C46D3FB1F42B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.605:*:*:*:*:*:*:*","matchCriteriaId":"D0C5C91C-C1C5-457D-9E09-24C7CACCC280"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.606:*:*:*:*:*:*:*","matchCriteriaId":"6EB88C92-4F62-471A-8C10-C13C890E764F"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.607:*:*:*:*:*:*:*","matchCriteriaId":"5585DC36-C65F-4FCA-B26F-E4A7901863E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.608:*:*:*:*:*:*:*","matchCriteriaId":"2C7DD56C-66F7-421C-B211-07C7856112C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.609:*:*:*:*:*:*:*","matchCriteriaId":"8E14B108-228D-454F-AF16-9D9086E4C10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.616:*:*:*:*:*:*:*","matchCriteriaId":"B5CB33E9-9AB8-482A-A196-768A2085A49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.617:*:*:*:*:*:*:*","matchCriteriaId":"12BD5CAD-0EB8-48F2-AF80-510584A83446"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6171:*:*:*:*:*:*:*","matchCriteriaId":"AD8CD2A8-C8E8-4A5F-8355-6DF45C9DF45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6172:*:*:*:*:*:*:*","matchCriteriaId":"92E294FE-F0A2-45FC-BB67-D988DD89D2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6173:*:*:*:*:*:*:*","matchCriteriaId":"9640315B-7F04-4F5A-B213-8FAF509DFF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6174:*:*:*:*:*:*:*","matchCriteriaId":"CA89549A-6CD7-4DDB-A8C8-ADF103F6CDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6175:*:*:*:*:*:*:*","matchCriteriaId":"DF75A192-81C1-4F58-A660-7EFE4F33E58B"}]}]}],"references":[{"url":"http://blog.bkis.com/e107-multiple-vulnerabilities/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508007/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37087","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54373","source":"cve@mitre.org"},{"url":"http://blog.bkis.com/e107-multiple-vulnerabilities/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508007/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4085","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[BASE] parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en assets/plugins/mp3_id/mp3_id.php en PHP Traverser v0.8.0 permite a atacantes remotos ejecutar código PHP de su elección a través de una URl en el parámetro GLOBALS[BASE]. Nota: el origen de esta información es desconocido. Los detalles únicamente han sido obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabba_laci:phptraverser:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"34E0C56D-EE37-4C12-829A-46AA5FC8EC92"}]}]}],"references":[{"url":"http://osvdb.org/60466","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54378","source":"cve@mitre.org"},{"url":"http://osvdb.org/60466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4086","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección CRLF (se refiere a CR (retorno de carro) y LF (salto de línea)) en Xerver HTTP Server v4.31 y v4.32 permite a atacantes remotos inyectar cabeceras HTTP a su elección y llevar a cabo ataques de separación de respuesta HTTP a través de cierta secuencia de bytes en el final de una URL. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:javascript:xerver_http_server:4.31:*:*:*:*:*:*:*","matchCriteriaId":"D836C05E-51D1-4C8D-B06A-E0219E071406"},{"vulnerable":true,"criteria":"cpe:2.3:a:javascript:xerver_http_server:4.32:*:*:*:*:*:*:*","matchCriteriaId":"8DB82675-97C0-4D8E-A1E3-D145C49ECE90"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/xerver-split.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54356","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/xerver-split.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4087","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en telepark.wiki v2.4.23 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telepark:telepark.wiki:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.23","matchCriteriaId":"F0052665-E37F-4F11-BBE0-43B2A99A8C20"}]}]}],"references":[{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60213","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54293","source":"cve@mitre.org"},{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4088","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en telepark.wiki v2.4.23 y anteriores, permite a atacantes remotos leer ficheros de su elección a través de secuencias de directorios cruzados en el parámetro css sobre (1) getjs.php y (2) getcsslocal.php; e incluir y ejecutar ficheros locales de su elección a través del parámetro (3) group sobre upload.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telepark:telepark.wiki:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.23","matchCriteriaId":"F0052665-E37F-4F11-BBE0-43B2A99A8C20"}]}]}],"references":[{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9483","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60216","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60217","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54327","source":"cve@mitre.org"},{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4089","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.877","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or (2) delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php."},{"lang":"es","value":"telepark.wiki v2.4.23 y anteriores permiten a atacantes remotos superar la autorización y  (1) borrar páginas a su elección a través de un parámetro pageID modificado en ajax/deletePage.php o (2) borrar comentarios de su elección a través de un parámetro pageID modificado en ajax/deleteComment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telepark:telepark.wiki:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"6E3F307F-BA2A-4EC5-8F69-6ECA036C93C6"}]}]}],"references":[{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9483","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60214","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60215","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54329","source":"cve@mitre.org"},{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4090","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ajax/addComment.php in telepark.wiki 2.4.23 and earlier script allows remote attackers to execute arbitrary code by uploading a file with a name containing a NULL byte."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en ajax/addComment.php en telepark.wiki v2.4.23 y scripts anteriores, permite a atacantes remotos ejecutar código de su elección subiendo un archivo con un nombre que contenga un byte NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telepark:telepark.wiki:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.23","matchCriteriaId":"F0052665-E37F-4F11-BBE0-43B2A99A8C20"}]}]}],"references":[{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/60219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54294","source":"cve@mitre.org"},{"url":"http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/60219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4091","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.920","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action."},{"lang":"es","value":"comments.php en Simlog v0.9.3.2, y posiblemente anteriores, no restringen el acceso de forma adecuada, lo que permite a atacantes remotos editar o eliminar comentarios a través de acciones (1) edit o (2) del."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplog:simplog:0.9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D314CECE-7B00-4223-A237-ABFFD8E4A28E"}]}]}],"references":[{"url":"http://secunia.com/advisories/21390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37063","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54355","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4092","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) Simplog v0.9.3.2, y probablemente anteriores versiones, permite a atacantes remotos secuestrar la autenticación de administradores y usuarios para peticiones que cambian los passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplog:simplog:0.9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D314CECE-7B00-4223-A237-ABFFD8E4A28E"}]}]}],"references":[{"url":"http://secunia.com/advisories/21390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37063","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54354","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4093","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.967","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en comments.php in Simplog 0.9.3.2, y posiblemente anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) cname (nombre) y (2) email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplog:simplog:0.9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D314CECE-7B00-4223-A237-ABFFD8E4A28E"}]}]}],"references":[{"url":"http://secunia.com/advisories/21390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37063","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54353","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4094","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:34.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine (com_ezine) component 2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en class/php/d4m_ajax_pagenav.php en el componente D4J eZine (com_ezine) v2.1 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro GLOBALS[mosConfig_absolute_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:designforjoomla:com_ezine:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2CA6B5F-4BBA-4EF3-BFE9-DAFAAB2A460D"}]}]}],"references":[{"url":"http://www.kamtiez.org/2009/11/joomla-mambo-component-comezine-remote.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/37043","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54307","source":"cve@mitre.org"},{"url":"http://www.kamtiez.org/2009/11/joomla-mambo-component-comezine-remote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/37043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4095","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:35.017","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"myPhile v1.2.1 permite a atacantes remotos superar la autenticación a través de un password vacío. NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:companionway:myphile:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"46FA72E5-1110-4F29-84FC-7B1118C5A127"}]}]}],"references":[{"url":"http://companionway.net/files/myphile/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54350","source":"cve@mitre.org"},{"url":"http://companionway.net/files/myphile/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4096","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user credentials via a direct request for estafresgaftesantusyan.inc."},{"lang":"es","value":"RADIO istek scripti v2.5, almacena información sensible bajo el directorio raíz web con  un control de acceso inapropiado, lo que permite a atacantes remotos obtener las credenciales de usuario a través de una petición directa para estafresgaftesantusyan.inc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptlerim:radio_isetek_scripti:2.5:*:*:*:*:*:*:*","matchCriteriaId":"34D4B29F-ADA6-4866-9D8A-A99DDA3E5020"}]}]}],"references":[{"url":"http://osvdb.org/60516","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/istek-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10231","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/60516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/istek-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4097","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote attackers to execute arbitrary code via a long URL in an M3U file.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función MplayInputFile en Serenity Audio Player v3.2.3 y anteriores, permite a atacantes remotos ejecutar código de su elección a través de una URL larga en un archivo M3U. NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:malsmith:serenity_audio_player:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.3","matchCriteriaId":"F08EC0D7-E143-421D-ACF5-EB5F0F268892"},{"vulnerable":true,"criteria":"cpe:2.3:a:malsmith:serenity_audio_player:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CF3A99F0-7A8F-4BFC-A405-DE981337A24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:malsmith:serenity_audio_player:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D382B720-646C-4682-851F-9CB10BC8CC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:malsmith:serenity_audio_player:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A313B0EE-F4E4-4BC6-93A0-06573CF086C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:malsmith:serenity_audio_player:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"661392ED-C6E4-48FF-AAC3-E8978327AEEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:malsmith:serenity_audio_player:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"262A0504-BF5B-46D2-BB13-7F622D770776"}]}]}],"references":[{"url":"http://osvdb.org/60503","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/serenityaudio-overflow.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37472","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10226","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54430","source":"cve@mitre.org"},{"url":"http://osvdb.org/60503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/serenityaudio-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4098","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an images directory."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en banner-edit.php en OpenX adserver v2.8.1 y anteriores permite a usuarios autenticados remotamente con permisos de subida banner / file, ejecutar código de su elección mediante la carga de un archivo con una extensión ejecutable, luego accede a él a través de una petición directa al archivo en un directorio imagen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.1","matchCriteriaId":"A6969C05-6A0C-402D-9457-E519F56912F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:2.4:*:*:*:*:*:*:*","matchCriteriaId":"220D8830-4421-4393-B41F-691A0E465374"},{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F7D866D9-F3CB-4A5D-8946-62A425173845"},{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"39E8AB7C-CCC8-4C5E-8E42-C57C81C5EE16"},{"vulnerable":true,"criteria":"cpe:2.3:a:openx:openx:2.8:*:*:*:*:*:*:*","matchCriteriaId":"3F957F8C-88C3-4F0C-85A8-27AA58847DF6"}]}]}],"references":[{"url":"http://osvdb.org/60499","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openx.org/docs/2.8/release-notes/openx-2.8.2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508050/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37110","source":"cve@mitre.org"},{"url":"https://developer.openx.org/jira/browse/OX-5747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54394","source":"cve@mitre.org"},{"url":"http://osvdb.org/60499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openx.org/docs/2.8/release-notes/openx-2.8.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508050/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://developer.openx.org/jira/browse/OX-5747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4099","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the gcid parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Google Calendar GCalendar v1.1.2, 2.1.4 y posiblemente versiones anteriores para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro \"gcid\". NOTA: algunos de estos detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:g4j.laoneo:com_gcalendar:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5A03BBC3-354D-4CAC-AD14-16B395E7F32E"},{"vulnerable":true,"criteria":"cpe:2.3:a:g4j.laoneo:com_gcalendar:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"83BED280-C950-4D3F-B42F-47730C9F7F25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/60517","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/joomlagcalendar-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37476","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37141","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54450","source":"cve@mitre.org"},{"url":"http://osvdb.org/60517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0911-exploits/joomlagcalendar-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4100","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"NVD received information from Yoono development team on December 4, 2009 that the fixed version is in fact 6.1.1.  A patch can be found at the following URL:\r\n\r\nhttps://addons.mozilla.org/en-US/firefox/addons/versions/1833\r\n\r\n\r\n","evaluatorImpact":"Per info from the following advisory: \r\n\r\nhttp://www.net-security.org/secworld.php?id=8527\r\n\r\nRaised the score to CIA:complete\r\n\r\n\r\nNVD received information from Yoono development team on December 4, 2009 that the affected versions are in fact 6.1.0 and previous.  NVD adjusted affected versions accordingly because of this new information.","cveTags":[],"descriptions":[{"lang":"en","value":"Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload."},{"lang":"es","value":"La extensión Yoono anterior a versión 6.1.1 para Firefox, realiza ciertas operaciones con privilegios de Chrome, que permite a los atacantes remotos asistidos por el usuario para ejecutar comandos arbitrarios y realizar ataques de tipo cross-domain scripting por medio de manejadores de eventos DOM tal y como onload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.0","matchCriteriaId":"8672C9E4-520C-40F2-9BA1-17292AA2D2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.0.2.474:*:*:*:*:*:*:*","matchCriteriaId":"13A7E116-AF8A-44FE-BB59-D7F5C960D380"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.0.3.564:*:*:*:*:*:*:*","matchCriteriaId":"E291D7B2-78FE-4AC4-AEB3-25D6DF64FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.0.4.641:*:*:*:*:*:*:*","matchCriteriaId":"8E52E7CE-17E6-4236-BF11-71DDE7929DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.1.0.743:*:*:*:*:*:*:*","matchCriteriaId":"02D5A3E7-56BE-4E73-8C52-43337C0D935D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.2.1.1038:*:*:*:*:*:*:*","matchCriteriaId":"9194EA29-A019-448F-BFD7-4D15861CFF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.0.1268:*:*:*:*:*:*:*","matchCriteriaId":"93998252-0AA7-47B7-B72C-6962FD7E7168"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.0.1270:*:*:*:*:*:*:*","matchCriteriaId":"EB5BDDF4-F63B-4F4D-9655-66362520F2E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.1.1388:*:*:*:*:*:*:*","matchCriteriaId":"102261B7-7AC2-497D-A393-4A029C972213"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.2.1976:*:*:*:*:*:*:*","matchCriteriaId":"2BFB3765-38C6-4474-924E-613324530C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.3.2369:*:*:*:*:*:*:*","matchCriteriaId":"DBB9BCAE-02DA-4E2C-930F-270F3F48E792"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.4.2469:*:*:*:*:*:*:*","matchCriteriaId":"E6028C4A-C0AF-4497-8C96-C7EE975C9D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.5.2626:*:*:*:*:*:*:*","matchCriteriaId":"5FCEE47D-CD03-4E80-9C81-8C28062B4787"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.6.2723:*:*:*:*:*:*:*","matchCriteriaId":"273F0B0E-D171-405B-B421-B185A97C6A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.1.0.2898:*:*:*:*:*:*:*","matchCriteriaId":"D557BFE2-BFDE-479B-89AB-21EE49DD8EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.1.1.2999:*:*:*:*:*:*:*","matchCriteriaId":"155BC363-9577-424E-BDA5-A8F0A267A1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.0.4529:*:*:*:*:*:*:*","matchCriteriaId":"92AFCCC9-A7F2-4E45-975B-A253B4C78413"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.1.4774:*:*:*:*:*:*:*","matchCriteriaId":"6EE75F46-55B5-4DCC-98B1-B3BFC2F7B462"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.2.5149:*:*:*:*:*:*:*","matchCriteriaId":"F3276A3D-C603-4187-9981-68AF84836DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.3.5488:*:*:*:*:*:*:*","matchCriteriaId":"152D0A1C-CCF0-4238-B505-57CD8C0E2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.1.11511_11520:*:*:*:*:*:*:*","matchCriteriaId":"9225E5EA-B2D5-4E9B-BA5E-36419D43ACC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AC0F04B1-CEAD-4C86-AFAE-366379AB72BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"823A7319-A550-476B-9E52-6D27C3162953"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC77C93B-F28E-49C5-A4B5-46D4C98C57BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"59BE93A6-E997-4304-9BB2-1B41E1C52875"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CAD2A4DA-D209-4F64-A233-9C49433235C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"505F95F9-B873-4218-BEBB-394351EE4ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A0736D-283C-4ECB-9A8E-82CEC7A008CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B652DE4B-4A39-487C-B7C9-3EFAE812C462"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D6EF27FB-4DD9-4CDD-9CF9-A075C9B3D856"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CBBAC4E7-7349-4AE6-9142-02C91A62E4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"790D2BD3-8360-4B79-A4A0-2830B979BA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7037DC76-925C-43EF-9F88-3E2A6349C3EC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37123","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/1833#version-6.1.1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/1833#version-6.1.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4101","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per information from the following advisory:\r\nhttp://www.net-security.org/secworld.php?id=8527\r\nraised the score to CIA:complete since this vulnerability gives attacker the full access to the computer.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed."},{"lang":"es","value":"infoRSS v1.1.4.2 y versiones anteriores de la extensión para Firefox, realiza ciertas operaciones con privilegios chrome, lo que permite a atacantes remotos ejecutar comandos de su elección y realizar ataques de ejecución de secuencias de comandos en dominios cruzados a través de la etiqueta \"description\" en un feed RSS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4.2","matchCriteriaId":"CF0D6D5B-8C06-4E8C-B850-2CD507E3EA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1243299A-75A7-4345-876D-E10A86428455"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"E8444F89-182C-4BA4-8B7A-5FE32AF8ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"ADF9EC81-5CD0-42EC-B871-6D142E35FCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"22D3A39A-0DD5-41A7-8A13-1C99E5F25DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F9D6DC75-ABD9-4944-9CCB-E2263BFC6BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E6227353-6D9E-4E4E-AEB0-26462B0C519E"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"7B10C05E-5434-4757-A79D-9690827567EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"BEE8396E-FAE6-4EBD-BB83-2E18823110CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0F91ABF1-9522-4996-89A0-BD673446FEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.4:*:*:*:*:*:*:*","matchCriteriaId":"36CEB12E-3C96-413A-8EA0-06F80E0F37F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DED26B7E-1468-4563-9C45-576A615C1B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1B1C2B71-37A6-4BC0-8F5F-1704C4B7A630"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"ECAF9854-713E-43E3-AEB8-A3E8CCED8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"008E5B31-01C9-4876-BF6D-0FC89E3CDD25"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA94DE2-0CE4-4A64-870D-56D37880E6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"724B305E-344F-4731-A71B-78BE5C9D1FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"386FE397-0E4A-43F8-9466-DBD4065EAADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0719B4AF-B6E5-4D0F-9066-5F05F72061B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F58F40A6-7F53-4E08-BAD5-35118E94860E"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5FC66A0C-D197-493A-983D-101B4E9A2F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"867E4DBF-DB72-41F0-9290-D5D35D9168AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4102","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorImpact":"Per info from the following advisory: \r\n\r\nhttp://www.net-security.org/secworld.php?id=8527\r\n\r\nScored this CVE CIA:complete","cveTags":[],"descriptions":[{"lang":"en","value":"Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed."},{"lang":"es","value":"Sage v1.4.3 y anteriores extensiones para Firefox realiza ciertas operaciones con privilegios del chrome, lo que permite a atacantes remotos ejecutar comandos de su elección y realizar ataques ataques de secuencias de comandos a través de la etiqueta descripción de un feed RSS.\r\n\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sage.mozdev:sage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"A10F3C51-FECD-4010-B354-6311E981C8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sage.mozdev:sage:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"4FB1A380-665E-4766-9BA2-730C3BDF4BD9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://forums.mozillazine.org/viewtopic.php?f=48&t=1603515&start=0","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN99203127/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000070","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1951","source":"cve@mitre.org"},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37120","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54396","source":"cve@mitre.org"},{"url":"http://forums.mozillazine.org/viewtopic.php?f=48&t=1603515&start=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN99203127/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4103","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service and possibly execute arbitrary code via unspecified FTP server responses.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Desbordamiento de búfer en Robo-FTP v3.6.17, y posiblemente otras versiones, permite a servidores FTP remotos provocar una denegación de servicio y posiblemente la ejecución de código de su elección a través de respuestas FTP no especificadas. NOTA: el origen de esta información es desconocido. Los detalles han sido obtenidos a partir de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robo-ftp:robo-ftp:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"0EF153D5-E0DD-4313-9147-9CF31324E556"}]}]}],"references":[{"url":"http://osvdb.org/60513","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37143","source":"cve@mitre.org"},{"url":"http://osvdb.org/60513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4104","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Lyften Designs LyftenBloggie (com_lyftenbloggie)  v1.0.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro author en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lyften:com_lyftenbloggie:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7DD0F084-FD99-415A-9FFC-4CD52D50D2EA"}]}]}],"references":[{"url":"http://osvdb.org/60518","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/exploitalert/7480","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37140","source":"cve@mitre.org"},{"url":"http://osvdb.org/60518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/exploitalert/7480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4105","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by sending an APPE (append) command immediately followed by a DELE (delete) command without sending file data in between these two commands."},{"lang":"es","value":"TYPSoft FTP Server 1.10 permite a usuarios autenticados provocar una denegación de servicio (caída) mediante el envío de un comando APPE (añadir) seguido inmediatamente de un comando DELE (eliminar) sin enviar un archivo entre ellos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"A2A97A23-4606-427B-B2C0-0D3B2F8EDD68"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/508048/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37114","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023234","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54407","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508048/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4106","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attackers to inject and execute arbitrary PHP code via the filename and text parameters."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricción en admintools/editpage-2.php en Agoko CMS v0.4 y anteriores permite a atacantes remotos inyectar y ejecutar código PHP de su elección a través de los parámetros filename y text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ohloh:agoko_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4","matchCriteriaId":"886FDD4E-39F6-42FA-8B36-6AF434EC92BC"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9605","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53113","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4107","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a crafted .ibkey file containing a long string."},{"lang":"es","value":"Desbordamiento de búfer en Invisible Browsing v5.0.52, permite a atacantes remotos asistidos por el usuario, la ejecución de código de su elección a través de un archivo .ibkey manipulado que contiene una cadena larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amplusnet:invisible_browsing:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"D1FB14CB-8FF8-43A2-ADEC-CE6CBB947B4E"}]}]}],"references":[{"url":"http://hjafari.blogspot.com/2009/09/invisible-browsing-5052-ibkey-local.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9655","source":"cve@mitre.org"},{"url":"http://hjafari.blogspot.com/2009/09/invisible-browsing-5052-ibkey-local.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4108","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (crash) by uploading or creating a large number of files or directories, then performing a LIST command."},{"lang":"es","value":"XM Easy Personal FTP Server v5.8.0 permite a usuarios autenticados remotamente causar una denegación de servicio (caída) por actualización o creación de un gran número de archivos o directorios, luego realizar un comando LIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxm2008:xm_easy_personal_ftp_server:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C32EA58C-CC4B-4E9B-A95E-04806D95ED0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/37473","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508049/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37112","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508049/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4109","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information."},{"lang":"es","value":"El asistente de instalación en DotNetNuke v4.0 a la v5.1.4, no prevé el acceso de usuarios anónimos a la funcionalidad relacionada con la necesidad de una actualización, lo que permite a atacantes remotos acceder a la información de la versión de la aplicación y posiblemente a otros datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"31D0AA24-9FA3-4AFD-920A-295898473918"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"34AF4B04-B86C-4BD0-94D9-3157AC55E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB3D130-5DC4-4FE6-B178-EF1638E3A43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"68F28416-0ABF-4B2F-87A4-C4EC4D0CA227"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F1681BA4-9C05-45DF-B51B-D89633EB0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"884BA1BF-BD03-4437-A02C-825B59634A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C627743E-9B8B-431B-A513-89CBF7C1E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"677B54A1-6945-459F-9ADA-D6D9E89F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E6D101EF-4506-45D8-9717-5EE9A99B0A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C7059E6A-4A54-4364-8977-400C18905D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:*","matchCriteriaId":"2902A37C-97AA-42CD-A038-3DA1A6E4653A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"403D90A9-C191-496A-BBB9-4915D39B675D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"6B40DA1D-12CF-4DFF-9364-D60A53ED898D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"102921DE-5513-4BCB-8383-D22A78C59735"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7DC26BE5-265B-455A-83AE-E289A0C79B3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAD2896-6A9C-4953-8074-E689F359C900"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"74B90994-F7F0-4BC9-99E4-E798B98899AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A6FB531-44C1-4EA1-B69D-0D591673D7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2B3A0857-2E5D-4BCD-AAE6-D50FCAE6FF67"}]}]}],"references":[{"url":"http://osvdb.org/60520","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37480","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno30/tabid/1449/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37139","source":"cve@mitre.org"},{"url":"http://osvdb.org/60520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno30/tabid/1449/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4110","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en la funcionalidad de búsqueda en DotNetNuke v4.8 a la v5.1.4, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del los campos de búsqueda que no están filtrados a adecuadamente antes de mostrarlos en la página de resultados personalizados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"92A018EB-3C16-44BB-A872-E80D6F165395"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1285FF8E-EDB0-4C50-815B-DE40B1786601"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"625C6564-F098-4C9B-AFE7-6686275A1016"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"6293D07D-4C07-4A5D-9532-455A7D5AA6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"250EE0BC-F79D-40D0-A185-8307F82DA8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9:*:*:*:*:*:*:*","matchCriteriaId":"2902A37C-97AA-42CD-A038-3DA1A6E4653A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"403D90A9-C191-496A-BBB9-4915D39B675D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"6B40DA1D-12CF-4DFF-9364-D60A53ED898D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"102921DE-5513-4BCB-8383-D22A78C59735"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7DC26BE5-265B-455A-83AE-E289A0C79B3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAD2896-6A9C-4953-8074-E689F359C900"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"74B90994-F7F0-4BC9-99E4-E798B98899AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9A6FB531-44C1-4EA1-B69D-0D591673D7C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2B3A0857-2E5D-4BCD-AAE6-D50FCAE6FF67"}]}]}],"references":[{"url":"http://osvdb.org/60519","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37480","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno31/tabid/1450/Default.aspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54453","source":"cve@mitre.org"},{"url":"http://osvdb.org/60519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno31/tabid/1450/Default.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4111","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:07:52.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions for PEAR allows remote attackers to read and write arbitrary files via a crafted $recipients parameter, and possibly other parameters, a different vulnerability than CVE-2009-4023."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en Mail/sendmail.php en Mail package v1.1.14, v1.2.0b2, y probablemente otras versiones para PEAR permite a atacantes remotos leer y escribir archivos de su elección a través del parámetro $recipients  manipulado y probablemente otros parámetros, una vulnerabilidad diferente que CVE-2009-4023."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pear:mail:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"D394460E-74C1-49C3-8A90-CB983CE05DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pear:mail:1.2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"AA7E8F50-0BFF-41B5-A14B-EF4905F269D6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html","source":"cve@mitre.org"},{"url":"http://pear.php.net/bugs/bug.php?id=16200","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37458","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1938","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/8","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/28/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37395","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=294256","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pear.php.net/bugs/bug.php?id=16200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/28/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=294256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4112","sourceIdentifier":"cve@mitre.org","published":"2009-11-30T21:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the \"Data Input Method\" for the \"Linux - Get Memory Usage\" setting to contain arbitrary commands."},{"lang":"es","value":"Cacti v0.8.7e y anteriores permite a administradores remotos autenticados obtener privilegios modificando el \"Data Input Method\" (método de entrada de datos) para la opción \"Linux - Get Memory Usage\" (Linux - obtener utilización de la memoria) para contener comandos de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.7e","matchCriteriaId":"A034AA62-ECC3-4361-9E42-A1218F9EB2E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B4611FB4-7B8D-4DCA-9BFC-87585E16129B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B44E0187-3577-4770-8D76-10F64F6400B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E6282B-B403-45AD-B1EC-82257EEA1A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0936E4B2-D89C-44B3-9082-77FA369BA280"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.2a:*:*:*:*:*:*:*","matchCriteriaId":"A1257552-9117-45EE-B77C-00879E1FC67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"BA380DC2-2392-413E-AC7A-F8B854EA3108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.3a:*:*:*:*:*:*:*","matchCriteriaId":"B530A944-0A71-4F88-AAE6-3844364FB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"62C554AE-AE7A-48B1-A1FF-E8E7691EA344"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"25541421-4A87-43BF-86D7-E1377CE3C859"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"301E2B13-D410-4B26-9A47-F90343F47C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6c:*:*:*:*:*:*:*","matchCriteriaId":"EE910AB1-7D04-4743-9963-BBA191EE4078"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6f:*:*:*:*:*:*:*","matchCriteriaId":"DB41A3C5-D03A-4B1F-B841-A9F5021A59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.6i:*:*:*:*:*:*:*","matchCriteriaId":"8D62D429-7BDE-47DE-B466-0732DAC3F70E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"191A8F3B-EDFA-47AA-B7B1-95B4C05AFD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacti:cacti:0.8.7a:*:*:*:*:*:*:*","matchCriteriaId":"7A8C1715-DCA1-4C83-B817-9366172CFC1D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/26/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/30/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508129/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37137","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54473","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/26/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/30/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508129/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4113","sourceIdentifier":"cve@mitre.org","published":"2009-11-30T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category Access field."},{"lang":"es","value":"Vulnerabilidad de inyección de código estático en el módulo Categories de CutePHP CuteNews v1.4.6 y UTF-8 CuteNews versiones anteriores a v8b permite a usuarios autenticados remotamente con privilegios de administración inyectar código PHP de su elección en data/category.db.php mediante el campo \"Category Access\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:8:*:*:*:*:*:*:*","matchCriteriaId":"A3A4551C-75D7-497E-AD66-F8AEDEE46FC2"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54243","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4114","sourceIdentifier":"cve@mitre.org","published":"2009-11-30T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl."},{"lang":"es","value":"kl1.sys en Kaspersky Anti-Virus 2010 v9.0.0.463, y posiblemente otras versiones anteriores a la v9.0.0.736, no valida apropiadamente la entrada a IOCTL 0x0022c008, lo que permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de una petición IOCTL usando direcciones de kernel modificadas que provocan una corrupción de memoria, posiblemente relacionado con klavemu.kdl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:9.0.0.463:*:*:*:*:*:*:*","matchCriteriaId":"00CDF003-FD3C-4F9D-891A-B624A71A3228"}]}]}],"references":[{"url":"http://osvdb.org/60207","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37398","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sysdream.com/article.php?story_id=323&section_id=78","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507933/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37044","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023198","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54309","source":"cve@mitre.org"},{"url":"http://osvdb.org/60207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sysdream.com/article.php?story_id=323&section_id=78","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507933/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4115","sourceIdentifier":"cve@mitre.org","published":"2009-11-30T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the (1) category and (2) Icon URL fields; or (3) inject arbitrary PHP code into data/ipban.php via the add_ip parameter."},{"lang":"es","value":"Multiples inyecciones de código estático en el módulo \"Categories\" (categorías) de CutePHP CuteNews v1.4.6 permiten a usuarios remotos y autenticados con privilegios de aplicación administrativos inyectar código PHP de su elección en data/category.db.php a través de los campos (1) \"category\" (categoría) y (2) Icon URL; o (3) inyectar código PHP de se elección en data/ipban.php a través del parámetro add_ip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54243","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4116","sourceIdentifier":"cve@mitre.org","published":"2009-11-30T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic_quotes_gpc is disabled, allow remote authenticated users with editor or administrative application access to read arbitrary files via a .. (dot dot) in the source parameter in a (1) list or (2) editnews action to the Editnews module, and (3) the save_con[skin] parameter in the Options module.  NOTE: vector 3 can be leveraged for code execution by using a .. to include and execute arbitrary local files."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en CutePHP CuteNews v1.4.6, cuando está deshabilitado magic_quotes_gpc, permite a usuarios autenticados remotamente con aplicaciones de acceso editor o administrador leer ficheros de su elección mediante los caracteres .. (punto punto) en el parámetro \"source\" en una acción (1)list o (2) editnews de el módulo Editnews, y (3) el parámetro \"save_con[skin]\" en el módulo Options. NOTA: el vector 3 puede ser aprovechado para ejecución de código usando .. (punto punto) para incluir y ejecutar ficheros locales de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54246","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4117","sourceIdentifier":"cve@mitre.org","published":"2009-12-01T00:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by the (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, and (4) pdf_loadtype7shade functions.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Multiples desbordamientos de búfer basados en pila en pdf_shade4.c de MuPDF en versiones anteriores a commit 20091125231942, y como es utilizado en SumatraPDF en versiones anteriores a la v1.0.1, permiten a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código de su elección a través de un array /Decode para ciertos tipos de sombreado que no son apropiadamente manejados por las funciones (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, y (4) pdf_loadtype7shade.  NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"6C9B4E19-8BAA-4EC8-9E37-56CEE745DEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE8A6DE-5EB6-47C5-BBCA-5ED94783414D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2:*:*:*:*:*:*:*","matchCriteriaId":"7E763B24-5035-476D-8244-D876707FE4B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3:*:*:*:*:*:*:*","matchCriteriaId":"678C49B5-A9F0-4A5C-8CDC-E85E5E509959"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4:*:*:*:*:*:*:*","matchCriteriaId":"084084EE-CD7D-4D26-9F92-D6C1363C1127"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5:*:*:*:*:*:*:*","matchCriteriaId":"968776E8-58DE-4D07-B81F-69D751E78569"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6:*:*:*:*:*:*:*","matchCriteriaId":"22988B78-E426-4885-8B1A-55CD875325BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7:*:*:*:*:*:*:*","matchCriteriaId":"8AB75661-4385-4C96-ADA6-5E57DF401CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BE3A563-DC97-4B03-939F-E183C612BBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"FA284413-F016-4604-BFBA-8C26BED5AD75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9:*:*:*:*:*:*:*","matchCriteriaId":"4EB1D911-1EA5-4231-8B2C-97B4346B865A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1640649C-D190-4FB5-BDC5-9A5B89945A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"568130AC-C49F-4C09-9336-C8E3F454C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"76E67580-96C8-4164-88F8-DDA65F901290"},{"vulnerable":true,"criteria":"cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"BBC040EB-4221-4B42-B7F1-426E454BE523"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0330.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://blog.kowalczyk.info/software/sumatrapdf/news.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37494","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3355","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=708030","source":"cve@mitre.org"},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=a21cc1548993c392e474817bb3d656eb3730d88f","source":"cve@mitre.org"},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=cf6860c3d70a2f7a63cdb621cc3b58c891915deb","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54441","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0330.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://blog.kowalczyk.info/software/sumatrapdf/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4118","sourceIdentifier":"cve@mitre.org","published":"2009-12-01T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running."},{"lang":"es","value":"La función StartServiceCtrlDispatcher en el servicio cvpnd (cvpnd.exe) del cliente Cisco VPN para Windows versiones anteriores a 5.0.06.0100 no maneja correctamente un error ERROR_FAILED_SERVICE_CONTROLLER_CONNECT, permitiendo que usuarios locales provoquen una denegación de servicio (parada del servicio y perdida de conexión VPN) mediante un inicio manual de cvpnd.exe mientras se está ejecutando el servicio cvpnd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"398B68C7-C1DB-4A62-B0A2-89C917768E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"20C66C87-1367-4440-A2C2-E6B657DA2743"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"D4BFB291-672C-437E-BBF4-B00D89C11EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"4A270D7C-ACBC-41A4-A606-8A4F35894E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*","matchCriteriaId":"76060A99-ED0C-4125-B67E-FA8E4F57AAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:windows:*:*:*:*:*","matchCriteriaId":"2288FB91-4607-417D-8658-E1B8090BE40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.6.5:base:windows:*:*:*:*:*","matchCriteriaId":"1DED262D-1757-4E0A-8AB4-E76CF2E30131"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.7.00.0000:*:windows:*:*:*:*:*","matchCriteriaId":"2039E7C3-E623-4ADC-B851-55BC33FA760D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.8.00.0000:*:windows:*:*:*:*:*","matchCriteriaId":"4C3777CC-C18F-4F93-8DD4-A0A348EDA1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.8.00.0440:*:windows:*:*:*:*:*","matchCriteriaId":"CD4F8C6B-6134-4049-AA55-F229ABEC59EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.8.1:*:windows:*:*:*:*:*","matchCriteriaId":"8FD6C3C5-A7D3-4208-A23C-BA7D5626FB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.8.01:base:windows:*:*:*:*:*","matchCriteriaId":"5BAD012F-35CA-4C78-9825-C7C12B99DC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.8.02.0010:base:windows:*:*:*:*:*","matchCriteriaId":"8E793DFC-403A-4077-92C0-9D2F8FB01F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:4.9:base:windows:*:*:*:*:*","matchCriteriaId":"69C15D7C-024E-460B-A7D4-B2D28A77EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.00.340:base:windows:*:*:*:*:*","matchCriteriaId":"422898BF-B544-4A36-8A05-1A8FFF63EE2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.01:*:windows:*:*:*:*:*","matchCriteriaId":"C7255DB0-EB00-44E5-A9DC-D0908090E99E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.01.0600:base:windows:*:*:*:*:*","matchCriteriaId":"8263AEA7-D507-4036-AF23-B451B92F5726"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.2.0090:*:windows:*:*:*:*:*","matchCriteriaId":"DF3345B2-964B-49CF-9531-69B129A57AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:5.0.02.0090:base:windows:*:*:*:*:*","matchCriteriaId":"02241496-C9CD-486C-B675-830B6E28A860"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:0490:base:windows:*:*:*:*:*","matchCriteriaId":"AA0BC63F-B1FF-4ED3-A02E-6DED9CEBC14F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19445","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37077","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4119","sourceIdentifier":"cve@mitre.org","published":"2009-12-01T00:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Feed Element Mapper v5.x anteriores a v5.x-1.3, v6.x anteriores a v6.x-1.3, y v6.x-2.0-alpha anteriores a v6.x-2.0-alpha4 de Drupal permite a usuarios remotos inyectar codigo de script web o código HTML de su elección a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.2","matchCriteriaId":"72D69A4A-039A-4D2B-A3D5-31F57580397D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.0","matchCriteriaId":"E0E4B15C-790A-4B88-B4E6-02D4D5F7AB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"4FB6E9FF-8958-4FD6-8DC6-28CB0EB6A3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"CC47F8B4-98E3-42A8-BF05-7CB13569C90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"3BD6E4F7-12B3-440D-9FDB-50B6A8C7FB9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"FBCF307F-E2EB-4177-A7A6-CF1926F4A792"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"A0DFF04C-05DA-41A7-AE5C-B66AE9D03160"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta5:*:*:*:*:*:*:*","matchCriteriaId":"216E5CF1-D84D-4BC4-A0AC-6644776E29E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta6:*:*:*:*:*:*:*","matchCriteriaId":"A43F8C38-FBF9-4733-A917-EC4973107F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"57E5631D-D1F2-43BF-9E45-A45448A22EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"082D71AA-4584-403F-8ECC-02D223E07B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"23735AD2-57AC-4F44-A818-EF54B3FC696D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-alpha1:*:*:*:*:*:*:*","matchCriteriaId":"5988BB0C-0F06-4140-80FA-C8D7E968E8C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"6C32858A-76FD-434F-A820-D0DCEA9263EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"6E64CD6C-9079-4098-B3CF-0A8D723141F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"7B2E1BA7-2C86-436D-BF49-9217B664CE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"CC4F3EAB-86DB-4C6B-B796-7E9290ABD022"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta5:*:*:*:*:*:*:*","matchCriteriaId":"16A754DF-01D3-4AC5-A817-238E39E1D177"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta6:*:*:*:*:*:*:*","matchCriteriaId":"604C82F5-410A-4836-91C9-F84AEEA0C90D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta7:*:*:*:*:*:*:*","matchCriteriaId":"569EEF44-6718-4BE8-BBBA-7E6088BD1A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta9:*:*:*:*:*:*:*","matchCriteriaId":"06FC6992-1D8E-49C3-B791-CB6F9F686824"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta10:*:*:*:*:*:*:*","matchCriteriaId":"DCFAFD56-8BE5-4404-BB24-1942B6D9DDB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta11:*:*:*:*:*:*:*","matchCriteriaId":"FF2B9FEB-C314-46B5-B245-598A357EE3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.0-beta12:*:*:*:*:*:*:*","matchCriteriaId":"2E67AF70-271F-4804-8F33-4B3C8BEE1538"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_barth:feed_element_mapper:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"DA8A4E07-7CD9-4F9E-9DE0-C460BB464FA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/636496","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636498","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/636518","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60288","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37060","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54338","source":"cve@mitre.org"},{"url":"http://drupal.org/node/636496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/636518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/60288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4120","sourceIdentifier":"cve@mitre.org","published":"2009-12-01T02:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete orders via an orders-delete action to admin.php, and possibly (2) delete products or (3) delete pages via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Quick.Cart v3.4 permiten a atacantes remotos secuestrar la autenticación del administrador en peticiones que (1) borran pedidos a través de la acción orders-delete a admin.php, y posiblemente (2) borrar productos o (3) borrar páginas web a través de vectores de ataque sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensolution:quick.cart:3.4:*:*:*:*:*:*:*","matchCriteriaId":"EECC228A-7720-4A0E-A12B-D59B03DF17B5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0260.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54413","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4121","sourceIdentifier":"cve@mitre.org","published":"2009-12-01T02:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete web pages via a p-delete action to admin.php, and possibly (2) delete products or (3) delete orders via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en  Quick.CMS v2.4 y Quick.CMS.Lite v2.4 permiten a atacantes remotos secuestrar la autenticación del administrador en peticiones que (1) borran páginas web a través de una acción p-delete a admin.php, y posiblemente (2) borrar productos o (3) borrar pedidos a través de vectores de ataque sin espcificar.  NOTA: alguno de estos detalles han sido obtenidos de información de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensolution:quick.cms:2.4:*:*:*:*:*:*:*","matchCriteriaId":"4DAB8662-CD54-4A66-9C54-D867E77F346B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensolution:quick.cms.lite:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B10210F8-59D3-4B96-AFBB-09770F423D78"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0260.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/60495","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54413","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/60495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4124","sourceIdentifier":"cve@mitre.org","published":"2009-12-11T16:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento del búfer de la memoria dinámica en la función rb_str_justify en string.c en Ruby v1.9.1 en versiones anteriores a  v1.9.1-p376 atacantes dependientes del contexto podrían ejecutar código arbitrario a través de vectores sin especificar que incluyen (1) String#ljust, (2) String#center, o (3) String#rjust. NOTA: Algunos de los detalles han sido obtenidos de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-p0:*:*:*:*:*:*","matchCriteriaId":"470CF526-96F6-4DD1-B687-17106051A6D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-p129:*:*:*:*:*:*","matchCriteriaId":"52159D9F-8CD3-4103-82E6-BDE035BA3625"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-p243:*:*:*:*:*:*","matchCriteriaId":"EC0FD3F8-73A3-4518-8892-1E34D709FB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-preview_1:*:*:*:*:*:*","matchCriteriaId":"A7E15263-74D3-42D4-B37C-C649F68EDECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-preview_2:*:*:*:*:*:*","matchCriteriaId":"BA7FEA9B-06CE-4D08-9D61-2526ED5AE630"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-rc1:*:*:*:*:*:*","matchCriteriaId":"0D7F7EA5-7F6C-4C15-AB97-024836DC4862"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.1:-rc2:*:*:*:*:*:*","matchCriteriaId":"236B38D1-0CCA-43C5-B2FC-1224F4F4E165"}]}]}],"references":[{"url":"http://secunia.com/advisories/37660","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60880","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2009/12/07/heap-overflow-in-string/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37278","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3471","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54674","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2009/12/07/heap-overflow-in-string/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4127","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving unspecified Toolbar buttons and the eval function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad inespecífica en la extensión de Firefox Wikipedia Toolbar anteriores a v0.5.9.2 permite a atacantes remotos con ayuda del usuario ejecutar JavaScript arbitrario con privilegios Chrome a través de vectores que incluyen botones inespecíficos de la barra de herramientas y la función eval. NOTA: LA procedencia de la información es desconocida; los detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.9.1","matchCriteriaId":"EAFDA9BA-88F5-4EE1-8CD9-44E6577D3C47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E58547CA-DF08-4F4A-97E5-DEE7F44A3856"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4CE6EE2B-013D-4DA3-B9DC-7DCF9A9D194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2433D72E-C5D1-4D7F-8202-ACF83B707E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B395FDE2-5998-4D0B-90F9-A558AA2556DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"9464376B-6AD4-43D2-B2CD-716F645FDAA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"06676111-C161-4A43-8F18-444C550AFD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"79FECBBF-44B0-459E-B1A8-1A0E742C299B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B0231836-F6A0-49F9-AE0C-5F4036B2DF94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5:*:*:*:*:*:*:*","matchCriteriaId":"4A2959D5-9182-48DE-83E7-120DAC388382"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B763E13D-FD92-4025-921C-63047F76CADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF2CCC8A-2DCE-4707-84CD-302963015D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCCBD3F7-379E-4EBF-A838-219DD28EFE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"114E5DEB-1978-46E8-9932-E9CFF0E18AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"53614EEA-4C06-47E0-97A7-BA371381D1AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2030838A-6F2F-4998-ADD6-0983896DCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"75F48B37-48F6-4275-BE7D-B32D51583229"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E81B091F-00B9-4385-8986-3A06E3135410"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B60954CB-FEA1-4219-B9DE-4E5259E96F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8BEE9642-B660-4B29-8089-B7419A38A645"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7DE1D65F-B8F6-42BF-8C76-BCC790FFD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A345BC5E-45E0-42BC-9B73-2988B6F990C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CAC78EAF-CBA9-432B-9863-019231E32532"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D541F9B2-EB09-43D6-BF66-FF77D1F617CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5909B350-4A02-4747-9D6A-621201852283"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"DB1CB769-650E-42B2-9FF9-84FB32C1A87F"}]}]}],"references":[{"url":"http://secunia.com/advisories/37377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37038","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4128","sourceIdentifier":"cve@mitre.org","published":"2009-12-01T16:30:01.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1."},{"lang":"es","value":"GNU GRand Unified Bootloader (GRUB) 2 v1.97 únicamente compara el fragmento enviado de una contraseña con la contraseña actual, lo que facilita que atacantes próximos realicen ataques de fuerza bruta y eviten la autenticación mediante el envío de una contraseña de longitud 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:grub_2:1.97:*:*:*:*:*:*:*","matchCriteriaId":"955C28B6-5161-429A-92B3-996A3B799E68"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555195","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/15/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36968","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54210","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/15/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4129","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Mozilla Firefox allows remote attackers to produce a JavaScript message with a spoofed domain association by writing the message in between the document request and document load for a web page in a different domain."},{"lang":"es","value":"Condiciones de carrera en Mozilla Firefox permite a atacantes remotos producir un mensaje JavaScript con una asociación de dominio manipulada mediante la escritura del mensaje entre la petición del documento y la carga de la pagina web en diferente dominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54611","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4130","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T17:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name."},{"lang":"es","value":"Vulnerabilidad de truncado visual en la funcion MakeScriptDialogTitle en nsGlobalWindow.cpp en Mozilla Firefox permite a atacantes remotos falsificar el dominio de orgien de una secuencia de comando a través del nombre largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37232","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54612","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4131","sourceIdentifier":"secalert@redhat.com","published":"2009-12-13T01:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions."},{"lang":"es","value":"La implementación ioctl EXT4_IOC_MOVE_EXT (tambien conocido como move extents) en el sistema de ficheros ext4 en el kernel de Linux en versiones anteriores a v2.6.32-git6 permite a usuarios locales sobrescribir ficheros arbitrariamente a través de peticiones manipuladas, relacionado con los controles insuficientes para permisos de ficheros."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 and Red Hat Enterprise MRG. Those versions do not include the upstream patch that introduced this vulnerability.","lastModified":"2009-12-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:git-6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"5A5163E4-EABA-48CA-9C68-D8290683FDCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"34675E8B-0F4F-4404-B86D-A618378BC32C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"46568A0D-F374-4DAB-9B64-FCC74A9AA07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc7:*:*:*:*:*:*","matchCriteriaId":"DBE3083A-0FA6-4854-8F65-05E8364B3A9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc8:*:*:*:*:*:*","matchCriteriaId":"57F8D95D-DC49-46B3-A460-2352D7E540EB"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/tytso/ext4.git%3Ba=commit%3Bh=4a58579b9e4e2a35d57e6c9c8483e52f6f1b7fd6","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lkml.org/lkml/2009/12/9/255","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/37658","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37686","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git6.log","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37277","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-869-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3468","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544471","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00702.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/tytso/ext4.git%3Ba=commit%3Bh=4a58579b9e4e2a35d57e6c9c8483e52f6f1b7fd6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/12/9/255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git6.log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-869-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00702.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4132","sourceIdentifier":"secalert@redhat.com","published":"2009-12-12T02:30:01.140","lastModified":"2023-11-07T02:04:42.630","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-4214.  Reason: This candidate is a duplicate of CVE-2009-4214.  Notes: All CVE users should reference CVE-2009-4214 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-4133","sourceIdentifier":"secalert@redhat.com","published":"2009-12-23T18:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute."},{"lang":"es","value":"Condor v6.5.4 hasta v7.2.4, v7.3.x, y v7.4.0, como el usado en MRG, Grid para MRG, y Grid Execute Node para MRG, permite a usuarios autenticados remotamente encolar tareas como un usuario de su elección, y de ese modo obtener privilegios, usando una herramienta de línea de commandos Condor para modificar un atributo de tarea no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"D17C7D49-C87C-4531-9F60-AEA8217BC47B"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D8E5E567-70BE-4C89-85BD-75BCA71D8DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C82D2C15-DFD1-40E0-86FC-F48263416AA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B0C8D4B5-3A8A-42BA-8C9A-98989FA23A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EA32C2CA-B61F-449B-B90A-054AF177C296"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"03F817A5-9926-4AB5-8D25-8B68DC905B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"52BDAA46-4598-4DC2-8B1B-D85CBF649133"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:*","matchCriteriaId":"524D6F4F-4715-4F68-A069-87CDEF8BB5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:*","matchCriteriaId":"3219F472-97A7-4A8E-A45C-DBFB3E25AA17"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:*","matchCriteriaId":"EB2B77EF-FEC9-4433-8A15-5DF7F51B056D"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6B67DCD1-6A39-4E77-AE65-9FADD3A267FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"324BAB04-B03E-499C-B58D-320D14740606"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"16892FC7-5870-45A8-ABFE-D8EE5A565FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C5E7E0F2-825E-4D21-A250-BEECBDDE3C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E6BB9D8-6394-4317-90DF-475DE0FF0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9F3C190-977B-4FFA-8DA6-6C1DC337FE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1AC9E5EA-CD6B-401A-ACD5-0FA64A32DD5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A5888B30-EFC0-49D7-BDFC-219226A3BE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5985B827-0494-4B99-A0CC-3F2DCB486BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6D49E49-D7C3-4A8D-87DF-26BFE479F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B921A880-DCC2-4AEB-A113-4AD520AA75D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1C31EBEA-2CB0-4910-B644-BAA5CB900DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"97AAA688-530F-4049-AEF7-B302F984DCDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FE91D459-EF92-430A-98E8-1131D8BD8682"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0C54D26-9124-49E6-8EBA-00AE0640633A"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4F3AD33E-A617-4C13-8858-7DCEDE3FDC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C66F0D08-3AE5-482A-B6AD-717475EB2D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FDAC286B-A140-44E8-9B29-60B96A6B4555"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F44106D-CD31-4FF2-A589-A7A7492FC0CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D973598A-90C0-4AE0-A047-17866BD6DC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"05A424B0-D3AF-4AF6-8575-4AD6B8E91E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:condor_project:condor:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B7AA2890-BEC9-4AD6-AF74-6EC810E22AEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_mrg:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD09E081-B714-45A1-ACBB-28D805BFD01C"}]}]}],"references":[{"url":"http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37766","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37803","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023378","source":"secalert@redhat.com"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1688.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1689.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37443","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544371","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54984","source":"secalert@redhat.com"},{"url":"http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1688.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4135","sourceIdentifier":"secalert@redhat.com","published":"2009-12-11T16:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp."},{"lang":"es","value":"La regla distcheck en dist-check.mk en GNU coreutils desde v5.2.1 hasta v8.1 permite a usuarios locales ganar privilegios a través de un ataque de enlace simbólico en un fichero que este en la carpeta /tmp."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue does not affect users using coreutils binary RPMs, or rebuilding source RPMs. Therefore, we do not plan to release updates addressing this flaw on Red Hat Enterprise Linux 3, 4 and 5.\n\nFor additional details, refer to the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4135","lastModified":"2010-02-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B4060C1F-54F4-4D8F-A359-48CC27359585"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.91:*:*:*:*:*:*:*","matchCriteriaId":"BB7AE17A-1310-4F3B-B649-ED3D14C161BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.92:*:*:*:*:*:*:*","matchCriteriaId":"066F4A28-3C7E-4524-BB09-50A9C27F0DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.93:*:*:*:*:*:*:*","matchCriteriaId":"B334A0E5-92C4-4027-B847-1E535D46759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.94:*:*:*:*:*:*:*","matchCriteriaId":"70411321-9C15-4EE5-8C50-C730DC114B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.95:*:*:*:*:*:*:*","matchCriteriaId":"F9CDDE73-12B4-49BD-AA4A-EFDB27DCEE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.96:*:*:*:*:*:*:*","matchCriteriaId":"56235E45-03A0-4665-A892-E022F3CECEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:5.97:*:*:*:*:*:*:*","matchCriteriaId":"FAAFD6D4-7CA0-4C5E-ACCE-0FEFE123282A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.2:*:*:*:*:*:*:*","matchCriteriaId":"17B19ECD-3B51-495B-890A-A65715E84500"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.3:*:*:*:*:*:*:*","matchCriteriaId":"9BA15857-9B26-44EC-8111-B4AB5F14CAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A9322877-683C-4662-8862-8A19921DDFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.5:*:*:*:*:*:*:*","matchCriteriaId":"64510D4D-D783-4D91-969A-631864135A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.6:*:*:*:*:*:*:*","matchCriteriaId":"047B607D-074F-4154-BDBC-C252A0E332FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.7:*:*:*:*:*:*:*","matchCriteriaId":"60A5A833-9CDA-459E-B1AF-8813E559DE0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.8:*:*:*:*:*:*:*","matchCriteriaId":"DE7C16BD-A66A-436D-935D-6FB03EFF477C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.9:*:*:*:*:*:*:*","matchCriteriaId":"EA7FA6D6-C675-4B21-B29F-D0686C03D373"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.10:*:*:*:*:*:*:*","matchCriteriaId":"C77C7E77-20AB-4B96-B5F9-51D0B598A9F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.11:*:*:*:*:*:*:*","matchCriteriaId":"8B96E929-15F1-40EE-9EE0-ABBF0C8EFA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:6.12:*:*:*:*:*:*:*","matchCriteriaId":"FD5C865C-B8B1-4410-8DC8-015FA8CACA97"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:7.1:*:*:*:*:*:*:*","matchCriteriaId":"47B9797D-D66B-47AB-8ED9-8EB6A3B7BB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:7.2:*:*:*:*:*:*:*","matchCriteriaId":"05224EEF-A6C6-4B04-AD37-B22AB9048D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:7.3:*:*:*:*:*:*:*","matchCriteriaId":"B417E42B-821D-4C74-BF47-3594C9AE1B98"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:7.4:*:*:*:*:*:*:*","matchCriteriaId":"E64DD6D2-3025-4805-A7BD-0A0FDCF906CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:7.5:*:*:*:*:*:*:*","matchCriteriaId":"499983D5-E6A2-411B-861C-95653E238FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:7.6:*:*:*:*:*:*:*","matchCriteriaId":"6A4FDCD8-F63F-42A8-9130-3E69B6A5331A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:coreutils:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4BCA48A1-617A-4B82-A363-70131EE27150"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034822c535fa5","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"http://marc.info/?l=oss-security&m=126030454503441&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37645","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37860","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62226","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18779.html","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18787.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/08/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/60853","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37256","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2473-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3453","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=545439","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54673","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00954.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00972.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034822c535fa5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://marc.info/?l=oss-security&m=126030454503441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18779.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18787.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/08/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/60853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2473-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=545439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00954.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00972.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-4136","sourceIdentifier":"secalert@redhat.com","published":"2009-12-15T18:30:01.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230."},{"lang":"es","value":"PostgreSQL v7.4.x anteriores a v7.4.27, v8.0.x anteriores a v8.0.23, v8.1.x anteriores a v8.1.19, v8.2.x anteriores a v8.2.15, v8.3.x anteriores a v8.3.9, y v8.4.x anteriores a v8.4.2 no gestiona adecuadamente el estado de la sesión local durante la ejecución de una función de indexado por parte de un superusuario de base de datos, lo que permite a usuarios remotos autenticados conseguir ganar privilegios a través de una tabla con las funcione de indexado manipuladas, como se demuestra en las funciones (1) search_path o (2) una declaración, un asunto relacionado con CVE-2007-6600 y CVE-2009-3230."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was addressed in Red Hat Enterprise Linux 3 via https://rhn.redhat.com/errata/RHSA-2010-0427.html\n\nThis issue was addressed in Red Hat Enterprise Linux 4 via https://rhn.redhat.com/errata/RHSA-2010-0428.html\n\nThis issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0429.html and https://rhn.redhat.com/errata/RHSA-2010-0430.html","lastModified":"2010-05-20T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0C8DDD98-9A2D-402D-9172-F3C4C4C97FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20C8302B-631A-4DF7-839B-C6F3CC39E000"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FB318EB9-1B49-452A-92CF-89D9BA990AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5913A53B-7B72-4CBD-ADAE-318333EB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"815E58C0-327D-4F14-B496-05FC8179627E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3EF2D056-5120-4F98-8343-4EC31F962CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.7:*:*:*:*:*:*:*","matchCriteriaId":"516E0E86-3D8A-43F9-9DD5-865F5C889FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A7A9D3C-4BB6-4974-BF96-6E6728196F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.9:*:*:*:*:*:*:*","matchCriteriaId":"486EDE1B-37E0-4DDF-BFC9-C8C8945D5E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A7FC7F18-B227-4C46-9A33-FB34DDE456CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BCDB903F-0C89-4E65-857E-553CF9C192E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.12:*:*:*:*:*:*:*","matchCriteriaId":"F6BF8B1E-68F7-4F27-AD1F-FA02B256BDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.13:*:*:*:*:*:*:*","matchCriteriaId":"CD0DEB63-CA70-44C1-9491-E0790D1A8E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.14:*:*:*:*:*:*:*","matchCriteriaId":"DA8E73E5-BA41-4FA2-8457-803A97FB00C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.15:*:*:*:*:*:*:*","matchCriteriaId":"4C9B64CA-778F-405D-A441-34599246A3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.16:*:*:*:*:*:*:*","matchCriteriaId":"4975D8ED-7DCB-430F-98E1-DB165D6DA7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.17:*:*:*:*:*:*:*","matchCriteriaId":"CCBF8CDE-5E75-4DF8-AE1A-B7377953917A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.18:*:*:*:*:*:*:*","matchCriteriaId":"8AC4A04B-738C-4018-BB2F-FBEC8746200C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.19:*:*:*:*:*:*:*","matchCriteriaId":"36A2824A-A43F-436B-B9DA-B7E283A00426"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.20:*:*:*:*:*:*:*","matchCriteriaId":"DBBAF0F1-7A70-41DC-89A7-2EF9851E4FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.21:*:*:*:*:*:*:*","matchCriteriaId":"4A12EC07-1938-41BF-BCFC-C269668F1EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.22:*:*:*:*:*:*:*","matchCriteriaId":"14D7CE0D-510C-46BB-8896-42DD84F57017"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.23:*:*:*:*:*:*:*","matchCriteriaId":"1AA5858F-7DFF-460D-B862-83DD636D0A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.24:*:*:*:*:*:*:*","matchCriteriaId":"4394564D-131D-41C8-AE3A-BFF44779F27B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.25:*:*:*:*:*:*:*","matchCriteriaId":"2CCC06DB-1C93-4DE5-AEDC-03E532DA89F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.4.26:*:*:*:*:*:*:*","matchCriteriaId":"62133846-C0C8-473A-A842-2A8AF50C2FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B45F3BF0-9EB6-4A06-B6F7-DE95DD13EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91D1232E-4D0A-4BDC-99F6-25AEE014E9AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"105E9F52-D17E-4A0B-9C46-FD32A930B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0DE2055D-AAA4-4A6A-918F-349A9749AF09"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C12409B2-161B-4F78-B7AD-3CF69DDCC574"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD2F1DA4-6625-469D-988B-5457B68851A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"870F4348-6001-4C2F-A547-61964074E7C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2E26D52-D95A-4547-BE6E-4F142F54A624"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4AAB2D1D-BE61-4D7C-B305-58B4F4126620"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5F8D8B-34C5-4EBC-BB20-4D11191238B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E260F1F9-0068-4289-A8E8-C30220C2E1F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EEE16023-9A5E-46D5-B597-E6885C224786"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.12:*:*:*:*:*:*:*","matchCriteriaId":"84D64D74-9645-4CB7-B710-4FC26FB65B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BCF2794E-6B48-496B-B6CA-CDC7FC2160CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8EB12063-F487-4067-A7A5-4482E19D8D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.15:*:*:*:*:*:*:*","matchCriteriaId":"51AE5B72-DDC5-4207-B467-A9583F3AC781"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.16:*:*:*:*:*:*:*","matchCriteriaId":"99398182-C98C-4B16-9DBA-B1980BDFFA54"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.17:*:*:*:*:*:*:*","matchCriteriaId":"E6FEC1DE-A2A5-4945-95B8-75FDC9ED3B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.18:*:*:*:*:*:*:*","matchCriteriaId":"264AB44D-D014-4734-B538-09E5834EC30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.19:*:*:*:*:*:*:*","matchCriteriaId":"8D5DD1E6-E190-4D75-9D27-5EFB2544B158"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.20:*:*:*:*:*:*:*","matchCriteriaId":"3CD7F8CA-09B3-4038-B8B0-2D62A77F2478"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.21:*:*:*:*:*:*:*","matchCriteriaId":"64815C3D-1A1A-4525-9BCD-D89BAEACC950"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.0.22:*:*:*:*:*:*:*","matchCriteriaId":"7B61AFB3-818D-4A82-8C80-9CA9A1DCC090"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C0B9704E-4BA9-4389-83AB-62BC65F81D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FEEC35A2-B17C-46EC-8697-9E03568339BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"00562C18-DD81-4B09-AF93-739AF8757A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B52D093-7867-4FE8-B055-D8190103A1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF1A06EE-26BD-4CDA-AEB9-01124FC37E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FF855730-C61C-4FDC-96CB-57775A903421"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D93296E1-AEA2-443E-B9AA-D70535DDD093"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"992C3EC0-4C12-4FB0-8844-9EFB91DA95E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E3EBF1D-D5BD-4A22-B76A-2BAB21534E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.9:*:*:*:*:*:*:*","matchCriteriaId":"02DC4E8A-A728-4734-B67A-C58C37DA90C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.10:*:*:*:*:*:*:*","matchCriteriaId":"D59B0E32-9E71-4E41-BBAF-7A20008E43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*","matchCriteriaId":"CA6511DE-AF52-4953-8394-37D24A732538"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.12:*:*:*:*:*:*:*","matchCriteriaId":"51B93DC5-F632-47A5-9C58-52429B034D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D011C676-47D3-4D78-9C58-749AF6C7DBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.14:*:*:*:*:*:*:*","matchCriteriaId":"DFD5BE40-CF55-4C0E-BD89-5CC7DF41F6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.15:*:*:*:*:*:*:*","matchCriteriaId":"7C1EE1C3-4472-4CE2-AB60-9535C1C4AF8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.16:*:*:*:*:*:*:*","matchCriteriaId":"3B903334-2F67-4725-8277-6913E03BEFC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.17:*:*:*:*:*:*:*","matchCriteriaId":"2F6E9049-B347-4940-B523-DBB96DBFE731"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.1.18:*:*:*:*:*:*:*","matchCriteriaId":"6F1AD77C-BD28-43C9-B2CA-F60C1AD9D200"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2:*:*:*:*:*:*:*","matchCriteriaId":"7213327F-6909-43A7-952E-11600C28D4E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"10EF0EA6-C8B6-40A7-A3AE-8639CA94D5C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D9F645F3-9767-4FD8-94EB-1096DF24E6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C342A823-EF6F-4557-9F9E-D8893EA4C2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B85A443F-0802-412F-9AEE-3525311C93D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"06253BA8-7F1E-4C79-9B2E-197307A627F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2A213AB8-A5FE-4062-B895-2FC4B19F60A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9A3F083E-59A8-41B1-826F-2CA39BD425C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DE49E2D5-8EAC-49C7-B704-E626FBE7EC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5059B2F-B588-463E-8E96-BC9DA129C12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C919AF97-9713-44F8-B742-89C438DB0B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.11:*:*:*:*:*:*:*","matchCriteriaId":"400BBC62-5D03-465B-A864-9CD479B963F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.12:*:*:*:*:*:*:*","matchCriteriaId":"BC8C96F7-7F85-4E47-A05F-15E3C70AF583"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6C236CF1-72C0-4C3D-AE04-B67E3F18EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.2.14:*:*:*:*:*:*:*","matchCriteriaId":"ECC98D47-8B3C-4DE6-8C45-F5B92266027F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"05AD5D33-86F4-4BFF-BA84-02AA1347BEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"02FDCF30-D0F7-48AA-9633-9CC060495F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"788975F6-B3F1-4C21-B963-6BA59F14B71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6713D96-338B-4467-9F05-3153997F62E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*","matchCriteriaId":"01EB1A77-92AD-47FB-8290-D05C9B6C19C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*","matchCriteriaId":"74857259-30C7-422D-A24D-BE1E33F09466"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CD80066B-787E-496B-88FD-F0AE291468C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.3.8:*:*:*:*:*:*:*","matchCriteriaId":"88C9F0AB-A125-4DCD-A02B-E04D4D95FB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5C991F71-1E27-47A6-97DC-424FC3EF6011"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/61039","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37663","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39820","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:333","source":"secalert@redhat.com"},{"url":"http://www.postgresql.org/docs/current/static/release-7-4-27.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-0-23.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-1-19.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-2-15.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-3-9.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-2.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/support/security.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0427.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0428.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0429.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37333","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1023326","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3519","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1197","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546321","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9358","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134124585221119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/current/static/release-7-4-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-0-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-1-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-2-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-3-9.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.postgresql.org/support/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0427.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0428.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/509917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4137","sourceIdentifier":"secalert@redhat.com","published":"2009-12-24T16:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the __destruct function in the Piwik_Config class; php://filter URIs; the __destruct functions in Zend Framework, as demonstrated by the Zend_Log destructor; the shutdown functions in Zend Framework, as demonstrated by the Zend_Log_Writer_Mail class; the render function in the Piwik_View class; Smarty templates; and the _eval function in Smarty."},{"lang":"es","value":"La función loadContentFromCookie en core/Cookie.php en Piwik before v0.5 no valida cadenas obtenidoas desde cookies antes de llamar a la función unserialize, lo que permite a atacantes remotos ejecuta código o cargar archivos de su elección a través de vectores relacionados con la función the __destruct en la clase Piwik_Config; php://filter URIs; las funciones __destruct en Zend Framework, como quedó demostrado por el destructor Zend_Log; las funciones shutdown en Zend Framework, como quedó demostrado por la clase Zend_Log_Writer_Mail; la función render en la clase Piwik_View; plantillas Smarty ; y la función _eval en Smarty."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.25:*:*:*:*:*:*:*","matchCriteriaId":"262A0DB0-6CE4-41E7-BDC6-18924C76EDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.26:*:*:*:*:*:*:*","matchCriteriaId":"D3F37F31-2288-4B86-9EEB-38EE8B1979C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.27:*:*:*:*:*:*:*","matchCriteriaId":"74DBC09F-4B09-490B-8367-93B3257F9DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.28:*:*:*:*:*:*:*","matchCriteriaId":"0384553E-FEEB-4AE4-B1F1-1EC99BE07BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.29:*:*:*:*:*:*:*","matchCriteriaId":"E64C21FE-BCA5-4830-AA85-5959CBE3800D"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.30:*:*:*:*:*:*:*","matchCriteriaId":"BF976D83-866E-416D-A21C-2BF2A8F95462"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.31:*:*:*:*:*:*:*","matchCriteriaId":"1E9EB7C0-C645-4E1A-A7CD-87325BBA81E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.32:*:*:*:*:*:*:*","matchCriteriaId":"998651DF-2552-4A8E-9EA9-AEEED3D39BCB"}]}]}],"references":[{"url":"http://dev.piwik.org/trac/changeset/1637","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://piwik.org/blog/2009/12/piwik-response-to-shocking-news-in-php-exploitation/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/09/2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/10/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/14/2","source":"secalert@redhat.com"},{"url":"http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"secalert@redhat.com"},{"url":"http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"secalert@redhat.com"},{"url":"http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf","source":"secalert@redhat.com"},{"url":"http://dev.piwik.org/trac/changeset/1637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://piwik.org/blog/2009/12/piwik-response-to-shocking-news-in-php-exploitation/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/10/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/14/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4138","sourceIdentifier":"secalert@redhat.com","published":"2009-12-16T19:30:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field."},{"lang":"es","value":"drivers/firewire/ohci.c en el kernel de Linux anterior a v2.6.32-git9, cuando se usa el modo packet-per-buffer, permite a usuarios locales provocar una denegación de servicio (deferencia a puntero NULL y caída del sistema) o posiblemente otro impacto desconocido a través de un ioctl sin especificar asociado a cuando se recibe un paquete ISO que contiene Zero en el campo payload-length."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/CVE-2009-4138\n\nThe Linux kernel packages as shipped with Red Hat Enterprise Linux 3 and 4 have a different (and older) implementation of the driver for OHCI 1394 controllers, which is not affected by this issue.\n\nIt was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0046.html\n\nA future kernel update for Red Hat Enterprise MRG will address this flaw.","lastModified":"2010-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc8:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"B04C697F-397E-46B0-829E-9D21749C8BEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"46568A0D-F374-4DAB-9B64-FCC74A9AA07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc6:*:*:*:*:*:*","matchCriteriaId":"1B6C0A59-556F-4579-9AD2-4ABAE01FE2CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc7:*:*:*:*:*:*","matchCriteriaId":"DBE3083A-0FA6-4854-8F65-05E8364B3A9B"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"secalert@redhat.com"},{"url":"http://patchwork.kernel.org/patch/66747/","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/38017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38276","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"secalert@redhat.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/15/1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37339","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547236","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/66747/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100073666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/15/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4140","sourceIdentifier":"secalert@redhat.com","published":"2009-12-22T22:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos sin restricciones en el archivo ofc_upload_image.php en Open Flash Chart versión v2 Beta 1 hasta v2 Lug Wyrm Charmer, tal como es usado en Piwik versiones 0.2.35 hasta 0.4.3, Plugin Woopra Analytics anterior a versión 1.4.3.2, y posiblemente otros productos, cuando register_globals está habilitado, permite a los usuarios autenticados remotos ejecutar código arbitrario mediante la carga de un archivo con una extensión ejecutable por medio del parámetro name con el código en el parámetro HTTP_RAW_POST_DATA, a continuación, acceder a él por medio de una petición directa al archivo en tmp-upload-images/"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"CAFD137D-4772-49C4-8EDE-74F838BFB1D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:gamera:*:*:*:*:*:*","matchCriteriaId":"F9FC6227-6C33-4533-9263-C43CC218E314"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:hyperion:*:*:*:*:*:*","matchCriteriaId":"7AE13D32-E4A6-4274-9AAF-8CFB37E0CC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:ichor:*:*:*:*:*:*","matchCriteriaId":"EFFC03CB-7773-4CAF-AF9D-E2F50FDB8F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:j_rmungandr:*:*:*:*:*:*","matchCriteriaId":"4C0AEFA3-7433-4A79-BED0-0C44FBB916BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:j_rmungandr-2:*:*:*:*:*:*","matchCriteriaId":"9C544F30-E14B-4B34-B8E8-6F984ECEF72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:kvasir:*:*:*:*:*:*","matchCriteriaId":"139C1538-502B-41FC-9DB7-229F5FD3A939"},{"vulnerable":true,"criteria":"cpe:2.3:a:teethgrinder.co.uk:open_flash_chart:2.0:lug_wyrm_charmer:*:*:*:*:*:*","matchCriteriaId":"014A2738-B528-472F-8E0F-A206F9D423C3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.2.37:*:*:*:*:*:*:*","matchCriteriaId":"D0FD1280-C769-4B8D-B0F4-26B405E080CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"863EB628-3970-4F96-81E8-827FCDAE91E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:matomo:matomo:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5617FB7C-649A-44FD-A9F8-2275F51EFA71"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/123493/wpseowatcher-exec.txt","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/123494/wpslimstatex-exec.txt","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.org/0910-exploits/piwik-upload.txt","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://piwik.org/blog/2009/10/piwik-response-to-secunia-advisory-sa37078/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37078","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37911","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/55160","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55162","source":"secalert@redhat.com"},{"url":"http://wordpress.org/extend/plugins/woopra/changelog/","source":"secalert@redhat.com"},{"url":"http://www.exploit-db.com/exploits/24969","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/14/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/14/3","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/59051","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37314","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2966","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53825","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/123493/wpseowatcher-exec.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/123494/wpslimstatex-exec.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0910-exploits/piwik-upload.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://piwik.org/blog/2009/10/piwik-response-to-secunia-advisory-sa37078/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/55160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wordpress.org/extend/plugins/woopra/changelog/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/24969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/14/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/14/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/59051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4142","sourceIdentifier":"secalert@redhat.com","published":"2009-12-21T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character."},{"lang":"es","value":"La función htmlspecialchars en PHP versiones anteriores a v5.2.12 no maneja adecuadamente (1) secuencias UTF-8 demasiado largas, (2) secuencias inválidas Shift_JIS, y (39 secuencias inválidas EUC-JP, permitiendo a atacantes remotos dirigir ataques de secuencias de comandos en sitios cruzados (XSS) poniendo secuencias de bytes modificados antes de un carácter especial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.11","matchCriteriaId":"DD613CC3-281B-43D1-A352-53D339B040FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E1F32DDF-17A3-45B5-9227-833EBEBD3923"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=49785","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37821","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38648","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40262","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1023372","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2001","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.php.net/releases/5_2_12.php","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37389","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10005","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7085","source":"secalert@redhat.com"},{"url":"http://bugs.php.net/bug.php?id=49785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.php.net/releases/5_2_12.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4143","sourceIdentifier":"secalert@redhat.com","published":"2009-12-21T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to (1) interrupt corruption of the SESSION superglobal array and (2) the session.save_path directive."},{"lang":"es","value":"PHP versiones anteriores a v5.2.12 no maneja adecuadamente los datos de sesión, teniendo un impacto no especificado y vectores de ataque relacionado con (1) la interrupción de corrupción de la selección SESSION superglobal y (2) la directiva session.save_path."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider safe_mode / open_basedir restriction bypass issues being security sensitive. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php","lastModified":"2009-12-23T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.11","matchCriteriaId":"DD613CC3-281B-43D1-A352-53D339B040FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4:*:*:*:*:*:*:*","matchCriteriaId":"467BBA06-7E32-474D-BBBB-72B389D0DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc4:*:*:*:*:*:*","matchCriteriaId":"FE287FF5-53C6-43E6-9FEB-28CD6185EB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E1F32DDF-17A3-45B5-9227-833EBEBD3923"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37821","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38648","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40262","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41480","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41490","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2001","source":"secalert@redhat.com"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:045","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.php.net/releases/5_2_12.php","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37390","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7439","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127680701405735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/releases/5_2_12.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4144","sourceIdentifier":"secalert@redhat.com","published":"2009-12-23T20:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network."},{"lang":"es","value":"NetworkManager (NM) v0.7.2 no asegura que el fichero del certificado de la autoridad de certificación (CA) configurada para una red (1) WPA Enterprise o (2) 802.1x continúe presente durante un intento de conexión, lo que podría permitir a atacantes remotos obtener información sensible o provocar una denegación de servicio (interrupción de conectividad) mediante la suplantación de identidad de una red inalámbrica."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:networkmanager:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"8D65E039-D608-4565-8E37-F0D65AC2BEE0"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560067","source":"secalert@redhat.com"},{"url":"http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=4020594dfbf566f1852f0acb36ad631a9e73a82b","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38420","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/16/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0108.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37580","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546795","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11315","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=4020594dfbf566f1852f0acb36ad631a9e73a82b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0108.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4145","sourceIdentifier":"secalert@redhat.com","published":"2009-12-23T20:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network."},{"lang":"es","value":"nm-connection-editor en NetworkManager (NM) v0.7.x envía objetos de conexión por el D-Bus sobre acciones en el editor GUI de conexión, permitiendo a usuarios locales obtener información sensible al leer las señales D-Bus, como se ha demostrado usando dbus-monitor para descubrir la contraseña de la red WiFi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:networkmanager:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"8D65E039-D608-4565-8E37-F0D65AC2BEE0"}]}]}],"references":[{"url":"http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=56d87fcb86acb5359558e0a2ee702cfc0c3391f2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=8627880e07c8345f69ed639325280c7f62a8f894","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37819","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38420","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/16/3","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0108.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37580","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546117","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54898","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10539","source":"secalert@redhat.com"},{"url":"http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=56d87fcb86acb5359558e0a2ee702cfc0c3391f2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=8627880e07c8345f69ed639325280c7f62a8f894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/16/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0108.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4146","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T18:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD environment variable, which allows local users to gain privileges by executing a setuid or setguid program with a modified LD_PRELOAD variable containing an untrusted search path that points to a Trojan horse library, a different vector than CVE-2009-4147."},{"lang":"es","value":"La función _rtld en el Run-Time Link-Editor (rtld) de libexec/rtld-elf/rtld.c de FreeBSD v7.1, v7.2 y v8.0, no limpia la variable de entorno LD_PRELOAD, esto permite a usuarios locales aumentar sus privilegios al ejecutar el programa setuid o setguid con la variable LD_PRELOAD modificada para que contenga una ruta de búsqueda no confiable que apunte a una biblioteca de un Troyano. Se trata de una vulnerabilidad diferente de CVE-2009-4147."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3CF1F9EF-01AF-4708-AE02-765360AF3D66"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html","source":"cve@mitre.org"},{"url":"http://people.freebsd.org/~cperciva/rtld.patch","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508142/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508146/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508168/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023250","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://people.freebsd.org/~cperciva/rtld.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508142/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508146/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508168/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4147","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE, (4) LD_DEBUG, and (5) LD_ELF_HINTS_PATH environment variables, which allows local users to gain privileges by executing a setuid or setguid program with a modified variable containing an untrusted search path that points to a Trojan horse library, different vectors than CVE-2009-4146."},{"lang":"es","value":"La función _rtld en Run-Time Link-Editor (rtld) en libexec/rtld-elf/rtld.c en FreeBSD v7.1 y v8.0 no limpia las variables de entorno de (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE, (4) LD_DEBUG, and (5) LD_ELF_HINTS_PATH lo que permite a usuarios locales conseguir privilegios mediante la ejecución de un programa setuid o setguid con una variable modificada que contiene una ruta de búsqueda sin confianza que apunta a una libreria de un troyano con vectores diferentes que CVE-2009-4146."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3CF1F9EF-01AF-4708-AE02-765360AF3D66"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html","source":"cve@mitre.org"},{"url":"http://people.freebsd.org/~cperciva/rtld.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508142/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508146/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023250","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://people.freebsd.org/~cperciva/rtld.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508142/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508146/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-4148","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a (1) .ds, (2) .dsa, (3) .dse, or (4) .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a \"script injection vulnerability.\""},{"lang":"es","value":"DAZ Studio v2.3.3.161, v2.3.3.163, y v3.0.1.135 permite a atacantes remotos ejecutar código JavaScript de su elección mediante un fichero (1) .ds, (2) .dsa, (3) .dse, o (4) .dsb, como se ha demostrado por el código que carga el control ActiveX WScript.Shell, relacionado con una \"vulnerabilidad de inyección de script\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daz3d:daz_studio:2.3.3.161:*:*:*:*:*:*:*","matchCriteriaId":"78D0B155-EE1D-4FB6-B8A6-A5F265F27B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:daz3d:daz_studio:2.3.3.163:*:*:*:*:*:*:*","matchCriteriaId":"42A880F2-1EA9-4C64-9A6D-A84977BAA21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:daz3d:daz_studio:3.0.1.135:*:*:*:*:*:*:*","matchCriteriaId":"3D1A798A-66E2-4E3A-BC2A-D6BE885AC38A"}]}]}],"references":[{"url":"http://www.coresecurity.com/content/dazstudio-scripting-injection","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508192/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37176","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.coresecurity.com/content/dazstudio-scripting-injection","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508192/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4149","sourceIdentifier":"cve@mitre.org","published":"2009-12-09T18:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la interfaz Web en CA Service Desk 12.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de un parámetro no especificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_desk:12.1:*:*:*:*:*:*:*","matchCriteriaId":"B6474D9A-5819-478E-8F89-0D5C463E2142"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/37253","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=223999","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=223999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4150","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T11:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors."},{"lang":"es","value":"dasauto en IBM DB2 v8 anterior a FP18, v9.1 anterior a FP8, v9.5 anterior a FP4, y v9.7 anterior a FP1, permite la ejecución a través de cuentas de usuario sin privilegios, lo que tiene un impacto y vectores de ataque no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"FA8ABABB-F84D-41F0-A894-56911AF6E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*","matchCriteriaId":"3BB95F92-EA60-4301-99AD-AC8DA2491086"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp1:aix:*:*:*:*:*","matchCriteriaId":"E9D53A45-A270-47A6-8E52-4EFD20B60454"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp1:hp_ux:*:*:*:*:*","matchCriteriaId":"1DC0FD0B-BB91-4881-8BEF-2FF5DEE799FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp1:linux:*:*:*:*:*","matchCriteriaId":"C4D89C55-70BA-4DEB-A3CB-93F1F01BBB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:aix:*:*:*:*:*","matchCriteriaId":"F805BA54-A413-46EC-A1C0-EEE5A8FB3C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:hp_ux:*:*:*:*:*","matchCriteriaId":"DAA10457-D52B-4AE5-8635-E072B5E25662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:linux:*:*:*:*:*","matchCriteriaId":"F9EF7B04-D200-4648-AD26-D78BD8B032FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp10:solaris:*:*:*:*:*","matchCriteriaId":"EB3DA89D-B79A-4B02-A287-C505D1FE8004"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:aix:*:*:*:*:*","matchCriteriaId":"D52430A4-018F-4342-A1F5-4093CBBCFFED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:hp_ux:*:*:*:*:*","matchCriteriaId":"7A1C82E1-F8EF-40CD-ACDD-081FFC268FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:linux:*:*:*:*:*","matchCriteriaId":"C1B22E99-C013-49B3-BE3E-DB9DB685CA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp11:solaris:*:*:*:*:*","matchCriteriaId":"9173E3FB-1DA9-4DD8-A08F-8A730BEB27B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:aix:*:*:*:*:*","matchCriteriaId":"58D0932B-A52A-48BB-ADFB-AEB17FCF69E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:hp_ux:*:*:*:*:*","matchCriteriaId":"F63AA153-396F-43AC-8CB0-8E27F119FF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:linux:*:*:*:*:*","matchCriteriaId":"7C132382-0C33-4E9B-878B-2C626D34DB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp12:solaris:*:*:*:*:*","matchCriteriaId":"C1C093DF-FCD2-47FC-8C8E-1468A5FA06B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:aix:*:*:*:*:*","matchCriteriaId":"27E209D3-741C-4BD6-AE5A-A52C0C0EAEA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:hp_ux:*:*:*:*:*","matchCriteriaId":"AA4A6254-B6BB-42DB-9E2F-7AA960AD8C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:linux:*:*:*:*:*","matchCriteriaId":"BEBC3282-413E-4A0C-BDEA-B5671BF51F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp13:solaris:*:*:*:*:*","matchCriteriaId":"45802AC3-78BB-4190-AB93-B67F586B94C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:aix:*:*:*:*:*","matchCriteriaId":"99270F25-D30F-4120-9FA2-35C39CEEC8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:hp_ux:*:*:*:*:*","matchCriteriaId":"BDD49D30-7ACF-4A33-B92D-C66BE9929BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:linux:*:*:*:*:*","matchCriteriaId":"3664CEE2-0449-452B-A934-170F0349A57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp14:solaris:*:*:*:*:*","matchCriteriaId":"4A9A7663-3322-45A9-A5D8-E0970336F68D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:aix:*:*:*:*:*","matchCriteriaId":"D6B6EAB4-5A66-4BEB-B38B-DA0124DD6F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:hp_ux:*:*:*:*:*","matchCriteriaId":"9BC307F3-A9A0-4C48-8983-64B1B237AAF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:linux:*:*:*:*:*","matchCriteriaId":"44C9C5AF-26E2-4C0F-9816-0CF3EE02A838"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp15:solaris:*:*:*:*:*","matchCriteriaId":"68018945-8F40-436E-9981-4C3B62EAD28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp16:aix:*:*:*:*:*","matchCriteriaId":"09E620E2-55BF-480C-9698-113505F90BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp16:hp_ux:*:*:*:*:*","matchCriteriaId":"B74F7B8A-0E7C-4190-AF4E-2389F18997E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp16:linux:*:*:*:*:*","matchCriteriaId":"9263F04B-FF63-4DF7-8C77-C6CE7B67BFD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp16:solaris:*:*:*:*:*","matchCriteriaId":"F88DCFD5-CB47-49C9-99CD-8D46827A02B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:aix:*:*:*:*:*","matchCriteriaId":"A24425DA-1FAC-43BC-86F3-1E561277AF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:hp_ux:*:*:*:*:*","matchCriteriaId":"23BB5DCC-CC6E-4118-B0D4-DEE6EA54D05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:linux:*:*:*:*:*","matchCriteriaId":"E6097C8C-41B1-4CC8-AAD3-3731D103093B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp2:solaris:*:*:*:*:*","matchCriteriaId":"1DF33116-6CB4-48B2-BF23-632F185EB7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:aix:*:*:*:*:*","matchCriteriaId":"6A3A0A74-100A-4B37-8D45-3F59FE403D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:hp_ux:*:*:*:*:*","matchCriteriaId":"741D3457-DA96-4AF1-A036-7FAF640C8D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:linux:*:*:*:*:*","matchCriteriaId":"D55F0E1F-2905-4ABC-9A9B-FF62299F679D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp3:solaris:*:*:*:*:*","matchCriteriaId":"12EB2606-33BE-4253-94B7-43E76F0BB430"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:aix:*:*:*:*:*","matchCriteriaId":"55E1A553-1786-489D-9BE2-60D7348FD8F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:hp_ux:*:*:*:*:*","matchCriteriaId":"E8C502A3-56DA-4104-BCAC-3E5D454D49F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:linux:*:*:*:*:*","matchCriteriaId":"F98FA787-A7E7-45BA-A3DC-F25C2FC74A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4:solaris:*:*:*:*:*","matchCriteriaId":"2C8DA7D4-0375-412A-9DDF-E31D6D1CD5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:aix:*:*:*:*:*","matchCriteriaId":"58F68270-C74E-415E-A8C1-3FE5940B8DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:hp_ux:*:*:*:*:*","matchCriteriaId":"F677E182-A145-42D0-8580-8467279938CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:linux:*:*:*:*:*","matchCriteriaId":"D02E2CF9-CE08-4B0B-ADD5-1A9AE7DE8B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp4a:solaris:*:*:*:*:*","matchCriteriaId":"AB99106D-14C9-4E95-92BA-0DDF1EF48B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:aix:*:*:*:*:*","matchCriteriaId":"36A0742E-E958-4328-B9A8-2D4BA883926F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:hp_ux:*:*:*:*:*","matchCriteriaId":"13FE19E6-67FD-450F-9129-8DCF4707C0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:linux:*:*:*:*:*","matchCriteriaId":"8A8E27E2-4470-40B6-BE35-3B96D375D891"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp5:solaris:*:*:*:*:*","matchCriteriaId":"045B87AF-476D-4A13-88E4-C0ADF8F1374D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:aix:*:*:*:*:*","matchCriteriaId":"16E17C4B-C233-4C27-90DF-34802571EFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:hp_ux:*:*:*:*:*","matchCriteriaId":"B2C32CFE-2C37-44B4-B05F-B4B41ADEEB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:linux:*:*:*:*:*","matchCriteriaId":"A32039C1-C940-4ACC-8236-6C48286CD8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6:solaris:*:*:*:*:*","matchCriteriaId":"9E792924-8741-42EA-B091-521A8D806393"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:aix:*:*:*:*:*","matchCriteriaId":"1BCDD273-AA59-427A-A13C-21D2D18862C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:hp_ux:*:*:*:*:*","matchCriteriaId":"63FB9C7D-72AB-40B8-B9A0-107707AB970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:linux:*:*:*:*:*","matchCriteriaId":"BFDEB3C4-261D-4A44-898F-0972C4E0BADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6a:solaris:*:*:*:*:*","matchCriteriaId":"711D578D-53FA-4FE3-87D4-49E8A6B27645"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:aix:*:*:*:*:*","matchCriteriaId":"8AC7F72B-8BC0-4186-9EA7-B1B4CF4DE029"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:hp_ux:*:*:*:*:*","matchCriteriaId":"492DF384-0687-409F-A416-D545E3CA4B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:linux:*:*:*:*:*","matchCriteriaId":"A1ACA5ED-C596-48A4-A60F-AF29457D8E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6b:solaris:*:*:*:*:*","matchCriteriaId":"17C07869-F96F-409A-A5A8-DAEF37513442"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:aix:*:*:*:*:*","matchCriteriaId":"0A7DFEC9-AF38-457A-A4E6-77EFFDEC6E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:hp_ux:*:*:*:*:*","matchCriteriaId":"BEF40CF8-4858-4AD2-9136-B9E7742609E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:linux:*:*:*:*:*","matchCriteriaId":"02AEA3AF-76F2-479E-97FF-259228157219"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp6c:solaris:*:*:*:*:*","matchCriteriaId":"D9C4CF66-D4BA-4C00-8891-BEEB0DD665A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:aix:*:*:*:*:*","matchCriteriaId":"28589727-AE9E-4181-8B41-46192B593E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:hp_ux:*:*:*:*:*","matchCriteriaId":"F458C66B-ACE1-4315-A8CC-4CEFAD41028D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:linux:*:*:*:*:*","matchCriteriaId":"83642434-B93C-450B-99EA-270008B4E37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7:solaris:*:*:*:*:*","matchCriteriaId":"F2AD8AC6-239A-4CFE-9D9E-8A841A867725"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:aix:*:*:*:*:*","matchCriteriaId":"5187C464-0B04-4D29-8700-F4D9359F0564"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:hp_ux:*:*:*:*:*","matchCriteriaId":"9A1A163A-AA78-48E1-9C86-C8A1A1A29929"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:linux:*:*:*:*:*","matchCriteriaId":"20AC001E-4C76-42CB-A8BC-790BD0C39F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7a:solaris:*:*:*:*:*","matchCriteriaId":"4B4F776B-5914-4BDE-9C2F-84E3795FA788"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:aix:*:*:*:*:*","matchCriteriaId":"11D13957-FDE1-4B00-8753-BA94C0DAA249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:hp_ux:*:*:*:*:*","matchCriteriaId":"C18FB58D-6EC6-4CDD-912B-18A17F7E957B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:linux:*:*:*:*:*","matchCriteriaId":"2045E0EA-B405-4BF0-A817-34E79317F46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp7b:solaris:*:*:*:*:*","matchCriteriaId":"4541F041-F2F4-4491-BDBE-4215A75E832C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:aix:*:*:*:*:*","matchCriteriaId":"2F7D3287-9D4C-4AA7-8232-3543369397CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:hp_ux:*:*:*:*:*","matchCriteriaId":"BA5B0AA2-E067-4FFF-ADE1-145D8A1C1B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:linux:*:*:*:*:*","matchCriteriaId":"0C35EA9D-DEFE-4B81-B5C9-51103273F661"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8:solaris:*:*:*:*:*","matchCriteriaId":"C92BCF46-BEBF-433C-A095-44E6F7A16E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:aix:*:*:*:*:*","matchCriteriaId":"308D7247-F21E-4199-BA14-FE318637F3C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:hp_ux:*:*:*:*:*","matchCriteriaId":"84E99600-0016-4FD9-BFC9-D2CD913012BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:linux:*:*:*:*:*","matchCriteriaId":"0CBA4D6B-4C07-4780-8760-00F82D0016E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp8a:solaris:*:*:*:*:*","matchCriteriaId":"332C4CED-4E32-48C6-BF91-43409E0C7D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:aix:*:*:*:*:*","matchCriteriaId":"1F5AD43F-1D06-447F-8B66-89207DE3AECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:hp_ux:*:*:*:*:*","matchCriteriaId":"CEC1C774-2AD9-4EBA-AB11-70135F20D006"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:linux:*:*:*:*:*","matchCriteriaId":"5CE1E38B-FEA7-45CE-A50E-A4670AB925EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9:solaris:*:*:*:*:*","matchCriteriaId":"BDC3F77B-9C7C-4D56-B575-FFFF0AD51E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:aix:*:*:*:*:*","matchCriteriaId":"F9D03647-B68E-4950-A718-7E83135A8BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:hp_ux:*:*:*:*:*","matchCriteriaId":"27F207B6-B5E8-4972-B315-106F4903B8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:linux:*:*:*:*:*","matchCriteriaId":"C934F5CD-7E30-497E-9DD8-BB92646B81E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8:fp9a:solaris:*:*:*:*:*","matchCriteriaId":"43D68C54-E197-43AD-94CF-AA2CF1B2D76C"}]}]}],"references":[{"url":"http://secunia.com/advisories/36890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37454","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023242","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21386689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21403619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4151","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages \"HTTP access to the RT server,\" a related issue to CVE-2009-3585."},{"lang":"es","value":"Vulnerabilidad de fijación de sesión en /Elements/SetupSessionCookie en Best Practical Solutions RT v3.0.0 a la v3.6.9 y v3.8.x a la v3.8.5, permite a atacantes remotos secuestrar sesiones web manipulando el identificador de sesión lo que permite \"Un acceso HTTP al servidor RT\". Relacionado con el CVE-2009-3585."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BA418CF5-49D6-4E0E-A1B5-8CB23752989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8E238F87-8D8C-4E62-A8F0-3DB9EFDB8328"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3FD8A7EF-5DB8-40C6-9124-A97A23B3EA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2AD553B8-8495-47E5-A543-4DC963B3511A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"28ADB191-4787-4FDB-B70A-F4C8BDF0F4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2772389A-9BCD-4B13-88C8-75BC64E40AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B1F9D05F-C86D-40D8-A7D9-5448918B72DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"311485DA-5381-4EAD-AF58-B8C67373413A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2EAF6671-8C77-448B-BF29-E2CF51176CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B55D762D-A723-435C-8D80-F7230F1648D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"4CC63EDC-541E-445D-8B72-799E4184B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D5E6196E-4A90-4F64-BA99-A8E04A09D5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91D7CE86-3FCD-472E-BF01-31FFB36701BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"70B3F0B2-8C70-4046-AAA0-FBD344FE4DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FCD0173D-F699-4864-8856-D1792BDA0F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC2E53-5DE8-4A31-9B8A-79335DFBAFEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"404AFC5C-20B4-41E5-ACDE-56626D68AFEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F37D1380-965B-40E0-8A20-61FEA072B8D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E101B0FE-499F-44D8-8B68-BB7FEE40D2B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"747D8CD1-EE12-48A4-A795-88BC66A8DA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5FDE201D-F31A-4738-B9AB-7BB11417990E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"4D6ED4EC-F860-47BD-B699-551FB5DBF039"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E3398823-1813-4D7B-9EC9-74222A240051"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F98B7895-BDB3-477C-8B34-88BD3E02EAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1512169D-DCEF-4964-B05A-3DF19CDE8F57"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B427F5D4-ACD6-46E5-B94F-CA30330C6492"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E9B38C33-D680-4285-A849-E6CDA9F4802F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"646CFD82-15FE-48E4-83C9-E3E037E9F928"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"57404A14-6E1C-4F3B-8120-75F1073A3E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3F40ED56-CDAC-40BB-A026-5D6A09DCB72C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"33C325D9-CB88-430F-B1AE-3544C7176398"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"F1E86D15-8435-46B9-88FF-8A51771C55E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"543C8E63-9A49-4D6A-899A-7D244D0CCC17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"00AFB893-E37A-4E81-A984-66D677161D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C503726A-4AAB-4444-A204-7F53A6369919"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F2B93F59-E22F-47E0-A5EA-D5716E9EAB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0BF01543-2929-4ADA-BD74-ABE00BF066BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.3:*:*:*:*:*:*:*","matchCriteriaId":"562E9782-259B-42C6-BC3E-C452799A78FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"C4D2E2C8-15E8-45E4-9DBF-6CF2BEB30576"},{"vulnerable":true,"criteria":"cpe:2.3:a:bestpractical:rt:3.8.5:*:*:*:*:*:*:*","matchCriteriaId":"9E4D117A-92C0-4884-A3E6-F6FCC8B89458"}]}]}],"references":[{"url":"http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37546","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37728","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37162","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54472","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.html","source":"cve@mitre.org"},{"url":"http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4152","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T16:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el componente Collaboration en IBM WebSphere Portal v6.1.x anterior v6.1.0.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través la etiqueta del selector de personas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"}]}]}],"references":[{"url":"http://secunia.com/advisories/37526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014411","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37159","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4153","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente XMLAccess en IBM WebSphere Portal v6.1.x anterior a v6.1.0.3 tiene un impacto y vectores de ataque desconocidos, relacionados con el directorio de trabajo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E618064A-3D05-4DC6-9A47-0EDF2427642F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3DE74154-3E79-4D56-96C4-D8E644F1419D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA915826-5D89-43E9-83E7-88973648302A"}]}]}],"references":[{"url":"http://secunia.com/advisories/37526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK93783","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014411","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37159","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3367","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK93783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4154","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en includes/feedcreator.class.php en Elxis CMS permite a atacantes remotos leer archivos de su elección a través de ..(punto punto) en el parámetro \"filename\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elxis:elxis_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"3AE5EE8F-DB8F-4891-B528-7A3962B38FCF"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/elxiscms-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37158","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0911-exploits/elxiscms-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4155","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter to (1) home-f.asp and (2) opinions-f.asp; (3) sitebid, (4) id, (5) secText, (6) client-ip, and (7) G_id parameters to more-f.asp; (8) sitebid, (9) id, (10) ma_id, (11) mi_id, (12) secText, (13) client-ip, and (14) G_id parameters to selectintro.asp; (15) sitebid, (16) secText, (17) adv_code, and (18) client-ip parameters to advcount.asp; (19) sitebid, (20) secText, (21) Grp_Code, (22) _method, and (23) client-ip parameters to advview.asp; and (24) sitebid, (25) secText, (26) newsId, and (27) client-ip parameters to dis_new-f.asp."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Eshopbuilde CMS permite a atacantes remotos ejecutar comandos SQL a través del parámetro sitebid en (1) home-f.asp y (2) opinions-f.asp; (3) sitebid, (4) id, (5) secText, (6) client-ip, y (7) parámetros G_id en more-f.asp; (8) sitebid, (9) id, (10) ma_id, (11) mi_id, (12) secText, (13) client-ip, y (14)parámetros G_id en selectintro.asp; (15) sitebid, (16) secText, (17) adv_code, y (18) parámetros client-ip en advcount.asp; (19) sitebid, (20) secText, (21) Grp_Code, (22) _method, y (23) parámetros client-ip en advview.asp; y (24) sitebid, (25) secText, (26) newsId, y (27) parámetros client-ip en dis_new-f.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eshopbuilder:eshopbuilde_cms:*:*:*:*:*:*:*:*","matchCriteriaId":"F70D0B0D-57EA-438E-B890-8E9092AAED86"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/508137/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508137/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4156","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en modules/pms/index.php en Ciamos CMS v0.9.5 y anteriores permite a atacantes remotos ejecutar código PHP de su eleeción a través de una URL en el parámetro module_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ciamos:ciamos_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.5","matchCriteriaId":"35C8A6A0-CEF7-4973-90B6-8BB42002F960"},{"vulnerable":true,"criteria":"cpe:2.3:a:ciamos:ciamos_cms:0.9:*:*:*:*:*:*:*","matchCriteriaId":"034080FB-979A-4F44-888C-7DAE96D7D510"},{"vulnerable":true,"criteria":"cpe:2.3:a:ciamos:ciamos_cms:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"DE829719-84FD-467E-8D48-20317A3E5A9F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10259","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37160","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4157","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in (1) 404 or (2) error pages."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados(XSS) en index.php en el componente ProofReader (com_proofreader) v1.0 RC9 y anteriores para Joomla! permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de la URI, el cuál no es manejado apropiadamente en 1) 404 o (2) páginas de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlatune:com_proofreader:*:rc9:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"FD04AE72-A874-4DF3-9048-836023521DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joomlatune:com_proofreader:1.0:rc6:*:*:*:*:*:*","matchCriteriaId":"804D9842-D175-4304-BF8F-63EFA0E004BF"}]}]}],"references":[{"url":"http://websecurity.com.ua/3482/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3482/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4158","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Calendar Base (cal) anteriores a v1.2.1 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"4CB5E96D-C4B9-44E9-8073-DDBD4A8B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E4065A72-7533-4D8E-ACF9-5604706CB208"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB64C964-7C36-4F3C-9AF8-BD334E413A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"DADC4C4B-FB4A-4BA1-B927-EBE80D83F728"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"6438AC43-A012-49A3-957D-1507233683CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"C62589A9-8178-4B77-8DC3-251980AF6C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"0D9D28D1-7B3B-4379-805A-5C639CD0131C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"FC61BC22-0861-4487-8207-31D82446D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"45E04442-9642-4EE7-A176-CB5CF9872423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"0C2318FB-9E09-499B-8B52-E88B4C6B5858"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"AA60C05C-5A2C-487D-9452-0C1DB3D40033"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"84B10B5C-7344-4D9B-BB1D-2A60D37FABC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"D47ADD6D-82C4-480B-8512-8D3C4CE07F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"D19BFBE7-2B1F-4A89-BB24-4B30F7D1DE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"6BDC0D06-CFE3-437D-8CFA-43F3E860A177"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A455FB8-393C-45D6-8F2A-55B617B2C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE46693-11CD-48B4-9AEA-D2C00B3AD84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"3E779D12-C8A1-44BB-AE0E-3B857EB36DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.2:*:*:*:*:*:*:*","matchCriteriaId":"D2548806-B98F-4FA1-826F-E0B036480283"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.3:*:*:*:*:*:*:*","matchCriteriaId":"000AA929-221D-4DD5-B9DD-9F27A0E9E53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.4:*:*:*:*:*:*:*","matchCriteriaId":"49A81DDC-8D35-491E-9D37-1C1A93B90B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.5:*:*:*:*:*:*:*","matchCriteriaId":"6811A792-031A-4DD2-A549-C16FE21FCFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.6:*:*:*:*:*:*:*","matchCriteriaId":"62A097C2-2480-4CEF-BDA1-85C0FF918797"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"A9522502-A801-45BB-8FFD-10C08537F4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"116E514B-4DD6-42D8-BB25-55D66DD6474B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"BFC1A4BB-F427-4F23-90D5-90B19BB8014C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"A7A9841A-65CF-4AF8-8465-87D543C3E14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"530F6FFB-2B29-458B-9EA2-44C47C026EA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4C569E8A-4285-485C-9C94-BAE3CB552E98"}]}]}],"references":[{"url":"http://secunia.com/advisories/37549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/cal/1.2.1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/cal/1.2.1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4159","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica de configuración de newsletter en el módulo backend en la extensión Direct Mail (direct_mail) v2.6.4 y anteriores para TYPO3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.4","matchCriteriaId":"41285CAD-7BEF-4654-826F-A88C9C7988A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B03A18CF-1422-4074-8CE0-F00957ACC5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"586E7D50-2989-42B5-B260-C74E8540058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC89EF6-5413-4ED9-A10D-F2A0A0334B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2F860B9E-2976-4688-9B35-4570BB20C608"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A098F808-8E6A-4780-9A10-94E5F0F04F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"400BF448-5A45-4AAF-8622-5B0D6FC00E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E0533D2C-B43D-4C90-8BD1-DA805FC427D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"DD686FD0-8C55-434A-A36A-B8736AB54213"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"09BEB78C-81CF-4D4C-A7AF-CC78916DC4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"BEC92BBB-95F6-46FE-B80B-093F8F1190A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ivan_kartolo:direct_mail:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"B596E00D-3993-4521-9241-68494C4E9B0F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37552","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/direct_mail/2.6.5/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/direct_mail/2.6.5/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4160","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la expresión Simple download-system con Counter y categorías (kk_downloader) v1.2.1 y anteriores para TYP03 permite a atacantes remotos obtener información sensible a través de ataques desconocidos a vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_kunig:kk_downloader:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"F8CFAFA1-F1EC-4370-95AF-ED605688C569"},{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_kunig:kk_downloader:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BC6E3EE-A24D-44CB-B70C-77A9D7600602"},{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_kunig:kk_downloader:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8FFEF318-87DF-4EDC-BE4A-42ABFD1942C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_kunig:kk_downloader:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9BD0BCC2-219C-432F-BADC-EA04A975E873"},{"vulnerable":true,"criteria":"cpe:2.3:a:kurt_kunig:kk_downloader:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C839F38-60DC-4F07-A49A-EAF08EE6B967"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37168","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-4161","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión [AN] Search it! (an_searchit) v2.4.1 y anteriores para permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:an_searchit:an_searchit:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"3BDDAB88-F331-4B53-AE7C-6FF493C3F63F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37165","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4162","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión DB Integration (wfqbe) extensión v1.3.1 y anteriores para TYPO3 permite a usuarios locales ejecutar comandos a su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mauro_lorenzutti:wfqbe:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F724CC77-AB61-41D7-B524-C775AC5B1BE1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4163","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión TW Productfinder (tw_productfinder)v0.0.2 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tw_productfinder:tw_productfinder:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.2","matchCriteriaId":"0B85DF3A-B623-46EB-B3B5-728F8D725DE1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4164","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión simple Glossar (simple_glossar) v1.0.3 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_glossar:simple_glossar:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"62D660C7-3DE7-4934-AD66-784FC9BA411E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4165","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en extensión Glossar (simple_glossar)simple v1.0.3 y anteriores para TYPO3 permite a atacantes ejecutar comandos SQL de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_glossar:simple_glossar:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C4D35003-4DD5-41DF-8DF0-8BD76C2F6BD3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4166","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Trips (mchtrips) v2.0.0 para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michal_hadr:mchtrips:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"917C7783-1639-45A2-ABEB-1A629B28293B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/extensions/repository/view/mchtrips/2.0.1/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/extensions/repository/view/mchtrips/2.0.1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4167","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct \"Cache spoofing\" attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad no especificada en la extensión Automatic Base Tags for RealUrl (lt_basetag) v1.0.0 para TYPO3 permite a atacantes remotos conducir un ataque \"Cache spoofing\" a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lukas_taferner:it_basetag:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B5F1F458-7042-4476-9A1B-E28A067063A2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37169","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4168","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter."},{"lang":"es","value":"Vulnerabilidad de tipo cross-site scripting (XSS) en el archivo tagcloud.swf, tal como es usado en el plugin WP-Cumulus de Roy Tanck anterior a versión 1.23 para WordPress y la versión 2.0 y anterior del módulo Joomulus para Joomla!, permite a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro tagcloud en una acción tags. La vulnerabilidad de tipo cross-site scripting (XSS) en tagcloud.swf en el plug-in WP-Cumulus anterior a versión 1.23 para WordPress, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro tagcloud."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.22","matchCriteriaId":"A0B95D15-ACD5-4F90-95E8-AB13DEA53D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.00:*:*:*:*:*:*:*","matchCriteriaId":"50856F71-3148-477F-9334-DAA4EB7BA964"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.01:*:*:*:*:*:*:*","matchCriteriaId":"49E2F3B3-943A-4515-9EA3-A09CF65D69E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.02:*:*:*:*:*:*:*","matchCriteriaId":"181EFDE7-C6EA-4792-9FF2-1F2AD1331CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C12E7811-1D00-4D7A-AB6D-010865770B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.03:*:*:*:*:*:*:*","matchCriteriaId":"6D07BA76-B594-4DA5-869B-6D7255DCFC95"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.04:*:*:*:*:*:*:*","matchCriteriaId":"20817C42-7191-442A-95C0-708E28344895"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.05:*:*:*:*:*:*:*","matchCriteriaId":"BA6B286E-1492-49EC-A494-A38CE9E054C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.10:*:*:*:*:*:*:*","matchCriteriaId":"2B39E022-7624-4681-B894-CF38400F04A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.11:*:*:*:*:*:*:*","matchCriteriaId":"76149C25-8E5D-40E8-A3E7-330FEA8FE7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB62428F-23AB-4E6E-89CE-20CAA2370CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.13:*:*:*:*:*:*:*","matchCriteriaId":"29ECAEF7-9265-4859-ACBE-C05BA2AF28E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.14:*:*:*:*:*:*:*","matchCriteriaId":"9BECB654-8EB1-4A4F-A4F4-87D02C3B39F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.15:*:*:*:*:*:*:*","matchCriteriaId":"1E64B000-1B3A-4D6D-90B8-6FF41C04A327"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.16:*:*:*:*:*:*:*","matchCriteriaId":"9A0292FB-7407-48D5-B5DE-55DE24BD6701"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.17:*:*:*:*:*:*:*","matchCriteriaId":"4EF4D157-9D04-4417-A88A-878AA3FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.18:*:*:*:*:*:*:*","matchCriteriaId":"DE9586EB-AF75-4666-B3DF-0346F6E7A9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.19:*:*:*:*:*:*:*","matchCriteriaId":"8D53BB73-4092-4EB9-AC90-1B72D1A5B609"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.20:*:*:*:*:*:*:*","matchCriteriaId":"5992564E-4384-4D73-A9C5-C74ABB691AC0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37483","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38161","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3665/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3789/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3801/","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3839/","source":"cve@mitre.org"},{"url":"http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508071/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508606/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508833/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37100","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37479","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55156","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3665/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://websecurity.com.ua/3789/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3801/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://websecurity.com.ua/3839/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508606/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508833/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4169","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T18:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en wp-cumulus.php del  WP-Cumulus Plug-in anterior a v1.22 para WordPress, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:*:*:*:*:*:*:*:*","versionEndIncluding":"1.21","matchCriteriaId":"CC63F8C3-E512-4202-A556-4AF5AE4D2161"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.00:*:*:*:*:*:*:*","matchCriteriaId":"50856F71-3148-477F-9334-DAA4EB7BA964"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CF4396AF-A789-4FED-9704-6C531ABF6485"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.01:*:*:*:*:*:*:*","matchCriteriaId":"49E2F3B3-943A-4515-9EA3-A09CF65D69E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.02:*:*:*:*:*:*:*","matchCriteriaId":"181EFDE7-C6EA-4792-9FF2-1F2AD1331CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.03:*:*:*:*:*:*:*","matchCriteriaId":"6D07BA76-B594-4DA5-869B-6D7255DCFC95"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.04:*:*:*:*:*:*:*","matchCriteriaId":"20817C42-7191-442A-95C0-708E28344895"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.05:*:*:*:*:*:*:*","matchCriteriaId":"BA6B286E-1492-49EC-A494-A38CE9E054C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.11:*:*:*:*:*:*:*","matchCriteriaId":"76149C25-8E5D-40E8-A3E7-330FEA8FE7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.12:*:*:*:*:*:*:*","matchCriteriaId":"FB62428F-23AB-4E6E-89CE-20CAA2370CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.13:*:*:*:*:*:*:*","matchCriteriaId":"29ECAEF7-9265-4859-ACBE-C05BA2AF28E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.14:*:*:*:*:*:*:*","matchCriteriaId":"9BECB654-8EB1-4A4F-A4F4-87D02C3B39F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.15:*:*:*:*:*:*:*","matchCriteriaId":"1E64B000-1B3A-4D6D-90B8-6FF41C04A327"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.16:*:*:*:*:*:*:*","matchCriteriaId":"9A0292FB-7407-48D5-B5DE-55DE24BD6701"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.17:*:*:*:*:*:*:*","matchCriteriaId":"4EF4D157-9D04-4417-A88A-878AA3FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.18:*:*:*:*:*:*:*","matchCriteriaId":"DE9586EB-AF75-4666-B3DF-0346F6E7A9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.19:*:*:*:*:*:*:*","matchCriteriaId":"8D53BB73-4092-4EB9-AC90-1B72D1A5B609"},{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.20:*:*:*:*:*:*:*","matchCriteriaId":"5992564E-4384-4D73-A9C5-C74ABB691AC0"}]}]}],"references":[{"url":"http://www.roytanck.com/2009/09/27/wp-cumulus-1-22-fixes-a-security-hole-please-upgrade/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37102","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.roytanck.com/2009/09/27/wp-cumulus-1-22-fixes-a-security-hole-please-upgrade/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4170","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message."},{"lang":"es","value":"WP-Cumulus Plug-in v1.20 para WordPress y puede que otras versiones, permite a atacantes remotos obtener información sensible a través de solicitudes manipuladas a wp-cumulus.php, puede que sin parámetros, esto revela la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roytanck:wp-cumulus:1.20:*:*:*:*:*:*:*","matchCriteriaId":"5992564E-4384-4D73-A9C5-C74ABB691AC0"}]}]}],"references":[{"url":"http://websecurity.com.ua/3665/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508071/100/0/threaded","source":"cve@mitre.org"},{"url":"http://websecurity.com.ua/3665/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508071/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4171","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by calling the RegisterMe method with a long argument."},{"lang":"es","value":"Un control ActiveX en YahooBridgeLib.dll para Yahoo! Messenger v9.0.0.2162, y posiblemente otras versiones 9.0, permite a atacantes remotos producir una denegación de servicio (desreferencia a un puntero NULL y caída de aplicación ) mediante una llamada al método RegisterMe con un argumento largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:9.0.0.2162:*:*:*:*:*:*:*","matchCriteriaId":"6A1FEC40-A9EA-44AF-9DF3-1F85E1DDE4FF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/507818/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37007","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507818/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4172","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the body of a news article in an addnews action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en CutePHP CuteNews v1.4.6 y UTF-8 CuteNews v8 y v8b, cuando magic_quotes_gp está deshabilitado, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del cuerpo de una noticia   en una acción addnews."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:8:*:*:*:*:*:*:*","matchCriteriaId":"A3A4551C-75D7-497E-AD66-F8AEDEE46FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:8b:*:*:*:*:*:*:*","matchCriteriaId":"D37BB276-D737-46F4-ACC3-1D8283540D16"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54225","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4173","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en CutePHP CuteNews v1.4.6 y UTF-8C uteNews en versiones anteriores a la 8b permite a atacantes remotos secuestras la autenticación de los administradores para peticiones de creación de nuevos usuarios, incluyendo un nuevo administrador, a través de la acción \"adduser\" en el modulo editusers en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:8:*:*:*:*:*:*:*","matchCriteriaId":"A3A4551C-75D7-497E-AD66-F8AEDEE46FC2"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54240","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4174","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews action."},{"lang":"es","value":"El módulo editnews de CutePHP CuteNews v1.4.6 y UTF-8 CuteNews anterior a 8b, cuando está deshabilitado magic_quotes_gpc, permite a usuarios autenticados en remoto con acceso de Editor o Informador -Journalis- evitar la moderación de los administradores y editar artículos enviados previamente a través de un parámetro id modificado en una acción doeditnews.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:8:*:*:*:*:*:*:*","matchCriteriaId":"A3A4551C-75D7-497E-AD66-F8AEDEE46FC2"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54236","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4175","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the from_date_day parameter to search.php, which reveals the installation path in an error message."},{"lang":"es","value":"CutePHP CuteNews v1.4.6 y UTF-8 CuteNews anterior a 8b, permiten a atacantes remotos obtener información sensible a través de un valor de fecha no válida en el parámetro from_date_day de search.php, esto hace que en el mensaje de error se muestre la ruta de instalación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:8:*:*:*:*:*:*:*","matchCriteriaId":"A3A4551C-75D7-497E-AD66-F8AEDEE46FC2"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54235","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4176","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter to ovlogin.exe."},{"lang":"es","value":"Múltiples desbordamientos del búfer de la pila en ovsessionmgr.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar codigo arbitrario a través del parámetro largo (1) \"userid\" o (2) \"passwd\" a ovlogin.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-09","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508352/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37330","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54660","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-09","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508352/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4177","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header."},{"lang":"es","value":"Desbordamiento de búfer en webappmon.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través de una cabecera larga HTTP en el host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-10","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508353/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54661","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508353/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4178","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica (heap) en OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través del parámetro \"long Topic\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-11","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508354/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37340","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54659","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508354/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4179","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action."},{"lang":"es","value":"Desbordamiento del búfer de la pila en ovalarm.exe in HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar codigo arbitrario a través de una cabecera Accpt-Language HTTP larga en una accion OVABverbose."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-12","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508355/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37347","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54657","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508355/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4180","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header."},{"lang":"es","value":"desbordamiento del búfer de la pila en snmpviewer.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar codigo arbitrario a través de una cabecera larga HTTP del host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-13","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508356/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37348","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54656","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508356/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4181","sourceIdentifier":"hp-security-alert@hp.com","published":"2009-12-10T22:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe."},{"lang":"es","value":"Desbordamiento del búfer de la pila en ovwebsnmpsrv.exe en HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, y v7.53 permite a atacantes remotos ejecutar código arbitrario a través de vectores que incluyen el uso de los parámetros \"sel\" y \"arg\" a jovgraph.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A54C04BC-7EA3-412B-B509-414BBC942E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"8EFF07E8-239D-413D-90DB-E3153232D73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*","matchCriteriaId":"D506AC90-5383-4221-BBC8-7AF34D62C929"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"16BAE549-664A-47D1-8355-EA63B1BCFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*","matchCriteriaId":"6692E05F-4864-449F-8A52-9001028D8C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*","matchCriteriaId":"2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*","matchCriteriaId":"FC1DA299-A180-4078-9172-67D116840D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*","matchCriteriaId":"FED610E9-7639-48FE-8B4F-B394A7EEC7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*","matchCriteriaId":"C1935DA4-A1AF-4867-BCB1-F5BB75360702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*","matchCriteriaId":"769ED1A5-C3C5-404E-8040-655D69C2AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*","matchCriteriaId":"186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*","matchCriteriaId":"D5CE1F56-FA80-416D-8F42-C1C291F0965C"}]}]}],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-14","source":"hp-security-alert@hp.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"hp-security-alert@hp.com","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/archive/1/508357/100/0/threaded","source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/37261","source":"hp-security-alert@hp.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37343","source":"hp-security-alert@hp.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54655","source":"hp-security-alert@hp.com"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126046355120442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508357/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/37343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4186","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:01.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property."},{"lang":"es","value":"Vulnerabilidad de consumo de pila en Apple Safari v4.0.3 sobre Windows, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un valor largo en el valor de la URI (también conocida como url) sobre la propiedad \"background\" en los CSS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"80E36485-565D-4FAA-A6AD-57DF42D47462"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10102","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37039","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54487","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4187","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:02.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados(XSS) en el componente Gateway en Sun Java System Portal Server v6.3.1, v7.1, y v7.2  permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A29331A7-9D72-489D-A8DF-5B4C18A19692"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:*:*:*:*:*:*","matchCriteriaId":"83D63923-869B-4156-BBED-DFB417B19420"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5079DD4A-F14E-4ABD-B5DA-4DC75135EF5B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:sparc:*:*:*:*:*","matchCriteriaId":"6DBDFD8C-371E-42D2-9635-D8CDD1775984"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8:*:x86:*:*:*:*:*","matchCriteriaId":"E2F84D4E-EFE1-4A4F-BB58-E665A9C307A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:sparc:*:*:*:*:*","matchCriteriaId":"14CFA6D3-A611-4DF0-97AB-C30B79833DFA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9:*:x86:*:*:*:*:*","matchCriteriaId":"F2F5901D-AB91-4F12-BF08-0BC3797833E8"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:6.3.1:*:linux:*:*:*:*:*","matchCriteriaId":"9701D793-7080-4272-B657-C17B5CEBE20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"A67F6B05-8B6D-4C48-8094-01600589863E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_portal_server:7.2:*:linux:*:*:*:*:*","matchCriteriaId":"3BDF3AEA-DD1C-4BE1-A8B1-CEA5A5F6DFA5"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023260","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-04-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269368-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37186","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-04-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-269368-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4188","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:02.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container.  NOTE: this might overlap CVE-2009-3098."},{"lang":"es","value":"HP Operations Dashboard tiene una contraseña por defecto \"j2deployer\" en la cuenta j2deployer, lo que permite a atacantes remotos ejecutar código arbitrario a atraves de una sesión que utilice el perfil manager para dirigir ataque de subida de ficheros sin restricción contra el servlet de manager en el repositorio de servlets de Tomcat. NOTA: Esta vulnerabilidad podria solaparse con CVE-2009-3098."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_dashboard:*:*:*:*:*:*:*:*","matchCriteriaId":"BF450251-74EC-4F9A-A03A-0496BB805D77"}]}]}],"references":[{"url":"http://www.intevydis.com/blog/?p=87","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36258","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=87","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4189","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:02.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container.  NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843."},{"lang":"es","value":"HP Operations Manager tiene una contraseña por defecto \"OvW*busr1\" para la cuenta ovwebusr, lo qwue permite a atacantes remotos ejecutar código arbitrario a través de una sesión que utilice el perfil de manager para dirigir una subida de ficheros sin restricción contra el manager del servlet en el repositorio de servlet en Tomcat. NOTA: Esta vulnerabilidad podría solaparse con CVE-2009-3099 y CVE-2009-3843."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7770B895-3C93-48B5-9585-D4CF1FFB8245"}]}]}],"references":[{"url":"http://www.intevydis.com/blog/?p=87","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=87","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4190","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:02.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service (panic) via unknown vectors, as demonstrated by the vd_solaris2 module in VulnDisco Pack Professional 8.12.  NOTE: as of 20091203, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad inespecífica en el kernel en Sun OpenSolaris 2009.06 permite a atacantes remotos producir una denegación de servicio (panic) a traves de vectores desconocidos, como se demuestra con el modulo vd_solaris2 en VulnDisco Pack Professional v8.12. NOTA: como en 20091203, esta información no contiene información relevante. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador de confianza, a esta vulnerabilidad se le asigno un identificador CVE por motivos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:2009.06:*:*:*:*:*:*:*","matchCriteriaId":"39598D48-2F86-41E7-81BC-8E9448E336B1"}]}]}],"references":[{"url":"http://www.intevydis.com/blog/?p=79","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4191","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T17:30:02.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vd_sol_local module in VulnDisco Pack Professional 8.12.  NOTE: as of 20091203, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad inespecífica en el kernel en Sun Solaris v10 y OpenSolaris v2009.06 en plataformas x86-64 permite a usuarios locales ganar privilegios a traves de vectores desconocidos, como se demuestra en el modulo vd_sol_local en VulnDisco Pack Professional v8.12. NOTA: Como en 20091203, esta divulgacion no tiene informacion determinante. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador de confianza, a esta vulnerabilidad se le asigno un identificador CVE por motivos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:2009.06:*:x86:*:*:*:*:*","matchCriteriaId":"8C89430E-4BD5-4867-B985-8EEC91C2D4F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}]}]}],"references":[{"url":"http://www.intevydis.com/blog/?p=79","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://www.intevydis.com/blog/?p=79","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4192","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en dialog/file_manager.php en Interspire Knowledge Manager v5 permite a atacantes remotos leer ficheros arbitrarios a través de .. (punto punto) en el parámetro \"p\". NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos unicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interspire:knowledge_manager:5:*:*:*:*:*:*:*","matchCriteriaId":"8621DA98-939F-443A-B778-4B54D431919C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/36541","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4193","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file."},{"lang":"es","value":"Merkaartor v0.14 permite a usuarios locales añadir datos a archivos de su elección a través de un ataque de enlace simbólico sobre el archivo temporal /tmp/merkaartor.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merkaartor:merkaartor:0.14:*:*:*:*:*:*:*","matchCriteriaId":"F46821D5-C036-471E-9A7C-0BB9CF3B4EF2"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548546","source":"cve@mitre.org"},{"url":"http://osvdb.org/58389","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.openstreetmap.org/ticket/2320","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36529","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53486","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00869.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00870.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/58389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.openstreetmap.org/ticket/2320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00869.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00870.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4194","sourceIdentifier":"cve@mitre.org","published":"2009-12-03T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delete arbitrary files via a .. (dot dot) in the DELE command.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Golden FTP Server v4.30 Free y Professional v4.50, y posiblemente otras versiones, permiten a usuarios autenticados remotamente eliminar archivos de su elección a través de un ..(punto punto) en el comando DELE. NOTA: algunos de estos detalles  son obtenidos a partir de información de terceros."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kmint21:golden_ftp_server:4.30:*:*:*:free:*:*:*","matchCriteriaId":"82186348-3DCD-4527-ADB5-7499CF887A00"},{"vulnerable":true,"criteria":"cpe:2.3:a:kmint21:golden_ftp_server:4.50:*:*:*:professional:*:*:*","matchCriteriaId":"11CA9B88-B257-429E-8E2C-99D67C40BD28"}]}]}],"references":[{"url":"http://blog.sat0ri.com/?p=292","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/37527","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10258","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://blog.sat0ri.com/?p=292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/37527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-4195","sourceIdentifier":"psirt@adobe.com","published":"2009-12-04T11:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer Adobe Illustrator CS4 v13.0.0 y v14.0.0 atacantes remotos con la intervención del usuario ejecutar código de su elección mediante un largo DSC Comment en un fichero de encapsulado Postscript (.eps). NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:illustrator:13.0.0:cs4:*:*:*:*:*:*","matchCriteriaId":"03EAF265-C345-4CBC-AF94-B5C14931F599"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:illustrator:14.0.0:cs4:*:*:*:*:*:*","matchCriteriaId":"ADE61071-583D-4E0B-BA63-F067ECCE0EC3"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html","source":"psirt@adobe.com"},{"url":"http://osvdb.org/60632","source":"psirt@adobe.com"},{"url":"http://retrogod.altervista.org/9sg_adobe_illuso.html","source":"psirt@adobe.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37563","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-01.html","source":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/archive/1/508175/100/0/threaded","source":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/bid/37192","source":"psirt@adobe.com","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023276","source":"psirt@adobe.com"},{"url":"http://www.vupen.com/english/advisories/2009/3396","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54521","source":"psirt@adobe.com"},{"url":"http://blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://retrogod.altervista.org/9sg_adobe_illuso.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508175/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4196","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T11:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the (1) BackButton parameter to error_1; (2) wzConnFlag parameter to fresh_pppoe_1; (3) diag_pppindex_argen and (4) DiagStartFlag parameters to rpDiag_argen_1; (5) wzdmz_active and (6) wzdmzHostIP parameters to rpNATdmz_argen_1; (7) wzVIRTUALSVR_endPort, (8) wzVIRTUALSVR_endPortLocal, (9) wzVIRTUALSVR_IndexFlag, (10) wzVIRTUALSVR_localIP, (11) wzVIRTUALSVR_startPort, and (12) wzVIRTUALSVR_startPortLocal parameters to rpNATvirsvr_argen_1; (13) Connect_DialFlag, (14) Connect_DialHidden, and (15) Connect_Flag parameters to rpStatus_argen_1; (16) Telephone_select, and (17) wzFirstFlag parameters to rpwizard_1; and (18) wzConnectFlag parameter to rpwizPppoe_1."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en múltiples scripts de la carpeta Forms/ de MT882 V100R002B020 ARG-T ejecutando el firmware v3.7.9.98 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) el parámetro \"BackButton\" de error_1; (2)  el parámetro \"wzConnFlag\" de fresh_pppoe_1; (3) los parámetros \"diag_pppindex_argen\" y (4) \"DiagStartFlag\" de rpDiag_argen_1; (5)) los parámetros \"wzdmz_active\" y (6) \"wzdmzHostIP\" de rpNATdmz_argen_1; (7) los parámetros \"wzVIRTUALSVR_endPort\", (8) \"wzVIRTUALSVR_endPortLocal\", (9) \"wzVIRTUALSVR_IndexFlag\", (10) \"wzVIRTUALSVR_localIP\", (11) \"wzVIRTUALSVR_startPort\", y (12) \"wzVIRTUALSVR_startPortLocal\" de rpNATvirsvr_argen_1; (13) los parámetros \"Connect_DialFlag\", (14) \"Connect_DialHidden\", y (15) \"Connect_Flag\" de rpStatus_argen_1; (16) los parámetros \"Telephone_select\", y (17) \"wzFirstFlag\" de rpwizard_1; and (18)  el parámetro \"wzConnectFlag\" de rpwizPppoe_1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:mt882_v100t002b020_arg-t:firmware_3.7.9.98:*:*:*:*:*:*:*","matchCriteriaId":"FE8845ED-BEA2-42C7-BC6E-7F7783055484"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37194","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54526","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4197","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T11:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete."},{"lang":"es","value":"rpwizPppoe.htm en Huawei MT882 V100R002B020 ARG-T ejecutando el firmware v3.7.9.98 contiene un formulario que no deshabilita la configuración de autocompletado para el parámetro \"password\", lo que facilita a un usuario local o a un atacante físicamente próximo obtener la contraseña desde navegadores web que soporten el autocompletado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:mt882_v100t002b020_arg-t:firmware_3.7.9.98:*:*:*:*:*:*:*","matchCriteriaId":"FE8845ED-BEA2-42C7-BC6E-7F7783055484"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:huawei:mt882_modem_firmware:3.7.9.98:*:*:*:*:*:*:*","matchCriteriaId":"76CBDC9C-9CC2-4B7E-AA28-6160E16222C2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:huawei:mt882_modem:v100r002b020_arg-t:*:*:*:*:*:*:*","matchCriteriaId":"441C9425-A051-429F-A9CF-C63DC7A3C063"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37194","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54528","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4198","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL commands via the orderid parameter in a status action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en my_orders.php de MyMiniBill permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección mediante el parámetro \"orderid\" en una acción status."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cupidsystems:myminibill:*:*:*:*:*:*:*:*","matchCriteriaId":"3A65191C-D23A-4822-B917-D1AE436E57DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8864","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1490","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4199","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) property_uid parameter in a viewproperty action to index.php and the (2) regID parameter in a showregion action to index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en el componente Mambo Resident (aka Mos Res or com_mosres) v1.0f para Mambo y Joomla!, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos ejecutar comandos SQL de su elección mediante (1) el parámetro \"property_uid\" en una acción viewproperty de index.php y (2) el parámetro \"regID\" en una acción showregion de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mamboforge:com_mosres:1.0f:*:*:*:*:*:*:*","matchCriteriaId":"7DFA6A40-EEE4-41A0-8621-6E8D51A98161"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"},{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8872","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4200","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a View_seminar action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en en el componente Seminar (com_seminar) v1.28 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción View_seminar de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vollmar:com_seminar:1.28:*:*:*:*:*:*:*","matchCriteriaId":"E215E8CE-A305-4D91-991E-A1A7181B78B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8867","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35192","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/8867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4201","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2, or (3) APEv2 metadata field."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en pila en Mp3 Tag Assistant Professional v2.92 build 300 permite a atacantes remotos ejecutar código de su elección mediante un fichero MP3 conteniendo una cadena larga en el campo de metadatos (1) ID3v1, (2) ID3v2, o (3) APEv2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:assistanttools:mp3_tag_assistance_professional:2.92:*:*:*:*:*:*:*","matchCriteriaId":"4A971051-7BFE-46FA-8A11-871C0A59AEB1"}]}]}],"references":[{"url":"http://liquidworm.blogspot.com/2009/05/mp3-tag-assistant-pro-292-tag-metadata.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/54810","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35305","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50870","source":"cve@mitre.org"},{"url":"http://liquidworm.blogspot.com/2009/05/mp3-tag-assistant-pro-292-tag-metadata.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/54810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4202","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el componente Omilen Photo Gallery (com_omphotogallery) Beta v0.5 para Joomla! permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro \"controller\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omilenitsolutions:com_omphotogallery:0.5:beta:*:*:*:*:*:*","matchCriteriaId":"066F0EB6-6D18-4A48-85BE-C356F59B5A38"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8870","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35201","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1494","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/1494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4203","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en admin/aclass/admin_func.php de Arab Portal v2.2 permite a atacantes remotos ejecutar comandos SQL de su elección mediante las cabeceras HTTP (1) X-Forwarded-For o (2) Client-IP en una petición a la URI por defecto de la ruta admin/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arabportal:arab_portal:2.2:*:*:*:*:*:*:*","matchCriteriaId":"11BC7BED-8129-45DB-B91B-E6088F903511"}]}]}],"references":[{"url":"http://osvdb.org/54811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35257","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8828","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35149","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50859","source":"cve@mitre.org"},{"url":"http://osvdb.org/54811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4204","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en read.php de Flashlight Free Edition permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ringsworld:flashlight_free_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"BAC18785-CB0F-4F93-8F66-448CFB6ED10F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8856","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50906","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4205","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin.php de Flashlight Free Edition permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante los caracteres .. (punto punto) en el parámetro \"action\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ringsworld:flashlight_free_edition:*:*:*:*:*:*:*:*","matchCriteriaId":"BAC18785-CB0F-4F93-8F66-448CFB6ED10F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8856","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50907","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4206","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin.link.modify.php de Million Dollar Text Links v1.0 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsnx:million_dollar_text_links:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"551096E2-0325-4098-82BC-CDEF43FAB674"}]}]}],"references":[{"url":"http://secunia.com/advisories/34994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8830","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50864","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/8830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4207","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a submission."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Webform versiones v5.x anteriores a v5.x-2.7 y v6.x anteriores a v6.x-2.7, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante un envío de formulario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7AE98470-E90E-4B02-BF9C-8A77A2F37FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E086ED5-4F81-4E2B-8C26-2C0FD5ACF012"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"BEAFC48B-628B-4BE5-8075-5195DCA62239"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"31F8DDFD-D995-4994-BFAB-8A79197946A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"FF015C66-674F-4E30-8965-A29E9DDBDBD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"D2C85D90-5718-43F6-9A21-BC1C7FBB4660"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"FD2F6BBA-9583-4A6E-8BD7-9C9137BDF7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"50CF5C6D-2519-4E3A-A3F0-37363A78665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"0FED676C-3806-413D-8DC0-5609EC8E0665"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"06F6BA05-5FD1-47CD-85B7-C6757399FC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"57A6760D-4D7E-43C6-8208-79ADFC675CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"88EDA037-DCAE-40EA-9EC2-EFF5B8AF8005"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0:beta_3:*:*:*:*:*:*","matchCriteriaId":"7BC4AA1F-FAD9-44B9-8C07-EB8E44B1866E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"7874ADFF-597A-44F7-BA75-99BFA7A2FE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1-1:*:*:*:*:*:*:*","matchCriteriaId":"9A3919BE-4F73-49BF-B598-6538403BA61A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1FEE16F2-DF33-454E-BF2A-919EDC3C39EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA838C52-6DA7-469F-ADCC-2A40375E97C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"C414AAB2-881F-4B3B-BAD2-8A790E4ACD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF5E53D-AC18-4F79-8372-57210AC95B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"0FEBF83B-494B-4206-8F86-883F0C107D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"F8589A46-A370-4F3D-AD4B-6979CB253611"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"50FD41A8-FA49-40D4-BF68-2B82A8B1D01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"07065B63-E844-417E-B249-8722E6D71EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-5:*:*:*:*:*:*:*","matchCriteriaId":"25A75395-586B-45EE-A2D5-93846D0815DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"91B75882-7B8A-4356-9339-6835705C4946"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"5FB644B9-0A46-4243-B7A6-02BECB300311"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"02122520-C439-4612-B117-8744DD3C8E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"816ECE4A-8391-4899-931D-B22371F8E46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0:beta6:*:*:*:*:*:*","matchCriteriaId":"953AE0F8-B7D8-49FB-B06C-A164CEA7B5FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-:beta5:*:*:*:*:*:*","matchCriteriaId":"8FED8D35-6A23-433E-85D9-00CA50DE194B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3EA1E3-49D5-4F34-9A4E-64919876A325"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1-1:*:*:*:*:*:*:*","matchCriteriaId":"3641571E-5135-48B9-9BE0-9A4B80A6FD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A0E2-9DB0-456E-B19B-8C25B970DC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"783AA635-7F88-4DEB-806F-E63C50A2F509"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"930832D2-A7A3-477D-94F0-10879C951E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"33D074D5-35C6-4250-8483-5B2C2D9CDC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"4DA94879-0671-43F8-A0D8-433A659B0FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"5D0A31AF-E2CD-46ED-B238-C39589A4C791"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"4482C777-21D6-4E63-841B-7AD866956C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"8193708B-0118-4F5D-A1A7-0EEB79F5E255"}]}]}],"references":[{"url":"http://drupal.org/node/481258","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/481260","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/481268","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35197","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/481258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/481260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/481268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-4208","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo os_news de Open-school (OS) v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\" en una acción \"show\" de index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open-school:open-school:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2F171BF3-4BCD-41E3-99FE-988C5C88E46F"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/8839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50873","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/8839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4209","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T19:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en admin/index.php de moziloCMS 1.11.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) \"cat\" y (2) \"file\" en una acción \"editsite\", siendo vectores diferentes que CVE-2008-6127 y CVE-2009-1367."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilo:mozilocms:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"A0B3DD23-8359-4008-87B6-7409BBCDF0CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/504091/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35212","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/504091/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4210","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content."},{"lang":"es","value":"El codec Indeo en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 permite a atacantes remotos una denegación de servicio (corrupción de memoria) o posiblemente tener un impacto sin especificar otro impacto a través de contenido multimedia manipulado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/37592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/954157","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-45.html","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60857","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508323/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37251","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54644","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/kb/954157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fortiguard.com/advisory/FGA-2009-45.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/60857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508323/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4211","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T22:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program."},{"lang":"es","value":"El script Security Readiness Review (SRR) de la U.S. Defense Information Systems Agency (DISA) para la plataforma Solaris x86 ejecuta ficheros como root en directorios elegidos para nombres de fichero iguales a (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, o (7) wireshark, permitiendo a usuarios locales ganar privilegios mediante un programa troyano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:disa:srr_for_solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"B2B2F07A-2013-43C0-B408-72AE19B2E358"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023265","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/433821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508188/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37200","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/433821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508188/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4214","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tokenizer and actionpack/lib/action_controller/vendor/html-scanner/html/node.rb."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Ruby on Rails anterior v2.2.s, y v2.3.x anterior v2.3.5, permite a atacantes remotos inyectar código Web o HTML a su lección a través de vectores que incluyen caracteres ASCII no imprimibles, relacionado con HTML::Tokenizer y actionpack/lib/action_controller/vendor/html-scanner/html/node.rb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D1467583-23E9-4E2B-982D-80A356174BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4DC784C0-5618-4C32-8C17-BE7041656E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"CFB9ABB5-1F78-4CF0-BA82-7833E0F7A56E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"49B9DD7F-DA3A-49C5-B2D4-8A8BD73C6FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EB938651-C874-4427-AF9B-E9564B258633"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"1D59FAFB-5D48-4BD8-AD51-FF9A204E373D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"FE23CCE1-1713-4813-A0AB-1E10DBDA4D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"897109FF-2C37-458A-91A9-7407F3DFBC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"289B1633-AAF7-48BE-9A71-0577428EE531"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B947FD6D-CD0B-44EE-95B5-E513AF244905"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"E3666B82-1880-4A43-900F-3656F3FB157A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"BE622F6D-AC7D-4D82-A33C-82C2CEFDB9B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"C06D18BA-A0AB-461B-B498-2F1759CBF37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"61EBE7E0-C474-43A7-85E3-093C754A253F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"D7195418-A2E9-43E6-B29F-AEACC317E69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"39485B13-3C71-4EC6-97CF-6C796650C5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"E2E16D8B-4FBD-4FB6-ABA8-B38ECA4D413F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D8A3B30A-65F0-4D63-9A09-B23E9FC8D550"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"62323F62-AD04-4F43-A566-718DDB4149CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A8E890B1-4237-4470-939A-4FC489E04520"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"24F3B933-0F68-4F88-999C-0BE48BC88CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9E13DAEA-F118-4CB2-88A5-54E3327B6B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC33BF68-D887-4C67-8E8C-D2A6CD877FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7BFCB88D-D946-4510-8DDC-67C32A606589"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E793287E-2BDA-4012-86F5-886B82510431"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DF706143-996C-4120-B620-3EDC977568DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"43E7F32B-C760-4862-B6DB-C38FB2A9182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"FD68A034-73A2-4B1A-95DB-19AD3131F775"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2E78C912-E8FF-495F-B922-43C54D1E2180"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"15B72C17-82C3-4930-9227-226C8E64C2E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FA59F311-B2B4-40EE-A878-64EF9F41581B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"035B47E9-A395-47D2-9164-A2A2CF878326"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BDA55D29-C830-45EF-A3B3-BFA9EED88F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0A9356A6-D32A-487C-B743-1DA0D6C42FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2B3C7616-8631-49AC-979C-4347067059AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"EC487B78-AAEA-4F0E-8C8B-F415013A381E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"50EEAFDA-7782-4E1E-9058-205AD4BE9A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CAC748BB-BFC5-44F7-B633-CEEBB1279889"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"38CF2C31-70BB-41D3-9462-0A8B9869A5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F8584B37-7950-4C89-83D2-04E1ACDC60BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8CB26F65-5CFB-4BF8-BCC4-679327D4A8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EF12EA5D-5EB5-46A8-AC60-65B327D610AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B4B121-94BD-4E0F-8860-6239890043B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"63CF211C-683E-4F7D-8C62-05B153AC1960"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2","matchCriteriaId":"195F4692-EB88-40A4-AEF5-0F81CC41CFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"04FDC63D-6ED7-48AE-9D72-6419F54D4B84"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"DBF12B2F-39D9-48D5-9620-DF378D199295"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"22E1EAAF-7B49-498B-BFEB-357173824F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"1B9AD626-0AFA-4873-A701-C7716193A69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BF69F60A-E8D3-4A4D-BBB5-DE42A1402262"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"986D2B30-FF07-498B-A5E0-A77BAB402619"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A0E3141A-162C-4674-BD7B-E1539BAA0B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"86E73F12-0551-42D2-ACC3-223C98B69C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D6BA0659-2287-4E95-B30D-2441CD96DA90"},{"vulnerable":true,"criteria":"cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B01A4699-32D3-459E-B731-4240C8157F71"}]}]}],"references":[{"url":"http://github.com/rails/rails/commit/bfe032858077bb2946abe25e95e485ba6da86bd5","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://groups.google.com/group/rubyonrails-security/browse_thread/thread/4d4f71f2aef4c0ab?pli=1","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37446","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38915","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"cve@mitre.org"},{"url":"http://weblog.rubyonrails.org/2009/11/30/ruby-on-rails-2-3-5-released","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2011/dsa-2260","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2011/dsa-2301","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/27/2","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/08/3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37142","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1023245","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://github.com/rails/rails/commit/bfe032858077bb2946abe25e95e485ba6da86bd5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://groups.google.com/group/rubyonrails-security/browse_thread/thread/4d4f71f2aef4c0ab?pli=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://weblog.rubyonrails.org/2009/11/30/ruby-on-rails-2-3-5-released","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/27/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/08/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1023245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4215","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs."},{"lang":"es","value":"Panda Global Protection 2010, Internet Security 2010, y Antivirus Pro 2010 usa permisos débiles (Todos: Control Total ) para los archivos product, lo que permite a usuarios locales obtener privilegios por reemplazamiento de ejecutables con programas troyanos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*","matchCriteriaId":"D56B932B-9593-44E2-B610-E4EB2143EB21"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:32_bit:*:*:*:*:*","matchCriteriaId":"CC3161FD-F631-405A-BE3A-0B78D5DCD7B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_vista:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"C38B6FA8-58B3-4037-A4EE-B496F1657CAE"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:32-bit:*:*:*:*:*","matchCriteriaId":"ED232169-696C-4613-A803-28101AB43A49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_antivirus:2010:*:pro:*:*:*:*:*","matchCriteriaId":"B907640D-8144-4D89-88F2-B4AF1735BDDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_global_protection:2010:*:*:*:*:*:*:*","matchCriteriaId":"C7B2D903-A66F-4679-9DBA-1354A5917462"},{"vulnerable":true,"criteria":"cpe:2.3:a:pandasecurity:panda_internet_security:2010:*:pro:*:*:*:*:*","matchCriteriaId":"1381C07F-3956-450A-8C87-58297DA942DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/37373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507811/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023121","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3126","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507811/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4216","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en funzioni/lib/menulast.php en klinza professional cms v5.0.1 y anterior permite a atacantes remotos inlcuir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro LANG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:klinza:klinza_professional_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.1","matchCriteriaId":"54AB0F17-1FDF-4ABC-9E48-81182A432F56"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/klinza-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54429","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/klinza-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4217","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an itempage action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Itamar Elharar MusicGallery (com_musicgallery) para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción itempage de index.php. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos unicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itamar_elharar:com_musicgallery:*:*:*:*:*:*:*:*","matchCriteriaId":"975245E3-7315-41F3-A4F6-13B8FAC1C466"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/37146","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4218","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience (JBSX) allow remote attackers to execute arbitrary SQL commands via the (1) admin or (2) password field, a related issue to CVE-2007-6091.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en files/login.asp en JiRo's Banner System eXperience (JBSX) permite a atacantes remotos ejecutar comandos SQL de su elección a través del campo (1) admin o (2) password, un tema relacionado con el CVE-2007-6091. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos unicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jiros:jbsx:*:*:*:*:*:*:*:*","matchCriteriaId":"806A871D-3293-45AE-8ADB-F3DF5BF3A461"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/37045","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4219","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control MYACTIVEX.MyActiveXCtrl.1 ActiveX en MyActiveX.ocx v1.4.8.0 en Haihaisoft Universal Player permite a atacantes remotos ejecutar código de su elección a través de un valor de propiedad larga de URL. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haihaisoft:haihaisoft_universal_player:1.4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"258B9D37-BDF8-4870-B3F8-2E0223468392"}]}]}],"references":[{"url":"http://secunia.com/advisories/37509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/82346","source":"cve@mitre.org"},{"url":"http://www.shinnai.net/exploits/ZzLsi6TIfSuVPh1kPHmP.txt","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://secunia.com/advisories/37509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/82346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.shinnai.net/exploits/ZzLsi6TIfSuVPh1kPHmP.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-4220","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en includes/classes/pctemplate.php en PointComma v3.8b2 y anterior permite a atacantes remotos ejecutar código PHP de a su elección a través de una URL en el parámetro pcConfig[smartyPath]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8b2","matchCriteriaId":"FE7388E3-330B-4A6B-9877-983112AC63EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.1:*:*:*:*:*:*:*","matchCriteriaId":"7E52223B-1872-483D-A176-85649C38A133"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C8B2CE13-C29A-471C-A0BA-E9F8BD1FB68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.5:*:*:*:*:*:*:*","matchCriteriaId":"93F78A17-B950-4BE0-894A-31C5BB40C553"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.5:beta_2:*:*:*:*:*:*","matchCriteriaId":"D831ADB6-61FD-46F4-BC83-0D31D88989B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.6:*:*:*:*:*:*:*","matchCriteriaId":"BF441138-34A0-4F58-967C-72A236F4C10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.8:beta:*:*:*:*:*:*","matchCriteriaId":"CABEB625-F8B3-4485-B66F-D28011C85E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.51:*:*:*:*:*:*:*","matchCriteriaId":"1B4B94DA-21A9-4C56-8642-60B8E3BFDA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.51:beta:*:*:*:*:*:*","matchCriteriaId":"61C3DA6D-B978-43D5-AF12-F2DC07913E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:raphael_mazoyer:pointcomma:3.53:beta:*:*:*:*:*:*","matchCriteriaId":"8679457E-B859-4C76-B010-EB83103BBCA3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10220","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54389","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4221","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en classified.php en phpBazar v2.1.1fix y anterior permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid, un vector diferente que CVE-2008-3767."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1fix","matchCriteriaId":"61F44A78-C3D3-4E36-B65D-DAB11B08C8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"03D850F2-66A0-4F0F-B946-E3300EF403EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B5677BF8-F12C-4C81-92A2-6B9D3FB668BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A83EFFDF-EF57-4B41-907B-EC124118D512"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/phpbazar211fix-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10245","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37144","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54447","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/phpbazar211fix-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4222","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request."},{"lang":"es","value":"phpBazar v2.1.1fix y anteriores no requieren autenticación administrativa para admin/admin.php, lo que permite a atacantes remotos obtener acceso al panel de control de administración a través de una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"8067A4D1-26C6-4070-8E16-7B62C42E313E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"03D850F2-66A0-4F0F-B946-E3300EF403EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B5677BF8-F12C-4C81-92A2-6B9D3FB668BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartisoft:phpbazar:2.1.1fix:*:*:*:*:*:*:*","matchCriteriaId":"FF098BDB-D931-444F-A58B-1F1539FE4EC2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/phpbazar-access.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37132","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0911-exploits/phpbazar-access.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4223","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en KR-Web v1.1b2 y anteriores permite a atacantes remotos ejecutar código PHP de su eleccción a través de una URL en el parámetro DOCUMENT_ROOT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"7153EB2F-AA9C-4C7A-BCD1-8C7F009D7237"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"74B6B6FC-027D-4BCF-AC44-2D408F8CE7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"09602475-8E91-42E6-AA18-21711FC5BD7B"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10216","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54395","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4224","sourceIdentifier":"cve@mitre.org","published":"2009-12-07T17:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) _plugin/subscriber/inc/post.php and (2) as/lib/news_modify.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en SweetRice v0.5.4, v0.5.3 y anteriores permite a atacantes ejecutar código PHP de su elección a través de una URL en el parámetro root_dir en (1) _plugin/subscriber/inc/post.php and (2) as/lib/news_modify.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.4","matchCriteriaId":"76D0F9B4-71D2-48BC-B1A1-3F400F17B537"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C3FD9D9-48F8-4C17-89EF-A670674A4D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DA71DE1A-221F-4F8C-AC25-846EC63EA6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7910F921-A7E1-4174-9FA5-DE715A837034"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"73A23313-BAD2-4647-A18A-5E1B8C2D8EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2660BC-E28A-4E46-9E12-8278793B246B"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49EDB825-A30A-4154-8C97-E5440541A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"36D342A2-AAAC-45E7-89FE-404DDC5E9190"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"C0206166-41EF-4BE1-8767-8E5ACFFB0375"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4FFC37B4-3205-4693-A12C-4E8017BBB273"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6530DB7D-C4F0-495B-829D-17573F0ED85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C4668D0C-E52E-4F48-84ED-66F519E8E235"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9B3201B0-543A-4578-BA3A-56DC653D1B2B"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10246","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/60581","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60582","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54446","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/60581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4225","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el control PestPatrol ActiveX (ppctl.dll) v5.6.7.9 en CA eTrust PestPatrol permite a atacantes remotos ejecutar código de su elección a través de un argumento largo en el método Initialize."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_pestpatrole_ppctl.dll_activex:5.6.7.9:*:*:*:*:*:*:*","matchCriteriaId":"D31B59AB-FAF0-4465-A810-B6C277E18069"}]}]}],"references":[{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html","source":"cve@mitre.org"},{"url":"http://www.metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37133","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54458","source":"cve@mitre.org"},{"url":"http://www.fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4226","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors related to the (1) tcp_do_getsockname or (2) tcp_do_getpeername function."},{"lang":"es","value":"Condición Race en el módulo IP en el kernel en Sun OpenSolaris snv_106 hasta snv_124 permite a atacantes remotos causar una denegación de servicio (desreferencia a un puntero NULL y panico) a través de un vector no especificado relacionado con la función (1) tcp_do_getsockname o (2) tcp_do_getpeername"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*","matchCriteriaId":"A799B071-D0A6-47C4-80DF-75AB9ADD2916"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*","matchCriteriaId":"F276AFE2-B501-4355-9716-9D1A75AD09CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*","matchCriteriaId":"58A9EC84-8FD4-455F-95DE-FBFD67A1441E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*","matchCriteriaId":"8ADE7EBB-8014-459F-A189-9D902BEE1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*","matchCriteriaId":"BB9190F5-DF79-4EFC-B8B8-5B373BCDD1F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*","matchCriteriaId":"FF3DEB74-D65C-427A-8907-6044238E8C03"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*","matchCriteriaId":"264D137D-0B78-4F47-AA9F-427D535A1AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*","matchCriteriaId":"A7A2D975-A03A-494A-8CFE-2D8932906C14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*","matchCriteriaId":"7D970B1B-44C6-443B-9029-D7182782BD1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*","matchCriteriaId":"5B3DB52A-595F-4A50-98D5-DF308471B823"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*","matchCriteriaId":"A4CA00AD-837E-4E3E-AE7E-A49CC3AF44A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*","matchCriteriaId":"B3BBCE23-9F15-45CD-859F-77ED540B51F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*","matchCriteriaId":"698744C6-2A65-478B-A846-099E6C86D0B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*","matchCriteriaId":"053A0DA6-483C-49BB-BC7A-E624DB2C269E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*","matchCriteriaId":"EEF667A1-1AE1-42D4-8DB4-CE414CEA3E8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*","matchCriteriaId":"447212A4-FACD-475E-A62B-60FE6504F63E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*","matchCriteriaId":"EE9DD764-8B9F-4922-BFAD-3FCC56CF9705"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*","matchCriteriaId":"AB694DC0-407A-4555-8B72-DAF3C169DCE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*","matchCriteriaId":"78B80C92-7EB5-4343-B830-32E8C011E572"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*","matchCriteriaId":"535FF689-13A2-40C6-8706-7782038FDBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*","matchCriteriaId":"46E4ED9C-F013-48D2-8642-E5BA7599A512"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*","matchCriteriaId":"843246D3-C2DA-454D-916A-AC8905E5134E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*","matchCriteriaId":"A1E8108D-3CE7-4041-9027-1CA7473389EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*","matchCriteriaId":"244B7FE4-C485-4993-9810-3433C83A120E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*","matchCriteriaId":"33E95F0E-D3D5-47CB-B503-7B7F92FB3F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*","matchCriteriaId":"BE586AB9-9D46-4BC2-8092-51482F297410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*","matchCriteriaId":"E8585133-1F25-494A-8859-87B1D93305A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*","matchCriteriaId":"3A5C836E-51A5-4B1C-AB03-A4DFDA440BD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*","matchCriteriaId":"F61CD721-197F-4BB3-9D59-CB3C16D6B1B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*","matchCriteriaId":"A1D4C98B-0D01-461C-93C2-0AF9DA6519A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*","matchCriteriaId":"3D01EACB-9DB4-4940-A1F2-40474B24AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*","matchCriteriaId":"A0CE1A06-2588-47AA-81F8-E3655F915C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*","matchCriteriaId":"D1BBB436-9F7A-4E2D-908B-D57A531B1B3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*","matchCriteriaId":"5972E930-76E2-40FD-8E7F-74E012D34E39"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*","matchCriteriaId":"45B5E359-6FF2-4029-AB6A-3C906DE6AF1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*","matchCriteriaId":"A5991C3F-29F6-462F-A34E-2446E357A220"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*","matchCriteriaId":"09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*","matchCriteriaId":"9C93BA4F-D07C-494C-B320-F34B8DED05C0"}]}]}],"references":[{"url":"http://opensolaris.org/jive/thread.jspa?messageID=415069&tstart=0","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268189-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3413","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54574","source":"cve@mitre.org"},{"url":"http://opensolaris.org/jive/thread.jspa?messageID=415069&tstart=0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268189-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4227","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T18:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función read_1_3_textobject en f_readold.c en Xfig v3.2.5b y anterior, y en la función read_textobject en read1_3.c en fig2dev en Transfig v3.2.5a y anterior, permite a atacantes remotos ejecutar código de su elección a través de un string largo en un archivo .fig malformado que usa el formato 1.3. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-4227\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-12-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfig:xfig:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.5b","matchCriteriaId":"392E5AF2-0D46-456D-BFC7-3DF8FD3E66DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfig:xfig:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BD269541-F1A0-4FFD-BFB6-423BC806D076"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:010","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/03/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37193","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2011/0108","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543905","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54525","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/03/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2011/0108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4228","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c."},{"lang":"es","value":"Vulnerabilidad de consumo de pila en u_bound.c en Xfig v3.2.5b y anteriores permite a atacantes remotos causar una denegación de servicio (caída aplicación) a través de un string largo en un archivo .fig malformado que usa el formato 1.3, probablemente relacionado con la función readfp_fig en f_read.c."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-4228\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-12-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfig:xfig:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.5b","matchCriteriaId":"392E5AF2-0D46-456D-BFC7-3DF8FD3E66DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfig:xfig:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"557FBEE3-0576-47B8-AB64-BEB59E78C39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfig:xfig:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"BD269541-F1A0-4FFD-BFB6-423BC806D076"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:010","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0108","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543905","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=543905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4229","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter in the PATH_INFO to the default URI or (2) the catid parameter to default.asp.  NOTE: this might overlap CVE-2009-0429.3.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Multiples vulnerabilidades de inyección SQL en ActiveWebSoftwares Active Bids permite a atacantes remotos ejecutar comandos SQL de su elección a través (1) del parámetro catid en the PATH_INFO en la URI por defecto o (2) el parámetro catid en default.asp.  NOTA: Esta vulnerabilidad podría solaparse con CVE-2009-0429.3. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos unicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_bids:*:*:*:*:*:*:*:*","matchCriteriaId":"A5FB492B-4A43-4727-A6D1-601C312B14BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/37047","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4230","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en src/Task.cc en el programa FastCGI en IIPImage Server anterior v0.9.8 permitiría a atacantes remotos ejecutar código de su elección a través de vectores asociados con argumentos manipulados en  la función(1) RGN::run, (2) JTLS::run, o (3) SHD::run. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruven_pillay:iipimage_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.7","matchCriteriaId":"47D307F5-C6BC-4D6D-8546-7B275520E634"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruven_pillay:iipimage_server:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B8210940-1F95-4ABC-AF37-23BEADBB1A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruven_pillay:iipimage_server:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"5153FFE6-3D23-44BB-8A56-0E30234DA905"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruven_pillay:iipimage_server:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"0EEA88E2-B935-4AED-8B46-27E24BBD2D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruven_pillay:iipimage_server:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"C7718644-6DF4-455C-996A-D5B7CC96BC2A"}]}]}],"references":[{"url":"http://freshmeat.net/projects/iipimage/releases/309013","source":"cve@mitre.org"},{"url":"http://iipimage.sourceforge.net/blog/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/projects/iipimage/releases/309013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://iipimage.sourceforge.net/blog/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4231","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. (dot dot) in the plugin parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en as/lib/plugins.php en SweetRice v0.5.3 y anteriores permite a atacantes incluir y ejecutar archivos locales a su elección a través de ... (punto punto) en el parámetro plugin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.3","matchCriteriaId":"1AB2DBC1-CA10-4E31-A8A6-F46577F08094"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C3FD9D9-48F8-4C17-89EF-A670674A4D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DA71DE1A-221F-4F8C-AC25-846EC63EA6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7910F921-A7E1-4174-9FA5-DE715A837034"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2660BC-E28A-4E46-9E12-8278793B246B"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49EDB825-A30A-4154-8C97-E5440541A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"36D342A2-AAAC-45E7-89FE-404DDC5E9190"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"C0206166-41EF-4BE1-8767-8E5ACFFB0375"},{"vulnerable":true,"criteria":"cpe:2.3:a:basic-cms:sweetrice:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C4668D0C-E52E-4F48-84ED-66F519E8E235"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4232","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"El componente Kide Shoutbox (com_kide) v0.4.6 para Joomla! no realiza adecuadamente la autenticación, lo que permite a atacantes remotos enviar mensajes con un nombre de cuenta a su elección a través de una acción insertar en index.php. NOTA: La procedencia de esta información es desconocida; los detalles fueron obtenidos unicamente de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jonijnm:com_kide:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"EC963CED-0A1D-4001-A483-361D6D3CB75B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://secunia.com/advisories/37508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4233","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules/mod_yj_whois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"ulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en modules/mod_yj_whois.php en el componente YJ Whois v1.0x y v1.5.x para Joomla! permite a atacantes remotos inyectar código web o HTMl de su elección a través del parámetro domain de index.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youjoomla:yj_whois:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"51CD1535-1FA4-46F4-985E-46FDDDD8E96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:youjoomla:yj_whois:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DFE68A5A-083A-4ADD-AF51-8FAADC928048"}]}]}],"references":[{"url":"http://extensions.joomla.org/extensions/external-contents/domain-search/5774","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.youjoomla.com/joomla_support/yj-whois-module/4950-xss-security-patch-yj-whois.html","source":"cve@mitre.org"},{"url":"http://extensions.joomla.org/extensions/external-contents/domain-search/5774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.youjoomla.com/joomla_support/yj-whois-module/4950-xss-security-patch-yj-whois.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4234","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network Access Controller SP1910 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en loginpages/error_user.shtml en Micronet Network Access Controller vSP1910 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro msg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:micronet:network_access_controller_sp1910:*:*:*:*:*:*:*:*","matchCriteriaId":"E4281E14-E847-4675-AD49-1461E89F1B77"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0911-exploits/micronet-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0911-exploits/micronet-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4235","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T19:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033."},{"lang":"es","value":"acpid v1.0.4 establece una umask no restrictiva, lo que puede permitir a usuarios locales obtener permisos débiles en /var/log/acpid, y obtener información sensible por lectura de este archivo o causar una denegación de servicio por sobreescritura, una vulnerabilidad diferente a CVE-2009-4033."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat considers this to be a duplicate of the CVE-2009-4033, rather than a separate issue. For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=542926#c10","lastModified":"2009-12-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tim_hockin:acpid:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4A178536-8705-40C9-85BE-C69172EF8493"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023284","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1960","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:342","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:343","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1642.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515062","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=542926","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54676","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1642.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=542926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4236","sourceIdentifier":"cve@mitre.org","published":"2009-12-08T23:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information (customer data) via unknown vectors related to sessions."},{"lang":"es","value":"La función process en data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php en EC-CUBE Ver2 v2.4.0 RC1 hasta v2.4.1, y Community Edition r18068 hasta r18428, permite a atacantes remotos obtener información sensible (datos clientes) a través de vectores desconocidos relacionados con sesiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube_ver2:2.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"536E6C78-F1CC-4017-BDD4-9D9AF1AE65BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube_ver2:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C7C61A12-C1C3-4BDA-A5EC-7003B5086D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube_ver2:r18068:-:community:*:*:*:*:*","matchCriteriaId":"C16B9092-95C1-4C98-AFAB-B4177D14A38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ec-cube:ec-cube_ver2:r18428:-:community:*:*:*:*:*","matchCriteriaId":"605AFB79-2B78-436A-A522-09DCC275C71D"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN79762947/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000078.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/60685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/091127/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipa.go.jp/security/vuln/documents/2009/200912_ec-cube.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3421","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54573","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN79762947/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ec-cube.net/info/091127/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipa.go.jp/security/vuln/documents/2009/200912_ec-cube.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4237","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T23:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via (2) the key parameter to lib/general/staticPage.php, (3) the tableName parameter to lib/attachments/attachmentupload.php, or the (4) startDate, (5) endDate, or (6) logLevel parameter to lib/events/eventviewer.php; (7) the search_notes_string parameter to lib/results/resultsMoreBuilds_buildReport.php; or the (8) expected_results, (9) name, (10) steps, or (11) summary parameter in a find action to lib/testcases/searchData.php, related to lib/functions/database.class.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TestLink en versiones anteriores a v1.8.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) el parámetro \"req\" a login.php, y permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de (1) el parámetro \"key\" a lib/general/staticPage.php, (3) el parámetro \"tableName\" a lib/attachments/attachmentupload.php, o (4) los parámetros \"startDate\", (5) \"endDate\", o (6) \"logLevel\" a  lib/events/eventviewer.php; (7) el parámetro \"search_notes_string\" a lib/results/resultsMoreBuilds_buildReport.php;  o los parámetros (8) \"expected_results\", (9) \"name\", (10) \"steps\", o (11) \"summary\" en una acción \"find\" a lib/testcases/searchData.php, relacionado con lib/functions/database.class.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4","matchCriteriaId":"F500F090-3B1B-494F-ACD6-321F55DC9AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7:*:*:*:*:*:*:*","matchCriteriaId":"59E20AB1-CE62-4F45-AF92-C31DB56846E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4E88B7B2-FA29-41EF-A2FB-4B5EF3889435"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"E136AD4F-552C-4414-A8B4-0CEC91480671"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F38156CE-2A5E-4308-BE28-DCE78F9C2147"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"A5158177-EFF7-47B1-A159-59283B814209"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"116616D2-2F87-41A3-880E-7C1C1BC460FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"70877F5A-C793-4D3F-8078-185C8DD20B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC91095-A80B-4193-9414-A94DD3D1800B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/60914","source":"cve@mitre.org"},{"url":"http://osvdb.org/60915","source":"cve@mitre.org"},{"url":"http://osvdb.org/60916","source":"cve@mitre.org"},{"url":"http://osvdb.org/60917","source":"cve@mitre.org"},{"url":"http://osvdb.org/60918","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37258","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-4238","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the Test Case ID field to lib/general/navBar.php or (2) the logLevel parameter to lib/events/eventviewer.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en TestLink en versiones anteriores a v1.8.5 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de (1) el campo \"ID de caso de prueba\" a lib/general/navBar.php o (2) el parámetro \"logLevel\" a lib/events/eventviewer.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7:*:*:*:*:*:*:*","matchCriteriaId":"59E20AB1-CE62-4F45-AF92-C31DB56846E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4E88B7B2-FA29-41EF-A2FB-4B5EF3889435"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1B667E47-CFD5-4125-844D-F79505FC95C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"EFFAFFD7-26B8-4ADF-B134-F71268EC9FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"E136AD4F-552C-4414-A8B4-0CEC91480671"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:*:*:*:*:*:*:*","matchCriteriaId":"5EE00F0B-F58E-4AB8-B66E-A2BD4CF03EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:beta1:*:*:*:*:*:*","matchCriteriaId":"4434FB82-6BA6-4335-8FF0-26738318FB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:beta2:*:*:*:*:*:*","matchCriteriaId":"F5FEACF5-86A6-4E8C-896E-436E2FF2948F"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:beta3:*:*:*:*:*:*","matchCriteriaId":"956B741E-6FCC-46B2-8164-3322F6418CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F38156CE-2A5E-4308-BE28-DCE78F9C2147"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"A5158177-EFF7-47B1-A159-59283B814209"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"116616D2-2F87-41A3-880E-7C1C1BC460FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"70877F5A-C793-4D3F-8078-185C8DD20B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC91095-A80B-4193-9414-A94DD3D1800B"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamst:testlink:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"6AE56DCB-B3CB-4FA8-8670-5139F858BD82"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/60919","source":"cve@mitre.org"},{"url":"http://osvdb.org/60920","source":"cve@mitre.org"},{"url":"http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37258","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2009-4239","sourceIdentifier":"cve@mitre.org","published":"2009-12-09T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la consola Web en IBM InfoSphere Information Server 8.1 en versiones anteriores a la FP1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"317FAE67-76E2-4084-9393-8A02D255BAF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/37556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32573","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21406224","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60806","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37246","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR32573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21406224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4240","sourceIdentifier":"cve@mitre.org","published":"2009-12-09T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer en ejecutables setuid no especificados en el DataStage subsystem en IBM InfoSphere Information Server 8.1 en versiones anteriores a la FP1 tienen un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"317FAE67-76E2-4084-9393-8A02D255BAF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/37556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30394","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21406224","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/60807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37245","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54609","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR30394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21406224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/60807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4249","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T00:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) lastusername and (2) mod parameters to index.php; and (3) the title parameter to search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CutePHP CuteNews 1.4.6 ,cuando register_globals está activado y magic_quotes_gpc está deshabilitado, permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"lastusername\" y (2) \"mod\" para index.php; y (3) el parámetro \"title\" para search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54220","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54222","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4250","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T00:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via (1) the result parameter to register.php; (2) the user parameter to search.php; the (3) cat_msg, (4) source_msg, (5) postponed_selected, (6) unapproved_selected, and (7) news_per_page parameters in a list action to the editnews module of index.php; and (8) the link tag in news comments.  NOTE: some of the vulnerabilities require register_globals to be enabled and/or magic_quotes_gpc to be disabled."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en CutePHP CuteNews 1.4.6 y UTF-8 CuteNews en versiones anteriores a la 8b permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los parámetros (1) \"result\" para register.php; (2) \"user\" para search.php; (3) \"cat_msg\", (4) \"source_msg\", (5) \"postponed_selected\", (6) \"unapproved_selected\" y (7) \"news_per_page\" en una acción list a el módulo editnews de index.php; y (8) la etiqueta de enlace en comentarios de noticias. NOTA: algunas de estas vulnerabilidades requieren que register_globals esté habilitado y/o magic_quotes_gpc estar deshabilitado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B0DD68D7-98F3-402D-AB27-AC46E10C81B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:*:*:*:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"DA6C2132-F20A-44FA-877D-BE98B713FD72"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:2:*:*:*:*:*:*:*","matchCriteriaId":"D48B180C-DCA7-44C8-A52F-91EB46A20F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:3:*:*:*:*:*:*:*","matchCriteriaId":"3B547C54-DE62-4322-BF1B-2F8FA15E941D"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:4:*:*:*:*:*:*:*","matchCriteriaId":"8B811F30-0F71-4E66-AC5B-EE26E2074D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:5:*:*:*:*:*:*:*","matchCriteriaId":"ABB61D5F-DD1F-4707-87DD-BB8E9136A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:6:*:*:*:*:*:*:*","matchCriteriaId":"C51C8242-4A89-48C2-865E-0AB0B96FF8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:korn19:utf-8_cutenews:7:*:*:*:*:*:*:*","matchCriteriaId":"50DE1F0D-33B2-484D-988B-951ED69FE804"}]}]}],"references":[{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36971","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54221","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54222","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54223","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54224","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54237","source":"cve@mitre.org"},{"url":"http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/507782/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4251","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T00:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file.  NOTE: this might be the same issue as CVE-2007-2366."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en Jasc Paint Shop Pro 8.10 (alias Corel Paint Shop Pro) permite a atacantes remotos asistidos por el usuario ejecutar código de su elección mediante un fichero PNG manipulado. NOTA: Esto puede causar el mismo problema que CVE-2007-2366."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:corel:paint_shop_pro:8.10:*:*:*:*:*:*:*","matchCriteriaId":"64A8FBF3-1140-4B44-8B4D-8962B85475E6"}]}]}],"references":[{"url":"http://aluigi.freeforums.org/post8780.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/60592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37204","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3418","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54551","source":"cve@mitre.org"},{"url":"http://aluigi.freeforums.org/post8780.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/60592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4252","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T01:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in images.php in Image Hosting Script DPI 1.1 Final (1.1F) allows remote attackers to inject arbitrary web script or HTML via the date parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en images.php en Image Hosting Script DPI 1.1 Final (1.1F) permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"date\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clixint:image_hosting_script_dpi:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF23A15-5063-4BD4-8F34-D5DF87DE55A4"}]}]}],"references":[{"url":"http://secunia.com/advisories/37456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.clixint.com/support/viewtopic.php?f=3&t=542","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.exploit-db.com/exploits/10300","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.clixint.com/support/viewtopic.php?f=3&t=542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.exploit-db.com/exploits/10300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4253","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T01:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en dspStats.php en PowerPhlogger 2.2.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"edit\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpee:pphlogger:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"3E1EF75E-E1D5-4CCE-92B5-379099277D6C"}]}]}],"references":[{"url":"http://secunia.com/advisories/30423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37150","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.websecurity.com.ua/1845","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54541","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.websecurity.com.ua/1845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4254","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T01:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3) get_csscolors.inc.php, (4) head.inc.php, (5) head_stuff.inc.php, (6) loglist.inc.php, and (7) pphlogger_send.inc.php in include/, which reveals the installation path in an error message."},{"lang":"es","value":"PowerPhlogger 2.2.5 permite a atacantes remotos obtener información sensible mediante una petición directa a (1) edCss.inc.php, (2) foot.inc.php, (3) get_csscolors.inc.php, (4) head.inc.php, (5) head_stuff.inc.php, (6) loglist.inc.php, y (7) pphlogger_send.inc.php en include/, lo que revela la ruta de la instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpee:pphlogger:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"3E1EF75E-E1D5-4CCE-92B5-379099277D6C"}]}]}],"references":[{"url":"http://www.websecurity.com.ua/1845","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54543","source":"cve@mitre.org"},{"url":"http://www.websecurity.com.ua/1845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4255","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the created_by_alias parameter in index.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la plantilla You!Hostit! v1.0.1 para Joomla! permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro created_by_alias en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youjoomla:you\\!hostit\\!:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"030D2277-17EF-4F50-816F-BC39D1495F06"}]}]}],"references":[{"url":"http://secunia.com/advisories/37601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10301","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54570","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4256","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) cont_id and (2) courc_id parameters in a pregled action.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en cource.php en AlefMentor 2.0 y 2.2 permiten a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) cont_id y (2) courc_id en una acción \"pregled\". NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:truesolution:alefmentor:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A3639AF-8B00-4774-B809-3A3DC153616A"},{"vulnerable":true,"criteria":"cpe:2.3:a:truesolution:alefmentor:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E473112E-B04B-44C9-9E85-0C29BB985503"}]}]}],"references":[{"url":"http://secunia.com/advisories/37626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10358","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54624","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4261","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI) and allow (2) local users to execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command, related to \"path sanitization errors.\""},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en el framework en Ganeti v1.2.4 hasta v1.2.8, v2.0.0 hasta v2.0.4, y v2.1.0 anteriores a v2.1.0~rc2 (1) permite a atacantes remotos ejecutar programas de su elección mediante un nombre de script externo modificado proporcionado por el API HTTP remoto (RAPI) y (2) permite a usuarios locales ejecutar programas de su elección y obtener privilegios mediante un nombre de script externo modificado proporcionado por un comando gnt-*, relacionado con \"errores de limpieza de ruta\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"F1CEC654-E2AF-4B5F-ACC6-2B5497732793"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"20EE732B-8EC3-4E9F-86D3-168F88BE8394"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"63D4FF32-ABC1-4A11-AECC-5A005EF5827A"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4D91AB57-5B59-496C-8E17-5EE14F469F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"27C56B23-78B2-4DEC-A16D-3216FB46E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FDD59DB8-26B2-4C4D-98E2-B43B38EF7D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CFC02855-CD39-4FC2-A311-1182E9804EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C6545F38-FE8A-4E2B-9CFE-BEA9BBEE6F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8670969D-E5B8-44D3-A6C2-48C9CA1E8C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"06F73EC5-F204-4B7D-8DB6-FE2634A889AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:roman_marxer:ganeti:2.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7D1C5065-E07B-4F93-97D5-86BBDAE8FBD3"}]}]}],"references":[{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=NEWS%3Bh=34b46426eca82c351e0a478c71edb66b9bb4b228%3Bhp=7f916c59238503915e927377d887b93eef1f676c%3Bhb=e5823b7e2cd8a3c9037a10aa59823a45642ce29f%3Bhpb=f95c81bf21c177f7e6a2c53ea0613034326329bd","source":"cve@mitre.org"},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/constants.py%3Bh=81302575487a44ed192e61aa7b21888a215ef215%3Bhp=c353878ed83ce66d21c237da5e709dedd7b6f26b%3Bhb=0084657a21afb49c6f74498f27b97dfdbc42b383%3Bhpb=d24cb69273e4b03ffcd4e4768d95841b5570e264","source":"cve@mitre.org"},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/utils.py%3Bh=bcd8e107bbc44ff94a4bc3dc405b5547719f001d%3Bhp=df2d18027e83b7783e146cbbe58f7efa92317980%3Bhb=f95c81bf21c177f7e6a2c53ea0613034326329bd%3Bhpb=4fe80ef2ed1cda3a6357274eccafe5c1f21a5283","source":"cve@mitre.org"},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=f95c81bf21c177f7e6a2c53ea0613034326329bd","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/ganeti/browse_thread/thread/cbce23d89103a8d2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-019.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/17/5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508535/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=NEWS%3Bh=34b46426eca82c351e0a478c71edb66b9bb4b228%3Bhp=7f916c59238503915e927377d887b93eef1f676c%3Bhb=e5823b7e2cd8a3c9037a10aa59823a45642ce29f%3Bhpb=f95c81bf21c177f7e6a2c53ea0613034326329bd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/constants.py%3Bh=81302575487a44ed192e61aa7b21888a215ef215%3Bhp=c353878ed83ce66d21c237da5e709dedd7b6f26b%3Bhb=0084657a21afb49c6f74498f27b97dfdbc42b383%3Bhpb=d24cb69273e4b03ffcd4e4768d95841b5570e264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/utils.py%3Bh=bcd8e107bbc44ff94a4bc3dc405b5547719f001d%3Bhp=df2d18027e83b7783e146cbbe58f7efa92317980%3Bhb=f95c81bf21c177f7e6a2c53ea0613034326329bd%3Bhpb=4fe80ef2ed1cda3a6357274eccafe5c1f21a5283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=f95c81bf21c177f7e6a2c53ea0613034326329bd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/ganeti/browse_thread/thread/cbce23d89103a8d2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2009-019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/17/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508535/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4262","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php."},{"lang":"es","value":"Harold Bakker NewsScript (HB-NS) versión 1.3, permite a los atacantes remotos obtener acceso al panel de control de administración por medio de una petición directa al archivo admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haroldbakker:hb-ns:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5D01FF20-464C-42BA-86A2-B699253AE2BB"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0912-exploits/hbns-admin.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54518","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0912-exploits/hbns-admin.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4263","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in main_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en main_forum.php in PTCPay GeN3 forum v1.3 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"cat\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ptcpay:gen3:1.3:*:*:*:*:*:*:*","matchCriteriaId":"CDB3D0F3-E04A-4FB3-B08C-DF0BE7F52F3E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10299","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54561","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4264","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T16:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the language_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de fichero PHP en components/core/connect.php in AROUNDMe v1.1 y anteriores, cuando register_globals esta activado, pemrite a atacantes remotos ejecutar código PHP arbitrario a través del parámetro \"language_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aroundme:aroundme:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"13AE3717-1C78-400A-898F-8CCBF0BE6AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:aroundme:aroundme:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"94847599-324B-4D4A-A4E5-EB178C11C367"},{"vulnerable":true,"criteria":"cpe:2.3:a:aroundme:aroundme:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"39870BE9-AF90-4AF2-A0F8-B7BF4830EAC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnraiser:aroundme:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"C9F8B805-FFA5-41CF-8146-1094C03E7455"},{"vulnerable":true,"criteria":"cpe:2.3:a:barnraiser:aroundme:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"E1CCA9AB-09AD-4FAA-911D-B70A573D8FA0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37567","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4265","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T16:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file."},{"lang":"es","value":"Desbordamiento del búfer de la pila en Ideal Administration 2009 v9.7.1, y posiblemente otras versiones, permite a atacantes remotos ejecutar código arbitrario a través de un valor largo \"Computer\" en un fichero de proyecto .ipj."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pointdev:ideal_administration_2009:9.7.1:*:*:*:*:*:*:*","matchCriteriaId":"745EB491-8CCE-4708-86A7-9A6E77E9919C"}]}]}],"references":[{"url":"http://freetexthost.com/abydoz3jwu","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://pocoftheday.blogspot.com/2009/12/ideal-administration-2009-v97-local.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freetexthost.com/abydoz3jwu","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://pocoftheday.blogspot.com/2009/12/ideal-administration-2009-v97-local.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4266","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en YABSoft Advanced Image Hosting (AIH) Script v2.2, y posiblemente v2.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro \"text\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:advanced_image_hosting_script:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4C372789-28E6-454A-AA8A-214BC42676B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabsoft:advanced_image_hosting_script:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78C38AA7-43A4-453B-A1A9-E31F4B26159C"}]}]}],"references":[{"url":"http://secunia.com/advisories/34366","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10336","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54582","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/10336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4270","sourceIdentifier":"secalert@redhat.com","published":"2009-12-21T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS output driver."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función errprintf en base/gsmisc.c en ghostscript v8.64 hasta v8.70 permite a atacantes remotos provocar una denegación de servicio (caída) y probablemente ejecutar código de su elección mediante un fichero PDF modificado, como inicialmente se reportó por código de registro de depuración en gdevcups.c en el controlador de salida CUPS."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of ghostscript as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-12-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.64:*:*:*:*:*:*:*","matchCriteriaId":"70F9B613-59A2-4B38-AA0D-FF2ED9C30A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostscript:ghostscript:8.70:*:*:*:*:*:*:*","matchCriteriaId":"51FF58BE-045F-4333-B96A-380B869C76AD"}]}]}],"references":[{"url":"http://bugs.ghostscript.com/show_bug.cgi?id=690829","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/61140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37851","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40580","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-17.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:134","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:135","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/18/1","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/18/2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/37410","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-961-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/3597","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=540760","source":"secalert@redhat.com"},{"url":"http://bugs.ghostscript.com/show_bug.cgi?id=690829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/18/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/18/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-961-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=540760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4292","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Desbordamiento de búfer en la función de filtrado de URL en el firmware Internet Initiative Japan SEIL/X1, SEIL/X2, y SEIL/B1 desde la v2.40 hasta la v2.51 permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.40:*:*:*:*:*:*:*","matchCriteriaId":"23564CCD-7EF3-4457-99FB-BFE966D35D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.41:*:*:*:*:*:*:*","matchCriteriaId":"BD52B307-EA12-48FC-ACD5-01AEDED44A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.42:*:*:*:*:*:*:*","matchCriteriaId":"36F1D4E9-40BB-4BA6-9C44-5E06C8D98291"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.50:*:*:*:*:*:*:*","matchCriteriaId":"FF6EC374-64D2-4990-A4C4-86529CCF27C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.51:*:*:*:*:*:*:*","matchCriteriaId":"DAAA887F-7944-4C31-A191-0A39BC4E6544"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/x1:*:*:*:*:*:*:*:*","matchCriteriaId":"9A63E557-3BA6-4E0E-8597-BAA112B21DEF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.40:*:*:*:*:*:*:*","matchCriteriaId":"488614FD-E4DF-4E6B-B928-444D98076F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.41:*:*:*:*:*:*:*","matchCriteriaId":"B6A638B5-5FBC-4193-879D-883CF2777200"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.42:*:*:*:*:*:*:*","matchCriteriaId":"CCE84A44-AAB5-4D3F-ADE5-617E58B14E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.50:*:*:*:*:*:*:*","matchCriteriaId":"507272EC-6B90-46DA-9E9A-EF5DCB770E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.51:*:*:*:*:*:*:*","matchCriteriaId":"5C74FA35-319D-4B10-868A-A6CFAD137978"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:*:*:*:*:*:*:*:*","matchCriteriaId":"4BE3BBD4-FB2E-4543-9149-0452B26FAC31"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.40:*:*:*:*:*:*:*","matchCriteriaId":"416DCB14-271A-4578-9AE7-418C75ADC4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.41:*:*:*:*:*:*:*","matchCriteriaId":"FEBFCE3F-FE95-4559-A972-5241D48CB902"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.42:*:*:*:*:*:*:*","matchCriteriaId":"0064F721-57E1-4AC4-A3C3-92E05B64F0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.50:*:*:*:*:*:*:*","matchCriteriaId":"ED8A76A3-9CD8-4A3C-BDD4-53407A92E527"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.51:*:*:*:*:*:*:*","matchCriteriaId":"509DC30B-7D2F-43A7-9FD3-71FC405F520E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/x2:*:*:*:*:*:*:*:*","matchCriteriaId":"BF54D2DC-48BF-4E7D-BC33-1010B8DBF9E2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN06362164/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000069.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/59362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.seil.jp/seilseries/security/2009/a00669.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54051","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN06362164/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.seil.jp/seilseries/security/2009/a00669.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4293","sourceIdentifier":"cve@mitre.org","published":"2009-12-10T23:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service (system restart) via crafted GRE packets."},{"lang":"es","value":"El firmware Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 desde v2.30 hasta v2.51, cuando NAT esta activado, permite a atacantes remotos producir una denegación de servicio (reinicio de sistema) a través de paquetes GRE manipulados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.30:*:*:*:*:*:*:*","matchCriteriaId":"E10BC7EF-5A3B-4026-9EDA-15061EBF814E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.40:*:*:*:*:*:*:*","matchCriteriaId":"23564CCD-7EF3-4457-99FB-BFE966D35D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.41:*:*:*:*:*:*:*","matchCriteriaId":"BD52B307-EA12-48FC-ACD5-01AEDED44A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.42:*:*:*:*:*:*:*","matchCriteriaId":"36F1D4E9-40BB-4BA6-9C44-5E06C8D98291"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.50:*:*:*:*:*:*:*","matchCriteriaId":"FF6EC374-64D2-4990-A4C4-86529CCF27C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x1_firmware:2.51:*:*:*:*:*:*:*","matchCriteriaId":"DAAA887F-7944-4C31-A191-0A39BC4E6544"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/x1:*:*:*:*:*:*:*:*","matchCriteriaId":"9A63E557-3BA6-4E0E-8597-BAA112B21DEF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.30:*:*:*:*:*:*:*","matchCriteriaId":"2CA0DBD0-9181-45DB-83AB-74B63C4644DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.40:*:*:*:*:*:*:*","matchCriteriaId":"488614FD-E4DF-4E6B-B928-444D98076F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.41:*:*:*:*:*:*:*","matchCriteriaId":"B6A638B5-5FBC-4193-879D-883CF2777200"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.42:*:*:*:*:*:*:*","matchCriteriaId":"CCE84A44-AAB5-4D3F-ADE5-617E58B14E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.50:*:*:*:*:*:*:*","matchCriteriaId":"507272EC-6B90-46DA-9E9A-EF5DCB770E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/b1_firmware:2.51:*:*:*:*:*:*:*","matchCriteriaId":"5C74FA35-319D-4B10-868A-A6CFAD137978"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:*:*:*:*:*:*:*:*","matchCriteriaId":"4BE3BBD4-FB2E-4543-9149-0452B26FAC31"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.30:*:*:*:*:*:*:*","matchCriteriaId":"C4C47A3C-D478-44E9-8183-735CF9CFBC2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.40:*:*:*:*:*:*:*","matchCriteriaId":"416DCB14-271A-4578-9AE7-418C75ADC4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.41:*:*:*:*:*:*:*","matchCriteriaId":"FEBFCE3F-FE95-4559-A972-5241D48CB902"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.42:*:*:*:*:*:*:*","matchCriteriaId":"0064F721-57E1-4AC4-A3C3-92E05B64F0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.50:*:*:*:*:*:*:*","matchCriteriaId":"ED8A76A3-9CD8-4A3C-BDD4-53407A92E527"},{"vulnerable":true,"criteria":"cpe:2.3:a:iij:seil\\/x2_firmware:2.51:*:*:*:*:*:*:*","matchCriteriaId":"509DC30B-7D2F-43A7-9FD3-71FC405F520E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/x2:*:*:*:*:*:*:*:*","matchCriteriaId":"BF54D2DC-48BF-4E7D-BC33-1010B8DBF9E2"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN13011682/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000070.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/59361","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.seil.jp/seilseries/security/2009/a00674.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54050","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN13011682/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/59361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.seil.jp/seilseries/security/2009/a00674.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4294","sourceIdentifier":"cve@mitre.org","published":"2009-12-11T16:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en Authentication Manager (también conocido como utauthd) en Sun Ray Server Software v4.0 y v4.1 permite a atacantes remotos ejecutar código arbitrario o producir una denegación de servicio a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"2621BD59-0ED4-402E-98EB-0F643078F4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:linux:*:*:*:*:*","matchCriteriaId":"C97EBE67-896D-4E65-808D-0FA5B1F7274D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:sparc:*:*:*:*:*","matchCriteriaId":"0348F9F9-4ED5-4454-A9EB-B0E93E400D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:x86:*:*:*:*:*","matchCriteriaId":"3B8D2C71-24C3-4670-91F0-BE54E8DD1622"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267548-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37284","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-267548-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4295","sourceIdentifier":"cve@mitre.org","published":"2009-12-11T16:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic."},{"lang":"es","value":"Sun Ray Server Software v4.0 y v4.1 no genera una única clave privada DSA para el firmware en cada dispositivo Sun Ray 1, 1g, 100 y 150 DTU, lo que facilita a atacantes remotos obtener información sensible prediciendo una clave y luego utilizando la para descifrar trafico de red interceptado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*","matchCriteriaId":"2621BD59-0ED4-402E-98EB-0F643078F4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*","matchCriteriaId":"CAE615D0-41D5-46DD-86D4-B226068C58A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*","matchCriteriaId":"5B17D330-9E56-478F-A2C2-D4524B04CC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:linux:*:*:*:*:*","matchCriteriaId":"C97EBE67-896D-4E65-808D-0FA5B1F7274D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:sparc:*:*:*:*:*","matchCriteriaId":"0348F9F9-4ED5-4454-A9EB-B0E93E400D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:x86:*:*:*:*:*","matchCriteriaId":"3B8D2C71-24C3-4670-91F0-BE54E8DD1622"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270549-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37285","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270549-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4296","sourceIdentifier":"cve@mitre.org","published":"2009-12-11T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el módulo Taxonomy Timer v5.x-1.8 y anteriores y v6.x-alpha1 v anteriores para Drupal  permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores sin especi"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.8","matchCriteriaId":"EFA1AAFB-EB95-4E9A-B4DC-087F0F4D26A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.0-alpha1","matchCriteriaId":"8E704921-D725-459E-AB79-AC0095D4010E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3760002-F93A-41A9-876A-6467E4648B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"736122B5-2A44-41F9-B996-673EE859AE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"95BF13BD-6A3D-4488-8E8F-3271B9CCB96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"C829AABB-1352-49EC-B1D1-85EEA50C670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7ADCAD9D-5954-4681-8E15-74AA226E5F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"38B3A611-3126-44D7-883E-EE0B0FF3240F"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"5D9379FF-EAFD-4D11-BB35-19FCF1962BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"7F78A941-C332-44C2-A021-3C5502944149"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_miller:taxonomy_timer:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"70636B92-5EDE-4957-9716-FFFAFA09351F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/641050","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/641064","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/649396","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37189","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3388","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/641050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/641064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/649396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4297","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 permite a atacantes remotos secuestrar la autenticación de victimas inespecíficas a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139100","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4298","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors."},{"lang":"es","value":"El modulo LAMS (mod/lams) para en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 almacena los campos (1) nombre de usuarios, (2) nombre, y (3) apellidos dentro de la tabla de usuario, lo que permite a los atacantes obtener la información de la cuenta de usuario a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139102","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4299","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors."},{"lang":"es","value":"mod/glossary/showentry.php en el modulo Glossary en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 no gestiona adecuadamente el acceso, lo que permite a atacantes leer entradas de \"Glossary\" sin autorizacion a traves de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139103","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4300","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors."},{"lang":"es","value":"Múltiples plugins de autenticación sin especificar en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 almacenan los hash MD5 para las contraseñas en la tabla de usuario, incluso cuando los hashes que se cachean no son utilizados por el plugin, lo que haría mas fácil a atacantes obtener credenciales a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4301","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions."},{"lang":"es","value":"mnet/lib.php en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7, cuando los servicios MNET están activados, no chequea adecuadamente los permisos, lo que permite a servidores remotos autenticados ejecutar funciones MNET arbitrarias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.16.2.10&r2=1.16.2.11","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.9.2.7&r2=1.9.2.8","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139106","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.16.2.10&r2=1.16.2.11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.9.2.7&r2=1.9.2.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4302","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these credentials by sniffing."},{"lang":"es","value":"login/index_form.html en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 enlaza a una pagina inicial en un puerto HTTP incluso cuando la pagina es servida desde un puerto HTTPS, lo que podría causar que las credenciales fuesen enviadas en texto plano, incluso cuando el envío SSl este previsto, lo que permitiría atacantes obtener esas credenciales mediante la interceptación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139107","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-4303","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified \"secrets\" in backup files, which might allow attackers to obtain sensitive information."},{"lang":"es","value":"Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 almacena (1) los hashes de las contraseñas y (2) \"secretos\" sin especificar en ficheros de copias de seguridad, lo que permitiría a atacantes obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139110","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4304","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php, which makes it easier for attackers to conduct brute-force password guessing attacks."},{"lang":"es","value":"Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7  no utiliza variación aleatorio de contraseñas en config.php, lo que hace mas facil para los atacantes dirigir un ataque de fuerza bruta contra la contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139111","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4305","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T01:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an \"escaping issue when processing AICC CRS file (Course_Title).\""},{"lang":"es","value":"Vulnerabilidad de inyección en el módulo SCORM en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a la v1.9.7 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de de vectores relacionados con un \"asunto de escapado cuando se procesa un fichero AICC CRS (Course_Title).\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A3A5D9-D96E-46B3-AC22-25045564EB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AF91F8EA-1737-4E11-9931-ACAFB4BC0018"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"1E81E148-5710-439C-8A1A-884D27640AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"7949FC50-81B9-44AD-BB1B-91D025B34FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"24F2602B-8ED3-4026-A9A4-31BE8BDC7724"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"}]}]}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139120","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"cve@mitre.org"},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4306","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel 2.6.32-git6 and earlier allows local users to cause a denial of service (filesystem corruption) via unknown vectors, a different vulnerability than CVE-2009-4131."},{"lang":"es","value":"Vulnerabilidad sin especificar en la implementación EXT4_IOC_MOVE_EXT (también conocido como \"move extents\") ioctl en el sistema de ficheros ext4 en el kernel de Linux v2.6.32-git6 y anteriores permite a usuarios locales producir una denegación de servicio (corrupción del sistema de ficheros) a través de vectores desconocidos, una vulnerabilidad diferente que CVE-2009-4131."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:git-6:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"5A5163E4-EABA-48CA-9C68-D8290683FDCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*","matchCriteriaId":"46568A0D-F374-4DAB-9B64-FCC74A9AA07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc1:*:*:*:*:*:*","matchCriteriaId":"C85D4E0A-14DA-4884-AF6F-A0F54304430F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc3:*:*:*:*:*:*","matchCriteriaId":"218DE1D1-3843-4076-9AE4-70AA0FD99B3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc4:*:*:*:*:*:*","matchCriteriaId":"2677114B-AF05-42EB-BBC8-FA85CD631C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc5:*:*:*:*:*:*","matchCriteriaId":"FA8D64E1-A700-4D9E-9063-EC3CFC1A6D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc6:*:*:*:*:*:*","matchCriteriaId":"1B6C0A59-556F-4579-9AD2-4ABAE01FE2CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc7:*:*:*:*:*:*","matchCriteriaId":"DBE3083A-0FA6-4854-8F65-05E8364B3A9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.32:rc8:*:*:*:*:*:*","matchCriteriaId":"57F8D95D-DC49-46B3-A460-2352D7E540EB"}]}]}],"references":[{"url":"http://grsecurity.org/test/grsecurity-2.1.14-2.6.32-200912112157.patch","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38017","source":"cve@mitre.org"},{"url":"http://twitter.com/fotisl/statuses/6568947714","source":"cve@mitre.org"},{"url":"http://twitter.com/spendergrsec/statuses/6551797457","source":"cve@mitre.org"},{"url":"http://twitter.com/spendergrsec/statuses/6567167692","source":"cve@mitre.org"},{"url":"http://twitter.com/spendergrsec/statuses/6569596339","source":"cve@mitre.org"},{"url":"http://twitter.com/spendergrsec/statuses/6572069107","source":"cve@mitre.org"},{"url":"http://twitter.com/spendergrsec/statuses/6583954567","source":"cve@mitre.org"},{"url":"http://twitter.com/tytso/statuses/6571730411","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547263","source":"cve@mitre.org"},{"url":"http://grsecurity.org/test/grsecurity-2.1.14-2.6.32-200912112157.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/fotisl/statuses/6568947714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/6551797457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/6567167692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/6569596339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/6572069107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/spendergrsec/statuses/6583954567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twitter.com/tytso/statuses/6571730411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4307","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value)."},{"lang":"es","value":"La funcion ext4_fill_flex_info en fs/ext4/super.c en el kernel de Linux anteriores a v2.6.32-git6  permite a atacantes remotos asistidos por el usuario producir una denegación de servicio (error de división por cero y panic) a través de un sistema de ficheros ext4 malformado que contenga un super bloque con un valor de tamaño de grupo FLEX_BG grande  (también conocido como valor s_log_groups_per_flex)."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/CVE-2009-4307\n\nThe Linux kernel packages as shipped with Red Hat Enterprise Linux 3, 4 and Red Hat Enterprise MRG do not include support for EXT4, and therefore are not affected by this issue.\n\nA future kernel update for Red Hat Enterprise Linux 5 will address this flaw.","lastModified":"2009-12-15T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.32","matchCriteriaId":"4367A8B9-ABB9-4E4E-9A2A-85719CBE8DAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc8:*:*:*:*:*:*","matchCriteriaId":"1837F32C-80D3-4E10-AE5D-E9F5A11A434E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"}]}]}],"references":[{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=14287","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=503358ae01b70ce6909d19dd01287093f6b6271c","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/12/9/255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38276","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git6.log","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:029","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0380.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9874","source":"cve@mitre.org"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=14287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=503358ae01b70ce6909d19dd01287093f6b6271c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/12/9/255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git6.log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0380.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4308","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal."},{"lang":"es","value":"La funcion ext4_decode_error en fs/ext4/super.c en el sistema de ficheros ext4 en el kernel de Linux anteriores a v2.6.32 permite a atacantes remotos asistidos por el usuario producir una denegación de servicio (desreferencia a punteru NULL), y posiblemente tienes mas impacto sin especificar, a través de de un sistema de ficheros solo de lectura que carece de journal."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/CVE-2009-4308\n\nThe Linux kernel packages as shipped with Red Hat Enterprise Linux 3, 4 and Red Hat Enterprise MRG do not include support for EXT4, and therefore are not affected by this issue. This issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0147.html.","lastModified":"2010-03-17T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:rc8:*:*:*:*:*:*","versionEndIncluding":"2.6.31","matchCriteriaId":"9E10CEA2-5392-4E77-9A17-A66448508C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*","matchCriteriaId":"1CD39A7A-9172-4B85-B8FE-CEB94207A897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*","matchCriteriaId":"35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*","matchCriteriaId":"81DE32C2-5B07-4812-9F88-000F5FB000C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*","matchCriteriaId":"02EED3D5-8F89-4B7F-A34B-52274B1A754F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*","matchCriteriaId":"7936B7EE-9CD1-4698-AD67-C619D0171A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*","matchCriteriaId":"A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*","matchCriteriaId":"3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*","matchCriteriaId":"5738D628-0B2D-4F56-9427-2009BFCB6C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"F43EBCB4-FCF4-479A-A44D-D913F7F09C77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*","matchCriteriaId":"5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*","matchCriteriaId":"860F9225-8A3F-492C-B72B-5EFFB322802C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*","matchCriteriaId":"19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*","matchCriteriaId":"57E23724-2CA4-4211-BB83-38661BE7E6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*","matchCriteriaId":"B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"6143DC1F-D62E-4DB2-AF43-30A07413D68B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*","matchCriteriaId":"298266AB-2A36-4606-BF80-2185FC56C4D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*","matchCriteriaId":"7C2658CA-56C2-494F-AC42-618EC413CBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*","matchCriteriaId":"AD34526D-F2CC-44C5-991D-B1E41C327860"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*","matchCriteriaId":"C2F0B900-34E9-4545-B7AE-AF0A4363EACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*","matchCriteriaId":"B36F432D-FED1-4B8D-A458-BEDEEF306AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*","matchCriteriaId":"5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*","matchCriteriaId":"25379B32-D898-4E44-A740-978A129B5E05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*","matchCriteriaId":"7B90F8F2-9549-413D-9676-3EF634D832B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*","matchCriteriaId":"915E64EF-6EEC-4DE2-A285-5F3FCE389645"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*","matchCriteriaId":"585BEE46-088A-494E-8E18-03F33F6BBEA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*","matchCriteriaId":"EFF35478-B292-4A00-B985-CEEDE8B212C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*","matchCriteriaId":"6E85846A-61BE-4896-B4A6-42A7E1DBA515"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*","matchCriteriaId":"D6E3B925-031D-4F6D-915A-A16F0FFA878C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*","matchCriteriaId":"7344B707-6145-48BA-8BC9-9B140A260BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*","matchCriteriaId":"9BFCEA98-C708-4E1E-B189-E6F96D28F07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*","matchCriteriaId":"2B753112-CCDE-4870-AA97-4AAA2946421A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*","matchCriteriaId":"79B3AFE7-F4FF-4144-9046-E5926E305A03"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*","matchCriteriaId":"7616E197-ACCA-4191-A513-FD48417C7F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*","matchCriteriaId":"ED1AA7FC-F5B9-406C-ABE4-0BE5E9889619"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*","matchCriteriaId":"7EE2F94D-E8E0-4BB7-A910-378012580025"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*","matchCriteriaId":"66F5AE3B-B701-4579-B44A-0F7A4267852E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*","matchCriteriaId":"34E60197-56C3-485C-9609-B1C4A0E0FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*","matchCriteriaId":"86E452E4-45A9-4469-BF69-F40B6598F0EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*","matchCriteriaId":"C5751AC4-A60F-42C6-88E5-FC8CFEE6F696"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*","matchCriteriaId":"1FF886A6-7E73-47AD-B6A5-A9EC5BEDCD0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*","matchCriteriaId":"48777A01-8F36-4752-8F7A-1D1686C69A33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*","matchCriteriaId":"42DA6A18-5AA1-4920-94C6-8D0BB73C5352"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*","matchCriteriaId":"992EA5DE-5A5B-4782-8B5A-BDD8D6FB1E31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*","matchCriteriaId":"E51F0211-2D3E-4260-AD63-E83AE4EC4AF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*","matchCriteriaId":"4C4E1245-C6BB-462C-9E27-C608595DAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*","matchCriteriaId":"747F1324-AEFA-496F-9447-12CD13114F60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*","matchCriteriaId":"795C3B17-687E-4F33-AA99-8FEC16F14693"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*","matchCriteriaId":"F2BDD5C7-9B6A-41B5-8679-5062B8A6E11B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*","matchCriteriaId":"190D5E2C-AD60-41F4-B29D-FB8EA8CB5FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*","matchCriteriaId":"6B81A4DD-2ADE-4455-B517-5E4E0532D5A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*","matchCriteriaId":"4BD589CC-666B-4FAA-BCF0-91C484BDDB09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*","matchCriteriaId":"4CD622EE-A840-42E1-B6BF-4AA27D039B12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*","matchCriteriaId":"900D6742-DE0F-45C5-A812-BF84088CB02A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*","matchCriteriaId":"225CA94C-8C84-4FA6-95D0-160A0016FBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*","matchCriteriaId":"D88ED3C4-64C5-44B2-9F23-E16087046C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*","matchCriteriaId":"03FB31E5-190C-489A-AB30-910D2CC854F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*","matchCriteriaId":"EF4A781A-4A41-466F-8426-10B40CF8BA1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*","matchCriteriaId":"9ED29B3F-456B-4767-8E59-8C19A3B7E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*","matchCriteriaId":"F6316369-B54A-4E59-A022-E0610353B284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*","matchCriteriaId":"073C3CE0-E12D-4545-8460-5A1514271D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*","matchCriteriaId":"670FAA25-A86F-4E04-A3A0-0B3FF6CF9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*","matchCriteriaId":"AEB33DEA-13C7-4B36-AB8A-ED680679A071"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*","matchCriteriaId":"86DD0FCC-BB12-410D-8C82-AB99C7C5311E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*","matchCriteriaId":"83700989-8820-48DA-A9FE-6A77DF1E8439"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*","matchCriteriaId":"CC9F4CEC-7781-468B-B460-4F487B7C6601"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*","matchCriteriaId":"67C75A62-8807-4821-9362-1E0D63C0A1B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*","matchCriteriaId":"894D4812-D62F-489E-8D0E-5E9468CE8EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*","matchCriteriaId":"C1F92E01-4F08-4364-9E87-FFBC095E32E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*","matchCriteriaId":"F9960640-F02D-4E81-A34B-1893D8FD7F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*","matchCriteriaId":"D9D00DAD-4F2D-45C7-B87C-85118D9DD855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*","matchCriteriaId":"0C398D26-7132-4A6E-9003-77246644451B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*","matchCriteriaId":"5EED2DA2-2516-42E9-8A33-0FA64BF51DB6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*","matchCriteriaId":"FF425F00-41BA-4F59-A0DE-6362A1E9A142"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*","matchCriteriaId":"33577E79-1B6E-406D-A49B-2CEF1754F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*","matchCriteriaId":"8B21D90E-5172-485E-87AC-F1681604AD7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*","matchCriteriaId":"C41F6822-92BF-43F5-8B3E-8BAF9E9A320D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*","matchCriteriaId":"641EECFD-A985-4026-A53A-10FBE47EAD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*","matchCriteriaId":"47595F81-2083-4236-A0B0-E2B98DD78402"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*","matchCriteriaId":"8F5FC758-5A5D-466A-8386-5FC469F79F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*","matchCriteriaId":"0CCA5C83-5293-4107-8E6A-85F82ECF2C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*","matchCriteriaId":"C2D0AADC-BC34-40FB-BD69-37981DC8E971"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*","matchCriteriaId":"3CA7EAC4-7696-41CE-8EE9-3E39DE226BD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*","matchCriteriaId":"12547B6B-78F1-4426-81CE-5F208794658C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*","matchCriteriaId":"38429E64-276B-46D4-AACD-05349D6F6615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*","matchCriteriaId":"E89640F8-313B-4A36-A591-36645D1EF838"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*","matchCriteriaId":"CE0271F0-41F2-4096-8C91-DAD1A81AF855"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*","matchCriteriaId":"7A40DCBB-B41B-468E-A918-6EA3F9A125E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*","matchCriteriaId":"921B6A54-85E3-4867-8EDF-93EB86BAFBD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*","matchCriteriaId":"C8A2C6F1-ED7E-4E51-BE72-BD744D554EE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*","matchCriteriaId":"2B004CF1-0ACC-441C-9F61-9B20504F4ECC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*","matchCriteriaId":"04B42F06-AC6D-40F3-BC03-5126BED48F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*","matchCriteriaId":"0A8002C7-19E2-4F20-890E-4BA2029174D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*","matchCriteriaId":"34FC90C2-AED0-4EAF-B5E8-DE75961DA26E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*","matchCriteriaId":"E7DA9C54-742C-4057-8BAB-18755B4A42D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*","matchCriteriaId":"84BBE8BE-EAE8-4F7A-85BD-94BBF64F30EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*","matchCriteriaId":"53037B40-D534-41D1-9895-8EDB0D884C3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*","matchCriteriaId":"5549096F-C640-463E-AD07-FD8D254CC098"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*","matchCriteriaId":"F8DCAF19-879C-42BB-B56A-84504E79758A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*","matchCriteriaId":"1B8ED186-B0FE-4AAC-9B20-DFAD75D7F677"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*","matchCriteriaId":"9E86E13B-EC92-47F3-94A9-DB515313011D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*","matchCriteriaId":"DEB3068F-2F64-4BBC-BA3C-FB56A2FBED50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*","matchCriteriaId":"6555D45B-D3B3-4455-AB1E-E513F9FB6139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*","matchCriteriaId":"4FA5E262-7825-496F-AA72-0AD6DE6F3C78"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*","matchCriteriaId":"56C6C01B-4CED-4F37-A415-0603496C27DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E62F6FA-6C96-4AEE-8547-8C2FE1FAD998"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3ACE7A-A600-4ABB-B988-5D59D626DC0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*","matchCriteriaId":"2F839622-3DE1-4A16-8BD2-5FA2CBF014D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*","matchCriteriaId":"DC47887B-5608-47BE-85EE-563864461915"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*","matchCriteriaId":"AF39E62B-EAB4-44B0-A421-2A71B7DD8341"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*","matchCriteriaId":"809264F1-763D-4A8F-B206-222332DD8732"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*","matchCriteriaId":"A66ED53E-3139-4972-B027-D614BFFB8628"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*","matchCriteriaId":"85A3AB7A-1959-4A57-B83D-B2753C43649E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*","matchCriteriaId":"B8FB7FA3-727D-4BB9-937C-F4F5DA97FFCA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*","matchCriteriaId":"4A60B265-5508-4EE0-980A-44BB0966FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"C06F0037-DE20-4B4A-977F-BFCFAB026517"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*","matchCriteriaId":"D08CBC56-C820-4513-ABEC-1ABB3EFC3A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*","matchCriteriaId":"338BB401-8831-4094-9186-2B3CFA5903D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*","matchCriteriaId":"1E32E6BA-AFEF-44A8-B230-87DD043BB222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E575B-BD1A-4E50-8D6F-131D5E08058E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*","matchCriteriaId":"20F6269B-5F6B-4413-B14D-7AE5442E4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*","matchCriteriaId":"189D1246-F975-4411-A58B-343ED90485FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*","matchCriteriaId":"1B914F7F-C6BD-4527-B1E9-7FD1E337A18C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*","matchCriteriaId":"82EC9FCA-D17D-4CB9-B925-E8F8B68F8FCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"179147E4-5247-451D-9409-545D661BC158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*","matchCriteriaId":"6554469E-F6AE-4EB0-880E-CBFD196FEE31"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*","matchCriteriaId":"2F99CFC1-DCCE-47B9-98EF-84AEDAECE02E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*","matchCriteriaId":"C20367B0-F722-4442-8B59-ABB0FEDB8CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*","matchCriteriaId":"86A98A70-51E3-4556-8DC4-DD09CF370D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*","matchCriteriaId":"469EE3B0-3CC2-4AC2-86A0-2DF34205E707"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFECB2B-6482-45F2-B3BB-EDDEDA0948A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*","matchCriteriaId":"8EC547EB-9308-4477-8256-A0E04B42D6DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*","matchCriteriaId":"C6940324-0383-4510-BA55-770E0A6B80B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*","matchCriteriaId":"3D3A5FD5-4C42-4B00-8473-D5650FAED9C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*","matchCriteriaId":"480F035A-A59D-4113-A246-DF108BB2F591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*","matchCriteriaId":"30D39E29-B2A0-4075-84AF-994C27AB0A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*","matchCriteriaId":"19879317-B067-45DA-B497-21EBDDDC2521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*","matchCriteriaId":"D220C745-28AD-4D04-B2D2-A090D229206E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*","matchCriteriaId":"8BC5B3A6-6CD5-448D-B910-3BAD15FDC3A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*","matchCriteriaId":"E4AF8895-7BF8-458E-B2BB-68699AABC023"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*","matchCriteriaId":"CA768A9D-6C63-405E-9D14-5D68F8E93A91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*","matchCriteriaId":"FF495E58-DA6C-402D-B381-4929CB8A502B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*","matchCriteriaId":"AA794BE8-1A22-4BF8-AB79-53E7BCE60D9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*","matchCriteriaId":"A591301C-C30F-44AC-90F0-709A18AA96E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*","matchCriteriaId":"F7D2606B-00A6-4FA3-A00D-B1E8A80B947C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*","matchCriteriaId":"610A93BB-70E3-4BF1-83E8-8A7388477F44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*","matchCriteriaId":"821BD11F-3C6A-4424-BC9B-DFD786248B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*","matchCriteriaId":"6F55A024-9F8E-44F8-A0D8-696BC232524A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*","matchCriteriaId":"84595143-3B04-4CE8-81C0-28EEEC58CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*","matchCriteriaId":"32EE2B49-DDEB-4B49-A5F0-CAA161095A5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*","matchCriteriaId":"C3ABFA33-8FA1-488E-A9BD-1593F495F595"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*","matchCriteriaId":"62F6DE3A-E6CC-4D7E-BD08-E43DC4182200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*","matchCriteriaId":"A9A29C44-EBE5-42B0-AFAD-C5A8F6EEF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*","matchCriteriaId":"50B422D1-6C6E-4359-A169-3EED78A1CF40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*","matchCriteriaId":"6AD2E9DC-2876-4515-BCE6-DDD0CC6A5708"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*","matchCriteriaId":"A2F19064-CFBF-4B3C-A0A1-CE62265CD592"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*","matchCriteriaId":"AD3F0CEC-B8FA-47E3-BA3E-182F43D3DA86"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*","matchCriteriaId":"AB759752-DC19-4750-838B-056063EFDC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*","matchCriteriaId":"96A43C95-8569-40BE-9E5B-F9B3D0B9D188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*","matchCriteriaId":"ABD70B2B-9827-4DBB-B82D-0B70C2D4AB1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*","matchCriteriaId":"99662904-E5E3-4E81-B199-39707EAEB652"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*","matchCriteriaId":"615BDD1D-36AA-4976-909B-F0F66BF1090C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*","matchCriteriaId":"EE8A26D6-1BDA-45F0-8F7C-F95986050E32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*","matchCriteriaId":"61A3EDF2-09D7-4116-AE46-D86E4B9602AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*","matchCriteriaId":"F320FA9F-C13D-4AA3-B838-A0E5D63E6A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*","matchCriteriaId":"B179CF1D-084D-4B21-956F-E55AC6BDE026"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*","matchCriteriaId":"6F1B4877-286A-44B5-9C5C-0403F75B2BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*","matchCriteriaId":"432CA976-6EFA-4D34-B5EA-CD772D067F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*","matchCriteriaId":"6E476195-657E-416E-BC16-44A18B06A133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*","matchCriteriaId":"12A55028-B8F9-4AD2-AE57-A80D561F3C79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*","matchCriteriaId":"0C4E641C-67D4-4599-8EFB-0B2F8D81D68C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*","matchCriteriaId":"70460F6C-D6C0-4C1A-B13E-368705EAF223"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*","matchCriteriaId":"3F26BA18-08AD-45FE-9F83-25CCB2E27270"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*","matchCriteriaId":"6EBFF148-3EDA-4216-910B-8930D8C443C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*","matchCriteriaId":"648C63F7-EA1D-4F2E-B8AF-1F380C83E542"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*","matchCriteriaId":"1697B855-4834-4633-A5C8-C1F7F13ACE0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*","matchCriteriaId":"1FBAE75F-9145-4B9A-A6D8-E488C5326145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*","matchCriteriaId":"DFF566DA-0F04-48DA-AA40-565979C55328"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*","matchCriteriaId":"5990C6C2-2F66-4C4D-8224-74163865F410"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*","matchCriteriaId":"3A45A9B9-4B19-4A5B-BC95-BCBC4EF00F12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*","matchCriteriaId":"C23AD176-3B99-4593-BCBD-13C1E579A13E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*","matchCriteriaId":"5C6A3A30-FEA4-40B6-98A9-1840BB4E8CBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*","matchCriteriaId":"5140380C-71BD-464F-AE53-1814C2653056"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*","matchCriteriaId":"B18EC0A7-8616-4039-B98B-E1216E035B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*","matchCriteriaId":"22FB141B-FA2A-435D-8937-83FC0669CB20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*","matchCriteriaId":"C59131C8-F66A-4380-9F6E-3FC14C7C8562"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*","matchCriteriaId":"A5421616-4BF5-4269-8996-C3D2BA6AE2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*","matchCriteriaId":"23FC6CE2-8717-4558-A309-A441D322F00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*","matchCriteriaId":"311BE336-7BB2-47C0-AED5-3DEA706C206F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*","matchCriteriaId":"CE87D1BC-A72D-42D2-A93C-67A5823BEB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*","matchCriteriaId":"5AAC2E9D-0E82-4866-9046-ADD448418198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*","matchCriteriaId":"760FB32D-9795-4B29-B79A-A32B5E70F7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*","matchCriteriaId":"0DFF67E9-B0C2-48D5-BB3A-CF21D10010FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*","matchCriteriaId":"5881A78C-D162-4DE5-8353-2BB1EC1F428B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*","matchCriteriaId":"B13D81D2-1A89-4E61-A90C-5E8BB880310B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*","matchCriteriaId":"67F2047A-5F17-4B59-9075-41A5DC5C1CD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*","matchCriteriaId":"80F9887E-2466-4C73-A8E1-2117492F9EC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*","matchCriteriaId":"8FDE5B27-2EF0-464E-8F14-5E809D84D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*","matchCriteriaId":"815B2EE8-136F-44E4-997D-5F93A54775DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*","matchCriteriaId":"13673DF5-09B1-40C8-AC54-A447DE8AB01E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*","matchCriteriaId":"52152F5A-1833-4490-A373-9C547B90B0F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*","matchCriteriaId":"B64A095E-5E97-445E-B435-F09983CC0E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*","matchCriteriaId":"B8035F93-9DEE-4B92-ABAA-4ABE0B71BF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*","matchCriteriaId":"6EE92406-DBF3-463E-8A51-F9679E851FDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*","matchCriteriaId":"3C60D19B-ED9B-443C-9D49-002ABD381119"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*","matchCriteriaId":"264C61EE-64F6-43AD-B54F-7D683C29E64F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*","matchCriteriaId":"0149408A-30F6-4EDF-8B3B-CBAB884CE758"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*","matchCriteriaId":"71295664-89EC-4BB3-9F86-B1DDA20FAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*","matchCriteriaId":"37BE853A-BA6F-4A70-B166-E34441F0B7DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*","matchCriteriaId":"85064FDF-4B62-43BF-B36C-F659D739BC22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*","matchCriteriaId":"CEADC505-FF44-4D45-8EA6-B23A1C4564D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*","matchCriteriaId":"0CE3C807-5C9B-4B71-868B-DF17ECB1514F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CADAA2-91D2-40C4-90F3-D7F40A3D4CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*","matchCriteriaId":"45B6847C-873B-4BE1-852D-239115E59BA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*","matchCriteriaId":"FF41209E-D27F-4642-A405-90E822A41897"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*","matchCriteriaId":"97F59FD9-46E5-4F63-80A0-091AD44D1867"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*","matchCriteriaId":"428844A5-E020-4AE9-8012-9AEDFCB7C32E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*","matchCriteriaId":"94C9D70D-A552-48D6-9497-EE07EB5649D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*","matchCriteriaId":"AF6169FF-9FF9-4A81-BAEB-6D5132F64F61"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*","matchCriteriaId":"E6DC79CF-A504-4232-9F66-B5DCD0213DA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*","matchCriteriaId":"192B4273-0935-4232-BBFD-A850855CAC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*","matchCriteriaId":"60E9FDA8-7EC3-4B9B-B508-27F948D60DDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*","matchCriteriaId":"E4E4A6E5-0C2C-42FD-B982-684CCB0DDFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*","matchCriteriaId":"A16F2182-C489-4CA9-A56B-01463148D16F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*","matchCriteriaId":"630A56D3-7A82-44DE-8888-2EB8CD1C24A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*","matchCriteriaId":"2E0D6431-E8E0-4079-A1A0-9CE6D1D67709"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*","matchCriteriaId":"BF4EF7A7-6E96-43B4-8287-368098ABBFA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*","matchCriteriaId":"BEF91995-A084-422A-A544-30B0B4D75E22"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*","matchCriteriaId":"E45F4429-5A9C-4E8B-96EE-CCF19776CABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1EFCAF09-BB20-424C-8648-014C0F71F8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*","matchCriteriaId":"3A74970C-5EEA-47A7-A62D-AF98F4D1228F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA56669-B09E-42C2-9591-245C46909A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*","matchCriteriaId":"E9B33D60-8023-4A0B-ACF7-9F811EEB8BCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*","matchCriteriaId":"3D08D180-23F7-456F-98CA-26B53C678D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*","matchCriteriaId":"80E3C363-49C9-4869-83B5-76C14100BFF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*","matchCriteriaId":"1E1DE903-EDFC-4E0F-8EDF-7762FE3C7C80"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.26.8:*:*:*:*:*:*:*","matchCriteriaId":"BC02BA18-9235-45CA-A3D6-0EB21CE69DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*","matchCriteriaId":"856FE78A-29B5-4411-98A0-4B0281C17EB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*","matchCriteriaId":"324B5A3E-FA65-4F02-9B8F-872F38CD1808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*","matchCriteriaId":"C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*","matchCriteriaId":"DE21E2AE-9E01-471C-A419-6AB40A49C2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*","matchCriteriaId":"ADFC2D46-65D0-426F-9AF8-8C910AE91D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*","matchCriteriaId":"11795F8E-7ACD-4597-9194-FC7241DCE057"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*","matchCriteriaId":"60F381E1-F3C5-49BE-B094-4D90E7B108F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*","matchCriteriaId":"D82A6217-CFA6-4E72-8BED-0297E13EABF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*","matchCriteriaId":"7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*","matchCriteriaId":"7954A701-1671-4080-B1E6-47E0208FD28C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*","matchCriteriaId":"63D06512-EAF0-48C6-98F0-066E63FF07EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*","matchCriteriaId":"7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*","matchCriteriaId":"D75B48F1-623A-4B96-9E08-4AA2DE748490"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*","matchCriteriaId":"9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*","matchCriteriaId":"7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*","matchCriteriaId":"0383E2A5-60EE-47F3-9DA8-BF75028D511F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*","matchCriteriaId":"E8B0C229-2A79-47E0-856A-2AE0FF97B967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*","matchCriteriaId":"FB27B247-D6BF-49C4-B113-76C9A47B7DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*","matchCriteriaId":"F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.19:*:*:*:*:*:*:*","matchCriteriaId":"1ACBB194-1D24-464A-B79C-44B8127EAD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.20:*:*:*:*:*:*:*","matchCriteriaId":"83E5F269-7711-447D-B798-0F5478E36299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.21:*:*:*:*:*:*:*","matchCriteriaId":"A0138807-6313-4A3F-AB5A-4B7D4A9BE287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.22:*:*:*:*:*:*:*","matchCriteriaId":"D4BA2227-F259-499D-BF50-5074B1E7DD3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.23:*:*:*:*:*:*:*","matchCriteriaId":"78A896D0-032C-4467-9D57-E47E8C612704"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.24:*:*:*:*:*:*:*","matchCriteriaId":"3D1D4C8F-8C09-4A49-AFFD-33093AE7A437"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.25:*:*:*:*:*:*:*","matchCriteriaId":"A415FECF-89CC-4D71-B1BF-6A678D32599D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.26:*:*:*:*:*:*:*","matchCriteriaId":"98F77E54-5F4A-4D47-8DE8-097B4BBC7944"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.27:*:*:*:*:*:*:*","matchCriteriaId":"752148FC-1594-4108-AE0F-C5145B978454"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.28:*:*:*:*:*:*:*","matchCriteriaId":"09546671-E75D-4F50-9D86-DFDDAC9DC5DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.29:*:*:*:*:*:*:*","matchCriteriaId":"EDC7A2D7-ACB4-4871-B7C0-02711A53DF1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.30:*:*:*:*:*:*:*","matchCriteriaId":"6964925C-4394-4E82-976B-770A99E74F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.27.31:*:*:*:*:*:*:*","matchCriteriaId":"2E8C909E-02D7-4B29-AA68-897BD0200B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*","matchCriteriaId":"26BD805F-08EB-42EC-BC54-26A7278E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*","matchCriteriaId":"217715A5-E69D-45C0-B8E4-5681528C651B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A87AD66C-4321-4459-8556-3B0BA38C493A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*","matchCriteriaId":"87A347E0-9C0B-4674-9363-3C36DA27AC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*","matchCriteriaId":"8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*","matchCriteriaId":"D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*","matchCriteriaId":"B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.7:*:*:*:*:*:*:*","matchCriteriaId":"38A55F08-88A9-42D5-A2B1-8B8C0D6DED09"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.8:*:*:*:*:*:*:*","matchCriteriaId":"3975EC77-D33D-4167-91BE-08237C3EE9D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.9:*:*:*:*:*:*:*","matchCriteriaId":"0A0F2534-C267-43D9-8365-C00CD979B052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.28.10:*:*:*:*:*:*:*","matchCriteriaId":"27430190-EB83-43C5-9584-4F65CF65151A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*","matchCriteriaId":"C4033E0B-A3A1-4CC5-956A-AAA0FB905DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc1:*:*:*:*:*:*","matchCriteriaId":"29C4A364-ED36-4AC8-AD1E-8BD18DD9324D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc2:*:*:*:*:*:*","matchCriteriaId":"4049867A-E3B2-4DC1-8966-0477E6A5D582"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc3:*:*:*:*:*:*","matchCriteriaId":"A2507858-675B-4DA2-A49E-00DB54700CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc4:*:*:*:*:*:*","matchCriteriaId":"0A25EA55-3F1C-440C-A383-0BB9556C9508"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc5:*:*:*:*:*:*","matchCriteriaId":"B2665356-4EF5-4543-AD15-67FDB851DCCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc6:*:*:*:*:*:*","matchCriteriaId":"26E7609B-B058-496D-ACDD-7F69FBDE89E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31:rc7:*:*:*:*:*:*","matchCriteriaId":"210BF049-8B3C-4ACC-BF8E-2C3551477602"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3151BF-4BEE-4415-ABA2-E6D40673E591"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*","matchCriteriaId":"1037E899-6DB3-423D-9AD0-FE79A67E9681"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*","matchCriteriaId":"E4DD2F05-F990-417A-BD6D-CD9A7EB2BD55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*","matchCriteriaId":"0634D7FE-7685-4669-8EF9-54E99683D28E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*","matchCriteriaId":"9EEEB962-0E8D-402B-989E-96875453C609"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*","matchCriteriaId":"0042D9C4-7081-4DC2-A5B5-2649374B44F3"}]}]}],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78f1ddbb498283c2445c11b0dfa666424c301803","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38276","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43315","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0147.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11103","source":"cve@mitre.org"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78f1ddbb498283c2445c11b0dfa666424c301803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4309","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 stream in a media file, as demonstrated by an AVI file."},{"lang":"es","value":"Desbordamiento del búfer de la memoria dinámica en el codec Intel Indeo41 para Windows Media Player en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2  permite a atacantes remotos ejecutar código arbitrario a través de un valor grande de tamaño en una grabación de película en un stream IV41 en un fichero multimedia, como se demuestra en un fichero AVI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:*:*:*:*:*:*:*:*","matchCriteriaId":"5044AB3C-7E2F-45F8-8392-7E99FC198787"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/37592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.microsoft.com/kb/954157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60855","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508324/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37251","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-089/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54642","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12188","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.microsoft.com/kb/954157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508324/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-089/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4310","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations, as demonstrated by data in an AVI file."},{"lang":"es","value":"Desbordamiento del búfer de la pila en el codec Intel Indeo41 codec para Windows Media Player en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 permite a atacantes remotos ejecutar código arbitrario a través de datos de vídeo comprimidos debidamente manipulados en un stream en un fichero multimedia que lleve a demasiadas iteraciones, como se demuestra con un fichero AVI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windows:media_player:*:*:*:*:*:*:*:*","matchCriteriaId":"6F1BF7A3-8B97-43CE-B4A1-CBF063AA0C61"}]}]}],"references":[{"url":"http://secunia.com/advisories/37592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.microsoft.com/kb/954157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508335/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37251","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-090/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54643","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11596","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.microsoft.com/kb/954157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508335/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-09-090/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4311","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Paul Byrne of NGS Software.  NOTE: this might overlap CVE-2008-3615."},{"lang":"es","value":"Vulnerabilidad sin especificar en el codec Indeo en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 permite a atacantes remotos ejecutar código arbitrario a través de contenido multimedia manipulado, como reporto Paul Byrne de NGS Sfotware. NOTA: Esta probablemente se solape con CVE-2008-3615."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/37592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/954157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37251","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11975","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/kb/954157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4312","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media content, as reported to Microsoft by Dave Lenoe of Adobe."},{"lang":"es","value":"Vulnerabilidad sin especificar en el codec Indeo en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2  permite a atacantes remotos ejecutar codigo arbitrario a través de contenido multimedia, como reporto Dave Lenoe de Adobe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/37592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/954157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37251","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11573","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/kb/954157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4313","sourceIdentifier":"cve@mitre.org","published":"2009-12-13T01:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap corruption) or execute arbitrary code via malformed data in a stream in a media file, as demonstrated by an AVI file."},{"lang":"es","value":"ir32_32.dll 3.24.15.3 en el codec Indeo32 en Microsoft Windows 2000 SP4, XP SP2 y SP3, y Server 2003 SP2 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria libre) o ejecutar código arbitrario a través de datos malformados en un stream en un fichero multimedia, como se demuestra en un fichero AVI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*","matchCriteriaId":"2978BF86-5A1A-438E-B81F-F360D0E30C9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","matchCriteriaId":"F7EFB032-47F4-4497-B16B-CB9126EAC9DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","matchCriteriaId":"6881476D-81A2-4DFD-AC77-82A8D08A0568"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","matchCriteriaId":"CE477A73-4EE4-41E9-8694-5A3D5DC88656"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*","matchCriteriaId":"FFAC3F90-77BF-4F56-A89B-8A3D2D1FC6D6"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=835","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/954157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37251","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12242","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/kb/954157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/955759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/976138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/954157.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/60858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4314","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T17:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device."},{"lang":"es","value":"Sun Ray Server Software v4.1 en Solaris v10, cuando esta activado el Multi-Group Hotdesking (AMGH) esta activo, responde a una acción de salida de sesión mediante el logueo del usuario de forma inmediata, lo que hace mas facil a atacantes próximos físicamente obtener el acceso a la sesión utilizando un cliente desatendido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:sparc:*:*:*:*:*","matchCriteriaId":"0348F9F9-4ED5-4454-A9EB-B0E93E400D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:4.1:*:x86:*:*:*:*:*","matchCriteriaId":"3B8D2C71-24C3-4670-91F0-BE54E8DD1622"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*","matchCriteriaId":"7FBA68F0-4577-46F5-A754-D365B6EFF872"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*","matchCriteriaId":"E79CFAA6-A08A-4C70-A3D9-B02C29A17FF2"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139548-03-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268228-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139548-03-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-268228-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4315","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T21:17:18.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in admin/ajaxsave.php in Nuggetz CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to create or modify arbitrary files via a .. (dot dot) in the nugget parameter and a modified pagevalue parameter, as demonstrated by creating and accessing a .php file to execute arbitrary PHP code."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en admin/ajaxsave.php in Nuggetz CMS v1.0, cuando magic_quotes_gpc esta activado, permite a atacantes remotos crear o modificar ficheros de forma arbitraria a través de .. (punto punto) en el parámetro \"nugget\"  a modificar el parámetro \"pagevalue\", como se demuestra mediante la creación y acceso de un fichero php para ejecutar código PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nuggetz:nuggetz_cms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3E2F4476-97C3-4300-A63D-1EF9BE374C7D"}]}]}],"references":[{"url":"http://osvdb.org/60902","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/nuggetz-exec.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nuggetz.co.uk/versionhistory.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54699","source":"cve@mitre.org"},{"url":"http://osvdb.org/60902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/nuggetz-exec.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nuggetz.co.uk/versionhistory.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4316","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T21:17:18.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en searchresults_main.php en ZeeLyrics v3x permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a traves del parametro \"keyword\". NOTA: La procedencia de esta información es desconocida, algunos detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeeways:zeelyrics:3x:*:*:*:*:*:*:*","matchCriteriaId":"B2705596-9945-49D2-9A13-D9DA2B69BE68"}]}]}],"references":[{"url":"http://secunia.com/advisories/37742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4317","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T21:17:18.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML via the sid parameter in a showcat action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php in ScriptsEz Ez Cart permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro \"sid\" en una accion showcat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"463A0D66-B628-4BBB-823D-9F4CA9709A7C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/ezcart-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10405","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0912-exploits/ezcart-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4318","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T21:17:18.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Real Estate Manager v1.0.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro lang. NOTA: Algunos detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realestatephp:real_estate_manager:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"57B3A6B8-A1D4-40A0-8EAC-56E061AF2CA0"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/rem101-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10413","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0912-exploits/rem101-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4319","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T21:17:18.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in js/bbcodepress/bbcode-form.php in eoCMS 0.9.03 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BBCODE_path parameter."},{"lang":"es","value":"Vulnerabilidad de inyección remota de fichero PHP en js/bbcodepress/bbcode-form.php en eoCMS v0.9.03, cuando register_globals esta activado, permite a atacantes remotos ejecutar PHP de forma arbitraria a través de una URL en el parámetro \"BBCODE_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eocms:eocms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.03","matchCriteriaId":"414C870F-BC42-42F5-B92C-AA9591A92E82"}]}]}],"references":[{"url":"http://secunia.com/advisories/37749","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10422","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4320","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T23:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en searchform.php en The Next Generation of Genealogy Sitebuilding (TNG) v7.1.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro \"msg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lythgoes:the_next_generation_of_genealogy_sitebuilding:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6D78E614-B629-4583-A0C1-147CE668B443"}]}]}],"references":[{"url":"http://secunia.com/advisories/37711","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10387","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4321","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T23:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"extras/curltest.php en Zen Cart v1.3.8 y v1.3.8a, y posiblemente otras versiones, permite a atacantes remotos leer ficheros arbitrarios a través de un fichero file:// URI. NOTA: Algunos de los detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"AE050A6F-DF2A-47E8-8188-59BC00C11E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:1.3.8a:*:*:*:*:*:*:*","matchCriteriaId":"8B91E4C9-31A7-4CA6-8641-F0D4AEA543BE"}]}]}],"references":[{"url":"http://osvdb.org/60892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.acunetix.com/blog/websecuritynews/acusensor-curl-and-zen-cart/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508340/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37283","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=142784","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54687","source":"cve@mitre.org"},{"url":"http://osvdb.org/60892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.acunetix.com/blog/websecuritynews/acusensor-curl-and-zen-cart/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508340/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=142784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4322","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message."},{"lang":"es","value":"extras/ipn_test_return.php in Zen Cart permite a atacantes remotos obtener información sensible a través de una petición, lo que permite descubrir la ruta de instalación en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"BAA0187F-0A11-45C5-B212-0FA5C46A113C"}]}]}],"references":[{"url":"http://www.acunetix.com/blog/websecuritynews/acusensor-curl-and-zen-cart/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508340/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.zen-cart.com/forum/showthread.php?t=142784","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.acunetix.com/blog/websecuritynews/acusensor-curl-and-zen-cart/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508340/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zen-cart.com/forum/showthread.php?t=142784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4323","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T23:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation for Zen Cart stores sensitive information and insecure programs under the (1) docs, (2) extras, and (3) zc_install folders, and (4) install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different vulnerabilities than CVE-2009-4321 and CVE-2009-4322."},{"lang":"es","value":"La instalacion para Zen Cart almacena informacion sensible y progrmas inseguros bajo (1) docs, (2) extras, y (3) zc_install folders, y (4) install.txt, lo que permite a atacantes remotos obtener informacion sensible, borrar la base de datos, y dirigir otros ataques a traves de una peticion directa, una vulnerabilidad diferente de CVE-2009-4321 y CVE-2009-4322."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen-cart:zen_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"BAA0187F-0A11-45C5-B212-0FA5C46A113C"}]}]}],"references":[{"url":"http://www.zen-cart.com/forum/showthread.php?t=142784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/forum/showthread.php?t=142784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4324","sourceIdentifier":"psirt@adobe.com","published":"2009-12-15T02:30:00.217","lastModified":"2025-10-22T01:15:35.287","vulnStatus":"Deferred","cisaExploitAdd":"2022-06-08","cisaActionDue":"2022-06-22","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009."},{"lang":"es","value":"La vulnerabilidad de uso de la memoria previamente liberada (Use-after-free) en la función Doc.media.newPlayer en el archivo Multimedia.api en Adobe Reader y Acrobat versión 9.x anterior a 9.3, y versión 8.x anterior a 8.2 en Windows y Mac OS X, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo PDF creado utilizando una transmisión comprimida ZLib, tal como se explotó “in the wild” en diciembre de 2009."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.2","matchCriteriaId":"9670133C-09FA-41F2-B0F7-BFE960E30B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.3","matchCriteriaId":"EA95CC75-BF25-4BEB-B646-ACDBBE32AF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.2","matchCriteriaId":"3A8B3441-727A-4A78-A5A4-5A5011075510"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.3","matchCriteriaId":"AADB6D5C-5448-4FF7-BB7B-3641EA56194E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*","matchCriteriaId":"C76D0C17-2AFF-4209-BBCD-36166DF7F974"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:sp2:*:*:*:*:*:*","matchCriteriaId":"6A3B50EE-F432-40BE-B422-698955A6058D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*","matchCriteriaId":"1193A7E6-DCB4-4E79-A509-1D6948153A57"}]}]}],"references":[{"url":"http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html","source":"psirt@adobe.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html","source":"psirt@adobe.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","source":"psirt@adobe.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/60980","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37690","source":"psirt@adobe.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38138","source":"psirt@adobe.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38215","source":"psirt@adobe.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-07.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","source":"psirt@adobe.com","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/508357","source":"psirt@adobe.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37331","source":"psirt@adobe.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://www.symantec.com/connect/blogs/zero-day-xmas-present","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","source":"psirt@adobe.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3518","source":"psirt@adobe.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547799","source":"psirt@adobe.com","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54747","source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795","source":"psirt@adobe.com","tags":["Broken Link"]},{"url":"http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://osvdb.org/60980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/508357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.symantec.com/connect/blogs/zero-day-xmas-present","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/3518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-4324","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2009-4325","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite \"external memory\" via unknown vectors, related to a missing \"check for null pointers.\""},{"lang":"es","value":"El componente Client Interfaces en IBM DB2 v8.2 anterior a FP18, v9.1 anterior a FP8, v9.5 anterior a FP5 y v9.7 anterior a FP1, no valida adecuadamente un puntero no especificado, lo que permite a atacantes sobrescribir la memoria externa a través de vectores desconocidos. Relacionado con la pérdida de \"comprobación de punteros nulos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:*:*:*:*:*:*:*","matchCriteriaId":"64D7ACC0-4CF4-4B60-902C-C47DFCD097A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*","matchCriteriaId":"55ABF9A3-7776-4C0B-A6CC-45955E42DA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp10:*:*:*:*:*:*","matchCriteriaId":"68B64CBF-7A11-4AA9-8C44-77E891DD2446"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp11:*:*:*:*:*:*","matchCriteriaId":"9AEB3163-D0D0-4E43-AF64-479D4AEE90C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp12:*:*:*:*:*:*","matchCriteriaId":"0E3BC415-D3D2-48FC-9B6A-34596A371ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp13:*:*:*:*:*:*","matchCriteriaId":"BA84C4CF-D486-4D21-A909-C311BF70CE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp14:*:*:*:*:*:*","matchCriteriaId":"4BC02E85-73EC-408B-A31E-F2DDFEA8EF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp15:*:*:*:*:*:*","matchCriteriaId":"B7CB2C4F-A038-461E-9FAB-FA4186F83817"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp16:*:*:*:*:*:*","matchCriteriaId":"6DA81141-A4CF-42AD-AFE4-6336AF77ED9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp17:*:*:*:*:*:*","matchCriteriaId":"5BF822C3-48F0-4B13-9D81-FA04DC5B9DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:*","matchCriteriaId":"9DF77950-22DE-4BA2-A10F-10953F6119E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:*","matchCriteriaId":"57F66472-61EC-4467-ACF6-2893BF9E4050"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:*","matchCriteriaId":"403EF6EC-9EEF-40F1-BA5C-F6211AADC9A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*","matchCriteriaId":"2CE8E119-58C7-4BF0-9C74-93F44E4FC732"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:*","matchCriteriaId":"2F16D689-D091-47AA-96EC-6B419D4A6CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp7:*:*:*:*:*:*","matchCriteriaId":"AAEFCEBE-4CBC-4301-BEC6-9D9C9C3E0539"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp8:*:*:*:*:*:*","matchCriteriaId":"B7130E8C-3D8D-4AAF-9D42-55236131989D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:8.2:fp9:*:*:*:*:*:*","matchCriteriaId":"496D052A-CD28-4888-A59C-4F45E9F1471F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"FA8ABABB-F84D-41F0-A894-56911AF6E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64702","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI72709","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI74500","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI74504","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI72709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI74500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI74504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4326","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces \"repeating\" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicting a value."},{"lang":"es","value":"La función RAND scalar en el componente Common Code Infrastructure en IBM DB2 v9.5 anterior a FP5 y v9.7 anterior a FP1, cuando se usa la característica Database Partitioning Feature (DPF), provoca repetición (\"repeting\") en las variables de retorno, lo que podría permitir a atacantes evitar los mecanismos de protección basado en la predicción de un valor aleatorio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4327","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (memory consumption) via unspecified vectors."},{"lang":"es","value":"El componente Common Code Infrastructure en IBM DB2 v9.5 anterior a FP5 y v9.7 anterior a FP1, no valida adecuadamente el tamaño del pool de memoria durante un intento de creación, lo que permite a atacantes provocar una denegación de servicio (consumo de memoria) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4328","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (server trap) by calling a SQL stored procedure in unknown circumstances."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente DRDA Services en IBM DB2 v9.5 anterior a FP5, permite a usuarios autenticados remotamente provocar una denegación de servicio (trampa del servidor) mediante la llamada en extrañas circunstancias, a un procedimiento de almacenado SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64298","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4329","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (segmentation fault) by modifying the db2ra data stream sent in a request from the Load Utility."},{"lang":"es","value":"Vulnerabilidad sin especificar en el componente Engine Utilities en IBM DB2 v9.5 anterior a FP5, permite a usuarios autenticados remotamente provocar una denegación de servicio (fallo de segmentación) mediante la modificación de la cadena db2ra enviada en una petición desde la Utilidad de Carga (Load Utility)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4330","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en db2licm en el componente Engine Utilities en IBM DB2 v9.5 anterior a FP5 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62501","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4331","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors."},{"lang":"es","value":"El componente Install en IBM DB2 v9.5 anterior FP5 y v9.7 anterior a FP1, configura las secuencias de comandos High Availability (HA) los permisos de archivos y la autorización de configuración de manera incorrecta, lo que supone un impacto y vectores de ataque locales desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4332","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/476.html\r\n\r\n'CWE-476: NULL Pointer Dereference'","cveTags":[],"descriptions":[{"lang":"en","value":"db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service (NULL pointer dereference and application termination) via unspecified vectors."},{"lang":"es","value":"db2pd en el  Problem Determination en IBM DB2 v9.1 anterior a FP7 y v9.5 anterior a FP5, permite a atacantes provocar una denegación de servicio (deferencia a puntero NULL y terminación de aplicación) a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"FA8ABABB-F84D-41F0-A894-56911AF6E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28509","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28510","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4333","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command."},{"lang":"es","value":"El componente Relational Data Services en IBM DB2 v9.5 anterior a FP5, permite a atacantes obtener el argumento \"password\" (contraseña) desde la declaración SET ENCRYPTION PASSWORD a través de ventores que involucran el comando GET SNAPSHOT FOR DYNAMIC SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4334","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file."},{"lang":"es","value":"El componente Self Tuning Memory Manager (STMM) en IBM DB2 v9.1 anterior a FP8, v9.5 anterior FP5 y v9.7 anterior a FP1, usa permisos 0666 para el archivos de log STMM, lo que permite a usuarios locales provocar una denegación de servicio o tener un impacto desconocido relacionado con este archivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B28091A-8772-41DC-9D91-D5359CDDA7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"FA8ABABB-F84D-41F0-A894-56911AF6E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64019","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ48106","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50355","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ48106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4335","sourceIdentifier":"cve@mitre.org","published":"2009-12-16T18:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to \"remote exploits.\""},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en el paquete de procedimientos de almacenado en el componente Spatial Extender en IBM DB2 v9.5 anterior a FP5, tiene un impacto y vectores de ataque desconocidos. Relacionado con \"exploits remotos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*","matchCriteriaId":"11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*","matchCriteriaId":"61252AF9-A231-442A-A473-BA0608323BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*","matchCriteriaId":"EB37A1AA-58F0-4A39-8E38-C70692CE67BF"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55007","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4336","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión 'Calendario de la Diocesis de Portsmouth' (pd_calendar) v0.4.1 y anteriores para TYPO3 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simon_rundell:pd_calendar_today:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.1","matchCriteriaId":"83DE9175-ABF0-4047-8FAF-4CA6A19B33FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_rundell:pd_calendar_today:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5BD45561-D458-46CC-B3C6-E37F04967BE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54780","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4337","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2008-6691."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en la extensión 'Diocese of Portsmouth Calendar' (pd_calendar) v0.4.1 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores desconocidos. Se trata de una vulnerabilidad diferente a CVE-2008-6691."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simon_rundell:pd_calendar_today:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.1","matchCriteriaId":"83DE9175-ABF0-4047-8FAF-4CA6A19B33FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_rundell:pd_calendar_today:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5BD45561-D458-46CC-B3C6-E37F04967BE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54779","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4338","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en la extensión 'Flash slideshow' (slideshow) v0.2.2 de TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jean-david_gadina:slideshow:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"91612895-6E84-4293-A037-62B874C726DD"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54781","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4339","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en la extensión 'Suscription' (mf_subscription) v0.2.2 de TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephan_vits:mf_subscription:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"32C5BDA9-1A8A-4709-8902-2D91074819E5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54782","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4340","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados en la extensión \"Busqueda no indexada\"  (no_indexed_search) v0.2.0 para TYPO3 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mischa_heissmann:no_indexed_search:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"708F8B43-10DB-45D0-80C4-3CD632139CF9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54784","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4341","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en la extensión \"Busqueda no indexada\" (no_indexed_search) v0.2.0 para TYPO3 a atacantes remotos ejecutar comandos SQL a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mischa_heissmann:no_indexed_search:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"708F8B43-10DB-45D0-80C4-3CD632139CF9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54783","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54783","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4342","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Job Exchange (jobexchange) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en la extensión Bolsa de Empleo (jobexchange) v0.0.3 para TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:melvin_mach:jobexchange:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CDA6172B-6C12-461C-A0B1-3A97E9999BA2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54785","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4343","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Training Company Database (trainincdb) extension 0.4.7 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión de TYPO3 'base de datos de empresa de formación' (trainincdb) v0.4.7 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dominic_eckart:trainincdb:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"98AA4628-E256-42C5-B927-1ED1EF17772A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54786","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4344","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión ZID Linkliste (zid_linklist) v1.0.0 para TYPO3 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tobias_sommer:zid_linklist:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BE4EA75E-618D-4222-A353-066AB6D54CC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54789","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4345","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the vShoutbox (vshoutbox) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecuciónde  comandos en sitios cruzados en la extensión vShoutbox  v0.0.1 de TYPO3 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jonas_renggli:vshoutbox:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CAAE4126-B680-4544-8D58-8E31CEFFC49B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54787","source":"cve@mitre.org"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4346","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Frontend news submitter with RTE (fe_rtenews) extension 1.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados en la interfaz de envío de noticias de TYPO3 con la extensión RTE (fe_rtenews) v1.4.1 y anteriores permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toni_milovan:fe_rtenews:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"45CB7FF2-6C2A-481D-8659-012564D6DE0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4347","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en daloradius-users/login.php en daloRADIUS v0.9-8 y anteriores permite a atacantes remotos inyectar HTML o scripts web  a través del parámetro 'error'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9-8","matchCriteriaId":"CDFD5730-AAD5-47D2-8A9D-4786C87DD198"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.7:*:*:*:*:*:*:*","matchCriteriaId":"5FEFB4EC-2C9F-4821-98A0-EDDB5DD6C0BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.8:*:*:*:*:*:*:*","matchCriteriaId":"F8EEADA5-D848-4390-82F4-20EF7CF1B797"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9:*:*:*:*:*:*:*","matchCriteriaId":"7FFBF412-71C6-481B-BB4D-13CBCF159F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-1:*:*:*:*:*:*:*","matchCriteriaId":"BE075C1F-7737-48ED-AD08-A468B9C53548"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-2:*:*:*:*:*:*:*","matchCriteriaId":"08381DEB-CA39-43E8-8733-9EED447CCFFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-3:*:*:*:*:*:*:*","matchCriteriaId":"2294CC94-53C0-48F8-9561-BFAB38E227BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-4:*:*:*:*:*:*:*","matchCriteriaId":"0FBFD62C-985B-4AD6-8401-E8D7A76C1E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-5:*:*:*:*:*:*:*","matchCriteriaId":"1E3AB6B4-337B-47F7-B9C0-105174FAF877"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-6:*:*:*:*:*:*:*","matchCriteriaId":"39D3034B-00BE-45EF-A901-D247DFEC570E"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-7:*:*:*:*:*:*:*","matchCriteriaId":"1F1B4C24-5D42-47BB-A5FA-72809BA2A643"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-7:rc1:*:*:*:*:*:*","matchCriteriaId":"DA9C7E92-C7EF-4D6E-93AD-6F7E667BA37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:liran_tal:daloradius:0.9-7:rc2:*:*:*:*:*:*","matchCriteriaId":"27F78DFA-0A57-4AB1-B714-0D40DB3A98F2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/daloradius-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508473/100/0/threaded","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/daloradius-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508473/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4348","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146."},{"lang":"es","value":"Una vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en NewsScript Harold Bakker (HB-NS) v1.3 permite a atacantes remotos inyectar HTML o scripts web a través del parámetro 'topic'  en una acción 'topic'. Se trata de un vector diferente a CVE-2006-2146."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haroldbakker:hb-ns:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5D01FF20-464C-42BA-86A2-B699253AE2BB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10466","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4349","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.937","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en administration/administrators.php en Link Up Gold v5.0 permite a atacantes remotos secuestrar la autenticación de los administradores en solicitudes de creación de cuentas administrativas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebscripts:link_up_gold:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B23DCC94-F227-4B05-8D42-1C5FB1B01003"}]}]}],"references":[{"url":"http://osvdb.org/61017","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/linkupgold-xsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37712","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10436","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3532","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54759","source":"cve@mitre.org"},{"url":"http://osvdb.org/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/linkupgold-xsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4350","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T17:30:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the (1) matchings[id] or (2) matchings[title] parameters in a Login action to an unspecified program, or (3) the matchings[id] parameter in a search action to index.php, a different vector than CVE-2008-3250.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en index.php en Arctic Issue Tracker v2.1.1 permite a atacantes remotos ejecutar comandos SQL a través de la los parámetros (1) matchings[id] o (2) matchings[title] en una acción de login a un programa sin especificar, o (3) matchings[id] en una acción de búsqueda a index.php. Se trata de un vector diferente a los de CVE-2008-3250. NOTA: algunos de estos detalles se obtienen a partir de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boldfx:arctic_issue_tracker:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"44314108-8A10-472A-8D26-9778B054C294"}]}]}],"references":[{"url":"http://osvdb.org/60957","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/0912-exploits/arcticissue-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37723","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/60957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/0912-exploits/arcticissue-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4351","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T18:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email (aka username) parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en admin/loginaction.php en WSCreator 1.1, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos ejecutar comandos SQL a través parámetro correo electrónico (o nombre de usuario)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wscreator:wscreator:1.1:*:*:*:*:*:*:*","matchCriteriaId":"619AA858-5D5D-4A82-87A0-C332E91174E1"}]}]}],"references":[{"url":"http://osvdb.org/60987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37753","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10446","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508471/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54791","source":"cve@mitre.org"},{"url":"http://osvdb.org/60987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508471/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4352","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T18:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0939, allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Cc, and (4) Bcc parameters."},{"lang":"es","value":"Multiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en Transware Active! mail 2003 build 2003.0139.0871 y anteriores, y posiblemente otras versiones antes de 2003.0139.0939, permite a atacantes remotos inyectar HTML o scripts web a través de los parámetros (1) De, (2), para  (3), CC, y (4) CCO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active_mail_2003:*:*:*:*:*:*:*:*","matchCriteriaId":"1320CAA1-E89A-4599-91E9-388D8F9BCF42"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN49083120/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000075.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.transware.co.jp/support_am/security/vulnerability2.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54750","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN49083120/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.transware.co.jp/support_am/security/vulnerability2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4353","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T18:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does not remove the session ID in a Referer URL, which allows remote attackers to hijack web sessions via vectors such as an email with an embedded URL."},{"lang":"es","value":"La versión para moviles de Transware Active! mail 2003 build 2003.0139.0871 y anteriores, y posiblemente otras versiones anteriores a v2003.0139.0911, no quita el identificador de sesión en un Referer, lo que permite secuestrar sesiones web a atacantes remotos  a través de vectores tales como un correo electrónico con una URL incorporada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active\\!_mail:*:-:mobile:*:*:*:*:*","versionEndIncluding":"2003","matchCriteriaId":"5A2EED3A-50BD-48EA-9F9A-AA5711E2F6D1"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN85821104/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000076.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.transware.co.jp/support_am/security/vulnerability3.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54751","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN85821104/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.transware.co.jp/support_am/security/vulnerability3.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4354","sourceIdentifier":"cve@mitre.org","published":"2009-12-17T18:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the \"secure\" flag for cookies in SSL sessions."},{"lang":"es","value":"Transware Active! mail 2003 build 2003.0139.0871 y anteriores no asegura correctamente el identificador de sesión en una cookie de sesión, lo que permite secuestrar sesiones web a atacantes remotos. Una vulberabilidad probablemente relacionada con el flag \"secure\" para las \"cookies\" en las sesiones SSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active\\!_mail:*:*:*:*:*:*:*:*","versionEndIncluding":"2003","matchCriteriaId":"B0CFFAA1-1385-46DD-A3EA-E0F3876AC997"},{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active\\!_mail:1.422:*:*:*:*:*:*:*","matchCriteriaId":"981485E0-5080-4F32-B50B-B5695645C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active\\!_mail:2.0:*:*:*:*:*:*:*","matchCriteriaId":"449AD2C6-08F0-4B92-8F2C-6D919B68E850"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN36207497/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000077.html","source":"cve@mitre.org"},{"url":"http://www.transware.co.jp/support_am/security/vulnerability1.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54752","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN36207497/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.transware.co.jp/support_am/security/vulnerability1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4356","sourceIdentifier":"cve@mitre.org","published":"2009-12-18T19:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file."},{"lang":"es","value":"Múltiples desbordamientos de entero en la los filtros jpeg.w5s y png.w5s de Winamp v5.57 permiten a atacantes remotos ejecutar código arbitrario a través de datos  (1) JPEG o (2) PNG mal formados en un archivo MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"5.56","matchCriteriaId":"37B0A6CA-7418-459E-A1F8-E107651D46A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.20a:*:*:*:*:*:*:*","matchCriteriaId":"B8C15A30-0EEF-4E58-BF7B-8F9E0814BF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:0.92:*:*:*:*:*:*:*","matchCriteriaId":"32036D60-6151-4607-B181-9E1C30ABAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.006:*:*:*:*:*:*:*","matchCriteriaId":"D38C91F9-8371-4BE5-8ADD-CC38BC7584E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:1.90:*:*:*:*:*:*:*","matchCriteriaId":"D0873D86-C669-4FEE-83F1-70B61E1DEE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6:*:*:*:*:*:*:*","matchCriteriaId":"32A6660A-1306-44C0-BA92-D57D0F3ADD03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.9:*:*:*:*:*:*:*","matchCriteriaId":"CE9C4D33-C782-4B10-95C2-050BCD745DF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:*:*:*:*:*:*","matchCriteriaId":"0EDFC131-873D-4564-B342-569DF45F31F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:*:*:*:*:*:*","matchCriteriaId":"8DEBD661-3253-47CC-91D9-B8F8E1211014"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:*:*:*:*:*:*","matchCriteriaId":"A45D7DD1-AFF9-441D-ABF1-A62FA0A9E05B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.90:*:*:*:*:*:*:*","matchCriteriaId":"6AD15C7B-64FF-42CF-ABD7-8973DDE89FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.92:*:*:*:*:*:*:*","matchCriteriaId":"E08D39F3-4FE4-4256-AA33-33C29826B423"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.95:*:*:*:*:*:*:*","matchCriteriaId":"830610D8-1B42-4560-ABB4-BA79DD145110"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:*:*:*:*:*:*:*","matchCriteriaId":"1D8A3244-F6FF-4865-BCAD-EAF784AE93DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.1:-:surround:*:*:*:*:*","matchCriteriaId":"5256EEBD-E142-4DCA-AC2E-97F20E32E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*","matchCriteriaId":"798885D9-B518-4C10-81B9-32AEB512C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6E5EF1ED-9AA1-41D0-8781-619F8F50F4FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*","matchCriteriaId":"FEF39A44-528E-4BE8-A923-FFB53C2378F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*","matchCriteriaId":"4E02CCF2-2335-4F08-8061-6CFD7C8B265A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:*:*:*:*:*:*:*","matchCriteriaId":"5D8C02C8-508A-4A6C-8911-12FB9B183C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:c:*:*:*:*:*:*","matchCriteriaId":"5785692F-D8FA-4D49-8872-CB8B2F173557"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:d:*:*:*:*:*:*","matchCriteriaId":"A6E85C52-1974-4F83-89AE-BB29FC897E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08:e:*:*:*:*:*:*","matchCriteriaId":"CB082F8B-A052-4D82-9D73-2BB35FBA19F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08d:*:*:*:*:*:*:*","matchCriteriaId":"07EE09C3-B49C-4D7D-BCD1-2AA2104A271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08e:*:*:*:*:*:*:*","matchCriteriaId":"6E4497A5-6E95-4CB3-999E-53BF890A23F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*","matchCriteriaId":"057B033C-7836-41E0-B184-F9D5DFC42C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.11:*:*:*:*:*:*:*","matchCriteriaId":"20168350-2AD1-4AF4-B0AA-4C2EBF616259"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*","matchCriteriaId":"B39A6931-A3CD-44A7-B170-53B803F321AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*","matchCriteriaId":"A651DB07-0A59-41C5-8788-6A3594A5023C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*","matchCriteriaId":"199953E2-C5A4-4D7B-9BB4-EF0B1364F117"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*","matchCriteriaId":"CE765893-71E4-4945-891C-976B97762CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*","matchCriteriaId":"BEF245AA-7038-4BD4-B2CB-8B0E59200875"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*","matchCriteriaId":"2DEF8714-56FC-4D6C-AE87-072ADD7698A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*","matchCriteriaId":"E808BCEF-FE45-44D3-B22B-404BC97B89C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*","matchCriteriaId":"BA6E29C6-CDC9-4C0B-8D79-8A5A11B563CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*","matchCriteriaId":"C14B9D39-BF74-4C69-92BF-DE6E71FDD911"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*","matchCriteriaId":"AD83F571-1A58-4159-AC2F-7261F135EF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*","matchCriteriaId":"BB054736-2F91-4EF3-B04F-80403676374F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*","matchCriteriaId":"287E954F-6A04-442A-B93E-CDD2ABEB357E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*","matchCriteriaId":"8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*","matchCriteriaId":"B58E9493-556E-4085-B337-AE211A28DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.53:*:*:*:*:*:*:*","matchCriteriaId":"4C4F66E7-7F61-4F59-9213-21598A3DFD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"1C6E95D5-D855-4CD4-B44B-66FF029EC823"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*","matchCriteriaId":"218E9850-70F5-4579-9549-47DD16ECD2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*","matchCriteriaId":"6C6A1F15-A3FA-40FB-980A-569F77E1D104"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.093:*:*:*:*:*:*:*","matchCriteriaId":"684ABC3F-57CB-490B-ADCB-501E0D234E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.094:*:*:*:*:*:*:*","matchCriteriaId":"3BB30030-A195-4626-AAED-D421454D911D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.111:*:*:*:*:*:*:*","matchCriteriaId":"ADB3FCB9-6CF4-4513-9FB9-D01C58079060"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.112:*:*:*:*:*:*:*","matchCriteriaId":"913962D9-84AA-4474-800E-5DABF37D52A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.531:*:*:*:*:*:*:*","matchCriteriaId":"35698C89-EACF-4ABF-BA67-AF59B8BD2928"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*","matchCriteriaId":"951898A7-A060-4853-8C4E-99927794C0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.551:*:*:*:*:*:*:*","matchCriteriaId":"AEB33D5A-C2A0-4526-8774-89BA4C079533"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*","matchCriteriaId":"5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"}]}]}],"references":[{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508532/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37387","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3576","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Winamp_png_w5s_PNG_Data_Processing_Integer_Overflow_PoC_3576274.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15743","source":"cve@mitre.org"},{"url":"http://forums.winamp.com/showthread.php?threadid=315355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/508532/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/exploits/Winamp_png_w5s_PNG_Data_Processing_Integer_Overflow_PoC_3576274.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4357","sourceIdentifier":"cve@mitre.org","published":"2009-12-18T19:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors."},{"lang":"es","value":"La interfaz web (también conocida como CQWeb) de IBM Rational ClearQuest antes de v7.1.1 no  gestiona adecuadamente el uso de URLs antiguas de conexión automática, lo que podría \r\npermitir descubrir las contraseñas de cuentas de usuario los atacantes remotos mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"D3717DBA-FF31-4542-BE04-FD2B89447B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D00DF56-BFB1-4B91-95A4-0A2F33074AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"58FCE9A7-B9C0-470D-A71D-2A94F826A907"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"63308FC2-AE4D-4D50-B969-6AB28A77E550"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"89778E9A-90E8-4467-A33B-5F2BB0762A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearcase:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6E293794-7223-46EE-BA6A-EF0535566312"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:5.00:*:*:*:*:*:*:*","matchCriteriaId":"49CA0764-1ACB-4173-8396-36DD513CD538"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:5.20:*:*:*:*:*:*:*","matchCriteriaId":"66343779-B8F9-4338-B949-3838AC7471B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.00:*:*:*:*:*:*:*","matchCriteriaId":"8A02B2A2-7D88-47AB-95C8-E38A0C174A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.10:*:*:*:*:*:*:*","matchCriteriaId":"3A5E8200-BB7C-48DE-B946-27535E6F5D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.12:*:*:*:*:*:*:*","matchCriteriaId":"3C470CD7-AD2F-450A-BDD2-97328BCD3375"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.13:*:*:*:*:*:*:*","matchCriteriaId":"6B751150-4AA5-4D2A-992D-5183402F5B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.14:*:*:*:*:*:*:*","matchCriteriaId":"F41B74B7-3941-4B02-A2E5-43A506A593E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.15:*:*:*:*:*:*:*","matchCriteriaId":"741D5574-B635-46F5-BAC5-5427E0B305CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:6.16:*:*:*:*:*:*:*","matchCriteriaId":"3C11BD51-B4FB-4717-B614-EC2785C20493"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0:*:*:*:*:*:*:*","matchCriteriaId":"37B059D3-5A21-48FA-8D9D-F0DEB8CBB909"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"266BE1E1-AD1C-49DD-81C6-4840EE36CDCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2EBBBF4D-97FD-4DBC-B296-4235BAD38F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"741C008D-917B-44BB-AB20-6A662668B526"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"00E3D80A-849E-4739-8905-373AE0C0189D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"70B52763-5940-4249-BEB4-C14C008DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BEB65A10-EE74-43DF-8D05-B39551F57D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:2007:*:*:*:*:*:*:*","matchCriteriaId":"A04B4977-F5C0-4438-BBB2-541A3221082D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_clearquest:2008:*:*:*:*:*:*:*","matchCriteriaId":"900B37B1-944F-4B18-97AD-E4696F6E4F1D"}]}]}],"references":[{"url":"http://secunia.com/advisories/37811","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023370","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37385","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3580","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1023370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4358","sourceIdentifier":"cve@mitre.org","published":"2009-12-20T02:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorSolution":"Per: http://security.freebsd.org/advisories/FreeBSD-SA-09:17.freebsd-update.asc\r\n\r\n\"2) To patch your present system:\r\n\r\nThe following patch has been verified to apply to FreeBSD 6.3, 6.4,\r\n7.1, 7.2, and 8.0 systems.\r\n\r\na) Download the relevant patch from the location below, and verify the\r\ndetached PGP signature using your PGP utility.\r\n\r\n# fetch http://security.FreeBSD.org/patches/SA-09:17/freebsd-update.patch\r\n# fetch http://security.FreeBSD.org/patches/SA-09:17/freebsd-update.patch.asc\"","cveTags":[],"descriptions":[{"lang":"en","value":"freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read copies of sensitive files after a (1) freebsd-update fetch (fetch) or (2) freebsd-update upgrade (upgrade) operation."},{"lang":"es","value":"FreeBSD-update en FreeBSD v8.0, v7.2, v7.1, v6.4, y v6.3 utiliza permisos inseguros en su directorio de trabajo (/var/db/Freebsd-update por defecto), lo que permite leer las copias de archivos confidenciales a usuarios locales  después de una operacion de actualización (1) freebsd-update (fetch) o (2) freebsd-update (upgrade)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*","matchCriteriaId":"A4F7F02A-C845-40BF-8490-510A070000F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"F948527C-A01E-4315-80B6-47FACE18A34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3CF1F9EF-01AF-4708-AE02-765360AF3D66"}]}]}],"references":[{"url":"http://secunia.com/advisories/37575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:17.freebsd-update.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37190","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:17.freebsd-update.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-4359","sourceIdentifier":"cve@mitre.org","published":"2009-12-20T02:30:01.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the categoryid parameter."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en folder.php del módulo SmartMedia v0.85 Beta para XOOPS permite a atacantes remotos inyectar HTML o scripts web  a través del parámetro 'categoryid'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc-andre_lanciault:smartmedia:0.85:beta:*:*:*:*:*:*","matchCriteriaId":"DF362ECC-C39E-4F44-BB7B-64A8950F029E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0911-exploits/xoopssmartmedia-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37156","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54488","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0911-exploits/xoopssmartmedia-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4360","sourceIdentifier":"cve@mitre.org","published":"2009-12-20T02:30:01.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web script or HTML via the id parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en modules/content/index.php en el módulo 'Content' v0.5 para XOOPS permite a atacantes remotos inyectar HTML o scripts web a través del parámetro 'id'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:handcoders:content_module:0.5:*:*:*:*:*:*:*","matchCriteriaId":"658D78F9-80B4-40FB-A485-3D59E35E930B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops:*:*:*:*:*:*:*:*","matchCriteriaId":"EB325E21-BD1E-4C12-B3B1-7210AFFD1235"}]}]}],"references":[{"url":"http://securityreason.com/exploitalert/7494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0911-exploits/xoopscontent-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54489","source":"cve@mitre.org"},{"url":"http://securityreason.com/exploitalert/7494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.packetstormsecurity.org/0911-exploits/xoopscontent-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4361","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via a long string argument.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer en qoslist en IBM AIX v6.1 permite a usuarios locales provocar una denegación de servicio (caída de aplicación) o probablemente obtener privilegios mediante argumentos con cadenas largas. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/37833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66917","source":"cve@mitre.org"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66966","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37413","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4362","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in qosmod in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges via long string arguments.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer en qosmod en IBM AIX v6.1 permite a usuarios locales provocar una denegación de servicio (caída de aplicación) o probablemente obtener privilegios mediante argumentos con cadenas largas. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/37833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66918","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37412","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg1IZ66967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4363","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not properly handle data: URIs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via data:text/html values for the HREF attribute of an A element in an HTML e-mail message.  NOTE: the vendor states that the issue is caused by \"an XSS vulnerability in Firefox browsers.\""},{"lang":"es","value":"Text_Filter/lib/Horde/Text/Filter/Xss.php en Horde Application Framework versiones anteriores a v3.3.6, Horde Groupware versiones anteriores a v1.2.5, y Horde Groupware Webmail Edition versiones anteriores a v1.2.5 no maneja adecuadamente data: URIs, permitiendo a atacantes remotos dirigir ataques de secuencias de comandos en sitios cruzados (XSS) mediante valores data:text/html para el atributo HREF de un elemento A en un mensaje HTML de correo electrónico. NOTA: el proveedor mantiene que el incidente está causado por \"una vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el navegador Firefox\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.5","matchCriteriaId":"5CD5438E-7D99-4286-81F3-1A304E9A7BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2D3532FD-0E85-4EDC-A3A7-76F8BA915B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D39B3B91-16B9-4B5B-AB4E-9BA568CC1E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"ACBE1BB3-EAB6-4388-95C2-0513B0D6A327"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8B402F70-BAAD-44D6-B414-F615F973DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F2DA0C-C8A3-429C-83C7-B2983D3FF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7535FE38-0FBD-48CC-9FDE-C7CA2C18CA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A14A770E-60BC-4698-8BFC-5FB745A52279"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"23A0AA21-C88D-45C4-9D95-414B2278E601"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8AE35AF8-CA38-42FB-BA32-057BCA2CA2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C91CA767-F49D-48E9-80CE-78B65DD14DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CEC8BBFC-263E-4735-847D-5544D18922E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8DB1F389-5D64-4B8C-B207-7D23F0C12DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8892DF-11F2-4991-97E8-D561DEAC4F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3B46B6F5-055E-44EB-BB78-503811C0E57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"66B197B0-F3B7-40D6-9872-C1A94622C242"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2698E2D7-09BF-4490-B362-4245CD3087D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A3B40A46-117D-4D85-8CC8-27236A3280C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FEFBECFF-D1A4-465D-B59F-E70246DE4BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"57ABD1BD-6676-4B54-9F3E-FACF1346794F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.1:*:*:*:*:*:*:*","matchCriteriaId":"79EC6167-5D16-4236-8EBC-412EE1784802"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5A4F6A2A-05B6-42EA-8F61-D0AB610A6757"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D1F91CDA-B425-4DB2-89E4-12267B600D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8BB743-A760-4C72-880C-759E54FB7CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"89477FCC-C925-418A-A3FF-F5B02736600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D5862181-4CE7-452F-8877-41E099440188"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B3E601FE-94F1-48AD-A0F2-42824A3A4FC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*","matchCriteriaId":"BDE2B06C-EDBD-4FA1-90AA-148E39EF5AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D5CF33A8-C497-4C86-8C5D-7181597BEC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B312DB-14BE-425C-9B07-0CBED6F39E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A2CF2865-CA12-4C4C-9BEC-7A97E6AAB377"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DF389AE4-D2AD-4992-BFBD-68FB1CBEE50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"5611B7D8-8AEF-42A8-8132-39CE773A7C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"71C2653B-7F0B-4628-9E77-44744BC05463"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B574D428-0A3A-47CA-A926-5C936F83919A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D59C23FB-E223-4EED-8F69-3CC1EE7DF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"904EEFF0-CF66-43E6-BAA9-1A6FB4115CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B3AB0176-9CB3-4D49-B644-2C413C9B6E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A849DD3E-882A-4621-BB6C-315A76677BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"5611B7D8-8AEF-42A8-8132-39CE773A7C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"71C2653B-7F0B-4628-9E77-44744BC05463"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"E55009DF-EDF1-4FAE-88E7-1CF33BFFEBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"980162BB-48B3-4921-987A-6D18C62965A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC241F01-B9DF-4D0E-BA3C-3523AEEB6BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B574D428-0A3A-47CA-A926-5C936F83919A"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D59C23FB-E223-4EED-8F69-3CC1EE7DF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"904EEFF0-CF66-43E6-BAA9-1A6FB4115CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B3AB0176-9CB3-4D49-B644-2C413C9B6E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C95E9B57-2DB0-4692-A7D1-180EC3687D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6E7D8683-8DD4-4EB0-A28F-0C556304BB2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9F68E5D5-7812-4FB2-ACF9-76180B038D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C6BBB036-494E-41D4-BD04-40906FAB5C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"37B76B27-ADF0-4E88-B92C-304FB38A356E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"965F245A-879A-4DF0-ABC5-588E78C4CBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"3DCB29F9-3875-4264-8117-5751FEDC3350"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"59FC250F-EF0B-4604-99A2-3EEB8B2DEB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1C10E681-5D2B-4EA4-B8E1-C0CA4FC9D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19CC5154-42C5-4877-9147-5DFD61BD5CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62AAEBBF-1696-4EAC-8837-68A03C2D2F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F626876D-99FC-4DE0-BEE0-35874C4E25F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A849DD3E-882A-4621-BB6C-315A76677BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AAF1A6AE-0748-476B-ACE2-DA43A9443B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB711B5E-9011-4BA2-917A-DB8545705E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"50DC1068-F426-497F-A5A0-E032BC3816F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2C5A176-8C72-40EA-85AC-F11B40FD53A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB4C3487-4556-47E5-8BF3-1DEDF0E9AFEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F24E43-491B-4AD1-B905-66F7FC6DA98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"F577A169-8354-4218-B3C6-04DA4BDF1E3C"}]}]}],"references":[{"url":"http://bugs.horde.org/ticket/8715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.horde.org/view.php?actionID=view_file&type=patch&file=0002-Bug-8715-Fix-XSS-vulnerability%5B1%5D.patch&ticket=8715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2009/000529.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=126100750018478&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=126101076422179&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023365","source":"cve@mitre.org"},{"url":"http://bugs.horde.org/ticket/8715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.horde.org/view.php?actionID=view_file&type=patch&file=0002-Bug-8715-Fix-XSS-vulnerability%5B1%5D.patch&ticket=8715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2009/000529.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=126100750018478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=horde-announce&m=126101076422179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1023365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4364","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML via the cname parameter, related to the act and id parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en ScriptsEz Ez Blog permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"cname\", relacionado con los parámetros \"act\" e \"id\". NOTA: la procedencia de esta información es desconocida; los detalles se han obtenido exclusivamente de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_blog:*:*:*:*:*:*:*:*","matchCriteriaId":"6C0CB4E4-B788-4B14-87F1-100EEA5323B3"}]}]}],"references":[{"url":"http://osvdb.org/61113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54896","source":"cve@mitre.org"},{"url":"http://osvdb.org/61113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4365","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a blog via the add_blog action, (2) approve a comment via the approve_comment action, (3) change administrator information including the password via the admin_opt action, and (4) delete a blog via the delete action."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en admin.php en ScriptsEz Ez Blog v1.0 permite a atacantes remotos secuestrar la autenticación de administradores para pedir que (1) añada un blog mediante la acción add_blog, (2) aprobar un comentario mediante una acción approve_comment, (3) cambiar información del administrador incluido la contraseña mediante la acción admin_opt, y (4) borrar un blog mediante la acción delete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_blog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"91703992-26E4-44C4-A5B6-346985777BD8"}]}]}],"references":[{"url":"http://osvdb.org/61114","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/ezblog-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54895","source":"cve@mitre.org"},{"url":"http://osvdb.org/61114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/ezblog-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4366","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the yr parameter in a bmonth action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en ScriptsEz Ez Blog v1.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"yr\" en una acción bmoth."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_blog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"91703992-26E4-44C4-A5B6-346985777BD8"}]}]}],"references":[{"url":"http://osvdb.org/61113","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/ezblog-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37743","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54894","source":"cve@mitre.org"},{"url":"http://osvdb.org/61113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/ezblog-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4367","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.593","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Staging Webservice (\"sitecore modules/staging/service/api.asmx\") in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and (1) upload files, (2) download files, (3) list directories, and (4) clear the server cache via crafted SOAP requests with arbitrary Username and Password values, possibly related to a direct request."},{"lang":"es","value":"Staging Webservice (\"sitecore modules/staging/service/api.asmx\") en Sitecore Staging Module v5.4.0 rev.080625 y anteriores permite a atacantes remotos saltar la autenticación y (1) subir ficheros, (2) bajar ficheros, (3) listar directorios, y (4) limpiar la caché del servidor mediante peticiones SOAP modificas con valores \"Username\" y \"Password\" de su elección, posiblemente relacionado con una petición directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitecore:staging_module:*:080625:*:*:*:*:*:*","versionEndIncluding":"5.4.0","matchCriteriaId":"CE7E318B-E8F9-4C7C-AA94-37CBFE146882"}]}]}],"references":[{"url":"http://osvdb.org/61147","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10513","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508529/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37388","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54881","source":"cve@mitre.org"},{"url":"https://www.sec-consult.com/files/20091217-0_sitecore_StagingModule_1.0.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/61147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508529/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/files/20091217-0_sitecore_StagingModule_1.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4368","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping tool, (2) traceroute tool, and (3) ldap import, possibly related to improper authentication."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Centreon versiones anteriores a v2.1.4 tienen un impacto y vectores de ataque desconocidos en (1) herramienta ping, (2) herramienta tool, y (3) importación ldap, posiblemente relacionado con una autenticación no apropiada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"B67D522D-9190-4C98-A0A1-4EABD18D90CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4:*:*:*:*:*:*:*","matchCriteriaId":"61975AFA-B0B2-4B19-B208-146B2E71B737"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C9B3720-9430-49F7-9E81-A8BB2528E934"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B2A44136-88C1-4CE5-A579-BD7DB1413E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E1EA5A52-9234-4A8E-8E84-6D197CB9946F"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5EA670B-897B-4369-AA19-C3052CCE91E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E56A4852-61E8-4F43-B81F-4C8727082F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3F38A5EB-A69E-4567-8DBF-8C438DE66D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E62C0AA6-EABE-4926-A4DA-CD471D88C068"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C3A02C2E-AA16-4669-B77E-554B27478D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:1.4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"C8F3C43F-3277-4162-B025-7FCBF7A79FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:b2:*:*:*:*:*:*","matchCriteriaId":"97BB2893-02DC-4C49-B9CA-E9DEF3211C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:b3:*:*:*:*:*:*","matchCriteriaId":"9ADD46A2-80D7-49DD-A36D-BC5AAE01FAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:b4:*:*:*:*:*:*","matchCriteriaId":"F41E4FC5-0031-41A9-820C-C63FF54E0B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:b5:*:*:*:*:*:*","matchCriteriaId":"2DD77DAA-E499-4064-B717-42EA1950C028"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:b6:*:*:*:*:*:*","matchCriteriaId":"4BDC54B9-1955-4849-A6A1-F850931EED7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CEC41A81-F8D2-44C7-B56E-C62918FFE0ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C2FA1001-D1A6-4226-A724-6FF13F040314"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A6A75F22-4D95-4F5B-820F-C15767ADE928"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"9DD571A7-C921-48A9-8974-F9D2F03F7CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"47EE53E4-8F0F-4F54-A392-347D2A044B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7E9A1D39-6124-4E6A-81B1-24674BEF6588"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A38C74D1-7D54-4460-B819-0E935D664FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"573D2183-3605-4589-86B9-2CAE570B968C"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6BF59787-CC19-4C94-B0FA-CD358B286357"},{"vulnerable":true,"criteria":"cpe:2.3:a:merethis:centreon:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C23A7BA9-076B-4F2E-BF75-61E4717125A3"}]}]}],"references":[{"url":"http://osvdb.org/61183","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37808","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.centreon.com/Development/changelog-2x.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37383","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3578","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54893","source":"cve@mitre.org"},{"url":"http://osvdb.org/61183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.centreon.com/Development/changelog-2x.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4369","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Contact module (modules/contact/contact.admin.inc or modules/contact/contact.module) in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with \"administer site-wide contact form\" permissions to inject arbitrary web script or HTML via the contact category name."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Contact (modules/contact/contact.admin.inc o modules/contact/contact.module) en Drupal Core v5.x anteriores a v5.21 y v6.x anteriores a v6.15 permite a usuarios autenticados remotamente con permisos para \"administrar formularios de contacto en todo el sitio\" inyectar secuencias de comandos web o HTML de su elección mediante el nombre de categoría del contacto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBE79A6-5762-4A7C-8FDA-C11FFFDCFC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"45BE66AB-3491-42CB-8594-AB041D15EA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"F6334858-DF62-467A-9126-6F0AD32D325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A677D3A4-F15C-4287-94B3-4CAADA4679D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"24DAB8DE-2459-484C-88B5-9812CFBDC60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A5BCAB7B-DF79-4DB8-A5C4-731F251A02A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5AEAB73-F7A9-4C62-BCB6-1028DAF149DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*","matchCriteriaId":"1C4C5857-3690-4D74-B135-B6AB7E766FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC12E03-C4B0-4B2F-B70B-0EB19C450AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*","matchCriteriaId":"FD50E551-7609-45EF-B2C6-3873D9CF8DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*","matchCriteriaId":"327712EE-8E9B-4A62-94A8-504C9CD2DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0C4FC56B-0289-411C-88BF-144D7338D456"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*","matchCriteriaId":"ED3ECEA7-E6D3-43E8-A281-56C7F95A0B7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*","matchCriteriaId":"28BE4DF7-6884-49BA-99D0-FCAE6DB75242"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*","matchCriteriaId":"DE7287CD-A5FB-4428-8656-F466A8E47463"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*","matchCriteriaId":"E2860C3D-CB93-4355-882E-BF8B7A23CB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*","matchCriteriaId":"FD400243-3FFE-457C-A977-6688D9181FA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*","matchCriteriaId":"2A2686FD-9643-4B8A-A8BF-C67120E44A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*","matchCriteriaId":"0F851EC4-6148-4C13-890F-8260D4DF5A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*","matchCriteriaId":"30282489-9168-4F7E-8465-1FE6521056B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.17:*:*:*:*:*:*:*","matchCriteriaId":"AA657ECA-ABA6-48B0-AE4B-0FA2BEFF7893"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.18:*:*:*:*:*:*:*","matchCriteriaId":"C8D14B91-CE74-4492-9309-0B7D8FC09691"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.19:*:*:*:*:*:*:*","matchCriteriaId":"07D997AB-DA3A-4ADB-B8F1-B9E4B22B4D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.20:*:*:*:*:*:*:*","matchCriteriaId":"D9DFEE45-D92B-4219-BA9C-465FEF88BB3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:5.x:dev:*:*:*:*:*:*","matchCriteriaId":"0A450FDB-A537-479B-A22B-68DFF6AD8FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"7954FAA5-0455-407F-B16F-CB1FD24F9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"B254CD4E-51A2-4E8D-9B59-FA5610F76683"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*","matchCriteriaId":"A4DF0926-E487-4F3B-B85B-2690127FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*","matchCriteriaId":"D05C77D9-E816-41A6-80DB-F4815980A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*","matchCriteriaId":"7F91E944-26C4-4886-B9B9-F32BD15569BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*","matchCriteriaId":"0B779FA7-E371-4111-95B7-301C804DC0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*","matchCriteriaId":"B89B2E01-DFC7-4672-85E7-3930EE653806"}]}]}],"references":[{"url":"http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://drupal.org/node/661586","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37815","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37824","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.madirish.net/?article=441","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/37372","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54867","source":"cve@mitre.org"},{"url":"http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://drupal.org/node/661586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.madirish.net/?article=441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/37372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4370","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Menu module (modules/menu/menu.admin.inc) in Drupal Core 6.x before 6.15 allows remote authenticated users with permissions to create new menus to inject arbitrary web script or HTML via a menu description, which is not properly handled in the menu administration overview."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Menu (modules/menu/menu.admin.inc) en Drupal Core v6.x anteriores a v6.15 permite a usuarios autenticados remotamente con permisos para crear menús inyectar secuencias de comandos web o HTML de su elección mediante una descripción de menú, que no es manejado adecuadamente en la vista general del menú de administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE07AAD-9207-4C5F-A108-7F7753E4F48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D4149703-F7BB-4513-9379-992C089532D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FCBC7BB8-2B50-476D-BD96-C968F105CE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"550778E2-BEE5-403D-8744-0B18C5D3AFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*","matchCriteriaId":"31B9F954-3A10-4378-A842-4061E97056DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-1:*:*:*:*:*:*","matchCriteriaId":"7954FAA5-0455-407F-B16F-CB1FD24F9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-2:*:*:*:*:*:*","matchCriteriaId":"B254CD4E-51A2-4E8D-9B59-FA5610F76683"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-3:*:*:*:*:*:*","matchCriteriaId":"A4DF0926-E487-4F3B-B85B-2690127FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.0:rc-4:*:*:*:*:*:*","matchCriteriaId":"D05C77D9-E816-41A6-80DB-F4815980A83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*","matchCriteriaId":"52D8F291-CBEB-4EAA-9388-F63066A2DFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*","matchCriteriaId":"A5D76BC5-0409-4D78-8064-A78B923E9167"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*","matchCriteriaId":"BB73B2E1-2554-4CA2-9C82-B694509CE43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A7827ED-D8AF-42B3-B514-39A04EB0879A"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*","matchCriteriaId":"F491DE31-8DBB-4F4E-8798-F82DC855D08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*","matchCriteriaId":"64D0A167-BE47-4E4E-8467-0AD2F38A3431"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*","matchCriteriaId":"C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*","matchCriteriaId":"B8D25FA1-2F31-40DB-AD54-DB233E060B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*","matchCriteriaId":"7F91E944-26C4-4886-B9B9-F32BD15569BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*","matchCriteriaId":"0B779FA7-E371-4111-95B7-301C804DC0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*","matchCriteriaId":"B89B2E01-DFC7-4672-85E7-3930EE653806"}]}]}],"references":[{"url":"http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/661586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37815","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37372","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54872","source":"cve@mitre.org"},{"url":"http://drupal.org/files/sa-core-2009-009/SA-CORE-2009-009-6.14.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/661586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4371","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Locale module (modules/locale/locale.module) in Drupal Core 6.14, and possibly other versions including 6.15, allows remote authenticated users with \"administer languages\" permissions to inject arbitrary web script or HTML via the (1) Language name in English or (2) Native language name fields in the Custom language form."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Locale (modules/locale/locale.module) en Drupal Core v6.14, y posiblemente otras versiones incluyendo la v6.15, permite a usuarios autenticados remotamente con permisos para \"administración de lenguajes\" inyectar secuencias de comandos web o HTML de su elección mediante los campos (1) \"Language name\" en inglés o (2) \"Native language name\" en el formulario \"Custom language\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*","matchCriteriaId":"B89B2E01-DFC7-4672-85E7-3930EE653806"},{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*","matchCriteriaId":"39169C30-5F4D-4333-B0B9-0881811F1E01"}]}]}],"references":[{"url":"http://secunia.com/advisories/37825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.madirish.net/?article=442","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.madirish.net/?article=442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4372","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary commands via shell metacharacters in the uniqueid parameter to (1) wcl.php, (2) storage_graphs.php, (3) storage_graphs2.php, (4) storage_graphs3.php, and (5) storage_graphs4.php in sem/."},{"lang":"es","value":"AlienVault Open Source Security Information Management (OSSIM) v2.1.5, y posiblemente otras versiones anteriores a v2.1.5-4, permite a atacantes remotos ejecutar comandos de su elección mediante metacaracteres del interprete de comandos en el parámetro \"uniqueid\" en (1) wcl.php, (2) storage_graphs.php, (3) storage_graphs2.php, (4) storage_graphs3.php, y (5) storage_graphs4.php en sem/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC15D313-4971-429C-BE74-29D35830D87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"0FC3013D-06C7-4FEA-83B2-70CB6DDF4F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"4442E047-9A5B-4C26-95E9-D4B21477BB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3:*:*:*:*:*:*:*","matchCriteriaId":"A7DD2C75-EF88-4A2D-B086-864AE0E9673B"}]}]}],"references":[{"url":"http://osvdb.org/61151","source":"cve@mitre.org"},{"url":"http://osvdb.org/61152","source":"cve@mitre.org"},{"url":"http://osvdb.org/61153","source":"cve@mitre.org"},{"url":"http://osvdb.org/61154","source":"cve@mitre.org"},{"url":"http://osvdb.org/61155","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5_Remote_Command_Execution.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10480","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37375","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54843","source":"cve@mitre.org"},{"url":"http://osvdb.org/61151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5_Remote_Command_Execution.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4373","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in ossiminstall/uploads/."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones en repository/repository_attachment.php en AlienVault Open Source Security Information Management (OSSIM) v2.1.5, y posiblemente otras versiones anteriores a v2.1.5-4, permite a atacantes remotos ejecutar código de su elección subiendo un fichero con extensión de ejecutable, y entonces accediendo mediante una petición directa al fichero en ossiminstall/uploads/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC15D313-4971-429C-BE74-29D35830D87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"0FC3013D-06C7-4FEA-83B2-70CB6DDF4F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"4442E047-9A5B-4C26-95E9-D4B21477BB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3:*:*:*:*:*:*:*","matchCriteriaId":"A7DD2C75-EF88-4A2D-B086-864AE0E9673B"}]}]}],"references":[{"url":"http://secunia.com/advisories/37727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4374","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. (dot dot) in the id_document parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en repository/repository_attachment.php en AlienVault Open Source Security Information Management (OSSIM) v2.1.5, y posiblemente otras versiones anteriores a v2.1.5-4, permite a atacantes remotos subir ficheros en directorios de su elección mediante los caracteres .. (punto punto) en el parámetro \"id_document\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.5","matchCriteriaId":"8514B184-CDC1-47FC-A742-FCC8F7068146"}]}]}],"references":[{"url":"http://secunia.com/advisories/37727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4375","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T16:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the id_document parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en repository/repository_attachment.php en AlienVault Open Source Security Information Management (OSSIM) v2.1.5, y posiblemente otras versiones anteriores a v2.1.5-4, permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id_document\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FC15D313-4971-429C-BE74-29D35830D87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1:*:*:*:*:*:*:*","matchCriteriaId":"0FC3013D-06C7-4FEA-83B2-70CB6DDF4F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2:*:*:*:*:*:*:*","matchCriteriaId":"4442E047-9A5B-4C26-95E9-D4B21477BB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3:*:*:*:*:*:*:*","matchCriteriaId":"A7DD2C75-EF88-4A2D-B086-864AE0E9673B"}]}]}],"references":[{"url":"http://secunia.com/advisories/37727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5_SQLi.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/61149","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.alienvault.com/community.php?section=News","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cybsec.com/vuln/OSSIM_2_1_5_SQLi.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/61149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4376","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet."},{"lang":"es","value":"Desbordamiento de búfer en la función daintree_sna_read en el analizador de fichero Daintree SNA en Wireshark v1.2.0 hasta v1.2.4 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un paquete modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1C13C7D5-D344-45D2-9FF0-2C3388C94584"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D79DA61-F97C-4DCB-A2B7-FE67C5F10964"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"84D6DFA0-53A2-424C-A31C-88FD683E5674"}]}]}],"references":[{"url":"http://osvdb.org/61177","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37916","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37407","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023374","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3596","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-09.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4022","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4294","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16435","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4377","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T21:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap."},{"lang":"es","value":"El analizador (1) SMB y (2) SMB2 en Wireshark v0.9.0 hasta v1.2.4 permite a atacantes remotos provocar una denegación de servicio (caída) mediante un paquete modificado, como se ha demostrado por fuzz-2009-12-07-11141.pcap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"DD509BD0-3E90-47E5-97DA-F8814002EDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7E8E63FC-A3AA-455E-8AA7-E3577468F022"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"6DFC6BB8-5A74-4F6A-AFC8-959623D4236F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"3B432986-F5AE-4506-B584-3B4E943A9C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"60178790-62CC-41A9-8B5A-78CF49069E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"41535173-00D3-4E52-9441-D7ED44BE9B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"3017F8E8-F28D-46E0-A256-0121BAD588A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*","matchCriteriaId":"503E7F73-0E2A-442C-9B76-679A2AD03052"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*","matchCriteriaId":"FDF374E8-36A3-43AA-B86C-092F5B244841"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*","matchCriteriaId":"E3C422E5-3252-48C2-B4FF-E32AA5463D97"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*","matchCriteriaId":"31C43A78-E578-4B1C-8E33-24529E973E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*","matchCriteriaId":"A0D56DA6-3EB2-4074-8C43-A5FD93B1555B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*","matchCriteriaId":"D1074B30-F2E6-47CD-8491-29163811E07F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*","matchCriteriaId":"10FAAC5E-DD4E-49EF-A051-2F80BACC20D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"BB52B779-7A2D-43E0-9F12-C65053002EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*","matchCriteriaId":"6A85B028-7384-403A-817C-B5001F02A8A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*","matchCriteriaId":"F2F7D104-7498-4C5F-AE75-6F04D5DA35B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"801B1795-3DC4-4BE3-A693-37B6BD116B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:0.99.9:*:*:*:*:*:*:*","matchCriteriaId":"DA611B86-AB5C-4CA1-9620-6F5532F4C819"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*","matchCriteriaId":"17808311-AC2A-428A-BB8B-B08549C5DAEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"978C483C-A6F7-456F-9488-833D520D4A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5BB94CE6-03D3-43C3-B765-AC36961CD83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37FADA30-FD98-42F3-80F1-E8794C77AC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8541E3F7-6DCF-4070-ACB0-C6B9C7BE32D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"90E01A6A-D948-4701-9C4E-F8C3FCC52F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FCDCD888-3F3D-4ABC-B6D8-4A9E2C40265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA3F8A55-10DE-4197-9F9D-5F6570A94860"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D0F1728E-ED97-4203-90D1-9E81E96BD7AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F5629542-FD8E-4C7B-B396-BC76FB462083"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"BC077D96-1BBB-4F69-8C3A-F36CE3F3C668"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26CB9265-B7A4-4EB4-9C20-F747F3786C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1C13C7D5-D344-45D2-9FF0-2C3388C94584"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D79DA61-F97C-4DCB-A2B7-FE67C5F10964"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"84D6DFA0-53A2-424C-A31C-88FD683E5674"}]}]}],"references":[{"url":"http://osvdb.org/61178","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37916","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1983","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37407","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023374","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3596","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-09.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4378","sourceIdentifier":"cve@mitre.org","published":"2009-12-21T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a denial of service (crash) via a crafted packet, related to \"formatting a date/time using strftime.\""},{"lang":"es","value":"El analizador IPMI en Wireshark v1.2.0 hasta v1.2.4, cuando se ejecuta en Windows, permite a atacantes remotos provocar una denegación de servicio (caída) mediante un paquete modificado, relacionado con \"el formateado de fecha/hora usando strftime\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1C13C7D5-D344-45D2-9FF0-2C3388C94584"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D79DA61-F97C-4DCB-A2B7-FE67C5F10964"},{"vulnerable":true,"criteria":"cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"84D6DFA0-53A2-424C-A31C-88FD683E5674"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}],"references":[{"url":"http://osvdb.org/61179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37407","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023374","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3596","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-09.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4319","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7576","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.wireshark.org/security/wnpa-sec-2009-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4379","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924."},{"lang":"es","value":"Vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Valarsoft Webmatic anterior v3.0.3 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores no especificados, una vulnerabilidad diferente que CVE-2008-2924."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"34F544BA-49A2-451B-9D34-B8664885289A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.4:*:*:*:*:*:*:*","matchCriteriaId":"18475F61-05B8-4DA7-B3F3-685C79F79472"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E7856DF3-B086-4BC1-B76C-13F62BC802A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6:*:*:*:*:*:*:*","matchCriteriaId":"6BE9F342-9168-44CA-9839-31510005D5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"14149962-A35E-4174-B2B9-163BCCB0EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"262D1DD0-8513-44D4-8615-169E231EE5C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4E07A627-980E-4DE4-8EDF-0C11DACA86F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D38092C7-5C1C-4CE4-B0FB-6099584480AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.8:*:*:*:*:*:*:*","matchCriteriaId":"79F10A79-534F-4BDD-9D33-B111B30E8798"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C5516352-C178-4D82-9AFB-0841E55CBFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F44ECC07-D96D-48BB-9297-DEFAEEDBF992"}]}]}],"references":[{"url":"http://secunia.com/advisories/37735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37335","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.valarsoft.com/index.php?stage=0&section=5&newsID=165&action=6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.valarsoft.com/index.php?stage=0&section=5&newsID=165&action=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4380","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a different issue than CVE-2008-2925."},{"lang":"es","value":"Multiples vulnerabilidad SQL en Valarsoft Webmatic anterior v3.0.3 permite a atacantes ejecutar comandos SQL de su elección a través de vectores no especificados, una vulnerabilidad diferente que CVE-2008-2925."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"34F544BA-49A2-451B-9D34-B8664885289A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.4:*:*:*:*:*:*:*","matchCriteriaId":"18475F61-05B8-4DA7-B3F3-685C79F79472"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E7856DF3-B086-4BC1-B76C-13F62BC802A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6:*:*:*:*:*:*:*","matchCriteriaId":"6BE9F342-9168-44CA-9839-31510005D5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"14149962-A35E-4174-B2B9-163BCCB0EF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"262D1DD0-8513-44D4-8615-169E231EE5C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4E07A627-980E-4DE4-8EDF-0C11DACA86F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D38092C7-5C1C-4CE4-B0FB-6099584480AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:2.8:*:*:*:*:*:*:*","matchCriteriaId":"79F10A79-534F-4BDD-9D33-B111B30E8798"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C5516352-C178-4D82-9AFB-0841E55CBFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:valarsoft:webmatic:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F44ECC07-D96D-48BB-9297-DEFAEEDBF992"}]}]}],"references":[{"url":"http://secunia.com/advisories/37735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37335","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.valarsoft.com/index.php?stage=0&section=5&newsID=165&action=6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.valarsoft.com/index.php?stage=0&section=5&newsID=165&action=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4381","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inject arbitrary web script or HTML via the pa parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos (XSS) en index.php en texmedia Million Pixel Script v3 permite a atacantes remotos inyectar código web o HTML de su elección a través del parámetro pa. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texmedia:million_pixel_script:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F4A34A92-BCC1-4359-8B73-76C5E9B58BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:texmedia:million_pixel_script:3.0:-:pro:*:*:*:*:*","matchCriteriaId":"5E675705-B2D8-4649-900F-209B558D78D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:texmedia:million_pixel_script:3.0:-:pro_lotto:*:*:*:*:*","matchCriteriaId":"D0F28804-8DC0-48F9-8581-95394EC1DAE9"}]}]}],"references":[{"url":"http://osvdb.org/60961","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/mps-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37700","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10399","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37315","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54742","source":"cve@mitre.org"},{"url":"http://osvdb.org/60961","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/mps-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4382","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTML via the mod parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en module.php en PHPFABER CMS, probablemente v1.3.36, permite a atacantes remotos inyectar código web o HTML a su elección a través del parámetro mod."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpfaber:phpfaber_content_management_system:1.3.36:*:*:*:*:*:*:*","matchCriteriaId":"49AEFD8F-9382-477C-831D-5C2BD7BF31D8"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/phpfabercms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10443","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0912-exploits/phpfabercms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4383","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Pforum.php en Rocomotion P forum anterior v1.28 permite a atacantes remotos leer arbitrariamente archivos a través de una secuencia de salto de directorio en vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rocomotion:p_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.27","matchCriteriaId":"F783C3D1-6C2D-4AE2-B4B2-63CE3120B838"},{"vulnerable":true,"criteria":"cpe:2.3:a:rocomotion:p_forum:1.00:*:*:*:*:*:*:*","matchCriteriaId":"5E22DD2C-1DA6-4811-8574-3CCAB9E83C52"}]}]}],"references":[{"url":"http://another.rocomotion.jp/12568911093444.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://another.rocomotion.jp/12604561773482.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN00152874/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000084.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37691","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://another.rocomotion.jp/12568911093444.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://another.rocomotion.jp/12604561773482.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN00152874/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4384","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inject arbitrary web script or HTML via the (1) pid parameter in a code action to index.php and the (2) uid parameter in a view action to profile.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Scriptsez.net Ez Poll Hoster (EPH) permite a atacantes remotos inyectar código HTML o web a su elección a través de (1) parámetro pid en una acción code en index.php y el (2) parámetro uid en una acción view en profile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_poll_hoster:*:*:*:*:*:*:*:*","matchCriteriaId":"2CEFB786-39BE-409B-A922-2282CE8363E5"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/ezpollhoster-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10439","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0912-exploits/ezpollhoster-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4385","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to (1) hijack the authentication of arbitrary users for requests that delete polls via the delete_poll action to index.php; and hijack the authentication of administrators for requests that (2) delete users via the manage action to admin.php, or (3) send arbitrary email to arbitrary users in the email action to admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en Scriptsez.net Ez Poll Hoster (EPH) permite a atacantes remotos (1) secuestrar la autenticación de usuarios de forma arbitraria para peticiones de borran las encuestas a través de la accion delete_poll a index.php; y secuestrar la autenticación de los administradores para que (2) borre usuarios a través de la acción \"manage\" para admin.php, o (3) envío de correos electronicos  a usuarios de forma arbitraria en la acción \"email\" a admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptsez:ez_poll_hoster:*:*:*:*:*:*:*:*","matchCriteriaId":"2CEFB786-39BE-409B-A922-2282CE8363E5"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/ezpollhoster-xssxsrf.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10439","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0912-exploits/ezpollhoster-xssxsrf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4386","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en hotel_tiempolibre_ext.php en Venalsur Booking Centre Booking System para Hotels Group, cuando magic_quotes_gpc es activado, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro NoticiaID y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bookingcentre:booking_system_for_hotels_group:-:*:*:*:*:*:*:*","matchCriteriaId":"FBB89642-09E3-4FAF-9988-67AE7BCCEF8E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/b2cbcs-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10393","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508429/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3538","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0912-exploits/b2cbcs-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/32430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508429/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4387","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and other unspecified inputs."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ShowInContentAreaAction.do en ManageEngine Password Manager Pro (PMP) en versiónes anteriores a v6.1 Build 6104 utiliza comprobación del uso de mayúsculas/minúsculas para entradas maliciosas, lo que permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través del parámetro \"searchtext\" y otras entradas sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"F98F34C9-3D3B-4C67-88BF-8B4F8CD71832"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:*:-:standard:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"A888EEC2-60E8-407C-ACE8-68AB5E882EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:4.6:*:*:*:*:*:*:*","matchCriteriaId":"B514D4E8-E996-4F8C-9830-3CB12B6FBE1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:4.7:*:*:*:*:*:*:*","matchCriteriaId":"EFD9FC23-D877-44FA-8F86-4AF006A0C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:4.8:*:*:*:*:*:*:*","matchCriteriaId":"63DA6D0A-931D-4B07-86C1-06D4F36FA679"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:5.0:*:*:*:*:*:*:*","matchCriteriaId":"DAACBB2A-8F1E-4013-B3DA-1742CA66A944"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:5.1:*:*:*:*:*:*:*","matchCriteriaId":"076C49A5-C554-4820-AE83-5858209CF3C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:5.2:*:*:*:*:*:*:*","matchCriteriaId":"9E578FA0-E8AD-4BD5-B6B8-2357A2EAF4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:5.3:*:*:*:*:*:*:*","matchCriteriaId":"1EA9117D-2355-4FCE-876B-2E6FAED66A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:5.4:*:*:*:*:*:*:*","matchCriteriaId":"27B0EF1B-B8C1-40E4-8545-F5B119FF50FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B0783C5C-58CA-435E-B000-9787379DEB9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:password_manager_pro6.1:*:free:*:*:*:*:*:*","versionEndIncluding":"-","matchCriteriaId":"0D46C1E3-5B7F-466C-98BB-F910757F9A47"}]}]}],"references":[{"url":"http://forums.manageengine.com/#Topic/49000003740390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.manageengine.com/products/passwordmanagerpro/release-notes.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.scip.ch/?vuldb.4063","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.scip.ch/publikationen/advisories/scip_advisory-4063_manageengine_pmp_script_injection.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37336","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3540","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://forums.manageengine.com/#Topic/49000003740390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.manageengine.com/products/passwordmanagerpro/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.scip.ch/?vuldb.4063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.scip.ch/publikationen/advisories/scip_advisory-4063_manageengine_pmp_script_injection.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4388","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the ListMan (nl_listman) extension 1.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión ListMan (nl_listman) v1.2.1 para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frank_krger:nl_listman:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9BCB8A53-CCEE-4FE0-A279-DD4955D79BAE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4389","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Watchdog (aba_watchdog) extension 2.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad inespecífica en la extensión Watchdog (aba_watchdog) v2.0.2 y anteriores para TYPO3 permite a atacantes remotos conseguir información a través de vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robert_puntigam:aba_watchdog:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"B4606200-A121-449D-9762-E18C906B2D5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:robert_puntigam:aba_watchdog:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C433F9BD-CF0A-4300-B554-217F6483EFFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:robert_puntigam:aba_watchdog:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9674537D-77FB-4F21-8D6F-213A7295BAFD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/37770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4390","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Car (car) v0.1.1 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_rieger:car:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C06070A8-D7F5-4AD3-BF12-3632436D2179"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4391","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the File list (dr_blob) extension 2.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión File list (dr_blob) v2.1.1 para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_regelein:dr_blob:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C874FE1-FC80-47D2-BB5D-7490A1811E1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4392","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extension XDS Staff List (xds_staff) v0.0.3 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:xds_staff:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.3","matchCriteriaId":"1E96118D-8E10-4166-A2AA-21FE96CB6384"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4393","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.640","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Document Directorys (danp_documentdirs) v1.10.7 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQl de forma arbitraria a través de vectores inespecíficos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_ptzinger:danp_documentdirs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.7","matchCriteriaId":"F1A536E9-8D26-4889-97F2-03A516EB5491"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4394","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extension Random Prayer 2 (ste_prayer2) v0.0.3 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_prayer2:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.3","matchCriteriaId":"A132EEAE-48E8-46A6-9D53-B7B98215E738"},{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_prayer2:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8021678-5C27-435B-AF46-3170791C818C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4395","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión Random Prayer v2 (ste_prayer2) v0.0.3 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_prayer2:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.3","matchCriteriaId":"A132EEAE-48E8-46A6-9D53-B7B98215E738"},{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_prayer2:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8021678-5C27-435B-AF46-3170791C818C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4396","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL de la extensión Diocese of Portsmouth Resources Database (pd_resources) v0.1.1 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:pd_resources:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.1","matchCriteriaId":"F81638F8-A73C-4CBD-9606-3CB167C52E22"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*","matchCriteriaId":"E66C5ABA-7727-4562-A792-5E450098D520"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4397","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión Diocese of Portsmouth Resources Database (pd_resources) v0.1.1 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:pd_resources:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.1","matchCriteriaId":"F81638F8-A73C-4CBD-9606-3CB167C52E22"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4398","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión de Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery)v0.1.2 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:hs_religiousartgallery:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2","matchCriteriaId":"7CA7353C-53EC-4D8B-949B-E2A158694086"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4399","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la extensión Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) v0.1.2 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:hs_religiousartgallery:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2","matchCriteriaId":"7CA7353C-53EC-4D8B-949B-E2A158694086"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4400","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extension de administración de bases de datos v0.1.3 y anteriores de Parish (ste_parish_admin) para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_parish_admin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.3","matchCriteriaId":"548CA2FA-2B02-4800-9CE3-CDC8B063281E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4401","sourceIdentifier":"cve@mitre.org","published":"2009-12-22T23:30:00.827","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la administración de la extensión v0.1.3 y anteriores de la base de datos de Parish (ste_parish_admin) para TYPO3 permite a atacantes remotos ejecutar comandos arbitrarios SQL a través de vectores sin especificar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fr.simon_rundell:ste_parish_admin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.3","matchCriteriaId":"548CA2FA-2B02-4800-9CE3-CDC8B063281E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]}]}],"references":[{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4402","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations by providing an arbitrary password to the admin interface."},{"lang":"es","value":"La configuración por defecto de SQL-Ledger v2.8.24 permite a atacantes remotos realizar operaciones de administración no especificadas al proporcionar una contraseña arbitraria al interfaz de \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sql-ledger:sql-ledger:2.8.24:*:*:*:*:*:*:*","matchCriteriaId":"E37F91C4-5164-4428-82B6-10DAFC0C3FAD"}]}]}],"references":[{"url":"http://secunia.com/advisories/37877","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37431","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508559/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4403","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en Rumba XML v1.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el PATH_INFO. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rumbacms:rumba_xml:1.8:*:*:*:*:*:*:*","matchCriteriaId":"41AE9767-1D3B-4048-B89D-74B26CB61EB2"}]}]}],"references":[{"url":"http://osvdb.org/61137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10534","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508536/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54913","source":"cve@mitre.org"},{"url":"http://osvdb.org/61137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508536/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4404","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T18:30:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the \"--maxlines\" option and a crafted email message.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad no especificada en t-prot (TOFU Protection) versiones anteriores a v2.8 permite a atacantes remotos provocar una denegación de servicio mediante vectores no especificados relacionados con la opción \"--maxlines\" y un mensaje de correo modificado. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"01392D85-B1C7-46EB-961D-994B0C844CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.38.4:*:*:*:*:*:*:*","matchCriteriaId":"E04B45A6-011D-4C68-855F-492F956BF324"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.39:*:*:*:*:*:*:*","matchCriteriaId":"9776847B-95E0-414A-BD95-D3C55719C17C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.41:*:*:*:*:*:*:*","matchCriteriaId":"3CE2C4AB-A8C1-4BCB-AEA2-7BC821DFDD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.41.1:*:*:*:*:*:*:*","matchCriteriaId":"6BDC6350-9CA6-4312-974F-AEC2E429F84D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.41.2:*:*:*:*:*:*:*","matchCriteriaId":"5A82918B-1091-4FDA-B74C-76BA7B866162"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.42:*:*:*:*:*:*:*","matchCriteriaId":"C9102AFF-AA00-49FC-9FCB-BCE64D3B8A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.43:*:*:*:*:*:*:*","matchCriteriaId":"E4EBFD24-563F-4537-9B7E-553D55637B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.44:*:*:*:*:*:*:*","matchCriteriaId":"32E48F23-682D-4A1F-BA03-AC04C90F1546"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.45:*:*:*:*:*:*:*","matchCriteriaId":"3B137BC0-B7B5-430E-852C-05DFF7E6ACE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.46:*:*:*:*:*:*:*","matchCriteriaId":"1ED130AD-767C-4BFA-B417-F3D92D30C74E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.47:*:*:*:*:*:*:*","matchCriteriaId":"3273CEE7-0545-46F9-8553-00BEA232A8BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.48:*:*:*:*:*:*:*","matchCriteriaId":"AE6C54D1-66EE-4C73-BE8A-B592BB8C4F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.48.1:*:*:*:*:*:*:*","matchCriteriaId":"37DD6D44-A57D-4C03-A2ED-78CB0753244E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.49:*:*:*:*:*:*:*","matchCriteriaId":"4CDC203F-34DE-4258-8F63-3A93CADAE00E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.95:*:*:*:*:*:*:*","matchCriteriaId":"0EA479C3-F8EE-4748-9346-150E9B8D4C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.96:*:*:*:*:*:*:*","matchCriteriaId":"E3BD589E-A5DF-43B1-8DB7-CFF4F6C3A329"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.97:*:*:*:*:*:*:*","matchCriteriaId":"19A48BB8-EB6E-495E-BA19-F107E59D9F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.98:*:*:*:*:*:*:*","matchCriteriaId":"0803C49D-BD66-427E-B794-335AF447973A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.99:*:*:*:*:*:*:*","matchCriteriaId":"D5024898-C19C-41F7-9330-CFE33AD85C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:1.99.1:*:*:*:*:*:*:*","matchCriteriaId":"EF84BD28-9630-4163-8CE4-D72946F4AF7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0:*:*:*:*:*:*:*","matchCriteriaId":"25AAECE1-1EC7-48D2-A0F8-D6B4085996D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BD0CAA4C-20BA-47D2-B328-D8AA18D5DDB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B5A5C868-D1D9-429D-A9E7-509427D7D82F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"799CF4B8-F36E-4443-81E0-F46EEE1AB481"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"31ACA834-94FE-487F-AE50-55A111BD057B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B70C9529-097F-4532-A32A-B0A397B2D981"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1851FDAE-19F9-4266-A83C-5C6BD9B876D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.1:*:*:*:*:*:*:*","matchCriteriaId":"94A7A518-A4DB-451A-AB97-B23CC6088C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"49ECDB9A-6960-4AC9-A061-2FC234D4CBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B9F076A7-6A3B-49E1-B668-16F8ED769296"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.3:*:*:*:*:*:*:*","matchCriteriaId":"90FE73F5-9FB1-4E42-9B5C-C86D01910565"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.4:*:*:*:*:*:*:*","matchCriteriaId":"D4444271-BBA9-4542-AF36-0BCAC75CF1EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.5:*:*:*:*:*:*:*","matchCriteriaId":"0CFFD7AD-91AD-4273-A7B1-9A63AEFD827E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.6:*:*:*:*:*:*:*","matchCriteriaId":"965199E8-F6C4-440D-A0F8-611927A0A9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jochen_striepe:t-prot:2.7:*:*:*:*:*:*:*","matchCriteriaId":"2630DDB9-A0B1-47BD-BF32-EC1B54DAC7C8"}]}]}],"references":[{"url":"http://freshmeat.net/projects/t-prot/releases/309781","source":"cve@mitre.org"},{"url":"http://osvdb.org/61235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37874","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54936","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/t-prot/releases/309781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4405","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T21:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) \"policy checks in report results when using alternate formats\" or (2) a \"check for the 'raw' role that is missing in docutils < 0.6.\""},{"lang":"es","value":"Mútiples vulnerabilidades no especificadas en Trac versiones anteriores a v0.11.6 tienen impacto y vectores de ataque desconocidos, posiblemente relacionados con (1) \"verificaciones de políticas en informes de resultados cuando se usan formatos alternativos\" o (2) una \"verificación para el role 'raw' que no se encuentra en docutils < 0.6\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:*:*:*:*:*:*:*:*","versionEndIncluding":"0.11.5","matchCriteriaId":"15C9315F-4599-42C7-AC2E-733B355BEF07"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.5:*:*:*:*:*:*:*","matchCriteriaId":"F11B74FE-2B9D-4176-BF9E-BE5EC720DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"121CD1BA-66FA-43AF-BD0B-719A229FE7E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DB7A12F-E8C3-409F-B66D-D9B79EE3F549"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.6:*:*:*:*:*:*:*","matchCriteriaId":"46D1B7C9-6DCD-44AC-8F5B-8878B8B10D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"3DFE4AC5-5C01-409E-B601-7C26841206CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.7:*:*:*:*:*:*:*","matchCriteriaId":"75438665-AB66-43B6-B3D4-7A230527C6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7D8B6DDB-89C3-48F9-9BE2-510B2696CB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.8:*:*:*:*:*:*:*","matchCriteriaId":"F831B0E9-14FE-48CD-AD00-1C8F00CDD61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"893346E1-E58C-40F9-B8D5-1C1579D3E547"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"F9DAE9AC-7A24-4580-ABFF-B3B83EEDDF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"47BB8FD4-B24A-402C-ADFB-5ADCE2E99E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"B5E0ED65-3794-44A5-AD41-79FB276ACEA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C8DD1C3-C397-4CB9-A6DD-CFD9A8E05695"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"DFE3E736-75ED-4E6C-98EA-CFF9D656418E"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"AB6BAD72-2E76-494A-964A-DA82D639E309"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"EF045F1D-DD6A-4457-9D5E-CAB04440695C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"922F5FF9-3082-42B0-90A9-FD5874692BC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"FD3A7066-6CDA-4D9B-A98F-27DC2F3E0E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"BFCA3DBA-DA22-48A4-9F63-0D7DD50E9FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10:*:*:*:*:*:*:*","matchCriteriaId":"7E53BEE2-6B7A-4A35-8930-1BCFBA9F6369"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10:beta1:*:*:*:*:*:*","matchCriteriaId":"7B815335-9AFD-4704-B32C-DC4A1732741F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10:rc1:*:*:*:*:*:*","matchCriteriaId":"F1DA9D02-915B-44E9-B9EC-D204C6CA3BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"28456B13-5080-469E-A5E5-9B65D4753B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"91B51A70-0C29-41C5-93D5-D97FA41B82A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"0EFF8790-E56A-4384-936B-06DCA949F128"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.3:rc1:*:*:*:*:*:*","matchCriteriaId":"A9F145F7-35D6-45A4-89EA-CC6801AFB690"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D9C5B39-406D-49A5-AB32-900A206EF0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"87B26D34-4DF7-4686-A8F8-2229B80CA521"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"A2140669-7B08-48EF-B794-941302E0AB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11:*:*:*:*:*:*:*","matchCriteriaId":"D51B5326-F1E1-451B-9C57-5CCB21769150"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11:b1:*:*:*:*:*:*","matchCriteriaId":"C24EBF9D-45E5-420A-B8D6-B2DF7695C426"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11:b2:*:*:*:*:*:*","matchCriteriaId":"56FE11BC-B8AB-4B3C-9FB6-AC45C85BDFD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11:rc1:*:*:*:*:*:*","matchCriteriaId":"E644A7BC-56B1-49EF-A077-58E2A75FCBAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11:rc2:*:*:*:*:*:*","matchCriteriaId":"5F4D92DA-EEC8-4872-BBF7-2DC4E32AA6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"EA733A05-8141-41EE-9149-E38EB90B834F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"95AC79AD-4A96-4715-9DF5-D29243483A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.2.1:*:*:*:*:*:*:*","matchCriteriaId":"931CA41D-A60E-48B6-B983-534AF590678F"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.3:*:*:*:*:*:*:*","matchCriteriaId":"78CD186E-9D7B-4C34-88ED-D4E5611E5551"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.4:*:*:*:*:*:*:*","matchCriteriaId":"F8ED52D2-52DC-4305-8428-779A172268D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.4:rc1:*:*:*:*:*:*","matchCriteriaId":"CCF10D58-9333-4FF7-9B80-B4207DCB6F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.4:rc2:*:*:*:*:*:*","matchCriteriaId":"0114B61B-68B7-4D9E-B6D7-0104DAF38723"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.5:rc1:*:*:*:*:*:*","matchCriteriaId":"94FA4D47-C110-4695-AC11-BA522E5AAD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.11.5:rc2:*:*:*:*:*:*","matchCriteriaId":"E1B9C626-3AA7-4850-AD81-459CE645C614"},{"vulnerable":true,"criteria":"cpe:2.3:a:edgewall:trac:0.50.9:*:*:*:*:*:*:*","matchCriteriaId":"4434EB37-9681-43F8-A369-8B0CA100CCF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/37807","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37901","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3615","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=542394","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54983","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=542394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4406","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC) Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the login_username parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Forms/login1 en American Power Conversion (APC) Switched Rack PDU AP7932 B2, ejecutando rpdu v3.3.3 o v3.7.0 en AOS v3.3.4, y probablemente otras versiones, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"login_username\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apc:ap7932_b2_firmware:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D5064042-594F-4E7C-A2E9-E14518937BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apc:ap7932_b2_firmware:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"C4732D97-D2F2-4C1A-8AAF-5FC821918392"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:ap7932_b2:*:*:*:*:*:*:*:*","matchCriteriaId":"26EFA634-D7B4-4325-963A-CD9702674D15"},{"vulnerable":false,"criteria":"cpe:2.3:o:apc:aos:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"A6BF0EAB-0FB6-478F-B837-EF4089F2BC38"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0912-exploits/apc-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508468/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37338","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023331","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54824","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0912-exploits/apc-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508468/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1023331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4407","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to hijack the authentication of victims for requests that change passwords, and other unspecified requests, via unknown vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en PyForum v1.0.3 y probablemente versiones anteriores, y probablemente zForum, permite a atacantes remotos secuestrar la autenticación de las víctimas para solicitar el cambio de contraseñas, y otras solicitudes no especificadas, mediante vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"4A142286-A943-4E58-8B80-C6FF73CEE821"},{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8D91E4F4-5D7B-4B60-B1C5-255D3FEA8AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"380801DB-032F-4A0C-98F0-766F4B2540D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DAD9136D-39B6-4A68-9C63-160808688C84"}]}]}],"references":[{"url":"http://secunia.com/advisories/37764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/61050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508478/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54853","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/61050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508478/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4408","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in models.parser in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to inject arbitrary web script or HTML via crafted BBcode (1) img or (2) url tags, which are not properly handled when a post is viewed."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en models.parser en PyForum v1.0.3 y probablemente versiones anteriores, y probablemente zForum, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante las etiquetas modificadas BBcode (1) img o (2) url, no siendo adecuadamente gestionadas cuando se visualiza una entrada del foro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"4A142286-A943-4E58-8B80-C6FF73CEE821"},{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8D91E4F4-5D7B-4B60-B1C5-255D3FEA8AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"380801DB-032F-4A0C-98F0-766F4B2540D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pyforum:pyforum:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DAD9136D-39B6-4A68-9C63-160808688C84"}]}]}],"references":[{"url":"http://secunia.com/advisories/37764","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/61051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508478/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54855","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/61051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508478/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4409","sourceIdentifier":"cve@mitre.org","published":"2009-12-23T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for each authentication attempt, which allows remote attackers to bypass authentication via a replay attack."},{"lang":"es","value":"La autenticación (1) CHAP y (2) MS-CHAP-V2 en la función PPP Access Concentrator (PPPAC) en el firmware Internet Initiative Japan SEIL/B1 v1.00 hasta v2.52 utiliza el mismo desafío para cada intento de autenticación, permitiendo a atacantes remotos saltar la autenticación mediante un ataque de repetición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:1.00:*:*:*:*:*:*:*","matchCriteriaId":"7AB18B1D-6DB6-4096-83EC-9608678218DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.01:*:*:*:*:*:*:*","matchCriteriaId":"9F9B7A67-49CD-4D42-B5C5-E45BE775EDB5"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.10:*:*:*:*:*:*:*","matchCriteriaId":"FB22791F-D919-4B32-86E7-83ACBE6D4F03"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.20:*:*:*:*:*:*:*","matchCriteriaId":"3D36BD6C-7802-473A-B8A1-BD4D687F3AEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.30:*:*:*:*:*:*:*","matchCriteriaId":"E8617348-4572-4277-AFB4-241F4A38687F"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.40:*:*:*:*:*:*:*","matchCriteriaId":"D73D5590-F721-4A8C-95D8-B396198FB27D"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.41:*:*:*:*:*:*:*","matchCriteriaId":"6382F122-161C-433D-AF82-0E8E4073A392"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.42:*:*:*:*:*:*:*","matchCriteriaId":"C4772B30-D3E3-49AC-86F7-CEAE59CECE02"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.50:*:*:*:*:*:*:*","matchCriteriaId":"477AEE25-5F49-4DCA-95C3-61DF83E4E91D"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.51:*:*:*:*:*:*:*","matchCriteriaId":"558625E8-5613-4993-84DF-C0ECF0C92325"},{"vulnerable":true,"criteria":"cpe:2.3:h:iij:seil\\/b1:2.52:*:*:*:*:*:*:*","matchCriteriaId":"8D4BB407-DECF-4E84-BF99-9CE2A93A84A7"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN49602378/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000079.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/61118","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37293","source":"cve@mitre.org"},{"url":"http://www.seil.jp/seilseries/security/2009/a00697.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN49602378/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/61118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.seil.jp/seilseries/security/2009/a00697.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4410","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows local users to cause a denial of service (panic) via unknown vectors."},{"lang":"es","value":"La función fuse_ioctl_copy_user el manejador ioctl en fs/fuse/file.c en el kernel de Linux v2.6.29-rc1 hasta v2.6.30.y usa la variable incorrecta en un argumento en la función kunmap, lo que permite a usuarios locales causar una denegación de servicio (pánico) a trvés de vectores desconocidos."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 and Red Hat Enterprise MRG. Shipped kernels do not include upstream commit 59efec7b that introduced the problem.","lastModified":"2009-12-31T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*","matchCriteriaId":"C386B13F-9D7C-45F8-B86A-886384144A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:git1:*:*:*:*:*:*","matchCriteriaId":"32F95AB2-319C-4BDE-8D34-9FBE69A2FB6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc1:*:*:*:*:*:*","matchCriteriaId":"D48FD9D7-E775-4E26-AEBF-01A09C404D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2:*:*:*:*:*:*","matchCriteriaId":"89EA3CF3-0AB7-4648-96BA-25E978D2C8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc2_git7:*:*:*:*:*:*","matchCriteriaId":"3E4DB179-F78F-4D36-A47D-557FB1B945DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29:rc8-kk:*:*:*:*:*:*","matchCriteriaId":"23859759-4748-4A03-9D78-083C77CFF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*","matchCriteriaId":"04BCABEB-DE2A-4C85-BFD5-7A1318479ECA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*","matchCriteriaId":"A67A63E8-837E-4162-999E-3B3DAAE57C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*","matchCriteriaId":"A701E87D-B807-426E-9CD4-6721DBCABE19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*","matchCriteriaId":"66F6E506-EC0A-4784-BDA3-B7B5CD938B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*","matchCriteriaId":"DBFA0277-B491-4BB1-88DC-85362F0A689C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*","matchCriteriaId":"BE922924-6496-4D24-94A6-8EDD431A4568"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc1:*:*:*:*:*:*:*","matchCriteriaId":"0D5FC0A9-A78A-4D09-BDCC-208AFC899824"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2:*:*:*:*:*:*:*","matchCriteriaId":"7DBFC9DD-B7C2-4FB2-A8F6-29FF50EFAAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.29.rc2-git1:*:*:*:*:*:*:*","matchCriteriaId":"54B3BFC1-4B0A-4D63-BFA2-CF6A51A8D2F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*","matchCriteriaId":"10E55450-F6D9-483C-9CC8-E651E5A12AB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc1:*:*:*:*:*:*","matchCriteriaId":"45273823-29EA-44DE-8444-3933402C5793"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*","matchCriteriaId":"88F60E74-09DB-4D4A-B922-4A46EED0EC20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*","matchCriteriaId":"E242D3DE-D1DC-406A-BCC3-C4380B7EC369"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:x86_32:*:*:*:*:*","matchCriteriaId":"06EFB3F7-2EAE-4A56-A9A1-E8C734E6B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*","matchCriteriaId":"8598D6E5-0C5C-4A31-841A-C12801DB7D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*","matchCriteriaId":"59800B0A-477B-42F8-A58A-5144F455AE01"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30:rc7-git6:*:*:*:*:*:*","matchCriteriaId":"F166BF6B-BFB0-4206-BD59-179701572F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*","matchCriteriaId":"99AC6D46-A0BF-4F1D-88BB-03BF74FDB84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*","matchCriteriaId":"CC40B6DE-09D9-422B-965B-7EB9F6661DEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*","matchCriteriaId":"FEFB6E91-34CD-4FC5-A8E1-8F5760A9B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*","matchCriteriaId":"91170B40-4D25-4E40-8F0B-DBC1AE217F99"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*","matchCriteriaId":"9E28B8B9-B832-4D77-BE1A-BB5D8A678678"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*","matchCriteriaId":"56DF61F4-5DA1-4D79-B6C0-0E4DB825FB3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*","matchCriteriaId":"468745AA-0BE5-4B22-91FA-2FD350BD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*","matchCriteriaId":"FF208118-3534-47E5-9943-83EF165F1249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*","matchCriteriaId":"427E3009-A2F2-4ED2-8D1A-14938F639D2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.30.y:*:*:*:*:*:*:*","matchCriteriaId":"340C606B-EAA7-4D44-B811-16A34863D2AE"}]}]}],"references":[{"url":"http://osvdb.org/61335","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37928","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/23/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37453","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=549400","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01344.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/23/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=549400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01344.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4411","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack."},{"lang":"es","value":"Los comandos (1) setfacl y (2) getfacl en XFS acl v2.2.47, cuando corre en modo recursivo (-R), sigue enlaces simbólicos incluso cuando la opción física -- (como -P) o -L está especificada,lo que puede permitir a usuarios locales modificar el ACL por ficheros o directorios de su elección a través de un ataque sumlink."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of acl as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2010-01-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfs:acl:2.2.47:*:*:*:*:*:*:*","matchCriteriaId":"EF932DC1-59DD-45D4-A8F4-CA1BADB45565"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499076","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/acl.git/commit/?id=63451a0","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://oss.sgi.com/bugzilla/show_bug.cgi?id=790","source":"cve@mitre.org"},{"url":"http://osvdb.org/61302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37907","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38420","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:345","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/23/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37455","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55004","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/acl.git/commit/?id=63451a0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://oss.sgi.com/bugzilla/show_bug.cgi?id=790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/23/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4412","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de subida de ficheros sin restricciones Serendipity anterior v1.5 permite a usuarios utenticados remotamente ejecutar código de su elección por carga de un fichero con una extensión ejecutable seguida por una extensión segura, luego accede a él a través de una petición directa en un archivo en un directorio no especificado. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:*:beta1:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"F0F5F27E-C1FB-4E45-AAD4-4E9DE2589A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*","matchCriteriaId":"62233D77-9838-48AB-9A2D-F4EAA9E237EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DCAE37-B4E9-490E-B441-CA6DD4DBBE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5:pl1:*:*:*:*:*:*","matchCriteriaId":"5A65D59D-DDFF-4551-987C-D449A4C6F57A"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E7930F0-59AD-45D6-B79D-92DB88EFF4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6:pl3:*:*:*:*:*:*","matchCriteriaId":"894A8EF2-0014-49CB-9947-65E1C3CDE0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*","matchCriteriaId":"925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C739BCD2-1722-42E0-9560-752DBBF05BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B7515A9A-1FD0-484E-97CB-5969729804DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"40A451C0-D4D8-43FF-BFC9-E525138DCA37"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"9E1F8976-0691-4C47-9BA3-BC01BA808BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"7B2FF146-8CEF-48C8-81A3-08B4736DC27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"5986FA95-D0F8-4E41-A445-F2F0EFEE872A"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"22A4B77F-67DC-4D25-8948-0C0B59C38E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.9:*:*:*:*:*:*:*","matchCriteriaId":"E24AD8E2-AEB7-4D73-9B15-AE0B293A0825"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"47CE7E31-9C42-434E-B1B7-F38966514405"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F5193D1-4BB6-4B2C-8361-BA1C7BE7524B"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B62B695-74A2-49AA-87EF-38F129A94755"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6D4ACB96-F32D-40E2-A9F3-A3CD78658C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B027CFC-5E0E-45D3-82BC-8F59F386D188"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A3C6CB12-9D14-4D5C-8FC0-02179436B487"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1:*:*:*:*:*:*:*","matchCriteriaId":"23D55BCF-58D1-48D8-9BA2-2884F6126F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1:beta1:*:*:*:*:*:*","matchCriteriaId":"C38FD28F-ACEA-4F2D-9CD8-A35349FCF9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"707176E4-B735-4A6A-AC7D-01250663D25D"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0132EF3F-F9D8-4CEC-A774-4929B4DE6E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E2217392-37F3-4CC6-85DE-33CB8841814F"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"706E7CF6-C396-4A19-B87C-05BA8C8D9EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D0C422BF-FBDE-4DD2-BB55-868B19890479"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A1E92848-05FA-45EE-BD8A-98E337131892"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.3:*:*:*:*:*:*:*","matchCriteriaId":"96AD0492-E4D4-4A43-80EF-5F38F62DFF25"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7B176479-5EFB-4943-801A-676B74C04DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D68BD0B3-FB77-4288-93F4-2E018789D858"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0E6CE765-5EA9-4E38-8EB4-2913CEBE5F44"}]}]}],"references":[{"url":"http://blog.s9y.org/archives/211-Serendipity-1.5-released.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61245","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/21/1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54985","source":"cve@mitre.org"},{"url":"http://blog.s9y.org/archives/211-Serendipity-1.5-released.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/21/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4413","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault."},{"lang":"es","value":"La función httpClientDiscardBody en client.c en Polipo v0.9.8, v0.9.12, v1.0.4, y probablemente otras versiones, permite a atacantes remotos causar una denegación de servicio (caída) a través de una petición con un valor largo Content-Length, lo que lanza una desbordamiento de enteros, un error de conversión de signo con un valor negativo, y un fallo de segmentación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"E47C62BD-4423-46C3-99F4-C5B85B8A3EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"93902630-EC59-48AA-BCEA-FEEBDC6518F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pps.jussieu:polipo:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDA6AD38-1D25-43BE-8FCB-B337FFA0A137"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38647","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2002","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10338","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/12/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37463","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/10338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4414","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in phpgwapi /inc/class.auth_sql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the passwd parameter to login.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en phpgwapi /inc/class.auth_sql.inc.php en phpGroupWare v0.9.16.12, y probablemente otras versiones anteriores a v0.9.16.014, cuando magic_quotes_gpc es desactivado, permite a atacantes remotos ejecutar comandos SQL de su elección a através del parámetro passwd en login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*","matchCriteriaId":"CB63C1A0-4C62-424B-A858-09DB6AB19BEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/35519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/inc/class.auth_sql.inc.php?r1=14407&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/20/1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/inc/class.auth_sql.inc.php?r1=14407&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4415","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allow remote attackers to (1) read arbitrary files via the csvfile parameter to addressbook/csv_import.php, or (2) include and execute arbitrary local files via the conv_type parameter in addressbook/inc/class.uiXport.inc.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio  phpGroupWare v0.9.16.12, y problemente otra versiones anteriores a v0.9.16.014, permite a atacantes remotos (1) leer ficheros de su elección a través del parámetro addressbook/csv_import.php, o (2) incluir y ejecutar ficheros locales de su elección a través del parámetro conv_type en addressbook/inc/class.uiXport.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.12:*:*:*:*:*:*:*","matchCriteriaId":"3C58F242-81C3-4739-B28D-2D2FD8F0DEE1"}]}]}],"references":[{"url":"http://secunia.com/advisories/35519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/20/1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56177","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51921","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51924","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4416","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T16:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter whose name begins with the \"phpgw_\" sequence."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en login.php en phpGroupWare v0.9.16.12, y probablemente otras versiones anteriores a v0.9.16.014, permite a atacantes remotos inyectar código web y HTML de su elección a través de un parámetro elegido cuyo nombre empieza con la secuencia \"phpgw_\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.12:*:*:*:*:*:*:*","matchCriteriaId":"3C58F242-81C3-4739-B28D-2D2FD8F0DEE1"}]}]}],"references":[{"url":"http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php?r1=19063&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"cve@mitre.org"},{"url":"http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/20/1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/56179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51923","source":"cve@mitre.org"},{"url":"http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/login.php?r1=19063&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/12/20/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/56179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4417","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to \"events not yet mailed.\""},{"lang":"es","value":"La función shutdown en la clase Zend_Log_Writer_Mail en Zend Framework (ZF) permite a atacantes dependientes del contexto enviar mensajes e-mail de su lección a varias direcciones a través de vectores relacionados con \"events not yet mailed.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.6","matchCriteriaId":"334E688F-3867-44D7-8264-EC51AE0508E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.1.3:preview:*:*:*:*:*:*","matchCriteriaId":"770E9C84-245C-4221-B052-760B58D9B5A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.1.4:preview:*:*:*:*:*:*","matchCriteriaId":"C496CB2F-11C5-44CD-BB27-99D9E44509D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.1.5:preview:*:*:*:*:*:*","matchCriteriaId":"F09A9886-A05A-4BB5-B60C-581727B97188"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.2.0:preview:*:*:*:*:*:*","matchCriteriaId":"82E8126C-B45B-4C17-889A-199124F522A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.6.0:preview:*:*:*:*:*:*","matchCriteriaId":"73ACFDCC-0820-478D-AC22-C8918FB65069"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.7.0:preview:*:*:*:*:*:*","matchCriteriaId":"78476AC3-7D61-437F-A75F-2D132743F8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.8.0:preview:*:*:*:*:*:*","matchCriteriaId":"8DF01F7E-7789-4581-912B-A684A9D2E002"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.9.0:beta:*:*:*:*:*:*","matchCriteriaId":"113F6FC7-7D4A-4E42-BF2A-5AB1EAD09FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.9.1:beta:*:*:*:*:*:*","matchCriteriaId":"0862A254-A0DE-4FFE-BD91-0E74B72200B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.9.2:beta:*:*:*:*:*:*","matchCriteriaId":"FE06C17B-1F03-4AB4-8750-E3D41BD93FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:0.9.3:beta:*:*:*:*:*:*","matchCriteriaId":"4C32D39E-9F8B-4075-BE97-C00FAAF3FA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F24612A3-97EC-4D43-BCFE-54AE763B7B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"3CE5E7F4-08B4-4652-9B44-808F463486A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"4FB7C26A-4513-477E-A567-BC174F26979F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"158EB00A-C9F8-4950-BE39-03CF1E812C51"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F79464B-8B67-4C92-8D23-5B02683971CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A7596F01-0E5D-414C-8B4E-292599E0B682"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B21DC269-FF67-4200-8EF0-6B495E651DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7E55DDEC-915E-4110-BA5E-6B9499476E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"29FE0D2E-2EB7-4852-9ADE-31B9EBC3711C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.0:preview:*:*:*:*:*:*","matchCriteriaId":"0A952D21-0A96-486B-95E5-FB80901D2F4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"72A01D3B-9E25-4895-ABCA-09C3EF52273D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"5D6B1180-A010-4FDA-BBCA-8371D24245B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"118C94B9-B15C-47C8-B7F6-28C7EA87A8F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1B3DCA68-3F61-468D-B84C-322B631BF4F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0EDFCD26-899F-4E92-A3E8-6737F730E528"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6A35B1EF-7ACC-41A8-A92F-C072E020C9D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3091B3F3-5869-49D0-ABDF-E718B895E4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"9437F767-D0A8-4C32-A37D-30001B110241"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"1C5F02AE-74FB-4702-B952-0253ED92B8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"3B31A0A9-DA33-4467-BA7A-C787AC7EAA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"119E69BE-613E-47F7-B4D6-C1040F104C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"A9D402AD-8A7B-42DD-946A-69245A990E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"51BC531E-CB64-4868-A1FE-1C6789648913"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.0:preview:*:*:*:*:*:*","matchCriteriaId":"07A89286-6B32-4FF4-84BC-59847A62B5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"67887386-4BB5-4641-A69F-B7B475861655"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"150E8C92-8CAF-49E8-BFE8-7FFC2609D11F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"9493E0D3-2869-4483-B0FA-A8372EF63A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"7DB96BC6-3DE5-43E1-BAB4-23F30B6B682A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.5:*:*:*:*:*:*:*","matchCriteriaId":"5FB62314-F8BD-4395-8887-F79B24437A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"A92376AB-A64D-4CEF-AC67-AD532930B726"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.7:*:*:*:*:*:*:*","matchCriteriaId":"1596B661-CBE2-4C1B-A3EC-E15960FAFF15"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.7.8:*:*:*:*:*:*:*","matchCriteriaId":"29A6547D-C06D-43A3-BA18-C9641E3D28D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"7BCC9681-C58B-46D9-81C3-2C6322D00213"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"60ED68B0-7ACB-429E-91C6-C696BC34E048"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"2913860D-FD3B-4ACA-8361-6C2D32A77B08"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"E5891BDF-06C7-4850-BA68-EA43E55B363F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"DCC70F1A-558E-47EB-B491-6E4E4F2303DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DC86A1-00D1-4641-8F3E-95AC657AF4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F05CC4DB-3A74-488F-9F4E-FDA2C228334D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9:*:*:*:*:*:*:*","matchCriteriaId":"02E5072A-E0E8-4E35-8AF1-3EB69C31534D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E64E4177-E625-4A02-ACBC-925A7A30EAC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"489F3D0C-750E-4C99-99F6-3D8C4B799417"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"2CADFAD7-A510-4B6C-9602-D0D11D60DB65"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CC368DD3-DD91-48FD-A200-ACAB587519FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9CA4DEC3-4278-4DF5-8ABA-8F6705C8C01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"1645229C-668A-496C-B67C-FB45D7E1393D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"07D71366-4356-4430-B616-F743BF7E4218"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"B6C168F4-0B34-41F6-BD0C-744ECF1D8199"},{"vulnerable":true,"criteria":"cpe:2.3:a:zend:framework:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"D6822EB4-AA0D-4F25-BCD3-06CD7A0BAD38"}]}]}],"references":[{"url":"http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4418","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The unserialize function in PHP 5.3.0 and earlier allows context-dependent attackers to cause a denial of service (resource consumption) via a deeply nested serialized variable, as demonstrated by a string beginning with a:1: followed by many {a:1: sequences."},{"lang":"es","value":"La función deserializada (unserialize) en PHP 5.3.0 y anteriores permite a atacantes dependientes del contexto causar una denegación de servicio (consumo de recursos) a través una variables anidadas profundamente, como queda demostrada con una cadena inicializada con a:1: seguida de una larga secuencia {a:1: ."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security flaw. For further details, see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4418","lastModified":"2010-01-04T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.0","matchCriteriaId":"74041A08-9056-48CA-99EC-3427600DC90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5:*:*:*:*:*:*:*","matchCriteriaId":"6A7EED44-A15E-451F-BF5B-DB0BECA73C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*","matchCriteriaId":"F526115E-A68E-4B10-AA6A-9CD26CB81AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E1F32DDF-17A3-45B5-9227-833EBEBD3923"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"2CDFB7E9-8510-430F-BFBC-FD811D60DC78"}]}]}],"references":[{"url":"http://www.suspekt.org/2009/11/28/shocking-news-in-php-exploitation/","source":"cve@mitre.org"},{"url":"http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf","source":"cve@mitre.org"},{"url":"http://www.suspekt.org/2009/11/28/shocking-news-in-php-exploitation/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suspekt.org/downloads/POC2009-ShockingNewsInPHPExploitation.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4419","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded."},{"lang":"es","value":"Intel Q35, GM45, PM45 Express, Q45, Y Q43 Express chipsets en the SINIT Authenticated Code Module (ACM), permite a usuarios locales superar el mecanismo de Trusted Execution Technology y obtener privilegios por modificación del registro MCHBAR para que apunte a una región controlada por el atacantes, lo que impide a la instrucción SENTER la adecuada protección desde applying VT-d, mientras un MLE es cargado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:gm45_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"F820DB42-1097-44D9-B0FF-3DBED0EFEFEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:pm45_express_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"196FAB68-CF7B-4D0C-9E4A-193671C6FCCC"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:q35_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"46D47457-4812-4004-899F-2D7B4A9B0456"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:q43_express_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"E87258C4-5FC7-4102-BB05-86CBE8855774"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:q45_chipset:*:*:*:*:*:*:*:*","matchCriteriaId":"3970B242-DEA1-4D0D-9ABD-B0512072AC27"}]}]}],"references":[{"url":"http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf","source":"cve@mitre.org"},{"url":"http://osvdb.org/61248","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37430","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023382","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54963","source":"cve@mitre.org"},{"url":"http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4420","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service (crash) via unknown vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento de buffer en el demonio bd en F5 Networks BIG-IP Application Security Manager (ASM) v9.4.4 hasta v9.4.7 y v10.0.0 hasta v10.0.1, y Protocol Security Manager (PSM) v9.4.5 hasta v9.4.7 y v10.0.0 hasta v10.0.1, permite a atacantes remotos causar una denegación de servicio (caída) a través de vectores desconocidos. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_protocol_security_module:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2691943C-1FD1-43EE-B070-E35710E426ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_application_security_manager:9.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CEABC433-37BD-4A53-A872-92564807F022"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_application_security_manager:9.4.5:*:*:*:*:*:*:*","matchCriteriaId":"409B66AC-292F-426D-A908-D6D865A25CA8"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_application_security_manager:9.4.6:*:*:*:*:*:*:*","matchCriteriaId":"AEAA4B9A-B1FB-4273-A0B3-A69F49D940D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_application_security_manager:9.4.7:*:*:*:*:*:*:*","matchCriteriaId":"44D22108-C65D-4BB4-8141-B05F053863BD"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_application_security_manager:10.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B42FE789-9F15-4450-B1B8-7D2A044A26A8"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_application_security_manager:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B598A78-EF2C-461F-844E-84B0971A2F5D"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_protocol_security_manager:9.4.5:*:*:*:*:*:*:*","matchCriteriaId":"5AE2CC21-3B8B-443B-A427-482B8A9D80DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_protocol_security_manager:9.4.6:*:*:*:*:*:*:*","matchCriteriaId":"50191BEE-7001-43DC-8AEE-01E233594752"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_protocol_security_manager:9.4.7:*:*:*:*:*:*:*","matchCriteriaId":"178C7BDD-639E-4472-BEDE-9187CD50DA4F"},{"vulnerable":true,"criteria":"cpe:2.3:h:f5:big-ip_protocol_security_manager:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"07B38707-9BD0-4E41-93A4-CCDDF1E8BC73"}]}]}],"references":[{"url":"http://osvdb.org/61297","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37805","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37452","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023386","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3627","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55005","source":"cve@mitre.org"},{"url":"https://support.f5.com/kb/en-us/solutions/public/10000/400/sol10417.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/61297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/10000/400/sol10417.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4421","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the blog_language1 parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en languages_cgi.php en Simple PHP Blog v0.5.1 y anteriores permite a usuarios autenticados incluir y ejecutar ficheros a su elección a través de .. (punto punto) en el parámetro blog_language1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.1","matchCriteriaId":"801C2AC1-F15E-4F78-BC9C-8395B31F6D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.3.7c:*:*:*:*:*:*:*","matchCriteriaId":"CA3A47B4-46A9-49DF-A06B-D76FA67318EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"5484A9DD-01B6-42AC-AF93-F2B4CA33DB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"10B1AB7A-63C5-43EA-8EF0-1934EE174719"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"AA9FA414-82D3-4540-99E1-35E6680316FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"52D0A226-6644-46C6-95ED-FAD553F6C736"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7FDC4414-F257-461B-AE73-9F295EB4F978"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_palmo:simple_php_blog:0.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"26D83F04-D2F2-4530-9A56-6650AA40BBB7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0398.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508546/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37434","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54970","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0398.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508546/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4422","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csim_in_html_ex1.php, and other unspecified vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la función GetURLArguments en jpgraph.php en Aditus Consulting JpGraph v3.0.6 permite a atacantes remotos inyectar código web y HTML de su elección a través de una llave en csim_in_html_ex1.php, y otros vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aditus:jpgraph:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EFC7D953-D333-443F-93BD-EE50ADD9CF32"}]}]}],"references":[{"url":"http://osvdb.org/61268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:340","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508586/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37483","source":"cve@mitre.org"},{"url":"http://osvdb.org/61268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508586/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4423","sourceIdentifier":"cve@mitre.org","published":"2009-12-24T17:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands via the moduleid parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL in index.php en weenCompany v4.0.0 permit a atacantes remotos ejecutar comandos SQL a su elección a través del parámetro moduleid. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:weentech:weencompany:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"189E3314-F750-428E-A54C-3BE10D149A6A"}]}]}],"references":[{"url":"http://osvdb.org/61264","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/weencompany-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10606","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54996","source":"cve@mitre.org"},{"url":"http://osvdb.org/61264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/weencompany-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4424","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en results.php in el plugin Pyrmont v2 para WordPress permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"id\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imotta:pyrmont_plugin:2:*:*:*:*:*:*:*","matchCriteriaId":"6BB262BD-10B6-4679-851B-4511F0AE0645"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/wppyrmont-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10535","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37409","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54907","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/wppyrmont-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4425","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter in a browse action."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php en iDevCart v1.09 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro \"SEARCH\" en una acción browse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:idevcart:1.09:*:*:*:*:*:*:*","matchCriteriaId":"7702A742-8E9D-4192-B405-122394634BAB"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/idevcart-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10490","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/61069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54906","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/idevcart-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/61069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4426","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the blog parameter to (1) comment.php and (2) view.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en Ignition v1.2, cuando está deshabilitado magic_quotes_gpc, permite a atacantes remotos incluir y ejecutar ficheros de su elección mediante los caracteres .. (punto punto) en el parámetro \"blog\" en (1) comment.php y (2) view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:launchpad:ignition:1.2:*:*:*:*:*:*:*","matchCriteriaId":"90ABF56F-EA18-41AA-B326-757934267965"}]}]}],"references":[{"url":"http://osvdb.org/61225","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/61226","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0912-exploits/ignition-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37836","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54940","source":"cve@mitre.org"},{"url":"http://osvdb.org/61225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/61226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0912-exploits/ignition-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4427","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.687","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en cmd.php en phpLDAPadmin v1.1.0.5 permite a atacantes remotos incluir y ejecutar ficheros de su elección mediante los caracteres .. (punto punto) en el parámetro \"cmd\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpldapadmin_project:phpldapadmin:1.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"02F4D952-EACF-43E8-A9B1-8F94F6E118CF"}]}]}],"references":[{"url":"http://secunia.com/advisories/37848","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/10410","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/61139","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/bid/37327","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/37848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/10410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/61139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/bid/37327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-4428","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the secid parameter in a showcat action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente JoomPortfolio (com_joomportfolio) v1.0.0 para Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"secid\" in una acción \"showcat\" en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomplace:com_joomportfolio:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"035B5AED-3218-4EC6-A706-591D4A6189CC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","matchCriteriaId":"E45D1087-8182-43A1-81BD-B0D5A535EC98"}]}]}],"references":[{"url":"http://osvdb.org/61138","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/joomlaportfolio-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37838","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37403","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54912","source":"cve@mitre.org"},{"url":"http://osvdb.org/61138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0912-exploits/joomlaportfolio-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4429","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with \"administer sections\" privileges to inject arbitrary web script or HTML via a section name (aka the Name field)."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Sections v5.x anteriores a v5.x-1.3 y v6.x anteriores a v6.x-1.3 para Drupal permite a usuarios autenticados remotamente con privilegios de \"administrar secciones\" inyectar secuencias de comandos web o HTML de su elección mediante un nombre de sección (también conocido como campo \"Name\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"0F681C08-596E-4EA4-897E-E6A1BDCE5316"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"1EEBAAFF-FF7A-4890-85A0-BF4A8733B644"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"CAD92B36-CCAB-4F8F-91E1-40ADF60A9490"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"947DCA57-3445-4727-8F85-16DE5C9C1B27"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"2159DE60-2546-47A9-B6A6-91E8AB5EF5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"91C956B3-D216-4952-9152-D587F881C6FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"511C853F-60BC-4998-98FF-10B7542F1C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_hass:sections_module:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A18B209E-3E9A-464F-B3EC-221F66BA2FC9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/661404","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.madirish.net/?article=440","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/61107","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37371","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54860","source":"cve@mitre.org"},{"url":"http://drupal.org/node/661404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.madirish.net/?article=440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4430","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a shop.product_details shop.flypage action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en VirtueMart v1.0 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"product_id\" en una acción \"shop.product_details shop.flypage\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuemart:virtuemart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"064AAF7F-51BB-43D6-B814-602BF33B4158"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10533","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4431","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro or JCP) component 1.5.3.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en cal_popup.php en el componente Anything Digital Development JCal Pro (también conocido como com_jcalpro o JCP) v1.5.3.6 para Joomla! permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro \"mosConfig_absolute_path\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anything-digital:com_jcalpro:1.5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4E554A36-A1CD-4775-B3D7-DC8A2915D347"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/joomlajcalpro-rfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37438","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0912-exploits/joomlajcalpro-rfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4432","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.813","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL commands via the v parameter in a video action."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.php en CodeMight VideoCMS v3.1 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"v\" en una acción video."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codemight:videocms:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B2075498-65F4-408F-82E3-7854E887AE02"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/videocms-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37889","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10586","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0912-exploits/videocms-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4433","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.843","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (a) 5 or (b) 9 field in a post action to ticket_function.php, reachable through ticket_submit.php and index.php; (c) the which parameter to function.php, or (d) the which parameter to index.php, related to knowledgebase_list.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en IDevSpot iSupport v1.8 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el campo (a) 5 o (b) 9 en una acción post de ticket_function.php, reachable through ticket_submit.php y index.php; (c) el parámetro \"which\" de function.php, o (d) el parámetro \"which\" de index.php, relacionado con knowledgebase_list.php. NOTA: algunos de estos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:isupport:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"D31D3E09-AB46-41AF-81A4-CCE3CA6C7C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:isupport:1.02:*:*:*:*:*:*:*","matchCriteriaId":"61E9972C-8C1A-435A-A905-8D3E03B8167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:isupport:1.06:*:*:*:*:*:*:*","matchCriteriaId":"05D0FC32-BE89-4EDE-8DBA-463D7D10FA61"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/61109","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/61111","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/61112","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54859","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/61109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/61112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4434","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.860","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php en IDevSpot iSupport v1.8 y anteriores permite a atacantes remotos leer ficheros de su elección mediante los caracteres .. (punto punto) en el parámetro \"include_file\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:isupport:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"D31D3E09-AB46-41AF-81A4-CCE3CA6C7C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:isupport:1.02:*:*:*:*:*:*:*","matchCriteriaId":"61E9972C-8C1A-435A-A905-8D3E03B8167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:idevspot:isupport:1.06:*:*:*:*:*:*:*","matchCriteriaId":"05D0FC32-BE89-4EDE-8DBA-463D7D10FA61"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/61110","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/61110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4435","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.890","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de directorio en F3Site v2009 permite a atacantes remotos incluir y ejecutar ficheros locales de su elección mediante secuencias de salto de directorio en el parámetro \"GLOBALS[nlang]\" de (1) mod/poll.php y (2) mod/new.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compmaster.prv.pl:f3site:2009:*:*:*:*:*:*:*","matchCriteriaId":"E8452088-BBD7-4BF2-BB63-18CA75220465"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10536","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37408","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54908","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/10536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4436","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.953","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Active Web Softwares eWebquiz v8 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro \"QuizID\" en (1) questions.asp, (2) importquestions.asp, y (3) quiztakers.asp, siendo vectores diferentes que CVE-2007-1706."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:ewebquiz:8.0:*:*:*:*:*:*:*","matchCriteriaId":"21B2E121-BDE5-4727-9FC1-89BD874AD6DB"}]}]}],"references":[{"url":"http://secunia.com/advisories/24653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37402","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54892","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/24653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4437","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:00:00.983","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp.  NOTE: vector 1 might overlap CVE-2005-1029.1."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en Active Auction House v3.6 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) \"catid\" de wishlist.asp y (2) \"linkid\" de links.asp. NOTA: el vector 1 podría solaparse con CVE-2005-1029.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_auction_house:3.6:*:*:*:*:*:*:*","matchCriteriaId":"18134A1B-8FC6-4376-9AB9-42D318D28DF3"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0912-exploits/activeauctionhouse-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/14839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10520","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37401","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54891","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0912-exploits/activeauctionhouse-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/14839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4438","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not enforce privilege requirements for access to a (1) sequence or (2) global-variable object, which allows remote authenticated users to make use of data via unspecified vectors."},{"lang":"es","value":"El componente Query Compiler, Rewrite, and Optimizer en IBM DB2 v9.1 anteriores a FP8, v9.5 anteriores a FP5, v9.7 anteriores a FP1 no refuerza los requisitos de privilegios para acceder a (1) una secuencia o (2) objetos de variables globales, permite a usuarios autenticados remotamente usar los datos mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*","matchCriteriaId":"2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*","matchCriteriaId":"95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4DF01163-F805-4FC8-9836-462034D1B5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*","matchCriteriaId":"E570E88C-35F8-4E12-8121-20536AC8A0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*","matchCriteriaId":"757E30FB-2EFB-4B3D-9931-17D584D433A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*","matchCriteriaId":"B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*","matchCriteriaId":"47455B4A-6E10-417F-9974-B0AA7F3180FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*","matchCriteriaId":"84156C5B-EFC6-4733-A868-C3C51CFBA7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*","matchCriteriaId":"FA8ABABB-F84D-41F0-A894-56911AF6E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*","matchCriteriaId":"3D511307-1EBB-408B-BCDE-C6BEFCF154C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*","matchCriteriaId":"61252AF9-A231-442A-A473-BA0608323BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*","matchCriteriaId":"EB37A1AA-58F0-4A39-8E38-C70692CE67BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*","matchCriteriaId":"CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC62583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC64852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4439","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Query Compiler, Rewrite, and Optimizer en IBM DB2 v9.5 anteriores a FP5 permite a usuarios autenticados remotamente provocar una denegación de servicio (parada de la instancia) al compilar una consulta SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*","matchCriteriaId":"58147402-53D5-4F15-862B-EE3DCCD75E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*","matchCriteriaId":"D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*","matchCriteriaId":"CB2EA14A-878A-4D8D-B17A-568712D21C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*","matchCriteriaId":"84C925CD-E753-401F-9EC0-6E3D9861C818"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*","matchCriteriaId":"651D042C-A9F1-42D1-A6DD-95ADBCD08448"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*","matchCriteriaId":"0A589323-B8B8-4CB4-B1A9-B9E771C99123"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*","matchCriteriaId":"61252AF9-A231-442A-A473-BA0608323BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*","matchCriteriaId":"EB37A1AA-58F0-4A39-8E38-C70692CE67BF"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37759","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21293566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21412902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4440","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges of this user, by making a client connection in opportunistic circumstances, related to \"long binds,\" aka Bug Ids 6828462 and 6823593."},{"lang":"es","value":"Directory Proxy Server (DPS) en Sun Java System Directory Server Enterprise Edition v6.0 hasta v6.3.1 no maneja adecuadamente múltiples conexiones de cliente en un periodo corto de tiempo, permitiendo a atacantes remotos secuestrar la conexión interna de un usuario autenticado, al realizar una conexión cliente en las circunstancias oportunas, relacionado con \"long binds\", también conocido como Bug Ids 6828462 y 6823593."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"A2AAC3E9-6B8A-48DC-A135-715F94F078F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*","matchCriteriaId":"C8490D6F-42B3-4602-84A5-BBDD4315F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*","matchCriteriaId":"1FE986BB-D278-4B34-9DC1-5D3102F94AF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/37915","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023389","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4441","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SO_KEEPALIVE socket option, which makes it easier for remote attackers to cause a denial of service (connection slot exhaustion) via multiple connections, aka Bug Id 6782659."},{"lang":"es","value":"Directory Proxy Server (DPS) en Sun Java System Directory Server Enterprise Edition v6.0 hasta v6.3.1 no habilita opción SO_KEEPALIVE socket, facilitando a atacantes remotos provocar una denegación de servicio (agotamiento del slot de conexión) mediante múltiples conexiones, también conocido como Bug Id 6782659."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"A2AAC3E9-6B8A-48DC-A135-715F94F078F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*","matchCriteriaId":"C8490D6F-42B3-4602-84A5-BBDD4315F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*","matchCriteriaId":"1FE986BB-D278-4B34-9DC1-5D3102F94AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"2C2FEACE-2922-4731-B9DC-BFA025109E22"}]}]}],"references":[{"url":"http://secunia.com/advisories/37915","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023389","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4442","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote attackers to cause a denial of service (connection slot exhaustion) by making multiple connections and performing no operations on these connections, aka Bug Id 6648665."},{"lang":"es","value":"Directory Proxy Server (DPS) en Sun Java System Directory Server Enterprise Edition v6.0 hasta v6.3.1 no implementa adecuadamente los valores de configuración para el máximo número de conexiones clientes, permitiendo a atacantes remotos provocar una denegación de servicio (agotamiento del slot de conexión) al realizar múltiples conexiones y no realizando operaciones en estas conexiones, también conocido como Bug Id 6648665."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"A2AAC3E9-6B8A-48DC-A135-715F94F078F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*","matchCriteriaId":"C8490D6F-42B3-4602-84A5-BBDD4315F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*","matchCriteriaId":"1FE986BB-D278-4B34-9DC1-5D3102F94AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"2C2FEACE-2922-4731-B9DC-BFA025109E22"}]}]}],"references":[{"url":"http://secunia.com/advisories/37915","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023389","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4443","sourceIdentifier":"cve@mitre.org","published":"2009-12-28T19:30:00.517","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978."},{"lang":"es","value":"Vulnerabilidad no especificada en la funcionalidad psearch (también conocido como persistent search) en un Java System Directory Server Enterprise Edition v6.0 hasta v6.3.1 permite a atacantes remotos provocar una denegación de servicio (parada del psearch) al usar clientes psearch modificados para enviar peticiones que disparan un bucle en el proceso psearch, también conocido como Bug Id 6855978."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"A2AAC3E9-6B8A-48DC-A135-715F94F078F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*","matchCriteriaId":"C8490D6F-42B3-4602-84A5-BBDD4315F366"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*","matchCriteriaId":"1FE986BB-D278-4B34-9DC1-5D3102F94AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_directory_server:6.3.1:enterprise:*:*:*:*:*:*","matchCriteriaId":"2C2FEACE-2922-4731-B9DC-BFA025109E22"}]}]}],"references":[{"url":"http://secunia.com/advisories/37915","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023389","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4444","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T21:00:24.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a filename with a (1) .asp, (2) .cer, or (3) .asa first extension, followed by a semicolon and a safe extension, as demonstrated by the use of asp.dll to handle a .asp;.jpg file."},{"lang":"es","value":"Microsoft Internet Information Services (IIS) 5.x y 6.x usa sólo la porción de un nombre de fichero antes de un caracter ; (punto y coma) para determinar la extensión del fichero, lo que permite a atacantes remotos eludir las restricciones de extensión previstas para aplicaciones de subida de ficheros de terceros mediante un nombre de fichero con una primera extensión (1) .asp, (2) .cer o (3) .asa seguida de un punto y coma y una extensión segura, tal y como se ha quedado demostrado al usar asp.dll para manejar un fichero .asp;.jpg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9B4DF95D-B4B1-4FB6-9D27-A6D359EEACFA"}]}]}],"references":[{"url":"http://blogs.technet.com/msrc/archive/2009/12/27/new-reports-of-a-vulnerability-in-iis.aspx","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37831","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023387","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://soroush.secproject.com/downloadable/iis-semicolon-report.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/37460","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3634","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://blogs.technet.com/msrc/archive/2009/12/27/new-reports-of-a-vulnerability-in-iis.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://soroush.secproject.com/downloadable/iis-semicolon-report.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/37460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-4445","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T21:00:24.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : (colon) and a safe extension, as demonstrated by an upload of a .asp:.jpg file that results in creation of an empty .asp file, related to support for the NTFS Alternate Data Streams (ADS) filename syntax.  NOTE: it could be argued that this is a vulnerability in the third-party product, not IIS, because the third-party product should be applying its extension restrictions to the portion of the filename before the colon."},{"lang":"es","value":"Microsoft Internet Information Services (IIS), cuando es utilizado junto con aplicaciones de subida de archivos de terceras partes sin especificar, permite a atacantes remotos crear ficheros vacíos con extensiones de su elección a través de un nombre de fichero que contiene una extensión inicial seguida por : (dos puntos) y una extensión segura; como se ha demostrado con la subida de un fichero .asp:.jpg que resulta en la creacción de un fichero vacío .asp. Relacionado con el soporte de la sintaxis de nombres de ficheros de NTFS Alternate Data Streams (ADS). NOTA: se podría decir que es una vulnerabilidad del producto de terceras partes, no de IIS, porque el producto de terceras partes debería imponer restricciones a las extensiones en la porción de nombre de fichero anterior a los dos puntos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"5CB4C943-1963-41A8-9D40-D79C0488219B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023387","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://soroush.secproject.com/downloadable/iis-semicolon-report.pdf","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55308","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://soroush.secproject.com/downloadable/iis-semicolon-report.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4446","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en admin.php en phpInstantGallery v1.1 permite a atacantes remotos inyectar código web o HTML de su elección a través de PATH_INFO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikemcg:phpinstantgallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"ECFEA752-F09C-490D-8538-E4E1C1A0C089"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10709","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37502","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55062","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4447","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct request to admin/guestbook.admin.php."},{"lang":"es","value":"Jax Guestbook v3.5.0 permite a atacantes remotos superar la autenticación y modificar la configuración de administrador a través de una petición directa a admin/guestbook.admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jax_scripts:jax_guestbook:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1066BFA-E619-4E46-8BCF-E3BACDCA6AE3"}]}]}],"references":[{"url":"http://osvdb.org/61299","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10626","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37466","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55077","source":"cve@mitre.org"},{"url":"http://osvdb.org/61299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4448","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.453","lastModified":"2025-09-26T19:39:38.973","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, allows remote attackers to cause a denial of service (CPU consumption) via a crafted request with a large year value, which triggers a long loop, as reachable through member.php and possibly other vectors."},{"lang":"es","value":"inc/functions_time.php en MyBB (alias MyBulletinBoard) v1.4.10, y posiblemente versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) mediante una solicitud elaborada con un gran valor para el año, lo que dispara un bucle largo, como puede conseguirse a través de member.php y posiblemente otros vectores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1FF9452B-CF4B-45F0-8487-23D9CCBB1A4A"}]}]}],"references":[{"url":"http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev.mybboard.net/issues/600","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4613/diff/branches/1.4-stable/inc/functions_time.php","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2010/10/08/7","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2010/10/11/8","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2010/12/06/2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dev.mybboard.net/issues/600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4613/diff/branches/1.4-stable/inc/functions_time.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2010/10/08/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2010/10/11/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2010/12/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4449","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.500","lastModified":"2025-09-26T19:39:38.973","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters, related to (1) admin/modules/user/users.php and (2) usercp.php."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en MyBB (MyBulletinBoard) v1.4.10, y posiblemente versiones anteriores. Cuando se cambia el avatar de usuario desde la galería, permite a usuarios remotos autenticados determinar la existencia de ficheros a través de secuencias de salto de directorio en el avatar y posiblemente los parámetros de la galería. Relacionado con (1) admin/modules/user/users.php y (2) usercp.php."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.3},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1FF9452B-CF4B-45F0-8487-23D9CCBB1A4A"}]}]}],"references":[{"url":"http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://dev.mybboard.net/issues/617","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://openwall.com/lists/oss-security/2010/10/08/7","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/10/11/8","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/12/06/2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://osvdb.org/61359","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37906","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37489","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3651","source":"cve@mitre.org","tags":["Permissions Required","Vendor Advisory"]},{"url":"http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://dev.mybboard.net/issues/617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://openwall.com/lists/oss-security/2010/10/08/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/10/11/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://openwall.com/lists/oss-security/2010/12/06/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/61359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/37906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4450","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat, (2) lng, and (3) zom parameters, which are not properly handled when processed with templates/map.tpl."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en map.php en LiveZilla v3.1.8.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante los parámetros (1) lat, (2) lng y (3) zom, que no son manejados adecuadamente cuando son procesados con templates/map.tpl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livezilla:livezilla:3.1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"56789521-4DD0-4FE8-80E4-9D99BDD43551"}]}]}],"references":[{"url":"http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/61348","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508613/100/0/threaded","source":"cve@mitre.org"},{"url":"http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/61348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508613/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4451","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in fileup/."},{"lang":"es","value":"Vulnerabilidad de subida no restringida de ficheros en upper.php en kandalf versiones superiores a v0.1 permite a atacantes remotos ejecutar código de su elección al subir un fichero con una extensión ejecutable, accediendo posteriormente mediante una petición directa del fichero en fileup/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php.html:kandalf_upper:0.1:*:*:*:*:*:*:*","matchCriteriaId":"B732CD77-A268-41B0-B240-8510C83C163F"}]}]}],"references":[{"url":"http://osvdb.org/61370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37946","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/61370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4452","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse."},{"lang":"es","value":"Kaspersky Anti-Virus v5.0 (v5.0.712); Antivirus Personal v5.0.x; Anti-Virus v6.0 (v6.0.3.837), v7 (v7.0.1.325), 2009 (v8.0.0.x), and 2010 (v9.0.0.463); y Internet Security v7 (v7.0.1.325), 2009 (v8.0.0.x), and 2010 (v9.0.0.463); usan permisos débiles (Todo el mundo: Control Total) en el directorio BASES, lo que permite a usuarios locales obtener privilegios de SYSTEM sustituyendo un ejecutable o DLL con un caballo de troya."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.712:*:windows_workstations:*:*:*:*:*","matchCriteriaId":"1D6BB158-236E-4B5B-B32F-265484B88668"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0.3.837:*:windows_file_servers:*:*:*:*:*","matchCriteriaId":"FC269851-529F-4806-B873-1024F05EE1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0.3.837:*:windows_workstation:*:*:*:*:*","matchCriteriaId":"897366CD-7C06-4124-A66A-9D499FFE0E09"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:7.0.1.325:*:*:*:*:*:*:*","matchCriteriaId":"A80BDC43-39DB-49C9-9F73-A97B42EAE74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_2009:8.0.0.454:*:*:*:*:*:*:*","matchCriteriaId":"6CE76B5D-5587-4ECE-8530-440BF4F453B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_2010:9.0.0.463:*:*:*:*:*:*:*","matchCriteriaId":"46A667E4-8E75-4CFF-B30D-1D3D11200A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2BA07931-220A-4FCC-A83D-0C91563385DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.227:*:*:*:*:*:*:*","matchCriteriaId":"E101D150-B268-43AA-9876-469DF471DFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.228:*:*:*:*:*:*:*","matchCriteriaId":"22A10BAE-B162-4276-8B08-8E449D9B282D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.325:*:*:*:*:*:*:*","matchCriteriaId":"7F3AAC32-1911-4955-B1B1-CF7B26BEA3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_internet_security:7.0.1.325:*:*:*:*:*:*:*","matchCriteriaId":"65942CAB-ED76-4FC6-81AF-E3AE56A58185"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_internet_security_2009:8.0.0.506:*:*:*:*:*:*:*","matchCriteriaId":"03D166CB-4E20-4A58-BE03-EB342B477027"},{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_internet_security_2010:9.0.0.463:*:*:*:*:*:*:*","matchCriteriaId":"E125CB4B-DA1B-4D37-B1C7-9F7025716BA7"}]}]}],"references":[{"url":"http://secunia.com/advisories/37398","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10484","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508508/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023366","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023367","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/508508/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4453","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T20:41:20.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/749.html\r\n\r\n'CWE-749: Exposed Dangerous Method or Function'","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de método inseguro en el control ActiveX SoftCab Sound Converter (sndConverter.ocx) v1.2 permite a atacantes remotos crear o sobrescribir ficheros arbitrariamente a través del método SaveFormat. NOTA: Algunos de los detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softcab:sound_converter_activex:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9A23EA8A-FB65-41A4-9D00-72D13E23663F"}]}]}],"references":[{"url":"http://osvdb.org/61351","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37967","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10649","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55082","source":"cve@mitre.org"},{"url":"http://osvdb.org/61351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4454","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T22:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log."},{"lang":"es","value":"vccleaner en VideoCache v1.9.2 permite a usuarios locales con privelegios de usuario de proxy Squid sobreescribir ficheros de su elecci´no a a través de un ataque symlink en /var/log/videocache/vccleaner.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:saini:videocache:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"F54B3BC1-D6D5-45E9-8898-A41AABB981DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37733","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508507/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54916","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508507/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4455","sourceIdentifier":"cve@mitre.org","published":"2009-12-29T23:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web sites via a crafted URL obfuscated with ROT13 and a certain encoding.  NOTE: this issue was originally reported as a vulnerability related to lack of restrictions to URLs listed in the Cisco WebVPN bookmark component, but the vendor states that \"The bookmark feature is not a security feature.\""},{"lang":"es","value":"La configuración por defecto de Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) v7.0, v7.1, v7.2, v8.0, v8.1, y v8.2 permite que el tráfico del portal acceda a servidores de su elección en el backend, lo que podría permitir a usuarios autenticados remotamente eludir las restricciones de acceso implementadas y acceder a sitios web no autorizados mediante una URL ofuscada con ROT13 y cierto cifrado. NOTA: este comportamiento fue reportado originalmente como una carencia de restricciones en el listado de URLs en el componente de marcadores de Cisco WebVPN, pero el fabricante mantiene que \"la característica de marcador no es una característica de seguridad\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*","matchCriteriaId":"235C2CE5-C858-4037-AE35-E6D506301894"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*","matchCriteriaId":"76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*","matchCriteriaId":"97290344-5440-4797-9668-AA1050E87C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.2:*:*:*:*:*:*:*","matchCriteriaId":"3C856B88-C146-4C0E-A7C1-74647897C370"}]}]}],"references":[{"url":"http://osvdb.org/61132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37710","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508530/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023368","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/61132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=19609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508530/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4456","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T00:30:00.420","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en news_detail.php en Green Desktiny v2.3.1, y probablemente versiones anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greendesktiny:green_desktiny:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"83F62481-CE23-44EE-B9BD-C57A90CD7F8C"}]}]}],"references":[{"url":"http://osvdb.org/61353","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10710","source":"cve@mitre.org"},{"url":"http://osvdb.org/61353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4457","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T00:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the Vsftpd Webmin module before 1.3b for the Vsftpd server have unknown impact and attack vectors related to \"Some security issues.\""},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en el módulo Vsftpd Webmin versiones anteriores a 1.3b para el servidor Vsftpd tienen un impacto desconocido y vectores de ataque relacionados con \"algunos elementos de seguridad\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:provider4u:vsftpd_webmin_module:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2b","matchCriteriaId":"9B5AB73C-439D-4230-8710-3BD377FDF53F"},{"vulnerable":true,"criteria":"cpe:2.3:a:provider4u:vsftpd_webmin_module:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"771408DD-3756-419C-98DD-D1DF4CCAD6CB"}]}]}],"references":[{"url":"http://freshmeat.net/projects/vsftpdwebmin/releases/310064","source":"cve@mitre.org"},{"url":"http://osvdb.org/61362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/41443","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/projects/vsftpdwebmin/releases/310064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/41443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4458","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T00:30:00.467","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the (1) tech parameter to admin/admin/config.php during a trunks display action, the (2) description parameter during an Add Zap Channel action, and (3) unspecified vectors during an Add Recordings action."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en FreePBX v2.5.2 y v2.6.0rc2, y probablemente otras versiones, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante (1) el parámetro \"tech\" en admin/admin/config.php durante una acción trunks display, (2) el parámetro \"description\" durante una acción Add Zap Channel, y (3) vectores no especificados durante una acción Add Recordings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B5B657C6-A2DF-432A-9F46-1157C630CB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:freepbx:freepbx:2.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E2E4487C-8475-46C0-B469-430B49F4C0D0"}]}]}],"references":[{"url":"http://osvdb.org/61357","source":"cve@mitre.org"},{"url":"http://osvdb.org/61358","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10645","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37482","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55054","source":"cve@mitre.org"},{"url":"http://osvdb.org/61357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4459","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.030","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as script by Internet Explorer 7 and 8."},{"lang":"es","value":"Redmine 0.8.7 y versiones anteriores usa la etiqueta título antes de definir el caracter de codificación en una etiqueta META lo que permite a atacantes remotos realizar ataques de secuencias de comandos en sitios cruzados (XSS) e inyectar secuencias de comandos de su elección mediante valores con codificación UTF-7 en el parámetro título para una página de nueva emisión, lo que puede ser interpratado como un script por Internet Explorer 7 y 8."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.7","matchCriteriaId":"0D32316B-7FE5-410C-BC35-33004CEBEBA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCB74CF-B69C-4ACF-B676-17082D54A769"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D0254A2D-10A5-4843-BE58-72A3B5284DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E19773B3-33A6-439A-93BB-1FB4FA86D4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1314065B-1B7A-41BC-89F2-EAEE8EA8A6BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F0BE09F2-954D-4A3E-B2D1-981EEF6AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBEA2E09-2CA8-4999-A841-02A8488F851A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F99DB71A-FBBE-4FFF-8EC6-D0EDAE8EDEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CF1E2430-4FFB-4AB4-A2BD-55711486D257"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0026FFCE-D748-41F4-B4E8-9852B3ED9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"554098E4-A9E5-4153-B8CD-8C987B7A8527"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"117F62E1-BEC6-416F-AD68-BC1AA260CC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"086659CB-5DD4-4B19-8223-76A85DF82D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1850A5B4-747D-4D6F-B625-7DE4857790E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"5FDE853B-C003-4C9F-9A00-AF84CCD0A05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"E235F356-CE27-4CFC-A064-D93E3FE0C7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7F66B7C8-0D70-4E53-90BC-938101BEB3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D4EDE791-F1E6-4E9C-9924-9AA8A34A2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A25E4182-E8BE-45BC-A591-463963D51341"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"450BD64C-120C-4803-84D8-7A2186B148B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"650A5A39-D2F1-41D1-B985-7051D0035B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0012C0B4-0B5A-4588-A81F-32652DECDA45"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"052CA2E7-73E8-4BA2-A98E-A527D635505D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D961E2C0-4061-4CCA-AA6A-6CB3AA096933"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B91BB4D5-4700-4874-8473-5CF8C9A39B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"69C39736-8851-4072-89C7-9635CC28BD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F8C1857C-A87F-4BE1-A4D9-458310DF0F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"ECBDF1A1-9739-4725-B3F8-D43A1847AB29"},{"vulnerable":true,"criteria":"cpe:2.3:a:redmine:redmine:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"D2E33486-ECAA-4568-86EE-40CAE068040A"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10554","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37425","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54947","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4460","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.093","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to (1) index.php, (2) faq.php, and (3) register.php."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Auto-Surf Traffic Exchange Script v1.1, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro rid sobre (1) index.html (2) faq.php y (3) register.php.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ljscripts:auto-surf_traffic_exchange_script:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C90E829-AF7E-4332-9834-CCFC4D250574"}]}]}],"references":[{"url":"http://osvdb.org/61285","source":"cve@mitre.org"},{"url":"http://osvdb.org/61286","source":"cve@mitre.org"},{"url":"http://osvdb.org/61287","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10616","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/61285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/61287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4461","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.127","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) contact.php, (2) login.php, and (3) search.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en FlatPress v0.909 permite atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a traves de PATH_INFO a (1) contact.php, (2) login.php, and (3) search.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flatpress:flatpress:0.909:*:*:*:*:*:*:*","matchCriteriaId":"02F52944-AA17-47D6-A02D-99E33F6AE94F"}]}]}],"references":[{"url":"http://secunia.com/advisories/37938","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10688","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37471","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/10688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4462","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.157","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en la utilidad NetBiterConfig (NetBiterConfig.exe) versión 1.3.0 para NetBiter WebSCADA de Intellicom, permite a los atacantes remotos ejecutar código arbitrario por medio de un  parámetro hn (hostname) largo en un paquete UDP de protocolo HICP especialmente diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intellicom:netbiterconfig:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"ED529F01-8C13-4F90-8CA7-E3E3CEA30512"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_ws100:*:*:*:*:*:*:*:*","matchCriteriaId":"BCD25C93-C0EE-4EFD-8066-53CE3840BF1B"},{"vulnerable":false,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_ws200:*:*:*:*:*:*:*:*","matchCriteriaId":"01FE6CE4-81D4-47B9-A859-92E267712B49"}]}]}],"references":[{"url":"http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/","source":"cve@mitre.org"},{"url":"http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://support.intellicom.se/getfile.cfm?FID=150&FPID=85","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/181737","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/508449/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37325","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3542","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.intellicom.se/getfile.cfm?FID=150&FPID=85","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/181737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/508449/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4463","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.170","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords."},{"lang":"es","value":"Los dispositivos NetBiter WebSCADA de Intellicom, usan contraseñas predeterminadas para el servicio de configuración de red HICP, lo que facilita a los atacantes remotos modificar la configuración de red y causar una denegación de servicio. NOTA: esto es sólo una vulnerabilidad cuando el administrador no sigue las recomendaciones en la documentación de instalación del producto. NOTA: este problema se informó originalmente como contraseñas embebidas, no contraseñas predeterminadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.11.0:*:*:*:*:*:*:*","matchCriteriaId":"821CF156-EE67-4710-846F-9958C89F28B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.11.1:*:*:*:*:*:*:*","matchCriteriaId":"949AC3D0-B87C-45D7-953E-2EC42CAF55E1"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.11.2:*:*:*:*:*:*:*","matchCriteriaId":"E3BE6E86-7CDC-4478-8A8E-125FD1BC7E98"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.12.4:*:*:*:*:*:*:*","matchCriteriaId":"C551AD7C-21AF-4D4D-BEFF-19D4E15F33EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.12.6:*:*:*:*:*:*:*","matchCriteriaId":"7E3AAB8E-0B30-4544-BC28-36DCAFE4E7A8"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.13.0:beta:*:*:*:*:*:*","matchCriteriaId":"682C0FBA-03F7-4C83-8BA4-1A9125445104"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.13.1:*:*:*:*:*:*:*","matchCriteriaId":"1900CA98-62FF-43CF-A95B-1AC61C238BC9"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.13.2:*:*:*:*:*:*:*","matchCriteriaId":"DBED14C5-A19E-4FFB-99E0-CB49FB494BD0"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.20.0:*:*:*:*:*:*:*","matchCriteriaId":"1BF175A2-5BE7-4F86-A8C9-0F562F221BB0"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.30.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF18BA5-9A8D-41DB-83C0-BAD1EA3201B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.30.1:*:*:*:*:*:*:*","matchCriteriaId":"E1D48AAF-E361-4201-8C99-FCED8E256E02"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_firmware:3.30.2:b184:*:*:*:*:*:*","matchCriteriaId":"CCD1805D-FFF7-427A-B0B0-9D5543666A6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_ws100:*:*:*:*:*:*:*:*","matchCriteriaId":"BCD25C93-C0EE-4EFD-8066-53CE3840BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:h:intellicom:netbiter_webscada_ws200:*:*:*:*:*:*:*:*","matchCriteriaId":"01FE6CE4-81D4-47B9-A859-92E267712B49"}]}]}],"references":[{"url":"http://blog.48bits.com/?p=781","source":"cve@mitre.org"},{"url":"http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://support.intellicom.se/getfile.cfm?FID=151","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/902793","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/61506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508449/100/0/threaded","source":"cve@mitre.org"},{"url":"http://blog.48bits.com/?p=781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://support.intellicom.se/getfile.cfm?FID=151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/902793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/61506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508449/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4464","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en searchadvance.asp en Active Business Directory 2 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"search\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activewebsoftwares:active_business_directory:2.0:*:*:*:*:*:*:*","matchCriteriaId":"811EEF8A-6651-4368-819A-1A86F7EE5B8A"}]}]}],"references":[{"url":"http://osvdb.org/61267","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37863","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0912-exploits/abd-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55010","source":"cve@mitre.org"},{"url":"http://osvdb.org/61267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0912-exploits/abd-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4465","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in (1) templates/ including (2) templates/deluxe/admincp/, (3) templates/corporate/admincp/, and (4) templates/blue/admincp/; (5) images/; (6) logs/ including (7) logs/cp.php; (8) wysiwyg/; (9) docs/; (10) classes/; (11) lang/; and (12) settings/."},{"lang":"es","value":"DeluxeBB v1.3 almacena información sensible bajo la raíz de la web con controles de acceso insuficientes, lo que permite a atacantes remotos obtener información de usuarios y configuración, datos del log, y conseguir acceso con permisos de administrador a través de una petición directa a secuencias de comandos en (1) templates/ including (2) templates/deluxe/admincp/, (3) templates/corporate/admincp/, y (4) templates/blue/admincp/; (5) images/; (6) logs/ including (7) logs/cp.php; (8) wysiwyg/; (9) docs/; (10) classes/; (11) lang/; and (12) settings/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.3:*:*:*:*:*:*:*","matchCriteriaId":"077D66B2-3923-4732-9278-4A1DB60BBE4C"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54975","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54978","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4466","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.250","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in an error message.  NOTE: this issue might be resultant from improperly controlled computation in tools.php that leads to a denial of service (CPU or memory consumption)."},{"lang":"es","value":"DeluxeBB v1.3 permite a atacantes remotos obtener información sensible a través de un parámetro \"page\" manipulado a misc.php, lo que revela la ruta de instalación en el mensaje de error. NOTA: Esta vulnerabilidad puede ser el resultado de un control inadecuado de ejecución en tools.php que lleva a una denegación de servicio (consumo de CPU o de memoria)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.3:*:*:*:*:*:*:*","matchCriteriaId":"077D66B2-3923-4732-9278-4A1DB60BBE4C"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54980","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4467","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action."},{"lang":"es","value":"misc.php en DeluxeBB v1.3 permite a atacantes remotos crear cuentas con direcciones de correo no válidas mediante una acción \"valemail\" con valmem configurado con el valor de un ID de usuario pre-asignado, lo que es visible en una acción memberlist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.3:*:*:*:*:*:*:*","matchCriteriaId":"077D66B2-3923-4732-9278-4A1DB60BBE4C"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54979","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4468","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:00:01.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en misc.php en DeluxeBB v1.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro \"page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deluxebb:deluxebb:1.3:*:*:*:*:*:*:*","matchCriteriaId":"077D66B2-3923-4732-9278-4A1DB60BBE4C"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54976","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4469","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T20:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) archiv parameter, and the (3) subcat parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en pagenumber.inc.php en phpPowerCards v2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML de forma arbitraria a traves de (1) PATH_INFO, y los parametros (2) archiv , y (3) subcat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:giombetti:phppowercards:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E2380B46-E79F-4FA4-9CE7-7E1A705463E5"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/10668","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37508","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55059","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/10668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/37508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4470","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.203","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via the groupboardid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en boardrule.php en DVBBS v2.0 permite a atacantes remotos ejecutar comandos SQL de forma arbitraria a través de el parámetro \"groupboardid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dvbbs:dvbbs:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7C07422D-8147-4E51-8A85-9D2717572DA1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/506258/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36282","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/506258/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4471","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CLASSPATH parameter to (1) bib_form.php, (2) bib_pldetails.php, (3) bib_plform.php, (4) bib_plsearchc.php, (5) bib_plsearchs.php, (6) bib_save.php, (7) bib_searchc.php, (8) bib_searchs.php, (9) edi_form.php, (10) edi_save.php, (11) gen_form.php, (12) gen_save.php, (13) lin_form.php, (14) lin_save.php, (15) luo_form.php, (16) luo_save.php, (17) sog_form.php, or (18) sog_save.php in biblioteca/; (19) cal_insert.php, (20) cal_save.php, or (21) cal_saveactivity.php in calendario/; (22) circolari/cir_save.php; or (23) modulistica/mdl_save.php."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo PHP en FreeSchool v1.1.0 y anteriores, permite a atacantes remotos ejecutar código PHP de su elección a través de la URL en el parámetro CLASSPATH sobre (1) bib_form.php, (2) bib_pldetails.php, (3) bib_plform.php, (4) bib_plsearchc.php, (5) bib_plsearchs.php, (6) bib_save.php, (7) bib_searchc.php, (8) bib_searchs.php, (9) edi_form.php, (10) edi_save.php, (11) gen_form.php, (12) gen_save.php, (13) lin_form.php, (14) lin_save.php, (15) luo_form.php, (16) luo_save.php, (17) sog_form.php, o (18) sog_save.php en biblioteca/; (19) cal_insert.php, (20) cal_save.php, o (21) cal_saveactivity.php en calendario/; (22) circolari/cir_save.php; o (23) modulistica/mdl_save.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeschool:freeschool:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"17E3264E-0670-4B8B-AA65-8DACD5D7B272"}]}]}],"references":[{"url":"http://secunia.com/advisories/36605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9582","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2535","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4472","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[config][dir][plugins] parameter to plugins/address/admin/index.php, (2) GLOBALS[config][dir][functions] parameter to plugins/im/compose.php, and (3) GLOBALS[config][dir][classes] parameter to plugins/cssedit/admin/index.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de ficheros PHP en PHPope v1.0.0 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario a través de una URL en  (1) el parámetro GLOBALS[config][dir][plugins] a plugins/address/admin/index.php, (2)) el parámetro GLOBALS[config][dir][functions] a plugins/im/compose.php, y (3)) el parámetro GLOBALS[config][dir][classes] a plugins/cssedit/admin/index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpope:phpope:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0","matchCriteriaId":"3430B30C-B341-42DE-9456-F5132A6937A3"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9583","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2536","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53018","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/9583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4473","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.280","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2, allow remote attackers to inject arbitrary web script or HTML via the (1) css, (2) eca, (3) id, and (4) skin parameters.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en WorkArea/ContentDesigner/ekformsiframe.aspx en Ektron CMS400.NET v7.6.1.53 y v7.6.6.47, y posiblemente en v7.52 hasta v7.66sp2, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de los parámetros (1) css, (2) eca, (3) id, y(4) skin. NOTA: algunos de esos detalles se han obtenido de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3EC9287B-5260-4512-82D9-E62869C24CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"C15E9EED-9488-47C0-936A-75ACC500929E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"962458B7-5BF4-4D28-B8BA-414DCDDC6367"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EA1C8605-A9F4-44CB-B3A7-0737681968C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"BC44D170-66FB-4254-99A6-394C603BE20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"5445CCF3-C09B-4391-9993-2BD23257A13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"DB31D436-5390-4077-89DE-75834482D5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"C1BA9DDD-A55B-4CC4-9E8C-DB76F5309235"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.1.53:*:*:*:*:*:*:*","matchCriteriaId":"04F24284-C49A-4C76-A90E-D2DFABD7DF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.5:*:*:*:*:*:*:*","matchCriteriaId":"DFD86403-8DDB-412B-A73D-B5508A9D96E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.5:sp1:*:*:*:*:*:*","matchCriteriaId":"C2804B99-D49E-4107-A242-D67B909C37BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.5:sp2:*:*:*:*:*:*","matchCriteriaId":"7B0B0B53-19D2-4800-891A-93DE5B6CE803"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.5:sp3:*:*:*:*:*:*","matchCriteriaId":"7A451778-E45B-4AB5-BDFB-4D1364382513"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.6:*:*:*:*:*:*:*","matchCriteriaId":"0DB153D7-D2FC-4406-B474-F117098C0E45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.6:sp1:*:*:*:*:*:*","matchCriteriaId":"02338C21-DC6A-4AF1-B15A-EDDEC46E23BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.6:sp2:*:*:*:*:*:*","matchCriteriaId":"8DEC04AB-2701-4B28-ACE9-FBDAFF61AFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.6.6.47:*:*:*:*:*:*:*","matchCriteriaId":"D3186A57-EB21-4148-8E47-3E3F6286D0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.52:*:*:*:*:*:*:*","matchCriteriaId":"5B9D524D-24AF-4CAB-84DA-EEC36B396EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.53:*:*:*:*:*:*:*","matchCriteriaId":"5FD8930F-1C2B-433A-AD62-BF388415F3AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.53:sp2:*:*:*:*:*:*","matchCriteriaId":"6AFCBD04-C0B6-4184-8CCF-B18F0DA95998"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.54:*:*:*:*:*:*:*","matchCriteriaId":"D0D399CE-1480-429A-9238-5B8E98CAECCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ektron:cms4000.net:7.54:sp2:*:*:*:*:*:*","matchCriteriaId":"91C22EE8-11AF-4933-BB1D-88F89AF685EA"}]}]}],"references":[{"url":"http://dev.ektron.com/forum.aspx?g=posts&t=28048","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://dev.ektron.com/notices.aspx?id=19074","source":"cve@mitre.org"},{"url":"http://osvdb.org/57667","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36279","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53043","source":"cve@mitre.org"},{"url":"http://dev.ektron.com/forum.aspx?g=posts&t=28048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://dev.ektron.com/notices.aspx?id=19074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4474","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente Mike de Boer zoom (com_zoom) v2.0 para Mambo permite a atacantes remotos ejecutar comandos SQl de forma arbitraria a través del parámetro \"catid\" a index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mikedeboer:com_zoom:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9585BA54-DF1E-46CD-A20F-B2D05DF2F281"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*","matchCriteriaId":"4F2E211C-AE77-44E1-9BC3-6CE796B8751E"}]}]}],"references":[{"url":"http://www.exploit-db.com/exploits/9588","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36281","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.exploit-db.com/exploits/9588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4475","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.327","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an auction edit action to index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en el componente para Joomla! Joomlub (com_joomlub), permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro aid en una acción edit sobre index.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joomlub:com_joomlub:*:*:*:*:*:*:*:*","matchCriteriaId":"5E2B3E6D-A6BF-4E0C-9F43-ADD8D31EB036"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*","matchCriteriaId":"2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0909-exploits/joomlajoomlub-sql.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9593","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36287","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://packetstormsecurity.org/0909-exploits/joomlajoomlub-sql.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4476","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.15 through 8.11.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Desbordamiento del búfer de la pila en HAURI ViRobot Desktop v5.5 anteriores a 2009-09-28.00 permite a atacantes remotos ejecutar código arbitrario a través de vectores sin especificar, como se demuestra con cierto modulo de VulnDisco Pack Professional desde v7.15 hasta v8.11. NOTA: Algunos de los detalles fueron obtenidos de terceras partes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hauri:virobot_desktop:5.5:*:*:*:*:*:*:*","matchCriteriaId":"869FBAA3-BC23-439B-87F0-627511E32D5A"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36241","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4477","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.377","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en page.html en Xstate Real Estate v1.0 permite a atacantes remotos ejecutar comandos SQL a través del parámetro \"pid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xstate:real_estate:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F0D3FF1-2301-4214-83E8-352084C78D90"}]}]}],"references":[{"url":"http://osvdb.org/57670","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52968","source":"cve@mitre.org"},{"url":"http://osvdb.org/57670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4478","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) home.html or (2) lands.html."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en Xstate Real Estate v1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de PATH_INFO sobre (1) home.html o (2) lands.html.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xstate:real_estate:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F0D3FF1-2301-4214-83E8-352084C78D90"}]}]}],"references":[{"url":"http://osvdb.org/57671","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://osvdb.org/57672","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52970","source":"cve@mitre.org"},{"url":"http://osvdb.org/57671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/57672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/9565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4479","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11.  NOTE: as of 20091229, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"LDAP3A.exe en MailSite v8.0.4 permite a atacantes remotos producir una denegación de servicio (corrupción de memoria libre y caída de demonio) a través de vectores sin especificar, como se demuestra con cierto modulo del VulnDisco Pack Professional desde v7.13 hasta v8.11. NOTA: hasta el 29/12/2009 esta vulnerabilidad no contiene mas información. Sin embargo, debido a que el autor de VulnDisco Pack es un investigador reconocido, se le a asignado un identificador CVE por motivos de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailsite:mailsite:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5741EC16-9469-4E03-AF75-9AEA444382FD"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36240","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4480","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11.  NOTE: as of 20091229, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer en el servicio Web AzeoTech DAQFactory v5.77, permite a atacantes remotos ejecutar código de su elección a través de vectores no especificados, como se demostró por ciertos módulos en VulnDisco Pack Professional v7.16 hasta 8.11. NOTA: a partir de 20091229, esta divulgación no tiene información de la acción. Sin embargo, debido a que el autor VulnDisco Pack es un investigador confiable, se le ha asignado  un identificador CVE con fines de seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:azeotech:daqfactory:5.77:*:*:*:*:*:*:*","matchCriteriaId":"2CB25924-FE48-4C5E-A6BA-650892B882F3"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4481","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.483","lastModified":"2023-11-07T02:04:49.743","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3111.  Reason: This candidate is a duplicate of CVE-2009-3111.  Notes: All CVE users should reference CVE-2009-3111 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2009-4482","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by the vd_tversity module in VulnDisco Pack Professional 8.11.  NOTE: as of 20091229, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Desbordamiento de búfer MediaServer.exe en TVersity v1.6 permite a atacantes remotos ejecutar código de su elección mediante vectores no especificados, como se ha demostrado para el módulo vd_tversity en VulnDisco Pack Professional v8.11. NOTA: a partir del 29/12/2009, este fallo no tiene información de utilización. Sin embargo, dado que el autor de VulnDisco Pack es un investigador fiable, se ha asignado un identificador CVE para este comportamiento con propósitos de rastreo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tversity:tversity:1.6:*:*:*:*:*:*:*","matchCriteriaId":"92C5BC78-A94E-4553-8E77-7D5D0C31C610"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://osvdb.org/57761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36588","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.intevydis.com/blog/?p=57","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/57761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.intevydis.com/blog/?p=57","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4483","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11.  NOTE: as of 20091229, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."},{"lang":"es","value":"Vulnerabilidad inespecífica en LDAP3A.exe en MailSite v8.0.4 permite a atacantes remotos producir una denegación de servicio (caída del demonio) a través de vectores desconocidos, como se demuestra en cierto modulo en VulnDisco Pack Professional desde v7.13 hasta v8.11. NOTA: A fecha 29/12/2009 esta vulnerabilidad no contiene información determinante. Sin embargo, debido a que el autor de VulnDisco en un investigador reconocido, se le ha asignado un identificador CVE con el objetivo de realizar el seguimiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailsite:mailsite:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5741EC16-9469-4E03-AF75-9AEA444382FD"}]}]}],"references":[{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36240","source":"cve@mitre.org"},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4484","sourceIdentifier":"cve@mitre.org","published":"2009-12-30T21:30:00.547","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en la función CertDecoder::GetName en el archivo src/asn.cpp en TaoCrypt en yaSSL anterior a versión 1.9.9, tal como es usado en mysqld en MySQL versiones 5.0.x anteriores a 5.0.90, MySQL versiones 5.1.x anteriores a 5.1.43, MySQL versiones 5.5.x hasta 5.5.0-m2, y otros productos, permiten a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de demonio) mediante el establecimiento de una conexión SSL y enviando un certificado de cliente X.509 con un campo de nombre especialmente diseñado, como es demostrado por mysql_overflow1.py y el módulo vd_mysql5 en VulnDisco Pack Professional versión 8.11. NOTA: esto se informó originalmente para MySQL versión 5.0.51a."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mysql as shipped with Red Hat Enterprise Linux 3, 4, or 5. The packages use OpenSSL and not yaSSL.","lastModified":"2010-01-26T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.90","matchCriteriaId":"73B11FE1-AEE5-43E5-8530-F530170D9ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndExcluding":"5.1.43","matchCriteriaId":"818AC6DC-D3DC-46C1-B4AB-49F095D83644"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:milestone1:*:*:*:*:*:*","matchCriteriaId":"39EB7EE8-A7C3-47F9-812A-0D398C1BF0FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:milestone2:*:*:*:*:*:*","matchCriteriaId":"C66EBB12-897E-4009-8A42-FC5168F1311E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:yassl:*:*:*:*:*:*:*:*","versionEndExcluding":"1.9.9","matchCriteriaId":"63B056B5-5E28-4472-9FED-EA78C3F83AA7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"EF49D26F-142E-468B-87C1-BABEA445255C"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1","versionEndExcluding":"5.1.42","matchCriteriaId":"89C0AA55-B4F6-4D2B-9061-C851E7963BED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugs.mysql.com/bug.php?id=50227","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://intevydis.com/mysql_demo.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://intevydis.com/mysql_overflow1.py.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://intevydis.com/vd-list.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=7900","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.mysql.com/commits/96697","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37493","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38344","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38364","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38517","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38573","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023402","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1023513","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://ubuntu.com/usn/usn-897-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-1997","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.intevydis.com/blog/?p=106","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.intevydis.com/blog/?p=57","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/61956","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37640","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37943","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37974","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0233","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0236","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.yassl.com/news.html#yassl199","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.yassl.com/release.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=555313","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55416","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://bugs.mysql.com/bug.php?id=50227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://intevydis.com/mysql_demo.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://intevydis.com/mysql_overflow1.py.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://intevydis.com/vd-list.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://isc.sans.org/diary.html?storyid=7900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.mysql.com/commits/96697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1023513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://ubuntu.com/usn/usn-897-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2010/dsa-1997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.intevydis.com/blog/?p=106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.intevydis.com/blog/?p=57","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/61956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/37640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/37974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1397-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.yassl.com/news.html#yassl199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.yassl.com/release.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=555313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-4498","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T18:30:01.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request."},{"lang":"es","value":"La función node_process_command function de Zabbix Server en versiones anteriores a la v1.8 permite a atacantes remotos ejecutar comandos de su elección a través de una petición modificada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.4","matchCriteriaId":"029D5AFC-404B-4BF2-AB85-F04F2E77F4BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0FB47B1-330E-4ED4-A4AF-993DC613B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA7AA37E-2E1A-471D-95AE-83A2CABF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFABFF16-FD5E-4FCF-BDF8-AE8D654CEAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"03E211F0-2F61-4503-AE89-0F750C2848B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC3D41-DB27-4509-8908-0A7F0A19206E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96A266AD-7853-40D0-8D1B-6ECFF34A76AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"6866F9A2-3986-4F63-8DBA-23E4B59A0C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"DC04F70A-4CB2-486F-BA7B-514065BC00AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"A293369B-4B44-4210-8D39-407536513897"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.7:*:*:*:*:*:*:*","matchCriteriaId":"6C4A2B75-0B3B-46EC-BA80-A528DEF58DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7B9506E6-3011-430A-B099-AFBF0CE4830B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"13C94196-4CC6-4827-944A-197F748A48E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0B6DB768-148D-4067-9202-42B9C16F3DFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/37740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/04/02/1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2010/04/02/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4499","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T18:30:01.717","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the send_history_last_id function in zabbix_server/trapper/nodehistory.c."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en la función get_history_lastid en el componente nodewatcher en Zabbix Server anterior a v1.6.8 permite a atacantes remotos ejecutar comandos SQL de su elección a través de una petición manipulada, posiblemente relacionada con la función send_history_last_id en zabbix_server/trapper/nodehistory.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.7","matchCriteriaId":"52E13E4C-E1AE-4B50-92C8-EDD8E0374E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0FB47B1-330E-4ED4-A4AF-993DC613B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA7AA37E-2E1A-471D-95AE-83A2CABF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFABFF16-FD5E-4FCF-BDF8-AE8D654CEAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"03E211F0-2F61-4503-AE89-0F750C2848B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC3D41-DB27-4509-8908-0A7F0A19206E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96A266AD-7853-40D0-8D1B-6ECFF34A76AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BB1611DD-8EB1-49FE-8995-C9D853F812F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8C27222F-3FA6-4F9A-A017-37B77E536CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"6866F9A2-3986-4F63-8DBA-23E4B59A0C11"}]}]}],"references":[{"url":"http://secunia.com/advisories/37740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1031","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4500","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T18:30:01.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service (crash) via a crafted request with data that lacks an expected : (colon) separator, which triggers a NULL pointer dereference."},{"lang":"es","value":"La función process_trap en trapper/trapper.c en Zabbix Server anteriores a v1.6.6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición manipulada con datos de carece del separador esperado (:), lo que provoca una desreferenciación a puntero NULL.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.6","matchCriteriaId":"46869ED6-7197-46E4-AC1B-02859034BD07"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0FB47B1-330E-4ED4-A4AF-993DC613B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA7AA37E-2E1A-471D-95AE-83A2CABF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFABFF16-FD5E-4FCF-BDF8-AE8D654CEAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"03E211F0-2F61-4503-AE89-0F750C2848B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC3D41-DB27-4509-8908-0A7F0A19206E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96A266AD-7853-40D0-8D1B-6ECFF34A76AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BB1611DD-8EB1-49FE-8995-C9D853F812F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/37740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-993","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4501","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T18:30:01.767","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause a denial of service (crash) via a request that lacks expected separators, which triggers a NULL pointer dereference, as demonstrated using the Command keyword."},{"lang":"es","value":"La función zbx_get_next_field de libs/zbxcommon/str.c de Zabbix Server anterior a v1.6.8 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una solicitud que carece de los separadores esperados; esto lanza una referencia a puntero nulo (NULL), como se ha demostrado al utilizar la palabra clave Command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.7","matchCriteriaId":"52E13E4C-E1AE-4B50-92C8-EDD8E0374E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0FB47B1-330E-4ED4-A4AF-993DC613B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA7AA37E-2E1A-471D-95AE-83A2CABF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFABFF16-FD5E-4FCF-BDF8-AE8D654CEAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"03E211F0-2F61-4503-AE89-0F750C2848B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC3D41-DB27-4509-8908-0A7F0A19206E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96A266AD-7853-40D0-8D1B-6ECFF34A76AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BB1611DD-8EB1-49FE-8995-C9D853F812F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8C27222F-3FA6-4F9A-A017-37B77E536CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"6866F9A2-3986-4F63-8DBA-23E4B59A0C11"}]}]}],"references":[{"url":"http://secunia.com/advisories/37740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1355","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508436/30/60/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4502","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T18:30:01.797","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen.  NOTE: this attack is limited to attacks from trusted IP addresses."},{"lang":"es","value":"La función NET_TCP_LISTEN en net.c en Zabbix Agent versiones anteriores a v1.6.7, cuando se ejecuta en FreeBSD o Solaris, permite a atacantes remotos eludir la asignación de EnableRemoteCommands y ejecutar comandos de su elección mediante metacaracteres del interprete de comandos en el argumento de net.tcp.listen. NOTA: este ataque está limitado a ser realizado desde direcciones IP de confianza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.6","matchCriteriaId":"44AC67DF-D478-4D13-939C-B3659CEC41F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B0FB47B1-330E-4ED4-A4AF-993DC613B782"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA7AA37E-2E1A-471D-95AE-83A2CABF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DFABFF16-FD5E-4FCF-BDF8-AE8D654CEAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"03E211F0-2F61-4503-AE89-0F750C2848B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC3D41-DB27-4509-8908-0A7F0A19206E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96A266AD-7853-40D0-8D1B-6ECFF34A76AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BB1611DD-8EB1-49FE-8995-C9D853F812F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8C27222F-3FA6-4F9A-A017-37B77E536CFF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","matchCriteriaId":"D9EC02F3-3905-460D-8949-3B26394215CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/37740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508439","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1032","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/508439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-1032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-4512","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.217","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj_id parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en index.php de Oscailt v3.3, cuando está deshabilitado Use Friendly URL's, permite a atacantes remotos incluir y ejecutar ficheros locales de su elección a través de un .. (punto punto) en el parámetro obj_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:indymedia:oscailt:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AA94A6DE-0DB1-4FA3-8CF6-0E287A26C573"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/oscailt33-lfi.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/exploitalert/7422","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54023","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/oscailt33-lfi.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/exploitalert/7422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/3096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4513","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.233","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Workflow module 5.x before 5.x-2.4 and 6.x before 6.x-1.2, a module for Drupal, allow remote authenticated users, with \"administer workflow\" privileges, to inject arbitrary web script or HTML via the name of a (1) workflow or (2) workflow state."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo para Drupal Workflow v5.x anteriores a v5.x-2.4 y v6.x anteriores a v6.x-1.2, permite a atacantes remotos autenticados con privilegios \"administer Workflow\", inyectar secuencias de comandos web o HTML a través del nombre de un (1) Workflow o (2) estado de Workflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-2.3","matchCriteriaId":"992AD5A5-8D7A-4656-ABFE-F6FC55B10E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA2A338-4541-40C3-972B-4AC10F4962A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"11B2F0F4-A418-42BC-A437-143ECCB14A37"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED28458-CBC2-4F12-A930-D61D1D251B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"52A5D30E-AE81-455E-8B67-02031DEF0E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"CFCD73E7-AF32-4D65-ADAB-C38A296F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"F3A0CCFC-92B9-48B2-9205-4C3FCD76E5C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"9493361F-1EEC-44A7-98B9-C5C3384C202F"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"46853B28-1E94-43A4-A1CF-7A72388BBBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"4831A82E-216B-40B6-BB69-251CBF6475F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"D9427768-FFDD-4F84-878F-5EADA4B55A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"26B397A9-B7CC-437E-AE6B-187F4D0FB11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.0-rc1:*:*:*:*:*:*:*","matchCriteriaId":"50C8C0BD-8121-460F-8BDB-BC130F0B9051"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.0-rc3:*:*:*:*:*:*:*","matchCriteriaId":"CB61CC99-C865-4D7F-AB42-D6519E2F8DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.0-rc4:*:*:*:*:*:*:*","matchCriteriaId":"CB352C34-26D8-44D6-AFC0-DF26C0627FE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"79FAA734-2CE6-4BC8-9A66-3A279F151658"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_vandyk:workflow:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"352CD782-FB9C-4EC7-B99B-BF4E1063CFAD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/612832","source":"cve@mitre.org"},{"url":"http://drupal.org/node/612834","source":"cve@mitre.org"},{"url":"http://drupal.org/node/617456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36878","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54028","source":"cve@mitre.org"},{"url":"http://drupal.org/node/612832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/612834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://drupal.org/node/617456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4514","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.267","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a module for Drupal, allows remote authenticated users, with \"create application\" privileges, to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo OpenSocial Shindig-Integrator v5.x y v6.x anteriores a v6.x-2.1, un módulo para Drupal, permite a usuarios autenticados remotamente, con privilegios de \"crear aplicación\", inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astha_bhatnagar:shindigintegrator:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-2.0","matchCriteriaId":"715AB53A-48CA-4FC5-AE7F-113FCD13879E"},{"vulnerable":true,"criteria":"cpe:2.3:a:astha_bhatnagar:shindigintegrator:5:*:*:*:*:*:*:*","matchCriteriaId":"424318FF-2943-4D99-AC8F-0FE8B3872BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:astha_bhatnagar:shindigintegrator:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"73A16D53-DF41-4AD7-953E-92A9DCA7E59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:astha_bhatnagar:shindigintegrator:6.x-2.0-alpha1:*:*:*:*:*:*:*","matchCriteriaId":"7E20C3D6-5766-485A-861B-E9AC25651F07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/615584","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/617422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36862","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/615584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/617422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/37200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4515","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.297","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors."},{"lang":"es","value":"El módulo Storm v6.x anterior a v6.x-1.25 para Drupal, no refuerza los requisitos de privilegios para los nodos storminvoiceitem; esto permite a atacantes remotos leer los títulos de los nodos a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"43E635EA-61AC-40A4-8288-73E3E5FCE13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"11A4BD8A-BFFE-44A2-AA57-CC81360899B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"24D5FF1D-D6EE-4F15-B8E8-B41031D88477"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"733ED38A-A409-4E4E-BE2F-9B7B2C6C4FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"54BBE17E-4AF9-4290-AC58-CCB9AE3A06AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"CF3B42E5-EB25-4117-B36F-59DE9C78D549"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"7E8954D9-44A9-4E71-822D-0A691E93EE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"66662533-AC69-4D65-933D-58168C7B75B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"716B8287-EF97-4738-9D4A-DB6C95212A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"86D011B0-9806-4195-93FE-303ACB24D234"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"2080F0BE-E4A8-445B-831C-D18489E95E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"57166D33-B6B0-47DE-9603-436F083F0393"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"A4B53D24-33A2-4630-8A7B-3DEB0A91B975"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"9D8E59A5-5CE4-4922-8368-E6FD0FBF87D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.14:*:*:*:*:*:*:*","matchCriteriaId":"C8D13A0F-E7A2-447A-AC78-A226C190BDFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.15:*:*:*:*:*:*:*","matchCriteriaId":"0914D667-3C7F-48CB-BF14-04109450B69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.16:*:*:*:*:*:*:*","matchCriteriaId":"9C250B6F-304B-4BA6-B2C5-897A76E33762"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.17:*:*:*:*:*:*:*","matchCriteriaId":"D53C8B02-0D37-4BFF-87FD-618A88785309"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.18:*:*:*:*:*:*:*","matchCriteriaId":"FE1F5F72-265B-42C0-B665-0C219C594701"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.19:*:*:*:*:*:*:*","matchCriteriaId":"0D851C9E-FA2D-48B8-AB77-3E49B312348E"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.20:*:*:*:*:*:*:*","matchCriteriaId":"19044A29-2043-4D6E-BA6E-C055994A746D"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.21:*:*:*:*:*:*:*","matchCriteriaId":"3D324D19-629A-4512-9714-2EBE85FFBFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.22:*:*:*:*:*:*:*","matchCriteriaId":"F4286A4F-BFBA-44F4-88E9-3976C0AE7928"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.23:*:*:*:*:*:*:*","matchCriteriaId":"0E68EDCB-AD88-4C88-B058-001BEB684131"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.24:*:*:*:*:*:*:*","matchCriteriaId":"E7AC535E-0ACB-4F0C-871E-8184991F6C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtech:storm:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"6939DD1F-D81F-4589-A07B-967FBFACB7BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/617480","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/617494","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37202","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36879","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/617480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/617494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4516","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.313","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo FAQ Ask v 5.x y v6.x anterior a v6.x-2.0 para Drupal, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"14D27875-89D8-4F12-AA31-29D404763028"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5588045D-A012-4675-A997-6A79E7AAB3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E3EB2794-6EC5-4369-AE8C-20413C5E714A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BF458432-7242-4BF2-B16D-434E0CCC5028"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"92A09764-4050-42D9-8C39-CE36555088C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A897842E-5998-4806-ACF6-58DCC439EE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C097F6F-B744-47E1-A881-5F1DE6DB2B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"851CEE68-475C-463E-B1BE-4D8A7CAF25BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"AC3F9332-60A9-4014-A424-B52479CACF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F5A0570-F10C-4A6F-8833-DC28D24E781E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F66AEC24-EC69-4972-B745-A1168D06E5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"F60BA041-722A-4096-9FF8-91B7890B5446"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7EB44100-3D21-454A-BB16-6AC108684CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"BC47EAA0-E325-4387-90D7-3A158FDCBF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"B76430EE-16F1-4224-A202-6DF51234F9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"907C640D-1F5C-4FC8-B774-DAE36062787E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/617444","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36877","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/617444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4517","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.343","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that access unpublished content."},{"lang":"es","value":"Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en el módulo para Drupal FAQ Ask v5.x y v6.x anteriores a v6.x-2.0, permite a atacantes remotos secuestrar la autenticación de usuarios de su elección para peticiones de acceso a contenido no publicado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"14D27875-89D8-4F12-AA31-29D404763028"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5588045D-A012-4675-A997-6A79E7AAB3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E3EB2794-6EC5-4369-AE8C-20413C5E714A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BF458432-7242-4BF2-B16D-434E0CCC5028"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"92A09764-4050-42D9-8C39-CE36555088C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A897842E-5998-4806-ACF6-58DCC439EE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C097F6F-B744-47E1-A881-5F1DE6DB2B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"851CEE68-475C-463E-B1BE-4D8A7CAF25BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"AC3F9332-60A9-4014-A424-B52479CACF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F5A0570-F10C-4A6F-8833-DC28D24E781E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"F66AEC24-EC69-4972-B745-A1168D06E5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"F60BA041-722A-4096-9FF8-91B7890B5446"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7EB44100-3D21-454A-BB16-6AC108684CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"BC47EAA0-E325-4387-90D7-3A158FDCBF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"B76430EE-16F1-4224-A202-6DF51234F9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"907C640D-1F5C-4FC8-B774-DAE36062787E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/617444","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3088","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/617444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4518","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.360","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via an inserted node."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Insert Node v5.x anterior a v5.x-1.2 para Drupal permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de un nodo insertado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_burton:insertnode:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"CAC73554-1D74-48A2-8B10-ABBDFC3053D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_burton:insertnode:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"2CB993BB-E90E-4DBD-B984-8742D36C2E99"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/616546","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/617400","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36861","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3086","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/616546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/617400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4519","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.390","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Ortro before 1.3.4 have unknown impact and attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades sin especificar en Ortro anterior a v1.3.4 tiene un impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"C0C4B36E-72DE-46B6-9612-F31274225EC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:0.9.0:-:*:*:*:*:*:*","matchCriteriaId":"F191CB51-B85C-475A-8FDA-2F3F3D432AD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1834BB0A-F5BD-4F2E-A0A8-086A54602384"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"F59A1A65-C28E-4420-80DB-405B7B204CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"577C6B94-A2DA-40D6-A87C-94BEB8994634"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"06DA6486-CA71-4D04-949F-0DB5AB3ED071"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D6DB3D07-B0B3-45F9-8D82-D99F3F86B9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"23560F72-FC94-4956-A8C5-B86AC98A8005"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D540916F-9144-479B-9A9D-AD4396FE3409"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3E252103-03DD-45C4-847C-6AE4F4DDBACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E173BF24-4FEF-4DFF-A34B-6B6D37855B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3C87005A-B1BC-40A8-9EB8-FADF00213227"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"677CF2CF-6410-437B-99FD-12B47B3AD2E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8B9DE527-7E47-419B-91AE-190E08BF70CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.2.0:beta:*:*:*:*:*:*","matchCriteriaId":"B5B0912F-F07C-4DDD-9720-C8F589415119"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8F6C19EE-DDC9-4E9A-8C65-C4F19CD2B42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"40930675-3D90-4FE3-9116-890457D9F1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D877E02D-37D1-486D-925D-0033D0D2A2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"153CC6BA-6116-463A-8D05-6559BA5FD2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"79031154-908C-4499-9C5A-38861EAA9A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8AD88B9F-27DD-40F8-8CF0-F8F00015D80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ortro:ortro:1.3.2:a:*:*:*:*:*:*","matchCriteriaId":"B69D36DF-1333-4BBE-BAE1-6E72A9D9ADA7"}]}]}],"references":[{"url":"http://dev.ortro.net/news/show/8","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ortro.net/","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54026","source":"cve@mitre.org"},{"url":"http://dev.ortro.net/news/show/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ortro.net/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4520","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.407","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CCK Comment Reference module 5.x before 5.x-1.2 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to bypass intended access restrictions and read comments by using the autocomplete path."},{"lang":"es","value":"El módulo CK Comment Reference v5.x anteriores a v5.x-1.2 y v6.x anteriores a v6.x-1.3, un módulo para Drupal, permite a atacantes remotos eludir las restricciones de acceso implementadas y leer comentarios al usar el autocompletado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-1.1","matchCriteriaId":"35C0E152-B47B-49C1-9D1C-7E0CC67E92D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-1.2","matchCriteriaId":"52F5B97E-4775-40D8-BDAD-5D68B2E17388"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"98934359-A842-413C-943B-2FE556FACCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"541740A7-7AF5-4A58-A1A8-00081EA963FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFADBBAB-608B-4F02-AB91-F0D7EFE80305"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"77378C23-25E5-466E-9CBC-37F0AD84EA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:kristof_de_jaeger:commentreference:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"B316F423-3E09-491A-A2C7-66958C83F042"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/617380","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36863","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3084","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://drupal.org/node/617380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4521","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.437","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en birt-viewer/run de Eclipse Business Intelligence y Reporting Tools (BIRT) anterior a  v2.5.0, como se utiliza en KonaKart y otros productos, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través del parámetro __report."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eclipse:birt:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.2","matchCriteriaId":"B506B192-91C1-4F36-8CFF-0BEF84127E60"}]}]}],"references":[{"url":"http://antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37025","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58941","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507172/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36674","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=259127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53773","source":"cve@mitre.org"},{"url":"http://antisnatchor.com/2008/12/18/eclipse-birt-reflected-xss","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507172/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=259127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4522","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.453","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter to index.php.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en search.5.html en BloofoxCMS v0.3.5, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro search sobre index.php. NOTA: algunos de estos detalles provienen de información de terceros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bloofox:bloofoxcms:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"19220BE2-2B76-4DDF-89A9-3ADF001EF2B9"}]}]}],"references":[{"url":"http://osvdb.org/58948","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0910-exploits/bloofoxcms-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36700","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53788","source":"cve@mitre.org"},{"url":"http://osvdb.org/58948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0910-exploits/bloofoxcms-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4523","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.483","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchSongKeyword parameter in a SearchSong action."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.php en Zainu v1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro \"searchSongKeyword\" en una acción SearchSong."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zainu:zainu:1.0:*:*:*:*:*:*:*","matchCriteriaId":"57BBF3CC-0B02-43B4-B1A8-E6CF752E8618"}]}]}],"references":[{"url":"http://secunia.com/advisories/36798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/zainu-xss.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36701","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53790","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/36798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/zainu-xss.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53790","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4524","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.500","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname (aka real name) element."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el módulo RealName v6.x-1.x anteriores a 6.x-1.3 para Drupal,  permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del elemento realname (también conocido como name)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nancy_wichmann:realname:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DEFD25-6809-4B45-B540-4FF47840571C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nancy_wichmann:realname:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"9EA88539-4233-4227-BD41-BF9E5473D96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nancy_wichmann:realname:6.x-1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"72D68D7B-E1DB-40FA-8E29-B9F0FE0CE18A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nancy_wichmann:realname:6.x-1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"61446E3D-8E7D-4930-8E87-BF7C43D7E92A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nancy_wichmann:realname:6.x-1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"69B7BD43-5B69-42BD-B4D6-1F060C79228D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nancy_wichmann:realname:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F6119C5-4CC0-4915-91D1-AEC217CE3F93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604760","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37058","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36699","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53787","source":"cve@mitre.org"},{"url":"http://drupal.org/node/604760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4525","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.530","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via crafted data in a list of links."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Print (también conocido como Printer, para versiones de correo electrónico y PDF) v5.x anterior a v5.x-4.9 y v6.x anterior a v6.x-1.9, un módulo para Drupal, permite a atacantes remotos inyectar secuencias de comandos Web o HTML a través de un dato manipulado en una lista de enlaces."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"929EF949-E619-4663-8E5A-32DC1FB759F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"E46041FE-A508-42CE-A944-08A2590DFEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"026E16DA-B5ED-4295-8A90-91C4039BB4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"570C4DBC-86CE-42AF-81D6-9D8A4C0E9233"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.4:*:*:*:*:*:*:*","matchCriteriaId":"871017DE-E12E-495D-A208-07EE6CCDF4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.5:*:*:*:*:*:*:*","matchCriteriaId":"6F9EAB0F-606A-4D87-A704-56A7A54CAA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.6:*:*:*:*:*:*:*","matchCriteriaId":"DBBC7558-7A67-41C0-BDDC-ED32645F387B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.7:*:*:*:*:*:*:*","matchCriteriaId":"605EC83A-E689-4D45-AB0E-1B8B3A7D9CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.8:*:*:*:*:*:*:*","matchCriteriaId":"16BC9CFA-00FF-4FA2-9D34-0975260E28E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.x:dev:*:*:*:*:*:*","matchCriteriaId":"08171429-10CC-44C3-A9BB-1E3A2CF6FF87"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"86C1B4CE-7783-4A6F-9FED-82B3A70DA5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B841C77C-FEF8-4253-9887-9CE4942431DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"15C9FE51-FD7F-472F-8C44-EA20578244CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D11FD1BF-ABD6-4D38-96C8-2E32CBD9473D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5F787E18-3790-4F33-928F-59E2398FB76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"A156B352-D91A-4408-8240-88EAACA55B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc8:*:*:*:*:*:*","matchCriteriaId":"8BC82E86-F2AB-4FF8-98C5-1A35D467C358"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc9:*:*:*:*:*:*","matchCriteriaId":"EC8E8F4D-D9FF-4A9D-9861-E1C5A9C6DBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"938C1B6D-7449-49C9-853F-2AD939E784B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"15BA3E26-5B28-4DFD-8B6B-24119139B274"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"FD23BBD1-7550-4D9B-9A88-12B2E5F20189"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"E1FD0BC0-AEC5-4DD5-986A-F6B0CADD9368"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"A819F021-0530-4AE3-802F-E73C6669D607"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"1C8453CB-2E8E-4108-81C2-A7B2B61C44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"99B1C895-6087-4D83-9347-760CCEB1E41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"EAB1161E-7EA1-4D1B-BFC0-042F813E1148"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604804","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604806","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604808","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58952","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37059","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36707","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2922","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53789","source":"cve@mitre.org"},{"url":"http://drupal.org/node/604804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4526","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.563","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Send by e-mail sub-module in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.9 and 6.x before 6.x-1.9, a module for Drupal, does not properly enforce privilege requirements, which allows remote attackers to read page titles by requesting a \"Send to friend\" form."},{"lang":"es","value":"El sub-módulo Send by e-mail en el módulo Print (también conocido como Printer, e-mail y versiones PDF) v5.x anterior a v5.x-4.9 y v6.x anterior a v6.x-1.9, para Drupal, no refuerza adecuadamente los privilegios, lo que permite a atacantes remotos leer los títulos de página solicitando un formulario \"Send to a Friend\" (Enviar a un amigo)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.0:*:*:*:*:*:*:*","matchCriteriaId":"929EF949-E619-4663-8E5A-32DC1FB759F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.1:*:*:*:*:*:*:*","matchCriteriaId":"E46041FE-A508-42CE-A944-08A2590DFEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.2:*:*:*:*:*:*:*","matchCriteriaId":"026E16DA-B5ED-4295-8A90-91C4039BB4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.3:*:*:*:*:*:*:*","matchCriteriaId":"570C4DBC-86CE-42AF-81D6-9D8A4C0E9233"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.4:*:*:*:*:*:*:*","matchCriteriaId":"871017DE-E12E-495D-A208-07EE6CCDF4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.5:*:*:*:*:*:*:*","matchCriteriaId":"6F9EAB0F-606A-4D87-A704-56A7A54CAA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.6:*:*:*:*:*:*:*","matchCriteriaId":"DBBC7558-7A67-41C0-BDDC-ED32645F387B"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.7:*:*:*:*:*:*:*","matchCriteriaId":"605EC83A-E689-4D45-AB0E-1B8B3A7D9CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.8:*:*:*:*:*:*:*","matchCriteriaId":"16BC9CFA-00FF-4FA2-9D34-0975260E28E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:5.x-4.x:dev:*:*:*:*:*:*","matchCriteriaId":"08171429-10CC-44C3-A9BB-1E3A2CF6FF87"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"86C1B4CE-7783-4A6F-9FED-82B3A70DA5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"B841C77C-FEF8-4253-9887-9CE4942431DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"15C9FE51-FD7F-472F-8C44-EA20578244CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D11FD1BF-ABD6-4D38-96C8-2E32CBD9473D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"5F787E18-3790-4F33-928F-59E2398FB76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"A156B352-D91A-4408-8240-88EAACA55B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc8:*:*:*:*:*:*","matchCriteriaId":"8BC82E86-F2AB-4FF8-98C5-1A35D467C358"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.0:rc9:*:*:*:*:*:*","matchCriteriaId":"EC8E8F4D-D9FF-4A9D-9861-E1C5A9C6DBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"938C1B6D-7449-49C9-853F-2AD939E784B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"15BA3E26-5B28-4DFD-8B6B-24119139B274"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"FD23BBD1-7550-4D9B-9A88-12B2E5F20189"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"E1FD0BC0-AEC5-4DD5-986A-F6B0CADD9368"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"A819F021-0530-4AE3-802F-E73C6669D607"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"1C8453CB-2E8E-4108-81C2-A7B2B61C44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"99B1C895-6087-4D83-9347-760CCEB1E41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joao_ventura:print:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"EAB1161E-7EA1-4D1B-BFC0-042F813E1148"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604804","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604806","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604808","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58951","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37059","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36707","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2922","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://drupal.org/node/604804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4527","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.577","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically granted privileges after a logout or other session change, which allows physically proximate attackers to gain privileges by using an unattended web browser."},{"lang":"es","value":"El módulo de autenticación Shibboleth v5.x anterior a v5.x-3.4 y v6.x anterior a v6.x-3.2, un módulo para Drupal, no elimina adecuadamente los privilegios otorgados estáticamente después un cierre de sesión u otro cambio de sesión, lo que permite a atacantes próximos físicamente obtener privilegios utilizando un navegador web desatendido.\r\n"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"15E77DE1-B275-47F1-95FB-C7585471BBB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"88ADE30B-7B9D-4141-A5AA-2A0E3331B3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"FFC7441B-D570-458B-BB6E-82358F333E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"1795BC5F-A8F9-4546-B319-5352753198CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"5D8815F9-BC9E-445E-80FF-5B4C3B62224F"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"D936BB56-06D1-4730-916B-81B791B489C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-3.3:*:*:*:*:*:*:*","matchCriteriaId":"B197C383-71B5-4891-A67C-A1D357007304"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:5.x-3.x:dev:*:*:*:*:*:*","matchCriteriaId":"256F4AC0-C2A5-43FD-B164-2174EC92EDA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"7155A403-16B9-4A2C-B035-059E42F3A3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"A364AA96-0ACC-488A-8DF4-814807F5FCFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"71CCBBD7-04BC-4B2B-BE53-F9AAAB9A8F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"083B1A21-9FC9-4593-82AC-59FA9BFE7743"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"E4A2F6C6-7323-4F7E-B599-03D78158A9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC185FC1-4AC8-47A4-BEFD-97092FAA93EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-3.0:1:*:*:*:*:*:*","matchCriteriaId":"A410B66E-99B3-472D-B5D1-CA0506D7A060"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-3.1:*:*:*:*:*:*:*","matchCriteriaId":"925B50D8-D35C-415A-B66E-23CD80891650"},{"vulnerable":true,"criteria":"cpe:2.3:a:niif:shib_auth:6.x-3.x:dev:*:*:*:*:*:*","matchCriteriaId":"5ADBB3C3-FEA1-43D2-9F4E-DB663A2EEEDC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604488","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36684","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2919","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53779","source":"cve@mitre.org"},{"url":"http://drupal.org/node/604488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4528","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.610","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors."},{"lang":"es","value":"El módulo Organic Groups  (OG)Vocabulary v6.x anterior a v6.x-1.0 para Drupal, permite a grupos miembros de usuarios autenticados remotamente evitar las restricciones de acceso establecidas, creando, modificando o leyendo palabras de su elección  a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:og_vocab:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"841EA00E-7880-4D4C-A17B-7F4F0F65BF2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moshe_weitzman:og_vocab:6.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"F3AA8331-F7FE-434D-A89E-1700E55370BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604354","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604514","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58947","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36685","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2920","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53780","source":"cve@mitre.org"},{"url":"http://drupal.org/node/604354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4529","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.627","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs."},{"lang":"es","value":"InterVations NaviCOPA Web Server v3.0.1.2 y versiones anteriores permite a atacantes remotos obtener el código fuente de un página Web a través de un carácter codificado de espacio que se arrastre en una URI, como se ha demostrado en las URIs /index.html%20 y /index.php%20"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intervations:navicopa_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1.2","matchCriteriaId":"8F3D3C65-3A76-4535-99E0-94EC067268B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:intervations:navicopa_web_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"4A7614B3-E672-42D4-AFC8-E08074F9585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:intervations:navicopa_web_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"12C5D193-3446-4A3A-8CB3-54AF5D282B05"}]}]}],"references":[{"url":"http://freetexthost.com/n5l0h34pxc","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://osvdb.org/58949","source":"cve@mitre.org"},{"url":"http://pocoftheday.blogspot.com/2009/10/navicopa-web-server-3012-remote-source.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/navicopa-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36705","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2927","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53799","source":"cve@mitre.org"},{"url":"http://freetexthost.com/n5l0h34pxc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://osvdb.org/58949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pocoftheday.blogspot.com/2009/10/navicopa-web-server-3012-remote-source.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.org/0910-exploits/navicopa-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/36705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2009/2927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4530","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.657","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI."},{"lang":"es","value":"Mongoose v2.8.0 y anteriores permite a atacantes remotos obtener el código fuente de una página web añadiendo ::$DATA a la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sergey_lyubka:mongoose:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"EA9B0B7C-77CF-40AB-986E-DDF24CC242BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sergey_lyubka:mongoose:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FDD3A200-BEF3-41F7-8EA2-A7FD558F68B2"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0910-exploits/mongoose-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0910-exploits/mongoose-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4531","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.670","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) character to the URI."},{"lang":"es","value":"httpdx v1.4.4 y anteriores, permite a atacantes remotos obtener el código fuente de una página web añadiendo un carácter . (punto) a la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jasper:httpdx:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.4","matchCriteriaId":"745D8ED9-0633-4F2B-8CB1-C6C5DF9CDABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D490B4E8-E863-4856-8031-3E08FBED4E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:jasper:httpdx:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3B2C8BF8-73D0-4F02-B9DB-6211FA68F72D"}]}]}],"references":[{"url":"http://freetexthost.com/eiyfyt0km5","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://packetstormsecurity.org/0910-exploits/httpdx-disclose.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://pocoftheday.blogspot.com/2009/10/httpdx-144-remote-arbitrary-source.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58857","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53733","source":"cve@mitre.org"},{"url":"http://freetexthost.com/eiyfyt0km5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://packetstormsecurity.org/0910-exploits/httpdx-disclose.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://pocoftheday.blogspot.com/2009/10/httpdx-144-remote-arbitrary-source.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/37013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/58857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4532","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.703","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en el módulo para Drupal Webform v5.x anterior a v5.x-2.8 y v6.x anterior a v6.x-2.8, permite a usuarios autenticados remotamente, con privilegio de creación en webform, inyectar secuencias de comandos web o HTML de su elección a través del campo \"label\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-2.7","matchCriteriaId":"B3173583-D6A5-4858-850A-0F35965D806C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-2.7","matchCriteriaId":"19CB9D43-9771-4076-863F-D88320358A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7AE98470-E90E-4B02-BF9C-8A77A2F37FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E086ED5-4F81-4E2B-8C26-2C0FD5ACF012"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"BEAFC48B-628B-4BE5-8075-5195DCA62239"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"87C35363-1F35-4C86-AB17-B4B83FA327AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"31F8DDFD-D995-4994-BFAB-8A79197946A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"FF015C66-674F-4E30-8965-A29E9DDBDBD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"D2C85D90-5718-43F6-9A21-BC1C7FBB4660"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"FD2F6BBA-9583-4A6E-8BD7-9C9137BDF7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"50CF5C6D-2519-4E3A-A3F0-37363A78665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"3E3BC389-6C64-4F81-B81A-969ED7548741"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"06F6BA05-5FD1-47CD-85B7-C6757399FC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta0:*:*:*:*:*:*:*","matchCriteriaId":"EA566E25-C5BC-489E-84FD-EB00D1C088FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"9BC6C9BC-6029-4EAA-B956-5C1DFC330690"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"5C3B4489-5E0C-4425-845F-713F3FDE14A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"AFB71D04-20DE-4E4C-982D-45E915678EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"7874ADFF-597A-44F7-BA75-99BFA7A2FE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"96F80B58-AA5B-4225-ABED-B9B28F989DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1FEE16F2-DF33-454E-BF2A-919EDC3C39EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA838C52-6DA7-469F-ADCC-2A40375E97C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"C414AAB2-881F-4B3B-BAD2-8A790E4ACD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF5E53D-AC18-4F79-8372-57210AC95B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"0FEBF83B-494B-4206-8F86-883F0C107D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"F8589A46-A370-4F3D-AD4B-6979CB253611"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"50FD41A8-FA49-40D4-BF68-2B82A8B1D01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"27555BCB-6CD2-45B6-9F30-3918D31D582A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"3B9F21B7-3B5F-46AA-9BCC-27C4A8EC10EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"2116A457-4B84-48D3-95E9-36F0713FE660"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"E9A5E7E4-277A-4D28-BC2B-C7413501A886"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"40F0F162-9ED2-413F-AA62-D66BA8781B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta5:*:*:*:*:*:*:*","matchCriteriaId":"E0C2055E-DE93-46EF-A17A-B81E287A5464"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta6:*:*:*:*:*:*:*","matchCriteriaId":"2AC8A0D6-73D9-4635-BB25-7F9C550074A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3EA1E3-49D5-4F34-9A4E-64919876A325"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1-1:*:*:*:*:*:*:*","matchCriteriaId":"3641571E-5135-48B9-9BE0-9A4B80A6FD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A0E2-9DB0-456E-B19B-8C25B970DC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"783AA635-7F88-4DEB-806F-E63C50A2F509"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"930832D2-A7A3-477D-94F0-10879C951E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"33D074D5-35C6-4250-8483-5B2C2D9CDC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"4DA94879-0671-43F8-A0D8-433A659B0FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"5D0A31AF-E2CD-46ED-B238-C39589A4C791"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"4482C777-21D6-4E63-841B-7AD866956C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A0DFF727-D2ED-4784-84A1-B73DF5093015"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604942","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36708","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2923","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53796","source":"cve@mitre.org"},{"url":"http://drupal.org/node/604942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/2923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4533","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.733","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a default value, which allows remote attackers to read session variables via unspecified vectors."},{"lang":"es","value":"El módulo Webform v5.x anteriores a v5.x-2.8 y v6.x anteriores a v6.x-2.8, un módulo para Drupal, no evita el almacenamiento en caché de una página que contiene una variable token con un valor por defecto, permitiendo a atacantes remotos leer variables de sesión mediante vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:*:*:*:*:*:*:*:*","versionEndIncluding":"5.x-2.7","matchCriteriaId":"B3173583-D6A5-4858-850A-0F35965D806C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-2.7","matchCriteriaId":"19CB9D43-9771-4076-863F-D88320358A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7AE98470-E90E-4B02-BF9C-8A77A2F37FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E086ED5-4F81-4E2B-8C26-2C0FD5ACF012"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"BEAFC48B-628B-4BE5-8075-5195DCA62239"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"87C35363-1F35-4C86-AB17-B4B83FA327AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"31F8DDFD-D995-4994-BFAB-8A79197946A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"FF015C66-674F-4E30-8965-A29E9DDBDBD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"D2C85D90-5718-43F6-9A21-BC1C7FBB4660"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"FD2F6BBA-9583-4A6E-8BD7-9C9137BDF7AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"50CF5C6D-2519-4E3A-A3F0-37363A78665D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"3E3BC389-6C64-4F81-B81A-969ED7548741"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0:*:*:*:*:*:*:*","matchCriteriaId":"06F6BA05-5FD1-47CD-85B7-C6757399FC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta0:*:*:*:*:*:*:*","matchCriteriaId":"EA566E25-C5BC-489E-84FD-EB00D1C088FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"9BC6C9BC-6029-4EAA-B956-5C1DFC330690"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"5C3B4489-5E0C-4425-845F-713F3FDE14A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"AFB71D04-20DE-4E4C-982D-45E915678EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"7874ADFF-597A-44F7-BA75-99BFA7A2FE03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"96F80B58-AA5B-4225-ABED-B9B28F989DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1FEE16F2-DF33-454E-BF2A-919EDC3C39EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FA838C52-6DA7-469F-ADCC-2A40375E97C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"C414AAB2-881F-4B3B-BAD2-8A790E4ACD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"1BF5E53D-AC18-4F79-8372-57210AC95B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"0FEBF83B-494B-4206-8F86-883F0C107D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"F8589A46-A370-4F3D-AD4B-6979CB253611"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"50FD41A8-FA49-40D4-BF68-2B82A8B1D01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:5.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"27555BCB-6CD2-45B6-9F30-3918D31D582A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"3B9F21B7-3B5F-46AA-9BCC-27C4A8EC10EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"2116A457-4B84-48D3-95E9-36F0713FE660"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"E9A5E7E4-277A-4D28-BC2B-C7413501A886"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"40F0F162-9ED2-413F-AA62-D66BA8781B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta5:*:*:*:*:*:*:*","matchCriteriaId":"E0C2055E-DE93-46EF-A17A-B81E287A5464"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.0-beta6:*:*:*:*:*:*:*","matchCriteriaId":"2AC8A0D6-73D9-4635-BB25-7F9C550074A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3EA1E3-49D5-4F34-9A4E-64919876A325"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1-1:*:*:*:*:*:*:*","matchCriteriaId":"3641571E-5135-48B9-9BE0-9A4B80A6FD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DC3A0E2-9DB0-456E-B19B-8C25B970DC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"783AA635-7F88-4DEB-806F-E63C50A2F509"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.2:*:*:*:*:*:*:*","matchCriteriaId":"930832D2-A7A3-477D-94F0-10879C951E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.3:*:*:*:*:*:*:*","matchCriteriaId":"33D074D5-35C6-4250-8483-5B2C2D9CDC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.4:*:*:*:*:*:*:*","matchCriteriaId":"4DA94879-0671-43F8-A0D8-433A659B0FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.5:*:*:*:*:*:*:*","matchCriteriaId":"5D0A31AF-E2CD-46ED-B238-C39589A4C791"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.6:*:*:*:*:*:*:*","matchCriteriaId":"4482C777-21D6-4E63-841B-7AD866956C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_haug:webform:6.x-2.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"A0DFF727-D2ED-4784-84A1-B73DF5093015"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/604920","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604922","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://drupal.org/node/604942","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58946","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36708","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/2923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53797","source":"cve@mitre.org"},{"url":"http://drupal.org/node/604920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://drupal.org/node/604942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://osvdb.org/58946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4534","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.750","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en el módulo FAQ Ask v5.x y v6.x anterior a v6.x-2.0, un módulo para Drupal, permite a atacantes remotos redireccionar a los usuarios a sitios Web de su elección y realizar ataques de phishing a través de vectores no especificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:*:*:*:*:*:*:*:*","versionEndIncluding":"6.x-2.x-dev","matchCriteriaId":"D4719739-DCA6-4A4D-91CF-6D0D0C601980"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"14D27875-89D8-4F12-AA31-29D404763028"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"FAD77496-8EE5-4B9F-B147-503D46EC642E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta2:*:*:*:*:*:*:*","matchCriteriaId":"463B9767-B11A-4FAC-867E-3736E5B967C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta3:*:*:*:*:*:*:*","matchCriteriaId":"94ED8BDE-BC94-41CE-8683-B30C1F74027F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.0-beta4:*:*:*:*:*:*:*","matchCriteriaId":"0CACE287-7668-42C9-A10D-2F04ACCA9FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"A897842E-5998-4806-ACF6-58DCC439EE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C097F6F-B744-47E1-A881-5F1DE6DB2B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"851CEE68-475C-463E-B1BE-4D8A7CAF25BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:5.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"25F7A94D-0768-4937-9078-62CA3A66DFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"5F5A0570-F10C-4A6F-8833-DC28D24E781E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.0-beta1:*:*:*:*:*:*:*","matchCriteriaId":"9322407B-D9A8-4953-9B59-D2AA98950EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"F60BA041-722A-4096-9FF8-91B7890B5446"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"7EB44100-3D21-454A-BB16-6AC108684CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"5EBE80C0-883C-4B81-A4FD-4351A5D58410"},{"vulnerable":true,"criteria":"cpe:2.3:a:nanwich:faq_ask:6.x-2.0-alpha1:*:*:*:*:*:*:*","matchCriteriaId":"AA9CDA05-6857-4AF8-8D79-EDD41E585753"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*","matchCriteriaId":"799CA80B-F3FA-4183-A791-2071A7DA1E54"}]}]}],"references":[{"url":"http://drupal.org/node/617444","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36877","source":"cve@mitre.org"},{"url":"http://drupal.org/node/617444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4535","sourceIdentifier":"cve@mitre.org","published":"2009-12-31T19:30:00.780","lastModified":"2025-04-09T00:30:58.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI."},{"lang":"es","value":"Mongoose v2.8.0 y anteriores permite a atacantes remotos obtener el código fuente de una página web añadiendo un carácter / (barra) a la URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valenok:mongoose:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.0","matchCriteriaId":"5E658C44-776E-41BF-B6C4-8134A665CB87"}]}]}],"references":[{"url":"http://freetexthost.com/0lcsrgt3vw","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://pocoftheday.blogspot.com/2009/10/mongoose-web-server-v280-remote-source_22.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freetexthost.com/0lcsrgt3vw","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://pocoftheday.blogspot.com/2009/10/mongoose-web-server-v280-remote-source_22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/36934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}